last executing test programs: 15m33.314639773s ago: executing program 32 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 14m55.8707939s ago: executing program 3 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r0}, 0x38) 14m55.46401821s ago: executing program 3 (id=283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x20d, 0x80, 0x32}, 0x10) 14m55.201689401s ago: executing program 3 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14m53.761958032s ago: executing program 3 (id=288): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x13, 0x1, 0x100, &(0x7f0000000280)="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"}) 14m50.637381098s ago: executing program 3 (id=293): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161401"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 14m50.519133673s ago: executing program 3 (id=295): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3f536f190ad79c6471e4f87256d139e2b201001e79e7be1b31af4a1d1681cc2314cdf8898a9c55c1a40d4ef5093fbad8ae30086cbc60cbd40cf6b025fddc8931e520cf27", @ANYRESOCT=r4, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=r1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x1c) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x14b0, 0x3f0, 0x1340, 0xffffffff, 0x1340, 0x10f8, 0x141c, 0x141c, 0xffffffff, 0x141c, 0x141c, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x1}, 0x0, 0x10c4, 0x10f8, 0x48, {}, [@common=@ttl={{0x24}, {0x3, 0xd}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x134, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xcc, 0x114, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x7}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x150c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a00000505000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x19, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 14m35.151509201s ago: executing program 33 (id=295): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3f536f190ad79c6471e4f87256d139e2b201001e79e7be1b31af4a1d1681cc2314cdf8898a9c55c1a40d4ef5093fbad8ae30086cbc60cbd40cf6b025fddc8931e520cf27", @ANYRESOCT=r4, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=r1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x1c) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x14b0, 0x3f0, 0x1340, 0xffffffff, 0x1340, 0x10f8, 0x141c, 0x141c, 0xffffffff, 0x141c, 0x141c, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x1}, 0x0, 0x10c4, 0x10f8, 0x48, {}, [@common=@ttl={{0x24}, {0x3, 0xd}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x134, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xcc, 0x114, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x7}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x150c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a00000505000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x19, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 14m6.710838969s ago: executing program 1 (id=367): mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) recvmsg$can_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/88, 0x58}, {&(0x7f0000001180)=""/114, 0x72}, {&(0x7f0000001200)=""/7, 0x7}], 0x7, &(0x7f0000001280)=""/246, 0xf6}, 0x40008000) ioctl$UI_DEV_CREATE(r2, 0x5501) 14m6.019075278s ago: executing program 1 (id=373): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 14m4.626003673s ago: executing program 1 (id=374): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x2fe}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x92, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x200, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400eaff, 0x8, 0xfffffffb, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140040002300090425bd7000ffd3df250200"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) 14m1.27509805s ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'veth0_to_team\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x16) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x8001}}, './file0\x00'}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0xa3f, @mcast1, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f}], 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r8}}], 0x1c, 0x2404e004}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x3f, @in6={0xa, 0x4e20, 0x400, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffff6}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000068000100fdfc000000000000020000000400000008000500", @ANYRES32=0x0, @ANYBLOB="38e539fd8cbc2ff52049f63dfb61b908bacc749d0c64"], 0x20}}, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x80, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000030000000000000bd67aa6da387863525fe30a3303000000030000000000000b04000000070000000000001010000000002e5f61412e0000"], &(0x7f0000000180)=""/17, 0x44, 0x11, 0x1, 0x400, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13m57.306360251s ago: executing program 1 (id=394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = dup3(r2, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 13m56.008728176s ago: executing program 1 (id=396): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x8000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) 13m40.722904357s ago: executing program 34 (id=396): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x8000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0) 12m20.408788488s ago: executing program 2 (id=542): socket$inet(0x2, 0x3, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 12m16.992762087s ago: executing program 2 (id=546): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) setreuid(0x0, 0xee00) ioctl$ECCGETSTATS(0xffffffffffffffff, 0x80104d12, 0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x407f0b00}]) 12m16.653062762s ago: executing program 2 (id=547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) unshare(0x10800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) mq_notify(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0xf, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r3 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) writev(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f00000000c0)='.\x00', 0xd5b203, 0x0) lseek(r5, 0xfffffffffffffffd, 0x1) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 12m15.550251836s ago: executing program 2 (id=548): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 12m15.240425544s ago: executing program 2 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = dup3(r2, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 12m14.841053488s ago: executing program 2 (id=550): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44004) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000002}) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 11m59.627709664s ago: executing program 35 (id=550): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44004) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000002}) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 8m42.744151064s ago: executing program 4 (id=787): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 8m42.481338341s ago: executing program 4 (id=788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 8m42.211466057s ago: executing program 4 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000007000010000000000000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 8m42.107078333s ago: executing program 4 (id=790): gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 8m40.525571366s ago: executing program 4 (id=791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = dup3(r2, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 8m40.116862477s ago: executing program 4 (id=792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="52144afa7f7028188ceea96ffad967cbe8b2d0ed1b80e2a1f1d529a627c496383d8fe4d3c9bc8a40cf6e8f50a109d504943ebbff2fa9e789527296e90adf349c5bfa99aeb445b325b0e54f42d048b544e00e1bcc42d8743253b15fc5801538b0b7d0c0b36bdb91f9ed64ebba161402734111d1661e8306a8ae4a474331e7cdaf26dd5b2b17d915d3084a6634a957aeb2f6198e1e31", 0x95}, {&(0x7f0000000240)="8bd65cc11e9813661404ffc82c88c1d4e35d3aa79a84c4a34685c9fb7e37e31856ac98df559ee282879e", 0x2a}, {&(0x7f0000000280)="6c86d7d2b5187229ae60c9c13c07cec68af575e677dfc5e2142c80b718b02ac4d028d40ae5aabe910d1222baf517fdf0e5517f651a060188d834a93fe0e6b01ea0a098056b31bbeb94764af07c3e7f30ff2dd3bd9de6948101261f7096762cf22f440e21101b30edf09e74813b5cff55c37ff8a05e274f54877b2f99dbd7f32fdcbc292ce4d3dea74768d9ae61bc7c8efe2acd5b480ce05bf5f368d91b71363950da1683e2e789d3362cbc6ef8f6654d14b6a8fca812ae2e3f534a62f44b", 0xbe}, {&(0x7f0000000340)="9a27c69632de324935ea0156b67726b3bc7170e191df5581af349cebb6355e8839aeef3b99a95c3674010aa027472cb87632d9512a765ee0d8775ba3b91594d031f7bf33c84d455ee0112a4eea389981dc9af0bde287ed43ed2ae37f304bce9b9c407b25ff9da3b42c79fd38ab6b162d0a494ac09c804a0833f93850565de36f94ec33f27256ff71de55b378e85efd1289d88df9bf017a8e32dc3bc8416d6a106773b0327047bdfdfda8", 0xaa}, {&(0x7f0000000400)="a205e14a6623f6ddc83f6b269f3a999d96cf8e9d90c30168fa03025ca30911b614fe5bc32986410776ee82ddbaedf85b3cedb717b7bc05b807b9c3c1db1aa9098db71cf1cbebad890f4d696f6a4c53cbbf21d85585178bf8b3b70344e8891ef47bbff434ec9a5c803dbd66e590e49a046bbcd9d86d57c02361270ac69043b8b7f80ed2bb8d604f001abf94e72cd2cb549322beb16397c50c418b605319892c0ad8989b79df410676f935120d07ef86790211af55e4e457f18bde9bf5e343719e6162de", 0xc3}, {&(0x7f0000000500)="d8e71e36b61b417efd01d7f4d701eea7856736050fac7a", 0x17}, {&(0x7f0000000540)="d495c688ea98ccd1c8f5e1f465f3db0aa6cb83e95b8ea66be8afda57f319439707f760854deb90f8525be97eb5c0d4e188722eb5544bceb56ed5528ee09551968d7b200d02abc902f1d337", 0x4b}, {&(0x7f00000005c0)="c1d5b59ff3c895b7fcf20b64cdcd362c778c3b1a8ad455a39a3908e0e2317291d5fcbdfc2a12dc06dd76ffecdef0a5a8532182a0d0f5e43eda4d3b3333ddc4601123577c1d60d16d3a2784254093f1a117936ae7a734b563a07f561b739facb5eef148e9e83e6f48d8d350eb515524c830a2a8d867ad0baa733a80dfabb60dd443178233c33f7674e4a9436bfc0e5da6fd9fb5ce20c5c57636470d8ed092cef9a7fcea9c8db562b1814355aa", 0xac}, {&(0x7f00000006c0)}], 0x9}}], 0x1, 0x4) 8m23.587348411s ago: executing program 36 (id=792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="52144afa7f7028188ceea96ffad967cbe8b2d0ed1b80e2a1f1d529a627c496383d8fe4d3c9bc8a40cf6e8f50a109d504943ebbff2fa9e789527296e90adf349c5bfa99aeb445b325b0e54f42d048b544e00e1bcc42d8743253b15fc5801538b0b7d0c0b36bdb91f9ed64ebba161402734111d1661e8306a8ae4a474331e7cdaf26dd5b2b17d915d3084a6634a957aeb2f6198e1e31", 0x95}, {&(0x7f0000000240)="8bd65cc11e9813661404ffc82c88c1d4e35d3aa79a84c4a34685c9fb7e37e31856ac98df559ee282879e", 0x2a}, {&(0x7f0000000280)="6c86d7d2b5187229ae60c9c13c07cec68af575e677dfc5e2142c80b718b02ac4d028d40ae5aabe910d1222baf517fdf0e5517f651a060188d834a93fe0e6b01ea0a098056b31bbeb94764af07c3e7f30ff2dd3bd9de6948101261f7096762cf22f440e21101b30edf09e74813b5cff55c37ff8a05e274f54877b2f99dbd7f32fdcbc292ce4d3dea74768d9ae61bc7c8efe2acd5b480ce05bf5f368d91b71363950da1683e2e789d3362cbc6ef8f6654d14b6a8fca812ae2e3f534a62f44b", 0xbe}, {&(0x7f0000000340)="9a27c69632de324935ea0156b67726b3bc7170e191df5581af349cebb6355e8839aeef3b99a95c3674010aa027472cb87632d9512a765ee0d8775ba3b91594d031f7bf33c84d455ee0112a4eea389981dc9af0bde287ed43ed2ae37f304bce9b9c407b25ff9da3b42c79fd38ab6b162d0a494ac09c804a0833f93850565de36f94ec33f27256ff71de55b378e85efd1289d88df9bf017a8e32dc3bc8416d6a106773b0327047bdfdfda8", 0xaa}, {&(0x7f0000000400)="a205e14a6623f6ddc83f6b269f3a999d96cf8e9d90c30168fa03025ca30911b614fe5bc32986410776ee82ddbaedf85b3cedb717b7bc05b807b9c3c1db1aa9098db71cf1cbebad890f4d696f6a4c53cbbf21d85585178bf8b3b70344e8891ef47bbff434ec9a5c803dbd66e590e49a046bbcd9d86d57c02361270ac69043b8b7f80ed2bb8d604f001abf94e72cd2cb549322beb16397c50c418b605319892c0ad8989b79df410676f935120d07ef86790211af55e4e457f18bde9bf5e343719e6162de", 0xc3}, {&(0x7f0000000500)="d8e71e36b61b417efd01d7f4d701eea7856736050fac7a", 0x17}, {&(0x7f0000000540)="d495c688ea98ccd1c8f5e1f465f3db0aa6cb83e95b8ea66be8afda57f319439707f760854deb90f8525be97eb5c0d4e188722eb5544bceb56ed5528ee09551968d7b200d02abc902f1d337", 0x4b}, {&(0x7f00000005c0)="c1d5b59ff3c895b7fcf20b64cdcd362c778c3b1a8ad455a39a3908e0e2317291d5fcbdfc2a12dc06dd76ffecdef0a5a8532182a0d0f5e43eda4d3b3333ddc4601123577c1d60d16d3a2784254093f1a117936ae7a734b563a07f561b739facb5eef148e9e83e6f48d8d350eb515524c830a2a8d867ad0baa733a80dfabb60dd443178233c33f7674e4a9436bfc0e5da6fd9fb5ce20c5c57636470d8ed092cef9a7fcea9c8db562b1814355aa", 0xac}, {&(0x7f00000006c0)}], 0x9}}], 0x1, 0x4) 7m58.72885994s ago: executing program 8 (id=794): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r0, 0x0, 0x0) 7m58.474651064s ago: executing program 8 (id=795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 7m58.171612269s ago: executing program 8 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000007000010000000000000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 7m57.926316889s ago: executing program 8 (id=797): gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 7m56.115594066s ago: executing program 8 (id=798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = dup3(r2, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 7m55.892875974s ago: executing program 8 (id=799): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f00001d1040)={0x1, &(0x7f00001d0e80)=[{0x2000000, 0x0, 0x0, 0x0, 0x7}]}) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d05, 0x0, 0x4000000000000}]}) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{0x0}], 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x3a0001a, &(0x7f00000003c0)=ANY=[]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) pread64(r5, &(0x7f0000000080)=""/99, 0xc4, 0xa) 7m40.408400842s ago: executing program 37 (id=799): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f00001d1040)={0x1, &(0x7f00001d0e80)=[{0x2000000, 0x0, 0x0, 0x0, 0x7}]}) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d05, 0x0, 0x4000000000000}]}) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{0x0}], 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x3a0001a, &(0x7f00000003c0)=ANY=[]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) pread64(r5, &(0x7f0000000080)=""/99, 0xc4, 0xa) 22.789088819s ago: executing program 7 (id=1299): io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x2, 0x1007, 0x176}) 22.561549922s ago: executing program 0 (id=1300): socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 22.437161283s ago: executing program 7 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101643, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0xfffffffe, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2d0201, 0x4) 22.321289525s ago: executing program 0 (id=1302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000e00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000100)) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7c1301, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040800000000000000009709ce2d87dfc503000080000007000000000000000000000009020000000000510003ce9e0779d06d3da2e5501249ee3af4e1c05d4396a4fe3039e4efb61af0234ba92c638b159cb6b8feaf174f55ae386db9da10a0373c6b9932c265defafa8a16b0"], 0x0, 0x40, 0x0, 0x1}, 0x28) umount2(&(0x7f0000000000)='./file0\x00', 0x1) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)='\n\x00\x00'}) syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 21.085478963s ago: executing program 7 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 20.720280934s ago: executing program 0 (id=1304): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) read$FUSE(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x2, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x1ff, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x2, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0x7fffffff, 0x0, 0x383, 0x8001, 0x4]}) writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf2", 0x59}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 19.693128528s ago: executing program 7 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x1, 0x80000) 15.075178397s ago: executing program 0 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setrlimit(0x0, &(0x7f0000000080)={0x9a4, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) 10.268797961s ago: executing program 0 (id=1307): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 6.659192872s ago: executing program 7 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x101, 0xb, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 4.160624822s ago: executing program 7 (id=1309): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgget$private(0x0, 0x400) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)) keyctl$get_persistent(0x16, 0x0, r3) 0s ago: executing program 0 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101643, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0xfffffffe, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2d0201, 0x4) kernel console output (not intermixed with test programs): T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.201002][ T4950] RIP: 0033:0x7f36ebf8e707 [ 1107.201020][ T4950] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1107.201035][ T4950] RSP: 002b:00007fff2583e6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1107.201055][ T4950] RAX: ffffffffffffffda RBX: 000000000000006d RCX: 00007f36ebf8e707 [ 1107.201069][ T4950] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1107.201081][ T4950] RBP: 00007f36ec01a560 R08: 0000000000000000 R09: 0000000000000000 [ 1107.201092][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1107.201103][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000052 R15: 00007fff2583e7f0 [ 1107.201131][ T4950] [ 1107.201198][ T4950] socket: no more sockets [ 1107.202758][T12818] 