last executing test programs: 5.521216003s ago: executing program 3 (id=1345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x20000000000, 0x40009, 0xdf, 0x8000000000000010, 0x7, 0x28000) write$auto(0x1, 0x0, 0x80000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) syz_open_procfs$namespace(0x0, 0x0) socket(0x2b, 0x1, 0x1) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x2003f0, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000e000)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x104}, 0x40) wait4$auto(0x0, &(0x7f00000000c0)=0x7fffffff, 0x6a069289, &(0x7f0000000180)={{0x0, 0x401}, {0xe, 0x9}, 0x6c6, 0x7fff, 0x48, 0x8, 0xc, 0x1, 0x5c60, 0x5, 0xff, 0x3, 0x10000, 0x7f, 0x1, 0x8}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000100)={0x3, 0x9f2, 0xe, 0x56, 0x200}) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) 5.397968072s ago: executing program 1 (id=1347): mmap$auto(0x0, 0x2020009, 0x6, 0xebd, 0xfffffffffffffffa, 0x40) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x0, 0x0) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYBLOB], 0x388}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x1374, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1355, 0x2, 0x0, 0x1, [@nested={0xfc, 0x56, 0x0, 0x1, [@generic="09dcda04d2c7538907ce6c6f9d99c220effcd02e2674dc8d15b067c08bd25b12a66f5844584dcf2090fb7e0d51af2b62e096e63c4ed8b472a1587009ac31d7dadf051f28cc3fe0c1c1899ced4005c824cdd3117356c71c0b8d775e274022de98923566739899", @generic="a338f1f4e802f650ba6ce697ea46789fd26d3d5c748e21bd231087f37e9ee54d31bd531396cb91f5feb697f5699e2ff064803aefb9e97d8d690819834fa5d93a99a3a9f413e8e0", @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xc3}, @nested={0x4, 0x17}, @generic="9eeeca042a79bfdc261eeabbe0337598c7d33ab8cbef22612ac8ad7db2b0f819d6abfc605d6502f55763ffadcaef73"]}, @generic="66980fc4e676669dbca00bc0585d363df0519ff51091a1e6e774825c1b401307bb57aa9b7b6f55f3f7cae75342c097d1129bee7fefaf3b5027f95a87453517afc22f43d89e38112f33f2d3a0f00376554726e9ede3dc8eaf385d9053b0b051f2094060081b8d546c6331aad75cccfad8e0c1", @generic="18ce8c13d15acde836cfab09f611eac72f89c695bfb5bdadfad7ecd4cf0cdf92ddddf5c0f9051966f8c9ab63d26f727dc4b68ecfb55872fe05830d1a648ff18aa554af30c7017b10306790d598de0753577960ebf18bf2d6f2e472b41fcde9385d9de3d71756bdc48d43bcd9c1d04ae88e2f65f5a3815de5fe57a313bd5e9d65c000ea0ced481b67591250a14228ce4227d0b54e59cb25a90f7cfdc5aefa3f64b87558933723b2698a75c5", @generic="c39362b169b54d642f4b6850d2a49badbc99695ec861fde1f25ae7e2ce24b052db388054392bea0e2158cb2528554749b6347808fdd47adfd3467a65ebb1503f424b3640accff152d74bf2c5e0657da3695b4c21e3042171e6a42f7d987179ce97803a19", @nested={0xca, 0xb9, 0x0, 0x1, [@nested={0x4, 0x14f}, @generic="6d12f0fb89ff6181e43eadc1655cf14563c1321562247be22ca632104b5c52cbb2b32fc8cd08c60b160de53f40e6dfe4e23cb5986a21c752bb687d075e5b59c3d6127d6db5ef8486553587de0014cd2e4390b43083e6fab13e8945bc96fcb416aa51e986677a22cf386b5ecb5361cf9861c425122c783cd4377d7bca0e50c4e163a3752f7bc3e98637b488df78ef66112b5f0db58f1f1a3efd2cd80b415cfa33bc93933b6dc05788e84d779d4d09ebb46e28033b5f140a7c59f3", @nested={0x4, 0x52}, @nested={0x4, 0x13e}]}, @nested={0x1008, 0xa0, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="6d19fbd3ad85b8fefd66ce4124d78d9225e14880d3d7b7a312a79f4d126c8eb82d5454bb410678bbd3d40bbaa6edd2d0f46103635035114ab762c6b6237d880ad4b74c87bf7c245346c3e49758a3a0a51269655e9f2cd76ad7b82f9a0a1e41943cf3c61beb3673b0809b9fc02a8eb054d13dc4b644f6b74f8b288e0bd397a3594fa34a46a7a3e9fd3211aafbd709bd4b9e7a932e81a2bb9abe0bd4a10ff12737149b36f023a288e893cd2eeaf525f200225bd469380e6b238ba317048ddf33dcd53c1025c73e2fa020e29da85c47a15fe606d6e9f98d2db53c1be314e02387a181bd650561efe55f436654ff6382d38115a47ee254b9e874a3709e00c5d6ac3415f4a99f54a91e59c86ebe5a1cefed89fecf16ddc6076c9bcc2216201c5d58e2cb50cb56a12ba3ddcc68eee80347e596b601cf348f8781dea784244bfdf123127dc453563b9c27d72a1ddf6a1f7ec9aaeed8d8bd6e64aca2ecb83cb22ed9deb9be0976a7568d82d10e4dddc758b76c030a1a3f0c99a1f0e1c2719629c08b0f95937eff2913363b1a10bd3ef12f4f7ad0ff82b495a2fa6e9cb162da78039e14d35883bad41560879dd774a33ec2d644e29f91a3954c7c655efa113ae3da79ac4736a939d57d063dafb340d39bea889172651bf9a6217c55d9f1096904227e17d9cb44d12a4bc8268f7a612d0f8d1df8bf1ffc87735625d04903b895cfc34d080a369e83f7d1bbcb13d4b1262e20e014aa61ed00eafb4edcdbed5caa2b1a7477d5d7766c63e6b1bcdac4d05e753527dab1d63d8de598b6570ff3f9348a78e0654a819065f94cc05e4ff443866794809c626eb8e8b10c4492f2f9d77d34ed4bb437c3eaac86432662a908bbf9618abc6b039b0689497e0d319578ad9af033e67099585ed68012115cc3b5ce2b3c16935c04f796e24f5f2480f27dd674626eb85a4e874b0a7311c64eb55f95fa321ba443263dbee25a01edca5e56070eae5d046b80d665ac8fcbc02de6f99ad264728ace7d84fa607ecb3555c8d8424ba7328de1e116af61a1490b7988eb9b05400de0c9b5545f7352cc0763e49a4f033d01b4540c5b55edaa16de0e641631a38bf5b54d2b650a08bc053ddf56b7ebb5b30e54bceae77112c7292aeefcbd8a040673bbd45edcad5f65f01467f9f5a7e53f99bdc85b6f3b43eed57e169a7547f9980d4c617befff72bab2343402bf93444c3d41b5b15717573c5a2b9e5b61b7319a23dbd5b307d9c7728eafc12fcc1fdc15bfe39e3654665c2b7521eafdfd66969e37187c269b2793660894ef0448d919282e39a5d9c84aed1eec86fcaa0f5c4194e0386248275f0978d8bd683a6d9c48280cfa5e012fb46538e883bed9ab33ce6666c907759b16714630bba1f05790c392f0822061fc842474b40650658616337bf6ac5de063cb45039bb7a72bebc51308df21b422380e3389b353a53b583e8ec5144597f49effeb3a277b3c087551157d04a1fd84d59fdf85c243ec92978a869f3ba0c72205e01834447f04df06278e27858a959fa2add8ab2e16a4e25b23b7725c927de858f6ae9913a6c71a530b16bce51556981a72f644757d4808b3e5c2642c51eb169f5702538b36068bb70ce34b0e9bb1ad29733dae244a8985ff2a94123d99957574e14cf5e1cc31ddf732f10f7f9d63feb70121df2667e4e447cf41aea9cb9b1392b0fbf9637e79f5818d912fdf95702632d3e64c9f3a6771f666fed2e577fef907b9fee445191837874624024dd66360d4729784588d7f56be83cdda264c8617f8ded3839935f9cd3cfa78a23350fbe52c6e3f56cae96c07c0e5f82fad2248f2e11a6934767db2fb4266ecebc97fc66e5a4b8eb6fa546236a347b68708d21f827e361eabbb170cc4d4e231b92d1c81ddd26682623fbe07ef7b0b679b084f40e9ff1600a4b391fb3e325e60b826b19ed83d46a0c477210ade4bf6960c723340bca2222efc8154d4fff46899d0b8e93bd288b21f2b7d7933c415bc125607e2f98d5b89d92dc28c447f2de4692ed005f504b0b7cf2173f866a624f0cafe5be11952fe29bbd3145a69a3778b1c7eef5e7df32be9ed562401dadaacb227b50ab54877fff94574fb616a3390d27cbdb683ae526064e473053016169e1de45b1acafcff8867d89f194891c730d7acfb13cb264e61e5fdc00a95df08297d8f59db9699224535e617143324daa3080d042a0b2477a7465251b834565e2f10cd53b4d1f56284cb91be719b44b9c767daa60a28341b06a3aad2b10b7d92db085e28668bfde5a8176a1e19e6e9f2b48f1446bdbc7278f8329fb4f858cc537dc02474febea53dd82880c740b42a802f61749bae70b7165c82a8f03f6ee76b8a7b08d5717f0b41b3a0e663aa82593aeba4e498e19c829c3b33340744666e9fa3e457c6c14ded4efa5f50e3c73b12bab23badb014b27933c5f56e31505d631c8939ef48cfda741c4a2d3c788c2a8d92e68ffe3550bb6271eb3ca769bf85e7695e25e5b9574bf82333ac59c640370d0d488f2d63f97ec8b300a947fe06fd2cd897718655c6afdfb8ff5dde603f848a6195baac6eef4bbccbf52b8285517ba41a40a2dbf27c28042c31a52a986ad06cdea453121a291832cad41b50ea4cf0f2023c944100f2903f2cfada274308abd8ba8d53ab917861702953e86e350786eea9d8adbfc16905af539361671531ab540eb96aaceef4c52cff8866df7a1ca2ebcec7e5e87c6dcdf2364c7a2e63084b32bc4ebb3435f2f25ddea835032621b271d5455340ece8218681b23cd7e89940a5a0fd039d7e775f262b959b24c705d2195eb049471fe3556f1c56f4f2f086255d5785220aa8320bacfdcf6958baf2c0efa34ef9e606184a48bdfac46a6af60305144ec853b5bf4d4fa9da03ceccbea7de32fe128e884513d1c6ddbc7d5c5970a1a464b3ef75b343a20ba1edb30362195e3714bd6fb62337c3bcc53ba07ee6bbaf35edbd5f91762b7a6490151930c881e70afb88af2de42517ba32acbb6a33ddb822dae89055cc19dfa111f79a32d9e7b302371cad87281283b55f3aff82682c6192b2e5b1e9cc8e7d569ae6b3204a8809841e87bd61c0e927b1cb1a255016605cb235a28cf2a5a1e9f8daf64de06f85de0dc5ace39ac1efd806f513531d0d0aa526645a9afda95a9a7eb451f0d0416593226122789b3c1d9dfe541563647b305249bf24e4f58f9b6bcc9ffee5315e6d90e8d38df87b283e4d609eb6cd033c4bfada473292c8a29be683f02fccafd164a3a8f8a58e1402ad9c4a082ae79607d161906dabc2a23bbe4796bc4cedcdbabc8c2add54fcbf502860ed38de65402eefab45c612f3c07286a9aef96da56003ce250d5ad277b7dc6f4eae11eadb5967d68f2f9a29eca9abadd9186479abc2675fb64f94613e5604abd1defff058d9b6634949bce48b9cd3e4dd79e1e1c050fd0d46a1348dd82e12d1baaefbc57e1df1b666add731a1e679f2b3fbcd1c0571410863994677a37f83e5cee3d3023a558b473f6c61713e5cfb31192cee63485ba3fbb47dd3241b030358ae2de01c67217b95734d8c0d106c60691c256533907f0766fe1a2ea8a152c382d2b747cd62ed7d902adea307c3ea6e851cf595a1dcefb5ae203f2d871f7ae9291d98bfc81765ef7605a1ac9523057428d931e52cf2ed69212f11d9b5caa6f7aada9d8bae3c73f21814124de8fc2ecbfd262f57919957001d93fa3fad180c0aba43a47364d89b6308e274d6ae8737042c1828b2e0b69a0045088d4128b231bc7c74b7d4e1d6043308041a0384d6f19aa7b773cbb3f4baf3159a5d062c9bafd496a1a3b58160a70cac42345f931f4f598c364bc415f5469fd8c16235875e860c91ace5a88986384efa2b3e81d7cc6f986286e0db6d34133d3e4977890ef8666e7fe77866ede5b187058d6663850ee89280ae4813933db2aa841992d44a6ed056871ae8408a84a6e0631934bdbb9b46f3ac7bacae94add1735c9ef08b87a285da468b1208e9bee9f95ad4859ac785c8d584a8d2eaaf9859ca839967c32431602312272e4648916e1dbb6aef36beab5a426377799c70e09ae18300e7a04563246d185dc4e62494d5a3fbf7da2dd275bba7f03e33d33f14a90007b1db1964c38ae5a07621539976be6b62d6763904cbedf003133003c1af91c1c033e16eff43271afa94ef5131f322aa9e5b616ff9ed0d357d449a115ae2637532ba9d06d74afbbfa83b47359f6f5d1d2e075b8c22300933e5aa115f544bee97054abf9fc02dd11b694186d03447ea778688065b15abcb4b4cf9c95a263ee3bfcea6c1f43cb420ba4c2faa0d92b12e681132f1c37630e8c20983e70445fbc6af44fc60ab603a1e2bc1904eaee8ea3819b3c9ff61c9e49eb6f3737a76514562e4aed8a8a9b5cb882083b288ef51d114ee3ed02674d49192c93f388c61d7c898d41cd69997d8106edc141abe47ff5e5e2b0c62a4ef642fd1aa890df365c2134a84c43b25624c4c5fe5c589fefceba5032006a85d713d6a38b2bed15c4d4587e0df9b73b02c04abc298cba19ede3f35a2a9d5d280ca6b2e0f24402aeb81ea89f4403d999a0f8805f7c87921b8fee9f6466c57a6904b8e0e4f28d8d0ed27ec3a70a225bc49833e54ec86a79d7ef236587ff79b1f4d4476b2c878d2dc0d39c5ee3a0012e38f33f7c47f61ecf0ae4bbacd4b9002020655138b0eacf098f3bf03d950062974677822fc3d796fef2b708b7d4ac0da827e3778cfd281b2a16cbce3fc2877632a530e5930531e9e6cd9675c03cc6772153b2eb79e5e09cfccc61c2c037c9908d1a570e3a4e71ae4277816e67ea8fcee519354321f041b57c1c852f4d0d2bac9fced2c91e90918369c16dd24ab0da55949d5ede81422e38d9773ad95447087b96d6c81a29e8d4adaec18a4deb3a59b4a8aaa6ed75eed250f453d0fbeda1625aabd72c62d909b278205101016c02cf03818c66d8444ade806adf5f71292f74d1d32c0f50e18f3ef9ef924879eaaa5d2799bf54e4e2c44f09ad7a040a1c71a3f2a7d8e4c889dccc30cc22d3f2de798d95b7453892004fafca68701092d1e427d4a9f09dda00f4bb6e837cd932f60f67f0e84008aa92c2f2323814e7fbc79154f0b9a223e6549ea3bc33872a003ce74aeff698668b9247ba01767c700a63fc29b0e330977e2d758aa3979d958ce5a6c8dcbfa951ba1cc67f19dcb2cbe12ac2decf94efdf48e514bc6aba670b13d2ce98584c95db7112fa0fd8bb01267228790bc7d01f38bb97134a5961686c57fa933af57e0e240133567cd82664eef6d7788c172e321827f463b0240cd8c3c6d1d0523874eacd7f6ff3a2534756bd3246144f02b5d7b12b9e329727104a9e09d16b3fdf67aa3fd5f47cbb2c0fb47690e7e8a414629c7f9fa11c40f9139b6e0754371f011ab48fa7a97c20dedf84318c82228d673f683dc8e18cc731e5f85eb00738b9a24dbeb97ecef372387d65fb9cd9f031b3c57083fde95b2d7c0a27385d83b71b16f58de99f02dc1bd17d172378e3ece86928e9d7e2d39866890c5b282cdf1d0c49d15881d03f18449422d39dd311f6196013372b717de46d7e0c93cb73c5d6d086f788575c360d3fd68186253ad65a44cb0d7d7b6e7644d3e6965186e6aeeee02d1b830ab2a177a03715c33b3c9fb433c80fc50c6e5fa4f4bf5fb7d356e15747612063854a1836192c30920800d3fd7cf1f757a3dc0ff1870c14b528f7f32069d3a004b6326dbc7b70ae5b23e240d9e6c6a62fc469ced91a59fd9a0261db31ad5cbf0989f58e737d454ce48"]}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "16be"}]}, 0x1374}, 0x1, 0x0, 0x0, 0x810}, 0x40004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000c00)) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) 5.269781318s ago: executing program 0 (id=1349): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r0, 0x0, 0x3ff) close_range$auto(0x2, r0, 0x0) socket(0x2, 0x1, 0x0) r1 = wait4$auto(0xffffffffffffffff, &(0x7f00000001c0), 0x5, &(0x7f0000000300)={{0x4, 0x2}, {0xfffffffffffffff9, 0x4}, 0x200, 0x7fffffffffffffff, 0x1, 0x9, 0xffffffff, 0x6fc, 0x7, 0x8, 0x1, 0x0, 0x4, 0x9, 0x3, 0x7f}) setpgid$auto(0x0, r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x2000, 0x0) 4.484408212s ago: executing program 0 (id=1350): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, 0x0) 4.266426736s ago: executing program 0 (id=1351): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb5, 0x401, 0x300000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x703, 0x70bd27, 0x25dfd9fc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) 4.201460309s ago: executing program 3 (id=1352): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/tx_lanes\x00', 0x141000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) socketpair$auto(0x20000003, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2480c2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 4.170054031s ago: executing program 1 (id=1353): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r0, 0x5420, &(0x7f0000000240)="7c595e5a92f0e28ff6f4ff30a979d2b7e57b1b612f4ae13d0bac342d2af639f678f784d49936e3d5b9cdab55bf9551428c5f53a38af84e07611a983b37c34af2a9af645497d98dde0feede674982cc77e75b107976a59c6440e6999b57784af7411221806552412524f5d2f406c9d8d0f738281dbe6ea5c496387d9cd94af720a15ebd3a577e597b928c497bbb7ed2d7626297d0a2a9731e0ad057ed5e5441399ecf612af8879b4ef204f28cb59235be50c58c4f6778ec21c66a62aac49d321ff1dadef74c64085e091ef3719f8630c415e325ad076ece09") mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x82, 0x0, 0x846f) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/interrupts\x00', 0x40440, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/mic/card0/reset\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x7) 3.857194458s ago: executing program 0 (id=1354): mmap$auto(0x0, 0x2020009, 0x6, 0xebd, 0xfffffffffffffffa, 0x40) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x0, 0x0) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYBLOB], 0x388}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x1374, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1355, 0x2, 0x0, 0x1, [@nested={0xf9, 0x56, 0x0, 0x1, [@generic="09dcda04d2c7538907ce6c6f9d99c220effcd02e2674dc8d15b067c08bd25b12a66f5844584dcf2090fb7e0d51af2b62e096e63c4ed8b472a1587009ac31d7dadf051f28cc3fe0c1c1899ced4005c824cdd3117356c71c0b8d775e274022de98923566", @generic="a338f1f4e802f650ba6ce697ea46789fd26d3d5c748e21bd231087f37e9ee54d31bd531396cb91f5feb697f5699e2ff064803aefb9e97d8d690819834fa5d93a99a3a9f413e8e0", @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xc3}, @nested={0x4, 0x17}, @generic="9eeeca042a79bfdc261eeabbe0337598c7d33ab8cbef22612ac8ad7db2b0f819d6abfc605d6502f55763ffadcaef73"]}, @generic="66980fc4e676669dbca00bc0585d363df0519ff51091a1e6e774825c1b401307bb57aa9b7b6f55f3f7cae75342c097d1129bee7fefaf3b5027f95a87453517afc22f43d89e38112f33f2d3a0f00376554726e9ede3dc8eaf385d9053b0b051f2094060081b8d546c6331aad75cccfad8e0c1", @generic="18ce8c13d15acde836cfab09f611eac72f89c695bfb5bdadfad7ecd4cf0cdf92ddddf5c0f9051966f8c9ab63d26f727dc4b68ecfb55872fe05830d1a648ff18aa554af30c7017b10306790d598de0753577960ebf18bf2d6f2e472b41fcde9385d9de3d71756bdc48d43bcd9c1d04ae88e2f65f5a3815de5fe57a313bd5e9d65c000ea0ced481b67591250a14228ce4227d0b54e59cb25a90f7cfdc5aefa3f64b87558933723b2698a75c5", @generic="c39362b169b54d642f4b6850d2a49badbc99695ec861fde1f25ae7e2ce24b052db388054392bea0e2158cb2528554749b6347808fdd47adfd3467a65ebb1503f424b3640accff152d74bf2c5e0657da3695b4c21e3042171e6a42f7d987179ce97803a19", @nested={0xca, 0xb9, 0x0, 0x1, [@nested={0x4, 0x14f}, @generic="6d12f0fb89ff6181e43eadc1655cf14563c1321562247be22ca632104b5c52cbb2b32fc8cd08c60b160de53f40e6dfe4e23cb5986a21c752bb687d075e5b59c3d6127d6db5ef8486553587de0014cd2e4390b43083e6fab13e8945bc96fcb416aa51e986677a22cf386b5ecb5361cf9861c425122c783cd4377d7bca0e50c4e163a3752f7bc3e98637b488df78ef66112b5f0db58f1f1a3efd2cd80b415cfa33bc93933b6dc05788e84d779d4d09ebb46e28033b5f140a7c59f3", @nested={0x4, 0x52}, @nested={0x4, 0x13e}]}, @nested={0x1008, 0xa0, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="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"]}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "16be"}]}, 0x1374}, 0x1, 0x0, 0x0, 0x810}, 0x40004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000c00)) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) 3.074000441s ago: executing program 1 (id=1356): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0) r0 = socket(0xa, 0x2, 0x3a) r1 = open_by_handle_at$auto(r0, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r2, &(0x7f00000001c0)=""/132, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r3, 0x0, 0x1ff, 0xf4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="9bff29bdffffff7fdfd576d03923"], 0x14}}, 0x0) setuid$auto(0x800000000008) r6 = memfd_secret$auto(0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0x1, 0x0) ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x79, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x80000012, 0x2, 0x4e4bcd3b, 0x8, 0x5, 0x4, 0x5, 0x12, 0xfffffffffffffffe, 0x1, 0xffffffff00000001, 0xe25, 0x48, 0x8]}, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0xa002, 0x0) acct$auto(&(0x7f00000000c0)='/dev/cachefiles\x00') r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000e6e5fa995b06629681a9efddc3f249aec8f10b88f1fea2177eb7779637b4dab589f96eba1104f6c0b782bbd5edd30cb0f49e7b0129c5b6508aa50704368d6eef49a787dfce343a0e7cf649bbd051d1223812b104856105ece77dec7bd84ab0a32c7054973111e8ef18eac03f83a2fdd9c93905698e41387cc03f2a412038f8fe0ffba244076f67538bb54fbf602c79447100691be3e6eb74a2d9c2a492d66556ca63b7b3a2a45b0f44ef949ad23828a9e934e45e8daecbced86dd84058bb", @ANYRES16=r7, @ANYBLOB="000429bd7000fbdbdf255300000005001e000400000006003600060000000600f70009090000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4011) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) 3.051427689s ago: executing program 2 (id=1357): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 3.017179552s ago: executing program 3 (id=1358): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) setsockopt$auto(0x3, 0x0, 0x3e, 0x0, 0x209) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r0, 0x5, 0x25, &(0x7f0000000000)='/sys/devices/virtual/iscsi_transport/iser/handle\x00', &(0x7f0000000180)) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0x101600, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 2.58540245s ago: executing program 2 (id=1359): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) 2.555195935s ago: executing program 0 (id=1360): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) read$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000200)=""/34, 0x22) pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200", @ANYRES32=r1, @ANYBLOB="060006ff050000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000380)='./file0/file0\x00', 0x552) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 1.853736995s ago: executing program 1 (id=1361): fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) write$auto(r1, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r2, 