last executing test programs: 36m11.074938215s ago: executing program 0 (id=207): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) write$auto(r0, &(0x7f0000000040)='sit0\x00', 0x6) (async) r4 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) (async) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'sit0\x00'}) (async) socket(0x10, 0x2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) close_range$auto(0x2, r5, 0x0) (async) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r6, &(0x7f00000002c0)=""/190, 0xfffffe39) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7201", @ANYRESHEX], 0x1ac}}, 0x4004) (async) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x1, 0x8000000000e97f, 0x2, 0x1fd, 0x401, 0x80000000000008) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x10948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 36m10.022211537s ago: executing program 0 (id=209): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) exit$auto(0x7) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) (async) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddb"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x8, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x7, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) 36m9.594331397s ago: executing program 0 (id=214): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r0 = socket(0xa, 0x1, 0x84) socket(0xa, 0x3, 0xff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1801, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) creat$auto(&(0x7f0000000040)='./file0\x00', 0x81) fcntl$auto(0x4, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x2, 0xed}, 0x1, 0x4) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x8000000000000001, 0x4, 0x0, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x81, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x1, 0x60, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x880, 0x0) read$auto(r3, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 36m8.756530914s ago: executing program 0 (id=216): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0xa5, 0x3, 0x91b, @_kill={0x0, r0}}}, 0x200, &(0x7f0000000300)={{0x1ff, 0x2}, {0x8000000000000001, 0x9}, 0x100000000, 0x1, 0x7, 0xa, 0x7b, 0x678d, 0x3, 0x8, 0x4, 0xffffffff, 0xffffffffffffffff, 0x5, 0x3, 0x1}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fbdbdf250300000004000800100003800c00038008000900", @ANYRES32, @ANYBLOB="12000100898771f1c1aa81f3129d2e1877b59f1779048590"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 36m8.021828226s ago: executing program 0 (id=219): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) setsockopt$auto_SO_DONTROUTE(r2, 0x5c4, 0x5, &(0x7f0000000080)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0xab) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() r5 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x2000d, 0xdf, 0x17, r5, 0x7ffd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x9c, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x2) 36m5.994455641s ago: executing program 0 (id=228): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x800) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64) r1 = socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0x1) (async, rerun: 64) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0\x00', 0x82002, 0x0) (rerun: 64) dup3$auto(0xffffffffffffffff, r3, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000140)="00729615786ca7904e7dca92d7d1e70b873d41211a0ab06fe79c07a8b4a6e5ba4099819e990f0b47a9208cba811b319656", 0x8, &(0x7f0000000180)={&(0x7f0000000300)="de1dcf0bf76577bb2052e5d9de396dedd50f2beb7296c6753e8b5b0f0ad7cb73eb124b25592ffcfa6ba57eb3a5bb7f422763ff3d6a274a5f75becd5ccd489468b9309dc56a34f5c3b7647375864c025bdaa9c506f473d2329d2a5810408bc0533c85eb1ee0696c160e0c2cf596a833ed2ff2bc2543e761e5f950ad3d7387b393dd2a808b1f40da75734053ac7bab369d548f98c600173ccafb09c5e31ac10a5c3047fa11882f915eee161c8933fadb142526e9bd4f2af9037a2be986c4190022ad19e17c1e939dbcadce", 0x2}, 0xba, &(0x7f0000000400)="f2253a26396e68abce076a770a2bbb9eb30c010198ef53f8d6264ee1a4bed5834c3481f80b0b7c2a1f32c20232a09fbe6ca2a6bb20de23a7cd5d163eff777fc43bed0e41ecc609ca4da257cbcf5603b460cfc69c615165d325ede7c0bb09a9093094f1c12ab092e18c8cdb51ee4614ac6dd10b008661379d603897c09c7548c44dd4e1619bd59e506f155fc6efa7a6acabd47fd48199dabf04788e76895571bfec4dcd091882db6745fb", 0x9, 0x4}, 0x4}, 0x40, 0x7) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) (async) msgrcv$auto(0xb40, 0x0, 0xc, 0x0, 0xffffffff) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (rerun: 64) r5 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, 0xffffffffffffffff, 0x28000) setresuid$auto(0x0, 0x8, 0x8000) (async) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000044}, 0x20008000) (async) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8) futimesat$auto(r6, 0x0, 0x0) (async) write$auto(r3, &(0x7f00000004c0)='--\x00', 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 35m50.022347487s ago: executing program 32 (id=228): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x800) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64) r1 = socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0x1) (async, rerun: 64) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0\x00', 0x82002, 0x0) (rerun: 64) dup3$auto(0xffffffffffffffff, r3, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000140)="00729615786ca7904e7dca92d7d1e70b873d41211a0ab06fe79c07a8b4a6e5ba4099819e990f0b47a9208cba811b319656", 0x8, &(0x7f0000000180)={&(0x7f0000000300)="de1dcf0bf76577bb2052e5d9de396dedd50f2beb7296c6753e8b5b0f0ad7cb73eb124b25592ffcfa6ba57eb3a5bb7f422763ff3d6a274a5f75becd5ccd489468b9309dc56a34f5c3b7647375864c025bdaa9c506f473d2329d2a5810408bc0533c85eb1ee0696c160e0c2cf596a833ed2ff2bc2543e761e5f950ad3d7387b393dd2a808b1f40da75734053ac7bab369d548f98c600173ccafb09c5e31ac10a5c3047fa11882f915eee161c8933fadb142526e9bd4f2af9037a2be986c4190022ad19e17c1e939dbcadce", 0x2}, 0xba, &(0x7f0000000400)="f2253a26396e68abce076a770a2bbb9eb30c010198ef53f8d6264ee1a4bed5834c3481f80b0b7c2a1f32c20232a09fbe6ca2a6bb20de23a7cd5d163eff777fc43bed0e41ecc609ca4da257cbcf5603b460cfc69c615165d325ede7c0bb09a9093094f1c12ab092e18c8cdb51ee4614ac6dd10b008661379d603897c09c7548c44dd4e1619bd59e506f155fc6efa7a6acabd47fd48199dabf04788e76895571bfec4dcd091882db6745fb", 0x9, 0x4}, 0x4}, 0x40, 0x7) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) (async) msgrcv$auto(0xb40, 0x0, 0xc, 0x0, 0xffffffff) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (rerun: 64) r5 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, 0xffffffffffffffff, 0x28000) setresuid$auto(0x0, 0x8, 0x8000) (async) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000044}, 0x20008000) (async) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8) futimesat$auto(r6, 0x0, 0x0) (async) write$auto(r3, &(0x7f00000004c0)='--\x00', 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 32m14.527301613s ago: executing program 1 (id=1206): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd4\x00', 0x14f602, 0x0) setfsgid$auto(0xee01) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="000100004bb23b7c9d25fff33716c93db1cfa8638e1a8e567bd280486893c49125a4c01228a653a67d46ba8000b0bad158b0331e626bb958bc12694c0caa3b3370a3b23452da6b2837f22a75e988239dabc1bdc30221f82aebaad69b8f06035e739077", @ANYRES16=0x0, @ANYBLOB="414ca6a457d09ded1da1cbdedcb7fcd2f0bf85862b6675163bf55f7bd7ad3f465cb76036d50555e5adfa947988cad6699dcee96ce9002a712c455449bc0f22efa480724894c2d22da8d477b1940e8c80d75249b8f730610ea473baf0ef31ba6e39a067672ed683b1505d5178c738de2ba3d6358076bbe62befbfd8241d4901f3cd26cebf58ae54b04e9c95d2cdc41ba2d0e18b8e6a23f1ffdb119c19af812ef0ff070000000000006e5a585a86e445c6136efb498efc323a"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000400)='..^.(%{a]}#[.$\x00', 0x7ff) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r3) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r1) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000340)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x10895) socketpair$auto(0xd4, 0x7, 0x2, &(0x7f0000000380)=0x8) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r3, 0x7a9, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) r6 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0, 0x0) pread64$auto(r6, 0x0, 0x800000003, 0x1) 32m13.415420068s ago: executing program 1 (id=1209): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fanotify_init$auto(0x9, 0x4) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf257f00000008005200", @ANYRES8=r0, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040040) 32m13.262194429s ago: executing program 1 (id=1211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029b97000fedbdf25040000000c000180080001000100000004000a8008000800", @ANYRES32=r4, @ANYBLOB="04000980"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000480), r0) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fbdbdf2503000000080002008000000005000d00b300000008000100734e39583c408dea0e0100000005000d0005000000080001000900000008000200e5010000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20004000) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/uevent\x00', 0x800, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r6 = open(0x0, 0x261c2, 0x84) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r8 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x4, 0x401, r8, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) (async, rerun: 32) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) (rerun: 32) 32m12.920717247s ago: executing program 1 (id=1214): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0xb, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8003) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) socket(0x15, 0xa, 0x0) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/gretap0/accept_ra_min_lft\x00', 0x1a3000, 0x0) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x48) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r1, 0x0, 0x100085) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)='/sys/devices/pnp0/00:01/options\x00', 0x7ff) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1f8, 0xb07e) mmap$auto(0x4000000000, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x2, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) 32m12.387131241s ago: executing program 1 (id=1218): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd4\x00', 0x14f602, 0x0) setfsgid$auto(0xee01) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="000100004bb23b7c9d25fff33716c93db1cfa8638e1a8e567bd280486893c49125a4c01228a653a67d46ba8000b0bad158b0331e626bb958bc12694c0caa3b3370a3b23452da6b2837f22a75e988239dabc1bdc30221f82aebaad69b8f06035e739077", @ANYRES16=0x0, @ANYBLOB="414ca6a457d09ded1da1cbdedcb7fcd2f0bf85862b6675163bf55f7bd7ad3f465cb76036d50555e5adfa947988cad6699dcee96ce9002a712c455449bc0f22efa480724894c2d22da8d477b1940e8c80d75249b8f730610ea473baf0ef31ba6e39a067672ed683b1505d5178c738de2ba3d6358076bbe62befbfd8241d4901f3cd26cebf58ae54b04e9c95d2cdc41ba2d0e18b8e6a23f1ffdb119c19af812ef0ff070000000000006e5a585a86e445c6136efb498efc323a"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) syslog$auto_SYSLOG_ACTION_CONSOLE_OFF(0x9, &(0x7f0000000400)='..^.(%{a]}#[.$\x00', 0x7ff) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r3) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r1) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000340)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x10895) socketpair$auto(0xd4, 0x7, 0x2, &(0x7f0000000380)=0x8) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r3, 0x7a9, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) r6 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0, 0x0) pread64$auto(r6, 0x0, 0x800000003, 0x1) 32m10.655533788s ago: executing program 1 (id=1227): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x5, r0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/dev_snmp6/veth0_to_hsr\x00', 0x180, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3d7}, 0x7}, 0x803, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454da, 0x38) r5 = socket(0x2b, 0x1, 0x1) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x1, 0x2) setsockopt$auto(r5, 0x29, 0x42, 0x0, 0x1) unshare$auto(0x40000080) open(0x0, 0x4140, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8002, 0x0) connect$auto(r4, &(0x7f00000001c0)=@isdn={0x22, 0x4, 0x3, 0x9, 0x3}, 0x5) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x40e00, 0x0) dup3$auto(r3, 0x5, 0x800080000) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) 31m55.454591743s ago: executing program 33 (id=1227): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x5, r0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/dev_snmp6/veth0_to_hsr\x00', 0x180, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3d7}, 0x7}, 0x803, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454da, 0x38) r5 = socket(0x2b, 0x1, 0x1) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x1, 0x2) setsockopt$auto(r5, 0x29, 0x42, 0x0, 0x1) unshare$auto(0x40000080) open(0x0, 0x4140, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8002, 0x0) connect$auto(r4, &(0x7f00000001c0)=@isdn={0x22, 0x4, 0x3, 0x9, 0x3}, 0x5) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x40e00, 0x0) dup3$auto(r3, 0x5, 0x800080000) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) 10.442443715s ago: executing program 4 (id=7184): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x8040, 0x0) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559) (async) listen$auto(0x3, 0x81) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async, rerun: 32) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x7, 0x2, r2, 0x7fff, 0x401) (async, rerun: 32) close_range$auto(r0, r0, 0x3) (async) socket(0xa, 0x801, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0x20004000000000df, 0xeb1, 0x401, 0x80008000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$auto_BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000040)="274d26a9754e9b5b153baaf20dec82bbd5e5f0d43f7ebc6e67d724bd5938b6eb11145e39e6377991da9c8e5aedd1c00bbd5fd783b46dd8986184523f6610716857a0b276139d6726964c1e697f457ecc37dfc27a1880172de540bc781446cc1043c45d7914f86e14c761f493b88919af768b6a8c7daa9d3a62cc837577ffec345f4e97c4652c4db625165d221102ccf4ee2538b082d1f93c3a4798335b523ce330d28984f64813de76671606a9a77997946fda0236bc247e", 0x2f}, 0x81, 0x0, 0x4, 0x2, 0x3, 0x2, 0x7, 0x2, "a70809cbe19dfc86eda81c5d362c46b8d5af0caa76d4d042c1328c5bf8cbbf1fdb5ac00bd9a53fa2713a37bc405489fbc83daf1b1896fe6fa708155c2b374c0a"}) (async) close_range$auto(r3, 0x8, 0x3) (async, rerun: 64) ioctl$auto(r0, 0x5646, r0) (async, rerun: 64) fcntl$auto(0x3, 0x4, 0xa553) 10.070357863s ago: executing program 4 (id=7186): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, r0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000000000007, 0x4000000000000f, 0x8fd6, 0x9, 0x9, 0x15f4da08, 0x3, 0x3, 0x63, 0x80000001, 0x4, 0x1, 0x9, 0x80000000, 0xfffffffffffffffc]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/8/smp_affinity_list\x00', 0x2a000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop8\x00', 0x10001, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x400000008, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') unlink$auto(&(0x7f0000000380)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) 7.755827128s ago: executing program 4 (id=7190): open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (fail_nth: 22) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80000, 0x5097) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) execve$auto(0x0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f0000000080)="8063195a3b9d0c64d57433235717098542e85c6e9fdb") 7.377041033s ago: executing program 3 (id=7192): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x30000, 0x0) ioctl$auto_BLKTRACESTOP2(r0, 0x1275, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x581, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000080)=""/56, 0x38) connect$auto(r1, &(0x7f00000000c0)=@llc={0x1a, 0x303, 0x6e, 0x9, 0x8, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x2) pread64$auto(r1, &(0x7f0000000100)='/dev/sg1\x00', 0xfff, 0x6) ioctl$auto_FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x14d) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x408200, 0x0) read$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000180)=""/241, 0xf1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/030/001\x00', 0x408c0, 0x0) ioctl$auto_FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000002c0)="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") getcwd$auto(&(0x7f00000012c0)='/dev/sg1\x00', 0x2) getcwd$auto(&(0x7f0000001300)='\xaa\xaa\xaa\xaa\xaa', 0x800000) ppoll$auto(&(0x7f0000001340)={r2, 0x3, 0x7}, 0x4, &(0x7f0000001380)={0x4, 0x9}, &(0x7f00000013c0)={0xfffffffffffffffa}, 0x8) r4 = getpgrp(0x0) r5 = prctl$auto_PR_SET_MM_START_CODE(0x53, 0x1, r4, 0x6dd, 0x7fffffffffffffff) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), r5) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r3, 0xc0844123, &(0x7f0000001540)={0x53, @reserved="0649743be3c597c8f969240d2107e2c809097e52937bc46e3b985ad8920e5e61791a6f0ebc01afc107c52300a68b8b3b03ac51bb828d58df1bc493661ff926e5", @control={0x1, 0x5}}) getsockopt$auto_SO_KEEPALIVE(r3, 0x8, 0x9, &(0x7f0000001600)='\xf3\x00', &(0x7f0000001640)=0x3) socket(0x2b, 0x1, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000016c0), r3) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r3, &(0x7f0000001e40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001700)={0x6f0, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xf6}, @NL80211_ATTR_BEACON_HEAD={0x6ba, 0xe, "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"}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000800) getcwd$auto(&(0x7f0000001e80)='l2tp\x00', 0x8) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/devices/pnp0/00:04/00:04:0/00:04:0.0/tty/ttyS0/port\x00', 0x581000, 0x0) setsockopt$auto(r8, 0x9, 0x1, &(0x7f0000001f00)='\'(#}\x00', 0x2) pread64$auto(r2, &(0x7f0000001f40)='\xf3\x00', 0x3d200000, 0x2) acct$auto(&(0x7f0000001f80)='l2tp\x00') getcwd$auto(&(0x7f0000001fc0)='/dev/hwrng\x00', 0x9) close_range$auto(r8, r5, 0x7089) 7.278258756s ago: executing program 5 (id=7193): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000003c0)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffe1, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x0, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], "c00f88b2f21e4245a45f2ebb67c30851c56ab251be36e09b002a2861fc0d73e54003120bc540e07aac877c65f8342d33dbafb4523f0abc797cd1bd4ce3cb9b97160fbb221da78c19d9c5be3d6d492b1ae4c4981984666859aafd5552"}, 0x1fe, 0x200d) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x7}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF1_AGE={0x8, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYBLOB], 0x1ac}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="26010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x24044810}, 0x8005) r5 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r5, 0x0, 0x6) setpriority$auto(0x46, r5, 0x2) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x0, 