last executing test programs: 17.966260586s ago: executing program 2 (id=417): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0xfffffffffffffff9, 0x8000002000c, 0x2, 0xa818, 0x40000000000a5, 0xf40000000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r2, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x4048010) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) capget$auto(&(0x7f0000000080)={0x54, 0x0}, &(0x7f0000000100)={0x9, 0x7, 0x5}) prctl$auto(0xfff, 0x0, r5, 0x1, 0x8f) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r6, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0xc) memfd_create$auto(0x0, 0xe) write$auto(r4, 0x0, 0x80000000) 16.889945991s ago: executing program 2 (id=420): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 16.858346144s ago: executing program 0 (id=421): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 15.94803249s ago: executing program 2 (id=423): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b30000000000", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) 14.849523281s ago: executing program 0 (id=425): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x688140, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r2 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) 14.697959193s ago: executing program 0 (id=426): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b30000000000", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(0x0, 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) 14.350133866s ago: executing program 2 (id=427): shmctl$auto_IPC_SET(0x2, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@info={0xffffffffffffffff, 0x7, 0x8000}, 0x1) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) swapoff$auto(&(0x7f0000000580)='\\\x00') r3 = socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x89ee, r3) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), r3) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000880)={&(0x7f00000005c0), 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x1) shmctl$auto_SHM_LOCK(0x65dc, 0xb, &(0x7f0000000340)={{0xb6c8, 0xee01, 0xee01, 0x37ee, 0xd, 0x75e, 0xeb}, 0x40000000, 0x6, 0x5968, 0x8, @inferred=0xffffffffffffffff, @raw=0x2, 0xfff, 0x0, &(0x7f0000000180)="7f08a894046ff7579f886c0ca376e357b285d8492c93367e42f6980e2afb3beffff1706ed87361d849277013a7ddb3e9553db7fd794957840c5234660a37eaf7950eba7dfc670c8aefb275b156faade4ea6eda6f768813ccd7a2c7d43419b955fac63406267119026b38c149aae42a1229f40679571e45024111466f29c0d509fb52ed34ccd79494153604674b22f23212fd0c736a00161b327869f71ffa52cf28396633f4f55d3c36aab719d563e08e3ecc8de2151336411f72dbe49d6e9dca27", &(0x7f0000000280)}) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000500)={{0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffff0, 0x9, 0x7}, 0x1, 0x3, 0x5, 0x4, @raw=0x3, @raw=0x4, 0x1, 0x0, &(0x7f0000000ac0)="4755266b9a7112f0418a3f32166f2b5408c66c2f6de0fd25c45589c009979446e292b463dddf0c73aba9605e53e816b3df5c860294d5aaceb3f003de97a5c7d509a0651ecd85f1bc818c1af788f2716f", &(0x7f0000000440)="3c7d7de55f7a3530e100383889f3912e9418449cfdd179fb8e35d94a7e61b55f4758a46a529c3486215da2cdd337d115528296df631cc0504092ce6e0705557612b35e39734d3cd317b5d65f1890059a36001de2411cdd1963f04d042307f27f73192abe1e59c50c82fc548d2d3247d469795a35ac8096ae245783903343a8c0d1692664a3790b30b0295f28e0"}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000a40)={{0x6, r5, r8, 0x7, 0x3, 0x6, 0xff}, 0x4, 0x7, 0x7, 0x8, @inferred=r6, @raw=0x200, 0x2, 0x0, &(0x7f00000008c0)="d12493e7ead5173cd7cca6ea7105eedf3437f91323de1a2d16e0db78ac9ce053fec975d91e1d5f84b0798723a7958d7cb662c064df848e1062de90f5a9cf3d1bd896036e0b35a46251ddd6ba6e0579ea5b4f4676a4", &(0x7f0000000940)="f6c0c833db17d9732d05ed66a20f51952dd9f1c1f4549849337563ea81ddb1d5bbdd6f4325bacdec43d24c4467aeecc0b8cafac7026bc525df005ab93bde6b1628173eb727fcaadbff171b51960b545aa708237592f92a44d21545214a290fc3cbb948467e04bd1b8223186ef7ed31f97185058d4193583568971db0e56ffca5f7877403609b82d9e7dcb6d646a849feffcb1f9ee34966d251dbf6d131b3f743a3caa738457b07e5ca2953c18b90e9e4a9c488b583efd4c62f7e0deb5827cd473ecbe8ac720ae9877396987d23bc52dbab57aa0666ba39d9afd9b246c0ffd74a204124e9683c09cba0b2ba241665e881c4d3"}) sendmsg$auto_TIPC_NL_NODE_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r2, @ANYBLOB="0c0125bd7000fddbdf250d0000001c0208803800108004003880511ce857d23abd23ff13524acb34c1bd9e472a9833ccadb6a883e46447363a2fe14bf5a01c81eded0400ee8004007080e8009480080041005e0fffff08003b00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYRESDEC=r3], 0x83c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r10 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r11, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) write$auto(r10, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8800, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$NS_GET_PARENT(r9, 0xb701, 0x0) ioctl$auto_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r0, 0x80044df9, &(0x7f0000002e00)) 13.187750486s ago: executing program 2 (id=430): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 12.502399863s ago: executing program 0 (id=432): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b30000000000", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) 10.839433422s ago: executing program 0 (id=435): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x688140, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r2 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) 10.749605696s ago: executing program 2 (id=436): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 10.670259313s ago: executing program 0 (id=437): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 6.540921676s ago: executing program 3 (id=444): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 6.423252531s ago: executing program 1 (id=445): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 5.453263295s ago: executing program 3 (id=446): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x4) 5.13265356s ago: executing program 1 (id=447): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 4.309395861s ago: executing program 3 (id=448): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x4) 3.497266013s ago: executing program 1 (id=449): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 2.657949462s ago: executing program 1 (id=450): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 2.37423524s ago: executing program 3 (id=451): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) 2.13927209s ago: executing program 1 (id=452): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) socket(0x1d, 0x3, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 1.208252624s ago: executing program 3 (id=453): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) 1.018636589s ago: executing program 1 (id=454): shmctl$auto_IPC_SET(0x2, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@info={0xffffffffffffffff, 0x7, 0x8000}, 0x1) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) swapoff$auto(&(0x7f0000000580)='\\\x00') r3 = socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x89ee, r3) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), r3) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000880)={&(0x7f00000005c0), 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x1) shmctl$auto_SHM_LOCK(0x65dc, 0xb, &(0x7f0000000340)={{0xb6c8, 0xee01, 0xee01, 0x37ee, 0xd, 0x75e, 0xeb}, 0x40000000, 0x6, 0x5968, 0x8, @inferred=0xffffffffffffffff, @raw=0x2, 0xfff, 0x0, &(0x7f0000000180)="7f08a894046ff7579f886c0ca376e357b285d8492c93367e42f6980e2afb3beffff1706ed87361d849277013a7ddb3e9553db7fd794957840c5234660a37eaf7950eba7dfc670c8aefb275b156faade4ea6eda6f768813ccd7a2c7d43419b955fac63406267119026b38c149aae42a1229f40679571e45024111466f29c0d509fb52ed34ccd79494153604674b22f23212fd0c736a00161b327869f71ffa52cf28396633f4f55d3c36aab719d563e08e3ecc8de2151336411f72dbe49d6e9dca27", &(0x7f0000000280)}) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000500)={{0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffff0, 0x9, 0x7}, 0x1, 0x3, 0x5, 0x4, @raw=0x3, @raw=0x4, 0x1, 0x0, &(0x7f0000000ac0)="4755266b9a7112f0418a3f32166f2b5408c66c2f6de0fd25c45589c009979446e292b463dddf0c73aba9605e53e816b3df5c860294d5aaceb3f003de97a5c7d509a0651ecd85f1bc818c1af788f2716f", &(0x7f0000000440)="3c7d7de55f7a3530e100383889f3912e9418449cfdd179fb8e35d94a7e61b55f4758a46a529c3486215da2cdd337d115528296df631cc0504092ce6e0705557612b35e39734d3cd317b5d65f1890059a36001de2411cdd1963f04d042307f27f73192abe1e59c50c82fc548d2d3247d469795a35ac8096ae245783903343a8c0d1692664a3790b30b0295f28e0"}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000a40)={{0x6, r5, r8, 0x7, 0x3, 0x6, 0xff}, 0x4, 0x7, 0x7, 0x8, @inferred=r6, @raw=0x200, 0x2, 0x0, &(0x7f00000008c0)="d12493e7ead5173cd7cca6ea7105eedf3437f91323de1a2d16e0db78ac9ce053fec975d91e1d5f84b0798723a7958d7cb662c064df848e1062de90f5a9cf3d1bd896036e0b35a46251ddd6ba6e0579ea5b4f4676a4", &(0x7f0000000940)="f6c0c833db17d9732d05ed66a20f51952dd9f1c1f4549849337563ea81ddb1d5bbdd6f4325bacdec43d24c4467aeecc0b8cafac7026bc525df005ab93bde6b1628173eb727fcaadbff171b51960b545aa708237592f92a44d21545214a290fc3cbb948467e04bd1b8223186ef7ed31f97185058d4193583568971db0e56ffca5f7877403609b82d9e7dcb6d646a849feffcb1f9ee34966d251dbf6d131b3f743a3caa738457b07e5ca2953c18b90e9e4a9c488b583efd4c62f7e0deb5827cd473ecbe8ac720ae9877396987d23bc52dbab57aa0666ba39d9afd9b246c0ffd74a204124e9683c09cba0b2ba241665e881c4d3"}) sendmsg$auto_TIPC_NL_NODE_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r2, @ANYBLOB="0c0125bd7000fddbdf250d0000001c0208803800108004003880511ce857d23abd23ff13524acb34c1bd9e472a9833ccadb6a883e46447363a2fe14bf5a01c81eded0400ee8004007080e8009480080041005e0fffff08003b00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYRESDEC=r3], 0x83c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r10 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r11, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) write$auto(r10, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8800, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$NS_GET_PARENT(r9, 0xb701, 0x0) ioctl$auto_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r0, 0x80044df9, &(0x7f0000002e00)) 0s ago: executing program 3 (id=455): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)="40948387c2a5a64c9a56e7cddec0f637e28ad078fef6f66ac769454080a0620d280a4dca173e7c365329ee31fd3fe72e9ac191f34a502efdb23505f4aa839028c18764149085d50e2560de1f3e30c508326e60ae") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6040, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0x0, 0x408) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 429.152313][ T5856] cgroup: Unknown subsys name 'net' [ 429.270207][ T5856] cgroup: Unknown subsys name 'cpuset' [ 429.280021][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 430.765134][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 432.604432][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.622277][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.632496][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.640436][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.649185][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.656872][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.660013][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.666124][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.671628][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.687558][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.688972][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.696736][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.703427][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.710646][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.724074][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.725378][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.741773][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.750186][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.760767][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.768713][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.247972][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 433.345682][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 433.445172][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 433.490446][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 433.558582][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.565729][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.573815][ T5875] bridge_slave_0: entered allmulticast mode [ 433.581856][ T5875] bridge_slave_0: entered promiscuous mode [ 433.600692][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.607900][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.615085][ T5869] bridge_slave_0: entered allmulticast mode [ 433.622971][ T5869] bridge_slave_0: entered promiscuous mode [ 433.640973][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.648214][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.655326][ T5875] bridge_slave_1: entered allmulticast mode [ 433.662545][ T5875] bridge_slave_1: entered promiscuous mode [ 433.680094][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.687262][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.694416][ T5869] bridge_slave_1: entered allmulticast mode [ 433.702143][ T5869] bridge_slave_1: entered promiscuous mode [ 433.782445][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.789708][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.797078][ T5868] bridge_slave_0: entered allmulticast mode [ 433.804015][ T5868] bridge_slave_0: entered promiscuous mode [ 433.815251][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.832888][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.842425][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.850164][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.857597][ T5868] bridge_slave_1: entered allmulticast mode [ 433.864616][ T5868] bridge_slave_1: entered promiscuous mode [ 433.873933][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.895814][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.960758][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.968042][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.975189][ T5870] bridge_slave_0: entered allmulticast mode [ 433.982545][ T5870] bridge_slave_0: entered promiscuous mode [ 434.002691][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.014383][ T5875] team0: Port device team_slave_0 added [ 434.020346][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.028005][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.035223][ T5870] bridge_slave_1: entered allmulticast mode [ 434.043240][ T5870] bridge_slave_1: entered promiscuous mode [ 434.067819][ T5869] team0: Port device team_slave_0 added [ 434.078408][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.102258][ T5875] team0: Port device team_slave_1 added [ 434.121430][ T5869] team0: Port device team_slave_1 added [ 434.149693][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.170851][ T5868] team0: Port device team_slave_0 added [ 434.189460][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.215261][ T5868] team0: Port device team_slave_1 added [ 434.222216][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.229383][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.255608][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.268856][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.275804][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.301889][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.323522][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.330594][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.356947][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.411098][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.422081][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.448211][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.459793][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.467480][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.493728][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.510519][ T5870] team0: Port device team_slave_0 added [ 434.538476][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.545454][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.571751][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.584368][ T5870] team0: Port device team_slave_1 added [ 434.641271][ T5875] hsr_slave_0: entered promiscuous mode [ 434.648420][ T5875] hsr_slave_1: entered promiscuous mode [ 434.669385][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.676601][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.704042][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.737219][ T5874] Bluetooth: hci2: command tx timeout [ 434.742854][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.750031][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.776424][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.809744][ T5869] hsr_slave_0: entered promiscuous mode [ 434.815998][ T5869] hsr_slave_1: entered promiscuous mode [ 434.822291][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 434.827005][ T50] Bluetooth: hci1: command tx timeout [ 434.828101][ T5876] Bluetooth: hci0: command tx timeout [ 434.833716][ T5874] Bluetooth: hci3: command tx timeout [ 434.839362][ T5869] Cannot create hsr debugfs directory [ 434.901122][ T5868] hsr_slave_0: entered promiscuous mode [ 434.907736][ T5868] hsr_slave_1: entered promiscuous mode [ 434.913808][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 434.919811][ T5868] Cannot create hsr debugfs directory [ 435.039543][ T5870] hsr_slave_0: entered promiscuous mode [ 435.045739][ T5870] hsr_slave_1: entered promiscuous mode [ 435.052067][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 435.057822][ T5870] Cannot create hsr debugfs directory [ 435.419062][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.433263][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.450801][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.470653][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.505456][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.515440][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.538121][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.558869][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.618148][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.639053][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.664332][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.675660][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.758871][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.784518][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.800019][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.812078][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.847152][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.916223][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.936530][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.943813][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.978952][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.986043][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.027379][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.074257][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.093632][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.106220][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.139329][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.146619][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.169748][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.190814][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.213389][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.220614][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.250004][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.257218][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.270020][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.277244][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.291375][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.339137][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.346395][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.392118][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.399341][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.423761][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.513082][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.674438][ T5875] veth0_vlan: entered promiscuous mode [ 436.712835][ T5875] veth1_vlan: entered promiscuous mode [ 436.775532][ T5875] veth0_macvtap: entered promiscuous mode [ 436.796067][ T5875] veth1_macvtap: entered promiscuous mode [ 436.818367][ T5874] Bluetooth: hci2: command tx timeout [ 436.871891][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.896907][ T5874] Bluetooth: hci3: command tx timeout [ 436.896970][ T5876] Bluetooth: hci1: command tx timeout [ 436.902328][ T5874] Bluetooth: hci0: command tx timeout [ 436.922674][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.964131][ T5916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.003190][ T5916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.016638][ T5916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.039461][ T5916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.062626][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.078100][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.155136][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.202237][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.218056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.249087][ T5869] veth0_vlan: entered promiscuous mode [ 437.291874][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.302899][ T5868] veth0_vlan: entered promiscuous mode [ 437.308917][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.313074][ T5869] veth1_vlan: entered promiscuous mode [ 437.353056][ T5868] veth1_vlan: entered promiscuous mode [ 437.380112][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 437.423625][ T5869] veth0_macvtap: entered promiscuous mode [ 437.438035][ T5870] veth0_vlan: entered promiscuous mode [ 437.453192][ T5870] veth1_vlan: entered promiscuous mode [ 437.489521][ T5869] veth1_macvtap: entered promiscuous mode [ 437.558155][ T5868] veth0_macvtap: entered promiscuous mode [ 437.572646][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.586018][ T5868] veth1_macvtap: entered promiscuous mode [ 437.612498][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.643910][ T5870] veth0_macvtap: entered promiscuous mode [ 437.662053][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.671749][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.685648][ T5870] veth1_macvtap: entered promiscuous mode [ 437.694780][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.705337][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.720664][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.743223][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.770413][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.791399][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.808658][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.837168][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.863233][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.884456][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.932107][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.943144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.970721][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.979777][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.989008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 438.027305][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.036104][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.187660][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.195535][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.380592][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.436576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 438.461553][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.706631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 438.739075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.757549][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.829412][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.843208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.897061][ T5874] Bluetooth: hci2: command tx timeout [ 438.936156][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.967389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 438.977059][ T5874] Bluetooth: hci0: command tx timeout [ 438.987004][ T5874] Bluetooth: hci1: command tx timeout [ 438.992392][ T5874] Bluetooth: hci3: command tx timeout [ 439.004074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.055710][ T5979] Zero length message leads to an empty skb [ 439.086638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.636559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 439.706973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.022691][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.030891][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.186812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.294908][ T5989] random: crng reseeded on system resumption [ 440.459265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.468046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 440.981677][ T5874] Bluetooth: hci2: command tx timeout [ 441.057154][ T5874] Bluetooth: hci3: command tx timeout [ 441.062585][ T5874] Bluetooth: hci1: command tx timeout [ 441.068098][ T50] Bluetooth: hci0: command tx timeout [ 442.836675][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 454.071637][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 456.147519][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 457.217852][ T6144] FAULT_INJECTION: forcing a failure. [ 457.217852][ T6144] name failslab, interval 1, probability 0, space 0, times 1 [ 457.247277][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) [ 457.247314][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.247337][ T6144] Call Trace: [ 457.247373][ T6144] [ 457.247382][ T6144] dump_stack_lvl+0x100/0x190 [ 457.247433][ T6144] should_fail_ex.cold+0x5/0xa [ 457.247462][ T6144] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 457.247487][ T6144] should_failslab+0xc2/0x120 [ 457.247512][ T6144] __kmalloc_noprof+0xe0/0x850 [ 457.247553][ T6144] apply_wqattrs_prepare+0xfe/0xbb0 [ 457.247587][ T6144] workqueue_apply_unbound_cpumask+0x18c/0x970 [ 457.247617][ T6144] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 457.247643][ T6144] ? bitmap_parse+0x306/0x3f0 [ 457.247676][ T6144] cpumask_store+0x1ad/0x220 [ 457.247701][ T6144] ? __pfx_cpumask_store+0x10/0x10 [ 457.247724][ T6144] ? find_held_lock+0x2b/0x80 [ 457.247746][ T6144] ? sysfs_file_kobj+0xe4/0x290 [ 457.247776][ T6144] ? sysfs_file_kobj+0xe4/0x290 [ 457.247810][ T6144] ? __pfx_cpumask_store+0x10/0x10 [ 457.247830][ T6144] dev_attr_store+0x58/0x80 [ 457.247873][ T6144] ? __pfx_dev_attr_store+0x10/0x10 [ 457.247922][ T6144] sysfs_kf_write+0xf2/0x150 [ 457.247955][ T6144] kernfs_fop_write_iter+0x3e0/0x5f0 [ 457.247981][ T6144] ? __pfx_sysfs_kf_write+0x10/0x10 [ 457.248018][ T6144] vfs_write+0x6ac/0x1070 [ 457.248061][ T6144] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 457.248094][ T6144] ? __pfx_vfs_write+0x10/0x10 [ 457.248161][ T6144] ksys_write+0x12a/0x250 [ 457.248196][ T6144] ? __pfx_ksys_write+0x10/0x10 [ 457.248232][ T6144] do_syscall_64+0x106/0xf80 [ 457.248267][ T6144] ? clear_bhb_loop+0x40/0x90 [ 457.248303][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.248349][ T6144] RIP: 0033:0x7fb46c99c799 [ 457.248409][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.248447][ T6144] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.248522][ T6144] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 457.248541][ T6144] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000007 [ 457.248558][ T6144] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 457.248576][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.248592][ T6144] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 457.248633][ T6144] [ 460.550311][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 462.523362][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 462.894229][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 466.671909][ T6238] process 'syz.1.50' launched './file0' with NULL argv: empty string added [ 467.469302][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 475.258535][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 482.974604][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 483.868369][ T6384] FAULT_INJECTION: forcing a failure. [ 483.868369][ T6384] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 483.987914][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 483.987952][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.987970][ T6384] Call Trace: [ 483.987979][ T6384] [ 483.987989][ T6384] dump_stack_lvl+0x100/0x190 [ 483.988037][ T6384] should_fail_ex.cold+0x5/0xa [ 483.988072][ T6384] _copy_from_iter+0x1f4/0x1690 [ 483.988116][ T6384] ? __asan_memset+0x23/0x50 [ 483.988156][ T6384] ? __pfx__copy_from_iter+0x10/0x10 [ 483.988183][ T6384] ? __pfx___alloc_skb+0x10/0x10 [ 483.988232][ T6384] netlink_sendmsg+0x808/0xda0 [ 483.988278][ T6384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.988320][ T6384] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 483.988366][ T6384] __sys_sendto+0x468/0x4b0 [ 483.988395][ T6384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.988434][ T6384] ? __pfx___sys_sendto+0x10/0x10 [ 483.988475][ T6384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 483.988522][ T6384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 483.988592][ T6384] __x64_sys_sendto+0xe0/0x1c0 [ 483.988622][ T6384] ? do_syscall_64+0x95/0xf80 [ 483.988656][ T6384] ? lockdep_hardirqs_on+0x78/0x100 [ 483.988690][ T6384] do_syscall_64+0x106/0xf80 [ 483.988721][ T6384] ? clear_bhb_loop+0x40/0x90 [ 483.988754][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.988784][ T6384] RIP: 0033:0x7fb46c95cfce [ 483.988807][ T6384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.988833][ T6384] RSP: 002b:00007fb46d7bde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.988860][ T6384] RAX: ffffffffffffffda