0x0, 0x4000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd3/state\x00', 0x301802, 0x0) write$auto(r4, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) r5 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r5, 0x0) 1.705939719s ago: executing program 2 (id=1362): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x7e, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 1.610919204s ago: executing program 3 (id=1363): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) 1.231186546s ago: executing program 1 (id=1364): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) mmap$auto(0x80000001, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x3) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) close_range$auto(0x2, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 662.047029ms ago: executing program 2 (id=1365): close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x7, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28341, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x149443, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r1, 0xc10c5541, r0) 529.220119ms ago: executing program 3 (id=1366): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) mmap$auto(0x0, 0x20009, 0xe2, 0x200000000000eb1, 0x405, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x2, 0x0) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(r2, 0x10f, 0x7f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002000000000000000000008869e71e0000", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880800030004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 504.013365ms ago: executing program 2 (id=1367): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2aa82, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x280, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, 0x0, 0x8014) write$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x10000000084, 0x7f, 0x0, 0xad4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000300)={0x63c002, 0x0, 0x8}, 0x18) mmap$auto(0x1, 0x8, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)="4d2f5e4f6fbc0b4f0a652f00aeadaf18") read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) 151.47544ms ago: executing program 0 (id=1368): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x8000009b72, 0x2, 0x8000) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r0, 0x0, 0xc3) 139.349147ms ago: executing program 3 (id=1369): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop2/queue/discard_max_hw_bytes\x00', 0x42200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) socketpair$auto(0x800, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 21.68821ms ago: executing program 1 (id=1370): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x2) connect$auto(r0, 0x0, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/snd_aloop.0/sound/card1/number\x00', 0x80000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x40, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x4, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x8]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 0s ago: executing program 2 (id=1371): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) kernel console output (not intermixed with test programs): c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.793892][T10503] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.793924][T10503] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 501.793947][T10503] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 501.793969][T10503] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 501.793988][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.794009][T10503] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 501.794053][T10503] [ 502.580713][T10513] FAULT_INJECTION: forcing a failure. [ 502.580713][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 502.618757][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.1.1052 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 502.618806][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.618829][T10513] Call Trace: [ 502.618841][T10513] [ 502.618856][T10513] dump_stack_lvl+0x16c/0x1f0 [ 502.618913][T10513] should_fail_ex+0x512/0x640 [ 502.618965][T10513] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 502.619005][T10513] should_failslab+0xc2/0x120 [ 502.619050][T10513] __kmalloc_cache_noprof+0x6a/0x3e0 [ 502.619086][T10513] ? do_signalfd4+0x172/0x420 [ 502.619124][T10513] do_signalfd4+0x172/0x420 [ 502.619161][T10513] __x64_sys_signalfd+0x120/0x1a0 [ 502.619195][T10513] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 502.619228][T10513] ? rcu_is_watching+0x12/0xc0 [ 502.619274][T10513] do_syscall_64+0xcd/0x230 [ 502.619327][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.619363][T10513] RIP: 0033:0x7f45ebb8e969 [ 502.619390][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.619433][T10513] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 502.619466][T10513] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 502.619489][T10513] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 502.619510][T10513] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 502.619531][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.619551][T10513] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 502.619595][T10513] [ 503.319694][T10526] FAULT_INJECTION: forcing a failure. [ 503.319694][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 503.368719][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.0.1056 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 503.368765][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.368785][T10526] Call Trace: [ 503.368797][T10526] [ 503.368810][T10526] dump_stack_lvl+0x16c/0x1f0 [ 503.368865][T10526] should_fail_ex+0x512/0x640 [ 503.368914][T10526] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 503.368962][T10526] should_failslab+0xc2/0x120 [ 503.369009][T10526] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 503.369057][T10526] ? kasprintf+0xc7/0x100 [ 503.369098][T10526] kvasprintf+0xbc/0x160 [ 503.369132][T10526] ? __pfx_kvasprintf+0x10/0x10 [ 503.369170][T10526] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.369218][T10526] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.369267][T10526] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.369328][T10526] kasprintf+0xc7/0x100 [ 503.369359][T10526] ? __pfx_kasprintf+0x10/0x10 [ 503.369403][T10526] ? __pfx_sta_info_cleanup+0x10/0x10 [ 503.369460][T10526] ieee80211_alloc_led_names+0x11b/0x420 [ 503.369517][T10526] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 503.369559][T10526] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 503.369627][T10526] ? __asan_memset+0x23/0x50 [ 503.369657][T10526] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 503.369716][T10526] hwsim_new_radio_nl+0xb51/0x12c0 [ 503.369766][T10526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 503.369823][T10526] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 503.369871][T10526] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 503.369925][T10526] genl_family_rcv_msg_doit+0x206/0x2f0 [ 503.369973][T10526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 503.370018][T10526] ? trace_cap_capable+0x18d/0x200 [ 503.370057][T10526] ? bpf_lsm_capable+0x9/0x10 [ 503.370087][T10526] ? security_capable+0x7e/0x260 [ 503.370119][T10526] ? ns_capable+0xd7/0x110 [ 503.370153][T10526] genl_rcv_msg+0x55c/0x800 [ 503.370201][T10526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.370244][T10526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 503.370274][T10526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 503.370347][T10526] ? __lock_acquire+0xaa4/0x1ba0 [ 503.370394][T10526] netlink_rcv_skb+0x16d/0x440 [ 503.370433][T10526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.370480][T10526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.370537][T10526] ? __pfx_down_read+0x10/0x10 [ 503.370567][T10526] ? netlink_deliver_tap+0x1ae/0xd30 [ 503.370620][T10526] genl_rcv+0x28/0x40 [ 503.370659][T10526] netlink_unicast+0x53a/0x7f0 [ 503.370702][T10526] ? __pfx_netlink_unicast+0x10/0x10 [ 503.370739][T10526] ? __lock_acquire+0xaa4/0x1ba0 [ 503.370786][T10526] netlink_sendmsg+0x8d1/0xdd0 [ 503.370831][T10526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.370884][T10526] ____sys_sendmsg+0xa95/0xc70 [ 503.370929][T10526] ? copy_msghdr_from_user+0x10a/0x160 [ 503.370963][T10526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.371024][T10526] ___sys_sendmsg+0x134/0x1d0 [ 503.371061][T10526] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.371139][T10526] __sys_sendmsg+0x16d/0x220 [ 503.371175][T10526] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.371210][T10526] ? __x64_sys_futex+0x1e0/0x4c0 [ 503.371251][T10526] ? rcu_is_watching+0x12/0xc0 [ 503.371288][T10526] do_syscall_64+0xcd/0x230 [ 503.371340][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.371370][T10526] RIP: 0033:0x7f8b2418e969 [ 503.371393][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.371420][T10526] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.371448][T10526] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 503.371468][T10526] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 503.371486][T10526] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 503.371504][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.371521][T10526] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 503.371559][T10526] [ 503.772167][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.677603][T10537] Setting dangerous option i915.mitigations - tainting kernel [ 505.558352][ T5838] Bluetooth: hci3: unexpected event 0x04 length: 442 > 10 [ 505.558429][ T5838] Bluetooth: unknown link type 178 [ 505.575236][ T5838] Bluetooth: hci3: connection err: -111 [ 505.785522][T10557] misc userio: The device must be registered before sending interrupts [ 506.146543][T10566] netlink: 194 bytes leftover after parsing attributes in process `syz.0.1070'. [ 506.634176][T10580] FAULT_INJECTION: forcing a failure. [ 506.634176][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 506.644291][T10582] WARNING! power/level is deprecated; use power/control instead [ 506.663871][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.3.1076 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 506.663929][T10580] Tainted: [U]=USER [ 506.663941][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.663961][T10580] Call Trace: [ 506.663972][T10580] [ 506.663986][T10580] dump_stack_lvl+0x16c/0x1f0 [ 506.664044][T10580] should_fail_ex+0x512/0x640 [ 506.664094][T10580] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 506.664144][T10580] should_failslab+0xc2/0x120 [ 506.664189][T10580] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 506.664235][T10580] ? kasprintf+0xc7/0x100 [ 506.664275][T10580] kvasprintf+0xbc/0x160 [ 506.664308][T10580] ? __pfx_kvasprintf+0x10/0x10 [ 506.664347][T10580] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 506.664393][T10580] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.664458][T10580] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 506.664512][T10580] kasprintf+0xc7/0x100 [ 506.664545][T10580] ? __pfx_kasprintf+0x10/0x10 [ 506.664590][T10580] ? __pfx_sta_info_cleanup+0x10/0x10 [ 506.664655][T10580] ieee80211_alloc_led_names+0x11b/0x420 [ 506.664716][T10580] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 506.664761][T10580] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 506.664837][T10580] ? __asan_memset+0x23/0x50 [ 506.664873][T10580] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 506.664944][T10580] hwsim_new_radio_nl+0xb51/0x12c0 [ 506.665005][T10580] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 506.665074][T10580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 506.665132][T10580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 506.665196][T10580] genl_family_rcv_msg_doit+0x206/0x2f0 [ 506.665253][T10580] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 506.665308][T10580] ? trace_cap_capable+0x18d/0x200 [ 506.665358][T10580] ? bpf_lsm_capable+0x9/0x10 [ 506.665393][T10580] ? security_capable+0x7e/0x260 [ 506.665439][T10580] ? ns_capable+0xd7/0x110 [ 506.665481][T10580] genl_rcv_msg+0x55c/0x800 [ 506.665540][T10580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.665591][T10580] ? __pfx___dev_queue_xmit+0x10/0x10 [ 506.665627][T10580] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 506.665683][T10580] ? __lock_acquire+0xaa4/0x1ba0 [ 506.665739][T10580] netlink_rcv_skb+0x16d/0x440 [ 506.665786][T10580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.665842][T10580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.665912][T10580] ? __pfx_down_read+0x10/0x10 [ 506.665947][T10580] ? netlink_deliver_tap+0x1ae/0xd30 [ 506.665999][T10580] genl_rcv+0x28/0x40 [ 506.666047][T10580] netlink_unicast+0x53a/0x7f0 [ 506.666098][T10580] ? __pfx_netlink_unicast+0x10/0x10 [ 506.666142][T10580] ? __lock_acquire+0xaa4/0x1ba0 [ 506.666199][T10580] netlink_sendmsg+0x8d1/0xdd0 [ 506.666253][T10580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.666318][T10580] ____sys_sendmsg+0xa95/0xc70 [ 506.666372][T10580] ? copy_msghdr_from_user+0x10a/0x160 [ 506.666421][T10580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.666481][T10580] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 506.666541][T10580] ___sys_sendmsg+0x134/0x1d0 [ 506.666587][T10580] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.666688][T10580] __sys_sendmsg+0x16d/0x220 [ 506.666733][T10580] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.666776][T10580] ? __x64_sys_futex+0x1e0/0x4c0 [ 506.666827][T10580] ? rcu_is_watching+0x12/0xc0 [ 506.666873][T10580] do_syscall_64+0xcd/0x230 [ 506.666930][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.666964][T10580] RIP: 0033:0x7f4ed758e969 [ 506.666991][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.667026][T10580] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.667059][T10580] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 506.667081][T10580] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 506.667103][T10580] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 506.667124][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.667144][T10580] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 506.667187][T10580] [ 507.073235][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.448685][T10568] ima: policy update failed [ 507.455062][ T30] audit: type=1802 audit(6043132638.011:3): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1072" res=0 errno=0 [ 508.642968][T10612] sp0: Synchronizing with TNC [ 510.124242][T10635] netlink: 194 bytes leftover after parsing attributes in process `syz.0.1094'. [ 511.854721][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.862637][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.348104][T10683] sp0: Synchronizing with TNC [ 513.384710][T10688] FAULT_INJECTION: forcing a failure. [ 513.384710][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 513.384775][T10688] CPU: 1 UID: 0 PID: 10688 Comm: syz.0.1108 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 513.384825][T10688] Tainted: [U]=USER [ 513.384835][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.384854][T10688] Call Trace: [ 513.384865][T10688] [ 513.384877][T10688] dump_stack_lvl+0x16c/0x1f0 [ 513.384939][T10688] should_fail_ex+0x512/0x640 [ 513.384989][T10688] ? __kmalloc_noprof+0xbf/0x510 [ 513.385031][T10688] ? vc_allocate+0x489/0x880 [ 513.385068][T10688] should_failslab+0xc2/0x120 [ 513.385109][T10688] __kmalloc_noprof+0xd2/0x510 [ 513.385156][T10688] vc_allocate+0x489/0x880 [ 513.385197][T10688] ? __pfx_vc_allocate+0x10/0x10 [ 513.385251][T10688] con_install+0xa1/0x600 [ 513.385294][T10688] ? __pfx_con_install+0x10/0x10 [ 513.385343][T10688] ? __pfx_con_install+0x10/0x10 [ 513.385390][T10688] tty_init_dev.part.0+0x99/0x500 [ 513.385441][T10688] tty_open+0xa50/0xf90 [ 513.385496][T10688] ? __pfx_tty_open+0x10/0x10 [ 513.385544][T10688] ? chrdev_open+0x58c/0x6a0 [ 513.385588][T10688] ? __pfx_tty_open+0x10/0x10 [ 513.385633][T10688] chrdev_open+0x234/0x6a0 [ 513.385673][T10688] ? __pfx_chrdev_open+0x10/0x10 [ 513.385717][T10688] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 513.385780][T10688] do_dentry_open+0x741/0x1c10 [ 513.385817][T10688] ? __pfx_chrdev_open+0x10/0x10 [ 513.385864][T10688] vfs_open+0x82/0x3f0 [ 513.385925][T10688] path_openat+0x1e5e/0x2d40 [ 513.385978][T10688] ? __pfx_path_openat+0x10/0x10 [ 513.386028][T10688] do_filp_open+0x20b/0x470 [ 513.386064][T10688] ? __pfx_do_filp_open+0x10/0x10 [ 513.386134][T10688] ? alloc_fd+0x471/0x7d0 [ 513.386205][T10688] do_sys_openat2+0x11b/0x1d0 [ 513.386252][T10688] ? __pfx_do_sys_openat2+0x10/0x10 [ 513.386318][T10688] __x64_sys_openat+0x174/0x210 [ 513.386367][T10688] ? __pfx___x64_sys_openat+0x10/0x10 [ 513.386417][T10688] ? rcu_is_watching+0x12/0xc0 [ 513.386462][T10688] do_syscall_64+0xcd/0x230 [ 513.386518][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.386553][T10688] RIP: 0033:0x7f8b2418e969 [ 513.386579][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.386613][T10688] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.386644][T10688] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 513.386667][T10688] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 513.386690][T10688] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 513.386711][T10688] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 513.386733][T10688] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 513.386778][T10688] [ 513.617077][T10690] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1107'. [ 514.172877][T10687] tty tty12: ldisc open failed (-12), clearing slot 11 [ 514.457562][T10700] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1113'. [ 514.505105][T10698] FAULT_INJECTION: forcing a failure. [ 514.505105][T10698] name failslab, interval 1, probability 0, space 0, times 0 [ 514.573307][T10698] CPU: 1 UID: 0 PID: 10698 Comm: syz.1.1111 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 514.573363][T10698] Tainted: [U]=USER [ 514.573374][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.573396][T10698] Call Trace: [ 514.573407][T10698] [ 514.573420][T10698] dump_stack_lvl+0x16c/0x1f0 [ 514.573478][T10698] should_fail_ex+0x512/0x640 [ 514.573543][T10698] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 514.573588][T10698] should_failslab+0xc2/0x120 [ 514.573632][T10698] __kmalloc_cache_node_noprof+0x6d/0x420 [ 514.573674][T10698] ? init_rescuer+0x1a4/0x640 [ 514.573731][T10698] init_rescuer+0x1a4/0x640 [ 514.573785][T10698] ? __pfx_init_rescuer+0x10/0x10 [ 514.573863][T10698] ? wq_adjust_max_active+0x39d/0x4a0 [ 514.573924][T10698] __alloc_workqueue+0xc37/0x1810 [ 514.573980][T10698] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.574034][T10698] alloc_workqueue+0xd2/0x200 [ 514.574078][T10698] ? __pfx_alloc_workqueue+0x10/0x10 [ 514.574135][T10698] ? __pfx___debug_object_init+0x10/0x10 [ 514.574188][T10698] nci_register_device+0x394/0xb80 [ 514.574238][T10698] ? __pfx_nci_register_device+0x10/0x10 [ 514.574291][T10698] ? lockdep_init_map_type+0x5c/0x280 [ 514.574350][T10698] virtual_ncidev_open+0x141/0x220 [ 514.574404][T10698] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 514.574455][T10698] misc_open+0x35d/0x420 [ 514.574490][T10698] ? __pfx_misc_open+0x10/0x10 [ 514.574530][T10698] chrdev_open+0x234/0x6a0 [ 514.574568][T10698] ? __pfx_apparmor_file_open+0x10/0x10 [ 514.574616][T10698] ? __pfx_chrdev_open+0x10/0x10 [ 514.574659][T10698] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 514.574722][T10698] do_dentry_open+0x741/0x1c10 [ 514.574762][T10698] ? __pfx_chrdev_open+0x10/0x10 [ 514.574810][T10698] vfs_open+0x82/0x3f0 [ 514.574863][T10698] path_openat+0x1e5e/0x2d40 [ 514.574916][T10698] ? __pfx_path_openat+0x10/0x10 [ 514.574964][T10698] do_filp_open+0x20b/0x470 [ 514.575001][T10698] ? __pfx_do_filp_open+0x10/0x10 [ 514.575071][T10698] ? alloc_fd+0x471/0x7d0 [ 514.575142][T10698] do_sys_openat2+0x11b/0x1d0 [ 514.575190][T10698] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.575255][T10698] __x64_sys_openat+0x174/0x210 [ 514.575305][T10698] ? __pfx___x64_sys_openat+0x10/0x10 [ 514.575359][T10698] ? rcu_is_watching+0x12/0xc0 [ 514.575407][T10698] do_syscall_64+0xcd/0x230 [ 514.575463][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.575506][T10698] RIP: 0033:0x7f45ebb8e969 [ 514.575534][T10698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.575569][T10698] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.575602][T10698] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 514.575626][T10698] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 514.575648][T10698] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 514.575670][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.575690][T10698] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 514.575735][T10698] [ 514.575749][T10698] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_rx_wq" [ 515.205294][T10710] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1117'. [ 516.389107][T10735] FAULT_INJECTION: forcing a failure. [ 516.389107][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 516.421394][T10735] CPU: 1 UID: 0 PID: 10735 Comm: syz.1.1125 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 516.421461][T10735] Tainted: [U]=USER [ 516.421473][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.421494][T10735] Call Trace: [ 516.421506][T10735] [ 516.421519][T10735] dump_stack_lvl+0x16c/0x1f0 [ 516.421576][T10735] should_fail_ex+0x512/0x640 [ 516.421627][T10735] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 516.421678][T10735] should_failslab+0xc2/0x120 [ 516.421722][T10735] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 516.421769][T10735] ? kasprintf+0xc7/0x100 [ 516.421809][T10735] kvasprintf+0xbc/0x160 [ 516.421843][T10735] ? __pfx_kvasprintf+0x10/0x10 [ 516.421880][T10735] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 516.421928][T10735] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.421976][T10735] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 516.422028][T10735] kasprintf+0xc7/0x100 [ 516.422065][T10735] ? __pfx_kasprintf+0x10/0x10 [ 516.422108][T10735] ? __pfx_sta_info_cleanup+0x10/0x10 [ 516.422174][T10735] ieee80211_alloc_led_names+0x11b/0x420 [ 516.422233][T10735] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 516.422279][T10735] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 516.422356][T10735] ? __asan_memset+0x23/0x50 [ 516.422390][T10735] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 516.422467][T10735] hwsim_new_radio_nl+0xb51/0x12c0 [ 516.422527][T10735] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.422597][T10735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 516.422653][T10735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 516.422720][T10735] genl_family_rcv_msg_doit+0x206/0x2f0 [ 516.422776][T10735] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.422830][T10735] ? trace_cap_capable+0x18d/0x200 [ 516.422879][T10735] ? bpf_lsm_capable+0x9/0x10 [ 516.422915][T10735] ? security_capable+0x7e/0x260 [ 516.422953][T10735] ? ns_capable+0xd7/0x110 [ 516.422995][T10735] genl_rcv_msg+0x55c/0x800 [ 516.423053][T10735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.423104][T10735] ? __pfx___dev_queue_xmit+0x10/0x10 [ 516.423139][T10735] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.423198][T10735] ? __lock_acquire+0xaa4/0x1ba0 [ 516.423253][T10735] netlink_rcv_skb+0x16d/0x440 [ 516.423300][T10735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.423354][T10735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.423423][T10735] ? __pfx_down_read+0x10/0x10 [ 516.423467][T10735] ? netlink_deliver_tap+0x1ae/0xd30 [ 516.423519][T10735] genl_rcv+0x28/0x40 [ 516.423565][T10735] netlink_unicast+0x53a/0x7f0 [ 516.423620][T10735] ? __pfx_netlink_unicast+0x10/0x10 [ 516.423663][T10735] ? __lock_acquire+0xaa4/0x1ba0 [ 516.423721][T10735] netlink_sendmsg+0x8d1/0xdd0 [ 516.423775][T10735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.423839][T10735] ____sys_sendmsg+0xa95/0xc70 [ 516.423889][T10735] ? copy_msghdr_from_user+0x10a/0x160 [ 516.423925][T10735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.423986][T10735] ___sys_sendmsg+0x134/0x1d0 [ 516.424023][T10735] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.424103][T10735] __sys_sendmsg+0x16d/0x220 [ 516.424139][T10735] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.424174][T10735] ? __x64_sys_futex+0x1e0/0x4c0 [ 516.424216][T10735] ? rcu_is_watching+0x12/0xc0 [ 516.424254][T10735] do_syscall_64+0xcd/0x230 [ 516.424299][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.424328][T10735] RIP: 0033:0x7f45ebb8e969 [ 516.424352][T10735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.424380][T10735] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.424407][T10735] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 516.424427][T10735] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 516.424452][T10735] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 516.424469][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.424486][T10735] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 516.424522][T10735] [ 517.507179][T10751] FAULT_INJECTION: forcing a failure. [ 517.507179][T10751] name failslab, interval 1, probability 0, space 0, times 0 [ 517.548742][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.3.1131 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 517.548796][T10751] Tainted: [U]=USER [ 517.548808][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.548828][T10751] Call Trace: [ 517.548841][T10751] [ 517.548853][T10751] dump_stack_lvl+0x16c/0x1f0 [ 517.548907][T10751] should_fail_ex+0x512/0x640 [ 517.548957][T10751] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 517.549006][T10751] should_failslab+0xc2/0x120 [ 517.549049][T10751] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 517.549095][T10751] ? kasprintf+0xc7/0x100 [ 517.549135][T10751] kvasprintf+0xbc/0x160 [ 517.549169][T10751] ? __pfx_kvasprintf+0x10/0x10 [ 517.549205][T10751] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 517.549252][T10751] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.549322][T10751] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 517.549374][T10751] kasprintf+0xc7/0x100 [ 517.549408][T10751] ? __pfx_kasprintf+0x10/0x10 [ 517.549451][T10751] ? __pfx_sta_info_cleanup+0x10/0x10 [ 517.549513][T10751] ieee80211_alloc_led_names+0x86/0x420 [ 517.549583][T10751] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 517.549629][T10751] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 517.549709][T10751] ? __asan_memset+0x23/0x50 [ 517.549746][T10751] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 517.549818][T10751] hwsim_new_radio_nl+0xb51/0x12c0 [ 517.549878][T10751] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 517.549949][T10751] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 517.550006][T10751] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 517.550070][T10751] genl_family_rcv_msg_doit+0x206/0x2f0 [ 517.550127][T10751] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 517.550182][T10751] ? trace_cap_capable+0x18d/0x200 [ 517.550228][T10751] ? bpf_lsm_capable+0x9/0x10 [ 517.550264][T10751] ? security_capable+0x7e/0x260 [ 517.550302][T10751] ? ns_capable+0xd7/0x110 [ 517.550345][T10751] genl_rcv_msg+0x55c/0x800 [ 517.550402][T10751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.550453][T10751] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.550495][T10751] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 517.550561][T10751] ? __lock_acquire+0xaa4/0x1ba0 [ 517.550615][T10751] netlink_rcv_skb+0x16d/0x440 [ 517.550664][T10751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.550719][T10751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.550790][T10751] ? __pfx_down_read+0x10/0x10 [ 517.550825][T10751] ? netlink_deliver_tap+0x1ae/0xd30 [ 517.550878][T10751] genl_rcv+0x28/0x40 [ 517.550925][T10751] netlink_unicast+0x53a/0x7f0 [ 517.550979][T10751] ? __pfx_netlink_unicast+0x10/0x10 [ 517.551022][T10751] ? __lock_acquire+0xaa4/0x1ba0 [ 517.551077][T10751] netlink_sendmsg+0x8d1/0xdd0 [ 517.551132][T10751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.551198][T10751] ____sys_sendmsg+0xa95/0xc70 [ 517.551252][T10751] ? copy_msghdr_from_user+0x10a/0x160 [ 517.551297][T10751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.551374][T10751] ___sys_sendmsg+0x134/0x1d0 [ 517.551420][T10751] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.551521][T10751] __sys_sendmsg+0x16d/0x220 [ 517.551575][T10751] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.551617][T10751] ? __x64_sys_futex+0x1e0/0x4c0 [ 517.551668][T10751] ? rcu_is_watching+0x12/0xc0 [ 517.551714][T10751] do_syscall_64+0xcd/0x230 [ 517.551769][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.551805][T10751] RIP: 0033:0x7f4ed758e969 [ 517.551833][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.551869][T10751] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.551902][T10751] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 517.551925][T10751] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 517.551948][T10751] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 517.551970][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.551990][T10751] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 517.552034][T10751] [ 520.607405][T10801] FAULT_INJECTION: forcing a failure. [ 520.607405][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 520.651542][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.1.1144 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 520.651601][T10801] Tainted: [U]=USER [ 520.651614][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.651635][T10801] Call Trace: [ 520.651647][T10801] [ 520.651660][T10801] dump_stack_lvl+0x16c/0x1f0 [ 520.651718][T10801] should_fail_ex+0x512/0x640 [ 520.651771][T10801] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 520.651811][T10801] should_failslab+0xc2/0x120 [ 520.651856][T10801] __kmalloc_cache_noprof+0x6a/0x3e0 [ 520.651888][T10801] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 520.651938][T10801] ? device_create_groups_vargs+0x8a/0x270 [ 520.651998][T10801] device_create_groups_vargs+0x8a/0x270 [ 520.652054][T10801] device_create+0xed/0x130 [ 520.652108][T10801] ? __pfx_device_create+0x10/0x10 [ 520.652170][T10801] ? do_init_timer+0xc9/0x110 [ 520.652211][T10801] ? ieee80211_roc_setup+0x136/0x270 [ 520.652267][T10801] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 520.652312][T10801] mac80211_hwsim_new_radio+0x369/0x54d0 [ 520.652391][T10801] ? __asan_memset+0x23/0x50 [ 520.652427][T10801] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 520.652506][T10801] hwsim_new_radio_nl+0xb51/0x12c0 [ 520.652568][T10801] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.652640][T10801] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 520.652699][T10801] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 520.652767][T10801] genl_family_rcv_msg_doit+0x206/0x2f0 [ 520.652827][T10801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.652882][T10801] ? trace_cap_capable+0x18d/0x200 [ 520.652932][T10801] ? bpf_lsm_capable+0x9/0x10 [ 520.652968][T10801] ? security_capable+0x7e/0x260 [ 520.653007][T10801] ? ns_capable+0xd7/0x110 [ 520.653049][T10801] genl_rcv_msg+0x55c/0x800 [ 520.653108][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.653160][T10801] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.653195][T10801] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.653256][T10801] ? __lock_acquire+0xaa4/0x1ba0 [ 520.653312][T10801] netlink_rcv_skb+0x16d/0x440 [ 520.653361][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.653415][T10801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.653492][T10801] ? __pfx_down_read+0x10/0x10 [ 520.653529][T10801] ? netlink_deliver_tap+0x1ae/0xd30 [ 520.653581][T10801] genl_rcv+0x28/0x40 [ 520.653630][T10801] netlink_unicast+0x53a/0x7f0 [ 520.653685][T10801] ? __pfx_netlink_unicast+0x10/0x10 [ 520.653731][T10801] ? __lock_acquire+0xaa4/0x1ba0 [ 520.653787][T10801] netlink_sendmsg+0x8d1/0xdd0 [ 520.653843][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.653909][T10801] ____sys_sendmsg+0xa95/0xc70 [ 520.653965][T10801] ? copy_msghdr_from_user+0x10a/0x160 [ 520.654010][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.654075][T10801] ? try_to_wake_up+0xa2f/0x1680 [ 520.654118][T10801] ___sys_sendmsg+0x134/0x1d0 [ 520.654165][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.654261][T10801] __sys_sendmsg+0x16d/0x220 [ 520.654306][T10801] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.654357][T10801] ? __x64_sys_futex+0x1e0/0x4c0 [ 520.654410][T10801] ? rcu_is_watching+0x12/0xc0 [ 520.654464][T10801] do_syscall_64+0xcd/0x230 [ 520.654521][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.654564][T10801] RIP: 0033:0x7f45ebb8e969 [ 520.654592][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.654627][T10801] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.654661][T10801] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 520.654684][T10801] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 520.654707][T10801] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 520.654729][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.654750][T10801] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 520.654795][T10801] [ 521.886014][T10826] FAULT_INJECTION: forcing a failure. [ 521.886014][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 521.886079][T10826] CPU: 1 UID: 0 PID: 10826 Comm: syz.2.1151 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 521.886129][T10826] Tainted: [U]=USER [ 521.886141][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.886161][T10826] Call Trace: [ 521.886173][T10826] [ 521.886186][T10826] dump_stack_lvl+0x16c/0x1f0 [ 521.886241][T10826] should_fail_ex+0x512/0x640 [ 521.886291][T10826] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 521.886340][T10826] should_failslab+0xc2/0x120 [ 521.886384][T10826] __kmalloc_cache_noprof+0x6a/0x3e0 [ 521.886421][T10826] ? snd_midi_event_new+0x6f/0x210 [ 521.886475][T10826] snd_midi_event_new+0x6f/0x210 [ 521.886524][T10826] snd_virmidi_input_open+0x107/0x4a0 [ 521.886583][T10826] open_substream+0x47b/0x9b0 [ 521.886643][T10826] rawmidi_open_priv+0x4db/0x6e0 [ 521.886688][T10826] snd_rawmidi_open+0x4cc/0xbf0 [ 521.886735][T10826] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 521.886775][T10826] ? __pfx_default_wake_function+0x10/0x10 [ 521.886818][T10826] ? kobject_get_unless_zero+0x156/0x1e0 [ 521.886881][T10826] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 521.886920][T10826] snd_open+0x1fe/0x450 [ 521.886969][T10826] ? __pfx_snd_open+0x10/0x10 [ 521.887016][T10826] chrdev_open+0x234/0x6a0 [ 521.887054][T10826] ? __pfx_apparmor_file_open+0x10/0x10 [ 521.887103][T10826] ? __pfx_chrdev_open+0x10/0x10 [ 521.887146][T10826] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 521.887207][T10826] do_dentry_open+0x741/0x1c10 [ 521.887245][T10826] ? __pfx_chrdev_open+0x10/0x10 [ 521.887292][T10826] vfs_open+0x82/0x3f0 [ 521.887352][T10826] path_openat+0x1e5e/0x2d40 [ 521.887406][T10826] ? __pfx_path_openat+0x10/0x10 [ 521.887454][T10826] do_filp_open+0x20b/0x470 [ 521.887490][T10826] ? __pfx_do_filp_open+0x10/0x10 [ 521.887559][T10826] ? alloc_fd+0x471/0x7d0 [ 521.887626][T10826] do_sys_openat2+0x11b/0x1d0 [ 521.887673][T10826] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.887723][T10826] ? find_held_lock+0x2b/0x80 [ 521.887770][T10826] __x64_sys_openat+0x174/0x210 [ 521.887818][T10826] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.887869][T10826] ? rcu_is_watching+0x12/0xc0 [ 521.887915][T10826] do_syscall_64+0xcd/0x230 [ 521.887969][T10826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.888004][T10826] RIP: 0033:0x7f7efb18e969 [ 521.888030][T10826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.888065][T10826] RSP: 002b:00007f7efbf81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.888098][T10826] RAX: ffffffffffffffda RBX: 00007f7efb3b5fa0 RCX: 00007f7efb18e969 [ 521.888121][T10826] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 521.888144][T10826] RBP: 00007f7efb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 521.888166][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.888188][T10826] R13: 0000000000000000 R14: 00007f7efb3b5fa0 R15: 00007ffeea5c3b38 [ 521.888233][T10826] [ 523.143780][T10839] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1164'. [ 523.162093][T10839] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1164'. [ 523.346908][ T5838] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 523.346955][ T5838] Bluetooth: hci1: unexpected subevent 0x0c length: 727 > 5 [ 523.370972][T10850] FAULT_INJECTION: forcing a failure. [ 523.370972][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 523.384410][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.1.1159 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 523.384465][T10850] Tainted: [U]=USER [ 523.384478][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.384499][T10850] Call Trace: [ 523.384513][T10850] [ 523.384527][T10850] dump_stack_lvl+0x16c/0x1f0 [ 523.384584][T10850] should_fail_ex+0x512/0x640 [ 523.384633][T10850] ? fs_reclaim_acquire+0xae/0x150 [ 523.384685][T10850] ? security_inode_init_security+0x13f/0x390 [ 523.384719][T10850] should_failslab+0xc2/0x120 [ 523.384761][T10850] __kmalloc_noprof+0xd2/0x510 [ 523.384811][T10850] security_inode_init_security+0x13f/0x390 [ 523.384850][T10850] ? __pfx_shmem_initxattrs+0x10/0x10 [ 523.384906][T10850] ? __pfx_security_inode_init_security+0x10/0x10 [ 523.384952][T10850] shmem_mknod+0x22e/0x450 [ 523.384991][T10850] vfs_create+0x4e0/0x7a0 [ 523.385049][T10850] do_mknodat+0x3d3/0x5d0 [ 523.385109][T10850] ? __pfx_do_mknodat+0x10/0x10 [ 523.385165][T10850] ? getname_flags.part.0+0x1c5/0x550 [ 523.385233][T10850] ? rcu_is_watching+0x12/0xc0 [ 523.385276][T10850] __x64_sys_mknod+0x87/0xb0 [ 523.385314][T10850] do_syscall_64+0xcd/0x230 [ 523.385371][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.385407][T10850] RIP: 0033:0x7f45ebb8e969 [ 523.385436][T10850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.385469][T10850] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 523.385501][T10850] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 523.385524][T10850] RDX: 000000007fffffff RSI: 0000000000000402 RDI: 0000000000000000 [ 523.385545][T10850] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 523.385566][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.385587][T10850] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 523.385634][T10850] [ 523.588411][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.942833][T10857] Process accounting resumed [ 524.335354][T10869] FAULT_INJECTION: forcing a failure. [ 524.335354][T10869] name failslab, interval 1, probability 0, space 0, times 0 [ 524.350096][T10869] CPU: 0 UID: 0 PID: 10869 Comm: syz.2.1166 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 524.350154][T10869] Tainted: [U]=USER [ 524.350178][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.350199][T10869] Call Trace: [ 524.350211][T10869] [ 524.350225][T10869] dump_stack_lvl+0x16c/0x1f0 [ 524.350282][T10869] should_fail_ex+0x512/0x640 [ 524.350332][T10869] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 524.350382][T10869] should_failslab+0xc2/0x120 [ 524.350427][T10869] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 524.350472][T10869] ? find_held_lock+0x2b/0x80 [ 524.350506][T10869] ? kstrdup_const+0x63/0x80 [ 524.350557][T10869] kstrdup+0x53/0x100 [ 524.350602][T10869] kstrdup_const+0x63/0x80 [ 524.350645][T10869] __kernfs_new_node+0x9b/0x8a0 [ 524.350684][T10869] ? __pfx___kernfs_new_node+0x10/0x10 [ 524.350731][T10869] ? find_held_lock+0x2b/0x80 [ 524.350766][T10869] ? kernfs_root+0xee/0x2a0 [ 524.350808][T10869] kernfs_new_node+0x13c/0x1e0 [ 524.350849][T10869] ? __mutex_trylock_common+0xe9/0x250 [ 524.350902][T10869] kernfs_create_dir_ns+0x4c/0x1a0 [ 524.350944][T10869] sysfs_create_dir_ns+0x13a/0x2b0 [ 524.351012][T10869] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 524.351065][T10869] ? find_held_lock+0x2b/0x80 [ 524.351105][T10869] ? class_dir_child_ns_type+0xd/0x60 [ 524.351157][T10869] kobject_add_internal+0x2c4/0x9b0 [ 524.351209][T10869] kobject_add+0x16e/0x240 [ 524.351242][T10869] ? __pfx_kobject_add+0x10/0x10 [ 524.351277][T10869] ? get_device_parent+0x1c5/0x4e0 [ 524.351323][T10869] ? kobject_put+0xab/0x5a0 [ 524.351365][T10869] device_add+0x288/0x1a70 [ 524.351418][T10869] ? __pfx_device_add+0x10/0x10 [ 524.351462][T10869] ? kfree+0x252/0x4d0 [ 524.351509][T10869] device_create_groups_vargs+0x1f8/0x270 [ 524.351567][T10869] device_create+0xed/0x130 [ 524.351618][T10869] ? __pfx_device_create+0x10/0x10 [ 524.351673][T10869] ? do_init_timer+0xc9/0x110 [ 524.351714][T10869] ? ieee80211_roc_setup+0x136/0x270 [ 524.351764][T10869] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 524.351809][T10869] mac80211_hwsim_new_radio+0x369/0x54d0 [ 524.351885][T10869] ? __asan_memset+0x23/0x50 [ 524.351921][T10869] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 524.351992][T10869] hwsim_new_radio_nl+0xb51/0x12c0 [ 524.352052][T10869] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.352119][T10869] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 524.352191][T10869] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 524.352256][T10869] genl_family_rcv_msg_doit+0x206/0x2f0 [ 524.352315][T10869] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.352370][T10869] ? trace_cap_capable+0x18d/0x200 [ 524.352418][T10869] ? bpf_lsm_capable+0x9/0x10 [ 524.352455][T10869] ? security_capable+0x7e/0x260 [ 524.352492][T10869] ? ns_capable+0xd7/0x110 [ 524.352533][T10869] genl_rcv_msg+0x55c/0x800 [ 524.352592][T10869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.352643][T10869] ? __pfx___dev_queue_xmit+0x10/0x10 [ 524.352679][T10869] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.352740][T10869] ? __lock_acquire+0xaa4/0x1ba0 [ 524.352792][T10869] netlink_rcv_skb+0x16d/0x440 [ 524.352840][T10869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.352895][T10869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.352965][T10869] ? __pfx_down_read+0x10/0x10 [ 524.353000][T10869] ? netlink_deliver_tap+0x1ae/0xd30 [ 524.353052][T10869] genl_rcv+0x28/0x40 [ 524.353099][T10869] netlink_unicast+0x53a/0x7f0 [ 524.353153][T10869] ? __pfx_netlink_unicast+0x10/0x10 [ 524.353208][T10869] ? __lock_acquire+0xaa4/0x1ba0 [ 524.353264][T10869] netlink_sendmsg+0x8d1/0xdd0 [ 524.353317][T10869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.353381][T10869] ____sys_sendmsg+0xa95/0xc70 [ 524.353434][T10869] ? copy_msghdr_from_user+0x10a/0x160 [ 524.353475][T10869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.353539][T10869] ? try_to_wake_up+0xa2f/0x1680 [ 524.353583][T10869] ___sys_sendmsg+0x134/0x1d0 [ 524.353628][T10869] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.353728][T10869] __sys_sendmsg+0x16d/0x220 [ 524.353772][T10869] ? __pfx___sys_sendmsg+0x10/0x10 [ 524.353816][T10869] ? __x64_sys_futex+0x1e0/0x4c0 [ 524.353867][T10869] ? rcu_is_watching+0x12/0xc0 [ 524.353913][T10869] do_syscall_64+0xcd/0x230 [ 524.353969][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.354004][T10869] RIP: 0033:0x7f7efb18e969 [ 524.354031][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.354064][T10869] RSP: 002b:00007f7efbf81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.354096][T10869] RAX: ffffffffffffffda RBX: 00007f7efb3b5fa0 RCX: 00007f7efb18e969 [ 524.354120][T10869] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 524.354142][T10869] RBP: 00007f7efb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 524.354164][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.354195][T10869] R13: 0000000000000000 R14: 00007f7efb3b5fa0 R15: 00007ffeea5c3b38 [ 524.354241][T10869] [ 524.354258][T10869] kobject: kobject_add_internal failed for hwsim159 (error: -12 parent: mac80211_hwsim) [ 526.513185][T10911] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1175'. [ 526.547890][T10911] ima: policy update failed [ 526.586377][ T30] audit: type=1802 audit(6043132657.141:4): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1175" res=0 errno=0 [ 526.701800][T10916] sp0: Synchronizing with TNC [ 527.687534][T10937] FAULT_INJECTION: forcing a failure. [ 527.687534][T10937] name failslab, interval 1, probability 0, space 0, times 0 [ 527.708811][T10937] CPU: 1 UID: 0 PID: 10937 Comm: syz.1.1183 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 527.708866][T10937] Tainted: [U]=USER [ 527.708877][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.708895][T10937] Call Trace: [ 527.708906][T10937] [ 527.708918][T10937] dump_stack_lvl+0x16c/0x1f0 [ 527.708969][T10937] should_fail_ex+0x512/0x640 [ 527.709013][T10937] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 527.709053][T10937] should_failslab+0xc2/0x120 [ 527.709097][T10937] __kmalloc_cache_noprof+0x6a/0x3e0 [ 527.709133][T10937] ? device_add+0xccc/0x1a70 [ 527.709180][T10937] device_add+0xccc/0x1a70 [ 527.709223][T10937] ? __pfx_device_add+0x10/0x10 [ 527.709261][T10937] ? kfree+0x252/0x4d0 [ 527.709303][T10937] device_create_groups_vargs+0x1f8/0x270 [ 527.709359][T10937] device_create+0xed/0x130 [ 527.709408][T10937] ? __pfx_device_create+0x10/0x10 [ 527.709464][T10937] ? do_init_timer+0xc9/0x110 [ 527.709506][T10937] ? ieee80211_roc_setup+0x136/0x270 [ 527.709555][T10937] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 527.709606][T10937] mac80211_hwsim_new_radio+0x369/0x54d0 [ 527.709685][T10937] ? __asan_memset+0x23/0x50 [ 527.709717][T10937] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 527.709783][T10937] hwsim_new_radio_nl+0xb51/0x12c0 [ 527.709839][T10937] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.709909][T10937] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 527.709962][T10937] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 527.710022][T10937] genl_family_rcv_msg_doit+0x206/0x2f0 [ 527.710073][T10937] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.710122][T10937] ? trace_cap_capable+0x18d/0x200 [ 527.710169][T10937] ? bpf_lsm_capable+0x9/0x10 [ 527.710217][T10937] ? security_capable+0x7e/0x260 [ 527.710254][T10937] ? ns_capable+0xd7/0x110 [ 527.710293][T10937] genl_rcv_msg+0x55c/0x800 [ 527.710349][T10937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.710397][T10937] ? __pfx___dev_queue_xmit+0x10/0x10 [ 527.710431][T10937] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.710506][T10937] ? __lock_acquire+0xaa4/0x1ba0 [ 527.710561][T10937] netlink_rcv_skb+0x16d/0x440 [ 527.710610][T10937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.710659][T10937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.710727][T10937] ? __pfx_down_read+0x10/0x10 [ 527.710762][T10937] ? netlink_deliver_tap+0x1ae/0xd30 [ 527.710812][T10937] genl_rcv+0x28/0x40 [ 527.710858][T10937] netlink_unicast+0x53a/0x7f0 [ 527.710909][T10937] ? __pfx_netlink_unicast+0x10/0x10 [ 527.710954][T10937] ? __lock_acquire+0xaa4/0x1ba0 [ 527.711016][T10937] netlink_sendmsg+0x8d1/0xdd0 [ 527.711070][T10937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.711132][T10937] ____sys_sendmsg+0xa95/0xc70 [ 527.711185][T10937] ? copy_msghdr_from_user+0x10a/0x160 [ 527.711228][T10937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.711305][T10937] ___sys_sendmsg+0x134/0x1d0 [ 527.711350][T10937] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.711446][T10937] __sys_sendmsg+0x16d/0x220 [ 527.711489][T10937] ? __pfx___sys_sendmsg+0x10/0x10 [ 527.711530][T10937] ? __x64_sys_futex+0x1e0/0x4c0 [ 527.711577][T10937] ? rcu_is_watching+0x12/0xc0 [ 527.711633][T10937] do_syscall_64+0xcd/0x230 [ 527.711689][T10937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.711726][T10937] RIP: 0033:0x7f45ebb8e969 [ 527.711754][T10937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.711788][T10937] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.711819][T10937] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 527.711841][T10937] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 527.711864][T10937] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 527.711886][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.711906][T10937] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 527.711952][T10937] [ 528.413157][T10943] FAULT_INJECTION: forcing a failure. [ 528.413157][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 528.524571][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.0.1185 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 528.524632][T10943] Tainted: [U]=USER [ 528.524645][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.524666][T10943] Call Trace: [ 528.524678][T10943] [ 528.524692][T10943] dump_stack_lvl+0x16c/0x1f0 [ 528.524750][T10943] should_fail_ex+0x512/0x640 [ 528.524802][T10943] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 528.524843][T10943] should_failslab+0xc2/0x120 [ 528.524889][T10943] __kmalloc_cache_noprof+0x6a/0x3e0 [ 528.524923][T10943] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 528.524972][T10943] ? device_create_groups_vargs+0x8a/0x270 [ 528.525033][T10943] device_create_groups_vargs+0x8a/0x270 [ 528.525091][T10943] device_create+0xed/0x130 [ 528.525143][T10943] ? __pfx_device_create+0x10/0x10 [ 528.525198][T10943] ? do_init_timer+0xc9/0x110 [ 528.525239][T10943] ? ieee80211_roc_setup+0x136/0x270 [ 528.525292][T10943] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 528.525337][T10943] mac80211_hwsim_new_radio+0x369/0x54d0 [ 528.525417][T10943] ? __asan_memset+0x23/0x50 [ 528.525452][T10943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 528.525523][T10943] hwsim_new_radio_nl+0xb51/0x12c0 [ 528.525596][T10943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.525667][T10943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 528.525724][T10943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 528.525792][T10943] genl_family_rcv_msg_doit+0x206/0x2f0 [ 528.525852][T10943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 528.525908][T10943] ? trace_cap_capable+0x18d/0x200 [ 528.525957][T10943] ? bpf_lsm_capable+0x9/0x10 [ 528.525994][T10943] ? security_capable+0x7e/0x260 [ 528.526032][T10943] ? ns_capable+0xd7/0x110 [ 528.526074][T10943] genl_rcv_msg+0x55c/0x800 [ 528.526133][T10943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.526185][T10943] ? __pfx___dev_queue_xmit+0x10/0x10 [ 528.526222][T10943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 528.526283][T10943] ? __lock_acquire+0xaa4/0x1ba0 [ 528.526338][T10943] netlink_rcv_skb+0x16d/0x440 [ 528.526383][T10943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.526437][T10943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.526509][T10943] ? __pfx_down_read+0x10/0x10 [ 528.526551][T10943] ? netlink_deliver_tap+0x1ae/0xd30 [ 528.526605][T10943] genl_rcv+0x28/0x40 [ 528.526654][T10943] netlink_unicast+0x53a/0x7f0 [ 528.526707][T10943] ? __pfx_netlink_unicast+0x10/0x10 [ 528.526753][T10943] ? __lock_acquire+0xaa4/0x1ba0 [ 528.526810][T10943] netlink_sendmsg+0x8d1/0xdd0 [ 528.526866][T10943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.526933][T10943] ____sys_sendmsg+0xa95/0xc70 [ 528.526987][T10943] ? copy_msghdr_from_user+0x10a/0x160 [ 528.527031][T10943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.527107][T10943] ___sys_sendmsg+0x134/0x1d0 [ 528.527154][T10943] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.527253][T10943] __sys_sendmsg+0x16d/0x220 [ 528.527299][T10943] ? __pfx___sys_sendmsg+0x10/0x10 [ 528.527341][T10943] ? __x64_sys_futex+0x1e0/0x4c0 [ 528.527392][T10943] ? rcu_is_watching+0x12/0xc0 [ 528.527440][T10943] do_syscall_64+0xcd/0x230 [ 528.527497][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.527534][T10943] RIP: 0033:0x7f8b2418e969 [ 528.527571][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.527606][T10943] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.527641][T10943] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 528.527664][T10943] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 528.527686][T10943] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 528.527708][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.527729][T10943] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 528.527774][T10943] [ 529.426882][T10958] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1189'. [ 529.567501][T10958] veth0_macvtap: left promiscuous mode [ 529.797574][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 530.162394][T10968] zswap: compressor not available [ 530.170146][T10970] Setting dangerous option i915.mitigations - tainting kernel [ 530.189442][T10974] FAULT_INJECTION: forcing a failure. [ 530.189442][T10974] name failslab, interval 1, probability 0, space 0, times 0 [ 530.231379][T10974] CPU: 1 UID: 0 PID: 10974 Comm: syz.1.1193 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 530.231434][T10974] Tainted: [U]=USER [ 530.231445][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.231474][T10974] Call Trace: [ 530.231487][T10974] [ 530.231500][T10974] dump_stack_lvl+0x16c/0x1f0 [ 530.231554][T10974] should_fail_ex+0x512/0x640 [ 530.231604][T10974] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 530.231656][T10974] should_failslab+0xc2/0x120 [ 530.231700][T10974] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 530.231758][T10974] ? kasprintf+0xc7/0x100 [ 530.231799][T10974] kvasprintf+0xbc/0x160 [ 530.231832][T10974] ? __pfx_kvasprintf+0x10/0x10 [ 530.231869][T10974] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 530.231916][T10974] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.231966][T10974] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 530.232022][T10974] kasprintf+0xc7/0x100 [ 530.232054][T10974] ? __pfx_kasprintf+0x10/0x10 [ 530.232096][T10974] ? __pfx_sta_info_cleanup+0x10/0x10 [ 530.232154][T10974] ieee80211_alloc_led_names+0x86/0x420 [ 530.232220][T10974] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 530.232266][T10974] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 530.232345][T10974] ? __asan_memset+0x23/0x50 [ 530.232383][T10974] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 530.232461][T10974] hwsim_new_radio_nl+0xb51/0x12c0 [ 530.232521][T10974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 530.232592][T10974] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 530.232648][T10974] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 530.232712][T10974] genl_family_rcv_msg_doit+0x206/0x2f0 [ 530.232771][T10974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 530.232824][T10974] ? trace_cap_capable+0x18d/0x200 [ 530.232873][T10974] ? bpf_lsm_capable+0x9/0x10 [ 530.232911][T10974] ? security_capable+0x7e/0x260 [ 530.232949][T10974] ? ns_capable+0xd7/0x110 [ 530.232990][T10974] genl_rcv_msg+0x55c/0x800 [ 530.233048][T10974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.233098][T10974] ? __pfx___dev_queue_xmit+0x10/0x10 [ 530.233134][T10974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 530.233193][T10974] ? __lock_acquire+0xaa4/0x1ba0 [ 530.233248][T10974] netlink_rcv_skb+0x16d/0x440 [ 530.233295][T10974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.233349][T10974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.233419][T10974] ? __pfx_down_read+0x10/0x10 [ 530.233464][T10974] ? netlink_deliver_tap+0x1ae/0xd30 [ 530.233518][T10974] genl_rcv+0x28/0x40 [ 530.233567][T10974] netlink_unicast+0x53a/0x7f0 [ 530.233619][T10974] ? __pfx_netlink_unicast+0x10/0x10 [ 530.233666][T10974] ? __lock_acquire+0xaa4/0x1ba0 [ 530.233724][T10974] netlink_sendmsg+0x8d1/0xdd0 [ 530.233779][T10974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.233846][T10974] ____sys_sendmsg+0xa95/0xc70 [ 530.233901][T10974] ? copy_msghdr_from_user+0x10a/0x160 [ 530.233944][T10974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.234021][T10974] ___sys_sendmsg+0x134/0x1d0 [ 530.234067][T10974] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.234169][T10974] __sys_sendmsg+0x16d/0x220 [ 530.234215][T10974] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.234259][T10974] ? __x64_sys_futex+0x1e0/0x4c0 [ 530.234310][T10974] ? rcu_is_watching+0x12/0xc0 [ 530.234358][T10974] do_syscall_64+0xcd/0x230 [ 530.234413][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.234455][T10974] RIP: 0033:0x7f45ebb8e969 [ 530.234484][T10974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.234519][T10974] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.234553][T10974] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 530.234576][T10974] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 530.234598][T10974] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 530.234620][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.234642][T10974] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 530.234687][T10974] [ 532.425715][T11010] bridge0: port 3(netdevsim1) entered blocking state [ 532.443701][T11010] bridge0: port 3(netdevsim1) entered disabled state [ 532.458932][T11010] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 532.487957][T11010] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 532.533541][T11010] bridge0: port 3(netdevsim1) entered blocking state [ 532.540908][T11010] bridge0: port 3(netdevsim1) entered forwarding state [ 533.640865][T11027] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 533.708257][T11027] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 534.969406][T11057] sd 0:0:1:0: PR command failed: 1026 [ 534.999137][T11057] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 535.019522][T11055] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1215'. [ 535.061892][T11057] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 535.277080][T11055] FAULT_INJECTION: forcing a failure. [ 535.277080][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 535.446881][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.0.1215 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 535.446939][T11055] Tainted: [U]=USER [ 535.446951][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.446972][T11055] Call Trace: [ 535.446984][T11055] [ 535.446998][T11055] dump_stack_lvl+0x16c/0x1f0 [ 535.447069][T11055] should_fail_ex+0x512/0x640 [ 535.447122][T11055] ? __kmalloc_noprof+0xbf/0x510 [ 535.447166][T11055] ? tnode_new+0x25a/0x340 [ 535.447198][T11055] should_failslab+0xc2/0x120 [ 535.447242][T11055] __kmalloc_noprof+0xd2/0x510 [ 535.447294][T11055] tnode_new+0x25a/0x340 [ 535.447334][T11055] resize+0x822/0x22a0 [ 535.447395][T11055] fib_insert_alias+0x9b9/0xe30 [ 535.447434][T11055] ? lockdep_rtnl_is_held+0x26/0x40 [ 535.447477][T11055] fib_trie_unmerge+0x2f9/0xcb0 [ 535.447527][T11055] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 535.447568][T11055] ? fib_newrule+0x1113/0x1e60 [ 535.447614][T11055] ? __pfx___mutex_lock+0x10/0x10 [ 535.447676][T11055] fib_unmerge+0xf8/0x520 [ 535.447721][T11055] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 535.447770][T11055] fib4_rule_configure+0x383/0x10c0 [ 535.447833][T11055] fib_newrule+0x34c/0x1e60 [ 535.447893][T11055] ? __pfx_fib_newrule+0x10/0x10 [ 535.447943][T11055] ? kmem_cache_free+0x2d4/0x4d0 [ 535.448017][T11055] ? find_held_lock+0x2b/0x80 [ 535.448076][T11055] ? __pfx_fib_nl_newrule+0x10/0x10 [ 535.448121][T11055] ? __pfx_fib_nl_newrule+0x10/0x10 [ 535.448164][T11055] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 535.448212][T11055] ? __pfx_fib_nl_newrule+0x10/0x10 [ 535.448260][T11055] rtnetlink_rcv_msg+0x95b/0xe90 [ 535.448310][T11055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.448381][T11055] netlink_rcv_skb+0x16d/0x440 [ 535.448429][T11055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.448479][T11055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.448553][T11055] ? netlink_deliver_tap+0x1ae/0xd30 [ 535.448604][T11055] netlink_unicast+0x53a/0x7f0 [ 535.448656][T11055] ? __pfx_netlink_unicast+0x10/0x10 [ 535.448702][T11055] ? __lock_acquire+0xaa4/0x1ba0 [ 535.448758][T11055] netlink_sendmsg+0x8d1/0xdd0 [ 535.448812][T11055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.448877][T11055] ____sys_sendmsg+0xa95/0xc70 [ 535.448931][T11055] ? copy_msghdr_from_user+0x10a/0x160 [ 535.448974][T11055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.449036][T11055] ? kfree+0x252/0x4d0 [ 535.449072][T11055] ? schedule+0x2d7/0x3a0 [ 535.449129][T11055] ___sys_sendmsg+0x134/0x1d0 [ 535.449177][T11055] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.449265][T11055] ? __pfx___might_resched+0x10/0x10 [ 535.449316][T11055] __sys_sendmmsg+0x200/0x420 [ 535.449366][T11055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 535.449426][T11055] ? __pfx_do_futex+0x10/0x10 [ 535.449486][T11055] ? xfd_validate_state+0x5d/0x180 [ 535.449523][T11055] ? rcu_is_watching+0x12/0xc0 [ 535.449564][T11055] __x64_sys_sendmmsg+0x9c/0x100 [ 535.449607][T11055] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.449655][T11055] do_syscall_64+0xcd/0x230 [ 535.449711][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.449746][T11055] RIP: 0033:0x7f8b2418e969 [ 535.449774][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.449807][T11055] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 535.449840][T11055] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 535.449863][T11055] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000008 [ 535.449884][T11055] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 535.449907][T11055] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 535.449928][T11055] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 535.449973][T11055] [ 536.726832][T11079] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1222'. [ 536.791019][T11080] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1222'. [ 538.330256][T11079] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1222'. [ 539.330263][T11109] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1230'. [ 539.623308][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 539.653092][T11117] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1233'. [ 539.670736][T11111] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 540.107163][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 540.781072][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 540.809916][T11148] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1242'. [ 543.478826][T11172] FAULT_INJECTION: forcing a failure. [ 543.478826][T11172] name fail_futex, interval 1, probability 0, space 0, times 1 [ 543.548804][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.1.1246 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 543.548862][T11172] Tainted: [U]=USER [ 543.548874][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.548894][T11172] Call Trace: [ 543.548905][T11172] [ 543.548919][T11172] dump_stack_lvl+0x16c/0x1f0 [ 543.548981][T11172] should_fail_ex+0x512/0x640 [ 543.549033][T11172] ? __pfx___futex_wait+0x10/0x10 [ 543.549085][T11172] get_futex_key+0x49e/0x1000 [ 543.549124][T11172] ? __pfx_futex_wake_mark+0x10/0x10 [ 543.549169][T11172] ? __pfx_get_futex_key+0x10/0x10 [ 543.549220][T11172] futex_wake+0xe7/0x4e0 [ 543.549269][T11172] ? __pfx_futex_wake+0x10/0x10 [ 543.549320][T11172] ? __lock_acquire+0x5ca/0x1ba0 [ 543.549375][T11172] do_futex+0x1e3/0x350 [ 543.549414][T11172] ? __pfx_do_futex+0x10/0x10 [ 543.549455][T11172] ? find_held_lock+0x2b/0x80 [ 543.549505][T11172] __x64_sys_futex+0x1e0/0x4c0 [ 543.549548][T11172] ? __fget_files+0x20e/0x3c0 [ 543.549581][T11172] ? __pfx___x64_sys_futex+0x10/0x10 [ 543.549638][T11172] do_syscall_64+0xcd/0x230 [ 543.549695][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.549732][T11172] RIP: 0033:0x7f45ebb8e969 [ 543.549760][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.549795][T11172] RSP: 002b:00007f45e99f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 543.549828][T11172] RAX: ffffffffffffffda RBX: 00007f45ebdb6088 RCX: 00007f45ebb8e969 [ 543.549850][T11172] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f45ebdb608c [ 543.549872][T11172] RBP: 00007f45ebdb6080 R08: 00007f45ec929000 R09: 0000000000000000 [ 543.549894][T11172] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f45ebdb608c [ 543.549917][T11172] R13: 0000000000000000 R14: 00007ffd5d50abd0 R15: 00007ffd5d50acb8 [ 543.549960][T11172] [ 543.951312][T11181] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1248'. [ 544.160929][T11181] veth1_macvtap: left promiscuous mode [ 544.187058][T11176] could not allocate digest TFM handle [ 544.200021][T11181] macsec0: entered allmulticast mode [ 544.374651][T11185] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1250'. [ 544.429273][T11185] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1250'. [ 545.046722][T11204] FAULT_INJECTION: forcing a failure. [ 545.046722][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 545.068862][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.2.1257 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 545.068916][T11204] Tainted: [U]=USER [ 545.068929][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.068948][T11204] Call Trace: [ 545.068961][T11204] [ 545.068974][T11204] dump_stack_lvl+0x16c/0x1f0 [ 545.069029][T11204] should_fail_ex+0x512/0x640 [ 545.069079][T11204] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 545.069118][T11204] should_failslab+0xc2/0x120 [ 545.069160][T11204] __kmalloc_cache_noprof+0x6a/0x3e0 [ 545.069195][T11204] ? nfc_allocate_device+0x15b/0x5e0 [ 545.069257][T11204] nfc_allocate_device+0x15b/0x5e0 [ 545.069310][T11204] ? __init_swait_queue_head+0xca/0x150 [ 545.069369][T11204] nci_allocate_device+0x23b/0x430 [ 545.069418][T11204] virtual_ncidev_open+0x6f/0x220 [ 545.069475][T11204] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 545.069527][T11204] misc_open+0x35d/0x420 [ 545.069563][T11204] ? __pfx_misc_open+0x10/0x10 [ 545.069596][T11204] chrdev_open+0x234/0x6a0 [ 545.069634][T11204] ? __pfx_apparmor_file_open+0x10/0x10 [ 545.069692][T11204] ? __pfx_chrdev_open+0x10/0x10 [ 545.069735][T11204] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 545.069799][T11204] do_dentry_open+0x741/0x1c10 [ 545.069837][T11204] ? __pfx_chrdev_open+0x10/0x10 [ 545.069885][T11204] vfs_open+0x82/0x3f0 [ 545.069936][T11204] path_openat+0x1e5e/0x2d40 [ 545.069989][T11204] ? __pfx_path_openat+0x10/0x10 [ 545.070037][T11204] do_filp_open+0x20b/0x470 [ 545.070073][T11204] ? __pfx_do_filp_open+0x10/0x10 [ 545.070140][T11204] ? alloc_fd+0x471/0x7d0 [ 545.070209][T11204] do_sys_openat2+0x11b/0x1d0 [ 545.070256][T11204] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.070307][T11204] ? __pfx___might_resched+0x10/0x10 [ 545.070359][T11204] __x64_sys_openat+0x174/0x210 [ 545.070409][T11204] ? __pfx___x64_sys_openat+0x10/0x10 [ 545.070462][T11204] ? rcu_is_watching+0x12/0xc0 [ 545.070510][T11204] do_syscall_64+0xcd/0x230 [ 545.070568][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.070605][T11204] RIP: 0033:0x7f7efb18e969 [ 545.070634][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.070678][T11204] RSP: 002b:00007f7efbf60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 545.070713][T11204] RAX: ffffffffffffffda RBX: 00007f7efb3b6080 RCX: 00007f7efb18e969 [ 545.070736][T11204] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 545.070760][T11204] RBP: 00007f7efb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 545.070781][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.070802][T11204] R13: 0000000000000000 R14: 00007f7efb3b6080 R15: 00007ffeea5c3b38 [ 545.070848][T11204] [ 545.234434][T11199] could not allocate digest TFM handle [ 546.679602][T11225] netlink: 'syz.0.1261': attribute type 5 has an invalid length. [ 546.687413][T11225] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 546.716101][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 546.740563][T11225] netlink: 'syz.0.1261': attribute type 5 has an invalid length. [ 546.773620][T11225] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 546.798803][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 546.914670][T11233] netlink: 'syz.2.1264': attribute type 5 has an invalid length. [ 546.922926][T11233] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1264'. [ 547.695187][ T30] audit: type=1800 audit(6043132678.251:5): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1267" name="dbroot" dev="configfs" ino=35331 res=0 errno=0 [ 547.958417][T11250] FAULT_INJECTION: forcing a failure. [ 547.958417][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 547.971579][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.3.1271 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 547.971634][T11250] Tainted: [U]=USER [ 547.971646][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.971666][T11250] Call Trace: [ 547.971678][T11250] [ 547.971692][T11250] dump_stack_lvl+0x16c/0x1f0 [ 547.971748][T11250] should_fail_ex+0x512/0x640 [ 547.971806][T11250] should_failslab+0xc2/0x120 [ 547.971851][T11250] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 547.971893][T11250] ? zswap_store+0x839/0x25c0 [ 547.971954][T11250] zswap_store+0x839/0x25c0 [ 547.972026][T11250] ? __pfx_zswap_store+0x10/0x10 [ 547.972075][T11250] ? do_raw_spin_lock+0x12c/0x2b0 [ 547.972125][T11250] ? find_held_lock+0x2b/0x80 [ 547.972170][T11250] ? folio_free_swap+0x171/0x580 [ 547.972217][T11250] ? do_raw_spin_unlock+0x172/0x230 [ 547.972268][T11250] ? swp_swap_info+0xce/0x130 [ 547.972314][T11250] ? __pfx_swp_swap_info+0x10/0x10 [ 547.972369][T11250] swap_writepage+0x3bd/0x1170 [ 547.972422][T11250] ? folio_clear_dirty_for_io+0x112/0x810 [ 547.972465][T11250] pageout+0x3b0/0xa90 [ 547.972502][T11250] ? __pfx_pageout+0x10/0x10 [ 547.972585][T11250] ? __pfx_try_to_unmap_one+0x10/0x10 [ 547.972621][T11250] ? __pfx_folio_not_mapped+0x10/0x10 [ 547.972651][T11250] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 547.972695][T11250] ? noop_dirty_folio+0x96/0xb0 [ 547.972752][T11250] shrink_folio_list+0x2f27/0x40e0 [ 547.972807][T11250] ? __pfx_shrink_folio_list+0x10/0x10 [ 547.972849][T11250] ? __lock_acquire+0x5b0/0x1ba0 [ 547.972899][T11250] ? stack_trace_save+0x8e/0xc0 [ 547.972936][T11250] ? __pfx_stack_trace_save+0x10/0x10 [ 547.972980][T11250] ? __lock_acquire+0x5ca/0x1ba0 [ 547.973030][T11250] ? find_held_lock+0x2b/0x80 [ 547.973066][T11250] ? __update_page_owner_handle+0x37c/0x530 [ 547.973144][T11250] ? __pfx___page_table_check_zero+0x10/0x10 [ 547.973209][T11250] reclaim_folio_list+0xd7/0x5d0 [ 547.973252][T11250] ? cgroup_rstat_updated+0x2a/0xb20 [ 547.973307][T11250] ? __pfx_reclaim_folio_list+0x10/0x10 [ 547.973363][T11250] ? lru_gen_update_size+0x543/0xe10 [ 547.973410][T11250] ? lru_gen_del_folio+0x32b/0x540 [ 547.973450][T11250] reclaim_pages+0x47b/0x650 [ 547.973493][T11250] ? __pfx_reclaim_pages+0x10/0x10 [ 547.973530][T11250] ? find_held_lock+0x2b/0x80 [ 547.973564][T11250] ? madvise_cold_or_pageout_pte_range+0x601/0x20f0 [ 547.973625][T11250] madvise_cold_or_pageout_pte_range+0x13a9/0x20f0 [ 547.973698][T11250] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 547.973771][T11250] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 547.973824][T11250] walk_pgd_range+0xba7/0x1a90 [ 547.973882][T11250] ? mt_find+0x3ef/0xa30 [ 547.973922][T11250] ? __pfx_walk_pgd_range+0x10/0x10 [ 547.973972][T11250] ? psi_task_switch+0x2c1/0x8e0 [ 547.974014][T11250] __walk_page_range+0x163/0x820 [ 547.974063][T11250] ? find_vma+0xbf/0x140 [ 547.974110][T11250] ? __pfx_find_vma+0x10/0x10 [ 547.974170][T11250] ? walk_page_test+0x9b/0x180 [ 547.974217][T11250] walk_page_range_mm+0x54d/0x8a0 [ 547.974267][T11250] ? __pfx_walk_page_range_mm+0x10/0x10 [ 547.974319][T11250] ? find_held_lock+0x2b/0x80 [ 547.974356][T11250] ? mlock_drain_local+0x22d/0x4f0 [ 547.974403][T11250] walk_page_range+0x63/0x90 [ 547.974452][T11250] madvise_pageout+0x316/0x800 [ 547.974505][T11250] ? __pfx_madvise_pageout+0x10/0x10 [ 547.974575][T11250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.974631][T11250] madvise_vma_behavior+0x416/0x1d50 [ 547.974688][T11250] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 547.974740][T11250] ? find_vma_prev+0xda/0x160 [ 547.974792][T11250] ? __pfx_find_vma_prev+0x10/0x10 [ 547.974859][T11250] ? futex_wait+0x120/0x380 [ 547.974913][T11250] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 547.974962][T11250] madvise_walk_vmas+0x1d1/0x2c0 [ 547.975011][T11250] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 547.975071][T11250] madvise_do_behavior+0x12b/0x3b0 [ 547.975117][T11250] ? __pfx___might_resched+0x10/0x10 [ 547.975167][T11250] ? __pfx_madvise_do_behavior+0x10/0x10 [ 547.975245][T11250] do_madvise+0x10b/0x170 [ 547.975296][T11250] __x64_sys_madvise+0xa9/0x110 [ 547.975346][T11250] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.975395][T11250] do_syscall_64+0xcd/0x230 [ 547.975453][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.975488][T11250] RIP: 0033:0x7f4ed758e969 [ 547.975517][T11250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.975550][T11250] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 547.975582][T11250] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 547.975605][T11250] RDX: 0000000000000015 RSI: 0000000000000005 RDI: 0000000000000000 [ 547.975630][T11250] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 547.975651][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.975671][T11250] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 547.975716][T11250] [ 548.571835][T11258] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1274'. [ 548.583070][T11258] FAULT_INJECTION: forcing a failure. [ 548.583070][T11258] name failslab, interval 1, probability 0, space 0, times 0 [ 548.596446][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.1.1274 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 548.596501][T11258] Tainted: [U]=USER [ 548.596513][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.596533][T11258] Call Trace: [ 548.596545][T11258] [ 548.596557][T11258] dump_stack_lvl+0x16c/0x1f0 [ 548.596613][T11258] should_fail_ex+0x512/0x640 [ 548.596663][T11258] ? __kmalloc_noprof+0xbf/0x510 [ 548.596706][T11258] ? tnode_new+0x25a/0x340 [ 548.596737][T11258] should_failslab+0xc2/0x120 [ 548.596781][T11258] __kmalloc_noprof+0xd2/0x510 [ 548.596833][T11258] tnode_new+0x25a/0x340 [ 548.596869][T11258] resize+0x7a9/0x22a0 [ 548.596925][T11258] fib_insert_alias+0x9b9/0xe30 [ 548.596963][T11258] ? lockdep_rtnl_is_held+0x26/0x40 [ 548.597007][T11258] fib_trie_unmerge+0x2f9/0xcb0 [ 548.597056][T11258] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 548.597096][T11258] ? fib_newrule+0x1113/0x1e60 [ 548.597142][T11258] ? __pfx___mutex_lock+0x10/0x10 [ 548.597204][T11258] fib_unmerge+0xf8/0x520 [ 548.597258][T11258] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 548.597308][T11258] fib4_rule_configure+0x383/0x10c0 [ 548.597371][T11258] fib_newrule+0x34c/0x1e60 [ 548.597428][T11258] ? __pfx_fib_newrule+0x10/0x10 [ 548.597477][T11258] ? kmem_cache_free+0x2d4/0x4d0 [ 548.597551][T11258] ? find_held_lock+0x2b/0x80 [ 548.597583][T11258] ? __pfx_fib_nl_newrule+0x10/0x10 [ 548.597625][T11258] ? __pfx_fib_nl_newrule+0x10/0x10 [ 548.597668][T11258] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 548.597715][T11258] ? __pfx_fib_nl_newrule+0x10/0x10 [ 548.597760][T11258] rtnetlink_rcv_msg+0x95b/0xe90 [ 548.597809][T11258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.597875][T11258] netlink_rcv_skb+0x16d/0x440 [ 548.597921][T11258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.597968][T11258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.598038][T11258] ? netlink_deliver_tap+0x1ae/0xd30 [ 548.598090][T11258] netlink_unicast+0x53a/0x7f0 [ 548.598139][T11258] ? __pfx_netlink_unicast+0x10/0x10 [ 548.598181][T11258] ? __lock_acquire+0xaa4/0x1ba0 [ 548.598247][T11258] netlink_sendmsg+0x8d1/0xdd0 [ 548.598303][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.598368][T11258] ____sys_sendmsg+0xa95/0xc70 [ 548.598423][T11258] ? copy_msghdr_from_user+0x10a/0x160 [ 548.598465][T11258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.598523][T11258] ? kfree+0x252/0x4d0 [ 548.598550][T11258] ? schedule+0x2d7/0x3a0 [ 548.598608][T11258] ___sys_sendmsg+0x134/0x1d0 [ 548.598654][T11258] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.598739][T11258] ? __pfx___might_resched+0x10/0x10 [ 548.598788][T11258] __sys_sendmmsg+0x200/0x420 [ 548.598838][T11258] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.598895][T11258] ? __pfx_do_futex+0x10/0x10 [ 548.598954][T11258] ? xfd_validate_state+0x5d/0x180 [ 548.598990][T11258] ? rcu_is_watching+0x12/0xc0 [ 548.599031][T11258] __x64_sys_sendmmsg+0x9c/0x100 [ 548.599073][T11258] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.599122][T11258] do_syscall_64+0xcd/0x230 [ 548.599179][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.599221][T11258] RIP: 0033:0x7f45ebb8e969 [ 548.599249][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.599284][T11258] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 548.599317][T11258] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 548.599339][T11258] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000008 [ 548.599361][T11258] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 548.599384][T11258] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 548.599405][T11258] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 548.599450][T11258] [ 549.409660][T11262] FAULT_INJECTION: forcing a failure. [ 549.409660][T11262] name failslab, interval 1, probability 0, space 0, times 0 [ 549.450870][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.3.1275 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 549.450929][T11262] Tainted: [U]=USER [ 549.450941][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.450961][T11262] Call Trace: [ 549.450973][T11262] [ 549.450986][T11262] dump_stack_lvl+0x16c/0x1f0 [ 549.451043][T11262] should_fail_ex+0x512/0x640 [ 549.451097][T11262] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 549.451137][T11262] should_failslab+0xc2/0x120 [ 549.451181][T11262] __kmalloc_cache_noprof+0x6a/0x3e0 [ 549.451219][T11262] ? nfc_allocate_device+0x15b/0x5e0 [ 549.451281][T11262] nfc_allocate_device+0x15b/0x5e0 [ 549.451343][T11262] ? __init_swait_queue_head+0xca/0x150 [ 549.451407][T11262] nci_allocate_device+0x23b/0x430 [ 549.451455][T11262] virtual_ncidev_open+0x6f/0x220 [ 549.451508][T11262] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 549.451559][T11262] misc_open+0x35d/0x420 [ 549.451592][T11262] ? __pfx_misc_open+0x10/0x10 [ 549.451625][T11262] chrdev_open+0x234/0x6a0 [ 549.451663][T11262] ? __pfx_apparmor_file_open+0x10/0x10 [ 549.451710][T11262] ? __pfx_chrdev_open+0x10/0x10 [ 549.451751][T11262] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 549.451812][T11262] do_dentry_open+0x741/0x1c10 [ 549.451850][T11262] ? __pfx_chrdev_open+0x10/0x10 [ 549.451896][T11262] vfs_open+0x82/0x3f0 [ 549.451947][T11262] path_openat+0x1e5e/0x2d40 [ 549.451995][T11262] ? __pfx_path_openat+0x10/0x10 [ 549.452040][T11262] do_filp_open+0x20b/0x470 [ 549.452075][T11262] ? __pfx_do_filp_open+0x10/0x10 [ 549.452139][T11262] ? alloc_fd+0x471/0x7d0 [ 549.452211][T11262] do_sys_openat2+0x11b/0x1d0 [ 549.452258][T11262] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.452319][T11262] __x64_sys_openat+0x174/0x210 [ 549.452374][T11262] ? __pfx___x64_sys_openat+0x10/0x10 [ 549.452421][T11262] ? rcu_is_watching+0x12/0xc0 [ 549.452465][T11262] do_syscall_64+0xcd/0x230 [ 549.452519][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.452553][T11262] RIP: 0033:0x7f4ed758e969 [ 549.452581][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.452615][T11262] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.452647][T11262] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 549.452670][T11262] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 549.452693][T11262] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 549.452714][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.452734][T11262] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 549.452778][T11262] [ 551.403346][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 553.769990][T11313] Falling back ldisc for ttyS2. [ 553.939541][T11315] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 554.841498][T11338] FAULT_INJECTION: forcing a failure. [ 554.841498][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 554.888686][T11338] CPU: 1 UID: 0 PID: 11338 Comm: syz.0.1294 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 554.888748][T11338] Tainted: [U]=USER [ 554.888760][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.888779][T11338] Call Trace: [ 554.888791][T11338] [ 554.888804][T11338] dump_stack_lvl+0x16c/0x1f0 [ 554.888861][T11338] should_fail_ex+0x512/0x640 [ 554.888909][T11338] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 554.888950][T11338] should_failslab+0xc2/0x120 [ 554.888993][T11338] __kmalloc_cache_noprof+0x6a/0x3e0 [ 554.889030][T11338] ? virtual_ncidev_open+0x49/0x220 [ 554.889090][T11338] virtual_ncidev_open+0x49/0x220 [ 554.889142][T11338] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 554.889195][T11338] misc_open+0x35d/0x420 [ 554.889229][T11338] ? __pfx_misc_open+0x10/0x10 [ 554.889262][T11338] chrdev_open+0x234/0x6a0 [ 554.889300][T11338] ? __pfx_apparmor_file_open+0x10/0x10 [ 554.889349][T11338] ? __pfx_chrdev_open+0x10/0x10 [ 554.889392][T11338] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 554.889454][T11338] do_dentry_open+0x741/0x1c10 [ 554.889493][T11338] ? __pfx_chrdev_open+0x10/0x10 [ 554.889541][T11338] vfs_open+0x82/0x3f0 [ 554.889590][T11338] path_openat+0x1e5e/0x2d40 [ 554.889639][T11338] ? __pfx_path_openat+0x10/0x10 [ 554.889685][T11338] do_filp_open+0x20b/0x470 [ 554.889719][T11338] ? __pfx_do_filp_open+0x10/0x10 [ 554.889792][T11338] ? alloc_fd+0x471/0x7d0 [ 554.889857][T11338] do_sys_openat2+0x11b/0x1d0 [ 554.889901][T11338] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.889951][T11338] ? __pfx___might_resched+0x10/0x10 [ 554.890002][T11338] __x64_sys_openat+0x174/0x210 [ 554.890047][T11338] ? __pfx___x64_sys_openat+0x10/0x10 [ 554.890097][T11338] ? rcu_is_watching+0x12/0xc0 [ 554.890143][T11338] do_syscall_64+0xcd/0x230 [ 554.890196][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.890229][T11338] RIP: 0033:0x7f8b2418e969 [ 554.890255][T11338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.890288][T11338] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.890320][T11338] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 554.890343][T11338] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 554.890366][T11338] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 554.890387][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.890407][T11338] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 554.890452][T11338] [ 558.283287][T11379] FAULT_INJECTION: forcing a failure. [ 558.283287][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 558.360390][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.1.1305 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 558.360450][T11379] Tainted: [U]=USER [ 558.360462][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.360483][T11379] Call Trace: [ 558.360496][T11379] [ 558.360510][T11379] dump_stack_lvl+0x16c/0x1f0 [ 558.360566][T11379] should_fail_ex+0x512/0x640 [ 558.360619][T11379] ? fs_reclaim_acquire+0xae/0x150 [ 558.360676][T11379] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 558.360727][T11379] should_failslab+0xc2/0x120 [ 558.360783][T11379] __kmalloc_noprof+0xd2/0x510 [ 558.360834][T11379] tomoyo_realpath_from_path+0xc2/0x6e0 [ 558.360900][T11379] tomoyo_get_exe+0x63/0xa0 [ 558.360940][T11379] tomoyo_write_control+0x689/0x1430 [ 558.360995][T11379] ? __pfx_tomoyo_write_control+0x10/0x10 [ 558.361047][T11379] vfs_write+0x25c/0x1180 [ 558.361079][T11379] ? __pfx_tomoyo_write+0x10/0x10 [ 558.361137][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 558.361188][T11379] ? __pfx_vfs_write+0x10/0x10 [ 558.361236][T11379] ? __fget_files+0x20e/0x3c0 [ 558.361283][T11379] ksys_write+0x12a/0x240 [ 558.361318][T11379] ? __pfx_ksys_write+0x10/0x10 [ 558.361351][T11379] ? rcu_is_watching+0x12/0xc0 [ 558.361399][T11379] do_syscall_64+0xcd/0x230 [ 558.361458][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.361493][T11379] RIP: 0033:0x7f45ebb8e969 [ 558.361520][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.361554][T11379] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.361587][T11379] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 558.361611][T11379] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 558.361632][T11379] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 558.361654][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.361674][T11379] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 558.361720][T11379] [ 558.361733][T11379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.635430][T11376] syz.3.1298 (11376) used greatest stack depth: 20632 bytes left [ 558.875811][T11387] FAULT_INJECTION: forcing a failure. [ 558.875811][T11387] name failslab, interval 1, probability 0, space 0, times 0 [ 558.890248][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.2.1307 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 558.890302][T11387] Tainted: [U]=USER [ 558.890314][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.890334][T11387] Call Trace: [ 558.890345][T11387] [ 558.890358][T11387] dump_stack_lvl+0x16c/0x1f0 [ 558.890414][T11387] should_fail_ex+0x512/0x640 [ 558.890466][T11387] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 558.890518][T11387] should_failslab+0xc2/0x120 [ 558.890564][T11387] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 558.890611][T11387] ? kasprintf+0xc7/0x100 [ 558.890652][T11387] kvasprintf+0xbc/0x160 [ 558.890687][T11387] ? __pfx_kvasprintf+0x10/0x10 [ 558.890725][T11387] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 558.890784][T11387] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.890835][T11387] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.890888][T11387] kasprintf+0xc7/0x100 [ 558.890922][T11387] ? __pfx_kasprintf+0x10/0x10 [ 558.890967][T11387] ? __pfx_sta_info_cleanup+0x10/0x10 [ 558.891026][T11387] ieee80211_alloc_led_names+0x1b0/0x420 [ 558.891088][T11387] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 558.891133][T11387] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 558.891211][T11387] ? __asan_memset+0x23/0x50 [ 558.891246][T11387] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 558.891316][T11387] hwsim_new_radio_nl+0xb51/0x12c0 [ 558.891376][T11387] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 558.891445][T11387] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 558.891501][T11387] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 558.891567][T11387] genl_family_rcv_msg_doit+0x206/0x2f0 [ 558.891623][T11387] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.891676][T11387] ? trace_cap_capable+0x18d/0x200 [ 558.891724][T11387] ? bpf_lsm_capable+0x9/0x10 [ 558.891767][T11387] ? security_capable+0x7e/0x260 [ 558.891806][T11387] ? ns_capable+0xd7/0x110 [ 558.891849][T11387] genl_rcv_msg+0x55c/0x800 [ 558.891907][T11387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.891958][T11387] ? __pfx___dev_queue_xmit+0x10/0x10 [ 558.891995][T11387] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 558.892053][T11387] ? __lock_acquire+0xaa4/0x1ba0 [ 558.892108][T11387] netlink_rcv_skb+0x16d/0x440 [ 558.892154][T11387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.892215][T11387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.892283][T11387] ? __pfx_down_read+0x10/0x10 [ 558.892318][T11387] ? netlink_deliver_tap+0x1ae/0xd30 [ 558.892370][T11387] genl_rcv+0x28/0x40 [ 558.892415][T11387] netlink_unicast+0x53a/0x7f0 [ 558.892468][T11387] ? __pfx_netlink_unicast+0x10/0x10 [ 558.892512][T11387] ? __lock_acquire+0xaa4/0x1ba0 [ 558.892570][T11387] netlink_sendmsg+0x8d1/0xdd0 [ 558.892625][T11387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.892689][T11387] ____sys_sendmsg+0xa95/0xc70 [ 558.892750][T11387] ? copy_msghdr_from_user+0x10a/0x160 [ 558.892793][T11387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.892869][T11387] ___sys_sendmsg+0x134/0x1d0 [ 558.892920][T11387] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.893025][T11387] __sys_sendmsg+0x16d/0x220 [ 558.893070][T11387] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.893112][T11387] ? __x64_sys_futex+0x1e0/0x4c0 [ 558.893168][T11387] ? rcu_is_watching+0x12/0xc0 [ 558.893215][T11387] do_syscall_64+0xcd/0x230 [ 558.893276][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.893311][T11387] RIP: 0033:0x7f7efb18e969 [ 558.893337][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.893375][T11387] RSP: 002b:00007f7efbf81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.893406][T11387] RAX: ffffffffffffffda RBX: 00007f7efb3b5fa0 RCX: 00007f7efb18e969 [ 558.893429][T11387] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 558.893450][T11387] RBP: 00007f7efb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 558.893476][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.893499][T11387] R13: 0000000000000000 R14: 00007f7efb3b5fa0 R15: 00007ffeea5c3b38 [ 558.893545][T11387] [ 559.389658][T11394] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 560.589452][T11405] mmap: syz.3.1311 (11405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 560.984015][T11411] FAULT_INJECTION: forcing a failure. [ 560.984015][T11411] name failslab, interval 1, probability 0, space 0, times 0 [ 561.014335][T11411] CPU: 0 UID: 7 PID: 11411 Comm: syz.3.1313 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 561.014393][T11411] Tainted: [U]=USER [ 561.014405][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.014426][T11411] Call Trace: [ 561.014438][T11411] [ 561.014451][T11411] dump_stack_lvl+0x16c/0x1f0 [ 561.014511][T11411] should_fail_ex+0x512/0x640 [ 561.014562][T11411] ? __kmalloc_noprof+0xbf/0x510 [ 561.014606][T11411] ? lsm_blob_alloc+0x68/0x90 [ 561.014637][T11411] should_failslab+0xc2/0x120 [ 561.014681][T11411] __kmalloc_noprof+0xd2/0x510 [ 561.014731][T11411] lsm_blob_alloc+0x68/0x90 [ 561.014766][T11411] security_sk_alloc+0x30/0x270 [ 561.014809][T11411] sk_prot_alloc+0xfb/0x2a0 [ 561.014864][T11411] sk_alloc+0x36/0xc20 [ 561.014906][T11411] kcm_create+0xfc/0x690 [ 561.014956][T11411] __sock_create+0x335/0x8d0 [ 561.015019][T11411] __sys_socket+0x14d/0x260 [ 561.015053][T11411] ? __pfx___sys_socket+0x10/0x10 [ 561.015087][T11411] ? rcu_is_watching+0x12/0xc0 [ 561.015127][T11411] __x64_sys_socket+0x72/0xb0 [ 561.015158][T11411] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.015208][T11411] do_syscall_64+0xcd/0x230 [ 561.015271][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.015307][T11411] RIP: 0033:0x7f4ed758e969 [ 561.015335][T11411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.015368][T11411] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 561.015400][T11411] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 561.015422][T11411] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 561.015442][T11411] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 561.015462][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.015482][T11411] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 561.015523][T11411] [ 561.506669][ T5838] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 563.166520][T11450] FAULT_INJECTION: forcing a failure. [ 563.166520][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 563.188286][T11450] CPU: 1 UID: 0 PID: 11450 Comm: syz.3.1324 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 563.188343][T11450] Tainted: [U]=USER [ 563.188355][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.188390][T11450] Call Trace: [ 563.188402][T11450] [ 563.188415][T11450] dump_stack_lvl+0x16c/0x1f0 [ 563.188473][T11450] should_fail_ex+0x512/0x640 [ 563.188525][T11450] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 563.188579][T11450] should_failslab+0xc2/0x120 [ 563.188621][T11450] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 563.188665][T11450] ? kasprintf+0xc7/0x100 [ 563.188702][T11450] kvasprintf+0xbc/0x160 [ 563.188732][T11450] ? __pfx_kvasprintf+0x10/0x10 [ 563.188766][T11450] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 563.188811][T11450] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.188859][T11450] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 563.188910][T11450] kasprintf+0xc7/0x100 [ 563.188942][T11450] ? __pfx_kasprintf+0x10/0x10 [ 563.188984][T11450] ? __pfx_sta_info_cleanup+0x10/0x10 [ 563.189043][T11450] ieee80211_alloc_led_names+0x1b0/0x420 [ 563.189112][T11450] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 563.189157][T11450] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 563.189231][T11450] ? __asan_memset+0x23/0x50 [ 563.189266][T11450] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 563.189334][T11450] hwsim_new_radio_nl+0xb51/0x12c0 [ 563.189393][T11450] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 563.189462][T11450] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 563.189517][T11450] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 563.189582][T11450] genl_family_rcv_msg_doit+0x206/0x2f0 [ 563.189638][T11450] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.189692][T11450] ? trace_cap_capable+0x18d/0x200 [ 563.189738][T11450] ? bpf_lsm_capable+0x9/0x10 [ 563.189773][T11450] ? security_capable+0x7e/0x260 [ 563.189809][T11450] ? ns_capable+0xd7/0x110 [ 563.189850][T11450] genl_rcv_msg+0x55c/0x800 [ 563.189905][T11450] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.189955][T11450] ? __pfx___dev_queue_xmit+0x10/0x10 [ 