9pnet_virtio: no channels available for device syz [ 1107.233889][ T13] FAULT_INJECTION: forcing a failure. [ 1107.233889][ T13] name failslab, interval 1, probability 1, space 0, times 81 [ 1107.233923][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.233947][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.233960][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.233992][ T13] Call Trace: [ 1107.233999][ T13] [ 1107.234007][ T13] dump_stack_lvl+0xe8/0x150 [ 1107.234041][ T13] should_fail_ex+0x467/0x600 [ 1107.234079][ T13] should_failslab+0xa8/0x100 [ 1107.234105][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.234128][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 1107.234148][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 1107.234176][ T13] __alloc_skb+0x1d7/0x7a0 [ 1107.234202][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.234245][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 1107.234267][ T13] process_scheduled_works+0xa8e/0x14e0 [ 1107.234314][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.234345][ T13] ? assign_work+0x3cf/0x5d0 [ 1107.234372][ T13] worker_thread+0xa47/0xfb0 [ 1107.234423][ T13] kthread+0x388/0x470 [ 1107.234453][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1107.234482][ T13] ? __pfx_kthread+0x10/0x10 [ 1107.234511][ T13] ret_from_fork+0x514/0xb70 [ 1107.234544][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.234573][ T13] ? __switch_to+0xc89/0x1420 [ 1107.234601][ T13] ? __pfx_kthread+0x10/0x10 [ 1107.234631][ T13] ret_from_fork_asm+0x1a/0x30 [ 1107.234667][ T13] [ 1107.235948][ T43] FAULT_INJECTION: forcing a failure. [ 1107.235948][ T43] name failslab, interval 1, probability 1, space 0, times 80 [ 1107.235975][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.235997][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.236011][ T43] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.236039][ T43] Call Trace: [ 1107.236046][ T43] [ 1107.236053][ T43] dump_stack_lvl+0xe8/0x150 [ 1107.236084][ T43] should_fail_ex+0x467/0x600 [ 1107.236119][ T43] should_failslab+0xa8/0x100 [ 1107.236143][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.236165][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.236184][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.236210][ T43] __alloc_skb+0x1d7/0x7a0 [ 1107.236234][ T43] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.236275][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 1107.236298][ T43] process_scheduled_works+0xa8e/0x14e0 [ 1107.236349][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.236379][ T43] ? assign_work+0x3cf/0x5d0 [ 1107.236407][ T43] worker_thread+0xa47/0xfb0 [ 1107.236445][ T43] ? __kthread_parkme+0x71/0x1f0 [ 1107.236488][ T43] kthread+0x388/0x470 [ 1107.236517][ T43] ? __pfx_worker_thread+0x10/0x10 [ 1107.236537][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.236566][ T43] ret_from_fork+0x514/0xb70 [ 1107.236598][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.236627][ T43] ? __switch_to+0xc89/0x1420 [ 1107.236655][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.236685][ T43] ret_from_fork_asm+0x1a/0x30 [ 1107.236721][ T43] [ 1107.292218][ T7248] FAULT_INJECTION: forcing a failure. [ 1107.292218][ T7248] name failslab, interval 1, probability 1, space 0, times 79 [ 1107.292252][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.292276][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.292289][ T7248] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.292322][ T7248] Call Trace: [ 1107.292330][ T7248] [ 1107.292338][ T7248] dump_stack_lvl+0xe8/0x150 [ 1107.292370][ T7248] should_fail_ex+0x467/0x600 [ 1107.292408][ T7248] should_failslab+0xa8/0x100 [ 1107.292433][ T7248] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.292455][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.292483][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.292510][ T7248] __alloc_skb+0x1d7/0x7a0 [ 1107.292535][ T7248] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.292575][ T7248] ? process_scheduled_works+0xa20/0x14e0 [ 1107.292599][ T7248] process_scheduled_works+0xa8e/0x14e0 [ 1107.292652][ T7248] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.292682][ T7248] ? assign_work+0x3cf/0x5d0 [ 1107.292711][ T7248] worker_thread+0xa47/0xfb0 [ 1107.292748][ T7248] ? __kthread_parkme+0x71/0x1f0 [ 1107.292785][ T7248] kthread+0x388/0x470 [ 1107.292813][ T7248] ? __pfx_worker_thread+0x10/0x10 [ 1107.292835][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.292865][ T7248] ret_from_fork+0x514/0xb70 [ 1107.292897][ T7248] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.292927][ T7248] ? __switch_to+0xc89/0x1420 [ 1107.292956][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.292985][ T7248] ret_from_fork_asm+0x1a/0x30 [ 1107.293019][ T7248] [ 1107.298875][ T157] FAULT_INJECTION: forcing a failure. [ 1107.298875][ T157] name failslab, interval 1, probability 1, space 0, times 78 [ 1107.298907][ T157] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.298927][ T157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.298938][ T157] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.298982][ T157] Call Trace: [ 1107.298989][ T157] [ 1107.298998][ T157] dump_stack_lvl+0xe8/0x150 [ 1107.299029][ T157] should_fail_ex+0x467/0x600 [ 1107.299064][ T157] should_failslab+0xa8/0x100 [ 1107.299090][ T157] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.299112][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1107.299132][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1107.299159][ T157] __alloc_skb+0x1d7/0x7a0 [ 1107.299184][ T157] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.299224][ T157] ? process_scheduled_works+0xa20/0x14e0 [ 1107.299249][ T157] process_scheduled_works+0xa8e/0x14e0 [ 1107.299301][ T157] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.299331][ T157] ? assign_work+0x3cf/0x5d0 [ 1107.299359][ T157] worker_thread+0xa47/0xfb0 [ 1107.299412][ T157] kthread+0x388/0x470 [ 1107.299440][ T157] ? __pfx_worker_thread+0x10/0x10 [ 1107.299462][ T157] ? __pfx_kthread+0x10/0x10 [ 1107.299498][ T157] ret_from_fork+0x514/0xb70 [ 1107.299532][ T157] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.299561][ T157] ? __switch_to+0xc89/0x1420 [ 1107.299590][ T157] ? __pfx_kthread+0x10/0x10 [ 1107.299619][ T157] ret_from_fork_asm+0x1a/0x30 [ 1107.299655][ T157] [ 1107.299938][ T43] FAULT_INJECTION: forcing a failure. [ 1107.299938][ T43] name failslab, interval 1, probability 1, space 0, times 78 [ 1107.299965][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.299986][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.299998][ T43] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.300026][ T43] Call Trace: [ 1107.300033][ T43] [ 1107.300040][ T43] dump_stack_lvl+0xe8/0x150 [ 1107.300070][ T43] should_fail_ex+0x467/0x600 [ 1107.300104][ T43] should_failslab+0xa8/0x100 [ 1107.300128][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.300149][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.300167][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.300194][ T43] __alloc_skb+0x1d7/0x7a0 [ 1107.300219][ T43] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.300260][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 1107.300284][ T43] process_scheduled_works+0xa8e/0x14e0 [ 1107.300336][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.300365][ T43] ? assign_work+0x3cf/0x5d0 [ 1107.300393][ T43] worker_thread+0xa47/0xfb0 [ 1107.300431][ T43] ? __kthread_parkme+0x71/0x1f0 [ 1107.300474][ T43] kthread+0x388/0x470 [ 1107.300502][ T43] ? __pfx_worker_thread+0x10/0x10 [ 1107.300524][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.300554][ T43] ret_from_fork+0x514/0xb70 [ 1107.300585][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.300614][ T43] ? __switch_to+0xc89/0x1420 [ 1107.300642][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.300672][ T43] ret_from_fork_asm+0x1a/0x30 [ 1107.300707][ T43] [ 1107.366815][ T4950] FAULT_INJECTION: forcing a failure. [ 1107.366815][ T4950] name failslab, interval 1, probability 1, space 0, times 72 [ 1107.366899][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.366923][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.366934][ T4950] Call Trace: [ 1107.366942][ T4950] [ 1107.366949][ T4950] dump_stack_lvl+0xe8/0x150 [ 1107.366985][ T4950] should_fail_ex+0x467/0x600 [ 1107.367024][ T4950] should_failslab+0xa8/0x100 [ 1107.367050][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.367072][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.367092][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.367117][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1107.367140][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1107.367162][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.367192][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1107.367234][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1107.367265][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1107.367298][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1107.367335][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1107.367368][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.367409][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.367443][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1107.367475][ T4950] __sys_sendto+0x41e/0x5d0 [ 1107.367494][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1107.367527][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1107.367567][ T4950] ? preempt_schedule_thunk+0x16/0x40 [ 1107.367601][ T4950] __x64_sys_sendto+0xde/0x100 [ 1107.367622][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.367643][ T4950] do_syscall_64+0x174/0x580 [ 1107.367668][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1107.367691][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.367710][ T4950] RIP: 0033:0x7f36ebf13407 [ 1107.367728][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1107.367743][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1107.367763][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1107.367777][ T4950] RDX: 000000000000004c RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1107.367790][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.367801][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1107.367814][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000031 R15: 00007fff2583e7f0 [ 1107.367842][ T4950] [ 1107.503289][ T4950] FAULT_INJECTION: forcing a failure. [ 1107.503289][ T4950] name failslab, interval 1, probability 1, space 0, times 66 [ 1107.503325][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.503348][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.503361][ T4950] Call Trace: [ 1107.503368][ T4950] [ 1107.503375][ T4950] dump_stack_lvl+0xe8/0x150 [ 1107.503411][ T4950] should_fail_ex+0x467/0x600 [ 1107.503447][ T4950] should_failslab+0xa8/0x100 [ 1107.503472][ T4950] kmem_cache_alloc_noprof+0xa4/0x650 [ 1107.503493][ T4950] ? security_file_alloc+0x34/0x310 [ 1107.503522][ T4950] ? security_file_alloc+0x34/0x310 [ 1107.503548][ T4950] security_file_alloc+0x34/0x310 [ 1107.503571][ T4950] init_file+0x96/0x2d0 [ 1107.503592][ T4950] alloc_empty_file+0x74/0x1d0 [ 1107.503613][ T4950] alloc_file_pseudo+0x115/0x1e0 [ 1107.503635][ T4950] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1107.503656][ T4950] ? alloc_fd+0x654/0x6d0 [ 1107.503678][ T4950] sock_alloc_file+0xb8/0x2f0 [ 1107.503774][ T4950] ? __sys_socket+0x12b/0x1b0 [ 1107.503795][ T4950] __sys_socket+0x13f/0x1b0 [ 1107.503814][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.503836][ T4950] __x64_sys_socket+0x7a/0x90 [ 1107.503856][ T4950] do_syscall_64+0x174/0x580 [ 1107.503882][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1107.503906][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.503926][ T4950] RIP: 0033:0x7f36ebf8e707 [ 1107.503945][ T4950] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1107.503961][ T4950] RSP: 002b:00007fff2583e6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1107.503982][ T4950] RAX: ffffffffffffffda RBX: 0000000000000073 RCX: 00007f36ebf8e707 [ 1107.503996][ T4950] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1107.504008][ T4950] RBP: 00007f36ec01a560 R08: 0000000000000000 R09: 0000000000000000 [ 1107.504020][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1107.504032][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000058 R15: 00007fff2583e7f0 [ 1107.504062][ T4950] [ 1107.518286][ T5853] FAULT_INJECTION: forcing a failure. [ 1107.518286][ T5853] name failslab, interval 1, probability 1, space 0, times 65 [ 1107.519227][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.519253][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.519266][ T5853] Workqueue: netns cleanup_net [ 1107.519294][ T5853] Call Trace: [ 1107.519301][ T5853] [ 1107.519309][ T5853] dump_stack_lvl+0xe8/0x150 [ 1107.519345][ T5853] should_fail_ex+0x467/0x600 [ 1107.519381][ T5853] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1107.519539][ T5853] should_failslab+0xa8/0x100 [ 1107.519564][ T5853] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1107.519590][ T5853] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1107.519612][ T5853] ? alloc_inode+0x6a/0x1b0 [ 1107.519629][ T5853] ? alloc_inode+0x6a/0x1b0 [ 1107.519651][ T5853] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1107.519678][ T5853] alloc_inode+0x6a/0x1b0 [ 1107.519698][ T5853] new_inode+0x1f/0x170 [ 1107.519723][ T5853] __debugfs_create_file+0xb8/0x400 [ 1107.519758][ T5853] debugfs_create_file_unsafe+0x3a/0x50 [ 1107.519789][ T5853] nsim_bpf_init+0x1ab/0x270 [ 1107.519847][ T5853] nsim_create+0xba5/0x1160 [ 1107.519902][ T5853] __nsim_dev_port_add+0x7f8/0xcd0 [ 1107.519923][ T5853] ? do_raw_spin_unlock+0xf5/0x210 [ 1107.519994][ T5853] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 1107.520024][ T5853] ? __mod_timer+0xb8f/0xf10 [ 1107.520083][ T5853] ? queue_delayed_work_on+0x171/0x1e0 [ 1107.520147][ T5853] nsim_dev_port_add_all+0x37/0xf0 [ 1107.520172][ T5853] nsim_dev_reload_up+0x4dd/0x880 [ 1107.520202][ T5853] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1107.520256][ T5853] ? __pfx_devlink_params_driverinit_load_new+0x10/0x10 [ 1107.520337][ T5853] devlink_reload+0x4bb/0x890 [ 1107.520421][ T5853] ? __pfx_devlink_reload+0x10/0x10 [ 1107.520462][ T5853] devlink_pernet_pre_exit+0x1ff/0x420 [ 1107.520505][ T5853] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1107.520532][ T5853] ? iput+0xb84/0xf00 [ 1107.520563][ T5853] ops_undo_list+0x17d/0x8d0 [ 1107.520591][ T5853] ? __pfx_ops_undo_list+0x10/0x10 [ 1107.520608][ T5853] ? rt_spin_unlock+0x157/0x200 [ 1107.520642][ T5853] ? idr_destroy+0x21b/0x2a0 [ 1107.520663][ T5853] ? rt_spin_unlock+0x163/0x200 [ 1107.520694][ T5853] cleanup_net+0x575/0x810 [ 1107.520717][ T5853] ? __pfx_cleanup_net+0x10/0x10 [ 1107.520744][ T5853] ? rcu_is_watching+0x15/0xb0 [ 1107.520771][ T5853] ? process_scheduled_works+0xa20/0x14e0 [ 1107.520794][ T5853] process_scheduled_works+0xa8e/0x14e0 [ 1107.520849][ T5853] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.520880][ T5853] ? assign_work+0x3cf/0x5d0 [ 1107.520908][ T5853] worker_thread+0xa47/0xfb0 [ 1107.520948][ T5853] ? __kthread_parkme+0x71/0x1f0 [ 1107.520985][ T5853] kthread+0x388/0x470 [ 1107.521012][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 1107.521034][ T5853] ? __pfx_kthread+0x10/0x10 [ 1107.521064][ T5853] ret_from_fork+0x514/0xb70 [ 1107.521097][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.521126][ T5853] ? __switch_to+0xc89/0x1420 [ 1107.521155][ T5853] ? __pfx_kthread+0x10/0x10 [ 1107.521185][ T5853] ret_from_fork_asm+0x1a/0x30 [ 1107.521218][ T5853] [ 1107.521883][T12826] FAULT_INJECTION: forcing a failure. [ 1107.521883][T12826] name failslab, interval 1, probability 1, space 0, times 65 [ 1107.521968][T12826] CPU: 0 UID: 0 PID: 12826 Comm: cat Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.521989][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.522000][T12826] Call Trace: [ 1107.522007][T12826] [ 1107.522015][T12826] dump_stack_lvl+0xe8/0x150 [ 1107.522048][T12826] should_fail_ex+0x467/0x600 [ 1107.522086][T12826] should_failslab+0xa8/0x100 [ 1107.522110][T12826] kmem_cache_alloc_noprof+0xa4/0x650 [ 1107.522130][T12826] ? vm_area_alloc+0x24/0x140 [ 1107.522152][T12826] ? vm_area_alloc+0x24/0x140 [ 1107.522180][T12826] vm_area_alloc+0x24/0x140 [ 1107.522204][T12826] mmap_region+0x1263/0x2310 [ 1107.522238][T12826] ? is_bpf_text_address+0x292/0x2b0 [ 1107.522325][T12826] ? is_bpf_text_address+0x26/0x2b0 [ 1107.522353][T12826] ? __pfx_mmap_region+0x10/0x10 [ 1107.522378][T12826] ? unwind_get_return_address+0x4d/0x90 [ 1107.522438][T12826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.522540][T12826] ? arch_stack_walk+0xfb/0x150 [ 1107.522614][T12826] ? mas_prev_slot+0xb79/0xc00 [ 1107.522714][T12826] ? cap_mmap_addr+0xaf/0x100 [ 1107.522736][T12826] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1107.522751][T12826] ? security_mmap_addr+0x71/0x240 [ 1107.522775][T12826] ? shmem_mapping+0xd/0x50 [ 1107.522801][T12826] ? memfd_check_seals_mmap+0xcb/0x210 [ 1107.522825][T12826] do_mmap+0xc1e/0x10b0 [ 1107.522862][T12826] ? __pfx_do_mmap+0x10/0x10 [ 1107.522890][T12826] ? rwbase_write_lock+0x550/0x720 [ 1107.522926][T12826] vm_mmap_pgoff+0x275/0x4e0 [ 1107.522961][T12826] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1107.522994][T12826] ? __fget_files+0x2a/0x420 [ 1107.523013][T12826] ? __fget_files+0x3a8/0x420 [ 1107.523032][T12826] ? __fget_files+0x2a/0x420 [ 