RBX: 00007fb46d7bf6c0 RCX: 00007fb46c95cfce [ 483.988879][ T6384] RDX: 000000000000001c RSI: 00007fb46d7be000 RDI: 0000000000000008 [ 483.988896][ T6384] RBP: 0000000000000000 R08: 00007fb46d7bdf04 R09: 000000000000000c [ 483.988913][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 483.988933][ T6384] R13: 00007fb46d7bdf58 R14: 00007fb46d7be000 R15: 0000000000000000 [ 483.988970][ T6384] [ 484.216944][ T6392] random: crng reseeded on system resumption [ 486.645019][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 488.889442][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 490.580931][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 491.830042][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 494.725769][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 497.893101][ T6523] FAULT_INJECTION: forcing a failure. [ 497.893101][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 497.956749][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.0.105 Not tainted syzkaller #0 PREEMPT(full) [ 497.956788][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.956804][ T6523] Call Trace: [ 497.956813][ T6523] [ 497.956824][ T6523] dump_stack_lvl+0x100/0x190 [ 497.956871][ T6523] should_fail_ex.cold+0x5/0xa [ 497.956905][ T6523] should_failslab+0xc2/0x120 [ 497.956935][ T6523] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 497.956978][ T6523] ? skb_clone+0x190/0x400 [ 497.957018][ T6523] skb_clone+0x190/0x400 [ 497.957051][ T6523] netlink_deliver_tap+0xaed/0xcc0 [ 497.957091][ T6523] netlink_unicast+0x650/0x870 [ 497.957129][ T6523] ? __pfx_netlink_unicast+0x10/0x10 [ 497.957175][ T6523] netlink_sendmsg+0x8b0/0xda0 [ 497.957213][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.957250][ T6523] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 497.957291][ T6523] __sys_sendto+0x468/0x4b0 [ 497.957317][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.957351][ T6523] ? __pfx___sys_sendto+0x10/0x10 [ 497.957395][ T6523] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 497.957439][ T6523] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 497.957504][ T6523] __x64_sys_sendto+0xe0/0x1c0 [ 497.957532][ T6523] ? do_syscall_64+0x95/0xf80 [ 497.957563][ T6523] ? lockdep_hardirqs_on+0x78/0x100 [ 497.957592][ T6523] do_syscall_64+0x106/0xf80 [ 497.957620][ T6523] ? clear_bhb_loop+0x40/0x90 [ 497.957651][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.957678][ T6523] RIP: 0033:0x7fd0edf5cfce [ 497.957700][ T6523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.957724][ T6523] RSP: 002b:00007fd0eed93e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.957748][ T6523] RAX: ffffffffffffffda RBX: 00007fd0eed956c0 RCX: 00007fd0edf5cfce [ 497.957764][ T6523] RDX: 0000000000000020 RSI: 00007fd0eed94000 RDI: 0000000000000008 [ 497.957779][ T6523] RBP: 0000000000000000 R08: 00007fd0eed93f04 R09: 000000000000000c [ 497.957794][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 497.957808][ T6523] R13: 00007fd0eed93f58 R14: 00007fd0eed94000 R15: 0000000000000000 [ 497.957842][ T6523] [ 499.004269][ T6519] FAULT_INJECTION: forcing a failure. [ 499.004269][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 499.101008][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 499.101032][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.101041][ T6519] Call Trace: [ 499.101047][ T6519] [ 499.101053][ T6519] dump_stack_lvl+0x100/0x190 [ 499.101080][ T6519] should_fail_ex.cold+0x5/0xa [ 499.101098][ T6519] should_failslab+0xc2/0x120 [ 499.101113][ T6519] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 499.101135][ T6519] ? skb_clone+0x190/0x400 [ 499.101156][ T6519] skb_clone+0x190/0x400 [ 499.101174][ T6519] netlink_deliver_tap+0xaed/0xcc0 [ 499.101197][ T6519] netlink_unicast+0x650/0x870 [ 499.101233][ T6519] ? __pfx_netlink_unicast+0x10/0x10 [ 499.101279][ T6519] netlink_sendmsg+0x8b0/0xda0 [ 499.101330][ T6519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.101355][ T6519] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 499.101380][ T6519] __sys_sendto+0x468/0x4b0 [ 499.101395][ T6519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.101415][ T6519] ? __pfx___sys_sendto+0x10/0x10 [ 499.101437][ T6519] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 499.101461][ T6519] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 499.101497][ T6519] __x64_sys_sendto+0xe0/0x1c0 [ 499.101512][ T6519] ? do_syscall_64+0x95/0xf80 [ 499.101530][ T6519] ? lockdep_hardirqs_on+0x78/0x100 [ 499.101546][ T6519] do_syscall_64+0x106/0xf80 [ 499.101563][ T6519] ? clear_bhb_loop+0x40/0x90 [ 499.101581][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.101597][ T6519] RIP: 0033:0x7fb46c95cfce [ 499.101610][ T6519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.101625][ T6519] RSP: 002b:00007fb46d7bde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.101639][ T6519] RAX: ffffffffffffffda RBX: 00007fb46d7bf6c0 RCX: 00007fb46c95cfce [ 499.101649][ T6519] RDX: 0000000000000020 RSI: 00007fb46d7be000 RDI: 0000000000000007 [ 499.101657][ T6519] RBP: 0000000000000000 R08: 00007fb46d7bdf04 R09: 000000000000000c [ 499.101666][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 499.101675][ T6519] R13: 00007fb46d7bdf58 R14: 00007fb46d7be000 R15: 0000000000000000 [ 499.101695][ T6519] [ 500.792244][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 501.474441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480973][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.911011][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 506.331458][ T6593] random: crng reseeded on system resumption [ 508.796165][ T6614] FAULT_INJECTION: forcing a failure. [ 508.796165][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 508.883090][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT(full) [ 508.883133][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.883150][ T6614] Call Trace: [ 508.883160][ T6614] [ 508.883171][ T6614] dump_stack_lvl+0x100/0x190 [ 508.883223][ T6614] should_fail_ex.cold+0x5/0xa [ 508.883256][ T6614] ? tomoyo_encode2+0xfb/0x3c0 [ 508.883288][ T6614] should_failslab+0xc2/0x120 [ 508.883318][ T6614] __kmalloc_noprof+0xe0/0x850 [ 508.883360][ T6614] ? rcu_is_watching+0x12/0xc0 [ 508.883409][ T6614] tomoyo_encode2+0xfb/0x3c0 [ 508.883447][ T6614] tomoyo_encode+0x29/0x50 [ 508.883476][ T6614] tomoyo_realpath_from_path+0x18c/0x690 [ 508.883518][ T6614] tomoyo_check_open_permission+0x2af/0x3c0 [ 508.883566][ T6614] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 508.883651][ T6614] ? do_raw_spin_lock+0x128/0x260 [ 508.883694][ T6614] ? path_get+0x61/0x80 [ 508.883728][ T6614] tomoyo_file_open+0x6b/0x90 [ 508.883767][ T6614] security_file_open+0xb5/0x1e0 [ 508.883798][ T6614] do_dentry_open+0x5aa/0x1660 [ 508.883830][ T6614] ? security_inode_permission+0xbf/0x250 [ 508.883886][ T6614] vfs_open+0x82/0x3f0 [ 508.883926][ T6614] path_openat+0x208c/0x31a0 [ 508.883976][ T6614] ? __pfx_path_openat+0x10/0x10 [ 508.884021][ T6614] do_file_open+0x20e/0x430 [ 508.884054][ T6614] ? __pfx_do_file_open+0x10/0x10 [ 508.884098][ T6614] ? __pfx_kfree_link+0x10/0x10 [ 508.884150][ T6614] ? alloc_fd+0x476/0x790 [ 508.884186][ T6614] ? do_getname+0x191/0x390 [ 508.884225][ T6614] do_sys_openat2+0x10d/0x1e0 [ 508.884262][ T6614] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.884313][ T6614] __x64_sys_openat+0x12d/0x210 [ 508.884351][ T6614] ? __pfx___x64_sys_openat+0x10/0x10 [ 508.884403][ T6614] do_syscall_64+0x106/0xf80 [ 508.884438][ T6614] ? clear_bhb_loop+0x40/0x90 [ 508.884474][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.884503][ T6614] RIP: 0033:0x7f151c19c799 [ 508.884529][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.884556][ T6614] RSP: 002b:00007f151d07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.884584][ T6614] RAX: ffffffffffffffda RBX: 00007f151c415fa0 RCX: 00007f151c19c799 [ 508.884604][ T6614] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 508.884622][ T6614] RBP: 00007f151c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 508.884640][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.884657][ T6614] R13: 00007f151c416038 R14: 00007f151c415fa0 R15: 00007ffec1cd7778 [ 508.884697][ T6614] [ 509.155266][ T6614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.221703][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 510.471230][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 511.906492][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 512.343544][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 515.837150][ T6707] FAULT_INJECTION: forcing a failure. [ 515.837150][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 515.851721][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 515.851744][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.851753][ T6707] Call Trace: [ 515.851758][ T6707] [ 515.851764][ T6707] dump_stack_lvl+0x100/0x190 [ 515.851793][ T6707] should_fail_ex.cold+0x5/0xa [ 515.851812][ T6707] should_failslab+0xc2/0x120 [ 515.851828][ T6707] __kmalloc_cache_noprof+0x7a/0x6f0 [ 515.851847][ T6707] ? proc_thread_self_get_link+0x1a6/0x210 [ 515.851872][ T6707] proc_thread_self_get_link+0x1a6/0x210 [ 515.851902][ T6707] pick_link+0xac2/0x13c0 [ 515.851924][ T6707] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 515.851949][ T6707] step_into_slowpath+0x9ba/0xf90 [ 515.851975][ T6707] ? __pfx_step_into_slowpath+0x10/0x10 [ 515.852000][ T6707] ? lookup_fast+0x2da/0x600 [ 515.852018][ T6707] ? inode_permission+0x374/0x620 [ 515.852039][ T6707] link_path_walk+0xf28/0x1cc0 [ 515.852067][ T6707] path_openat+0x1be/0x31a0 [ 515.852080][ T6707] ? kasan_save_stack+0x3f/0x50 [ 515.852101][ T6707] ? kasan_save_stack+0x30/0x50 [ 515.852121][ T6707] ? kasan_save_track+0x14/0x30 [ 515.852146][ T6707] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 515.852172][ T6707] ? __pfx_path_openat+0x10/0x10 [ 515.852193][ T6707] do_file_open+0x20e/0x430 [ 515.852209][ T6707] ? __pfx_do_file_open+0x10/0x10 [ 515.852238][ T6707] ? alloc_fd+0x476/0x790 [ 515.852255][ T6707] ? do_getname+0x191/0x390 [ 515.852274][ T6707] do_sys_openat2+0x10d/0x1e0 [ 515.852292][ T6707] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.852318][ T6707] __x64_sys_openat+0x12d/0x210 [ 515.852337][ T6707] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.852355][ T6707] ? ksys_write+0x1ac/0x250 [ 515.852375][ T6707] do_syscall_64+0x106/0xf80 [ 515.852392][ T6707] ? clear_bhb_loop+0x40/0x90 [ 515.852410][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.852425][ T6707] RIP: 0033:0x7fb46c99c799 [ 515.852438][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.852452][ T6707] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.852466][ T6707] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 515.852475][ T6707] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 515.852485][ T6707] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 515.852494][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.852503][ T6707] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 515.852523][ T6707] [ 519.240158][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 520.447087][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 520.698715][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 521.209721][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 521.406134][ T6754] FAULT_INJECTION: forcing a failure. [ 521.406134][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 521.421749][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.0.151 Not tainted syzkaller #0 PREEMPT(full) [ 521.421787][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.421803][ T6754] Call Trace: [ 521.421813][ T6754] [ 521.421823][ T6754] dump_stack_lvl+0x100/0x190 [ 521.421886][ T6754] should_fail_ex.cold+0x5/0xa [ 521.421920][ T6754] should_failslab+0xc2/0x120 [ 521.421951][ T6754] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 521.421993][ T6754] ? skb_clone+0x190/0x400 [ 521.422045][ T6754] skb_clone+0x190/0x400 [ 521.422081][ T6754] netlink_deliver_tap+0xaed/0xcc0 [ 521.422125][ T6754] netlink_unicast+0x650/0x870 [ 521.422166][ T6754] ? __pfx_netlink_unicast+0x10/0x10 [ 521.422215][ T6754] netlink_sendmsg+0x8b0/0xda0 [ 521.422256][ T6754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.422297][ T6754] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 521.422341][ T6754] __sys_sendto+0x468/0x4b0 [ 521.422369][ T6754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.422404][ T6754] ? __pfx___sys_sendto+0x10/0x10 [ 521.422442][ T6754] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 521.422484][ T6754] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 521.422555][ T6754] __x64_sys_sendto+0xe0/0x1c0 [ 521.422585][ T6754] ? do_syscall_64+0x95/0xf80 [ 521.422621][ T6754] ? lockdep_hardirqs_on+0x78/0x100 [ 521.422655][ T6754] do_syscall_64+0x106/0xf80 [ 521.422686][ T6754] ? clear_bhb_loop+0x40/0x90 [ 521.422722][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.422751][ T6754] RIP: 0033:0x7fd0edf5cfce [ 521.422775][ T6754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.422803][ T6754] RSP: 002b:00007fd0eedb4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 521.422830][ T6754] RAX: ffffffffffffffda RBX: 00007fd0eedb66c0 RCX: 00007fd0edf5cfce [ 521.422849][ T6754] RDX: 0000000000000020 RSI: 00007fd0eedb5000 RDI: 0000000000000008 [ 521.422867][ T6754] RBP: 0000000000000000 R08: 00007fd0eedb4f04 R09: 000000000000000c [ 521.422895][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 521.422911][ T6754] R13: 00007fd0eedb4f58 R14: 00007fd0eedb5000 R15: 0000000000000000 [ 521.422949][ T6754] [ 527.390355][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 529.481938][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 530.693127][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 532.471728][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 532.911229][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 533.772716][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 534.377877][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 534.939836][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 535.954654][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 539.470618][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 545.229058][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 546.588425][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 552.212041][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 559.042804][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 559.412515][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 559.830865][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 559.856665][ T7124] Bluetooth: hci2: command 0x0406 tx timeout [ 559.863526][ T7124] Bluetooth: hci0: command 0x0406 tx timeout [ 559.873093][ T7124] Bluetooth: hci3: command 0x0406 tx timeout [ 559.879463][ T7124] Bluetooth: hci1: command 0x0406 tx timeout [ 562.936054][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.945150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.785216][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 574.177463][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 579.692132][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 580.048267][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 584.084554][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 584.404128][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 585.463684][ T7387] FAULT_INJECTION: forcing a failure. [ 585.463684][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 585.491040][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 585.491078][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.491095][ T7387] Call Trace: [ 585.491106][ T7387] [ 585.491116][ T7387] dump_stack_lvl+0x100/0x190 [ 585.491168][ T7387] should_fail_ex.cold+0x5/0xa [ 585.491202][ T7387] should_failslab+0xc2/0x120 [ 585.491234][ T7387] __kmalloc_cache_noprof+0x7a/0x6f0 [ 585.491272][ T7387] ? proc_thread_self_get_link+0x1a6/0x210 [ 585.491324][ T7387] proc_thread_self_get_link+0x1a6/0x210 [ 585.491367][ T7387] pick_link+0xac2/0x13c0 [ 585.491407][ T7387] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 585.491454][ T7387] step_into_slowpath+0x9ba/0xf90 [ 585.491516][ T7387] ? __pfx_step_into_slowpath+0x10/0x10 [ 585.491565][ T7387] ? lookup_fast+0x2da/0x600 [ 585.491602][ T7387] ? inode_permission+0x374/0x620 [ 585.491642][ T7387] link_path_walk+0xf28/0x1cc0 [ 585.491696][ T7387] path_openat+0x1be/0x31a0 [ 585.491723][ T7387] ? kasan_save_stack+0x3f/0x50 [ 585.491764][ T7387] ? kasan_save_stack+0x30/0x50 [ 585.491804][ T7387] ? kasan_save_track+0x14/0x30 [ 585.491846][ T7387] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 585.491896][ T7387] ? __pfx_path_openat+0x10/0x10 [ 585.491938][ T7387] do_file_open+0x20e/0x430 [ 585.491969][ T7387] ? __pfx_do_file_open+0x10/0x10 [ 585.492023][ T7387] ? alloc_fd+0x476/0x790 [ 585.492054][ T7387] ? do_getname+0x191/0x390 [ 585.492092][ T7387] do_sys_openat2+0x10d/0x1e0 [ 585.492129][ T7387] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.492179][ T7387] __x64_sys_openat+0x12d/0x210 [ 585.492217][ T7387] ? __pfx___x64_sys_openat+0x10/0x10 [ 585.492251][ T7387] ? ksys_write+0x1ac/0x250 [ 585.492289][ T7387] do_syscall_64+0x106/0xf80 [ 585.492324][ T7387] ? clear_bhb_loop+0x40/0x90 [ 585.492359][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.492388][ T7387] RIP: 0033:0x7fb46c99c799 [ 585.492411][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.492438][ T7387] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.492465][ T7387] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 585.492492][ T7387] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 585.492510][ T7387] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 585.492527][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.492544][ T7387] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 585.492582][ T7387] [ 588.710809][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 588.954248][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 590.275487][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 590.525325][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 590.766356][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 591.004543][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 591.525871][ T7450] FAULT_INJECTION: forcing a failure. [ 591.525871][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 591.553036][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 591.553076][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.553092][ T7450] Call Trace: [ 591.553101][ T7450] [ 591.553113][ T7450] dump_stack_lvl+0x100/0x190 [ 591.553162][ T7450] should_fail_ex.cold+0x5/0xa [ 591.553197][ T7450] ? tomoyo_realpath_from_path+0xb6/0x690 [ 591.553233][ T7450] should_failslab+0xc2/0x120 [ 591.553264][ T7450] __kmalloc_noprof+0xe0/0x850 [ 591.553314][ T7450] tomoyo_realpath_from_path+0xb6/0x690 [ 591.553357][ T7450] tomoyo_check_open_permission+0x2af/0x3c0 [ 591.553404][ T7450] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 591.553487][ T7450] ? do_raw_spin_lock+0x128/0x260 [ 591.553533][ T7450] ? path_get+0x61/0x80 [ 591.553568][ T7450] tomoyo_file_open+0x6b/0x90 [ 591.553614][ T7450] security_file_open+0xb5/0x1e0 [ 591.553646][ T7450] do_dentry_open+0x5aa/0x1660 [ 591.553678][ T7450] ? security_inode_permission+0xbf/0x250 [ 591.553729][ T7450] vfs_open+0x82/0x3f0 [ 591.553769][ T7450] path_openat+0x208c/0x31a0 [ 591.553810][ T7450] ? __pfx_path_openat+0x10/0x10 [ 591.553853][ T7450] do_file_open+0x20e/0x430 [ 591.553885][ T7450] ? __pfx_do_file_open+0x10/0x10 [ 591.553928][ T7450] ? __pfx_kfree_link+0x10/0x10 [ 591.553977][ T7450] ? alloc_fd+0x476/0x790 [ 591.554008][ T7450] ? do_getname+0x191/0x390 [ 591.554049][ T7450] do_sys_openat2+0x10d/0x1e0 [ 591.554086][ T7450] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.554136][ T7450] __x64_sys_openat+0x12d/0x210 [ 591.554174][ T7450] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.554226][ T7450] do_syscall_64+0x106/0xf80 [ 591.554259][ T7450] ? clear_bhb_loop+0x40/0x90 [ 591.554295][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.554324][ T7450] RIP: 0033:0x7f5a54f9c799 [ 591.554348][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.554375][ T7450] RSP: 