563.189989][T11450] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 563.190047][T11450] ? __lock_acquire+0xaa4/0x1ba0 [ 563.190112][T11450] netlink_rcv_skb+0x16d/0x440 [ 563.190159][T11450] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.190214][T11450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.190281][T11450] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 563.190330][T11450] ? __pfx_down_read+0x10/0x10 [ 563.190377][T11450] genl_rcv+0x28/0x40 [ 563.190425][T11450] netlink_unicast+0x53a/0x7f0 [ 563.190478][T11450] ? __pfx_netlink_unicast+0x10/0x10 [ 563.190522][T11450] ? __lock_acquire+0xaa4/0x1ba0 [ 563.190580][T11450] netlink_sendmsg+0x8d1/0xdd0 [ 563.190634][T11450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.190698][T11450] ____sys_sendmsg+0xa95/0xc70 [ 563.190753][T11450] ? copy_msghdr_from_user+0x10a/0x160 [ 563.190796][T11450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.190871][T11450] ___sys_sendmsg+0x134/0x1d0 [ 563.190916][T11450] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.191011][T11450] __sys_sendmsg+0x16d/0x220 [ 563.191055][T11450] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.191104][T11450] ? __x64_sys_futex+0x1e0/0x4c0 [ 563.191155][T11450] ? rcu_is_watching+0x12/0xc0 [ 563.191201][T11450] do_syscall_64+0xcd/0x230 [ 563.191257][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.191291][T11450] RIP: 0033:0x7f4ed758e969 [ 563.191318][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.191350][T11450] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.191382][T11450] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 563.191404][T11450] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 563.191426][T11450] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 563.191447][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.191466][T11450] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 563.191510][T11450] [ 564.508995][T11459] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.1.1326: No space for directory leaf checksum. Please run e2fsck -D. [ 564.529996][T11459] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1326: checksumming directory block 0 [ 564.563515][T11459] platform regulatory.0: loading /lib/firmware/updates/6.15.0-rc7-syzkaller-00152-gd0c22de9995b/regulatory.db failed with error -74 [ 564.630032][T11459] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.1.1326: No space for directory leaf checksum. Please run e2fsck -D. [ 564.713223][T11459] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1326: checksumming directory block 0 [ 564.759048][T11459] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 564.769461][T11459] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.1.1326: No space for directory leaf checksum. Please run e2fsck -D. [ 564.787796][T11459] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1326: checksumming directory block 0 [ 564.802594][T11459] platform regulatory.0: loading /lib/firmware/6.15.0-rc7-syzkaller-00152-gd0c22de9995b/regulatory.db failed with error -74 [ 564.815844][T11459] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.1.1326: No space for directory leaf checksum. Please run e2fsck -D. [ 564.831522][T11459] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1326: checksumming directory block 0 [ 564.844753][T11459] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 564.855799][T11459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 564.876086][T11459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 565.363373][T11460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.383356][T11460] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 565.411686][T11460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.421465][T11460] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 565.438162][T11460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.447080][T11460] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 565.458388][T11460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.465473][T11460] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 565.944085][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1334'. [ 565.946775][T11490] FAULT_INJECTION: forcing a failure. [ 565.946775][T11490] name failslab, interval 1, probability 0, space 0, times 0 [ 565.971376][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.2.1332 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 565.971428][T11490] Tainted: [U]=USER [ 565.971440][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.971460][T11490] Call Trace: [ 565.971471][T11490] [ 565.971483][T11490] dump_stack_lvl+0x16c/0x1f0 [ 565.971539][T11490] should_fail_ex+0x512/0x640 [ 565.971588][T11490] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 565.971635][T11490] should_failslab+0xc2/0x120 [ 565.971678][T11490] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 565.971724][T11490] ? kasprintf+0xc7/0x100 [ 565.971764][T11490] kvasprintf+0xbc/0x160 [ 565.971796][T11490] ? __pfx_kvasprintf+0x10/0x10 [ 565.971832][T11490] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 565.971879][T11490] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.971926][T11490] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 565.971993][T11490] kasprintf+0xc7/0x100 [ 565.972026][T11490] ? __pfx_kasprintf+0x10/0x10 [ 565.972065][T11490] ? __pfx_sta_info_cleanup+0x10/0x10 [ 565.972141][T11490] ieee80211_alloc_led_names+0x243/0x420 [ 565.972211][T11490] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 565.972256][T11490] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 565.972330][T11490] ? __asan_memset+0x23/0x50 [ 565.972364][T11490] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 565.972433][T11490] hwsim_new_radio_nl+0xb51/0x12c0 [ 565.972490][T11490] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 565.972559][T11490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 565.972615][T11490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 565.972681][T11490] genl_family_rcv_msg_doit+0x206/0x2f0 [ 565.972737][T11490] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.972791][T11490] ? trace_cap_capable+0x18d/0x200 [ 565.972838][T11490] ? bpf_lsm_capable+0x9/0x10 [ 565.972873][T11490] ? security_capable+0x7e/0x260 [ 565.972909][T11490] ? ns_capable+0xd7/0x110 [ 565.972957][T11490] genl_rcv_msg+0x55c/0x800 [ 565.973013][T11490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.973063][T11490] ? __pfx___dev_queue_xmit+0x10/0x10 [ 565.973099][T11490] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 565.973157][T11490] ? __lock_acquire+0xaa4/0x1ba0 [ 565.973210][T11490] netlink_rcv_skb+0x16d/0x440 [ 565.973257][T11490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.973312][T11490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.973381][T11490] ? __pfx_down_read+0x10/0x10 [ 565.973428][T11490] ? netlink_deliver_tap+0x1ae/0xd30 [ 565.973478][T11490] genl_rcv+0x28/0x40 [ 565.973523][T11490] netlink_unicast+0x53a/0x7f0 [ 565.973572][T11490] ? __pfx_netlink_unicast+0x10/0x10 [ 565.973613][T11490] ? __lock_acquire+0xaa4/0x1ba0 [ 565.973667][T11490] netlink_sendmsg+0x8d1/0xdd0 [ 565.973720][T11490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.973783][T11490] ____sys_sendmsg+0xa95/0xc70 [ 565.973835][T11490] ? copy_msghdr_from_user+0x10a/0x160 [ 565.973877][T11490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.973975][T11490] ___sys_sendmsg+0x134/0x1d0 [ 565.974017][T11490] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.974114][T11490] __sys_sendmsg+0x16d/0x220 [ 565.974157][T11490] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.974201][T11490] ? __x64_sys_futex+0x1e0/0x4c0 [ 565.974252][T11490] ? rcu_is_watching+0x12/0xc0 [ 565.974299][T11490] do_syscall_64+0xcd/0x230 [ 565.974355][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.974392][T11490] RIP: 0033:0x7f7efb18e969 [ 565.974419][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.974451][T11490] RSP: 002b:00007f7efbf81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.974481][T11490] RAX: ffffffffffffffda RBX: 00007f7efb3b5fa0 RCX: 00007f7efb18e969 [ 565.974503][T11490] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 565.974524][T11490] RBP: 00007f7efb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 565.974545][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.974567][T11490] R13: 0000000000000000 R14: 00007f7efb3b5fa0 R15: 00007ffeea5c3b38 [ 565.974612][T11490] [ 566.738672][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 567.090548][T11501] FAULT_INJECTION: forcing a failure. [ 567.090548][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 567.116677][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.0.1337 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 567.116737][T11501] Tainted: [U]=USER [ 567.116749][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.116769][T11501] Call Trace: [ 567.116780][T11501] [ 567.116794][T11501] dump_stack_lvl+0x16c/0x1f0 [ 567.116852][T11501] should_fail_ex+0x512/0x640 [ 567.116903][T11501] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 567.116955][T11501] should_failslab+0xc2/0x120 [ 567.116998][T11501] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 567.117067][T11501] ? kvasprintf_const+0x66/0x1a0 [ 567.117109][T11501] kvasprintf+0xbc/0x160 [ 567.117142][T11501] ? __pfx_kvasprintf+0x10/0x10 [ 567.117182][T11501] ? lockdep_init_map_type+0x5c/0x280 [ 567.117239][T11501] kvasprintf_const+0x66/0x1a0 [ 567.117276][T11501] kobject_set_name_vargs+0x5a/0x140 [ 567.117315][T11501] device_create_groups_vargs+0x1b1/0x270 [ 567.117376][T11501] device_create+0xed/0x130 [ 567.117429][T11501] ? __pfx_device_create+0x10/0x10 [ 567.117484][T11501] ? do_init_timer+0xc9/0x110 [ 567.117524][T11501] ? ieee80211_roc_setup+0x136/0x270 [ 567.117575][T11501] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 567.117619][T11501] mac80211_hwsim_new_radio+0x369/0x54d0 [ 567.117695][T11501] ? __asan_memset+0x23/0x50 [ 567.117730][T11501] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 567.117796][T11501] hwsim_new_radio_nl+0xb51/0x12c0 [ 567.117855][T11501] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 567.117922][T11501] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 567.117978][T11501] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 567.118054][T11501] genl_family_rcv_msg_doit+0x206/0x2f0 [ 567.118113][T11501] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 567.118165][T11501] ? trace_cap_capable+0x18d/0x200 [ 567.118214][T11501] ? bpf_lsm_capable+0x9/0x10 [ 567.118250][T11501] ? security_capable+0x7e/0x260 [ 567.118289][T11501] ? ns_capable+0xd7/0x110 [ 567.118330][T11501] genl_rcv_msg+0x55c/0x800 [ 567.118389][T11501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.118438][T11501] ? __pfx___dev_queue_xmit+0x10/0x10 [ 567.118473][T11501] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 567.118532][T11501] ? __lock_acquire+0xaa4/0x1ba0 [ 567.118588][T11501] netlink_rcv_skb+0x16d/0x440 [ 567.118637][T11501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.118692][T11501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.118762][T11501] ? __pfx_down_read+0x10/0x10 [ 567.118799][T11501] ? netlink_deliver_tap+0x1ae/0xd30 [ 567.118850][T11501] genl_rcv+0x28/0x40 [ 567.118896][T11501] netlink_unicast+0x53a/0x7f0 [ 567.118949][T11501] ? __pfx_netlink_unicast+0x10/0x10 [ 567.118993][T11501] ? __lock_acquire+0xaa4/0x1ba0 [ 567.119059][T11501] netlink_sendmsg+0x8d1/0xdd0 [ 567.119114][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.119178][T11501] ____sys_sendmsg+0xa95/0xc70 [ 567.119233][T11501] ? copy_msghdr_from_user+0x10a/0x160 [ 567.119276][T11501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.119349][T11501] ___sys_sendmsg+0x134/0x1d0 [ 567.119396][T11501] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.119496][T11501] __sys_sendmsg+0x16d/0x220 [ 567.119541][T11501] ? __pfx___sys_sendmsg+0x10/0x10 [ 567.119585][T11501] ? __x64_sys_futex+0x1e0/0x4c0 [ 567.119636][T11501] ? rcu_is_watching+0x12/0xc0 [ 567.119682][T11501] do_syscall_64+0xcd/0x230 [ 567.119740][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.119775][T11501] RIP: 0033:0x7f8b2418e969 [ 567.119803][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.119836][T11501] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.119870][T11501] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 567.119892][T11501] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 567.119914][T11501] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 567.119934][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.119954][T11501] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 567.119999][T11501] [ 567.523884][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.542018][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 567.548736][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 567.556056][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 568.808773][T11504] Bluetooth: hci0: command 0x0406 tx timeout [ 569.617520][T11504] Bluetooth: hci3: command 0x0406 tx timeout [ 569.617539][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 569.617588][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 569.647653][T11538] FAULT_INJECTION: forcing a failure. [ 569.647653][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 569.681577][T11538] CPU: 0 UID: 0 PID: 11538 Comm: syz.1.1347 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 569.681649][T11538] Tainted: [U]=USER [ 569.681662][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.681682][T11538] Call Trace: [ 569.681695][T11538] [ 569.681709][T11538] dump_stack_lvl+0x16c/0x1f0 [ 569.681766][T11538] should_fail_ex+0x512/0x640 [ 569.681816][T11538] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 569.681868][T11538] should_failslab+0xc2/0x120 [ 569.681912][T11538] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 569.681961][T11538] ? kasprintf+0xc7/0x100 [ 569.682002][T11538] kvasprintf+0xbc/0x160 [ 569.682036][T11538] ? __pfx_kvasprintf+0x10/0x10 [ 569.682074][T11538] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.682122][T11538] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.682172][T11538] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.682227][T11538] kasprintf+0xc7/0x100 [ 569.682260][T11538] ? __pfx_kasprintf+0x10/0x10 [ 569.682302][T11538] ? __pfx_sta_info_cleanup+0x10/0x10 [ 569.682362][T11538] ieee80211_alloc_led_names+0x243/0x420 [ 569.682426][T11538] ieee80211_alloc_hw_nm+0x1941/0x2260 [ 569.682470][T11538] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 569.682550][T11538] ? __asan_memset+0x23/0x50 [ 569.682585][T11538] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 569.682662][T11538] hwsim_new_radio_nl+0xb51/0x12c0 [ 569.682726][T11538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 569.682796][T11538] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 569.682853][T11538] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 569.682918][T11538] genl_family_rcv_msg_doit+0x206/0x2f0 [ 569.682975][T11538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 569.683031][T11538] ? trace_cap_capable+0x18d/0x200 [ 569.683078][T11538] ? bpf_lsm_capable+0x9/0x10 [ 569.683113][T11538] ? security_capable+0x7e/0x260 [ 569.683149][T11538] ? ns_capable+0xd7/0x110 [ 569.683190][T11538] genl_rcv_msg+0x55c/0x800 [ 569.683243][T11538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.683289][T11538] ? __pfx___dev_queue_xmit+0x10/0x10 [ 569.683322][T11538] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 569.683376][T11538] ? __lock_acquire+0xaa4/0x1ba0 [ 569.683426][T11538] netlink_rcv_skb+0x16d/0x440 [ 569.683466][T11538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.683519][T11538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.683590][T11538] ? __pfx_down_read+0x10/0x10 [ 569.683662][T11538] ? netlink_deliver_tap+0x1ae/0xd30 [ 569.683715][T11538] genl_rcv+0x28/0x40 [ 569.683763][T11538] netlink_unicast+0x53a/0x7f0 [ 569.683815][T11538] ? __pfx_netlink_unicast+0x10/0x10 [ 569.683857][T11538] ? __lock_acquire+0xaa4/0x1ba0 [ 569.683914][T11538] netlink_sendmsg+0x8d1/0xdd0 [ 569.683969][T11538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.684036][T11538] ____sys_sendmsg+0xa95/0xc70 [ 569.684091][T11538] ? copy_msghdr_from_user+0x10a/0x160 [ 569.684136][T11538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.684211][T11538] ___sys_sendmsg+0x134/0x1d0 [ 569.684259][T11538] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.684360][T11538] __sys_sendmsg+0x16d/0x220 [ 569.684405][T11538] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.684449][T11538] ? __x64_sys_futex+0x1e0/0x4c0 [ 569.684501][T11538] ? rcu_is_watching+0x12/0xc0 [ 569.684546][T11538] do_syscall_64+0xcd/0x230 [ 569.684605][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.684649][T11538] RIP: 0033:0x7f45ebb8e969 [ 569.684677][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.684713][T11538] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.684747][T11538] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 569.684771][T11538] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 569.684794][T11538] RBP: 00007f45ebc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 569.684816][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.684837][T11538] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 569.684888][T11538] [ 569.753700][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.094373][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.200410][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.725653][T11551] FAULT_INJECTION: forcing a failure. [ 570.725653][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 570.763393][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.0.1351 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 570.763447][T11551] Tainted: [U]=USER [ 570.763459][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.763478][T11551] Call Trace: [ 570.763489][T11551] [ 570.763501][T11551] dump_stack_lvl+0x16c/0x1f0 [ 570.763568][T11551] should_fail_ex+0x512/0x640 [ 570.763615][T11551] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 570.763652][T11551] should_failslab+0xc2/0x120 [ 570.763694][T11551] __kmalloc_cache_noprof+0x6a/0x3e0 [ 570.763727][T11551] ? io_uring_setup+0x24f/0x1ff0 [ 570.763776][T11551] io_uring_setup+0x24f/0x1ff0 [ 570.763824][T11551] ? __pfx_io_uring_setup+0x10/0x10 [ 570.763866][T11551] ? do_futex+0x122/0x350 [ 570.763903][T11551] ? __pfx_do_futex+0x10/0x10 [ 570.763935][T11551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.764012][T11551] ? rcu_is_watching+0x12/0xc0 [ 570.764050][T11551] __x64_sys_io_uring_setup+0xc2/0x170 [ 570.764098][T11551] do_syscall_64+0xcd/0x230 [ 570.764149][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.764182][T11551] RIP: 0033:0x7f8b2418e969 [ 