0x70b, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x200480c5) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf252b00000006000a00ff0f000006000d0008000000850003000a0005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x62, &(0x7f0000000100)={&(0x7f0000000800)="3e92649b8cf781aa356eb225106f6ceade63ba2132e60d741d4a161ab8f460c5ebf6ff1ca655ee40e720c031d54c9a96ae4265636525a7dce5c291601963529ae8d72d768b9904a2a9a81cdd67a620db462a28eb81f3758388f4453e9837e034703889497f7635b48dbc5de0e496874219b831d9df5b94a3f6ae40a6dd", 0x4}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 6.951068577s ago: executing program 4 (id=7194): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x800, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0x7ff, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) 6.370887698s ago: executing program 3 (id=7196): r0 = socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10401, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r1, 0x80845663, r1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="410026bd7000fedbdf2d008000000800030000020000060007000080000008000200", @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB="ba418504600a85be64f984e41755f19b238d2b78fc77f99493f20578cd0a7badb961c559f5f414e186671f5552b67e3a37081d4ba0f9f6bfad60fb89a41d3e0075727f0c1219a1a79c4bba75b17e7778f6f06c29fa99ee2895a275750d5a313f5c81470536961fcc4532e394a69325a805b60d025410f15c04ada8958b2ceabfea04af4b52456e183b37dff2677d301054ac44d8d690c14c17eb45665cec5561d5fc6ac90cfd6ecc013f08093925f72fc82a504eef708e2f15ef2466c0e68f0c64574b6d4106e5d426025c86d83131ead14fa57a5f62e782a8dbbda3e78b49630c9aa3904beb03f6a32ffb", @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r3 = socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) 6.345530188s ago: executing program 5 (id=7197): socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 5.714026118s ago: executing program 2 (id=7198): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0xff, 0x1ff, 0x2, 0x2}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r2, &(0x7f0000001d40)={0x0, 0x2}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ppoll$auto(&(0x7f00000002c0)={r4, 0x1, 0xd75}, 0x2, 0x0, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) 5.669108007s ago: executing program 3 (id=7199): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, r0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000000000007, 0x4000000000000f, 0x8fd6, 0x9, 0x9, 0x15f4da08, 0x3, 0x3, 0x63, 0x80000001, 0x4, 0x1, 0x9, 0x80000000, 0xfffffffffffffffc]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/8/smp_affinity_list\x00', 0x2a000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop8\x00', 0x10001, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x400000008, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') unlink$auto(&(0x7f0000000380)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) 4.69831104s ago: executing program 5 (id=7200): socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) (fail_nth: 1) 3.843533038s ago: executing program 2 (id=7201): sched_get_priority_min$auto(0x86) sched_get_priority_min$auto(0x9) sched_get_priority_min$auto(0x0) r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x402400, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x80000000) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x6) set_mempolicy$auto(0x0, &(0x7f0000000040)=0x6, 0x8) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x7fff, 0xffffffffffff4dac) ioctl$auto_EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x9, 0x2c, "23251ae12a7de215e1a000b522f3020b9340fe460c1178a1b5ab53b123176ed6526fb8df19054516026c738487663a44f63034326aeb948e6118e314abaa39a09d0dd38c12f9a8c25f60eb8e598da66358dbc764ff9cab79b78da3a4f7500dfd3f93ca19d13517d70e3ba0560406a16d36bacf05e3fa3b336cd0f840d71e4c5ee8"}) sched_get_priority_min$auto(0x3) ioctl$auto_FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, 0x2, 0xf2, 0x5, "515466fdc64952c6"}) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000001c0)=0x40) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x3, @inferred=r0, @raw=0x101, 0x2, 0x50, '\x00', {0x3, 0x3, 0x1, 0xee00, 0xffffffffffffffff, 0xb4, 0x5, 0x7, {0x4, 0x4}, {0x1, 0x6fc}, {0xa2, 0xb8d3}, 0x8000000000000000, 0x1, 0x5, 0x101, 0x5, 0x0, 0x0, 0x100, 0x1, 0x7ee4, '\x00', 0x7f, 0x5, 0x1, 0x2}}) newfstatat$auto(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x7fa, 0xfffffffffffff4c0, 0xe, 0xc, r2, 0xffffffffffffffff, 0x0, 0x5, 0x81, 0x5552, 0x1, 0x4, 0xffffffffffffff00, 0xc9c7, 0x97, 0x8, 0x5}, 0xcd40) sched_get_priority_min$auto(0x5) setsockopt$auto(r1, 0x10001, 0x6, &(0x7f00000003c0)='\x00', 0x800) clone$auto(0x9, 0x3ff, &(0x7f0000000400)=0x6, &(0x7f0000000440)=0xec9433fa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop11\x00', 0x5a1841, 0x0) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0xfffffff8, 0x43, &(0x7f00000004c0)='\x00', 0xe) set_mempolicy$auto(0x2, &(0x7f0000000500)=0xffffffff, 0x9) mkdir$auto(&(0x7f0000000540)='./file0\x00', 0x45dd) 3.440179522s ago: executing program 4 (id=7202): socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x1) socket(0x10, 0x2, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x420002, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) 3.094958674s ago: executing program 5 (id=7203): r0 = socket(0x3, 0x6, 0xb) socket(0x2b, 0x1, 0x1) readv$auto(r0, &(0x7f0000000000)={&(0x7f0000000240)="86a8e42361d48f1ed0c1a86dc9b7c427b709a9228f36f74bc6ed5fbfa9d33073591e7fdb247f389c3c5d645e8462c9cc999d52d9bc056c95290d154ea9943cec9ce6cee59f7ba684870e00cae58b18be8ac63227447372dd4d134aef9479ec16cf18f73fdb880fc26a17c13a434bdca15963eb29d07c0fd8160ea3d44856aee1b4147b3cb906f88e5e4ef42ef8af706340f8c8212cbde1306c1e592f2b659fa30379b140667f5552e19366d390186a1a14d607e3937eaff67ff6aed746465555b0e60f75c28bc229ee1f43a75866fe452cce04821e920beef5ce86", 0x9}, 0x6) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) dup2$auto(0x0, 0x4) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xffffff75, 0xfffffc01}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af14, 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r2}, 0x18) 3.093550042s ago: executing program 2 (id=7204): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYBLOB="2f212abd7800fddb811cbf0c0e7953d32a1ac5f1eb0a1e945a7eae228b76fe8b75afe6a77e2043db4225c0c17ba0396d14130fb90546dfc9804e08210351f3ff96c76d63f9a9c9c06f0f55a52a319f7ec72785d9530005c2c13b4e226d065e0b25871ec5a24841b751cc8d1be733c98c866eb241ab5dc4a1"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffb, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x62, 0xfffffffffffffffc, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000440)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x808a0d, 0x7, 0x7, 0x800, 0x89, 0x26, 0x4, 0x200000080001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x200, 0x7ff, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8001, 0x6, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x3a6, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80], "a99584f4b750a1a2e822203c079fab9eadbbb1ffda25f7cd1dfad139ebc96de3cc0cff8b97fe65354b7443b4b95060fd9fa142c6bb0bc3c67c1f58690e9eb2d2df8f5890c95a50bff3f78e530b0769027da15bb354209eb883174e278ea73781bd72a729081384ac98d5965a9de73113feeea5dd133655997120ae46401b2badc5c53c457002a9642ea1456c28"}, 0x9, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns$auto(0x0, 0xb) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) 2.739003313s ago: executing program 3 (id=7205): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000003c0)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffe1, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x0, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], "c00f88b2f21e4245a45f2ebb67c30851c56ab251be36e09b002a2861fc0d73e54003120bc540e07aac877c65f8342d33dbafb4523f0abc797cd1bd4ce3cb9b97160fbb221da78c19d9c5be3d6d492b1ae4c4981984666859aafd5552"}, 0x1fe, 0x200d) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x7}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF1_AGE={0x8, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000", @ANYBLOB], 0x1ac}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="26010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x24044810}, 0x8005) r5 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r5, 0x0, 0x6) setpriority$auto(0x46, r5, 0x2) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x0, 0x70b, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x200480c5) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf252b00000006000a00ff0f000006000d0008000000850003000a0005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x62, &(0x7f0000000100)={&(0x7f0000000800)="3e92649b8cf781aa356eb225106f6ceade63ba2132e60d741d4a161ab8f460c5ebf6ff1ca655ee40e720c031d54c9a96ae4265636525a7dce5c291601963529ae8d72d768b9904a2a9a81cdd67a620db462a28eb81f3758388f4453e9837e034703889497f7635b48dbc5de0e496874219b831d9df5b94a3f6ae40a6dd", 0x4}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 2.189663795s ago: executing program 3 (id=7206): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x800, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0x7ff, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) 1.719690997s ago: executing program 5 (id=7207): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x800, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0x7ff, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), 0xffffffffffffffff) 1.483994881s ago: executing program 2 (id=7208): socket(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) (fail_nth: 4) 1.011948001s ago: executing program 4 (id=7209): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000000000007, 0x4000000000000f, 0x8fd6, 0x9, 0x9, 0x15f4da08, 0x3, 0x3, 0x63, 0x80000001, 0x4, 0x1, 0x9, 0x80000000, 0xfffffffffffffffc]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto_SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f00000001c0)="8535ca649dc9a98043ac4358b028ab92ac98d7920d11b123bed030f1f7e656bbf5bfcda0c9f6a1bf87c00a31b5d751aff463e88eb96078ec95429b73d45fc0d958822a47c8fa261177213428c42ed9632296213fe556abaf4c9c16981aadab04eb27ea4166694b93f5d40f9cb4741d1155d2e4f4e25314af2803064cf396fd7356041a488212c11c388d423bf3066f5b638cfb9691511e75ce7a2876fdfeb2944a9c4652bff83f2ce40c3d01c43ccb21d2") setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) mmap$auto(0x0, 0xff, 0x7f, 0xeb1, 0x200000401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x30000000fd01) 996.756975ms ago: executing program 3 (id=7210): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0xff, 0x1ff, 0x2, 0x2}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r2, &(0x7f0000001d40)={0x0, 0x2}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ppoll$auto(&(0x7f00000002c0)={r4, 0x1, 0xd75}, 0x2, 0x0, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) 950.114348ms ago: executing program 2 (id=7211): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) (async) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x1d, 0x2, 0x6) (async) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) (async) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xd05402, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x25d2, 0xee00, 0xee01, 0x200, 0x0, 0x10, 0xd58}, 0xed82, 0xb, 0x2, 0x9, @inferred, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)="d9c0c554f73cae77ffefbf979b49698b88913999e4b4fbc21389f9a5118f9ec7efb9713d7a136c3d30ab3b86194748659a7ce0b2121058520d6aec7bc1ae2865b9d4fbb6baf1836888591a9619a4a1d42d39e5e2940482a7c265a2d84ac1e9695c73e44c915ecbe3b598da2d9b24068f8fe8aeea0b5e2f3e79d3ca083ac9c18cdb92edf6d9a6cefb40cf3c51cb7e94f688e125f5b71e533c6a4330b43ad4b49501a46001326d5284bc649da21198a87426270767da8bd726a2dc3910f7b8d27ee01a3ee50551e73c2b04e391519c002224c4dd32f819f515805833a17ad7b96e3c32c0ed725bd2d0ed3640537259ba017344ef7ec3b0544f7e751760608d71d2cac51bf8de7e665045e6be16b418f00b0bff6c7a7cba12c501797fe20429ecafffda5e0b7126b25fcd103c045368662511ffc25f79a15b72c5095fbcdc12a26092dc39d81cf7e6bd8024e3ab0a301094d9f18763c706e257ba0add96b6ad2ca0bfd3ce08da9a018a18e638c29d1419b751742db6dd60de1c88c3f53188ddcd1a2d909902d3c0335c9af05815634f3f23806165453e1b0528ad7a7f327b401b9b43218e71e0d0a4b82c0e01588d8c6e42a3163aa307387ae60bb5b16c7987b856c543f68b23c6655b387ecedc0ddc1bed7ea586de801748c65162386cb20f48d7c2f6c69313fb2ffc62f0d42587cb94d6a29abda2e3692c5420369d6f613b50c1c1d754d36c1a2d95453d6be5f2a1307bd0dbfc799cc47d42a189ce2e8abd440284328dcf033c6d027367afd6fc61d08bad07897f1dd7452311ee0aa487099841271f86c1ded54f6e7282c757b323cd39a35a9f4619a2fad2dde08109d8b70fe9559e457ea0757ee1467aa279df2038b432f96cb3bdd55d1513128b4a523cdc0971c3b1a7c94a9e0fc7c34a0e79d14368960d43ab122c1241c6876c1ac48bb4f9f77c181f37c1848e81c71199d71c1449d5290422756377671dcfe64c1977f5cab68762cc02d21b2f7ee5e34d907f16473e742d02e95304df2e038708a5ce68f67f6c9c60854e1288958eb404ea4705d0b9e8ec7db267379a4093a40ef93c60967b029cf01035ede8b8bed8ae0709b076e8c83f2e5e4341cf717e4d639ec51f11960ec002cb8300a946851a20ca8bdf69c7626585e8f951ee5aa7082aaeb5d00dbe6ef4fbdbefa8325a51427dfe420b0c86179e49723325cee489e227e425f598febf527dc480f340b99bf73522c9c21be9c118c239b23a7f5bc65da6a2cccf378f9004ded96f352a265017dfb2b962ed0833232a4825bd6319267f27201c32d544d0e55fa3f9ea9366a933764ad4208dea7ee0df251a183f995f5ec74603bdd41ca331debc77ed904d55928461332e473ee33e402de1eea4f374176c2a5d9943d8d77601c21daf9fd08718ea58e4f1e958e4b2da7b8a76bf0315c12f4406e249f2475acc4d561f64a842eb329b687e04acb6a6a3288a1cf99e6a2b5135c06075b9df5463f4c49f794e405b5b3fb9b29eb71ced4119134a510b7ef1cd2f1262a2608df5798018f6b4de2fcd90f5438c72a87c10d8640743c968f7c0a3b94e03cce4daea0a649fc86a0b4f6fd4c914a0c573fb39ef4142c294c987c982f267cb474d76901cffa7b4aee60a9d590873587d3f190f21b61e93461930f49ee84bfa890d8ef5020098942fe5e07e334aee55d52fe416ff029dcbc773e7b30b2e5abe762c30fd8055a3fc5fb93bd83de77eb8efcd8957efb4198c01a2d99fe4c03d3c9f0bf08a078bcbf1b6673d82913d6ec630511b83892dd55f76273ca1dc760cdde9657004e99c0019f88614af984c594fb872f669cf2fc4be3d348e8f05a99032348b0f82a97644ba9bde82b7bbd14c079eeae7e13db6f9a3cd7cd549002aa8b0320a537c72902b9ce0e0c082dc1435e21b8b4c0aa7e1b8b23747833ec7cc56d90775446c210e52f0fc8841a5c8ad69c4ec952409484ea56e3ae958b20d9ae82636d434fd047342eb0819e4a7930dd1d092aab3fc791650950f55ef344b0ed88016eb3314ea115e51ed975baef2e0f45780a0abd86735256678b9c80862583f8654958261da7ff5de84636b1dd5d5f175a83745f236329023572616e27b0ab7b64880d267305ee944b251b9b9529e222b45d32e1ad32d482f0adce764a3ad6f430a00377b26821869c5205ab3ecb1979ac868454f2a04b53fb257e5dcf59b0a2d6c5ba4d426461d540c93c613f138d7d87118c950af8a65e9ad0ff6eee2196b8fdf7660e8a45b6698735595c0a1e51c920817bc2df8fd06eaa0f6a1f0c7e2f77ed563e51857fe001d5a7932b5d92f4b5a86bd1ce895ac2a4b8f67b392db880ddf7ecbea87fd0ced1fbd7b44b3f2c74c87dd53c1751618bd94f7870bb2d7a57074301f9f2c7d910c05743e23802a8e9b4a2992fc0c79f15527b9e458ff6741e3c13c5b8ab63c06fe9071c7289cd177f905f94fce71a31d428aa80c2ced0f3da038c31ec862f2dde73e0a62c36feaee6234f5618ff41d4ff2305ee34657a19d98ac39d4c8301b6bc17715eb5b1bae91034573ef16377ec44edfddadd366e1466f0dc6f865c6a4ce0014f9ee3022c37354fafbf5b3938840d31ef7e633abd42f7577e362a3d1db7b7b1b50ea91882c50e09be1fbf9e9157abadcbfb0f67136adc305f8781ba6caf816ff71b5a5393d2032aff0cbccb4481cbd3e51e909375e696280e69540c55fda66c52a111e6f64278facc965ac283ef6afbb9b92c445de9b777e9230cf340541b59e74b70ae7c60c888bff7d2a470d3644434cf77cea4d8168a3c06eff1d1acbe252b0fb8a20add105cf566064d204e1753979ca7a3636ba9d30da2e4cd3e4e5084aa38db4c0fae10d33e2771b42784373f694f9960f7ec26f781f29757a057ca0dfc8b991393896f5194ce5ac2f6641d13930ddf3bd73ee1757daf550f1b673a2d24248caa93bd2bc17450ceb9cf835f1583b0fd0ab2c7b2a9c7ace5de3f272858670b09f8549f75aba4a127d76ff23aa86f8384f34359b93eb9c1877206c2ee380fd1a63e222ce478c6d3ec846ab7f38c95756919ad5474e9e0b95a0f3fb6571c9d218fdfa703641d399b0e5f050c4c314d421ff0088cfb76f222a4e5183a48f23103053652afa2d80964f5ec8310c2c559415a8d1c9be8b5defe49682460e549fbd7eac561998dbee61dc5694c9441771b9638d66a8bab0849b41e862dff20032b4be7e6cfd83427a839ba363eca27affd2ae3f8b666a563e5382a399d48548e735b77ac19d1a0d980b1c35ef6c5ba45ac420b9f97a1c573175d69be83565d14301597ac5356df311a6a967f40ef8fe4bde6f35dae7dc0b80360d6edd79df73fcbafe7fba998fb01ffd0ac27b33e4a3e36ab7084122e2a3948e134398e1c09bc0715453fdc638e107dab24ff5e5ba0dc02ed180452992dc0e85d2046d15ab9431b78779550e29424994be282934cf8468b005c4d129e5ae25363c81c06bcce014fe66a92b51696a986b1c1464cb3e804ed307a28913eeff26f9b2f628c0480b9e0a3a4fe5f1fb6d7b29bb99de9e044da689c6b60bbf7b19c283a1a2b56f2f0a4282d7d2f28e38677aea476926598fad9cc578035c087502d4ab52d0a9a5a141eeb7dd960698eff655bb7dcab1cf18c994dfb2a2c74206bdce060a394fbb4ead54554f4166ca80ebae92d9a9a0caab9f4b0e7c8fb180d39dcd40f37c4cda1743a1d892302fbcf40feef75250e620edd608f5510efe7d0907d0487384c8f7d3c46b9dfbf041d717fbef793a42a9d9b3facc9d6511c7ecde8fbbfd2aa40669878d5008f87bbc18e6a9211a706ffca20703cf418832a6d038c6bc17f1a21b9bb955f4194f8b0dc884a0f937b3b281e41652d94d4e9bdec7e55406b1e23d8092aebe7e6936eac4585b7a6d64c1f8a1a7f91262f59cd5242d409a7911c9af94440fcd1fbe86c12742014fb2726991f27a3343df6382d85bc146a88aa43899eccae8b2becd18de2e5636f69823091b02b5d2f7d60460ae5fc4234ce53951ff11bf23b887138c08bb601ef41eab5d9f0294d2bf66b7e3b6ea217b0586ef7b3c8992cbdd530a8ce98d35c24e2069e35669ef54161650171e969a123363719beb246c68d40cc07012ac188ba212ec7e63f0239b2e898c56f56b5d2f4970c61523780fabf7fc26172b4734dff03665641fb3ff67d26cc03ed362992366e02f884ee8dc1603becec143cc358158c4c7da6dd5003f9dbfab2290adf06b182e0c7a4b944180d6c32da14c6117a8ec2eb900d8223ba06fed4fea7b13563469ff40682f0e4c3b2ac9e96ef1e34e6f892e3839f2e464c9787d248357ea0df02786eef42afdbe5b4842450cae29c42cdf14a7b99c642b4b3785c56fa2f11c565cef4a1932db4ac07002105346a05b329f76a1d3309e150cc9414dca97c83779e077c04d130f329e14423d8ad5442388f5efce58a196184067a2cc0de9f1023796f9733a8cfc0a3143cef3e71db7859167efe03b4cba3c35fdb3be623754b2d559a81d25cd1e3ed0ef84d9cebdbfeb49dddc4a70b6ee23aef60578b5c9ab1ad1ad3029e2b1f9ca4209abfff06d8f56a9115e327f6f6fd6b21ff90fdcbfc0d53d51a1374ba264a9c5ab3abb9c6368c5eb5b92694f2425473c4c73293f683840a764e9585e0641aac8f078e5caa693f900568470af65d115500b6c521c14c21c152ca120da558e9db9bd91cdaf91206eade95e39a1750e1411349590e1eb760f183290f7e43a2f13eac9a0bcaf34fa4d97c3c0b143badad55d23659ee67873e0f5abb03f516875aee32c88c80ef1d9ca872c53e152408e42767d78c416e6978bcb129a2868456c7ecafe35baaa3c4027f8d0ba038e3c41ce0207472fa246e1dad276a140e04d0bdef5bc1040c71e9872a6f40406bd2861f1fe36a7678fb8de3af0d0cd5787f948b9010200926242fe6e69f11713804ba14de1595ac21d8608a18a0c83f91da3dbd8aabedf692188d84b774f3d1f9a3cc500d74e3791b108c1970f5c21a78dc733d03f38728b54879d1830ddca4e781105a97d34b1b6b92c40b760e1850dbf9841e8180ed92d95e84a4375d9f37c8eb055cd3a7969b45d5d818c87dcf5d98435b78fead46236dc43021ffb47ec90cf0775cf82d7188a37c38b2fb7960329e051071500270dd490c9c7e36a24e4ea3235cc3e2660510b20f9fecaf10d1b470b4fffea8ab9c3847340abc36ae0ba53c4cc70b7b650c4a55c9c589684e81bd4356a87023e05189b7543a2147a481874717f6218a7370adad78f5612531eb4521acc5bff064074313dd4db6730e09f25f91d128921a3ce0e7c53453505626551a07c56d291b04d41dfd40c990979ecbe45d8e011d55e7d41a1763aada4206d63ecb97b95ef5b28054e70f30a75eca7925e7bebe2c644b12855ffa26ec56007ac0071dc48b22834a1244883e9c9be13057d2e6ef407111eb5ed55be879416113f1ef2591a7975350617c6236de7194644fda97cf3db5efda19f1583aa83e5a04b9711b13ec0fbbce231cbbd8b853b07b28fb26758216c7929e952e6dd0f0c45be3fc0d385fcb82d009c4067acb35047bcbd1a63101e2049a46fe94fc4f5fad79e8ef3e05a81570c74d957e9ef5a44995f8f0f3fe425a4a4fe14e82498c02b8869dde72d454430ff19ccb159dd3ea6ff0692a80ed17d7e058b18d45fa77aca08076b669cdc88565e794abc7b3e06bf66f38de24b58d9d9dfef88c1afde10abbacd0b51b6d5cee69e445f39e9e0a2a9272a8c4eaa79cc97c3b7be2dabe4da42442e", &(0x7f0000001340)="34ede4c7d7136b536e0b60dc7488f7a1bfbda20dea51282cea0df54cb731a9590719b3e67b403dc5a136d7d235ac7be4f23169b006e60ed85e33ca09c1d30c317abb2c4eea52293c2db4884e34185c9dbb2e7371b1760f71831d6c0b49c64ad19b7f67fa990e1233965bb60388d46e958e0dff666c8b5e1dcdee88a829cbf174a94ee5815726e872084b0be28aa7a504c363319ae244376486a1865d6e7ab097253f0b327834"}) (async) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000001400)={{0x7, 