002b:00007f5a531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.554401][ T7450] RAX: ffffffffffffffda RBX: 00007f5a55215fa0 RCX: 00007f5a54f9c799 [ 591.554420][ T7450] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 591.554439][ T7450] RBP: 00007f5a55032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 591.554456][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.554473][ T7450] R13: 00007f5a55216038 R14: 00007f5a55215fa0 R15: 00007ffd94af23f8 [ 591.554511][ T7450] [ 591.802563][ T7450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.672907][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 593.416844][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 593.706116][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 593.823265][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 594.094140][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 594.180946][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 594.528907][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 594.678203][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 595.092260][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 595.825207][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 596.109581][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 596.173880][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 596.362360][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 597.930637][ T7549] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 599.822403][ T7569] __nla_validate_parse: 6 callbacks suppressed [ 599.822419][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 600.559115][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 600.696018][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 601.095775][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 602.215669][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 602.437464][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 603.486093][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 604.363074][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 604.562326][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 604.864086][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 605.087052][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 606.006382][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 606.872035][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 607.065675][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 607.821897][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 607.996469][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 614.965586][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 615.248190][ T7759] FAULT_INJECTION: forcing a failure. [ 615.248190][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 615.266514][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 615.266542][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.266551][ T7759] Call Trace: [ 615.266557][ T7759] [ 615.266563][ T7759] dump_stack_lvl+0x100/0x190 [ 615.266592][ T7759] should_fail_ex.cold+0x5/0xa [ 615.266610][ T7759] ? tomoyo_realpath_from_path+0xb6/0x690 [ 615.266631][ T7759] should_failslab+0xc2/0x120 [ 615.266648][ T7759] __kmalloc_noprof+0xe0/0x850 [ 615.266675][ T7759] tomoyo_realpath_from_path+0xb6/0x690 [ 615.266697][ T7759] tomoyo_check_open_permission+0x2af/0x3c0 [ 615.266722][ T7759] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 615.266763][ T7759] ? do_raw_spin_lock+0x128/0x260 [ 615.266786][ T7759] ? path_get+0x61/0x80 [ 615.266804][ T7759] tomoyo_file_open+0x6b/0x90 [ 615.266823][ T7759] security_file_open+0xb5/0x1e0 [ 615.266839][ T7759] do_dentry_open+0x5aa/0x1660 [ 615.266857][ T7759] ? security_inode_permission+0xbf/0x250 [ 615.266885][ T7759] vfs_open+0x82/0x3f0 [ 615.266906][ T7759] path_openat+0x208c/0x31a0 [ 615.266928][ T7759] ? __pfx_path_openat+0x10/0x10 [ 615.266951][ T7759] do_file_open+0x20e/0x430 [ 615.266968][ T7759] ? __pfx_do_file_open+0x10/0x10 [ 615.266990][ T7759] ? __pfx_kfree_link+0x10/0x10 [ 615.267015][ T7759] ? alloc_fd+0x476/0x790 [ 615.267031][ T7759] ? do_getname+0x191/0x390 [ 615.267050][ T7759] do_sys_openat2+0x10d/0x1e0 [ 615.267068][ T7759] ? __pfx_do_sys_openat2+0x10/0x10 [ 615.267094][ T7759] __x64_sys_openat+0x12d/0x210 [ 615.267113][ T7759] ? __pfx___x64_sys_openat+0x10/0x10 [ 615.267139][ T7759] do_syscall_64+0x106/0xf80 [ 615.267157][ T7759] ? clear_bhb_loop+0x40/0x90 [ 615.267174][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.267190][ T7759] RIP: 0033:0x7fb46c99c799 [ 615.267204][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.267217][ T7759] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 615.267232][ T7759] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 615.267242][ T7759] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 615.267251][ T7759] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 615.267260][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.267269][ T7759] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 615.267289][ T7759] [ 615.267309][ T7759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 618.152294][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 620.747680][ T7814] FAULT_INJECTION: forcing a failure. [ 620.747680][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 620.835571][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT(full) [ 620.835610][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.835626][ T7814] Call Trace: [ 620.835633][ T7814] [ 620.835643][ T7814] dump_stack_lvl+0x100/0x190 [ 620.835690][ T7814] should_fail_ex.cold+0x5/0xa [ 620.835722][ T7814] ? tomoyo_realpath_from_path+0xb6/0x690 [ 620.835754][ T7814] should_failslab+0xc2/0x120 [ 620.835784][ T7814] __kmalloc_noprof+0xe0/0x850 [ 620.835831][ T7814] tomoyo_realpath_from_path+0xb6/0x690 [ 620.835872][ T7814] tomoyo_check_open_permission+0x2af/0x3c0 [ 620.835917][ T7814] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 620.835998][ T7814] ? do_raw_spin_lock+0x128/0x260 [ 620.836040][ T7814] ? path_get+0x61/0x80 [ 620.836076][ T7814] tomoyo_file_open+0x6b/0x90 [ 620.836114][ T7814] security_file_open+0xb5/0x1e0 [ 620.836146][ T7814] do_dentry_open+0x5aa/0x1660 [ 620.836176][ T7814] ? security_inode_permission+0xbf/0x250 [ 620.836230][ T7814] vfs_open+0x82/0x3f0 [ 620.836265][ T7814] path_openat+0x208c/0x31a0 [ 620.836305][ T7814] ? __pfx_path_openat+0x10/0x10 [ 620.836347][ T7814] do_file_open+0x20e/0x430 [ 620.836388][ T7814] ? __pfx_do_file_open+0x10/0x10 [ 620.836427][ T7814] ? __pfx_kfree_link+0x10/0x10 [ 620.836474][ T7814] ? alloc_fd+0x476/0x790 [ 620.836505][ T7814] ? do_getname+0x191/0x390 [ 620.836543][ T7814] do_sys_openat2+0x10d/0x1e0 [ 620.836580][ T7814] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.836631][ T7814] __x64_sys_openat+0x12d/0x210 [ 620.836669][ T7814] ? __pfx___x64_sys_openat+0x10/0x10 [ 620.836721][ T7814] do_syscall_64+0x106/0xf80 [ 620.836755][ T7814] ? clear_bhb_loop+0x40/0x90 [ 620.836791][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.836821][ T7814] RIP: 0033:0x7fd0edf9c799 [ 620.836844][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.836871][ T7814] RSP: 002b:00007fd0eedd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.836896][ T7814] RAX: ffffffffffffffda RBX: 00007fd0ee215fa0 RCX: 00007fd0edf9c799 [ 620.836915][ T7814] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 620.836934][ T7814] RBP: 00007fd0ee032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.836951][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.836965][ T7814] R13: 00007fd0ee216038 R14: 00007fd0ee215fa0 R15: 00007ffe8f1d7598 [ 620.837003][ T7814] [ 621.492723][ T7814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.802604][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 624.386818][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.393774][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.321631][ T7865] FAULT_INJECTION: forcing a failure. [ 625.321631][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 625.390906][ T7865] CPU: 0 UID: 0 PID: 7865 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT(full) [ 625.390930][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.390939][ T7865] Call Trace: [ 625.390944][ T7865] [ 625.390951][ T7865] dump_stack_lvl+0x100/0x190 [ 625.390979][ T7865] should_fail_ex.cold+0x5/0xa [ 625.390997][ T7865] should_failslab+0xc2/0x120 [ 625.391013][ T7865] __kmalloc_cache_noprof+0x7a/0x6f0 [ 625.391032][ T7865] ? proc_thread_self_get_link+0x1a6/0x210 [ 625.391057][ T7865] proc_thread_self_get_link+0x1a6/0x210 [ 625.391087][ T7865] pick_link+0xac2/0x13c0 [ 625.391108][ T7865] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 625.391132][ T7865] step_into_slowpath+0x9ba/0xf90 [ 625.391158][ T7865] ? __pfx_step_into_slowpath+0x10/0x10 [ 625.391181][ T7865] ? lookup_fast+0x2da/0x600 [ 625.391199][ T7865] ? inode_permission+0x374/0x620 [ 625.391220][ T7865] link_path_walk+0xf28/0x1cc0 [ 625.391248][ T7865] path_openat+0x1be/0x31a0 [ 625.391261][ T7865] ? kasan_save_stack+0x3f/0x50 [ 625.391281][ T7865] ? kasan_save_stack+0x30/0x50 [ 625.391301][ T7865] ? kasan_save_track+0x14/0x30 [ 625.391321][ T7865] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 625.391347][ T7865] ? __pfx_path_openat+0x10/0x10 [ 625.391368][ T7865] do_file_open+0x20e/0x430 [ 625.391384][ T7865] ? __pfx_do_file_open+0x10/0x10 [ 625.391412][ T7865] ? alloc_fd+0x476/0x790 [ 625.391428][ T7865] ? do_getname+0x191/0x390 [ 625.391447][ T7865] do_sys_openat2+0x10d/0x1e0 [ 625.391466][ T7865] ? __pfx_do_sys_openat2+0x10/0x10 [ 625.391492][ T7865] __x64_sys_openat+0x12d/0x210 [ 625.391511][ T7865] ? __pfx___x64_sys_openat+0x10/0x10 [ 625.391537][ T7865] do_syscall_64+0x106/0xf80 [ 625.391555][ T7865] ? clear_bhb_loop+0x40/0x90 [ 625.391576][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.391591][ T7865] RIP: 0033:0x7fb46c99c799 [ 625.391604][ T7865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.391618][ T7865] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 625.391632][ T7865] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 625.391642][ T7865] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 