570.764208][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.764240][T11551] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 570.764271][T11551] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 570.764293][T11551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 570.764311][T11551] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 570.764332][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.764352][T11551] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 570.764394][T11551] [ 570.956417][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.063477][T11557] FAULT_INJECTION: forcing a failure. [ 571.063477][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 571.076456][T11557] CPU: 1 UID: 0 PID: 11557 Comm: syz.0.1354 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 571.076511][T11557] Tainted: [U]=USER [ 571.076523][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.076544][T11557] Call Trace: [ 571.076562][T11557] [ 571.076576][T11557] dump_stack_lvl+0x16c/0x1f0 [ 571.076636][T11557] should_fail_ex+0x512/0x640 [ 571.076687][T11557] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 571.076727][T11557] should_failslab+0xc2/0x120 [ 571.076772][T11557] __kmalloc_cache_noprof+0x6a/0x3e0 [ 571.076804][T11557] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 571.076852][T11557] ? device_create_groups_vargs+0x8a/0x270 [ 571.076913][T11557] device_create_groups_vargs+0x8a/0x270 [ 571.076972][T11557] device_create+0xed/0x130 [ 571.077023][T11557] ? __pfx_device_create+0x10/0x10 [ 571.077077][T11557] ? do_init_timer+0xc9/0x110 [ 571.077118][T11557] ? ieee80211_roc_setup+0x136/0x270 [ 571.077168][T11557] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 571.077213][T11557] mac80211_hwsim_new_radio+0x369/0x54d0 [ 571.077290][T11557] ? __asan_memset+0x23/0x50 [ 571.077325][T11557] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 571.077394][T11557] hwsim_new_radio_nl+0xb51/0x12c0 [ 571.077454][T11557] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 571.077524][T11557] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 571.077587][T11557] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 571.077654][T11557] genl_family_rcv_msg_doit+0x206/0x2f0 [ 571.077711][T11557] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 571.077766][T11557] ? trace_cap_capable+0x18d/0x200 [ 571.077815][T11557] ? bpf_lsm_capable+0x9/0x10 [ 571.077853][T11557] ? security_capable+0x7e/0x260 [ 571.077890][T11557] ? ns_capable+0xd7/0x110 [ 571.077931][T11557] genl_rcv_msg+0x55c/0x800 [ 571.077987][T11557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.078038][T11557] ? __pfx___dev_queue_xmit+0x10/0x10 [ 571.078074][T11557] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 571.078133][T11557] ? __lock_acquire+0xaa4/0x1ba0 [ 571.078188][T11557] netlink_rcv_skb+0x16d/0x440 [ 571.078235][T11557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.078290][T11557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.078361][T11557] ? __pfx_down_read+0x10/0x10 [ 571.078398][T11557] ? netlink_deliver_tap+0x1ae/0xd30 [ 571.078450][T11557] genl_rcv+0x28/0x40 [ 571.078497][T11557] netlink_unicast+0x53a/0x7f0 [ 571.078561][T11557] ? __pfx_netlink_unicast+0x10/0x10 [ 571.078605][T11557] ? __lock_acquire+0xaa4/0x1ba0 [ 571.078663][T11557] netlink_sendmsg+0x8d1/0xdd0 [ 571.078719][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.078784][T11557] ____sys_sendmsg+0xa95/0xc70 [ 571.078839][T11557] ? copy_msghdr_from_user+0x10a/0x160 [ 571.078882][T11557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.078948][T11557] ? try_to_wake_up+0xa2f/0x1680 [ 571.078990][T11557] ___sys_sendmsg+0x134/0x1d0 [ 571.079035][T11557] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.079135][T11557] __sys_sendmsg+0x16d/0x220 [ 571.079179][T11557] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.079222][T11557] ? __x64_sys_futex+0x1e0/0x4c0 [ 571.079273][T11557] ? rcu_is_watching+0x12/0xc0 [ 571.079320][T11557] do_syscall_64+0xcd/0x230 [ 571.079376][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.079412][T11557] RIP: 0033:0x7f8b2418e969 [ 571.079439][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.079471][T11557] RSP: 002b:00007f8b24ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.079502][T11557] RAX: ffffffffffffffda RBX: 00007f8b243b5fa0 RCX: 00007f8b2418e969 [ 571.079525][T11557] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 571.079546][T11557] RBP: 00007f8b24210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 571.079575][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.079596][T11557] R13: 0000000000000000 R14: 00007f8b243b5fa0 R15: 00007fff694f2e68 [ 571.079650][T11557] [ 571.371867][T11554] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 571.994236][T11573] ima: policy update failed [ 572.033457][T11573] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1357'. [ 572.054048][ T30] audit: type=1802 audit(6043132702.581:6): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1357" res=0 errno=0 [ 573.250795][T11592] FAULT_INJECTION: forcing a failure. [ 573.250795][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 573.291145][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.1.1361 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 573.291198][T11592] Tainted: [U]=USER [ 573.291209][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.291229][T11592] Call Trace: [ 573.291240][T11592] [ 573.291252][T11592] dump_stack_lvl+0x16c/0x1f0 [ 573.291309][T11592] should_fail_ex+0x512/0x640 [ 573.291358][T11592] ? fs_reclaim_acquire+0xae/0x150 [ 573.291413][T11592] ? ima_alloc_init_template+0x19d/0x720 [ 573.291448][T11592] should_failslab+0xc2/0x120 [ 573.291490][T11592] __kmalloc_noprof+0xd2/0x510 [ 573.291538][T11592] ima_alloc_init_template+0x19d/0x720 [ 573.291576][T11592] ? __pfx_d_absolute_path+0x10/0x10 [ 573.291622][T11592] ? rcu_is_watching+0x12/0xc0 [ 573.291662][T11592] ima_add_violation+0x123/0x3d0 [ 573.291703][T11592] ? __pfx_ima_add_violation+0x10/0x10 [ 573.291739][T11592] ? ima_d_path+0x12b/0x2a0 [ 573.291776][T11592] ? __pfx_ima_d_path+0x10/0x10 [ 573.291820][T11592] ? lockdep_init_map_type+0x5c/0x280 [ 573.291867][T11592] ? ima_inode_get+0x39e/0x580 [ 573.291926][T11592] process_measurement+0x1783/0x23e0 [ 573.291994][T11592] ? __pfx_process_measurement+0x10/0x10 [ 573.292043][T11592] ? __lock_acquire+0x5ca/0x1ba0 [ 573.292095][T11592] ? futex_wait_queue+0x24/0x220 [ 573.292200][T11592] ima_file_mmap+0x1b1/0x1d0 [ 573.292283][T11592] ? __pfx_ima_file_mmap+0x10/0x10 [ 573.292351][T11592] security_mmap_file+0x88c/0x990 [ 573.292404][T11592] vm_mmap_pgoff+0xec/0x450 [ 573.292457][T11592] ? find_held_lock+0x2b/0x80 [ 573.292491][T11592] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 573.292552][T11592] ? __fget_files+0x20e/0x3c0 [ 573.292593][T11592] ksys_mmap_pgoff+0x32c/0x5c0 [ 573.292652][T11592] ? rcu_is_watching+0x12/0xc0 [ 573.292689][T11592] __x64_sys_mmap+0x125/0x190 [ 573.292729][T11592] do_syscall_64+0xcd/0x230 [ 573.292785][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.292820][T11592] RIP: 0033:0x7f45ebb8e969 [ 573.292848][T11592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.292882][T11592] RSP: 002b:00007f45ec928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 573.292913][T11592] RAX: ffffffffffffffda RBX: 00007f45ebdb5fa0 RCX: 00007f45ebb8e969 [ 573.292936][T11592] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 573.292958][T11592] RBP: 00007f45ebc10ab1 R08: 0000000000000003 R09: 0000000000000000 [ 573.292980][T11592] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 573.293000][T11592] R13: 0000000000000000 R14: 00007f45ebdb5fa0 R15: 00007ffd5d50acb8 [ 573.293045][T11592] [ 573.294264][ T30] audit: type=1804 audit(6043132703.851:7): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1361" name="/newroot/364/file0" dev="tmpfs" ino=1930 res=0 errno=0 [ 573.341212][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.449934][ T30] audit: type=1800 audit(6043132703.941:8): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1361" name="file0" dev="tmpfs" ino=1930 res=0 errno=0 [ 573.459027][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.517032][T11616] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1366'. [ 574.537644][T11616] : renamed from bond0 [ 574.854302][T11624] ================================================================== [ 574.862441][T11624] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 574.870237][T11624] Read of size 8 at addr ffff88814734ba18 by task syz.3.1369/11624 [ 574.878177][T11624] [ 574.880552][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.3.1369 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 574.880621][T11624] Tainted: [U]=USER [ 574.880633][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.880654][T11624] Call Trace: [ 574.880666][T11624] [ 574.880679][T11624] dump_stack_lvl+0x116/0x1f0 [ 574.880733][T11624] print_report+0xc3/0x670 [ 574.880775][T11624] ? __virt_addr_valid+0x5e/0x590 [ 574.880821][T11624] ? __phys_addr+0xc6/0x150 [ 574.880867][T11624] ? dvb_device_open+0x36a/0x3b0 [ 574.880918][T11624] kasan_report+0xe0/0x110 [ 574.880962][T11624] ? dvb_device_open+0x36a/0x3b0 [ 574.881018][T11624] ? __pfx_dvb_device_open+0x10/0x10 [ 574.881070][T11624] dvb_device_open+0x36a/0x3b0 [ 574.881122][T11624] ? __pfx_dvb_device_open+0x10/0x10 [ 574.881173][T11624] chrdev_open+0x234/0x6a0 [ 574.881211][T11624] ? __pfx_apparmor_file_open+0x10/0x10 [ 574.881258][T11624] ? __pfx_chrdev_open+0x10/0x10 [ 574.881299][T11624] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 574.881359][T11624] do_dentry_open+0x741/0x1c10 [ 574.881396][T11624] ? __pfx_chrdev_open+0x10/0x10 [ 574.881439][T11624] vfs_open+0x82/0x3f0 [ 574.881487][T11624] path_openat+0x1e5e/0x2d40 [ 574.881528][T11624] ? __pfx_path_openat+0x10/0x10 [ 574.881577][T11624] do_filp_open+0x20b/0x470 [ 574.881613][T11624] ? __pfx_do_filp_open+0x10/0x10 [ 574.881663][T11624] ? alloc_fd+0x471/0x7d0 [ 574.881724][T11624] do_sys_openat2+0x11b/0x1d0 [ 574.881772][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 574.881818][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 574.881866][T11624] ? __pfx___might_resched+0x10/0x10 [ 574.881912][T11624] __x64_sys_openat+0x174/0x210 [ 574.881961][T11624] ? __pfx___x64_sys_openat+0x10/0x10 [ 574.882011][T11624] ? rcu_is_watching+0x12/0xc0 [ 574.882050][T11624] do_syscall_64+0xcd/0x230 [ 574.882104][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.882141][T11624] RIP: 0033:0x7f4ed758e969 [ 574.882168][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.882202][T11624] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.882235][T11624] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 574.882259][T11624] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 574.882282][T11624] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 574.882304][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.882325][T11624] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 574.882359][T11624] [ 574.882371][T11624] [ 575.146705][T11624] Allocated by task 1: [ 575.150817][T11624] kasan_save_stack+0x33/0x60 [ 575.155523][T11624] kasan_save_track+0x14/0x30 [ 575.160226][T11624] __kasan_kmalloc+0xaa/0xb0 [ 575.164847][T11624] dvb_register_device+0x1e4/0x2370 [ 575.170085][T11624] dvb_register_frontend+0x5a6/0x880 [ 575.175406][T11624] vidtv_bridge_probe+0x459/0xa90 [ 575.180474][T11624] platform_probe+0xff/0x1f0 [ 575.185091][T11624] really_probe+0x241/0xa90 [ 575.189620][T11624] __driver_probe_device+0x1de/0x440 [ 575.194958][T11624] driver_probe_device+0x4c/0x1b0 [ 575.200021][T11624] __driver_attach+0x283/0x580 [ 575.205071][T11624] bus_for_each_dev+0x13e/0x1d0 [ 575.209940][T11624] bus_add_driver+0x2e9/0x690 [ 575.214640][T11624] driver_register+0x15c/0x4b0 [ 575.219433][T11624] vidtv_bridge_init+0x45/0x80 [ 575.224221][T11624] do_one_initcall+0x120/0x6e0 [ 575.229029][T11624] kernel_init_freeable+0x5c2/0x900 [ 575.234294][T11624] kernel_init+0x1c/0x2b0 [ 575.238688][T11624] ret_from_fork+0x48/0x80 [ 575.243132][T11624] ret_from_fork_asm+0x1a/0x30 [ 575.247938][T11624] [ 575.250279][T11624] Freed by task 11554: [ 575.254366][T11624] kasan_save_stack+0x33/0x60 [ 575.259074][T11624] kasan_save_track+0x14/0x30 [ 575.263786][T11624] kasan_save_free_info+0x3b/0x60 [ 575.268856][T11624] __kasan_slab_free+0x51/0x70 [ 575.273648][T11624] kfree+0x2b6/0x4d0 [ 575.277581][T11624] dvb_device_put.part.0+0x60/0x90 [ 575.282736][T11624] dvb_device_open+0x2a4/0x3b0 [ 575.287547][T11624] chrdev_open+0x234/0x6a0 [ 575.292000][T11624] do_dentry_open+0x741/0x1c10 [ 575.296799][T11624] vfs_open+0x82/0x3f0 [ 575.300904][T11624] path_openat+0x1e5e/0x2d40 [ 575.305544][T11624] do_filp_open+0x20b/0x470 [ 575.310069][T11624] do_sys_openat2+0x11b/0x1d0 [ 575.314789][T11624] __x64_sys_openat+0x174/0x210 [ 575.319673][T11624] do_syscall_64+0xcd/0x230 [ 575.324216][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.330137][T11624] [ 575.332476][T11624] The buggy address belongs to the object at ffff88814734ba00 [ 575.332476][T11624] which belongs to the cache kmalloc-256 of size 256 [ 575.346620][T11624] The buggy address is located 24 bytes inside of [ 575.346620][T11624] freed 256-byte region [ffff88814734ba00, ffff88814734bb00) [ 575.360383][T11624] [ 575.362721][T11624] The buggy address belongs to the physical page: [ 575.369153][T11624] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14734a [ 575.378017][T11624] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.386542][T11624] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 575.394188][T11624] page_type: f5(slab) [ 575.398195][T11624] raw: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 575.406800][T11624] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 575.415406][T11624] head: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 575.424100][T11624] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 575.432798][T11624] head: 057ff00000000001 ffffea00051cd281 00000000ffffffff 00000000ffffffff [ 575.441491][T11624] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 575.450178][T11624] page dumped because: kasan: bad access detected [ 575.456607][T11624] page_owner tracks the page as allocated [ 575.462332][T11624] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25871838955, free_ts 0 [ 575.482076][T11624] post_alloc_hook+0x181/0x1b0 [ 575.486869][T11624] get_page_from_freelist+0x135c/0x3920 [ 575.492440][T11624] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 575.498363][T11624] alloc_pages_mpol+0x1fb/0x550 [ 575.503241][T11624] new_slab+0x244/0x340 [ 575.507423][T11624] ___slab_alloc+0xd9c/0x1940 [ 575.512119][T11624] __slab_alloc.constprop.0+0x56/0xb0 [ 575.517511][T11624] __kmalloc_cache_noprof+0xfb/0x3e0 [ 575.522835][T11624] bus_add_driver+0x92/0x690 [ 575.527448][T11624] driver_register+0x15c/0x4b0 [ 575.532255][T11624] usb_register_driver+0x216/0x4d0 [ 575.537417][T11624] do_one_initcall+0x120/0x6e0 [ 575.542218][T11624] kernel_init_freeable+0x5c2/0x900 [ 575.547452][T11624] kernel_init+0x1c/0x2b0 [ 575.551803][T11624] ret_from_fork+0x48/0x80 [ 575.556238][T11624] ret_from_fork_asm+0x1a/0x30 [ 575.561040][T11624] page_owner free stack trace missing [ 575.566417][T11624] [ 575.568750][T11624] Memory state around the buggy address: [ 575.574392][T11624] ffff88814734b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.582471][T11624] ffff88814734b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.590558][T11624] >ffff88814734ba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.598633][T11624] ^ [ 575.603493][T11624] ffff88814734ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.611578][T11624] ffff88814734bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.619653][T11624] ================================================================== [ 575.722937][ T5184] ERROR: Out of memory at tomoyo_memory_ok. [ 575.745568][T11624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 575.752841][T11624] CPU: 1 UID: 0 PID: 11624 Comm: syz.3.1369 Tainted: G U 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 575.766532][T11624] Tainted: [U]=USER [ 575.770376][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.780484][T11624] Call Trace: [ 575.783802][T11624] [ 575.786773][T11624] dump_stack_lvl+0x3d/0x1f0 [ 575.791430][T11624] panic+0x71c/0x800 [ 575.795384][T11624] ? __pfx_panic+0x10/0x10 [ 575.799854][T11624] ? mark_held_locks+0x49/0x80 [ 575.804674][T11624] ? preempt_schedule_thunk+0x16/0x30 [ 575.810118][T11624] ? dvb_device_open+0x36a/0x3b0 [ 575.815114][T11624] ? preempt_schedule_common+0x44/0xc0 [ 575.820636][T11624] ? dvb_device_open+0x36a/0x3b0 [ 575.825611][T11624] check_panic_on_warn+0xab/0xb0 [ 575.830599][T11624] end_report+0x107/0x170 [ 575.834962][T11624] kasan_report+0xee/0x110 [ 575.839429][T11624] ? dvb_device_open+0x36a/0x3b0 [ 575.844425][T11624] ? __pfx_dvb_device_open+0x10/0x10 [ 575.849755][T11624] dvb_device_open+0x36a/0x3b0 [ 575.854571][T11624] ? __pfx_dvb_device_open+0x10/0x10 [ 575.859902][T11624] chrdev_open+0x234/0x6a0 [ 575.864349][T11624] ? __pfx_apparmor_file_open+0x10/0x10 [ 575.869929][T11624] ? __pfx_chrdev_open+0x10/0x10 [ 575.874893][T11624] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 575.881699][T11624] do_dentry_open+0x741/0x1c10 [ 575.886491][T11624] ? __pfx_chrdev_open+0x10/0x10 [ 575.891477][T11624] vfs_open+0x82/0x3f0 [ 575.895581][T11624] path_openat+0x1e5e/0x2d40 [ 575.900198][T11624] ? __pfx_path_openat+0x10/0x10 [ 575.905166][T11624] do_filp_open+0x20b/0x470 [ 575.909727][T11624] ? __pfx_do_filp_open+0x10/0x10 [ 575.914787][T11624] ? alloc_fd+0x471/0x7d0 [ 575.919163][T11624] do_sys_openat2+0x11b/0x1d0 [ 575.923868][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.929100][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.934337][T11624] ? __pfx___might_resched+0x10/0x10 [ 575.939657][T11624] __x64_sys_openat+0x174/0x210 [ 575.944546][T11624] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.949961][T11624] ? rcu_is_watching+0x12/0xc0 [ 575.954756][T11624] do_syscall_64+0xcd/0x230 [ 575.959305][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.965241][T11624] RIP: 0033:0x7f4ed758e969 [ 575.969677][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.989574][T11624] RSP: 002b:00007f4ed848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.998030][T11624] RAX: ffffffffffffffda RBX: 00007f4ed77b5fa0 RCX: 00007f4ed758e969 [ 576.006222][T11624] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 576.014249][T11624] RBP: 00007f4ed7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.022245][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.030239][T11624] R13: 0000000000000000 R14: 00007f4ed77b5fa0 R15: 00007ffc1c620d88 [ 576.038264][T11624] [ 576.041636][T11624] Kernel Offset: disabled [ 576.046004][T11624] Rebooting in 86400 seconds..