0xee00, 0xee00, 0x4, 0xf, 0x4, 0x10}, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0x5, 0x8000000000000000, 0xeb2a, 0x7, 0x1, 0x401, 0x6, 0x4, 0x1, @inferred=0xffffffffffffffff, @raw=0x8}) fstat$auto(r0, &(0x7f0000001580)={0x0, 0x1, 0xfb0, 0x7fff, r2, r4, 0x0, 0x8, 0x6, 0x1, 0xffffffff, 0x0, 0x5, 0x3, 0xa, 0x1000}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) rt_tgsigqueueinfo$auto(r5, r3, 0x80, &(0x7f0000001640)={@siginfo_0_0={0x1, 0x5, 0x9, @_sigfault={&(0x7f0000001480)="a7c6c8af0783356c8452828bb408ceed26756e6784ade323f63b6c1c8c30ab2d22b85742835eee7d130ff4f00bdd8d10fd2d17ef46ab845c6187aeb9dc9b0362557b", @_perf={0x2, 0xd8b, 0xfffffffc}}}}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async) select$auto(0x8, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xc, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0xfffffffffffffff7, 0x6]}, 0x0) (async) mmap$auto(0xc, 0x20008, 0x5, 0xeb1, 0x405, 0x8000) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff87, 0x0}, 0x400c801) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) 614.575678ms ago: executing program 2 (id=7212): socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(r2, &(0x7f00000003c0)={0x0, 0x7111}, 0x7) epoll_create$auto(0x3f) getdents64$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x8001, 0x7, 0x8001, 0xc, "b5029bf3b680f59ec1de27994f36759d0aa4c0f276967d6142c75a614e076ad84434a172eb479a174ac4486a51c2d54e2ea48c"}, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) unshare$auto(0x100000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000001) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0xfffffdc2) socketpair$auto(0x400, 0x6, 0x1000800, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) 0s ago: executing program 5 (id=7213): r0 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x402400, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x80000000) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x6) ioctl$auto_EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x9, 0x2c, "23251ae12a7de215e1a000b522f3020b9340fe460c1178a1b5ab53b123176ed6526fb8df19054516026c738487663a44f63034326aeb948e6118e314abaa39a09d0dd38c12f9a8c25f60eb8e598da66358dbc764ff9cab79b78da3a4f7500dfd3f93ca19d13517d70e3ba0560406a16d36bacf05e3fa3b336cd0f840d71e4c5ee8"}) ioctl$auto_FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, 0x2, 0xf2, 0x5, "515466fdc64952c6"}) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000001c0)=0x40) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x3, @inferred=r0, @raw=0x101, 0x2, 0x50, '\x00', {0x3, 0x3, 0x1, 0xee00, 0xffffffffffffffff, 0xb4, 0x5, 0x7, {0x4, 0x4}, {0x1, 0x6fc}, {0xa2, 0xb8d3}, 0x8000000000000000, 0x1, 0x5, 0x101, 0x5, 0x0, 0x0, 0x100, 0x1, 0x7ee4, '\x00', 0x7f, 0x5, 0x1, 0x2}}) newfstatat$auto(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x7fa, 0xfffffffffffff4c0, 0xe, 0xc, r2, 0xffffffffffffffff, 0x0, 0x5, 0x81, 0x5552, 0x1, 0x4, 0xffffffffffffff00, 0xc9c7, 0x97, 0x8, 0x5}, 0xcd40) setsockopt$auto(r1, 0x10001, 0x6, &(0x7f00000003c0)='\x00', 0x800) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0xfffffff8, 0x43, &(0x7f00000004c0)='\x00', 0xe) mkdir$auto(&(0x7f0000000540)='./file0\x00', 0x45dd) kernel console output (not intermixed with test programs): 6 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.505936][ T5062] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2124.505957][ T5062] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2124.505972][ T5062] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2124.505986][ T5062] RBP: 00007f26ba35c090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.506000][ T5062] R10: 00000000070000ee R11: 0000000000000246 R12: 0000000000000001 [ 2124.506014][ T5062] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2124.506042][ T5062] [ 2126.908127][T27886] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 2126.961569][ T5091] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6619'. [ 2127.027454][ T5091] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6619'. [ 2129.489980][ T5142] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6628'. [ 2129.514625][ T5124] FAULT_INJECTION: forcing a failure. [ 2129.514625][ T5124] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.527920][ T5124] CPU: 1 UID: 0 PID: 5124 Comm: syz.5.6626 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2129.527960][ T5124] Tainted: [U]=USER [ 2129.527968][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2129.527983][ T5124] Call Trace: [ 2129.527991][ T5124] [ 2129.528000][ T5124] dump_stack_lvl+0x16c/0x1f0 [ 2129.528034][ T5124] should_fail_ex+0x512/0x640 [ 2129.528066][ T5124] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2129.528096][ T5124] should_failslab+0xc2/0x120 [ 2129.528125][ T5124] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2129.528152][ T5124] ? vm_area_dup+0x25/0x760 [ 2129.528184][ T5124] vm_area_dup+0x25/0x760 [ 2129.528212][ T5124] __split_vma+0x17f/0x1030 [ 2129.528238][ T5124] ? mas_next_slot+0x12d3/0x21b0 [ 2129.528268][ T5124] ? __pfx___split_vma+0x10/0x10 [ 2129.528305][ T5124] vms_gather_munmap_vmas+0x392/0x1310 [ 2129.528335][ T5124] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2129.528364][ T5124] ? mas_walk+0x6a6/0x910 [ 2129.528399][ T5124] __mmap_region+0x314/0x27c0 [ 2129.528426][ T5124] ? rcu_is_watching+0x12/0xc0 [ 2129.528448][ T5124] ? __pfx___mmap_region+0x10/0x10 [ 2129.528473][ T5124] ? finish_task_switch.isra.0+0x221/0xc10 [ 2129.528503][ T5124] ? __schedule+0x1186/0x5de0 [ 2129.528573][ T5124] ? trace_cap_capable+0x18d/0x200 [ 2129.528613][ T5124] ? cap_capable+0xb3/0x250 [ 2129.528639][ T5124] mmap_region+0x1ab/0x3f0 [ 2129.528671][ T5124] do_mmap+0xd8e/0x11b0 [ 2129.528710][ T5124] ? __pfx_do_mmap+0x10/0x10 [ 2129.528744][ T5124] ? __pfx_down_write_killable+0x10/0x10 [ 2129.528783][ T5124] vm_mmap_pgoff+0x281/0x450 [ 2129.528822][ T5124] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2129.528864][ T5124] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2129.528893][ T5124] ? __x64_sys_futex+0x1e0/0x4c0 [ 2129.528917][ T5124] ? __x64_sys_futex+0x1e9/0x4c0 [ 2129.528945][ T5124] ksys_mmap_pgoff+0x7d/0x5c0 [ 2129.528979][ T5124] ? rcu_is_watching+0x12/0xc0 [ 2129.529003][ T5124] __x64_sys_mmap+0x125/0x190 [ 2129.529029][ T5124] do_syscall_64+0xcd/0x230 [ 2129.529061][ T5124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2129.529085][ T5124] RIP: 0033:0x7f4792d8e969 [ 2129.529103][ T5124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2129.529128][ T5124] RSP: 002b:00007f4793c9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2129.529150][ T5124] RAX: ffffffffffffffda RBX: 00007f4792fb6080 RCX: 00007f4792d8e969 [ 2129.529168][ T5124] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 2129.529183][ T5124] RBP: 00007f4792e10ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 2129.529198][ T5124] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 2129.529213][ T5124] R13: 0000000000000000 R14: 00007f4792fb6080 R15: 00007ffc802c2608 [ 2129.529243][ T5124] [ 2129.865118][ T5142] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6628'. [ 2130.048048][ T5134] FAULT_INJECTION: forcing a failure. [ 2130.048048][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.060727][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.3.6629 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2130.060769][ T5134] Tainted: [U]=USER [ 2130.060778][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2130.060792][ T5134] Call Trace: [ 2130.060800][ T5134] [ 2130.060809][ T5134] dump_stack_lvl+0x16c/0x1f0 [ 2130.060842][ T5134] should_fail_ex+0x512/0x640 [ 2130.060874][ T5134] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2130.060904][ T5134] should_failslab+0xc2/0x120 [ 2130.060932][ T5134] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2130.060957][ T5134] ? is_bad_inode+0xd/0x40 [ 2130.060988][ T5134] ? ima_d_path+0xbd/0x2a0 [ 2130.061014][ T5134] ima_d_path+0xbd/0x2a0 [ 2130.061032][ T5134] ? vfs_getxattr_alloc+0xec/0x340 [ 2130.061070][ T5134] ? __pfx_ima_d_path+0x10/0x10 [ 2130.061096][ T5134] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2130.061136][ T5134] process_measurement+0x1d86/0x23e0 [ 2130.061180][ T5134] ? __pfx_process_measurement+0x10/0x10 [ 2130.061212][ T5134] ? __lock_acquire+0x5ca/0x1ba0 [ 2130.061244][ T5134] ? init_file+0x93/0x4c0 [ 2130.061269][ T5134] ? alloc_empty_file+0x73/0x1e0 [ 2130.061296][ T5134] ? hugetlb_file_setup+0x4cd/0x620 [ 2130.061324][ T5134] ? ksys_mmap_pgoff+0x189/0x5c0 [ 2130.061354][ T5134] ? __x64_sys_mmap+0x125/0x190 [ 2130.061418][ T5134] ima_file_mmap+0x1b1/0x1d0 [ 2130.061451][ T5134] ? __pfx_ima_file_mmap+0x10/0x10 [ 2130.061492][ T5134] security_mmap_file+0x88c/0x990 [ 2130.061524][ T5134] vm_mmap_pgoff+0xec/0x450 [ 2130.061560][ T5134] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2130.061591][ T5134] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2130.061622][ T5134] ? hugetlbfs_get_inode+0x31f/0x730 [ 2130.061657][ T5134] ksys_mmap_pgoff+0x1c8/0x5c0 [ 2130.061690][ T5134] ? rcu_is_watching+0x12/0xc0 [ 2130.061714][ T5134] __x64_sys_mmap+0x125/0x190 [ 2130.061740][ T5134] do_syscall_64+0xcd/0x230 [ 2130.061776][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.061801][ T5134] RIP: 0033:0x7fe23998e969 [ 2130.061820][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2130.061843][ T5134] RSP: 002b:00007fe23a749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2130.061865][ T5134] RAX: ffffffffffffffda RBX: 00007fe239bb5fa0 RCX: 00007fe23998e969 [ 2130.061881][ T5134] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 2130.061895][ T5134] RBP: 00007fe23a749090 R08: 0000000000000401 R09: 0000300000000000 [ 2130.061910][ T5134] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 2130.061924][ T5134] R13: 0000000000000000 R14: 00007fe239bb5fa0 R15: 00007ffcd791dec8 [ 2130.061954][ T5134] [ 2131.579187][ T5157] FAULT_INJECTION: forcing a failure. [ 2131.579187][ T5157] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.602510][ T5157] CPU: 1 UID: 0 PID: 5157 Comm: syz.5.6631 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2131.602569][ T5157] Tainted: [U]=USER [ 2131.602582][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2131.602615][ T5157] Call Trace: [ 2131.602627][ T5157] [ 2131.602640][ T5157] dump_stack_lvl+0x16c/0x1f0 [ 2131.602696][ T5157] should_fail_ex+0x512/0x640 [ 2131.602742][ T5157] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2131.602784][ T5157] should_failslab+0xc2/0x120 [ 2131.602824][ T5157] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2131.602861][ T5157] ? __kernfs_new_node+0xd2/0x8a0 [ 2131.602918][ T5157] __kernfs_new_node+0xd2/0x8a0 [ 2131.602974][ T5157] ? __pfx___kernfs_new_node+0x10/0x10 [ 2131.603036][ T5157] ? find_held_lock+0x2b/0x80 [ 2131.603069][ T5157] ? kernfs_root+0xee/0x2a0 [ 2131.603128][ T5157] kernfs_new_node+0x13c/0x1e0 [ 2131.603177][ T5157] __kernfs_create_file+0x53/0x350 [ 2131.603224][ T5157] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2131.603285][ T5157] internal_create_group+0x578/0xf30 [ 2131.603348][ T5157] ? __pfx_internal_create_group+0x10/0x10 [ 2131.603426][ T5157] ? kernfs_create_link+0x1bd/0x240 [ 2131.603477][ T5157] internal_create_groups+0x9d/0x150 [ 2131.603514][ T5157] device_add+0x6d1/0x1a70 [ 2131.603561][ T5157] ? __pfx_device_add+0x10/0x10 [ 2131.603605][ T5157] ? lockdep_init_map_type+0x5c/0x280 [ 2131.603656][ T5157] ? __init_waitqueue_head+0xca/0x150 [ 2131.603719][ T5157] netdev_register_kobject+0x182/0x3a0 [ 2131.603765][ T5157] register_netdevice+0x13dc/0x2270 [ 2131.603811][ T5157] ? __pfx_register_netdevice+0x10/0x10 [ 2131.603852][ T5157] ? alloc_netdev_mqs+0xe7e/0x1570 [ 2131.603889][ T5157] ? __pfx_loopback_net_init+0x10/0x10 [ 2131.603931][ T5157] register_netdev+0x34/0x50 [ 2131.603966][ T5157] loopback_net_init+0x7a/0x170 [ 2131.604007][ T5157] ? __pfx_loopback_net_init+0x10/0x10 [ 2131.604044][ T5157] ops_init+0x1df/0x5f0 [ 2131.604082][ T5157] setup_net+0x21e/0x850 [ 2131.604121][ T5157] ? __pfx_setup_net+0x10/0x10 [ 2131.604153][ T5157] ? lockdep_init_map_type+0x5c/0x280 [ 2131.604198][ T5157] ? __pfx_down_read_killable+0x10/0x10 [ 2131.604250][ T5157] ? debug_mutex_init+0x37/0x70 [ 2131.604308][ T5157] copy_net_ns+0x2a6/0x5f0 [ 2131.604352][ T5157] create_new_namespaces+0x3ea/0xad0 [ 2131.604400][ T5157] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2131.604443][ T5157] ksys_unshare+0x45b/0xa40 [ 2131.604488][ T5157] ? __pfx_ksys_unshare+0x10/0x10 [ 2131.604530][ T5157] ? xfd_validate_state+0x5d/0x180 [ 2131.604584][ T5157] ? syscall_user_dispatch+0x78/0x140 [ 2131.604651][ T5157] __x64_sys_unshare+0x31/0x40 [ 2131.604697][ T5157] do_syscall_64+0xcd/0x230 [ 2131.604741][ T5157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.604773][ T5157] RIP: 0033:0x7f4792d8e969 [ 2131.604811][ T5157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2131.604844][ T5157] RSP: 002b:00007f4793cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2131.604875][ T5157] RAX: ffffffffffffffda RBX: 00007f4792fb5fa0 RCX: 00007f4792d8e969 [ 2131.604897][ T5157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2131.604917][ T5157] RBP: 00007f4792e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2131.604936][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2131.604954][ T5157] R13: 0000000000000000 R14: 00007f4792fb5fa0 R15: 00007ffc802c2608 [ 2131.604997][ T5157] [ 2133.096683][ T5188] netlink: 146 bytes leftover after parsing attributes in process `syz.2.6638'. [ 2134.825823][ T5223] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6646'. [ 2134.899781][ T5226] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6646'. [ 2134.960260][ T5223] netlink: 294 bytes leftover after parsing attributes in process `syz.5.6646'. [ 2138.770413][ T5273] netlink: 146 bytes leftover after parsing attributes in process `syz.5.6655'. [ 2139.954298][ T5297] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6660'. [ 2140.013564][ T5298] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6660'. [ 2141.152784][ T5316] FAULT_INJECTION: forcing a failure. [ 2141.152784][ T5316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.199843][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.3.6664 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2141.199898][ T5316] Tainted: [U]=USER [ 2141.199907][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2141.199921][ T5316] Call Trace: [ 2141.199930][ T5316] [ 2141.199939][ T5316] dump_stack_lvl+0x16c/0x1f0 [ 2141.199973][ T5316] should_fail_ex+0x512/0x640 [ 2141.200011][ T5316] _copy_from_user+0x2e/0xd0 [ 2141.200047][ T5316] clear_refs_write+0xea/0xb70 [ 2141.200088][ T5316] ? __pfx_clear_refs_write+0x10/0x10 [ 2141.200123][ T5316] ? __lock_acquire+0xaa4/0x1ba0 [ 2141.200156][ T5316] ? get_pid_task+0xfc/0x250 [ 2141.200207][ T5316] vfs_write+0x25c/0x1180 [ 2141.200227][ T5316] ? __pfx_clear_refs_write+0x10/0x10 [ 2141.200266][ T5316] ? __pfx___mutex_lock+0x10/0x10 [ 2141.200296][ T5316] ? __pfx_vfs_write+0x10/0x10 [ 2141.200325][ T5316] ? __fget_files+0x20e/0x3c0 [ 2141.200369][ T5316] ksys_write+0x12a/0x240 [ 2141.200390][ T5316] ? __pfx_ksys_write+0x10/0x10 [ 2141.200420][ T5316] do_syscall_64+0xcd/0x230 [ 2141.200451][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2141.200474][ T5316] RIP: 0033:0x7fe23998e969 [ 2141.200492][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2141.200515][ T5316] RSP: 002b:00007fe23a728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2141.200537][ T5316] RAX: ffffffffffffffda RBX: 00007fe239bb6080 RCX: 00007fe23998e969 [ 2141.200552][ T5316] RDX: 00000000ffffff4b RSI: 0000000000000000 RDI: 0000000000000003 [ 2141.200566][ T5316] RBP: 00007fe23a728090 R08: 0000000000000000 R09: 0000000000000000 [ 2141.200581][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2141.200595][ T5316] R13: 0000000000000001 R14: 00007fe239bb6080 R15: 00007ffcd791dec8 [ 2141.200624][ T5316] [ 2142.568639][ T5338] FAULT_INJECTION: forcing a failure. [ 2142.568639][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.581629][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.2.6670 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2142.581680][ T5338] Tainted: [U]=USER [ 2142.581690][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2142.581709][ T5338] Call Trace: [ 2142.581720][ T5338] [ 2142.581733][ T5338] dump_stack_lvl+0x16c/0x1f0 [ 2142.581778][ T5338] should_fail_ex+0x512/0x640 [ 2142.581820][ T5338] ? fs_reclaim_acquire+0xae/0x150 [ 2142.581873][ T5338] ? ima_alloc_init_template+0xb5/0x720 [ 2142.581924][ T5338] should_failslab+0xc2/0x120 [ 2142.581963][ T5338] __kmalloc_noprof+0xd2/0x510 [ 2142.581999][ T5338] ? find_held_lock+0x2b/0x80 [ 2142.582037][ T5338] ima_alloc_init_template+0xb5/0x720 [ 2142.582093][ T5338] ? take_dentry_name_snapshot+0x319/0x7d0 [ 2142.582139][ T5338] ima_store_measurement+0x1eb/0x5c0 [ 2142.582176][ T5338] ? __pfx_ima_store_measurement+0x10/0x10 [ 2142.582211][ T5338] ? vfs_getxattr_alloc+0xec/0x340 [ 2142.582274][ T5338] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2142.582328][ T5338] process_measurement+0x1ddb/0x23e0 [ 2142.582391][ T5338] ? __pfx_process_measurement+0x10/0x10 [ 2142.582437][ T5338] ? __lock_acquire+0x5ca/0x1ba0 [ 2142.582481][ T5338] ? init_file+0x93/0x4c0 [ 2142.582514][ T5338] ? alloc_empty_file+0x73/0x1e0 [ 2142.582554][ T5338] ? hugetlb_file_setup+0x4cd/0x620 [ 2142.582602][ T5338] ? ksys_mmap_pgoff+0x189/0x5c0 [ 2142.582646][ T5338] ? __x64_sys_mmap+0x125/0x190 [ 2142.582738][ T5338] ima_file_mmap+0x1b1/0x1d0 [ 2142.582787][ T5338] ? __pfx_ima_file_mmap+0x10/0x10 [ 2142.582846][ T5338] security_mmap_file+0x88c/0x990 [ 2142.582891][ T5338] vm_mmap_pgoff+0xec/0x450 [ 2142.582941][ T5338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2142.582985][ T5338] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2142.583031][ T5338] ? hugetlbfs_get_inode+0x31f/0x730 [ 2142.583082][ T5338] ksys_mmap_pgoff+0x1c8/0x5c0 [ 2142.583130][ T5338] ? rcu_is_watching+0x12/0xc0 [ 2142.583164][ T5338] __x64_sys_mmap+0x125/0x190 [ 2142.583201][ T5338] do_syscall_64+0xcd/0x230 [ 2142.583246][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2142.583279][ T5338] RIP: 0033:0x7f7b6618e969 [ 2142.583305][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2142.583338][ T5338] RSP: 002b:00007f7b66f70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2142.583369][ T5338] RAX: ffffffffffffffda RBX: 00007f7b663b6080 RCX: 00007f7b6618e969 [ 2142.583391][ T5338] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 