1107.523055][T12826] ksys_mmap_pgoff+0x4a6/0x720 [ 1107.523074][T12826] ? __x64_sys_mmap+0x7f/0x140 [ 1107.523093][T12826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.523114][T12826] do_syscall_64+0x174/0x580 [ 1107.523136][T12826] ? trace_irq_disable+0x3b/0x140 [ 1107.523154][T12826] ? clear_bhb_loop+0x40/0x90 [ 1107.523177][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.523196][T12826] RIP: 0033:0x7f4d58181242 [ 1107.523214][T12826] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 1107.523230][T12826] RSP: 002b:00007ffd75ba5958 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1107.523250][T12826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d58181242 [ 1107.523263][T12826] RDX: 0000000000000001 RSI: 00000000000c1918 RDI: 0000000000000000 [ 1107.523274][T12826] RBP: 0000000000000802 R08: 0000000000000003 R09: 0000000000000000 [ 1107.523285][T12826] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 1107.523297][T12826] R13: 00007f4d581550c0 R14: 00007ffd75ba5d60 R15: 00000fffaeb74b2e [ 1107.523327][T12826] [ 1107.545440][ T5853] debugfs: out of free dentries, can not create file 'bpf_xdpoffload_accept' [ 1107.616309][T12797] FAULT_INJECTION: forcing a failure. [ 1107.616309][T12797] name failslab, interval 1, probability 1, space 0, times 61 [ 1107.616354][T12797] CPU: 0 UID: 0 PID: 12797 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.616379][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.616391][T12797] Call Trace: [ 1107.616399][T12797] [ 1107.616406][T12797] dump_stack_lvl+0xe8/0x150 [ 1107.616442][T12797] should_fail_ex+0x467/0x600 [ 1107.616480][T12797] should_failslab+0xa8/0x100 [ 1107.616505][T12797] kmem_cache_alloc_noprof+0xa4/0x650 [ 1107.616525][T12797] ? vm_area_dup+0x28/0x670 [ 1107.616546][T12797] ? vm_area_dup+0x28/0x670 [ 1107.616575][T12797] vm_area_dup+0x28/0x670 [ 1107.616596][T12797] ? dup_mmap+0x6c3/0x1d40 [ 1107.616619][T12797] dup_mmap+0x8a8/0x1d40 [ 1107.616657][T12797] ? __pfx_dup_mmap+0x10/0x10 [ 1107.616676][T12797] ? rt_spin_lock+0x1e0/0x400 [ 1107.616718][T12797] ? copy_mm+0x10f/0x480 [ 1107.616743][T12797] ? copy_mm+0x10f/0x480 [ 1107.616780][T12797] copy_mm+0x11a/0x480 [ 1107.616805][T12797] ? copy_process+0xd3c/0x4390 [ 1107.616827][T12797] copy_process+0x1e46/0x4390 [ 1107.616859][T12797] ? copy_process+0xd3c/0x4390 [ 1107.616900][T12797] ? __pfx_copy_process+0x10/0x10 [ 1107.616924][T12797] ? do_raw_spin_lock+0x12b/0x2f0 [ 1107.616961][T12797] kernel_clone+0x2d2/0x8d0 [ 1107.616988][T12797] ? __pfx_kernel_clone+0x10/0x10 [ 1107.617033][T12797] __x64_sys_clone+0x1b6/0x230 [ 1107.617060][T12797] ? __pfx___x64_sys_clone+0x10/0x10 [ 1107.617101][T12797] ? rcu_is_watching+0x15/0xb0 [ 1107.617135][T12797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.617155][T12797] do_syscall_64+0x174/0x580 [ 1107.617179][T12797] ? clear_bhb_loop+0x40/0x90 [ 1107.617202][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.617221][T12797] RIP: 0033:0x7f1a13d08636 [ 1107.617239][T12797] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1107.617254][T12797] RSP: 002b:00007ffee11dc610 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1107.617275][T12797] RAX: ffffffffffffffda RBX: 00007ffee11dc618 RCX: 00007f1a13d08636 [ 1107.617289][T12797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1107.617300][T12797] RBP: 0000558f58e5ee60 R08: 0000000000000000 R09: 0000000000000030 [ 1107.617331][T12797] R10: 00007f1a13b6ef50 R11: 0000000000000246 R12: 0000558f58e62948 [ 1107.617350][T12797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.617378][T12797] [ 1107.650571][ T4950] FAULT_INJECTION: forcing a failure. [ 1107.650571][ T4950] name failslab, interval 1, probability 1, space 0, times 60 [ 1107.650608][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.650629][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.650642][ T4950] Call Trace: [ 1107.650649][ T4950] [ 1107.650657][ T4950] dump_stack_lvl+0xe8/0x150 [ 1107.650695][ T4950] should_fail_ex+0x467/0x600 [ 1107.650730][ T4950] should_failslab+0xa8/0x100 [ 1107.650755][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.650777][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.650808][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.650834][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1107.650857][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1107.650878][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.650908][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1107.650951][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1107.650977][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.651001][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1107.651034][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1107.651072][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1107.651097][ T4950] ? trace_hrtimer_start+0x82/0x200 [ 1107.651127][ T4950] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 1107.651155][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.651195][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.651218][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1107.651248][ T4950] __sys_sendto+0x41e/0x5d0 [ 1107.651274][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1107.651316][ T4950] ? preempt_schedule_thunk+0x16/0x40 [ 1107.651346][ T4950] __x64_sys_sendto+0xde/0x100 [ 1107.651375][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.651396][ T4950] do_syscall_64+0x174/0x580 [ 1107.651422][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1107.651445][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.651463][ T4950] RIP: 0033:0x7f36ebf13407 [ 1107.651481][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1107.651499][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1107.651519][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1107.651533][ T4950] RDX: 000000000000004b RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1107.651545][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.651558][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1107.651574][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000030 R15: 00007fff2583e7f0 [ 1107.651603][ T4950] [ 1107.665944][ T7248] FAULT_INJECTION: forcing a failure. [ 1107.665944][ T7248] name failslab, interval 1, probability 1, space 0, times 59 [ 1107.665977][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.665999][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.666011][ T7248] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.666046][ T7248] Call Trace: [ 1107.666053][ T7248] [ 1107.666062][ T7248] dump_stack_lvl+0xe8/0x150 [ 1107.666095][ T7248] should_fail_ex+0x467/0x600 [ 1107.666132][ T7248] should_failslab+0xa8/0x100 [ 1107.666158][ T7248] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.666180][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.666200][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.666227][ T7248] __alloc_skb+0x1d7/0x7a0 [ 1107.666251][ T7248] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.666292][ T7248] ? process_scheduled_works+0xa20/0x14e0 [ 1107.666317][ T7248] process_scheduled_works+0xa8e/0x14e0 [ 1107.666376][ T7248] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.666402][ T7248] ? assign_work+0x3cf/0x5d0 [ 1107.666427][ T7248] worker_thread+0xa47/0xfb0 [ 1107.666465][ T7248] ? __kthread_parkme+0x71/0x1f0 [ 1107.666501][ T7248] kthread+0x388/0x470 [ 1107.666530][ T7248] ? __pfx_worker_thread+0x10/0x10 [ 1107.666552][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.666582][ T7248] ret_from_fork+0x514/0xb70 [ 1107.666615][ T7248] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.666644][ T7248] ? __switch_to+0xc89/0x1420 [ 1107.666673][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.666702][ T7248] ret_from_fork_asm+0x1a/0x30 [ 1107.666739][ T7248] [ 1107.667019][ T7248] FAULT_INJECTION: forcing a failure. [ 1107.667019][ T7248] name failslab, interval 1, probability 1, space 0, times 58 [ 1107.667044][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.667065][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.667079][ T7248] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.667105][ T7248] Call Trace: [ 1107.667112][ T7248] [ 1107.667119][ T7248] dump_stack_lvl+0xe8/0x150 [ 1107.667149][ T7248] should_fail_ex+0x467/0x600 [ 1107.667182][ T7248] should_failslab+0xa8/0x100 [ 1107.667206][ T7248] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.667227][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.667246][ T7248] ? __alloc_skb+0x1d7/0x7a0 [ 1107.667273][ T7248] __alloc_skb+0x1d7/0x7a0 [ 1107.667297][ T7248] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.667338][ T7248] ? process_scheduled_works+0xa20/0x14e0 [ 1107.667367][ T7248] process_scheduled_works+0xa8e/0x14e0 [ 1107.667420][ T7248] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.667450][ T7248] ? assign_work+0x3cf/0x5d0 [ 1107.667478][ T7248] worker_thread+0xa47/0xfb0 [ 1107.667516][ T7248] ? __kthread_parkme+0x71/0x1f0 [ 1107.667552][ T7248] kthread+0x388/0x470 [ 1107.667580][ T7248] ? __pfx_worker_thread+0x10/0x10 [ 1107.667602][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.667631][ T7248] ret_from_fork+0x514/0xb70 [ 1107.667664][ T7248] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.667693][ T7248] ? __switch_to+0xc89/0x1420 [ 1107.667721][ T7248] ? __pfx_kthread+0x10/0x10 [ 1107.667751][ T7248] ret_from_fork_asm+0x1a/0x30 [ 1107.667787][ T7248] [ 1107.701872][ T4950] FAULT_INJECTION: forcing a failure. [ 1107.701872][ T4950] name failslab, interval 1, probability 1, space 0, times 57 [ 1107.701905][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.701928][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.701939][ T4950] Call Trace: [ 1107.701946][ T4950] [ 1107.701954][ T4950] dump_stack_lvl+0xe8/0x150 [ 1107.701993][ T4950] should_fail_ex+0x467/0x600 [ 1107.702029][ T4950] should_failslab+0xa8/0x100 [ 1107.702054][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.702075][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.702094][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.702120][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1107.702143][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1107.702186][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.702217][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1107.702260][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1107.702284][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.702308][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1107.702342][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1107.702380][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1107.702403][ T4950] ? trace_hrtimer_start+0x82/0x200 [ 1107.702434][ T4950] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 1107.702468][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.702508][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.702533][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1107.702565][ T4950] __sys_sendto+0x41e/0x5d0 [ 1107.702591][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1107.702632][ T4950] ? preempt_schedule_thunk+0x16/0x40 [ 1107.702665][ T4950] __x64_sys_sendto+0xde/0x100 [ 1107.702686][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.702706][ T4950] do_syscall_64+0x174/0x580 [ 1107.702731][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1107.702753][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.702772][ T4950] RIP: 0033:0x7f36ebf13407 [ 1107.702790][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1107.702806][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1107.702826][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1107.702840][ T4950] RDX: 000000000000004d RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1107.702852][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.702864][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1107.702877][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000032 R15: 00007fff2583e7f0 [ 1107.702906][ T4950] [ 1107.801644][ T9953] FAULT_INJECTION: forcing a failure. [ 1107.801644][ T9953] name failslab, interval 1, probability 1, space 0, times 52 [ 1107.801737][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.801760][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.801771][ T9953] Call Trace: [ 1107.801780][ T9953] [ 1107.801788][ T9953] dump_stack_lvl+0xe8/0x150 [ 1107.801820][ T9953] should_fail_ex+0x467/0x600 [ 1107.801858][ T9953] should_failslab+0xa8/0x100 [ 1107.801883][ T9953] __kmalloc_noprof+0xfe/0x780 [ 1107.801905][ T9953] ? tomoyo_encode+0x2ad/0x570 [ 1107.802013][ T9953] ? tomoyo_encode+0x2ad/0x570 [ 1107.802043][ T9953] tomoyo_encode+0x2ad/0x570 [ 1107.802079][ T9953] tomoyo_realpath_from_path+0x5fa/0x640 [ 1107.802116][ T9953] tomoyo_path_perm+0x283/0x560 [ 1107.802136][ T9953] ? tomoyo_path_perm+0x251/0x560 [ 1107.802156][ T9953] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1107.802221][ T9953] security_inode_getattr+0x12b/0x310 [ 1107.802243][ T9953] vfs_getattr+0x23/0x70 [ 1107.802310][ T9953] vfs_statx_path+0x2b/0x230 [ 1107.802336][ T9953] ? vfs_statx+0x107/0x200 [ 1107.802367][ T9953] vfs_statx+0x12e/0x200 [ 1107.802396][ T9953] ? __pfx_vfs_statx+0x10/0x10 [ 1107.802422][ T9953] ? strncpy_from_user+0x150/0x2c0 [ 1107.802497][ T9953] ? do_getname+0x151/0x250 [ 1107.802518][ T9953] vfs_fstatat+0x11b/0x170 [ 1107.802549][ T9953] __x64_sys_newfstatat+0x151/0x200 [ 1107.802572][ T9953] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1107.802608][ T9953] ? __pfx___x64_sys_umount+0x10/0x10 [ 1107.802646][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.802667][ T9953] do_syscall_64+0x174/0x580 [ 1107.802694][ T9953] ? clear_bhb_loop+0x40/0x90 [ 1107.802716][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.802735][ T9953] RIP: 0033:0x7f6c80e1c4da [ 1107.802753][ T9953] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 1107.802769][ T9953] RSP: 002b:00007ffe4053f298 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1107.802789][ T9953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c80e1c4da [ 1107.802803][ T9953] RDX: 00007ffe4053f2c0 RSI: 00007ffe4053f350 RDI: 00000000ffffff9c [ 1107.802816][ T9953] RBP: 00007ffe4053f350 R08: 00007ffe40540350 R09: 00000000ffffffff [ 1107.802826][ T9953] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe405403e0 [ 1107.802836][ T9953] R13: 00007f6c80eb330a R14: 000000000010e2cc R15: 00007ffe40540420 [ 1107.802860][ T9953] [ 1107.809022][ T9953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1107.884121][ T4950] FAULT_INJECTION: forcing a failure. [ 1107.884121][ T4950] name failslab, interval 1, probability 1, space 0, times 51 [ 1107.884157][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.884180][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.884192][ T4950] Call Trace: [ 1107.884200][ T4950] [ 1107.884207][ T4950] dump_stack_lvl+0xe8/0x150 [ 1107.884244][ T4950] should_fail_ex+0x467/0x600 [ 1107.884279][ T4950] should_failslab+0xa8/0x100 [ 1107.884306][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.884328][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.884348][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1107.884374][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1107.884397][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1107.884419][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1107.884450][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1107.884492][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1107.884523][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1107.884556][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1107.884595][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1107.884628][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.884670][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1107.884696][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1107.884728][ T4950] __sys_sendto+0x41e/0x5d0 [ 1107.884754][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1107.884788][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1107.884832][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1107.884869][ T4950] __x64_sys_sendto+0xde/0x100 [ 1107.884891][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.884912][ T4950] do_syscall_64+0x174/0x580 [ 1107.884938][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1107.884961][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.884980][ T4950] RIP: 0033:0x7f36ebf13407 [ 1107.884998][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1107.885013][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1107.885033][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1107.885048][ T4950] RDX: 0000000000000051 RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1107.885059][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.885072][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1107.885084][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000036 R15: 00007fff2583e7f0 [ 1107.885112][ T4950] [ 1107.915415][ T43] FAULT_INJECTION: forcing a failure. [ 1107.915415][ T43] name failslab, interval 1, probability 1, space 0, times 50 [ 1107.915452][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1107.915473][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.915486][ T43] Workqueue: events_unbound nsim_dev_trap_report_work [ 1107.915523][ T43] Call Trace: [ 1107.915530][ T43] [ 1107.915538][ T43] dump_stack_lvl+0xe8/0x150 [ 1107.915571][ T43] should_fail_ex+0x467/0x600 [ 1107.915607][ T43] should_failslab+0xa8/0x100 [ 