625.391651][ T7865] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 625.391660][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.391669][ T7865] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 625.391689][ T7865] [ 633.067060][ T7954] FAULT_INJECTION: forcing a failure. [ 633.067060][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 633.098681][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 633.098705][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.098714][ T7954] Call Trace: [ 633.098720][ T7954] [ 633.098726][ T7954] dump_stack_lvl+0x100/0x190 [ 633.098754][ T7954] should_fail_ex.cold+0x5/0xa [ 633.098771][ T7954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 633.098790][ T7954] should_failslab+0xc2/0x120 [ 633.098806][ T7954] __kmalloc_noprof+0xe0/0x850 [ 633.098835][ T7954] tomoyo_realpath_from_path+0xb6/0x690 [ 633.098857][ T7954] tomoyo_check_open_permission+0x2af/0x3c0 [ 633.098881][ T7954] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 633.098922][ T7954] ? do_raw_spin_lock+0x128/0x260 [ 633.098944][ T7954] ? path_get+0x61/0x80 [ 633.098962][ T7954] tomoyo_file_open+0x6b/0x90 [ 633.098981][ T7954] security_file_open+0xb5/0x1e0 [ 633.098998][ T7954] do_dentry_open+0x5aa/0x1660 [ 633.099014][ T7954] ? security_inode_permission+0xbf/0x250 [ 633.099039][ T7954] vfs_open+0x82/0x3f0 [ 633.099059][ T7954] path_openat+0x208c/0x31a0 [ 633.099081][ T7954] ? __pfx_path_openat+0x10/0x10 [ 633.099102][ T7954] do_file_open+0x20e/0x430 [ 633.099119][ T7954] ? __pfx_do_file_open+0x10/0x10 [ 633.099140][ T7954] ? __pfx_kfree_link+0x10/0x10 [ 633.099165][ T7954] ? alloc_fd+0x476/0x790 [ 633.099181][ T7954] ? do_getname+0x191/0x390 [ 633.099200][ T7954] do_sys_openat2+0x10d/0x1e0 [ 633.099218][ T7954] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.099244][ T7954] __x64_sys_openat+0x12d/0x210 [ 633.099263][ T7954] ? __pfx___x64_sys_openat+0x10/0x10 [ 633.099289][ T7954] do_syscall_64+0x106/0xf80 [ 633.099306][ T7954] ? clear_bhb_loop+0x40/0x90 [ 633.099324][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.099347][ T7954] RIP: 0033:0x7fb46c99c799 [ 633.099361][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.099375][ T7954] RSP: 002b:00007fb46d7e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 633.099389][ T7954] RAX: ffffffffffffffda RBX: 00007fb46cc15fa0 RCX: 00007fb46c99c799 [ 633.099398][ T7954] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 633.099408][ T7954] RBP: 00007fb46ca32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 633.099417][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.099425][ T7954] R13: 00007fb46cc16038 R14: 00007fb46cc15fa0 R15: 00007ffdf2c65f68 [ 633.099446][ T7954] [ 633.099452][ T7954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.686516][ T8030] FAULT_INJECTION: forcing a failure. [ 639.686516][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 639.729197][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.2.427 Not tainted syzkaller #0 PREEMPT(full) [ 639.729221][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.729231][ T8030] Call Trace: [ 639.729236][ T8030] [ 639.729242][ T8030] dump_stack_lvl+0x100/0x190 [ 639.729270][ T8030] should_fail_ex.cold+0x5/0xa [ 639.729289][ T8030] ? tomoyo_realpath_from_path+0xb6/0x690 [ 639.729306][ T8030] should_failslab+0xc2/0x120 [ 639.729321][ T8030] __kmalloc_noprof+0xe0/0x850 [ 639.729347][ T8030] tomoyo_realpath_from_path+0xb6/0x690 [ 639.729368][ T8030] tomoyo_check_open_permission+0x2af/0x3c0 [ 639.729392][ T8030] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 639.729442][ T8030] ? do_raw_spin_lock+0x128/0x260 [ 639.729466][ T8030] ? path_get+0x61/0x80 [ 639.729484][ T8030] tomoyo_file_open+0x6b/0x90 [ 639.729505][ T8030] security_file_open+0xb5/0x1e0 [ 639.729520][ T8030] do_dentry_open+0x5aa/0x1660 [ 639.729537][ T8030] ? security_inode_permission+0xbf/0x250 [ 639.729562][ T8030] vfs_open+0x82/0x3f0 [ 639.729583][ T8030] path_openat+0x208c/0x31a0 [ 639.729604][ T8030] ? __pfx_path_openat+0x10/0x10 [ 639.729626][ T8030] do_file_open+0x20e/0x430 [ 639.729642][ T8030] ? __pfx_do_file_open+0x10/0x10 [ 639.729663][ T8030] ? __pfx_kfree_link+0x10/0x10 [ 639.729688][ T8030] ? alloc_fd+0x476/0x790 [ 639.729704][ T8030] ? do_getname+0x191/0x390 [ 639.729723][ T8030] do_sys_openat2+0x10d/0x1e0 [ 639.729742][ T8030] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.729767][ T8030] __x64_sys_openat+0x12d/0x210 [ 639.729786][ T8030] ? __pfx___x64_sys_openat+0x10/0x10 [ 639.729812][ T8030] do_syscall_64+0x106/0xf80 [ 639.729830][ T8030] ? clear_bhb_loop+0x40/0x90 [ 639.729847][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.729862][ T8030] RIP: 0033:0x7f151c19c799 [ 639.729876][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.729889][ T8030] RSP: 002b:00007f151d07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.729904][ T8030] RAX: ffffffffffffffda RBX: 00007f151c415fa0 RCX: 00007f151c19c799 [ 639.729916][ T8030] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 639.729925][ T8030] RBP: 00007f151c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 639.729934][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.729942][ T8030] R13: 00007f151c416038 R14: 00007f151c415fa0 R15: 00007ffec1cd7778 [ 639.729961][ T8030] [ 639.729968][ T8030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 640.290755][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 644.534428][ T8084] FAULT_INJECTION: forcing a failure. [ 644.534428][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 644.578015][ T8084] CPU: 0 UID: 0 PID: 8084 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(full) [ 644.578053][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.578062][ T8084] Call Trace: [ 644.578068][ T8084] [ 644.578075][ T8084] dump_stack_lvl+0x100/0x190 [ 644.578103][ T8084] should_fail_ex.cold+0x5/0xa [ 644.578122][ T8084] should_failslab+0xc2/0x120 [ 644.578139][ T8084] __kmalloc_cache_noprof+0x7a/0x6f0 [ 644.578159][ T8084] ? proc_thread_self_get_link+0x1a6/0x210 [ 644.578185][ T8084] proc_thread_self_get_link+0x1a6/0x210 [ 644.578207][ T8084] pick_link+0xac2/0x13c0 [ 644.578227][ T8084] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 644.578251][ T8084] step_into_slowpath+0x9ba/0xf90 [ 644.578275][ T8084] ? __pfx_step_into_slowpath+0x10/0x10 [ 644.578299][ T8084] ? lookup_fast+0x2da/0x600 [ 644.578317][ T8084] ? inode_permission+0x374/0x620 [ 644.578338][ T8084] link_path_walk+0xf28/0x1cc0 [ 644.578369][ T8084] path_openat+0x1be/0x31a0 [ 644.578383][ T8084] ? kasan_save_stack+0x3f/0x50 [ 644.578403][ T8084] ? kasan_save_stack+0x30/0x50 [ 644.578424][ T8084] ? kasan_save_track+0x14/0x30 [ 644.578444][ T8084] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 644.578469][ T8084] ? __pfx_path_openat+0x10/0x10 [ 644.578491][ T8084] do_file_open+0x20e/0x430 [ 644.578507][ T8084] ? __pfx_do_file_open+0x10/0x10 [ 644.578536][ T8084] ? alloc_fd+0x476/0x790 [ 644.578552][ T8084] ? do_getname+0x191/0x390 [ 644.578570][ T8084] do_sys_openat2+0x10d/0x1e0 [ 644.578589][ T8084] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.578615][ T8084] __x64_sys_openat+0x12d/0x210 [ 644.578634][ T8084] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.578660][ T8084] do_syscall_64+0x106/0xf80 [ 644.578677][ T8084] ? clear_bhb_loop+0x40/0x90 [ 644.578695][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.578709][ T8084] RIP: 0033:0x7f5a54f9c799 [ 644.578722][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.578736][ T8084] RSP: 002b:00007f5a531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.578750][ T8084] RAX: ffffffffffffffda RBX: 00007f5a55215fa0 RCX: 00007f5a54f9c799 [ 644.578759][ T8084] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 644.578768][ T8084] RBP: 00007f5a55032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 644.578776][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.578785][ T8084] R13: 00007f5a55216038 R14: 00007f5a55215fa0 R15: 00007ffd94af23f8 [ 644.578804][ T8084] [ 645.490210][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 652.964166][ T8170] FAULT_INJECTION: forcing a failure. [ 652.964166][ T8170] name failslab, interval 1, probability 0, space 0, times 0 [ 652.979693][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(full) [ 652.979716][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.979726][ T8170] Call Trace: [ 652.979732][ T8170] [ 652.979738][ T8170] dump_stack_lvl+0x100/0x190 [ 652.979765][ T8170] should_fail_ex.cold+0x5/0xa [ 652.979784][ T8170] should_failslab+0xc2/0x120 [ 652.979799][ T8170] __kmalloc_cache_noprof+0x7a/0x6f0 [ 652.979819][ T8170] ? proc_thread_self_get_link+0x1a6/0x210 [ 652.979844][ T8170] proc_thread_self_get_link+0x1a6/0x210 [ 652.979866][ T8170] pick_link+0xac2/0x13c0 [ 652.979887][ T8170] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 652.979911][ T8170] step_into_slowpath+0x9ba/0xf90 [ 652.979936][ T8170] ? __pfx_step_into_slowpath+0x10/0x10 [ 652.979960][ T8170] ? lookup_fast+0x2da/0x600 [ 652.979978][ T8170] ? inode_permission+0x374/0x620 [ 652.979998][ T8170] link_path_walk+0xf28/0x1cc0 [ 652.980025][ T8170] path_openat+0x1be/0x31a0 [ 652.980039][ T8170] ? kasan_save_stack+0x3f/0x50 [ 652.980059][ T8170] ? kasan_save_stack+0x30/0x50 [ 652.980079][ T8170] ? kasan_save_track+0x14/0x30 [ 652.980100][ T8170] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 652.980135][ T8170] ? __pfx_path_openat+0x10/0x10 [ 652.980157][ T8170] do_file_open+0x20e/0x430 [ 652.980174][ T8170] ? __pfx_do_file_open+0x10/0x10 [ 652.980203][ T8170] ? alloc_fd+0x476/0x790 [ 652.980219][ T8170] ? do_getname+0x191/0x390 [ 652.980239][ T8170] do_sys_openat2+0x10d/0x1e0 [ 652.980258][ T8170] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.980283][ T8170] __x64_sys_openat+0x12d/0x210 [ 652.980303][ T8170] ? __pfx___x64_sys_openat+0x10/0x10 [ 652.980329][ T8170] do_syscall_64+0x106/0xf80 [ 652.980346][ T8170] ? clear_bhb_loop+0x40/0x90 [ 652.980364][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.980379][ T8170] RIP: 0033:0x7f5a54f9c799 [ 652.980392][ T8170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.980406][ T8170] RSP: 