1107.915633][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1107.915655][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.915675][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 1107.915701][ T43] __alloc_skb+0x1d7/0x7a0 [ 1107.915726][ T43] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1107.915768][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 1107.915792][ T43] process_scheduled_works+0xa8e/0x14e0 [ 1107.915845][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.915876][ T43] ? assign_work+0x3cf/0x5d0 [ 1107.915904][ T43] worker_thread+0xa47/0xfb0 [ 1107.915943][ T43] ? __kthread_parkme+0x71/0x1f0 [ 1107.915986][ T43] kthread+0x388/0x470 [ 1107.916014][ T43] ? __pfx_worker_thread+0x10/0x10 [ 1107.916037][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.916067][ T43] ret_from_fork+0x514/0xb70 [ 1107.916099][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.916129][ T43] ? __switch_to+0xc89/0x1420 [ 1107.916158][ T43] ? __pfx_kthread+0x10/0x10 [ 1107.916188][ T43] ret_from_fork_asm+0x1a/0x30 [ 1107.916224][ T43] [ 1108.067508][T12827] FAULT_INJECTION: forcing a failure. [ 1108.067508][T12827] name failslab, interval 1, probability 1, space 0, times 45 [ 1108.067601][T12827] CPU: 0 UID: 0 PID: 12827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.067625][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.067637][T12827] Call Trace: [ 1108.067644][T12827] [ 1108.067653][T12827] dump_stack_lvl+0xe8/0x150 [ 1108.067690][T12827] should_fail_ex+0x467/0x600 [ 1108.067729][T12827] should_failslab+0xa8/0x100 [ 1108.067754][T12827] kmem_cache_alloc_noprof+0xa4/0x650 [ 1108.067775][T12827] ? security_inode_alloc+0x39/0x310 [ 1108.067802][T12827] ? security_inode_alloc+0x39/0x310 [ 1108.067835][T12827] security_inode_alloc+0x39/0x310 [ 1108.067871][T12827] inode_init_always_gfp+0x983/0xd40 [ 1108.067896][T12827] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1108.067919][T12827] alloc_inode+0x82/0x1b0 [ 1108.067939][T12827] new_inode+0x1f/0x170 [ 1108.067962][T12827] shmem_get_inode+0x3b1/0xf80 [ 1108.067992][T12827] ? __pfx_shmem_get_inode+0x10/0x10 [ 1108.068020][T12827] ? generic_permission+0x2bf/0x670 [ 1108.068122][T12827] shmem_symlink+0xa2/0x460 [ 1108.068152][T12827] vfs_symlink+0x18b/0x330 [ 1108.068179][T12827] ? security_path_symlink+0xfd/0x360 [ 1108.068210][T12827] filename_symlinkat+0x1cd/0x420 [ 1108.068244][T12827] ? __pfx_filename_symlinkat+0x10/0x10 [ 1108.068275][T12827] ? do_getname+0x151/0x250 [ 1108.068293][T12827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.068314][T12827] __se_sys_symlinkat+0x4e/0x2b0 [ 1108.068343][T12827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.068363][T12827] do_syscall_64+0x174/0x580 [ 1108.068386][T12827] ? trace_irq_disable+0x3b/0x140 [ 1108.068406][T12827] ? clear_bhb_loop+0x40/0x90 [ 1108.068429][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.068448][T12827] RIP: 0033:0x7f6c80e1cf57 [ 1108.068466][T12827] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.068481][T12827] RSP: 002b:00007ffe40540388 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1108.068502][T12827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c80e1cf57 [ 1108.068516][T12827] RDX: 00007f6c80eb4e7e RSI: 00000000ffffff9c RDI: 00007ffe40540420 [ 1108.068529][T12827] RBP: 00007ffe405403cc R08: 0000000000000001 R09: 00000000ffffffff [ 1108.068541][T12827] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f1 [ 1108.068553][T12827] R13: 00000000000927c0 R14: 000000000010e2cc R15: 00007ffe40540420 [ 1108.068583][T12827] [ 1108.083549][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.083549][ T4950] name failslab, interval 1, probability 1, space 0, times 44 [ 1108.083586][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.083608][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.083621][ T4950] Call Trace: [ 1108.083628][ T4950] [ 1108.083635][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.083672][ T4950] should_fail_ex+0x467/0x600 [ 1108.083704][ T4950] should_failslab+0xa8/0x100 [ 1108.083728][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.083749][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.083768][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.083792][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.083813][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.083833][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1108.083865][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.083907][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.083946][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.083980][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.084018][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.084049][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.084091][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.084115][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.084145][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.084163][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1108.084197][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.084243][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1108.084272][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.084293][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.084311][ T4950] do_syscall_64+0x174/0x580 [ 1108.084337][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.084360][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.084378][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.084397][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.084413][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.084433][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.084447][ T4950] RDX: 000000000000008b RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.084459][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.084471][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.084483][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000070 R15: 00007fff2583e7f0 [ 1108.084513][ T4950] [ 1108.091868][ T9917] FAULT_INJECTION: forcing a failure. [ 1108.091868][ T9917] name failslab, interval 1, probability 1, space 0, times 43 [ 1108.091975][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.091998][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.092008][ T9917] Call Trace: [ 1108.092016][ T9917] [ 1108.092024][ T9917] dump_stack_lvl+0xe8/0x150 [ 1108.092060][ T9917] should_fail_ex+0x467/0x600 [ 1108.092098][ T9917] should_failslab+0xa8/0x100 [ 1108.092124][ T9917] __kmalloc_noprof+0xfe/0x780 [ 1108.092144][ T9917] ? rcu_is_watching+0x15/0xb0 [ 1108.092170][ T9917] ? tomoyo_realpath_from_path+0xef/0x640 [ 1108.092196][ T9917] ? tomoyo_realpath_from_path+0xef/0x640 [ 1108.092228][ T9917] tomoyo_realpath_from_path+0xef/0x640 [ 1108.092266][ T9917] tomoyo_path_perm+0x283/0x560 [ 1108.092287][ T9917] ? tomoyo_path_perm+0x251/0x560 [ 1108.092308][ T9917] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1108.092336][ T9917] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1108.092392][ T9917] ? __pfx_current_check_access_path+0x10/0x10 [ 1108.092414][ T9917] ? __d_lookup+0x66/0x790 [ 1108.092521][ T9917] ? __d_lookup+0x6f3/0x790 [ 1108.092547][ T9917] tomoyo_path_rmdir+0xaa/0xf0 [ 1108.092609][ T9917] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1108.092642][ T9917] ? d_lookup+0xa0/0xc0 [ 1108.092667][ T9917] security_path_rmdir+0x15f/0x330 [ 1108.092697][ T9917] filename_rmdir+0x20d/0x520 [ 1108.092729][ T9917] ? __pfx_filename_rmdir+0x10/0x10 [ 1108.092762][ T9917] ? do_getname+0x151/0x250 [ 1108.092780][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.092801][ T9917] __se_sys_unlinkat+0x71/0x1a0 [ 1108.092874][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.092895][ T9917] do_syscall_64+0x174/0x580 [ 1108.092941][ T9917] ? clear_bhb_loop+0x40/0x90 [ 1108.092967][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.092986][ T9917] RIP: 0033:0x7fdc8841cfb7 [ 1108.093005][ T9917] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.093021][ T9917] RSP: 002b:00007ffea756cce8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 1108.093042][ T9917] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fdc8841cfb7 [ 1108.093056][ T9917] RDX: 0000000000000200 RSI: 00007ffea756de30 RDI: 00000000ffffff9c [ 1108.093068][ T9917] RBP: 00007fdc884b330a R08: 00000000000185d0 R09: 00000000ffffffff [ 1108.093082][ T9917] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffea756de30 [ 1108.093094][ T9917] R13: 00007fdc884b330a R14: 000000000010e413 R15: 00007ffea756de70 [ 1108.093124][ T9917] [ 1108.097360][ T9917] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.119784][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.119784][ T4950] name failslab, interval 1, probability 1, space 0, times 41 [ 1108.119824][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.119845][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.119858][ T4950] Call Trace: [ 1108.119868][ T4950] [ 1108.119876][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.119914][ T4950] should_fail_ex+0x467/0x600 [ 1108.119949][ T4950] should_failslab+0xa8/0x100 [ 1108.119975][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.119996][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.120017][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.120042][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.120066][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.120087][ T4950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.120112][ T4950] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.120134][ T4950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1108.120162][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.120204][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.120235][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.120268][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.120306][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.120338][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.120381][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.120407][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.120438][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.120458][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1108.120498][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.120542][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1108.120573][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.120595][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.120615][ T4950] do_syscall_64+0x174/0x580 [ 1108.120638][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.120661][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.120680][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.120698][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.120714][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.120733][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.120746][ T4950] RDX: 0000000000000053 RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.120758][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.120770][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.120783][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000038 R15: 00007fff2583e7f0 [ 1108.120811][ T4950] [ 1108.385621][ T7246] FAULT_INJECTION: forcing a failure. [ 1108.385621][ T7246] name failslab, interval 1, probability 1, space 0, times 39 [ 1108.385655][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.385677][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.385692][ T7246] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.385728][ T7246] Call Trace: [ 1108.385736][ T7246] [ 1108.385745][ T7246] dump_stack_lvl+0xe8/0x150 [ 1108.385778][ T7246] should_fail_ex+0x467/0x600 [ 1108.385816][ T7246] should_failslab+0xa8/0x100 [ 1108.385842][ T7246] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.385865][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1108.385885][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1108.385912][ T7246] __alloc_skb+0x1d7/0x7a0 [ 1108.385938][ T7246] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.385988][ T7246] ? process_scheduled_works+0xa20/0x14e0 [ 1108.386013][ T7246] process_scheduled_works+0xa8e/0x14e0 [ 1108.386068][ T7246] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.386099][ T7246] ? assign_work+0x3cf/0x5d0 [ 1108.386128][ T7246] worker_thread+0xa47/0xfb0 [ 1108.386183][ T7246] kthread+0x388/0x470 [ 1108.386212][ T7246] ? __pfx_worker_thread+0x10/0x10 [ 1108.386235][ T7246] ? __pfx_kthread+0x10/0x10 [ 1108.386265][ T7246] ret_from_fork+0x514/0xb70 [ 1108.386307][ T7246] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.386340][ T7246] ? __switch_to+0xc89/0x1420 [ 1108.386371][ T7246] ? __pfx_kthread+0x10/0x10 [ 1108.386401][ T7246] ret_from_fork_asm+0x1a/0x30 [ 1108.386439][ T7246] [ 1108.395512][ T5843] FAULT_INJECTION: forcing a failure. [ 1108.395512][ T5843] name failslab, interval 1, probability 1, space 0, times 39 [ 1108.395562][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.395588][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.395601][ T5843] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.395636][ T5843] Call Trace: [ 1108.395644][ T5843] [ 1108.395653][ T5843] dump_stack_lvl+0xe8/0x150 [ 1108.395697][ T5843] should_fail_ex+0x467/0x600 [ 1108.395735][ T5843] should_failslab+0xa8/0x100 [ 1108.395761][ T5843] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.395783][ T5843] ? __alloc_skb+0x1d7/0x7a0 [ 1108.395804][ T5843] ? __alloc_skb+0x1d7/0x7a0 [ 1108.395844][ T5843] __alloc_skb+0x1d7/0x7a0 [ 1108.395875][ T5843] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.395918][ T5843] ? process_scheduled_works+0xa20/0x14e0 [ 1108.395942][ T5843] process_scheduled_works+0xa8e/0x14e0 [ 1108.396027][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.396059][ T5843] ? assign_work+0x3cf/0x5d0 [ 1108.396089][ T5843] worker_thread+0xa47/0xfb0 [ 1108.396136][ T5843] ? __kthread_parkme+0x71/0x1f0 [ 1108.396175][ T5843] kthread+0x388/0x470 [ 1108.396205][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 1108.396228][ T5843] ? __pfx_kthread+0x10/0x10 [ 1108.396259][ T5843] ret_from_fork+0x514/0xb70 [ 1108.396301][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.396330][ T5843] ? __switch_to+0xc89/0x1420 [ 1108.396360][ T5843] ? __pfx_kthread+0x10/0x10 [ 1108.396391][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1108.396429][ T5843] [ 1108.415288][ T4961] FAULT_INJECTION: forcing a failure. [ 1108.415288][ T4961] name failslab, interval 1, probability 1, space 0, times 37 [ 1108.415322][ T4961] CPU: 0 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.415346][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.415356][ T4961] Call Trace: [ 1108.415364][ T4961] [ 1108.415371][ T4961] dump_stack_lvl+0xe8/0x150 [ 1108.415404][ T4961] should_fail_ex+0x467/0x600 [ 1108.415440][ T4961] should_failslab+0xa8/0x100 [ 1108.415478][ T4961] __kmalloc_noprof+0xfe/0x780 [ 1108.415499][ T4961] ? tomoyo_encode+0x2ad/0x570 [ 1108.415524][ T4961] ? tomoyo_encode+0x2ad/0x570 [ 1108.415554][ T4961] tomoyo_encode+0x2ad/0x570 [ 1108.415584][ T4961] tomoyo_realpath_from_path+0x5fa/0x640 [ 1108.415621][ T4961] tomoyo_path_perm+0x283/0x560 [ 1108.415641][ T4961] ? tomoyo_path_perm+0x251/0x560 [ 1108.415662][ T4961] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1108.415680][ T4961] ? __x64_sys_openat+0x138/0x170 [ 1108.415744][ T4961] security_inode_getattr+0x12b/0x310 [ 1108.415766][ T4961] __x64_sys_newfstat+0x133/0x270 [ 1108.415785][ T4961] ? do_sys_openat2+0x14e/0x200 [ 1108.415805][ T4961] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 1108.415852][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.415873][ T4961] do_syscall_64+0x174/0x580 [ 1108.415898][ T4961] ? clear_bhb_loop+0x40/0x90 [ 1108.415921][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.415941][ T4961] RIP: 0033:0x7f66703efad7 [ 1108.415959][ T4961] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 1108.415974][ T4961] RSP: 002b:00007ffe38870ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 1108.415995][ T4961] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f66703efad7 [ 1108.416008][ T4961] RDX: 0000000000090800 RSI: 00007ffe38870ee0 RDI: 000000000000000d [ 1108.416020][ T4961] RBP: 00007ffe38870ee0 R08: 0000000000000000 R09: 0000000000000001 [ 1108.416032][ T4961] R10: 0000000000000000 R11: 0000000000000202 R12: 00005556a87e77b0 [ 1108.416044][ T4961] R13: 00000000000000ff R14: 0000555671deebe0 R15: 00007ffe38871200 [ 1108.416074][ T4961] [ 1108.416230][ T4961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.418036][ T4961] FAULT_INJECTION: forcing a failure. [ 1108.418036][ T4961] name failslab, interval 1, probability 1, space 0, times 36 [ 1108.418065][ T4961] CPU: 0 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.418088][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.418101][ T4961] Call Trace: [ 1108.418108][ T4961] [ 1108.418116][ T4961] dump_stack_lvl+0xe8/0x150 [ 1108.418149][ T4961] should_fail_ex+0x467/0x600 [ 1108.418184][ T4961] should_failslab+0xa8/0x100 [ 1108.418210][ T4961] kmem_cache_alloc_noprof+0xa4/0x650 [ 1108.418228][ T4961] ? vfs_fstatat+0x13d/0x170 [ 1108.418257][ T4961] ? do_getname+0x2e/0x250 [ 1108.418271][ T4961] ? do_getname+0x2e/0x250 [ 1108.418288][ T4961] ? __x64_sys_newfstatat+0x176/0x200 [ 1108.418310][ T4961] do_getname+0x2e/0x250 [ 1108.418326][ T4961] ? getname_flags+0x11/0x20 [ 1108.418355][ T4961] do_sys_openat2+0xcc/0x200 [ 1108.418378][ T4961] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.418410][ T4961] __x64_sys_openat+0x138/0x170 [ 1108.418432][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.418459][ T4961] do_syscall_64+0x174/0x580 [ 1108.418485][ T4961] ? clear_bhb_loop+0x40/0x90 [ 1108.418509][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.418527][ T4961] RIP: 0033:0x7f6670385407 [ 1108.418544][ T4961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.418559][ T4961] RSP: 002b:00007ffe3886ca30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1108.418578][ T4961] RAX: ffffffffffffffda RBX: 00007f6670297880 RCX: 00007f6670385407 [ 1108.418592][ T4961] RDX: 0000000000080000 RSI: 00007ffe3886cbb0 RDI: ffffffffffffff9c [ 1108.418606][ T4961] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1108.418617][ T4961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555671dea7f5 [ 1108.418628][ T4961] R13: 0000555671dea7f5 R14: 0000000000000001 R15: 00007ffe38871200 [ 1108.418656][ T4961] [ 1108.437132][ T4961] FAULT_INJECTION: forcing a failure. [ 1108.437132][ T4961] name failslab, interval 1, probability 1, space 0, times 35 [ 1108.437168][ T4961] CPU: 0 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.437189][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.437202][ T4961] Call Trace: [ 1108.437210][ T4961] [ 1108.437219][ T4961] dump_stack_lvl+0xe8/0x150 [ 1108.437275][ T4961] should_fail_ex+0x467/0x600 [ 1108.437311][ T4961] should_failslab+0xa8/0x100 [ 1108.437336][ T4961] __kmalloc_noprof+0xfe/0x780 [ 1108.437357][ T4961] ? rcu_is_watching+0x15/0xb0 [ 1108.437382][ T4961] ? tomoyo_realpath_from_path+0xef/0x640 [ 1108.437423][ T4961] ? tomoyo_realpath_from_path+0xef/0x640 [ 1108.437455][ T4961] tomoyo_realpath_from_path+0xef/0x640 [ 1108.437492][ T4961] tomoyo_path_perm+0x283/0x560 [ 1108.437513][ T4961] ? tomoyo_path_perm+0x251/0x560 [ 1108.437534][ T4961] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1108.437599][ T4961] security_inode_getattr+0x12b/0x310 [ 1108.437621][ T4961] vfs_getattr+0x23/0x70 [ 1108.437653][ T4961] vfs_statx_path+0x2b/0x230 [ 1108.437673][ T4961] ? vfs_statx+0x107/0x200 [ 1108.437702][ T4961] vfs_statx+0x12e/0x200 [ 1108.437732][ T4961] ? __pfx_vfs_statx+0x10/0x10 [ 1108.437758][ T4961] ? strncpy_from_user+0x150/0x2c0 [ 1108.437790][ T4961] ? do_getname+0x151/0x250 [ 1108.437810][ T4961] vfs_fstatat+0x11b/0x170 [ 1108.437841][ T4961] __x64_sys_newfstatat+0x151/0x200 [ 1108.437863][ T4961] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1108.437910][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.437931][ T4961] do_syscall_64+0x174/0x580 [ 1108.437956][ T4961] ? clear_bhb_loop+0x40/0x90 [ 1108.437980][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.437998][ T4961] RIP: 0033:0x7f66703efb0a [ 1108.438017][ T4961] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1108.438032][ T4961] RSP: 002b:00007ffe38870748 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1108.438052][ T4961] RAX: ffffffffffffffda RBX: 00007ffe38870be0 RCX: 00007f66703efb0a [ 1108.438066][ T4961] RDX: 00007ffe38870750 RSI: 00007ffe38870be0 RDI: 00000000ffffff9c [ 1108.438080][ T4961] RBP: 00005556a87cc910 R08: 0000000000000000 R09: 0000000000000000 [ 1108.438091][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe388707e0 [ 1108.438103][ T4961] R13: 0000555671e05100 R14: 00005556a87f4220 R15: 00007ffe38871200 [ 1108.438133][ T4961] [ 1108.489543][ T4961] FAULT_INJECTION: forcing a failure. [ 1108.489543][ T4961] name failslab, interval 1, probability 1, space 0, times 34 [ 1108.489631][ T4961] CPU: 0 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.489654][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.489666][ T4961] Call Trace: [ 1108.489673][ T4961] [ 1108.489680][ T4961] dump_stack_lvl+0xe8/0x150 [ 1108.489716][ T4961] should_fail_ex+0x467/0x600 [ 1108.489759][ T4961] should_failslab+0xa8/0x100 [ 1108.489785][ T4961] kmem_cache_alloc_noprof+0xa4/0x650 [ 1108.489805][ T4961] ? security_file_alloc+0x34/0x310 [ 1108.489825][ T4961] ? security_file_alloc+0x34/0x310 [ 1108.489851][ T4961] security_file_alloc+0x34/0x310 [ 1108.489873][ T4961] init_file+0x96/0x2d0 [ 1108.489895][ T4961] alloc_empty_file+0x74/0x1d0 [ 1108.489915][ T4961] path_openat+0x8f/0x3850 [ 1108.489944][ T4961] ? kasan_save_track+0x3e/0x80 [ 1108.489993][ T4961] ? __kasan_slab_alloc+0x6c/0x80 [ 1108.490011][ T4961] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1108.490036][ T4961] ? do_getname+0x2e/0x250 [ 1108.490051][ T4961] ? do_sys_openat2+0xcc/0x200 [ 1108.490069][ T4961] ? __x64_sys_openat+0x138/0x170 [ 1108.490087][ T4961] ? do_syscall_64+0x174/0x580 [ 1108.490110][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.490147][ T4961] do_file_open+0x23e/0x4a0 [ 1108.490170][ T4961] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.490195][ T4961] ? __pfx_do_file_open+0x10/0x10 [ 1108.490240][ T4961] ? alloc_fd+0x654/0x6d0 [ 1108.490269][ T4961] do_sys_openat2+0x115/0x200 [ 1108.490291][ T4961] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.490315][ T4961] ? __se_sys_unlink+0xc2/0x140 [ 1108.490340][ T4961] ? kmem_cache_free+0x187/0x6c0 [ 1108.490365][ T4961] __x64_sys_openat+0x138/0x170 [ 1108.490387][ T4961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.490407][ T4961] do_syscall_64+0x174/0x580 [ 1108.490430][ T4961] ? clear_bhb_loop+0x40/0x90 [ 1108.490459][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.490477][ T4961] RIP: 0033:0x7f6670385407 [ 1108.490494][ T4961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.490510][ T4961] RSP: 002b:00007ffe38870ef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1108.490530][ T4961] RAX: ffffffffffffffda RBX: 00007f6670297880 RCX: 00007f6670385407 [ 1108.490542][ T4961] RDX: 0000000000080141 RSI: 0000555671dea02e RDI: ffffffffffffff9c [ 1108.490554][ T4961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.490563][ T4961] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 1108.490573][ T4961] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007ffe38871210 [ 1108.490603][ T4961] [ 1108.499705][ T4961] udevd[4961]: could not touch /run/udev/queue: Cannot allocate memory [ 1108.520198][T12478] FAULT_INJECTION: forcing a failure. [ 1108.520198][T12478] name failslab, interval 1, probability 1, space 0, times 33 [ 1108.520232][T12478] CPU: 0 UID: 0 PID: 12478 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.520254][T12478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.520267][T12478] Call Trace: [ 1108.520274][T12478] [ 1108.520281][T12478] dump_stack_lvl+0xe8/0x150 [ 1108.520317][T12478] should_fail_ex+0x467/0x600 [ 1108.520354][T12478] should_failslab+0xa8/0x100 [ 1108.520379][T12478] __kmalloc_noprof+0xfe/0x780 [ 1108.520401][T12478] ? tomoyo_encode+0x2ad/0x570 [ 1108.520425][T12478] ? tomoyo_encode+0x2ad/0x570 [ 1108.520464][T12478] tomoyo_encode+0x2ad/0x570 [ 1108.520494][T12478] tomoyo_realpath_from_path+0x5fa/0x640 [ 1108.520529][T12478] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1108.520551][T12478] tomoyo_path_number_perm+0x246/0x5f0 [ 1108.520571][T12478] ? __lock_acquire+0x683/0x2ce0 [ 1108.520593][T12478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1108.520617][T12478] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.520642][T12478] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.520705][T12478] ? __pfx_current_check_access_path+0x10/0x10 [ 1108.520723][T12478] ? d_alloc_parallel+0x1543/0x16c0 [ 1108.520758][T12478] tomoyo_path_mknod+0x14a/0x1a0 [ 1108.520787][T12478] ? d_alloc_parallel+0x3cf/0x16c0 [ 1108.520810][T12478] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1108.520851][T12478] security_path_mknod+0x176/0x370 [ 1108.520883][T12478] may_o_create+0x2d/0x370 [ 1108.520908][T12478] ? mode_strip_sgid+0xa1/0x1b0 [ 1108.520935][T12478] path_openat+0xfb5/0x3850 [ 1108.520968][T12478] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1108.521010][T12478] do_file_open+0x23e/0x4a0 [ 1108.521033][T12478] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.521060][T12478] ? __pfx_do_file_open+0x10/0x10 [ 1108.521107][T12478] ? alloc_fd+0x654/0x6d0 [ 1108.521136][T12478] do_sys_openat2+0x115/0x200 [ 1108.521159][T12478] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.521183][T12478] ? rcu_is_watching+0x15/0xb0 [ 1108.521213][T12478] __x64_sys_openat+0x138/0x170 [ 1108.521235][T12478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.521256][T12478] do_syscall_64+0x174/0x580 [ 1108.521280][T12478] ? clear_bhb_loop+0x40/0x90 [ 1108.521303][T12478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.521322][T12478] RIP: 0033:0x7f6670385407 [ 1108.521340][T12478] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.521356][T12478] RSP: 002b:00007ffe38870420 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1108.521376][T12478] RAX: ffffffffffffffda RBX: 00007f6670297880 RCX: 00007f6670385407 [ 1108.521390][T12478] RDX: 0000000000080241 RSI: 00007ffe38870980 RDI: ffffffffffffff9c [ 1108.521403][T12478] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1108.521414][T12478] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000555671deadfc [ 1108.521426][T12478] R13: 0000555671deadfc R14: 0000000000000001 R15: 0000555671e05140 [ 1108.521464][T12478] [ 1108.537241][T12478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.567933][ T157] FAULT_INJECTION: forcing a failure. [ 1108.567933][ T157] name failslab, interval 1, probability 1, space 0, times 30 [ 1108.567969][ T157] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.567990][ T157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.568001][ T157] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.568037][ T157] Call Trace: [ 1108.568044][ T157] [ 1108.568052][ T157] dump_stack_lvl+0xe8/0x150 [ 1108.568085][ T157] should_fail_ex+0x467/0x600 [ 1108.568122][ T157] should_failslab+0xa8/0x100 [ 1108.568147][ T157] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.568170][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.568191][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.568217][ T157] __alloc_skb+0x1d7/0x7a0 [ 1108.568242][ T157] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.568283][ T157] ? process_scheduled_works+0xa20/0x14e0 [ 1108.568307][ T157] process_scheduled_works+0xa8e/0x14e0 [ 1108.568359][ T157] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.568397][ T157] ? assign_work+0x3cf/0x5d0 [ 1108.568425][ T157] worker_thread+0xa47/0xfb0 [ 1108.568477][ T157] kthread+0x388/0x470 [ 1108.568506][ T157] ? __pfx_worker_thread+0x10/0x10 [ 1108.568528][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.568558][ T157] ret_from_fork+0x514/0xb70 [ 1108.568591][ T157] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.568620][ T157] ? __switch_to+0xc89/0x1420 [ 1108.568648][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.568677][ T157] ret_from_fork_asm+0x1a/0x30 [ 1108.568713][ T157] [ 1108.613069][T12831] FAULT_INJECTION: forcing a failure. [ 1108.613069][T12831] name failslab, interval 1, probability 1, space 0, times 29 [ 1108.613104][T12831] CPU: 0 UID: 0 PID: 12831 Comm: syz.0.1304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.613130][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.613143][T12831] Call Trace: [ 1108.613152][T12831] [ 1108.613160][T12831] dump_stack_lvl+0xe8/0x150 [ 1108.613198][T12831] should_fail_ex+0x467/0x600 [ 1108.613235][T12831] should_failslab+0xa8/0x100 [ 1108.613263][T12831] kmem_cache_alloc_noprof+0xa4/0x650 [ 1108.613283][T12831] ? security_inode_alloc+0x39/0x310 [ 1108.613310][T12831] ? security_inode_alloc+0x39/0x310 [ 1108.613345][T12831] security_inode_alloc+0x39/0x310 [ 1108.613377][T12831] inode_init_always_gfp+0x983/0xd40 [ 1108.613402][T12831] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1108.613548][T12831] alloc_inode+0x82/0x1b0 [ 1108.613570][T12831] new_inode+0x1f/0x170 [ 1108.613589][T12831] ? proc_pid_make_inode+0x19/0x130 [ 1108.613619][T12831] proc_pid_make_inode+0x21/0x130 [ 1108.613648][T12831] proc_pident_instantiate+0x6d/0x2a0 [ 1108.613681][T12831] proc_pident_lookup+0x1b7/0x270 [ 1108.613711][T12831] path_openat+0x1129/0x3850 [ 1108.613767][T12831] do_file_open+0x23e/0x4a0 [ 1108.613802][T12831] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.613834][T12831] ? __pfx_do_file_open+0x10/0x10 [ 1108.613870][T12831] ? __pfx_kfree_link+0x10/0x10 [ 1108.613939][T12831] ? alloc_fd+0x654/0x6d0 [ 1108.613972][T12831] do_sys_openat2+0x115/0x200 [ 1108.613998][T12831] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.614021][T12831] ? preempt_schedule_thunk+0x16/0x40 [ 1108.614056][T12831] __x64_sys_openat+0x138/0x170 [ 1108.614079][T12831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.614098][T12831] do_syscall_64+0x174/0x580 [ 1108.614125][T12831] ? clear_bhb_loop+0x40/0x90 [ 1108.614151][T12831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.614172][T12831] RIP: 0033:0x7fdc883de6ce [ 1108.614191][T12831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1108.614209][T12831] RSP: 002b:00007fdc86675ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1108.614231][T12831] RAX: ffffffffffffffda RBX: 00007fdc866766c0 RCX: 00007fdc883de6ce [ 1108.614246][T12831] RDX: 0000000000000002 RSI: 00007fdc86675f90 RDI: ffffffffffffff9c [ 1108.614260][T12831] RBP: 00007fdc884b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 1108.614273][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.614285][T12831] R13: 00007fdc886a6038 R14: 00007fdc886a5fa0 R15: 00007ffea756da78 [ 1108.614317][T12831] [ 1108.635756][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.635756][ T4950] name failslab, interval 1, probability 1, space 0, times 28 [ 1108.636360][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.636383][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.636396][ T4950] Call Trace: [ 1108.636403][ T4950] [ 1108.636411][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.636450][ T4950] should_fail_ex+0x467/0x600 [ 1108.636485][ T4950] should_failslab+0xa8/0x100 [ 1108.636511][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.636533][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.636553][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.636578][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.636602][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.636623][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1108.636653][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.636696][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.636728][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.636761][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.636807][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.636840][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.636882][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.636909][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.636941][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.636960][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1108.636994][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.637026][ T4950] ? irqentry_exit+0x218/0x8f0 [ 1108.637048][ T4950] ? trace_irq_disable+0x3b/0x140 [ 1108.637079][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1108.637109][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.637130][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.637151][ T4950] do_syscall_64+0x174/0x580 [ 1108.637175][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.637199][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.637217][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.637235][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.637269][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.637289][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.637303][ T4950] RDX: 000000000000004d RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.637316][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.637328][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.637341][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000032 R15: 00007fff2583e7f0 [ 1108.637369][ T4950] [ 1108.656363][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.656363][ T4950] name failslab, interval 1, probability 1, space 0, times 27 [ 1108.656456][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.656479][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.656491][ T4950] Call Trace: [ 1108.656498][ T4950] [ 1108.656506][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.656541][ T4950] should_fail_ex+0x467/0x600 [ 1108.656580][ T4950] should_failslab+0xa8/0x100 [ 1108.656606][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.656627][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.656648][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.656673][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.656695][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.656717][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1108.656747][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.656896][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.656929][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.656962][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.657001][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.657031][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.657074][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.657099][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.657131][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.657150][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1108.657183][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.657234][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.657273][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.657294][ T4950] do_syscall_64+0x174/0x580 [ 1108.657320][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.657343][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.657362][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.657380][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.657396][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.657416][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.657430][ T4950] RDX: 0000000000000053 RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.657443][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.657455][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.657467][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000038 R15: 00007fff2583e7f0 [ 1108.657496][ T4950] [ 1108.680015][ T157] FAULT_INJECTION: forcing a failure. [ 1108.680015][ T157] name failslab, interval 1, probability 1, space 0, times 25 [ 1108.680111][ T157] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.680133][ T157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.680146][ T157] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.680179][ T157] Call Trace: [ 1108.680186][ T157] [ 1108.680194][ T157] dump_stack_lvl+0xe8/0x150 [ 1108.680231][ T157] should_fail_ex+0x467/0x600 [ 1108.680266][ T157] should_failslab+0xa8/0x100 [ 1108.680290][ T157] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.680312][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.680332][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.680359][ T157] __alloc_skb+0x1d7/0x7a0 [ 1108.680383][ T157] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.680423][ T157] ? process_scheduled_works+0xa20/0x14e0 [ 1108.680448][ T157] process_scheduled_works+0xa8e/0x14e0 [ 1108.680502][ T157] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.680531][ T157] ? assign_work+0x3cf/0x5d0 [ 1108.680560][ T157] worker_thread+0xa47/0xfb0 [ 1108.680613][ T157] kthread+0x388/0x470 [ 1108.680642][ T157] ? __pfx_worker_thread+0x10/0x10 [ 1108.680664][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.680694][ T157] ret_from_fork+0x514/0xb70 [ 1108.680728][ T157] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.680757][ T157] ? __switch_to+0xc89/0x1420 [ 1108.680793][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.680823][ T157] ret_from_fork_asm+0x1a/0x30 [ 1108.680859][ T157] [ 1108.718233][T12832] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1108.719305][T12832] cramfs: wrong magic [ 1108.733917][ T157] FAULT_INJECTION: forcing a failure. [ 1108.733917][ T157] name failslab, interval 1, probability 1, space 0, times 22 [ 1108.733950][ T157] CPU: 0 UID: 0 PID: 157 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.733983][ T157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.733995][ T157] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.734030][ T157] Call Trace: [ 1108.734038][ T157] [ 1108.734046][ T157] dump_stack_lvl+0xe8/0x150 [ 1108.734080][ T157] should_fail_ex+0x467/0x600 [ 1108.734117][ T157] should_failslab+0xa8/0x100 [ 1108.734142][ T157] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.734165][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.734186][ T157] ? __alloc_skb+0x1d7/0x7a0 [ 1108.734213][ T157] __alloc_skb+0x1d7/0x7a0 [ 1108.734237][ T157] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.734277][ T157] ? process_scheduled_works+0xa20/0x14e0 [ 1108.734301][ T157] process_scheduled_works+0xa8e/0x14e0 [ 1108.734352][ T157] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.734383][ T157] ? assign_work+0x3cf/0x5d0 [ 1108.734411][ T157] worker_thread+0xa47/0xfb0 [ 1108.734465][ T157] kthread+0x388/0x470 [ 1108.734494][ T157] ? __pfx_worker_thread+0x10/0x10 [ 1108.734516][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.734545][ T157] ret_from_fork+0x514/0xb70 [ 1108.734579][ T157] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.734608][ T157] ? __switch_to+0xc89/0x1420 [ 1108.734638][ T157] ? __pfx_kthread+0x10/0x10 [ 1108.734668][ T157] ret_from_fork_asm+0x1a/0x30 [ 1108.734704][ T157] [ 1108.785080][ T7246] FAULT_INJECTION: forcing a failure. [ 1108.785080][ T7246] name failslab, interval 1, probability 1, space 0, times 20 [ 1108.785175][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.785197][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.785210][ T7246] Workqueue: events_unbound nsim_dev_trap_report_work [ 1108.785243][ T7246] Call Trace: [ 1108.785251][ T7246] [ 1108.785259][ T7246] dump_stack_lvl+0xe8/0x150 [ 1108.785292][ T7246] should_fail_ex+0x467/0x600 [ 1108.785322][ T7246] should_failslab+0xa8/0x100 [ 1108.785343][ T7246] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.785361][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1108.785378][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1108.785399][ T7246] __alloc_skb+0x1d7/0x7a0 [ 1108.785419][ T7246] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1108.785454][ T7246] ? process_scheduled_works+0xa20/0x14e0 [ 1108.785477][ T7246] process_scheduled_works+0xa8e/0x14e0 [ 1108.785522][ T7246] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.785551][ T7246] ? assign_work+0x3cf/0x5d0 [ 1108.785579][ T7246] worker_thread+0xa47/0xfb0 [ 1108.785633][ T7246] kthread+0x388/0x470 [ 1108.785661][ T7246] ? __pfx_worker_thread+0x10/0x10 [ 1108.785683][ T7246] ? __pfx_kthread+0x10/0x10 [ 1108.785713][ T7246] ret_from_fork+0x514/0xb70 [ 1108.785745][ T7246] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.785782][ T7246] ? __switch_to+0xc89/0x1420 [ 1108.785812][ T7246] ? __pfx_kthread+0x10/0x10 [ 1108.785846][ T7246] ret_from_fork_asm+0x1a/0x30 [ 1108.785882][ T7246] [ 1108.879033][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.879033][ T4950] name failslab, interval 1, probability 1, space 0, times 18 [ 1108.879068][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.879090][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.879102][ T4950] Call Trace: [ 1108.879109][ T4950] [ 1108.879117][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.879156][ T4950] should_fail_ex+0x467/0x600 [ 1108.879191][ T4950] should_failslab+0xa8/0x100 [ 1108.879215][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.879237][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.879256][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.879289][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.879313][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.879346][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.879388][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.879420][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.879452][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.879490][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.879523][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.879565][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.879591][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.879623][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.879642][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1108.879675][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.879720][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1108.879750][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.879771][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.879792][ T4950] do_syscall_64+0x174/0x580 [ 1108.879817][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.879841][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.879860][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.879878][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.879893][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.879913][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.879927][ T4950] RDX: 000000000000004c RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.879939][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.879951][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.879963][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000031 R15: 00007fff2583e7f0 [ 1108.879991][ T4950] [ 1108.910447][ T4950] FAULT_INJECTION: forcing a failure. [ 1108.910447][ T4950] name failslab, interval 1, probability 1, space 0, times 17 [ 1108.910481][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.910503][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1108.910514][ T4950] Call Trace: [ 1108.910522][ T4950] [ 1108.910530][ T4950] dump_stack_lvl+0xe8/0x150 [ 1108.910568][ T4950] should_fail_ex+0x467/0x600 [ 1108.910604][ T4950] should_failslab+0xa8/0x100 [ 1108.910629][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1108.910652][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.910671][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1108.910696][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1108.910719][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1108.910751][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1108.910792][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1108.910824][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1108.910855][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1108.910893][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1108.910925][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.910961][ T4950] ? finish_task_switch+0x412/0xc60 [ 1108.911068][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1108.911101][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1108.911134][ T4950] __sys_sendto+0x41e/0x5d0 [ 1108.911160][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1108.911198][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1108.911223][ T4950] __x64_sys_sendto+0xde/0x100 [ 1108.911243][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.911262][ T4950] do_syscall_64+0x174/0x580 [ 1108.911288][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1108.911310][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.911329][ T4950] RIP: 0033:0x7f36ebf13407 [ 1108.911348][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.911371][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1108.911390][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1108.911403][ T4950] RDX: 000000000000004c RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1108.911416][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.911428][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1108.911440][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000031 R15: 00007fff2583e7f0 [ 1108.911468][ T4950] [ 1109.074953][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.074953][ T4950] name failslab, interval 1, probability 1, space 0, times 13 [ 1109.075218][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.075240][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.075249][ T4950] Call Trace: [ 1109.075256][ T4950] [ 1109.075263][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.075297][ T4950] should_fail_ex+0x467/0x600 [ 1109.075335][ T4950] should_failslab+0xa8/0x100 [ 1109.075362][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1109.075383][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.075404][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.075429][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1109.075453][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1109.075478][ T4950] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1109.075508][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1109.075551][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1109.075583][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1109.075616][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1109.075656][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1109.075689][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.075731][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.075758][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1109.075797][ T4950] __sys_sendto+0x41e/0x5d0 [ 1109.075817][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1109.075850][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1109.075895][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.075925][ T4950] __x64_sys_sendto+0xde/0x100 [ 1109.075947][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.075968][ T4950] do_syscall_64+0x174/0x580 [ 1109.075993][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.076017][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.076035][ T4950] RIP: 0033:0x7f36ebf13407 [ 1109.076053][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1109.076069][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1109.076090][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1109.076104][ T4950] RDX: 000000000000005d RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1109.076116][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.076128][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1109.076140][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000042 R15: 00007fff2583e7f0 [ 1109.076169][ T4950] [ 1109.092911][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.092911][ T4950] name failslab, interval 1, probability 1, space 0, times 12 [ 1109.093336][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.093360][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.093372][ T4950] Call Trace: [ 1109.093380][ T4950] [ 1109.093388][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.093425][ T4950] should_fail_ex+0x467/0x600 [ 1109.093464][ T4950] should_failslab+0xa8/0x100 [ 1109.093489][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1109.093511][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.093531][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.093557][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1109.093582][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1109.093603][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1109.093633][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1109.093675][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1109.093702][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1109.093733][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1109.093780][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1109.093814][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.093859][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.093887][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1109.093920][ T4950] __sys_sendto+0x41e/0x5d0 [ 1109.093948][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1109.093983][ T4950] ? irqentry_exit+0x218/0x8f0 [ 1109.094018][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.094048][ T4950] __x64_sys_sendto+0xde/0x100 [ 1109.094070][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.094092][ T4950] do_syscall_64+0x174/0x580 [ 1109.094117][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.094141][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.094160][ T4950] RIP: 0033:0x7f36ebf13407 [ 1109.094178][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1109.094195][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1109.094216][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1109.094231][ T4950] RDX: 000000000000004b RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1109.094243][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.094255][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1109.094268][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000030 R15: 00007fff2583e7f0 [ 1109.094295][ T4950] [ 1109.096613][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.096613][ T4950] name failslab, interval 1, probability 1, space 0, times 11 [ 1109.096650][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.096672][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.096684][ T4950] Call Trace: [ 1109.096691][ T4950] [ 1109.096699][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.096734][ T4950] should_fail_ex+0x467/0x600 [ 1109.096778][ T4950] should_failslab+0xa8/0x100 [ 1109.096804][ T4950] kmem_cache_alloc_noprof+0xa4/0x650 [ 1109.096824][ T4950] ? security_inode_alloc+0x39/0x310 [ 1109.096851][ T4950] ? security_inode_alloc+0x39/0x310 [ 1109.096884][ T4950] security_inode_alloc+0x39/0x310 [ 1109.096913][ T4950] inode_init_always_gfp+0x983/0xd40 [ 1109.096937][ T4950] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1109.096966][ T4950] alloc_inode+0x82/0x1b0 [ 1109.096986][ T4950] __sock_create+0x12d/0x9d0 [ 1109.097012][ T4950] __sys_socket+0xd6/0x1b0 [ 1109.097031][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.097051][ T4950] __x64_sys_socket+0x7a/0x90 [ 1109.097071][ T4950] do_syscall_64+0x174/0x580 [ 1109.097097][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.097121][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.097138][ T4950] RIP: 0033:0x7f36ebf8e707 [ 1109.097156][ T4950] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1109.097171][ T4950] RSP: 002b:00007fff2583e6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1109.097191][ T4950] RAX: ffffffffffffffda RBX: 000000000000004b RCX: 00007f36ebf8e707 [ 1109.097205][ T4950] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1109.097237][ T4950] RBP: 00007f36ec01a560 R08: 0000000000000000 R09: 0000000000000000 [ 1109.097248][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1109.097259][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000030 R15: 00007fff2583e7f0 [ 1109.097287][ T4950] [ 1109.098362][ T4950] socket: no more sockets [ 1109.106236][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.106236][ T4950] name failslab, interval 1, probability 1, space 0, times 10 [ 1109.106277][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.106300][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.106315][ T4950] Call Trace: [ 1109.106322][ T4950] [ 1109.106330][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.106366][ T4950] should_fail_ex+0x467/0x600 [ 1109.106402][ T4950] should_failslab+0xa8/0x100 [ 1109.106427][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1109.106449][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.106469][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.106494][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1109.106519][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1109.106540][ T4950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.106564][ T4950] ? lockdep_hardirqs_on+0x7a/0x110 [ 1109.106587][ T4950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1109.106610][ T4950] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1109.106642][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1109.106684][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1109.106716][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1109.106749][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1109.106796][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1109.106829][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.106867][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.106893][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1109.106924][ T4950] __sys_sendto+0x41e/0x5d0 [ 1109.106943][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1109.106976][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1109.107008][ T4950] ? __pfx___sys_connect+0x10/0x10 [ 1109.107038][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.107068][ T4950] __x64_sys_sendto+0xde/0x100 [ 1109.107090][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.107111][ T4950] do_syscall_64+0x174/0x580 [ 1109.107136][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.107159][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.107177][ T4950] RIP: 0033:0x7f36ebf13407 [ 1109.107195][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1109.107211][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1109.107232][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1109.107246][ T4950] RDX: 000000000000008b RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1109.107257][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.107268][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1109.107281][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000070 R15: 00007fff2583e7f0 [ 1109.107309][ T4950] [ 1109.118890][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.118890][ T4950] name failslab, interval 1, probability 1, space 0, times 9 [ 1109.119325][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.119351][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.119363][ T4950] Call Trace: [ 1109.119370][ T4950] [ 1109.119379][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.119415][ T4950] should_fail_ex+0x467/0x600 [ 1109.119451][ T4950] should_failslab+0xa8/0x100 [ 1109.119477][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1109.119498][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.119517][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.119544][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1109.119567][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1109.119589][ T4950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.119613][ T4950] ? lockdep_hardirqs_on+0x7a/0x110 [ 1109.119636][ T4950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1109.119659][ T4950] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1109.119692][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1109.119733][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1109.119773][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1109.119807][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1109.119846][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1109.119879][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.119920][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.119948][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1109.119980][ T4950] __sys_sendto+0x41e/0x5d0 [ 1109.120000][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1109.120033][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1109.120065][ T4950] ? __pfx___sys_connect+0x10/0x10 [ 1109.120096][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.120126][ T4950] __x64_sys_sendto+0xde/0x100 [ 1109.120147][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.120168][ T4950] do_syscall_64+0x174/0x580 [ 1109.120192][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.120214][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.120233][ T4950] RIP: 0033:0x7f36ebf13407 [ 1109.120250][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1109.120266][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1109.120287][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1109.120301][ T4950] RDX: 000000000000005e RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1109.120313][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.120325][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1109.120337][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000043 R15: 00007fff2583e7f0 [ 1109.120366][ T4950] [ 1109.148660][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.148660][ T4950] name failslab, interval 1, probability 1, space 0, times 8 [ 1109.148695][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.148717][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.148728][ T4950] Call Trace: [ 1109.148738][ T4950] [ 1109.148753][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.148790][ T4950] should_fail_ex+0x467/0x600 [ 1109.148826][ T4950] should_failslab+0xa8/0x100 [ 1109.148852][ T4950] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1109.148874][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.148894][ T4950] ? __alloc_skb+0x1d7/0x7a0 [ 1109.148919][ T4950] __alloc_skb+0x1d7/0x7a0 [ 1109.148943][ T4950] alloc_skb_with_frags+0xc6/0x760 [ 1109.148964][ T4950] ? __lock_acquire+0x683/0x2ce0 [ 1109.148995][ T4950] sock_alloc_send_pskb+0x884/0x9a0 [ 1109.149038][ T4950] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1109.149069][ T4950] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 1109.149102][ T4950] unix_dgram_sendmsg+0x4da/0x17b0 [ 1109.149139][ T4950] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1109.149171][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.149213][ T4950] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1109.149241][ T4950] sock_sendmsg_nosec+0x13a/0x180 [ 1109.149271][ T4950] __sys_sendto+0x41e/0x5d0 [ 1109.149290][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1109.149324][ T4950] ? __pfx___sys_sendto+0x10/0x10 [ 1109.149368][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.149397][ T4950] __x64_sys_sendto+0xde/0x100 [ 1109.149419][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.149439][ T4950] do_syscall_64+0x174/0x580 [ 1109.149465][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.149533][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.149554][ T4950] RIP: 0033:0x7f36ebf13407 [ 1109.149572][ T4950] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1109.149587][ T4950] RSP: 002b:00007fff2583e6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1109.149609][ T4950] RAX: ffffffffffffffda RBX: 00007f36ebdc3c80 RCX: 00007f36ebf13407 [ 1109.149623][ T4950] RDX: 000000000000004b RSI: 00007fff2583e7f0 RDI: 0000000000000003 [ 1109.149636][ T4950] RBP: 00007fff2583ec20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.149648][ T4950] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2583ec38 [ 1109.149661][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000030 R15: 00007fff2583e7f0 [ 1109.149689][ T4950] [ 1109.208265][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.208265][ T4950] name failslab, interval 1, probability 1, space 0, times 4 [ 1109.208379][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.208401][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.208414][ T4950] Call Trace: [ 1109.208422][ T4950] [ 1109.208429][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.208464][ T4950] should_fail_ex+0x467/0x600 [ 1109.208503][ T4950] should_failslab+0xa8/0x100 [ 1109.208528][ T4950] kmem_cache_alloc_noprof+0xa4/0x650 [ 1109.208548][ T4950] ? security_file_alloc+0x34/0x310 [ 1109.208568][ T4950] ? security_file_alloc+0x34/0x310 [ 1109.208594][ T4950] security_file_alloc+0x34/0x310 [ 1109.208617][ T4950] init_file+0x96/0x2d0 [ 1109.208639][ T4950] alloc_empty_file+0x74/0x1d0 [ 1109.208659][ T4950] alloc_file_pseudo+0x115/0x1e0 [ 1109.208681][ T4950] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1109.208703][ T4950] ? alloc_fd+0x654/0x6d0 [ 1109.208726][ T4950] sock_alloc_file+0xb8/0x2f0 [ 1109.208758][ T4950] ? __sys_socket+0x12b/0x1b0 [ 1109.208777][ T4950] __sys_socket+0x13f/0x1b0 [ 1109.208795][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.208817][ T4950] __x64_sys_socket+0x7a/0x90 [ 1109.208836][ T4950] do_syscall_64+0x174/0x580 [ 1109.208863][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.208886][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.208904][ T4950] RIP: 0033:0x7f36ebf8e707 [ 1109.208922][ T4950] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 1109.208939][ T4950] RSP: 002b:00007fff2583e6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1109.208959][ T4950] RAX: ffffffffffffffda RBX: 000000000000004c RCX: 00007f36ebf8e707 [ 1109.208973][ T4950] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1109.208984][ T4950] RBP: 00007f36ec01a560 R08: 0000000000000000 R09: 0000000000000000 [ 1109.208996][ T4950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1109.209007][ T4950] R13: 00007fff2583e7f0 R14: 0000000000000031 R15: 00007fff2583e7f0 [ 1109.209036][ T4950] [ 1109.211447][T12833] FAULT_INJECTION: forcing a failure. [ 1109.211447][T12833] name failslab, interval 1, probability 1, space 0, times 3 [ 1109.211477][T12833] CPU: 0 UID: 0 PID: 12833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.211502][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.211513][T12833] Call Trace: [ 1109.211520][T12833] [ 1109.211528][T12833] dump_stack_lvl+0xe8/0x150 [ 1109.211562][T12833] should_fail_ex+0x467/0x600 [ 1109.211599][T12833] should_failslab+0xa8/0x100 [ 1109.211624][T12833] __kmalloc_noprof+0xfe/0x780 [ 1109.211646][T12833] ? tomoyo_encode+0x2ad/0x570 [ 1109.211671][T12833] ? tomoyo_encode+0x2ad/0x570 [ 1109.211695][T12833] ? tomoyo_realpath_from_path+0x60f/0x640 [ 1109.211725][T12833] tomoyo_encode+0x2ad/0x570 [ 1109.211763][T12833] tomoyo_path_perm+0x318/0x560 [ 1109.211783][T12833] ? tomoyo_path_perm+0x251/0x560 [ 1109.211804][T12833] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1109.211854][T12833] ? __pfx_current_check_access_path+0x10/0x10 [ 1109.211874][T12833] ? d_splice_alias+0x12/0x30 [ 1109.211901][T12833] ? lookup_one_qstr_excl+0x1d4/0x360 [ 1109.211930][T12833] tomoyo_path_symlink+0xab/0xf0 [ 1109.211958][T12833] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 1109.211989][T12833] ? __pfx_filename_create+0x10/0x10 [ 1109.212020][T12833] security_path_symlink+0x16f/0x360 [ 1109.212052][T12833] filename_symlinkat+0x134/0x420 [ 1109.212087][T12833] ? __pfx_filename_symlinkat+0x10/0x10 [ 1109.212119][T12833] ? do_getname+0x151/0x250 [ 1109.212136][T12833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.212157][T12833] __se_sys_symlinkat+0x4e/0x2b0 [ 1109.212185][T12833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.212205][T12833] do_syscall_64+0x174/0x580 [ 1109.212229][T12833] ? trace_irq_disable+0x3b/0x140 [ 1109.212248][T12833] ? clear_bhb_loop+0x40/0x90 [ 1109.212270][T12833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.212289][T12833] RIP: 0033:0x7f6c80e1cf57 [ 1109.212306][T12833] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.212322][T12833] RSP: 002b:00007ffe40540388 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1109.212342][T12833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c80e1cf57 [ 1109.212356][T12833] RDX: 00007f6c80eb4e7e RSI: 00000000ffffff9c RDI: 00007ffe40540420 [ 1109.212369][T12833] RBP: 00007ffe405403cc R08: 0000000000000001 R09: 00000000ffffffff [ 1109.212381][T12833] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f2 [ 1109.212393][T12833] R13: 00000000000927c0 R14: 000000000010e89f R15: 00007ffe40540420 [ 1109.212423][T12833] [ 1109.265931][ T4950] FAULT_INJECTION: forcing a failure. [ 1109.265931][ T4950] name failslab, interval 1, probability 1, space 0, times 2 [ 1109.265966][ T4950] CPU: 0 UID: 0 PID: 4950 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.265987][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.266000][ T4950] Call Trace: [ 1109.266007][ T4950] [ 1109.266014][ T4950] dump_stack_lvl+0xe8/0x150 [ 1109.266053][ T4950] should_fail_ex+0x467/0x600 [ 1109.266088][ T4950] should_failslab+0xa8/0x100 [ 1109.266113][ T4950] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1109.266135][ T4950] ? syslog_print+0x103/0x610 [ 1109.266243][ T4950] ? syslog_print+0x103/0x610 [ 1109.266272][ T4950] syslog_print+0x103/0x610 [ 1109.266297][ T4950] ? __pfx_syslog_print+0x10/0x10 [ 1109.266324][ T4950] ? smack_privileged_cred+0xb6/0x380 [ 1109.266355][ T4950] ? smack_privileged_cred+0xb6/0x380 [ 1109.266389][ T4950] ? smack_privileged_cred+0xb6/0x380 [ 1109.266417][ T4950] ? smack_privileged_cred+0xb6/0x380 [ 1109.266445][ T4950] ? smack_privileged_cred+0xb6/0x380 [ 1109.266474][ T4950] ? smack_privileged_cred+0x33c/0x380 [ 1109.266505][ T4950] ? smack_syslog+0x95/0xf0 [ 1109.266568][ T4950] do_syslog+0x583/0x7d0 [ 1109.266593][ T4950] ? __pfx_do_syslog+0x10/0x10 [ 1109.266633][ T4950] ? rcu_is_watching+0x15/0xb0 [ 1109.266663][ T4950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.266684][ T4950] __x64_sys_syslog+0x7c/0x90 [ 1109.266708][ T4950] do_syscall_64+0x174/0x580 [ 1109.266734][ T4950] ? clear_bhb_loop+0x40/0x90 [ 1109.266765][ T4950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.266784][ T4950] RIP: 0033:0x7f36ebf8da37 [ 1109.266801][ T4950] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 1109.266817][ T4950] RSP: 002b:00007fff2583ed08 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 1109.266837][ T4950] RAX: ffffffffffffffda RBX: 00007f36ec12d490 RCX: 00007f36ebf8da37 [ 1109.266852][ T4950] RDX: 00000000000003ff RSI: 00007f36ec12d490 RDI: 0000000000000002 [ 1109.266864][ T4950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.266875][ T4950] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f36ec12d490 [ 1109.266887][ T4950] R13: 00007f36ec10adfe R14: 00007f36ec12d87f R15: 00007f36ec12d87f [ 1109.266914][ T4950] [ 1116.167016][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.167069][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.541109][T12514] team0: Port device team_slave_0 added [ 1118.707165][T12517] team0: Port device team_slave_1 added [ 1122.420905][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1122.487642][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1122.516474][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1122.528837][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1122.530991][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1124.809937][T11078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1124.901523][T11078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1124.922526][T11078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1124.963639][T11078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1124.993097][T11078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1125.037113][T12865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1125.046683][T12865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1125.127786][T12865] Bluetooth: hci1: command tx timeout [ 1125.179820][T10009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1125.244406][T10009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1125.286163][T10009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1127.222256][ T5613] Bluetooth: hci1: command tx timeout [ 1127.432619][ T5613] Bluetooth: Unexpected start frame (len 10) [ 1127.448121][ T37] audit: type=1800 audit(1785278335.203:53): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1307" name="UDC" dev="configfs" ino=46117 res=0 errno=0 [ 1128.163973][ T5613] Bluetooth: hci7: command tx timeout [ 1128.337259][ T5613] Bluetooth: hci6: command tx timeout [ 1128.778028][ T5853] bridge_slave_1: left allmulticast mode [ 1128.778125][ T5853] bridge_slave_1: left promiscuous mode [ 1128.778512][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.008760][ T5853] bridge_slave_0: left allmulticast mode [ 1129.008797][ T5853] bridge_slave_0: left promiscuous mode [ 1129.009065][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.201152][T12902] FAULT_INJECTION: forcing a failure. [ 1129.201152][T12902] name failslab, interval 1, probability 1, space 0, times 100 [ 1129.201192][T12902] CPU: 0 UID: 0 PID: 12902 Comm: cmp Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.201214][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.201226][T12902] Call Trace: [ 1129.201234][T12902] [ 1129.201243][T12902] dump_stack_lvl+0xe8/0x150 [ 1129.201281][T12902] should_fail_ex+0x467/0x600 [ 1129.201320][T12902] should_failslab+0xa8/0x100 [ 1129.201349][T12902] kmem_cache_alloc_noprof+0xa4/0x650 [ 1129.201370][T12902] ? __anon_vma_prepare+0x10e/0x4e0 [ 1129.201389][T12902] ? __anon_vma_prepare+0x10e/0x4e0 [ 1129.201415][T12902] __anon_vma_prepare+0x10e/0x4e0 [ 1129.201441][T12902] do_pte_missing+0x1e0d/0x28f0 [ 1129.201475][T12902] ? handle_mm_fault+0xe8/0x13f0 [ 1129.201500][T12902] handle_mm_fault+0xd28/0x13f0 [ 1129.201529][T12902] ? handle_mm_fault+0xe8/0x13f0 [ 1129.201551][T12902] ? __pfx_handle_mm_fault+0x10/0x10 [ 1129.201570][T12902] ? lock_vma_under_rcu+0x45a/0x500 [ 1129.201621][T12902] do_user_addr_fault+0xa4d/0x1340 [ 1129.201727][T12902] ? trace_page_fault_user+0x84/0x1e0 [ 1129.201750][T12902] exc_page_fault+0x6a/0xc0 [ 1129.201777][T12902] asm_exc_page_fault+0x26/0x30 [ 1129.201796][T12902] RIP: 0033:0x7fb19809eff2 [ 1129.201815][T12902] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 1129.201831][T12902] RSP: 002b:00007fff13cca648 EFLAGS: 00010202 [ 1129.201849][T12902] RAX: 00007fb197dbe020 RBX: 0000000000000004 RCX: 00007fb197dbe050 [ 1129.201862][T12902] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 00007fb197dbe020 [ 1129.201874][T12902] RBP: 00007fff13cca9d0 R08: 00007fb197dbe020 R09: 0000000000000003 [ 1129.201887][T12902] R10: 0000000000000812 R11: 00007fff13ccaab8 R12: 00007fff13cca6f8 [ 1129.201900][T12902] R13: 00007fb198073050 R14: 00007fff13ccaa70 R15: 00007fb197dbe050 [ 1129.201940][T12902] [ 1129.202385][T12902] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1129.264632][ [ 1129.264632][ T7246] FAULT_INJECTION: forcing a failure. [ 1129.264632][ T7246] name failslab, interval 1, probability 1, space 0, times 98 [ 1129.264670][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.264693][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.264706][ T7246] Workqueue: events_unbound nsim_dev_trap_report_work [ 1129.264740][ T7246] Call Trace: [ 1129.264748][ T7246] [ 1129.264757][ T7246] dump_stack_lvl+0xe8/0x150 [ 1129.264789][ T7246] should_fail_ex+0x467/0x600 [ 1129.264827][ T7246] should_failslab+0xa8/0x100 [ 1129.265078][ T7246] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1129.265102][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1129.265125][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1129.265150][ T7246] __alloc_skb+0x1d7/0x7a0 [ 1129.265176][ T7246] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1129.265218][ T7246] ? process_scheduled_works+0xa20/0x14e0 [ 1129.265243][ T7246] process_scheduled_works+0xa8e/0x14e0 [ 1129.265294][ T7246] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.265325][ T7246] ? assign_work+0x3cf/0x5d0 [ 1129.265356][ T7246] worker_thread+0xa47/0xfb0 [ 1129.265398][ T7246] kthread+0x388/0x470 [ 1129.265422][ T7246] ? __pfx_worker_thread+0x10/0x10 [ 1129.265440][ T7246] ? __pfx_kthread+0x10/0x10 [ 1129.265468][ T7246] ret_from_fork+0x514/0xb70 [ 1129.265504][ T7246] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.265533][ T7246] ? __switch_to+0xc89/0x1420 [ 1129.265561][ T7246] ? __pfx_kthread+0x10/0x10 [ 1129.265591][ T7246] ret_from_fork_asm+0x1a/0x30 [ 1129.265628][ T7246] [ 1129.283937][ T5613] Bluetooth: hci1: command tx timeout [ 1129.297215][ T12] FAULT_INJECTION: forcing a failure. [ 1129.297215][ T12] name failslab, interval 1, probability 1, space 0, times 97 [ 1129.297254][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.297275][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.297287][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 1129.297323][ T12] Call Trace: [ 1129.297331][ T12] [ 1129.297339][ T12] dump_stack_lvl+0xe8/0x150 [ 1129.297372][ T12] should_fail_ex+0x467/0x600 [ 1129.297410][ T12] should_failslab+0xa8/0x100 [ 1129.297436][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1129.297458][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 1129.297478][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 1129.297505][ T12] __alloc_skb+0x1d7/0x7a0 [ 1129.297530][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1129.297571][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 1129.297595][ T12] process_scheduled_works+0xa8e/0x14e0 [ 1129.297647][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.297677][ T12] ? assign_work+0x3cf/0x5d0 [ 1129.297710][ T12] worker_thread+0xa47/0xfb0 [ 1129.297759][ T12] kthread+0x388/0x470 [ 1129.297786][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1129.297807][ T12] ? __pfx_kthread+0x10/0x10 [ 1129.297837][ T12] ret_from_fork+0x514/0xb70 [ 1129.297871][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.297900][ T12] ? __switch_to+0xc89/0x1420 [ 1129.297928][ T12] ? __pfx_kthread+0x10/0x10 [ 1129.297958][ T12] ret_from_fork_asm+0x1a/0x30 [ 1129.298002][ T12] [ 1129.311643][ T9953] FAULT_INJECTION: forcing a failure. [ 1129.311643][ T9953] name failslab, interval 1, probability 1, space 0, times 95 [ 1129.311677][ T9953] CPU: 1 UID: 0 PID: 9953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.311698][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.311711][ T9953] Call Trace: [ 1129.311719][ T9953] [ 1129.311727][ T9953] dump_stack_lvl+0xe8/0x150 [ 1129.311764][ T9953] should_fail_ex+0x467/0x600 [ 1129.311800][ T9953] should_failslab+0xa8/0x100 [ 1129.311833][ T9953] __kmalloc_noprof+0xfe/0x780 [ 1129.311888][ T9953] ? rcu_is_watching+0x15/0xb0 [ 1129.311916][ T9953] ? tomoyo_realpath_from_path+0xef/0x640 [ 1129.311941][ T9953] ? tomoyo_realpath_from_path+0xef/0x640 [ 1129.311974][ T9953] tomoyo_realpath_from_path+0xef/0x640 [ 1129.312002][ T9953] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1129.312022][ T9953] tomoyo_path_number_perm+0x246/0x5f0 [ 1129.312043][ T9953] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1129.312070][ T9953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1129.312091][ T9953] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1129.312130][ T9953] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1129.312193][ T9953] ? __pfx_current_check_access_path+0x10/0x10 [ 1129.312214][ T9953] ? d_splice_alias_ops+0x11c/0x440 [ 1129.312241][ T9953] ? d_splice_alias+0x12/0x30 [ 1129.312277][ T9953] ? lookup_one_qstr_excl+0x1d4/0x360 [ 1129.312306][ T9953] tomoyo_path_mkdir+0xb0/0xf0 [ 1129.312333][ T9953] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1129.312364][ T9953] ? __pfx_filename_create+0x10/0x10 [ 1129.312396][ T9953] security_path_mkdir+0x169/0x350 [ 1129.312438][ T9953] filename_mkdirat+0x204/0x520 [ 1129.312470][ T9953] ? __pfx_filename_mkdirat+0x10/0x10 [ 1129.312499][ T9953] ? do_getname+0x151/0x250 [ 1129.312517][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.312539][ T9953] __se_sys_mkdirat+0x35/0x150 [ 1129.312566][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.312586][ T9953] do_syscall_64+0x174/0x580 [ 1129.312609][ T9953] ? trace_irq_disable+0x3b/0x140 [ 1129.312630][ T9953] ? clear_bhb_loop+0x40/0x90 [ 1129.312654][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.312673][ T9953] RIP: 0033:0x7f6c80e1cd07 [ 1129.312691][ T9953] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.312708][ T9953] RSP: 002b:00007ffe40540388 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 1129.312736][ T9953] RAX: ffffffffffffffda RBX: 00007ffe405403e0 RCX: 00007f6c80e1cd07 [ 1129.312750][ T9953] RDX: 00000000000001ff RSI: 00007ffe405403e0 RDI: 00000000ffffff9c [ 1129.312763][ T9953] RBP: 00007ffe405403cc R08: 0000000000000003 R09: 00000000fffffffd [ 1129.312776][ T9953] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f4 [ 1129.312788][ T9953] R13: 00000000000927c0 R14: 00000000001120d0 R15: 00007ffe40540420 [ 1129.312818][ T9953] [ 1129.312826][ T9953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1129.318992][ T9953] FAULT_INJECTION: forcing a failure. [ 1129.318992][ T9953] name failslab, interval 1, probability 1, space 0, times 94 [ 1129.319028][ T9953] CPU: 1 UID: 0 PID: 9953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.319051][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.319063][ T9953] Call Trace: [ 1129.319071][ T9953] [ 1129.319079][ T9953] dump_stack_lvl+0xe8/0x150 [ 1129.319115][ T9953] should_fail_ex+0x467/0x600 [ 1129.319153][ T9953] should_failslab+0xa8/0x100 [ 1129.319179][ T9953] kmem_cache_alloc_noprof+0xa4/0x650 [ 1129.319199][ T9953] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1129.319217][ T9953] ? anon_vma_fork+0x88/0x540 [ 1129.319235][ T9953] ? anon_vma_fork+0x88/0x540 [ 1129.319261][ T9953] anon_vma_fork+0x88/0x540 [ 1129.319279][ T9953] ? anon_vma_name+0x61/0x210 [ 1129.319379][ T9953] ? dup_userfaultfd+0xa7/0x610 [ 1129.319464][ T9953] ? dup_mmap+0x8a0/0x1d40 [ 1129.319489][ T9953] dup_mmap+0x976/0x1d40 [ 1129.319528][ T9953] ? __pfx_dup_mmap+0x10/0x10 [ 1129.319547][ T9953] ? rt_spin_lock+0x1e0/0x400 [ 1129.319590][ T9953] ? copy_mm+0x10f/0x480 [ 1129.319617][ T9953] ? copy_mm+0x10f/0x480 [ 1129.319655][ T9953] copy_mm+0x11a/0x480 [ 1129.319680][ T9953] ? copy_process+0xd3c/0x4390 [ 1129.319703][ T9953] copy_process+0x1e46/0x4390 [ 1129.319735][ T9953] ? copy_process+0xd3c/0x4390 [ 1129.319776][ T9953] ? __pfx_copy_process+0x10/0x10 [ 1129.319800][ T9953] ? do_raw_spin_lock+0x12b/0x2f0 [ 1129.319839][ T9953] kernel_clone+0x2d2/0x8d0 [ 1129.319868][ T9953] ? __pfx_kernel_clone+0x10/0x10 [ 1129.319913][ T9953] __x64_sys_clone+0x1b6/0x230 [ 1129.319943][ T9953] ? __pfx___x64_sys_clone+0x10/0x10 [ 1129.319988][ T9953] ? do_user_addr_fault+0xc4a/0x1340 [ 1129.320016][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.320038][ T9953] do_syscall_64+0x174/0x580 [ 1129.320061][ T9953] ? trace_irq_disable+0x3b/0x140 [ 1129.320081][ T9953] ? clear_bhb_loop+0x40/0x90 [ 1129.320105][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.320126][ T9953] RIP: 0033:0x7f6c80e46912 [ 1129.320145][ T9953] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1129.320162][ T9953] RSP: 002b:00007ffe40540240 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1129.320182][ T9953] RAX: ffffffffffffffda RBX: 00007ffe40540240 RCX: 00007f6c80e46912 [ 1129.320197][ T9953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1129.320210][ T9953] RBP: 00007ffe405403cc R08: 0000000000000000 R09: 0000000000000001 [ 1129.320223][ T9953] R10: 0000555583cf47d0 R11: 0000000000000246 R12: 0000000000000001 [ 1129.320236][ T9953] R13: 00000000000927c0 R14: 00000000001120d0 R15: 00007ffe40540420 [ 1129.320267][ T9953] [ 1129.423612][ T9445] FAULT_INJECTION: forcing a failure. [ 1129.423612][ T9445] name failslab, interval 1, probability 1, space 0, times 91 [ 1129.423647][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.423671][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.423684][ T9445] Workqueue: events vidtv_mux_tick [ 1129.423859][ T9445] Call Trace: [ 1129.423868][ T9445] [ 1129.423878][ T9445] dump_stack_lvl+0xe8/0x150 [ 1129.423912][ T9445] should_fail_ex+0x467/0x600 [ 1129.423949][ T9445] should_failslab+0xa8/0x100 [ 1129.423975][ T9445] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1129.423999][ T9445] ? vidtv_s302m_encode+0x356/0x1840 [ 1129.424021][ T9445] ? vidtv_s302m_encode+0x356/0x1840 [ 1129.424043][ T9445] ? vidtv_psi_eit_write_into+0x764/0x890 [ 1129.424070][ T9445] vidtv_s302m_encode+0x356/0x1840 [ 1129.424112][ T9445] ? __pfx_vidtv_psi_eit_write_into+0x10/0x10 [ 1129.424134][ T9445] ? lockdep_hardirqs_on+0x7a/0x110 [ 1129.424158][ T9445] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1129.424181][ T9445] ? usleep_range_state+0x95/0x180 [ 1129.424212][ T9445] vidtv_mux_tick+0x135c/0x24b0 [ 1129.424276][ T9445] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1129.424353][ T9445] ? irqentry_exit+0x218/0x8f0 [ 1129.424387][ T9445] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1129.424420][ T9445] ? process_scheduled_works+0xa20/0x14e0 [ 1129.424445][ T9445] process_scheduled_works+0xa8e/0x14e0 [ 1129.424496][ T9445] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.424526][ T9445] ? assign_work+0x3cf/0x5d0 [ 1129.424555][ T9445] worker_thread+0xa47/0xfb0 [ 1129.424606][ T9445] kthread+0x388/0x470 [ 1129.424636][ T9445] ? __pfx_worker_thread+0x10/0x10 [ 1129.424659][ T9445] ? __pfx_kthread+0x10/0x10 [ 1129.424689][ T9445] ret_from_fork+0x514/0xb70 [ 1129.424723][ T9445] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.424754][ T9445] ? __switch_to+0xc89/0x1420 [ 1129.424782][ T9445] ? __pfx_kthread+0x10/0x10 [ 1129.424813][ T9445] ret_from_fork_asm+0x1a/0x30 [ 1129.424848][ T9445] [ 1129.426852][ T7246] FAULT_INJECTION: forcing a failure. [ 1129.426852][ T7246] name failslab, interval 1, probability 1, space 0, times 91 [ 1129.426885][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.426908][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.426921][ T7246] Workqueue: events_unbound nsim_dev_trap_report_work [ 1129.426954][ T7246] Call Trace: [ 1129.426962][ T7246] [ 1129.426970][ T7246] dump_stack_lvl+0xe8/0x150 [ 1129.427005][ T7246] should_fail_ex+0x467/0x600 [ 1129.427042][ T7246] should_failslab+0xa8/0x100 [ 1129.427068][ T7246] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1129.427090][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1129.427108][ T7246] ? __alloc_skb+0x1d7/0x7a0 [ 1129.427131][ T7246] __alloc_skb+0x1d7/0x7a0 [ 1129.427160][ T7246] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1129.427203][ T7246] ? process_scheduled_works+0xa20/0x14e0 [ 1129.427227][ T7246] process_scheduled_works+0xa8e/0x14e0 [ 1129.427280][ T7246] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.427311][ T7246] ? assign_work+0x3cf/0x5d0 [ 1129.427430][ T7246] worker_thread+0xa47/0xfb0 [ 1129.427483][ T7246] kthread+0x388/0x470 [ 1129.427514][ T7246] ? __pfx_worker_thread+0x10/0x10 [ 1129.427536][ T7246] ? __pfx_kthread+0x10/0x10 [ 1129.427566][ T7246] ret_from_fork+0x514/0xb70 [ 1129.427601][ T7246] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.427631][ T7246] ? __switch_to+0xc89/0x1420 [ 1129.427662][ T7246] ? __pfx_kthread+0x10/0x10 [ 1129.427692][ T7246] ret_from_fork_asm+0x1a/0x30 [ 1129.427729][ T7246] [ 1129.427872][ T9445] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1129.427988][ T9445] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1129.428038][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.428059][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.428071][ T9445] Workqueue: events vidtv_mux_tick [ 1129.428097][ T9445] RIP: 0010:vidtv_s302m_encode+0x517/0x1840 [ 1129.428121][ T9445] Code: eb 0a e8 4c f3 ef f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 03 66 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b [ 1129.428137][ T9445] RSP: 0018:ffffc9000435f4a0 EFLAGS: 00010246 [ 1129.428153][ T9445] RAX: 0000000000000000 RBX: ffff88802b0cf828 RCX: ffff8880366d0000 [ 1129.428168][ T9445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.428179][ T9445] RBP: ffffc9000435f630 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1129.428193][ T9445] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000 [ 1129.428207][ T9445] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802b0cf868 [ 1129.428220][ T9445] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 1129.428236][ T9445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.428249][ T9445] CR2: 0000555583d079c8 CR3: 000000003c064000 CR4: 00000000003526f0 [ 1129.428267][ T9445] Call Trace: [ 1129.428275][ T9445] [ 1129.428290][ T9445] ? __pfx_vidtv_psi_eit_write_into+0x10/0x10 [ 1129.428312][ T9445] ? lockdep_hardirqs_on+0x7a/0x110 [ 1129.428344][ T9445] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1129.428366][ T9445] ? usleep_range_state+0x95/0x180 [ 1129.428391][ T9445] vidtv_mux_tick+0x135c/0x24b0 [ 1129.428430][ T9445] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1129.428472][ T9445] ? irqentry_exit+0x218/0x8f0 [ 1129.428498][ T9445] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1129.428523][ T9445] ? process_scheduled_works+0xa20/0x14e0 [ 1129.428546][ T9445] process_scheduled_works+0xa8e/0x14e0 [ 1129.428580][ T9445] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.428606][ T9445] ? assign_work+0x3cf/0x5d0 [ 1129.428629][ T9445] worker_thread+0xa47/0xfb0 [ 1129.428663][ T9445] kthread+0x388/0x470 [ 1129.428688][ T9445] ? __pfx_worker_thread+0x10/0x10 [ 1129.428709][ T9445] ? __pfx_kthread+0x10/0x10 [ 1129.428737][ T9445] ret_from_fork+0x514/0xb70 [ 1129.428765][ T9445] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.428793][ T9445] ? __switch_to+0xc89/0x1420 [ 1129.428819][ T9445] ? __pfx_kthread+0x10/0x10 [ 1129.428846][ T9445] ret_from_fork_asm+0x1a/0x30 [ 1129.428870][ T9445] [ 1129.428883][ T9445] Modules linked in: [ 1129.428901][ T9445] ---[ end trace 0000000000000000 ]--- [ 1129.428959][ T9445] RIP: 0010:vidtv_s302m_encode+0x517/0x1840 [ 1129.428983][ T9445] Code: eb 0a e8 4c f3 ef f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 03 66 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b [ 1129.429000][ T9445] RSP: 0018:ffffc9000435f4a0 EFLAGS: 00010246 [ 1129.429016][ T9445] RAX: 0000000000000000 RBX: ffff88802b0cf828 RCX: ffff8880366d0000 [ 1129.429030][ T9445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.429042][ T9445] RBP: ffffc9000435f630 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1129.429056][ T9445] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000 [ 1129.429071][ T9445] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802b0cf868 [ 1129.429084][ T9445] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 1129.429100][ T9445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.429113][ T9445] CR2: 0000555583d079c8 CR3: 000000003c064000 CR4: 00000000003526f0 [ 1129.429172][ T9445] Kernel panic - not syncing: Fatal exception [ 1129.429573][ T9445] Kernel Offset: disabled