002b:00007f5a531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.980420][ T8170] RAX: ffffffffffffffda RBX: 00007f5a55215fa0 RCX: 00007f5a54f9c799 [ 652.980429][ T8170] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 652.980439][ T8170] RBP: 00007f5a55032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 652.980448][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.980457][ T8170] R13: 00007f5a55216038 R14: 00007f5a55215fa0 R15: 00007ffd94af23f8 [ 652.980477][ T8170] [ 654.416509][ T30] INFO: task kworker/u8:7:5959 blocked for more than 143 seconds. [ 654.426353][ T30] Not tainted syzkaller #0 [ 654.431323][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.440070][ T30] task:kworker/u8:7 state:D stack:25784 pid:5959 tgid:5959 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 654.456321][ T30] Workqueue: netns cleanup_net [ 654.461158][ T30] Call Trace: [ 654.464443][ T30] [ 654.469076][ T30] __schedule+0xfee/0x6120 [ 654.473564][ T30] ? __lock_acquire+0x4a5/0x2630 [ 654.479741][ T30] ? __pfx___schedule+0x10/0x10 [ 654.484956][ T30] ? find_held_lock+0x2b/0x80 [ 654.490414][ T30] ? schedule+0x2bf/0x390 [ 654.495071][ T30] schedule+0xdd/0x390 [ 654.500399][ T30] schedule_timeout+0x1b2/0x280 [ 654.506300][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 654.512604][ T30] ? mark_held_locks+0x40/0x70 [ 654.517580][ T30] __wait_for_common+0x2e7/0x4c0 [ 654.525397][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 654.535570][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 654.545972][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.556072][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 654.564165][ T30] __flush_workqueue+0x3f7/0x1200 [ 654.576286][ T30] ? __lock_acquire+0x4a5/0x2630 [ 654.581285][ T30] ? __lock_acquire+0x4a5/0x2630 [ 654.587634][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 654.593149][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 654.598532][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 654.604765][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 654.610765][ T30] rds_tcp_listen_stop+0x104/0x160 [ 654.615923][ T30] rds_tcp_exit_net+0xe0/0x870 [ 654.621108][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 654.626766][ T30] ? __pfx___might_resched+0x10/0x10 [ 654.632114][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 654.637924][ T30] ops_undo_list+0x2ee/0xab0 [ 654.642555][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 654.648104][ T30] ? cleanup_net+0x332/0x920 [ 654.652748][ T30] ? idr_destroy+0x62/0x2e0 [ 654.658186][ T30] cleanup_net+0x499/0x920 [ 654.662615][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 654.667598][ T30] ? rcu_is_watching+0x12/0xc0 [ 654.672396][ T30] process_one_work+0x9d7/0x1920 [ 654.677412][ T30] ? __pfx_process_one_work+0x10/0x10 [ 654.682820][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 654.687814][ T30] worker_thread+0x5da/0xe40 [ 654.692435][ T30] ? __pfx_worker_thread+0x10/0x10 [ 654.697626][ T30] ? kthread+0x13a/0x450 [ 654.701951][ T30] ? __pfx_worker_thread+0x10/0x10 [ 654.707941][ T30] kthread+0x370/0x450 [ 654.712055][ T30] ? __pfx_kthread+0x10/0x10 [ 654.716696][ T30] ret_from_fork+0x754/0xd80 [ 654.721316][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 654.726501][ T30] ? __switch_to+0x7b4/0x1120 [ 654.731283][ T30] ? __pfx_kthread+0x10/0x10 [ 654.735875][ T30] ret_from_fork_asm+0x1a/0x30 [ 654.740875][ T30] [ 654.743999][ T30] [ 654.743999][ T30] Showing all locks held in the system: [ 654.751828][ T30] 1 lock held by khungtaskd/30: [ 654.756723][ T30] #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 654.766624][ T30] 1 lock held by klogd/5181: [ 654.771221][ T30] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 654.781238][ T30] 2 locks held by getty/5585: [ 654.785914][ T30] #0: ffff8880377fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 654.795717][ T30] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 654.806711][ T30] 3 locks held by kworker/u8:7/5959: [ 654.812018][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 654.826274][ T30] #1: ffffc9000435fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 654.837393][ T30] #2: ffffffff905fac10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 654.846852][ T30] 1 lock held by syz.2.436/8073: [ 654.851808][ T30] #0: ffffffff905fac10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 654.861286][ T30] 1 lock held by syz.0.437/8071: [ 654.866270][ T30] #0: ffffffff905fac10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 654.875707][ T30] [ 654.878088][ T30] ============================================= [ 654.878088][ T30] [ 654.886602][ T30] NMI backtrace for cpu 1 [ 654.886617][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 654.886633][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.886642][ T30] Call Trace: [ 654.886648][ T30] [ 654.886654][ T30] dump_stack_lvl+0x100/0x190 [ 654.886681][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 654.886704][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.886727][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 654.886753][ T30] sys_info+0x141/0x190 [ 654.886773][ T30] watchdog+0xd25/0x1050 [ 654.886793][ T30] ? __pfx_watchdog+0x10/0x10 [ 654.886806][ T30] ? __kthread_parkme+0x18c/0x230 [ 654.886825][ T30] ? kthread+0x13a/0x450 [ 654.886841][ T30] ? __pfx_watchdog+0x10/0x10 [ 654.886853][ T30] kthread+0x370/0x450 [ 654.886871][ T30] ? __pfx_kthread+0x10/0x10 [ 654.886899][ T30] ret_from_fork+0x754/0xd80 [ 654.886935][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 654.886972][ T30] ? __switch_to+0x7b4/0x1120 [ 654.887004][ T30] ? __pfx_kthread+0x10/0x10 [ 654.887023][ T30] ret_from_fork_asm+0x1a/0x30 [ 654.887048][ T30] [ 654.887053][ T30] Sending NMI from CPU 1 to CPUs 0: [ 655.007513][ C0] NMI backtrace for cpu 0 [ 655.007532][ C0] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 655.007562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.007576][ C0] RIP: 0010:__schedule+0x3319/0x6120 [ 655.007607][ C0] Code: 00 48 8b 85 70 ff ff ff 48 8b b0 c0 05 00 00 48 85 f6 0f 84 7f 04 00 00 be 04 00 00 00 4c 89 e7 e8 5c b5 e5 f6 f0 41 ff 04 24 <48> b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f [ 655.007630][ C0] RSP: 0018:ffffc90002f0fac8 EFLAGS: 00000002 [ 655.007649][ C0] RAX: 0000000000000001 RBX: ffffffff8e497b80 RCX: ffffffff8b8df2c4 [ 655.007665][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880369e0c40 [ 655.007680][ C0] RBP: ffffc90002f0fc20 R08: 0000000000000001 R09: ffffed1006d3c188 [ 655.007696][ C0] R10: ffff8880369e0c43 R11: 0000000000000000 R12: ffff8880369e0c40 [ 655.007711][ C0] R13: ffff88807a8b6140 R14: ffffffff8e4975c0 R15: ffff8880b843b280 [ 655.007727][ C0] FS: 0000555564dac540(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 655.007750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.007766][ C0] CR2: 00007fb46cbe82f8 CR3: 00000000779fa000 CR4: 00000000003526f0 [ 655.007782][ C0] Call Trace: [ 655.007791][ C0] [ 655.007802][ C0] ? __lock_acquire+0x4a5/0x2630 [ 655.007835][ C0] ? tick_program_event+0xb0/0x140 [ 655.007864][ C0] ? __pfx___schedule+0x10/0x10 [ 655.007888][ C0] ? find_held_lock+0x2b/0x80 [ 655.007909][ C0] ? schedule+0x2bf/0x390 [ 655.007936][ C0] schedule+0xdd/0x390 [ 655.007960][ C0] do_nanosleep+0x206/0x560 [ 655.008005][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 655.008040][ C0] ? __asan_memset+0x23/0x50 [ 655.008072][ C0] ? __hrtimer_setup+0x178/0x280 [ 655.008104][ C0] hrtimer_nanosleep+0x156/0x360 [ 655.008139][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 655.008176][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 655.008208][ C0] ? get_timespec64+0x136/0x1b0 [ 655.008232][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 655.008259][ C0] common_nsleep+0xa1/0xd0 [ 655.008289][ C0] __x64_sys_clock_nanosleep+0x336/0x480 [ 655.008327][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 655.008370][ C0] do_syscall_64+0x106/0xf80 [ 655.008398][ C0] ? clear_bhb_loop+0x40/0x90 [ 655.008425][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.008450][ C0] RIP: 0033:0x7f1bc5d57917 [ 655.008467][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 655.008489][ C0] RSP: 002b:00007ffdadd22f30 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 655.008510][ C0] RAX: ffffffffffffffda RBX: 0000555564dac540 RCX: 00007f1bc5d57917 [ 655.008526][ C0] RDX: 00007ffdadd22f70 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.008543][ C0] RBP: 00007ffdadd23450 R08: 0000000000000000 R09: 0000000000000000 [ 655.008558][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 655.008572][ C0] R13: 00007ffdadd22fac R14: 00007ffdadd23040 R15: 0000000000000000 [ 655.008596][ C0] [ 655.319279][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 655.326336][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 655.335442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.345628][ T30] Call Trace: [ 655.348975][ T30] [ 655.351910][ T30] dump_stack_lvl+0x100/0x190 [ 655.356611][ T30] vpanic+0x552/0x970 [ 655.360598][ T30] ? __pfx_vpanic+0x10/0x10 [ 655.365109][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 655.371370][ T30] panic+0xd1/0xe0 [ 655.375096][ T30] ? __pfx_panic+0x10/0x10 [ 655.379521][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 655.385693][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 655.391861][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 655.398043][ T30] ? watchdog.cold+0x198/0x1ca [ 655.402815][ T30] ? watchdog+0xd35/0x1050 [ 655.407237][ T30] watchdog.cold+0x1a9/0x1ca [ 655.411934][ T30] ? __pfx_watchdog+0x10/0x10 [ 655.416615][ T30] ? __kthread_parkme+0x18c/0x230 [ 655.421651][ T30] ? kthread+0x13a/0x450 [ 655.425904][ T30] ? __pfx_watchdog+0x10/0x10 [ 655.430591][ T30] kthread+0x370/0x450 [ 655.434678][ T30] ? __pfx_kthread+0x10/0x10 [ 655.439279][ T30] ret_from_fork+0x754/0xd80 [ 655.443889][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 655.449032][ T30] ? __switch_to+0x7b4/0x1120 [ 655.453715][ T30] ? __pfx_kthread+0x10/0x10 [ 655.458326][ T30] ret_from_fork_asm+0x1a/0x30 [ 655.463112][ T30] [ 655.466423][ T30] Kernel Offset: disabled [ 655.470738][ T30] Rebooting in 86400 seconds..