2142.583411][ T5338] RBP: 00007f7b66f70090 R08: 0000000000000401 R09: 0000300000000000 [ 2142.583432][ T5338] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 2142.583452][ T5338] R13: 0000000000000000 R14: 00007f7b663b6080 R15: 00007ffe53a16338 [ 2142.583495][ T5338] [ 2142.595037][ T30] audit: type=1804 audit(4295001866.221:44): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.6670" name="anon_hugepage" dev="hugetlbfs" ino=149184 res=0 errno=0 [ 2143.495863][ T5354] program syz.3.6671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2144.461086][ T5367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6676'. [ 2144.539586][ T5367] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 2147.385672][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6687'. [ 2151.148908][ T5458] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6694'. [ 2151.160227][ T5458] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6694'. [ 2153.836271][ T5508] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6706'. [ 2153.861779][ T5508] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6706'. [ 2154.316285][ T5520] FAULT_INJECTION: forcing a failure. [ 2154.316285][ T5520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2154.335352][ T5520] CPU: 1 UID: 0 PID: 5520 Comm: syz.3.6710 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2154.335406][ T5520] Tainted: [U]=USER [ 2154.335417][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2154.335436][ T5520] Call Trace: [ 2154.335447][ T5520] [ 2154.335460][ T5520] dump_stack_lvl+0x16c/0x1f0 [ 2154.335505][ T5520] should_fail_ex+0x512/0x640 [ 2154.335556][ T5520] should_fail_alloc_page+0xe7/0x130 [ 2154.335605][ T5520] prepare_alloc_pages+0x3c2/0x610 [ 2154.335654][ T5520] ? rcu_is_watching+0x12/0xc0 [ 2154.335687][ T5520] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2154.335725][ T5520] ? __kernel_text_address+0xd/0x40 [ 2154.335775][ T5520] ? unwind_get_return_address+0x59/0xa0 [ 2154.335811][ T5520] ? arch_stack_walk+0xa6/0x100 [ 2154.335860][ T5520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2154.335902][ T5520] ? stack_trace_save+0x8e/0xc0 [ 2154.335933][ T5520] ? __pfx_stack_trace_save+0x10/0x10 [ 2154.335964][ T5520] ? stack_depot_save_flags+0x28/0xa50 [ 2154.336019][ T5520] ? kasan_save_stack+0x42/0x60 [ 2154.336058][ T5520] ? __lock_acquire+0xaa4/0x1ba0 [ 2154.336096][ T5520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2154.336141][ T5520] ? policy_nodemask+0xea/0x4e0 [ 2154.336182][ T5520] alloc_pages_mpol+0x1fb/0x550 [ 2154.336222][ T5520] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2154.336256][ T5520] ? __page_table_check_ptes_set+0x1ae/0x420 [ 2154.336296][ T5520] ? find_held_lock+0x2b/0x80 [ 2154.336333][ T5520] alloc_pages_noprof+0x131/0x390 [ 2154.336373][ T5520] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2154.336403][ T5520] get_free_pages_noprof+0xc/0x40 [ 2154.336444][ T5520] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2154.336477][ T5520] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2154.336509][ T5520] __apply_to_page_range+0x617/0xd60 [ 2154.336561][ T5520] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2154.336606][ T5520] ? __pfx___apply_to_page_range+0x10/0x10 [ 2154.336653][ T5520] ? alloc_vmap_area+0x872/0x2970 [ 2154.336707][ T5520] alloc_vmap_area+0x919/0x2970 [ 2154.336767][ T5520] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2154.336819][ T5520] __get_vm_area_node+0x1a7/0x300 [ 2154.336871][ T5520] __vmalloc_node_range_noprof+0x277/0x1540 [ 2154.336923][ T5520] ? sock_hash_alloc+0x336/0x510 [ 2154.336969][ T5520] ? sock_hash_alloc+0x336/0x510 [ 2154.337010][ T5520] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2154.337065][ T5520] ? rcu_is_watching+0x12/0xc0 [ 2154.337094][ T5520] ? trace_kmalloc+0x2b/0xd0 [ 2154.337132][ T5520] ? __kmalloc_node_noprof+0x23b/0x500 [ 2154.337168][ T5520] ? trace_cap_capable+0x18d/0x200 [ 2154.337221][ T5520] ? sock_hash_alloc+0x336/0x510 [ 2154.337255][ T5520] __bpf_map_area_alloc+0xeb/0x190 [ 2154.337304][ T5520] ? sock_hash_alloc+0x336/0x510 [ 2154.337339][ T5520] sock_hash_alloc+0x336/0x510 [ 2154.337380][ T5520] map_create+0x58f/0x1db0 [ 2154.337435][ T5520] ? __pfx_map_create+0x10/0x10 [ 2154.337473][ T5520] ? __might_fault+0xe3/0x190 [ 2154.337508][ T5520] ? __might_fault+0xe3/0x190 [ 2154.337541][ T5520] ? __might_fault+0x13b/0x190 [ 2154.337599][ T5520] __sys_bpf+0x47cc/0x4d80 [ 2154.337650][ T5520] ? __pfx___sys_bpf+0x10/0x10 [ 2154.337695][ T5520] ? ksys_write+0x190/0x240 [ 2154.337731][ T5520] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2154.337797][ T5520] ? fput+0x70/0xf0 [ 2154.337833][ T5520] ? ksys_write+0x1b9/0x240 [ 2154.337862][ T5520] ? __pfx_ksys_write+0x10/0x10 [ 2154.337890][ T5520] ? rcu_is_watching+0x12/0xc0 [ 2154.337925][ T5520] __x64_sys_bpf+0x78/0xc0 [ 2154.337967][ T5520] ? lockdep_hardirqs_on+0x7c/0x110 [ 2154.338005][ T5520] do_syscall_64+0xcd/0x230 [ 2154.338045][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.338078][ T5520] RIP: 0033:0x7fe23998e969 [ 2154.338103][ T5520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2154.338135][ T5520] RSP: 002b:00007fe23a749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2154.338165][ T5520] RAX: ffffffffffffffda RBX: 00007fe239bb5fa0 RCX: 00007fe23998e969 [ 2154.338187][ T5520] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2154.338207][ T5520] RBP: 00007fe23a749090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.338227][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.338247][ T5520] R13: 0000000000000000 R14: 00007fe239bb5fa0 R15: 00007ffcd791dec8 [ 2154.338288][ T5520] [ 2157.547458][ T5553] FAULT_INJECTION: forcing a failure. [ 2157.547458][ T5553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2157.560561][ T5553] CPU: 1 UID: 0 PID: 5553 Comm: syz.2.6717 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2157.560615][ T5553] Tainted: [U]=USER [ 2157.560627][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2157.560648][ T5553] Call Trace: [ 2157.560659][ T5553] [ 2157.560673][ T5553] dump_stack_lvl+0x16c/0x1f0 [ 2157.560719][ T5553] should_fail_ex+0x512/0x640 [ 2157.560772][ T5553] get_futex_key+0x49e/0x1000 [ 2157.560811][ T5553] ? __pfx_get_futex_key+0x10/0x10 [ 2157.560858][ T5553] futex_wake+0xe7/0x4e0 [ 2157.560903][ T5553] ? __pfx_futex_wake+0x10/0x10 [ 2157.560949][ T5553] ? kmem_cache_free+0x2d4/0x4d0 [ 2157.560982][ T5553] ? fd_install+0x225/0x750 [ 2157.561030][ T5553] ? putname+0x154/0x1a0 [ 2157.561074][ T5553] do_futex+0x1e3/0x350 [ 2157.561110][ T5553] ? __pfx_do_futex+0x10/0x10 [ 2157.561157][ T5553] __x64_sys_futex+0x1e0/0x4c0 [ 2157.561199][ T5553] ? __pfx___x64_sys_futex+0x10/0x10 [ 2157.561246][ T5553] ? rcu_is_watching+0x12/0xc0 [ 2157.561285][ T5553] do_syscall_64+0xcd/0x230 [ 2157.561329][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.561364][ T5553] RIP: 0033:0x7f7b6618e969 [ 2157.561391][ T5553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2157.561423][ T5553] RSP: 002b:00007f7b66f910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2157.561455][ T5553] RAX: ffffffffffffffda RBX: 00007f7b663b5fa8 RCX: 00007f7b6618e969 [ 2157.561478][ T5553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b663b5fac [ 2157.561500][ T5553] RBP: 00007f7b663b5fa0 R08: 00007f7b66f92000 R09: 0000000000000000 [ 2157.561521][ T5553] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f7b663b5fac [ 2157.561543][ T5553] R13: 0000000000000000 R14: 00007ffe53a16250 R15: 00007ffe53a16338 [ 2157.561584][ T5553] [ 2158.526038][ T5564] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6718'. [ 2158.548017][ T5564] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6718'. [ 2161.943609][ T5616] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6729'. [ 2161.957480][ T5616] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6729'. [ 2163.695586][ T5643] warning: `syz.2.6734' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2164.168292][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6735'. [ 2164.269704][ T5646] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 2164.780981][ T5669] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6740'. [ 2164.799703][ T5669] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6740'. [ 2165.107466][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6742'. [ 2165.215956][ T5677] FAULT_INJECTION: forcing a failure. [ 2165.215956][ T5677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2165.264865][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.2.6741 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2165.264906][ T5677] Tainted: [U]=USER [ 2165.264914][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2165.264928][ T5677] Call Trace: [ 2165.264936][ T5677] [ 2165.264945][ T5677] dump_stack_lvl+0x16c/0x1f0 [ 2165.264978][ T5677] should_fail_ex+0x512/0x640 [ 2165.265015][ T5677] _copy_to_user+0x32/0xd0 [ 2165.265051][ T5677] simple_read_from_buffer+0xcb/0x170 [ 2165.265088][ T5677] proc_fail_nth_read+0x197/0x270 [ 2165.265121][ T5677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2165.265155][ T5677] ? rw_verify_area+0xcf/0x680 [ 2165.265188][ T5677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2165.265221][ T5677] vfs_read+0x1de/0xc70 [ 2165.265246][ T5677] ? __pfx___mutex_lock+0x10/0x10 [ 2165.265275][ T5677] ? __pfx_vfs_read+0x10/0x10 [ 2165.265304][ T5677] ? __fget_files+0x20e/0x3c0 [ 2165.265348][ T5677] ksys_read+0x12a/0x240 [ 2165.265368][ T5677] ? __pfx_ksys_read+0x10/0x10 [ 2165.265398][ T5677] do_syscall_64+0xcd/0x230 [ 2165.265429][ T5677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.265453][ T5677] RIP: 0033:0x7f7b6618d37c [ 2165.265471][ T5677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2165.265495][ T5677] RSP: 002b:00007f7b66f70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2165.265519][ T5677] RAX: ffffffffffffffda RBX: 00007f7b663b6080 RCX: 00007f7b6618d37c [ 2165.265535][ T5677] RDX: 000000000000000f RSI: 00007f7b66f700a0 RDI: 0000000000000005 [ 2165.265550][ T5677] RBP: 00007f7b66f70090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.265565][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2165.265579][ T5677] R13: 0000000000000001 R14: 00007f7b663b6080 R15: 00007ffe53a16338 [ 2165.265608][ T5677] [ 2165.635531][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.641921][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.061119][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6747'. [ 2167.109143][ T5698] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 2168.799293][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6757'. [ 2173.813524][ T5791] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6768'. [ 2173.839727][ T5791] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6768'. [ 2177.121209][ T5851] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6779'. [ 2177.150791][ T5851] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6779'. [ 2178.112842][ T5869] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6792'. [ 2178.183679][ T5869] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6792'. [ 2178.382163][ T5873] FAULT_INJECTION: forcing a failure. [ 2178.382163][ T5873] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.398423][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz.2.6785 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2178.398474][ T5873] Tainted: [U]=USER [ 2178.398486][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2178.398506][ T5873] Call Trace: [ 2178.398517][ T5873] [ 2178.398530][ T5873] dump_stack_lvl+0x16c/0x1f0 [ 2178.398575][ T5873] should_fail_ex+0x512/0x640 [ 2178.398619][ T5873] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2178.398676][ T5873] should_failslab+0xc2/0x120 [ 2178.398715][ T5873] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2178.398768][ T5873] ? j1939_session_new+0x7a/0x4e0 [ 2178.398805][ T5873] j1939_session_new+0x7a/0x4e0 [ 2178.398841][ T5873] j1939_tp_send+0x1fd/0x860 [ 2178.398879][ T5873] j1939_sk_sendmsg+0xaf8/0x13d0 [ 2178.398939][ T5873] ? iovec_from_user+0xbb/0x140 [ 2178.398995][ T5873] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 2178.399044][ T5873] ? __might_fault+0x13b/0x190 [ 2178.399091][ T5873] ____sys_sendmsg+0xa95/0xc70 [ 2178.399135][ T5873] ? copy_msghdr_from_user+0x10a/0x160 [ 2178.399187][ T5873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2178.399233][ T5873] ? kfree+0x252/0x4d0 [ 2178.399278][ T5873] ? __pfx__kstrtoull+0x10/0x10 [ 2178.399329][ T5873] ___sys_sendmsg+0x134/0x1d0 [ 2178.399362][ T5873] ? __pfx____sys_sendmsg+0x10/0x10 [ 2178.399454][ T5873] ? __pfx___might_resched+0x10/0x10 [ 2178.399498][ T5873] __sys_sendmmsg+0x200/0x420 [ 2178.399533][ T5873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2178.399580][ T5873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2178.399658][ T5873] ? fput+0x70/0xf0 [ 2178.399692][ T5873] ? ksys_write+0x1b9/0x240 [ 2178.399721][ T5873] ? __pfx_ksys_write+0x10/0x10 [ 2178.399749][ T5873] ? rcu_is_watching+0x12/0xc0 [ 2178.399786][ T5873] __x64_sys_sendmmsg+0x9c/0x100 [ 2178.399815][ T5873] ? lockdep_hardirqs_on+0x7c/0x110 [ 2178.399853][ T5873] do_syscall_64+0xcd/0x230 [ 2178.399896][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2178.399929][ T5873] RIP: 0033:0x7f7b6618e969 [ 2178.399954][ T5873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2178.399986][ T5873] RSP: 002b:00007f7b66f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2178.400018][ T5873] RAX: ffffffffffffffda RBX: 00007f7b663b5fa0 RCX: 00007f7b6618e969 [ 2178.400039][ T5873] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2178.400059][ T5873] RBP: 00007f7b66f91090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.400079][ T5873] R10: 00000000070000ee R11: 0000000000000246 R12: 0000000000000002 [ 2178.400098][ T5873] R13: 0000000000000000 R14: 00007f7b663b5fa0 R15: 00007ffe53a16338 [ 2178.400140][ T5873] [ 2178.967663][ T5879] netlink: 'syz.2.6788': attribute type 2 has an invalid length. [ 2178.976130][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6788'. [ 2182.044625][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6797'. [ 2183.466112][ T5936] FAULT_INJECTION: forcing a failure. [ 2183.466112][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.480290][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz.4.6799 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2183.480343][ T5936] Tainted: [U]=USER [ 2183.480354][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2183.480374][ T5936] Call Trace: [ 2183.480385][ T5936] [ 2183.480397][ T5936] dump_stack_lvl+0x16c/0x1f0 [ 2183.480442][ T5936] should_fail_ex+0x512/0x640 [ 2183.480487][ T5936] ? __kmalloc_noprof+0xbf/0x510 [ 2183.480525][ T5936] ? ima_write_template_field_data+0x5d/0x1f0 [ 2183.480565][ T5936] should_failslab+0xc2/0x120 [ 2183.480604][ T5936] __kmalloc_noprof+0xd2/0x510 [ 2183.480650][ T5936] ima_write_template_field_data+0x5d/0x1f0 [ 2183.480697][ T5936] ima_eventdigest_init_common+0x154/0x430 [ 2183.480742][ T5936] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 2183.480811][ T5936] ? rcu_is_watching+0x12/0xc0 [ 2183.480841][ T5936] ? trace_kmalloc+0x2b/0xd0 [ 2183.480887][ T5936] ? __kmalloc_noprof+0x242/0x510 [ 2183.480922][ T5936] ? __print_lock_name+0x51/0xe0 [ 2183.480959][ T5936] ima_alloc_init_template+0x39d/0x720 [ 2183.481022][ T5936] ima_store_measurement+0x1eb/0x5c0 [ 2183.481058][ T5936] ? __pfx_ima_store_measurement+0x10/0x10 [ 2183.481093][ T5936] ? vfs_getxattr_alloc+0xec/0x340 [ 2183.481157][ T5936] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2183.481209][ T5936] process_measurement+0x1ddb/0x23e0 [ 2183.481273][ T5936] ? __pfx_process_measurement+0x10/0x10 [ 2183.481319][ T5936] ? __lock_acquire+0x5ca/0x1ba0 [ 2183.481364][ T5936] ? init_file+0x93/0x4c0 [ 2183.481398][ T5936] ? alloc_empty_file+0x73/0x1e0 [ 2183.481437][ T5936] ? hugetlb_file_setup+0x4cd/0x620 [ 2183.481476][ T5936] ? ksys_mmap_pgoff+0x189/0x5c0 [ 2183.481520][ T5936] ? __x64_sys_mmap+0x125/0x190 [ 2183.481610][ T5936] ima_file_mmap+0x1b1/0x1d0 [ 2183.481657][ T5936] ? __pfx_ima_file_mmap+0x10/0x10 [ 2183.481714][ T5936] security_mmap_file+0x88c/0x990 [ 2183.481757][ T5936] vm_mmap_pgoff+0xec/0x450 [ 2183.481807][ T5936] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2183.481857][ T5936] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2183.481903][ T5936] ? hugetlbfs_get_inode+0x31f/0x730 [ 2183.481954][ T5936] ksys_mmap_pgoff+0x1c8/0x5c0 [ 2183.482008][ T5936] __x64_sys_mmap+0x125/0x190 [ 2183.482045][ T5936] do_syscall_64+0xcd/0x230 [ 2183.482089][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.482122][ T5936] RIP: 0033:0x7f26b958e969 [ 2183.482148][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2183.482181][ T5936] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2183.482212][ T5936] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2183.482235][ T5936] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 2183.482256][ T5936] RBP: 00007f26ba35c090 R08: 0000000000000401 R09: 0000300000000000 [ 2183.482278][ T5936] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 2183.482298][ T5936] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2183.482341][ T5936] [ 2183.815724][ T30] audit: type=1804 audit(4295001907.131:45): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.6799" name="anon_hugepage" dev="hugetlbfs" ino=152076 res=0 errno=0 [ 2185.039937][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6803'. [ 2185.106701][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6803'. [ 2187.145921][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6808'. [ 2190.868661][ T6035] FAULT_INJECTION: forcing a failure. [ 2190.868661][ T6035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2190.895169][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.5.6817 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2190.895231][ T6035] Tainted: [U]=USER [ 2190.895242][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2190.895261][ T6035] Call Trace: [ 2190.895271][ T6035] [ 2190.895283][ T6035] dump_stack_lvl+0x16c/0x1f0 [ 2190.895328][ T6035] should_fail_ex+0x512/0x640 [ 2190.895378][ T6035] should_fail_alloc_page+0xe7/0x130 [ 2190.895420][ T6035] prepare_alloc_pages+0x3c2/0x610 [ 2190.895469][ T6035] ? rcu_is_watching+0x12/0xc0 [ 2190.895504][ T6035] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2190.895543][ T6035] ? __kernel_text_address+0xd/0x40 [ 2190.895593][ T6035] ? unwind_get_return_address+0x59/0xa0 [ 2190.895630][ T6035] ? arch_stack_walk+0xa6/0x100 [ 2190.895681][ T6035] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2190.895720][ T6035] ? stack_trace_save+0x8e/0xc0 [ 2190.895752][ T6035] ? __pfx_stack_trace_save+0x10/0x10 [ 2190.895784][ T6035] ? stack_depot_save_flags+0x28/0xa50 [ 2190.895828][ T6035] ? find_held_lock+0x2b/0x80 [ 2190.895864][ T6035] ? kasan_save_stack+0x42/0x60 [ 2190.895901][ T6035] ? __lock_acquire+0xaa4/0x1ba0 [ 2190.895939][ T6035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2190.895984][ T6035] ? policy_nodemask+0xea/0x4e0 [ 2190.896027][ T6035] alloc_pages_mpol+0x1fb/0x550 [ 2190.896068][ T6035] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2190.896105][ T6035] ? __page_table_check_ptes_set+0x1ae/0x420 [ 2190.896144][ T6035] ? find_held_lock+0x2b/0x80 [ 2190.896186][ T6035] alloc_pages_noprof+0x131/0x390 [ 2190.896227][ T6035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2190.896257][ T6035] get_free_pages_noprof+0xc/0x40 [ 2190.896299][ T6035] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2190.896331][ T6035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2190.896362][ T6035] __apply_to_page_range+0x617/0xd60 [ 2190.896415][ T6035] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2190.896454][ T6035] ? __pfx___apply_to_page_range+0x10/0x10 [ 2190.896505][ T6035] ? alloc_vmap_area+0x872/0x2970 [ 2190.896556][ T6035] alloc_vmap_area+0x919/0x2970 [ 2190.896616][ T6035] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2190.896672][ T6035] __get_vm_area_node+0x1a7/0x300 [ 2190.896727][ T6035] __vmalloc_node_range_noprof+0x277/0x1540 [ 2190.896780][ T6035] ? sock_hash_alloc+0x336/0x510 [ 2190.896827][ T6035] ? sock_hash_alloc+0x336/0x510 [ 2190.896868][ T6035] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2190.896919][ T6035] ? rcu_is_watching+0x12/0xc0 [ 2190.896948][ T6035] ? trace_kmalloc+0x2b/0xd0 [ 2190.896986][ T6035] ? __kmalloc_node_noprof+0x23b/0x500 [ 2190.897023][ T6035] ? trace_cap_capable+0x18d/0x200 [ 2190.897076][ T6035] ? sock_hash_alloc+0x336/0x510 [ 2190.897110][ T6035] __bpf_map_area_alloc+0xeb/0x190 [ 2190.897158][ T6035] ? sock_hash_alloc+0x336/0x510 [ 2190.897200][ T6035] sock_hash_alloc+0x336/0x510 [ 2190.897241][ T6035] map_create+0x58f/0x1db0 [ 2190.897297][ T6035] ? __pfx_map_create+0x10/0x10 [ 2190.897335][ T6035] ? __might_fault+0xe3/0x190 [ 2190.897369][ T6035] ? __might_fault+0xe3/0x190 [ 2190.897401][ T6035] ? __might_fault+0x13b/0x190 [ 2190.897452][ T6035] __sys_bpf+0x47cc/0x4d80 [ 2190.897502][ T6035] ? __pfx___sys_bpf+0x10/0x10 [ 2190.897546][ T6035] ? ksys_write+0x190/0x240 [ 2190.897582][ T6035] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2190.897648][ T6035] ? fput+0x70/0xf0 [ 2190.897684][ T6035] ? ksys_write+0x1b9/0x240 [ 2190.897712][ T6035] ? __pfx_ksys_write+0x10/0x10 [ 2190.897739][ T6035] ? rcu_is_watching+0x12/0xc0 [ 2190.897774][ T6035] __x64_sys_bpf+0x78/0xc0 [ 2190.897820][ T6035] ? lockdep_hardirqs_on+0x7c/0x110 [ 2190.897857][ T6035] do_syscall_64+0xcd/0x230 [ 2190.897900][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.897934][ T6035] RIP: 0033:0x7f4792d8e969 [ 2190.897959][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.897992][ T6035] RSP: 002b:00007f4793cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2190.898023][ T6035] RAX: ffffffffffffffda RBX: 00007f4792fb5fa0 RCX: 00007f4792d8e969 [ 2190.898046][ T6035] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2190.898067][ T6035] RBP: 00007f4793cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.898088][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.898108][ T6035] R13: 0000000000000000 R14: 00007f4792fb5fa0 R15: 00007ffc802c2608 [ 2190.898150][ T6035] [ 2192.066170][ T6047] FAULT_INJECTION: forcing a failure. [ 2192.066170][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.144668][ T6049] netlink: 186 bytes leftover after parsing attributes in process `syz.2.6820'. [ 2192.212807][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.3.6821 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2192.212851][ T6047] Tainted: [U]=USER [ 2192.212860][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2192.212873][ T6047] Call Trace: [ 2192.212881][ T6047] [ 2192.212891][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 2192.212924][ T6047] should_fail_ex+0x512/0x640 [ 2192.212957][ T6047] ? fs_reclaim_acquire+0xae/0x150 [ 2192.212994][ T6047] ? tomoyo_open_control+0x51f/0xa30 [ 2192.213029][ T6047] should_failslab+0xc2/0x120 [ 2192.213060][ T6047] __kmalloc_noprof+0xd2/0x510 [ 2192.213092][ T6047] tomoyo_open_control+0x51f/0xa30 [ 2192.213133][ T6047] do_dentry_open+0x741/0x1c10 [ 2192.213157][ T6047] ? __pfx_tomoyo_open+0x10/0x10 [ 2192.213194][ T6047] vfs_open+0x82/0x3f0 [ 2192.213227][ T6047] path_openat+0x1e5e/0x2d40 [ 2192.213260][ T6047] ? __pfx_path_openat+0x10/0x10 [ 2192.213289][ T6047] do_filp_open+0x20b/0x470 [ 2192.213319][ T6047] ? __pfx_do_filp_open+0x10/0x10 [ 2192.213362][ T6047] ? alloc_fd+0x471/0x7d0 [ 2192.213409][ T6047] do_sys_openat2+0x11b/0x1d0 [ 2192.213440][ T6047] ? __pfx_do_sys_openat2+0x10/0x10 [ 2192.213482][ T6047] __x64_sys_openat+0x174/0x210 [ 2192.213514][ T6047] ? __pfx___x64_sys_openat+0x10/0x10 [ 2192.213547][ T6047] ? rcu_is_watching+0x12/0xc0 [ 2192.213576][ T6047] do_syscall_64+0xcd/0x230 [ 2192.213607][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.213631][ T6047] RIP: 0033:0x7fe23998e969 [ 2192.213651][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2192.213675][ T6047] RSP: 002b:00007fe23a749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2192.213698][ T6047] RAX: ffffffffffffffda RBX: 00007fe239bb5fa0 RCX: 00007fe23998e969 [ 2192.213715][ T6047] RDX: 0000000000040040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2192.213731][ T6047] RBP: 00007fe239a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2192.213746][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2192.213761][ T6047] R13: 0000000000000000 R14: 00007fe239bb5fa0 R15: 00007ffcd791dec8 [ 2192.213792][ T6047] [ 2193.713046][ T6049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2193.733070][ T6049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2193.745654][ T6049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2193.753403][ T6049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2194.010131][ T6076] FAULT_INJECTION: forcing a failure. [ 2194.010131][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.149157][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.6827 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2194.149214][ T6076] Tainted: [U]=USER [ 2194.149227][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2194.149248][ T6076] Call Trace: [ 2194.149259][ T6076] [ 2194.149271][ T6076] dump_stack_lvl+0x16c/0x1f0 [ 2194.149318][ T6076] should_fail_ex+0x512/0x640 [ 2194.149357][ T6076] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2194.149391][ T6076] should_failslab+0xc2/0x120 [ 2194.149425][ T6076] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2194.149456][ T6076] ? __d_alloc+0x31/0xaa0 [ 2194.149489][ T6076] __d_alloc+0x31/0xaa0 [ 2194.149520][ T6076] d_alloc_pseudo+0x1c/0xc0 [ 2194.149555][ T6076] alloc_file_pseudo+0xcf/0x230 [ 2194.149591][ T6076] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2194.149627][ T6076] ? alloc_fd+0x471/0x7d0 [ 2194.149672][ T6076] sock_alloc_file+0x50/0x210 [ 2194.149702][ T6076] __sys_socket+0x1c0/0x260 [ 2194.149738][ T6076] ? __pfx___sys_socket+0x10/0x10 [ 2194.149775][ T6076] ? rcu_is_watching+0x12/0xc0 [ 2194.149807][ T6076] __x64_sys_socket+0x72/0xb0 [ 2194.149841][ T6076] ? lockdep_hardirqs_on+0x7c/0x110 [ 2194.149873][ T6076] do_syscall_64+0xcd/0x230 [ 2194.149910][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.149936][ T6076] RIP: 0033:0x7f7b6618e969 [ 2194.149958][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2194.149985][ T6076] RSP: 002b:00007f7b66f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2194.150012][ T6076] RAX: ffffffffffffffda RBX: 00007f7b663b5fa0 RCX: 00007f7b6618e969 [ 2194.150030][ T6076] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000022 [ 2194.150047][ T6076] RBP: 00007f7b66210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2194.150063][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2194.150085][ T6076] R13: 0000000000000000 R14: 00007f7b663b5fa0 R15: 00007ffe53a16338 [ 2194.150124][ T6076] [ 2194.157205][ T6068] netlink: 'syz.4.6825': attribute type 2 has an invalid length. [ 2194.450834][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6825'. [ 2194.956524][ T6092] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6830'. [ 2194.998130][ T6092] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6830'. [ 2195.671427][ T6098] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6831'. [ 2195.685062][T28749] Bluetooth: hci4: command 0x0c1a tx timeout [ 2195.691419][ T6098] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6831'. [ 2195.764886][T28749] Bluetooth: hci3: command 0x0c1a tx timeout [ 2195.771075][T28749] Bluetooth: hci2: command 0x0c1a tx timeout [ 2195.777257][T27886] Bluetooth: hci0: command 0x040f tx timeout [ 2197.375996][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6836'. [ 2197.550536][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6836'. [ 2198.497975][ T6118] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input46 [ 2199.322994][ T6144] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2199.630073][ T6146] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2199.673556][ T6133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2199.680459][ T6133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2199.687310][ T6133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2199.693680][ T6133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2199.886378][ T6135] Process accounting resumed [ 2199.891054][ T6135] kernel write not supported for file /status (pid: 6135 comm: syz.5.6840) [ 2201.025734][ T6153] kernel write not supported for file /status (pid: 6153 comm: syz.5.6845) [ 2201.206182][T28749] Bluetooth: hci4: command 0x0c1a tx timeout [ 2201.687746][T28749] Bluetooth: hci0: command 0x040f tx timeout [ 2201.765149][T28749] Bluetooth: hci3: command 0x0c1a tx timeout [ 2201.766593][T27886] Bluetooth: hci2: command 0x0c1a tx timeout [ 2202.070558][ T6165] kernel write not supported for file /status (pid: 6165 comm: syz.5.6849) [ 2202.392438][ T6175] kernel write not supported for file /status (pid: 6175 comm: syz.5.6849) [ 2203.964060][ T6180] kernel write not supported for file /status (pid: 6180 comm: syz.5.6852) [ 2204.611613][ T6204] FAULT_INJECTION: forcing a failure. [ 2204.611613][ T6204] name failslab, interval 1, probability 0, space 0, times 0 syzkaller syzkaller login: [ 2204.692682][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.2.6858 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2204.692736][ T6204] Tainted: [U]=USER [ 2204.692748][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2204.692768][ T6204] Call Trace: [ 2204.692779][ T6204] [ 2204.692793][ T6204] dump_stack_lvl+0x16c/0x1f0 [ 2204.692839][ T6204] should_fail_ex+0x512/0x640 [ 2204.692883][ T6204] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2204.692931][ T6204] should_failslab+0xc2/0x120 [ 2204.692971][ T6204] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2204.693010][ T6204] ? __alloc_skb+0x2b2/0x380 [ 2204.693061][ T6204] ? __kasan_slab_free+0x51/0x70 [ 2204.693101][ T6204] __alloc_skb+0x2b2/0x380 [ 2204.693151][ T6204] ? __pfx___alloc_skb+0x10/0x10 [ 2204.693218][ T6204] alloc_skb_with_frags+0xe0/0x860 [ 2204.693266][ T6204] sock_alloc_send_pskb+0x7fb/0x990 [ 2204.693331][ T6204] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2204.693399][ T6204] ? __local_bh_enable_ip+0xa4/0x120 [ 2204.693442][ T6204] j1939_sk_sendmsg+0x6bc/0x13d0 [ 2204.693503][ T6204] ? iovec_from_user+0xbb/0x140 [ 2204.693558][ T6204] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 2204.693607][ T6204] ? __might_fault+0x13b/0x190 [ 2204.693655][ T6204] ____sys_sendmsg+0xa95/0xc70 [ 2204.693701][ T6204] ? copy_msghdr_from_user+0x10a/0x160 [ 2204.693752][ T6204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2204.693799][ T6204] ? kfree+0x252/0x4d0 [ 2204.693843][ T6204] ? __pfx__kstrtoull+0x10/0x10 [ 2204.693888][ T6204] ___sys_sendmsg+0x134/0x1d0 [ 2204.693928][ T6204] ? __pfx____sys_sendmsg+0x10/0x10 [ 2204.694020][ T6204] ? __pfx___might_resched+0x10/0x10 [ 2204.694066][ T6204] __sys_sendmmsg+0x200/0x420 [ 2204.694101][ T6204] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2204.694148][ T6204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2204.694209][ T6204] ? fput+0x70/0xf0 [ 2204.694246][ T6204] ? ksys_write+0x1b9/0x240 [ 2204.694275][ T6204] ? __pfx_ksys_write+0x10/0x10 [ 2204.694303][ T6204] ? rcu_is_watching+0x12/0xc0 [ 2204.694340][ T6204] __x64_sys_sendmmsg+0x9c/0x100 [ 2204.694370][ T6204] ? lockdep_hardirqs_on+0x7c/0x110 [ 2204.694408][ T6204] do_syscall_64+0xcd/0x230 [ 2204.694451][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.694484][ T6204] RIP: 0033:0x7f7b6618e969 [ 2204.694508][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2204.694540][ T6204] RSP: 002b:00007f7b66f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2204.694571][ T6204] RAX: ffffffffffffffda RBX: 00007f7b663b5fa0 RCX: 00007f7b6618e969 [ 2204.694593][ T6204] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2204.694613][ T6204] RBP: 00007f7b66f91090 R08: 0000000000000000 R09: 0000000000000000 [ 2204.694633][ T6204] R10: 00000000070000ee R11: 0000000000000246 R12: 0000000000000002 [ 2204.694654][ T6204] R13: 0000000000000000 R14: 00007f7b663b5fa0 R15: 00007ffe53a16338 [ 2204.694697][ T6204] [ 2205.012987][ T6200] kernel write not supported for file /status (pid: 6200 comm: syz.5.6857) [ 2205.256311][ T6206] kernel write not supported for file /status (pid: 6206 comm: syz.5.6859) [ 2205.764616][ T6211] kernel write not supported for file /status (pid: 6211 comm: syz.5.6861) [ 2206.218859][ T6235] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6865'. [ 2206.231608][ T6235] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6865'. [ 2207.494096][ T6225] kernel write not supported for file /status (pid: 6225 comm: syz.5.6863) [ 2207.762302][ T6253] kernel write not supported for file /status (pid: 6253 comm: syz.5.6869) [ 2207.892197][ T6256] kernel write not supported for file /status (pid: 6256 comm: syz.5.6871) [ 2208.376419][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6872'. [ 2209.081607][ T6258] kernel write not supported for file /status (pid: 6258 comm: syz.5.6872) [ 2211.824489][ T6287] kernel write not supported for file /status (pid: 6287 comm: syz.5.6877) [ 2212.198726][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6886'. [ 2212.289891][ T6326] netlink: 354 bytes leftover after parsing attributes in process `syz.4.6886'. [ 2213.072894][ T6320] kernel write not supported for file /status (pid: 6320 comm: syz.5.6885) [ 2213.233196][ T6332] kernel write not supported for file /status (pid: 6332 comm: syz.5.6888) [ 2213.406904][ T6335] kernel write not supported for file /status (pid: 6335 comm: syz.5.6889) [ 2214.176684][ T6346] FAULT_INJECTION: forcing a failure. [ 2214.176684][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.201467][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.4.6892 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2214.201525][ T6346] Tainted: [U]=USER [ 2214.201536][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2214.201555][ T6346] Call Trace: [ 2214.201566][ T6346] [ 2214.201579][ T6346] dump_stack_lvl+0x16c/0x1f0 [ 2214.201625][ T6346] should_fail_ex+0x512/0x640 [ 2214.201672][ T6346] ? fs_reclaim_acquire+0xae/0x150 [ 2214.201724][ T6346] ? tomoyo_open_control+0x51f/0xa30 [ 2214.201773][ T6346] should_failslab+0xc2/0x120 [ 2214.201812][ T6346] __kmalloc_noprof+0xd2/0x510 [ 2214.201859][ T6346] tomoyo_open_control+0x51f/0xa30 [ 2214.201917][ T6346] do_dentry_open+0x741/0x1c10 [ 2214.201950][ T6346] ? __pfx_tomoyo_open+0x10/0x10 [ 2214.202004][ T6346] vfs_open+0x82/0x3f0 [ 2214.202051][ T6346] path_openat+0x1e5e/0x2d40 [ 2214.202109][ T6346] ? __pfx_path_openat+0x10/0x10 [ 2214.202153][ T6346] do_filp_open+0x20b/0x470 [ 2214.202185][ T6346] ? __pfx_do_filp_open+0x10/0x10 [ 2214.202244][ T6346] ? alloc_fd+0x471/0x7d0 [ 2214.202306][ T6346] do_sys_openat2+0x11b/0x1d0 [ 2214.202350][ T6346] ? __pfx_do_sys_openat2+0x10/0x10 [ 2214.202410][ T6346] __x64_sys_openat+0x174/0x210 [ 2214.202456][ T6346] ? __pfx___x64_sys_openat+0x10/0x10 [ 2214.202504][ T6346] ? rcu_is_watching+0x12/0xc0 [ 2214.202547][ T6346] do_syscall_64+0xcd/0x230 [ 2214.202592][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.202625][ T6346] RIP: 0033:0x7f26b958e969 [ 2214.202653][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2214.202687][ T6346] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2214.202719][ T6346] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2214.202742][ T6346] RDX: 0000000000040040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2214.202763][ T6346] RBP: 00007f26b9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2214.202784][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2214.202805][ T6346] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2214.202846][ T6346] [ 2215.310481][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6896'. [ 2216.343445][ T6373] syz.4.6898 (6373) used obsolete PPPIOCDETACH ioctl [ 2216.353185][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6898'. [ 2216.400455][ T6338] kernel write not supported for file /status (pid: 6338 comm: syz.5.6890) [ 2216.723709][ T6377] kernel write not supported for file /status (pid: 6377 comm: syz.5.6899) [ 2218.196113][ T6399] Setting dangerous option i915.mitigations - tainting kernel [ 2219.392778][ T30] audit: type=1804 audit(4295001943.021:46): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6905" name="/newroot/543/file0" dev="tmpfs" ino=2794 res=1 errno=0 [ 2219.525168][ T30] audit: type=1800 audit(4295001943.021:47): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6905" name="file0" dev="tmpfs" ino=2794 res=0 errno=0 [ 2219.562743][ T30] audit: type=1800 audit(4295001943.081:48): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6905" name="file0" dev="tmpfs" ino=2794 res=0 errno=0 [ 2220.507854][ T6393] kernel write not supported for file /status (pid: 6393 comm: syz.5.6902) [ 2220.794978][ T6434] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6909'. [ 2220.841021][ T6434] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6909'. [ 2220.854093][ T6435] kernel write not supported for file /status (pid: 6435 comm: syz.5.6910) [ 2221.396938][ T6438] kernel write not supported for file /status (pid: 6438 comm: syz.5.6911) [ 2222.681419][ T6445] kernel write not supported for file /status (pid: 6445 comm: syz.5.6915) [ 2223.135025][ T6465] kernel write not supported for file /status (pid: 6465 comm: syz.5.6919) [ 2223.447825][ T6474] kernel write not supported for file /status (pid: 6474 comm: syz.5.6920) [ 2224.155885][ T6477] kernel write not supported for file /status (pid: 6477 comm: syz.5.6921) [ 2224.447439][ T6489] FAULT_INJECTION: forcing a failure. [ 2224.447439][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.513277][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.5.6924 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2224.513338][ T6489] Tainted: [U]=USER [ 2224.513349][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2224.513368][ T6489] Call Trace: [ 2224.513379][ T6489] [ 2224.513393][ T6489] dump_stack_lvl+0x16c/0x1f0 [ 2224.513438][ T6489] should_fail_ex+0x512/0x640 [ 2224.513483][ T6489] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2224.513540][ T6489] should_failslab+0xc2/0x120 [ 2224.513580][ T6489] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2224.513632][ T6489] ? j1939_session_new+0x7a/0x4e0 [ 2224.513671][ T6489] j1939_session_new+0x7a/0x4e0 [ 2224.513708][ T6489] j1939_tp_send+0x1fd/0x860 [ 2224.513746][ T6489] j1939_sk_sendmsg+0xaf8/0x13d0 [ 2224.513806][ T6489] ? lockdep_hardirqs_on+0x7c/0x110 [ 2224.513853][ T6489] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 2224.513904][ T6489] ? ____sys_sendmsg+0x2fe/0xc70 [ 2224.513951][ T6489] ____sys_sendmsg+0xa95/0xc70 [ 2224.513993][ T6489] ? copy_msghdr_from_user+0x10a/0x160 [ 2224.514045][ T6489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2224.514093][ T6489] ? kfree+0x252/0x4d0 [ 2224.514139][ T6489] ? __pfx__kstrtoull+0x10/0x10 [ 2224.514184][ T6489] ___sys_sendmsg+0x134/0x1d0 [ 2224.514218][ T6489] ? __pfx____sys_sendmsg+0x10/0x10 [ 2224.514309][ T6489] ? __pfx___might_resched+0x10/0x10 [ 2224.514361][ T6489] __sys_sendmmsg+0x200/0x420 [ 2224.514398][ T6489] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2224.514444][ T6489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2224.514504][ T6489] ? fput+0x70/0xf0 [ 2224.514542][ T6489] ? ksys_write+0x1b9/0x240 [ 2224.514571][ T6489] ? __pfx_ksys_write+0x10/0x10 [ 2224.514598][ T6489] ? rcu_is_watching+0x12/0xc0 [ 2224.514635][ T6489] __x64_sys_sendmmsg+0x9c/0x100 [ 2224.514666][ T6489] ? lockdep_hardirqs_on+0x7c/0x110 [ 2224.514707][ T6489] do_syscall_64+0xcd/0x230 [ 2224.514749][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2224.514782][ T6489] RIP: 0033:0x7f4792d8e969 [ 2224.514808][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2224.514839][ T6489] RSP: 002b:00007f4793cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2224.514871][ T6489] RAX: ffffffffffffffda RBX: 00007f4792fb5fa0 RCX: 00007f4792d8e969 [ 2224.514893][ T6489] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2224.514912][ T6489] RBP: 00007f4793cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.514933][ T6489] R10: 00000000070000ee R11: 0000000000000246 R12: 0000000000000002 [ 2224.514953][ T6489] R13: 0000000000000000 R14: 00007f4792fb5fa0 R15: 00007ffc802c2608 [ 2224.514996][ T6489] [ 2224.871255][ T6489] kernel write not supported for file /status (pid: 6489 comm: syz.5.6924) [ 2226.151881][ T6501] FAULT_INJECTION: forcing a failure. [ 2226.151881][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.151959][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.3.6927 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2226.152006][ T6501] Tainted: [U]=USER [ 2226.152017][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2226.152035][ T6501] Call Trace: [ 2226.152046][ T6501] [ 2226.152058][ T6501] dump_stack_lvl+0x16c/0x1f0 [ 2226.152103][ T6501] should_fail_ex+0x512/0x640 [ 2226.152136][ T6501] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2226.152178][ T6501] should_failslab+0xc2/0x120 [ 2226.152207][ T6501] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2226.152246][ T6501] ? device_create_groups_vargs+0x8a/0x270 [ 2226.152285][ T6501] device_create_groups_vargs+0x8a/0x270 [ 2226.152321][ T6501] device_create+0xed/0x130 [ 2226.152353][ T6501] ? __pfx_device_create+0x10/0x10 [ 2226.152385][ T6501] ? do_raw_spin_lock+0x12c/0x2b0 [ 2226.152423][ T6501] ? is_console_locked+0x9/0x20 [ 2226.152449][ T6501] ? con_is_visible+0x65/0x150 [ 2226.152484][ T6501] ? csi_J+0x54a/0xad0 [ 2226.152514][ T6501] vcs_make_sysfs+0x32/0x80 [ 2226.152551][ T6501] vc_allocate+0x501/0x880 [ 2226.152577][ T6501] ? __pfx_vc_allocate+0x10/0x10 [ 2226.152612][ T6501] con_install+0xa1/0x600 [ 2226.152639][ T6501] ? __pfx_con_install+0x10/0x10 [ 2226.152670][ T6501] ? __pfx_con_install+0x10/0x10 [ 2226.152697][ T6501] tty_init_dev.part.0+0x99/0x500 [ 2226.152729][ T6501] tty_open+0xa50/0xf90 [ 2226.152762][ T6501] ? __pfx_tty_open+0x10/0x10 [ 2226.152791][ T6501] ? chrdev_open+0x10b/0x6a0 [ 2226.152819][ T6501] ? __pfx_tty_open+0x10/0x10 [ 2226.152847][ T6501] chrdev_open+0x231/0x6a0 [ 2226.152870][ T6501] ? __pfx_apparmor_file_open+0x10/0x10 [ 2226.152899][ T6501] ? __pfx_chrdev_open+0x10/0x10 [ 2226.152933][ T6501] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2226.152977][ T6501] do_dentry_open+0x741/0x1c10 [ 2226.153002][ T6501] ? __pfx_chrdev_open+0x10/0x10 [ 2226.153034][ T6501] vfs_open+0x82/0x3f0 [ 2226.153067][ T6501] path_openat+0x1e5e/0x2d40 [ 2226.153101][ T6501] ? __pfx_path_openat+0x10/0x10 [ 2226.153132][ T6501] do_filp_open+0x20b/0x470 [ 2226.153155][ T6501] ? __pfx_do_filp_open+0x10/0x10 [ 2226.153200][ T6501] ? alloc_fd+0x471/0x7d0 [ 2226.153244][ T6501] do_sys_openat2+0x11b/0x1d0 [ 2226.153275][ T6501] ? __pfx_do_sys_openat2+0x10/0x10 [ 2226.153319][ T6501] __x64_sys_openat+0x174/0x210 [ 2226.153351][ T6501] ? __pfx___x64_sys_openat+0x10/0x10 [ 2226.153385][ T6501] ? rcu_is_watching+0x12/0xc0 [ 2226.153415][ T6501] do_syscall_64+0xcd/0x230 [ 2226.153447][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.153471][ T6501] RIP: 0033:0x7fe23998e969 [ 2226.153490][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2226.153513][ T6501] RSP: 002b:00007fe23a728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2226.153536][ T6501] RAX: ffffffffffffffda RBX: 00007fe239bb6080 RCX: 00007fe23998e969 [ 2226.153552][ T6501] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2226.153568][ T6501] RBP: 00007fe239a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2226.153583][ T6501] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 2226.153597][ T6501] R13: 0000000000000000 R14: 00007fe239bb6080 R15: 00007ffcd791dec8 [ 2226.153627][ T6501] [ 2226.223035][ T6497] kernel write not supported for file /status (pid: 6497 comm: syz.5.6926) [ 2227.052714][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.052793][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.470570][ T6501] tty tty26: ldisc open failed (-12), clearing slot 25 [ 2227.803697][ T6519] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6931'. [ 2227.870761][ T6519] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6931'. [ 2227.882042][ T6505] kernel write not supported for file /status (pid: 6505 comm: syz.5.6929) [ 2228.143441][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6932'. [ 2228.420984][ T6524] kernel write not supported for file /status (pid: 6524 comm: syz.5.6932) [ 2229.342459][ T6536] kernel write not supported for file /status (pid: 6536 comm: syz.5.6935) [ 2230.335075][ T6561] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6942'. [ 2230.355368][ T6560] FAULT_INJECTION: forcing a failure. [ 2230.355368][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.379157][ T6561] netlink: 342 bytes leftover after parsing attributes in process `syz.3.6942'. [ 2230.396222][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.2.6943 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2230.396280][ T6560] Tainted: [U]=USER [ 2230.396292][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2230.396313][ T6560] Call Trace: [ 2230.396325][ T6560] [ 2230.396337][ T6560] dump_stack_lvl+0x16c/0x1f0 [ 2230.396385][ T6560] should_fail_ex+0x512/0x640 [ 2230.396431][ T6560] ? fs_reclaim_acquire+0xae/0x150 [ 2230.396485][ T6560] ? tomoyo_open_control+0x51f/0xa30 [ 2230.396535][ T6560] should_failslab+0xc2/0x120 [ 2230.396575][ T6560] __kmalloc_noprof+0xd2/0x510 [ 2230.396621][ T6560] tomoyo_open_control+0x51f/0xa30 [ 2230.396679][ T6560] do_dentry_open+0x741/0x1c10 [ 2230.396714][ T6560] ? __pfx_tomoyo_open+0x10/0x10 [ 2230.396767][ T6560] vfs_open+0x82/0x3f0 [ 2230.396822][ T6560] path_openat+0x1e5e/0x2d40 [ 2230.396870][ T6560] ? __pfx_path_openat+0x10/0x10 [ 2230.396913][ T6560] do_filp_open+0x20b/0x470 [ 2230.396946][ T6560] ? __pfx_do_filp_open+0x10/0x10 [ 2230.397007][ T6560] ? alloc_fd+0x471/0x7d0 [ 2230.397067][ T6560] do_sys_openat2+0x11b/0x1d0 [ 2230.397111][ T6560] ? __pfx_do_sys_openat2+0x10/0x10 [ 2230.397170][ T6560] __x64_sys_openat+0x174/0x210 [ 2230.397216][ T6560] ? __pfx___x64_sys_openat+0x10/0x10 [ 2230.397263][ T6560] ? rcu_is_watching+0x12/0xc0 [ 2230.397305][ T6560] do_syscall_64+0xcd/0x230 [ 2230.397349][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.397384][ T6560] RIP: 0033:0x7f7b6618e969 [ 2230.397411][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2230.397444][ T6560] RSP: 002b:00007f7b66f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2230.397477][ T6560] RAX: ffffffffffffffda RBX: 00007f7b663b5fa0 RCX: 00007f7b6618e969 [ 2230.397499][ T6560] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2230.397521][ T6560] RBP: 00007f7b66210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2230.397542][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2230.397564][ T6560] R13: 0000000000000000 R14: 00007f7b663b5fa0 R15: 00007ffe53a16338 [ 2230.397606][ T6560] [ 2230.747942][ T6567] FAULT_INJECTION: forcing a failure. [ 2230.747942][ T6567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2230.761278][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.4.6944 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2230.761315][ T6567] Tainted: [U]=USER [ 2230.761323][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2230.761337][ T6567] Call Trace: [ 2230.761345][ T6567] [ 2230.761354][ T6567] dump_stack_lvl+0x16c/0x1f0 [ 2230.761387][ T6567] should_fail_ex+0x512/0x640 [ 2230.761423][ T6567] should_fail_alloc_page+0xe7/0x130 [ 2230.761453][ T6567] prepare_alloc_pages+0x3c2/0x610 [ 2230.761488][ T6567] ? rcu_is_watching+0x12/0xc0 [ 2230.761512][ T6567] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2230.761539][ T6567] ? __kernel_text_address+0xd/0x40 [ 2230.761574][ T6567] ? unwind_get_return_address+0x59/0xa0 [ 2230.761600][ T6567] ? arch_stack_walk+0xa6/0x100 [ 2230.761636][ T6567] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2230.761663][ T6567] ? stack_trace_save+0x8e/0xc0 [ 2230.761686][ T6567] ? __pfx_stack_trace_save+0x10/0x10 [ 2230.761708][ T6567] ? stack_depot_save_flags+0x28/0xa50 [ 2230.761740][ T6567] ? find_held_lock+0x2b/0x80 [ 2230.761770][ T6567] ? kasan_save_stack+0x42/0x60 [ 2230.761798][ T6567] ? __lock_acquire+0xaa4/0x1ba0 [ 2230.761825][ T6567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2230.761857][ T6567] ? policy_nodemask+0xea/0x4e0 [ 2230.761887][ T6567] alloc_pages_mpol+0x1fb/0x550 [ 2230.761915][ T6567] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2230.761941][ T6567] ? __page_table_check_ptes_set+0x1ae/0x420 [ 2230.761969][ T6567] ? find_held_lock+0x2b/0x80 [ 2230.761994][ T6567] alloc_pages_noprof+0x131/0x390 [ 2230.762023][ T6567] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2230.762045][ T6567] get_free_pages_noprof+0xc/0x40 [ 2230.762074][ T6567] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2230.762098][ T6567] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2230.762121][ T6567] __apply_to_page_range+0x617/0xd60 [ 2230.762159][ T6567] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2230.762187][ T6567] ? __pfx___apply_to_page_range+0x10/0x10 [ 2230.762222][ T6567] ? alloc_vmap_area+0x872/0x2970 [ 2230.762260][ T6567] alloc_vmap_area+0x919/0x2970 [ 2230.762303][ T6567] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2230.762343][ T6567] __get_vm_area_node+0x1a7/0x300 [ 2230.762382][ T6567] __vmalloc_node_range_noprof+0x277/0x1540 [ 2230.762420][ T6567] ? sock_hash_alloc+0x336/0x510 [ 2230.762453][ T6567] ? sock_hash_alloc+0x336/0x510 [ 2230.762482][ T6567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2230.762521][ T6567] ? rcu_is_watching+0x12/0xc0 [ 2230.762541][ T6567] ? trace_kmalloc+0x2b/0xd0 [ 2230.762569][ T6567] ? __kmalloc_node_noprof+0x23b/0x500 [ 2230.762595][ T6567] ? trace_cap_capable+0x18d/0x200 [ 2230.762633][ T6567] ? sock_hash_alloc+0x336/0x510 [ 2230.762657][ T6567] __bpf_map_area_alloc+0xeb/0x190 [ 2230.762693][ T6567] ? sock_hash_alloc+0x336/0x510 [ 2230.762718][ T6567] sock_hash_alloc+0x336/0x510 [ 2230.762746][ T6567] map_create+0x58f/0x1db0 [ 2230.762791][ T6567] ? __pfx_map_create+0x10/0x10 [ 2230.762818][ T6567] ? __might_fault+0xe3/0x190 [ 2230.762843][ T6567] ? __might_fault+0xe3/0x190 [ 2230.762866][ T6567] ? __might_fault+0x13b/0x190 [ 2230.762902][ T6567] __sys_bpf+0x47cc/0x4d80 [ 2230.762938][ T6567] ? __pfx___sys_bpf+0x10/0x10 [ 2230.762970][ T6567] ? ksys_write+0x190/0x240 [ 2230.762995][ T6567] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2230.763041][ T6567] ? fput+0x70/0xf0 [ 2230.763067][ T6567] ? ksys_write+0x1b9/0x240 [ 2230.763087][ T6567] ? __pfx_ksys_write+0x10/0x10 [ 2230.763107][ T6567] ? rcu_is_watching+0x12/0xc0 [ 2230.763132][ T6567] __x64_sys_bpf+0x78/0xc0 [ 2230.763164][ T6567] ? lockdep_hardirqs_on+0x7c/0x110 [ 2230.763190][ T6567] do_syscall_64+0xcd/0x230 [ 2230.763221][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.763244][ T6567] RIP: 0033:0x7f26b958e969 [ 2230.763263][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2230.763286][ T6567] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2230.763308][ T6567] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2230.763324][ T6567] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2230.763338][ T6567] RBP: 00007f26ba35c090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.763353][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.763367][ T6567] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2230.763398][ T6567] [ 2234.180399][ T6554] Process accounting paused [ 2234.430100][ T6590] bridge0: port 4(gretap0) entered blocking state [ 2234.521279][ T6590] bridge0: port 4(gretap0) entered disabled state [ 2234.571981][ T6590] gretap0: entered allmulticast mode [ 2234.662215][ T6590] gretap0: entered promiscuous mode [ 2234.705497][ T6590] bridge0: port 4(gretap0) entered blocking state [ 2234.712253][ T6590] bridge0: port 4(gretap0) entered forwarding state [ 2234.898351][ T6608] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6953'. [ 2235.001681][ T6608] netlink: 342 bytes leftover after parsing attributes in process `syz.5.6953'. [ 2236.299841][ T6621] program syz.4.6957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2245.868978][ T6728] bridge0: port 3(gretap0) entered blocking state [ 2245.875988][ T6728] bridge0: port 3(gretap0) entered disabled state [ 2245.882782][ T6728] gretap0: entered allmulticast mode [ 2245.891386][ T6728] gretap0: entered promiscuous mode [ 2245.905892][ T6728] bridge0: port 3(gretap0) entered blocking state [ 2245.912569][ T6728] bridge0: port 3(gretap0) entered forwarding state [ 2246.011039][ T6740] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6984'. [ 2246.115672][ T6740] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6984'. [ 2246.568945][ T6751] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6993'. [ 2246.580916][ T6751] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6993'. [ 2250.744327][ T6810] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6997'. [ 2250.756783][ T6810] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6997'. [ 2257.085036][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7017'. [ 2264.490180][ T6968] Process accounting resumed [ 2264.496555][ T6968] kernel write not supported for file /status (pid: 6968 comm: syz.5.7029) [ 2266.034288][ T7007] kernel write not supported for file /status (pid: 7007 comm: syz.5.7039) [ 2269.011429][ T7035] kernel write not supported for file /status (pid: 7035 comm: syz.5.7044) [ 2269.309121][ T7061] FAULT_INJECTION: forcing a failure. [ 2269.309121][ T7061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2269.384603][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.5.7050 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2269.384656][ T7061] Tainted: [U]=USER [ 2269.384668][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2269.384692][ T7061] Call Trace: [ 2269.384702][ T7061] [ 2269.384714][ T7061] dump_stack_lvl+0x16c/0x1f0 [ 2269.384758][ T7061] should_fail_ex+0x512/0x640 [ 2269.384807][ T7061] should_fail_alloc_page+0xe7/0x130 [ 2269.384848][ T7061] prepare_alloc_pages+0x3c2/0x610 [ 2269.384896][ T7061] ? rcu_is_watching+0x12/0xc0 [ 2269.384930][ T7061] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2269.384968][ T7061] ? __kernel_text_address+0xd/0x40 [ 2269.385017][ T7061] ? unwind_get_return_address+0x59/0xa0 [ 2269.385055][ T7061] ? arch_stack_walk+0xa6/0x100 [ 2269.385106][ T7061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2269.385144][ T7061] ? stack_trace_save+0x8e/0xc0 [ 2269.385177][ T7061] ? __pfx_stack_trace_save+0x10/0x10 [ 2269.385208][ T7061] ? stack_depot_save_flags+0x28/0xa50 [ 2269.385254][ T7061] ? find_held_lock+0x2b/0x80 [ 2269.385298][ T7061] ? kasan_save_stack+0x42/0x60 [ 2269.385336][ T7061] ? __lock_acquire+0xaa4/0x1ba0 [ 2269.385375][ T7061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2269.385421][ T7061] ? policy_nodemask+0xea/0x4e0 [ 2269.385463][ T7061] alloc_pages_mpol+0x1fb/0x550 [ 2269.385505][ T7061] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2269.385542][ T7061] ? __page_table_check_ptes_set+0x1ae/0x420 [ 2269.385581][ T7061] ? find_held_lock+0x2b/0x80 [ 2269.385618][ T7061] alloc_pages_noprof+0x131/0x390 [ 2269.385658][ T7061] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2269.385688][ T7061] get_free_pages_noprof+0xc/0x40 [ 2269.385725][ T7061] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2269.385749][ T7061] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2269.385772][ T7061] __apply_to_page_range+0x617/0xd60 [ 2269.385810][ T7061] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2269.385837][ T7061] ? __pfx___apply_to_page_range+0x10/0x10 [ 2269.385873][ T7061] ? alloc_vmap_area+0x872/0x2970 [ 2269.385910][ T7061] alloc_vmap_area+0x919/0x2970 [ 2269.385953][ T7061] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2269.385993][ T7061] __get_vm_area_node+0x1a7/0x300 [ 2269.386032][ T7061] __vmalloc_node_range_noprof+0x277/0x1540 [ 2269.386070][ T7061] ? sock_hash_alloc+0x336/0x510 [ 2269.386103][ T7061] ? sock_hash_alloc+0x336/0x510 [ 2269.386132][ T7061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2269.386170][ T7061] ? rcu_is_watching+0x12/0xc0 [ 2269.386202][ T7061] ? trace_kmalloc+0x2b/0xd0 [ 2269.386239][ T7061] ? __kmalloc_node_noprof+0x23b/0x500 [ 2269.386272][ T7061] ? trace_cap_capable+0x18d/0x200 [ 2269.386310][ T7061] ? sock_hash_alloc+0x336/0x510 [ 2269.386334][ T7061] __bpf_map_area_alloc+0xeb/0x190 [ 2269.386370][ T7061] ? sock_hash_alloc+0x336/0x510 [ 2269.386395][ T7061] sock_hash_alloc+0x336/0x510 [ 2269.386424][ T7061] map_create+0x58f/0x1db0 [ 2269.386462][ T7061] ? __pfx_map_create+0x10/0x10 [ 2269.386489][ T7061] ? __might_fault+0xe3/0x190 [ 2269.386514][ T7061] ? __might_fault+0xe3/0x190 [ 2269.386537][ T7061] ? __might_fault+0x13b/0x190 [ 2269.386573][ T7061] __sys_bpf+0x47cc/0x4d80 [ 2269.386608][ T7061] ? __pfx___sys_bpf+0x10/0x10 [ 2269.386641][ T7061] ? ksys_write+0x190/0x240 [ 2269.386667][ T7061] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2269.386713][ T7061] ? fput+0x70/0xf0 [ 2269.386739][ T7061] ? ksys_write+0x1b9/0x240 [ 2269.386760][ T7061] ? __pfx_ksys_write+0x10/0x10 [ 2269.386780][ T7061] ? rcu_is_watching+0x12/0xc0 [ 2269.386805][ T7061] __x64_sys_bpf+0x78/0xc0 [ 2269.386837][ T7061] ? lockdep_hardirqs_on+0x7c/0x110 [ 2269.386864][ T7061] do_syscall_64+0xcd/0x230 [ 2269.386894][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2269.386918][ T7061] RIP: 0033:0x7f4792d8e969 [ 2269.386936][ T7061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2269.386960][ T7061] RSP: 002b:00007f4793cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2269.386982][ T7061] RAX: ffffffffffffffda RBX: 00007f4792fb5fa0 RCX: 00007f4792d8e969 [ 2269.386998][ T7061] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2269.387012][ T7061] RBP: 00007f4793cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2269.387027][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2269.387040][ T7061] R13: 0000000000000000 R14: 00007f4792fb5fa0 R15: 00007ffc802c2608 [ 2269.387069][ T7061] [ 2270.022141][ T7061] kernel write not supported for file /status (pid: 7061 comm: syz.5.7050) [ 2270.223665][ T7075] kernel write not supported for file /status (pid: 7075 comm: syz.5.7053) [ 2271.252937][ T7090] kernel write not supported for file /status (pid: 7090 comm: syz.5.7055) [ 2272.803420][ T7077] kernel write not supported for file /status (pid: 7077 comm: syz.5.7055) [ 2274.003539][ T7117] kernel write not supported for file /status (pid: 7117 comm: syz.5.7062) [ 2274.452956][ T7139] netlink: 330 bytes leftover after parsing attributes in process `syz.3.7068'. [ 2274.469242][ T7139] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7068'. [ 2275.354014][ T7150] can: request_module (can-proto-0) failed. [ 2275.380679][ T7140] kernel write not supported for file /status (pid: 7140 comm: syz.5.7067) [ 2277.659551][ T7185] FAULT_INJECTION: forcing a failure. [ 2277.659551][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.715147][ T7185] CPU: 1 UID: 0 PID: 7185 Comm: syz.4.7077 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2277.715205][ T7185] Tainted: [U]=USER [ 2277.715217][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2277.715236][ T7185] Call Trace: [ 2277.715248][ T7185] [ 2277.715261][ T7185] dump_stack_lvl+0x16c/0x1f0 [ 2277.715308][ T7185] should_fail_ex+0x512/0x640 [ 2277.715352][ T7185] ? fs_reclaim_acquire+0xae/0x150 [ 2277.715404][ T7185] ? tomoyo_open_control+0x51f/0xa30 [ 2277.715452][ T7185] should_failslab+0xc2/0x120 [ 2277.715499][ T7185] __kmalloc_noprof+0xd2/0x510 [ 2277.715545][ T7185] tomoyo_open_control+0x51f/0xa30 [ 2277.715603][ T7185] do_dentry_open+0x741/0x1c10 [ 2277.715636][ T7185] ? __pfx_tomoyo_open+0x10/0x10 [ 2277.715688][ T7185] vfs_open+0x82/0x3f0 [ 2277.715734][ T7185] path_openat+0x1e5e/0x2d40 [ 2277.715778][ T7185] ? __pfx_path_openat+0x10/0x10 [ 2277.715819][ T7185] do_filp_open+0x20b/0x470 [ 2277.715852][ T7185] ? __pfx_do_filp_open+0x10/0x10 [ 2277.715913][ T7185] ? alloc_fd+0x471/0x7d0 [ 2277.715973][ T7185] do_sys_openat2+0x11b/0x1d0 [ 2277.716017][ T7185] ? __pfx_do_sys_openat2+0x10/0x10 [ 2277.716076][ T7185] __x64_sys_openat+0x174/0x210 [ 2277.716121][ T7185] ? __pfx___x64_sys_openat+0x10/0x10 [ 2277.716168][ T7185] ? rcu_is_watching+0x12/0xc0 [ 2277.716210][ T7185] do_syscall_64+0xcd/0x230 [ 2277.716255][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.716288][ T7185] RIP: 0033:0x7f26b958e969 [ 2277.716315][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2277.716349][ T7185] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2277.716382][ T7185] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2277.716404][ T7185] RDX: 0000000000040040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2277.716426][ T7185] RBP: 00007f26b9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2277.716448][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2277.716469][ T7185] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2277.716521][ T7185] [ 2278.222901][ T7169] kernel write not supported for file /status (pid: 7169 comm: syz.5.7072) [ 2278.551873][ T7195] kernel read not supported for file /set_event_notrace_pid (pid: 7195 comm: syz.5.7079) [ 2278.582212][ T30] audit: type=1800 audit(4295002002.211:49): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7079" name="set_event_notrace_pid" dev="tracefs" ino=10 res=0 errno=0 [ 2278.911127][ T7199] FAULT_INJECTION: forcing a failure. [ 2278.911127][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.943643][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.4.7081 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2278.943699][ T7199] Tainted: [U]=USER [ 2278.943713][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2278.943733][ T7199] Call Trace: [ 2278.943744][ T7199] [ 2278.943757][ T7199] dump_stack_lvl+0x16c/0x1f0 [ 2278.943802][ T7199] should_fail_ex+0x512/0x640 [ 2278.943847][ T7199] ? fs_reclaim_acquire+0xae/0x150 [ 2278.943898][ T7199] ? tomoyo_open_control+0x51f/0xa30 [ 2278.943947][ T7199] should_failslab+0xc2/0x120 [ 2278.943987][ T7199] __kmalloc_noprof+0xd2/0x510 [ 2278.944032][ T7199] tomoyo_open_control+0x51f/0xa30 [ 2278.944086][ T7199] do_dentry_open+0x741/0x1c10 [ 2278.944120][ T7199] ? __pfx_tomoyo_open+0x10/0x10 [ 2278.944171][ T7199] vfs_open+0x82/0x3f0 [ 2278.944214][ T7199] path_openat+0x1e5e/0x2d40 [ 2278.944259][ T7199] ? __pfx_path_openat+0x10/0x10 [ 2278.944300][ T7199] do_filp_open+0x20b/0x470 [ 2278.944333][ T7199] ? __pfx_do_filp_open+0x10/0x10 [ 2278.944404][ T7199] ? alloc_fd+0x471/0x7d0 [ 2278.944468][ T7199] do_sys_openat2+0x11b/0x1d0 [ 2278.944512][ T7199] ? __pfx_do_sys_openat2+0x10/0x10 [ 2278.944571][ T7199] __x64_sys_openat+0x174/0x210 [ 2278.944617][ T7199] ? __pfx___x64_sys_openat+0x10/0x10 [ 2278.944663][ T7199] ? rcu_is_watching+0x12/0xc0 [ 2278.944702][ T7199] do_syscall_64+0xcd/0x230 [ 2278.944745][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.944777][ T7199] RIP: 0033:0x7f26b958e969 [ 2278.944802][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2278.944835][ T7199] RSP: 002b:00007f26ba35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2278.944867][ T7199] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e969 [ 2278.944890][ T7199] RDX: 0000000000040040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2278.944912][ T7199] RBP: 00007f26b9610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2278.944933][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2278.944954][ T7199] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007ffc66197078 [ 2278.944997][ T7199] [ 2279.496539][ T7194] kernel write not supported for file /status (pid: 7194 comm: syz.5.7079) [ 2280.617077][ T7212] kernel write not supported for file /status (pid: 7212 comm: syz.5.7083) [ 2280.933307][ T7237] netlink: 338 bytes leftover after parsing attributes in process `syz.5.7089'. [ 2280.943865][ T7237] netlink: 338 bytes leftover after parsing attributes in process `syz.5.7089'. [ 2280.960391][ T7237] netlink: 290 bytes leftover after parsing attributes in process `syz.5.7089'. [ 2280.981278][ T7237] veth0_macvtap: left promiscuous mode [ 2280.992162][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7090'. [ 2281.343298][ T7243] FAULT_INJECTION: forcing a failure. [ 2281.343298][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.382621][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.3.7091 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2281.382676][ T7243] Tainted: [U]=USER [ 2281.382688][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2281.382706][ T7243] Call Trace: [ 2281.382717][ T7243] [ 2281.382730][ T7243] dump_stack_lvl+0x16c/0x1f0 [ 2281.382776][ T7243] should_fail_ex+0x512/0x640 [ 2281.382827][ T7243] _copy_from_user+0x2e/0xd0 [ 2281.382885][ T7243] copy_msghdr_from_user+0x98/0x160 [ 2281.382940][ T7243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2281.382998][ T7243] ? kfree+0x252/0x4d0 [ 2281.383045][ T7243] ? __pfx__kstrtoull+0x10/0x10 [ 2281.383087][ T7243] ___sys_sendmsg+0xfe/0x1d0 [ 2281.383119][ T7243] ? __pfx____sys_sendmsg+0x10/0x10 [ 2281.383211][ T7243] ? __pfx___might_resched+0x10/0x10 [ 2281.383257][ T7243] __sys_sendmmsg+0x200/0x420 [ 2281.383292][ T7243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2281.383338][ T7243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2281.383399][ T7243] ? fput+0x70/0xf0 [ 2281.383436][ T7243] ? ksys_write+0x1b9/0x240 [ 2281.383466][ T7243] ? __pfx_ksys_write+0x10/0x10 [ 2281.383494][ T7243] ? rcu_is_watching+0x12/0xc0 [ 2281.383530][ T7243] __x64_sys_sendmmsg+0x9c/0x100 [ 2281.383562][ T7243] ? lockdep_hardirqs_on+0x7c/0x110 [ 2281.383604][ T7243] do_syscall_64+0xcd/0x230 [ 2281.383647][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.383679][ T7243] RIP: 0033:0x7fe23998e969 [ 2281.383705][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2281.383739][ T7243] RSP: 002b:00007fe23a749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2281.383771][ T7243] RAX: ffffffffffffffda RBX: 00007fe239bb5fa0 RCX: 00007fe23998e969 [ 2281.383794][ T7243] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2281.383814][ T7243] RBP: 00007fe23a749090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.383835][ T7243] R10: 00000000070000ee R11: 0000000000000246 R12: 0000000000000002 [ 2281.383860][ T7243] R13: 0000000000000000 R14: 00007fe239bb5fa0 R15: 00007ffcd791dec8 [ 2281.383902][ T7243] [ 2281.683189][ T7237] kernel write not supported for file /status (pid: 7237 comm: syz.5.7089) [ 2282.260912][ T7254] netlink: 186 bytes leftover after parsing attributes in process `syz.3.7093'. [ 2282.683208][ T7249] kernel write not supported for file /status (pid: 7249 comm: syz.5.7095) [ 2283.097081][ T7270] kernel write not supported for file /status (pid: 7270 comm: syz.5.7098) [ 2283.389686][ T7278] Invalid ELF header magic: != ELF [ 2284.586515][ T7278] kernel write not supported for file /status (pid: 7278 comm: syz.5.7099) [ 2285.067962][T28749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2285.082357][T28749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2285.091275][T28749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2285.119826][T28749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2285.128261][T28749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2285.588187][T13788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.760220][ T7296] kernel write not supported for file /status (pid: 7296 comm: syz.5.7103) [ 2285.806960][T13788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.041265][T13788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.251935][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 2286.389289][T13788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.901625][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.924993][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.933407][ T7297] bridge_slave_0: entered allmulticast mode [ 2286.954301][ T7297] bridge_slave_0: entered promiscuous mode [ 2287.074456][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.120278][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.158920][ T7297] bridge_slave_1: entered allmulticast mode [ 2287.181637][ T7297] bridge_slave_1: entered promiscuous mode [ 2287.204951][T27886] Bluetooth: hci1: command tx timeout [ 2287.516955][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.646811][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.922714][ T7297] team0: Port device team_slave_0 added [ 2287.931923][T13788] bridge_slave_1: left allmulticast mode [ 2287.944933][T13788] bridge_slave_1: left promiscuous mode [ 2287.965164][T13788] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.016188][T13788] bridge_slave_0: left allmulticast mode [ 2288.021923][T13788] bridge_slave_0: left promiscuous mode [ 2288.033113][T13788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.268141][ T7341] kernel write not supported for file /status (pid: 7341 comm: syz.5.7109) [ 2288.499874][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.506693][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.285082][T27886] Bluetooth: hci1: command tx timeout [ 2289.360741][T13788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2289.387043][T13788] bond0 (unregistering): Released all slaves [ 2289.813226][ T7297] team0: Port device team_slave_1 added [ 2289.998972][T13788] ovs_: left promiscuous mode [ 2290.144146][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2290.161765][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2290.196647][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2290.291025][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2290.312681][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2290.375570][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2290.768543][ T7297] hsr_slave_0: entered promiscuous mode [ 2290.787936][ T7297] hsr_slave_1: entered promiscuous mode [ 2290.794473][ T7297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2290.812837][ T7297] Cannot create hsr debugfs directory [ 2291.366778][T27886] Bluetooth: hci1: command tx timeout [ 2291.479662][T13788] hsr_slave_0: left promiscuous mode [ 2291.497656][T13788] hsr_slave_1: left promiscuous mode [ 2291.546960][T13788] veth1_macvtap: left promiscuous mode [ 2291.552770][T13788] veth0_macvtap: left promiscuous mode [ 2291.561291][T13788] veth1_vlan: left promiscuous mode [ 2291.568563][T13788] veth0_vlan: left promiscuous mode [ 2291.960064][ T7384] FAULT_INJECTION: forcing a failure. [ 2291.960064][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2291.973319][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.2.7116 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2291.973371][ T7384] Tainted: [U]=USER [ 2291.973382][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2291.973401][ T7384] Call Trace: [ 2291.973412][ T7384] [ 2291.973424][ T7384] dump_stack_lvl+0x16c/0x1f0 [ 2291.973469][ T7384] should_fail_ex+0x512/0x640 [ 2291.973522][ T7384] _copy_to_user+0x32/0xd0 [ 2291.973574][ T7384] simple_read_from_buffer+0xcb/0x170 [ 2291.973626][ T7384] proc_fail_nth_read+0x197/0x270 [ 2291.973673][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2291.973721][ T7384] ? rw_verify_area+0xcf/0x680 [ 2291.973766][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2291.973813][ T7384] vfs_read+0x1de/0xc70 [ 2291.973849][ T7384] ? __pfx___mutex_lock+0x10/0x10 [ 2291.973890][ T7384] ? __pfx_vfs_read+0x10/0x10 [ 2291.973931][ T7384] ? __fget_files+0x20e/0x3c0 [ 2291.973994][ T7384] ksys_read+0x12a/0x240 [ 2291.974023][ T7384] ? __pfx_ksys_read+0x10/0x10 [ 2291.974051][ T7384] ? syscall_user_dispatch+0x78/0x140 [ 2291.974111][ T7384] do_syscall_64+0xcd/0x230 [ 2291.974161][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2291.974195][ T7384] RIP: 0033:0x7f7b6618d37c [ 2291.974221][ T7384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2291.974253][ T7384] RSP: 002b:00007f7b66f2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2291.974285][ T7384] RAX: ffffffffffffffda RBX: 00007f7b663b6240 RCX: 00007f7b6618d37c [ 2291.974307][ T7384] RDX: 000000000000000f RSI: 00007f7b66f2e0a0 RDI: 000000000000000b [ 2291.974328][ T7384] RBP: 00007f7b66f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 2291.974349][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2291.974369][ T7384] R13: 0000000000000000 R14: 00007f7b663b6240 R15: 00007ffe53a16338 [ 2291.974413][ T7384] [ 2292.531509][ T7345] kernel write not supported for file /status (pid: 7345 comm: syz.5.7111) [ 2292.613776][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2292.654514][ T7389] netlink: 330 bytes leftover after parsing attributes in process `syz.2.7118'. [ 2292.909762][T13788] team0 (unregistering): Port device team_slave_1 removed [ 2293.010877][T13788] team0 (unregistering): Port device team_slave_0 removed [ 2293.457094][T27886] Bluetooth: hci1: command tx timeout [ 2293.674650][ T7391] netlink: 342 bytes leftover after parsing attributes in process `syz.2.7118'. [ 2293.754380][ T7387] kernel write not supported for file /status (pid: 7387 comm: syz.5.7117) [ 2293.932495][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7120'. [ 2293.973934][ T7398] gretap0: left allmulticast mode [ 2294.005369][ T7398] gretap0: left promiscuous mode [ 2294.024042][ T7398] bridge0: port 4(gretap0) entered disabled state [ 2294.058646][ T7398] hsr0: left allmulticast mode [ 2294.073808][ T7398] hsr_slave_0: left allmulticast mode [ 2294.113870][ T7398] hsr_slave_1: left allmulticast mode [ 2294.144813][ T7398] hsr0: left promiscuous mode [ 2294.149875][ T7398] bridge0: port 3(hsr0) entered disabled state [ 2294.224570][ T7398] bridge_slave_1: left allmulticast mode [ 2294.241914][ T7398] bridge_slave_1: left promiscuous mode [ 2294.270567][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.314269][ T7398] bridge_slave_0: left allmulticast mode [ 2294.337242][ T7398] bridge_slave_0: left promiscuous mode [ 2294.343140][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.984460][ T7395] Process accounting paused [ 2296.019600][ T7297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2296.082720][ T7297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2296.097512][ T7297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2296.127223][ T7297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2296.692493][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.761676][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.823250][T31375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.830565][T31375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.883062][T21579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.890372][T21579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2296.894334][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 2297.807337][ T7473] FAULT_INJECTION: forcing a failure. [ 2297.807337][ T7473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2297.820849][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.2.7129 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2297.820887][ T7473] Tainted: [U]=USER [ 2297.820895][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2297.820910][ T7473] Call Trace: [ 2297.820918][ T7473] [ 2297.820927][ T7473] dump_stack_lvl+0x16c/0x1f0 [ 2297.820960][ T7473] should_fail_ex+0x512/0x640 [ 2297.820997][ T7473] should_fail_alloc_page+0xe7/0x130 [ 2297.821029][ T7473] prepare_alloc_pages+0x3c2/0x610 [ 2297.821063][ T7473] ? rcu_is_watching+0x12/0xc0 [ 2297.821088][ T7473] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2297.821114][ T7473] ? __kernel_text_address+0xd/0x40 [ 2297.821150][ T7473] ? unwind_get_return_address+0x59/0xa0 [ 2297.821176][ T7473] ? arch_stack_walk+0xa6/0x100 [ 2297.821212][ T7473] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2297.821239][ T7473] ? stack_trace_save+0x8e/0xc0 [ 2297.821262][ T7473] ? __pfx_stack_trace_save+0x10/0x10 [ 2297.821284][ T7473] ? stack_depot_save_flags+0x28/0xa50 [ 2297.821316][ T7473] ? find_held_lock+0x2b/0x80 [ 2297.821342][ T7473] ? kasan_save_stack+0x42/0x60 [ 2297.821377][ T7473] ? __lock_acquire+0xaa4/0x1ba0 [ 2297.821405][ T7473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2297.821438][ T7473] ? policy_nodemask+0xea/0x4e0 [ 2297.821468][ T7473] alloc_pages_mpol+0x1fb/0x550 [ 2297.821497][ T7473] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2297.821522][ T7473] ? __page_table_check_ptes_set+0x1ae/0x420 [ 2297.821551][ T7473] ? find_held_lock+0x2b/0x80 [ 2297.821576][ T7473] alloc_pages_noprof+0x131/0x390 [ 2297.821605][ T7473] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2297.821627][ T7473] get_free_pages_noprof+0xc/0x40 [ 2297.821656][ T7473] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2297.821679][ T7473] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2297.821702][ T7473] __apply_to_page_range+0x617/0xd60 [ 2297.821740][ T7473] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2297.821767][ T7473] ? __pfx___apply_to_page_range+0x10/0x10 [ 2297.821803][ T7473] ? alloc_vmap_area+0x872/0x2970 [ 2297.821841][ T7473] alloc_vmap_area+0x919/0x2970 [ 2297.821884][ T7473] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2297.821924][ T7473] __get_vm_area_node+0x1a7/0x300 [ 2297.821963][ T7473] __vmalloc_node_range_noprof+0x277/0x1540 [ 2297.822001][ T7473] ? sock_hash_alloc+0x336/0x510 [ 2297.822033][ T7473] ? sock_hash_alloc+0x336/0x510 [ 2297.822063][ T7473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2297.822101][ T7473] ? rcu_is_watching+0x12/0xc0 [ 2297.822122][ T7473] ? trace_kmalloc+0x2b/0xd0 [ 2297.822152][ T7473] ? __kmalloc_node_noprof+0x23b/0x500 [ 2297.822177][ T7473] ? trace_cap_capable+0x18d/0x200 [ 2297.822215][ T7473] ? sock_hash_alloc+0x336/0x510 [ 2297.822239][ T7473] __bpf_map_area_alloc+0xeb/0x190 [ 2297.822274][ T7473] ? sock_hash_alloc+0x336/0x510 [ 2297.822300][ T7473] sock_hash_alloc+0x336/0x510 [ 2297.822328][ T7473] map_create+0x58f/0x1db0 [ 2297.822372][ T7473] ? __pfx_map_create+0x10/0x10 [ 2297.822400][ T7473] ? __might_fault+0xe3/0x190 [ 2297.822424][ T7473] ? __might_fault+0xe3/0x190 [ 2297.822447][ T7473] ? __might_fault+0x13b/0x190 [ 2297.822484][ T7473] __sys_bpf+0x47cc/0x4d80 [ 2297.822519][ T7473] ? __pfx___sys_bpf+0x10/0x10 [ 2297.822551][ T7473] ? ksys_write+0x190/0x240 [ 2297.822577][ T7473] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2297.822627][ T7473] ? fput+0x70/0xf0 [ 2297.822653][ T7473] ? ksys_write+0x1b9/0x240 [ 2297.822674][ T7473] ? __pfx_ksys_write+0x10/0x10 [ 2297.822694][ T7473] ? rcu_is_watching+0x12/0xc0 [ 2297.822719][ T7473] __x64_sys_bpf+0x78/0xc0 [ 2297.822752][ T7473] ? lockdep_hardirqs_on+0x7c/0x110 [ 2297.822779][ T7473] do_syscall_64+0xcd/0x230 [ 2297.822810][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.822833][ T7473] RIP: 0033:0x7f7b6618e969 [ 2297.822852][ T7473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2297.822876][ T7473] RSP: 002b:00007f7b66f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2297.822899][ T7473] RAX: ffffffffffffffda RBX: 00007f7b663b5fa0 RCX: 00007f7b6618e969 [ 2297.822915][ T7473] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2297.822930][ T7473] RBP: 00007f7b66f91090 R08: 0000000000000000 R09: 0000000000000000 [ 2297.822945][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2297.822959][ T7473] R13: 0000000000000000 R14: 00007f7b663b5fa0 R15: 00007ffe53a16338 [ 2297.822987][ T7473] [ 2298.500325][ T7476] vivid-007: ================= START STATUS ================= [ 2298.578911][ T7476] vivid-007: Generate PTS: true [ 2298.682661][ T7476] vivid-007: Generate SCR: true [ 2298.688196][ T7476] tpg source WxH: 640x360 (Y'CbCr) [ 2298.693418][ T7476] tpg field: 1 [ 2298.696934][ T7476] tpg crop: (0,0)/640x360 [ 2298.701305][ T7476] tpg compose: (0,0)/640x360 [ 2298.715433][ T7476] tpg colorspace: 8 [ 2298.719319][ T7476] tpg transfer function: 0/0 [ 2298.723953][ T7476] tpg Y'CbCr encoding: 0/0 [ 2298.730514][ T7476] tpg quantization: 0/0 [ 2298.735117][ T7476] tpg RGB range: 0/2 [ 2298.739069][ T7476] vivid-007: ================== END STATUS ================== [ 2298.820705][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7130'. [ 2298.876438][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2299.554366][ T7297] veth0_vlan: entered promiscuous mode [ 2299.636594][ T7297] veth1_vlan: entered promiscuous mode [ 2299.742146][ T7297] veth0_macvtap: entered promiscuous mode [ 2299.810899][ T7297] veth1_macvtap: entered promiscuous mode [ 2299.888675][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2299.930388][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2299.972647][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2300.026351][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.090359][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2300.104932][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.119578][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2300.130814][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.141579][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.151736][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.162386][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.173279][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2300.194235][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2300.235872][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2300.408802][ T7297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.432754][ T7297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.474111][ T7297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.500004][ T7297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.996638][T31375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.037437][T31375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2301.314496][ T5337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.360998][ T5337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2301.876435][ T7539] vivid-007: ================= START STATUS ================= [ 2301.884519][ T7539] vivid-007: Enable Output Cropping: true [ 2301.890978][ T7539] vivid-007: Enable Output Composing: true [ 2301.900676][ T7539] vivid-007: Enable Output Scaler: true [ 2301.930548][ T7539] vivid-007: Tx RGB Quantization Range: Automatic [ 2301.956813][ T7539] vivid-007: Transmit Mode: HDMI [ 2301.962019][ T7539] vivid-007: Hotplug Present: 0x00000000 [ 2302.004451][ T7539] vivid-007: RxSense Present: 0x00000000 [ 2302.035175][ T7539] vivid-007: EDID Present: 0x00000000 [ 2302.094907][ T7539] vivid-007: ================== END STATUS ================== [ 2302.124639][ T7538] vivid-007: ================= START STATUS ================= [ 2302.155748][ T7538] vivid-007: Enable Output Cropping: true [ 2302.174059][ T7538] vivid-007: Enable Output Composing: true [ 2302.180178][ T7538] vivid-007: Enable Output Scaler: true [ 2302.231211][ T7538] vivid-007: Tx RGB Quantization Range: Automatic [ 2302.238474][ T7538] vivid-007: Transmit Mode: HDMI [ 2302.243490][ T7538] vivid-007: Hotplug Present: 0x00000000 [ 2302.249325][ T7538] vivid-007: RxSense Present: 0x00000000 [ 2302.286410][ T7538] vivid-007: EDID Present: 0x00000000 [ 2302.292379][ T7538] vivid-007: ================== END STATUS ================== [ 2304.261767][T28749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2304.275227][T28749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2304.285291][T28749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2304.395151][T28749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2304.434995][T28749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2305.092819][T31372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.308456][T31372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.450313][T31372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.587631][T31372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.653134][ T7579] chnl_net:caif_netlink_parms(): no params data found [ 2306.249788][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 2306.267697][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.289477][ T7579] bridge_slave_0: entered allmulticast mode [ 2306.317223][ T7579] bridge_slave_0: entered promiscuous mode [ 2306.347151][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2306.374846][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.404051][ T7579] bridge_slave_1: entered allmulticast mode [ 2306.420916][ T7615] netlink: 330 bytes leftover after parsing attributes in process `syz.5.7150'. [ 2306.443244][ T7579] bridge_slave_1: entered promiscuous mode [ 2306.565638][T28749] Bluetooth: hci4: command tx timeout [ 2306.823207][ T7611] netlink: 342 bytes leftover after parsing attributes in process `syz.5.7150'. [ 2307.113053][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2308.653383][T28749] Bluetooth: hci4: command tx timeout [ 2309.091164][T31372] ip_vti0 (unregistering): left allmulticast mode [ 2309.896297][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7156'. [ 2310.736746][T28749] Bluetooth: hci4: command tx timeout [ 2312.067325][T31372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2312.197681][T31372] bond0 (unregistering): Released all slaves [ 2312.335768][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2312.805372][T28749] Bluetooth: hci4: command tx timeout [ 2313.110280][ T7579] team0: Port device team_slave_0 added [ 2313.135202][T31372] ovs_: left promiscuous mode [ 2313.296695][ T7579] team0: Port device team_slave_1 added [ 2313.809416][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2313.864629][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2314.124826][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2314.402797][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2314.412793][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2314.440531][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2314.892086][ T7579] hsr_slave_0: entered promiscuous mode [ 2314.899145][ T7579] hsr_slave_1: entered promiscuous mode [ 2314.917386][ T7579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2314.935924][ T7579] Cannot create hsr debugfs directory [ 2317.885800][T31372] hsr_slave_0: left promiscuous mode [ 2317.914983][T31372] hsr_slave_1: left promiscuous mode [ 2317.928106][T31372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2317.948995][T31372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2317.980358][T31372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2318.009081][T31372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.120524][T31372] veth1_macvtap: left promiscuous mode [ 2318.141826][T31372] veth0_macvtap: left promiscuous mode [ 2318.158554][T31372] veth1_vlan: left promiscuous mode [ 2318.170756][T31372] veth0_vlan: left promiscuous mode [ 2320.206049][T31372] team0 (unregistering): Port device team_slave_1 removed [ 2320.344362][T31372] team0 (unregistering): Port device team_slave_0 removed [ 2322.299431][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7175'. [ 2322.526773][ T7579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2322.567168][ T7579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2322.581851][ T7579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2322.593025][ T7579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2322.931909][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2323.029949][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 2323.113547][T21579] bridge0: port 1(bridge_slave_0) entered blocking state [ 2323.120766][T21579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2323.157028][T21579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2323.164219][T21579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2324.206025][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2324.450801][ T7579] veth0_vlan: entered promiscuous mode [ 2324.486376][ T7579] veth1_vlan: entered promiscuous mode [ 2324.556917][ T7579] veth0_macvtap: entered promiscuous mode [ 2324.612288][ T7579] veth1_macvtap: entered promiscuous mode [ 2324.706442][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.738702][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.794882][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.844743][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.864742][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2324.891516][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2324.924245][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2324.977205][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2324.988264][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.001630][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.013452][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.023801][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.077844][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.116389][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2325.158306][ T7579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.174218][ T7821] Process accounting resumed [ 2325.191223][ T7579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.211252][ T7821] kernel write not supported for file /status (pid: 7821 comm: syz.5.7180) [ 2325.221012][ T7579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.240882][ T7579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.281043][ T7831] FAULT_INJECTION: forcing a failure. [ 2325.281043][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.299695][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.3.7181 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2325.299754][ T7831] Tainted: [U]=USER [ 2325.299767][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2325.299787][ T7831] Call Trace: [ 2325.299799][ T7831] [ 2325.299811][ T7831] dump_stack_lvl+0x16c/0x1f0 [ 2325.299865][ T7831] should_fail_ex+0x512/0x640 [ 2325.299911][ T7831] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2325.299953][ T7831] should_failslab+0xc2/0x120 [ 2325.299992][ T7831] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2325.300026][ T7831] ? __proc_create+0xc3/0x8c0 [ 2325.300062][ T7831] ? __proc_create+0x2ce/0x8c0 [ 2325.300103][ T7831] __proc_create+0x2ce/0x8c0 [ 2325.300140][ T7831] ? __pfx___proc_create+0x10/0x10 [ 2325.300181][ T7831] ? _raw_write_unlock+0x28/0x50 [ 2325.300217][ T7831] ? proc_register+0x314/0x5f0 [ 2325.300258][ T7831] proc_create_reg+0x7d/0x180 [ 2325.300296][ T7831] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 2325.300347][ T7831] proc_create_net_single+0x86/0x170 [ 2325.300386][ T7831] ? __pfx_proc_create_net_single+0x10/0x10 [ 2325.300425][ T7831] ? __pfx___netlink_kernel_create+0x10/0x10 [ 2325.300472][ T7831] fib_proc_init+0xa3/0x1b0 [ 2325.300522][ T7831] fib_net_init+0x2af/0x3f0 [ 2325.300552][ T7831] ? __pfx___register_sysctl_table+0x10/0x10 [ 2325.300589][ T7831] ? __pfx_fib_net_init+0x10/0x10 [ 2325.300619][ T7831] ? lockdep_init_map_type+0x5c/0x280 [ 2325.300663][ T7831] ? __pfx_nl_fib_input+0x10/0x10 [ 2325.300700][ T7831] ? devinet_init_net+0x5c2/0x910 [ 2325.300740][ T7831] ? __pfx_fib_net_init+0x10/0x10 [ 2325.300769][ T7831] ops_init+0x1df/0x5f0 [ 2325.300807][ T7831] setup_net+0x21e/0x850 [ 2325.300854][ T7831] ? __pfx_setup_net+0x10/0x10 [ 2325.300886][ T7831] ? lockdep_init_map_type+0x5c/0x280 [ 2325.300929][ T7831] ? __pfx_down_read_killable+0x10/0x10 [ 2325.300980][ T7831] ? debug_mutex_init+0x37/0x70 [ 2325.301036][ T7831] copy_net_ns+0x2a6/0x5f0 [ 2325.301078][ T7831] create_new_namespaces+0x3ea/0xad0 [ 2325.301124][ T7831] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2325.301165][ T7831] ksys_unshare+0x45b/0xa40 [ 2325.301210][ T7831] ? __pfx_ksys_unshare+0x10/0x10 [ 2325.301252][ T7831] ? xfd_validate_state+0x5d/0x180 [ 2325.301306][ T7831] ? rcu_is_watching+0x12/0xc0 [ 2325.301346][ T7831] __x64_sys_unshare+0x31/0x40 [ 2325.301390][ T7831] do_syscall_64+0xcd/0x230 [ 2325.301434][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.301468][ T7831] RIP: 0033:0x7fa6a0b8e969 [ 2325.301494][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2325.301527][ T7831] RSP: 002b:00007fa69e9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2325.301559][ T7831] RAX: ffffffffffffffda RBX: 00007fa6a0db6080 RCX: 00007fa6a0b8e969 [ 2325.301581][ T7831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2325.301602][ T7831] RBP: 00007fa6a0c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2325.301622][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2325.301641][ T7831] R13: 0000000000000000 R14: 00007fa6a0db6080 R15: 00007ffc5b04faf8 [ 2325.301684][ T7831] [ 2326.384155][T31372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.415189][T31372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2326.575228][T31373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.615170][T31373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.237306][ T7838] kernel write not supported for file /status (pid: 7838 comm: syz.5.7182) [ 2328.733579][ T7873] kernel write not supported for file /status (pid: 7873 comm: syz.5.7187) [ 2329.653428][ T7909] QAT: failed to copy from user cfg_data. [ 2329.782285][ T7902] kernel write not supported for file /status (pid: 7902 comm: syz.5.7189) [ 2330.226984][ T7929] netlink: 330 bytes leftover after parsing attributes in process `syz.5.7193'. [ 2330.257478][ T7929] netlink: 342 bytes leftover after parsing attributes in process `syz.5.7193'. [ 2330.792284][ T7929] kernel write not supported for file /status (pid: 7929 comm: syz.5.7193) [ 2330.923649][ T7939] FAULT_INJECTION: forcing a failure. [ 2330.923649][ T7939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2330.984965][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.2.7195 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2330.985004][ T7939] Tainted: [U]=USER [ 2330.985013][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2330.985027][ T7939] Call Trace: [ 2330.985035][ T7939] [ 2330.985044][ T7939] dump_stack_lvl+0x16c/0x1f0 [ 2330.985076][ T7939] should_fail_ex+0x512/0x640 [ 2330.985113][ T7939] should_fail_alloc_page+0xe7/0x130 [ 2330.985143][ T7939] prepare_alloc_pages+0x3c2/0x610 [ 2330.985183][ T7939] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 2330.985214][ T7939] ? __lock_acquire+0x5ca/0x1ba0 [ 2330.985250][ T7939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2330.985282][ T7939] ? find_held_lock+0x2b/0x80 [ 2330.985305][ T7939] ? bpf_ksym_find+0x124/0x1c0 [ 2330.985349][ T7939] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2330.985375][ T7939] ? is_bpf_text_address+0x94/0x1a0 [ 2330.985403][ T7939] ? kernel_text_address+0x8d/0x100 [ 2330.985439][ T7939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2330.985471][ T7939] ? policy_nodemask+0xea/0x4e0 [ 2330.985501][ T7939] alloc_pages_mpol+0x1fb/0x550 [ 2330.985530][ T7939] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2330.985560][ T7939] ? stack_trace_save+0x8e/0xc0 [ 2330.985586][ T7939] alloc_pages_noprof+0x131/0x390 [ 2330.985614][ T7939] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2330.985637][ T7939] get_free_pages_noprof+0xc/0x40 [ 2330.985666][ T7939] kasan_populate_vmalloc_pte+0x2d/0x160 [ 2330.985691][ T7939] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2330.985714][ T7939] __apply_to_page_range+0x617/0xd60 [ 2330.985753][ T7939] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 2330.985781][ T7939] ? __pfx___apply_to_page_range+0x10/0x10 [ 2330.985817][ T7939] ? alloc_vmap_area+0x872/0x2970 [ 2330.985855][ T7939] alloc_vmap_area+0x919/0x2970 [ 2330.985898][ T7939] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2330.985938][ T7939] __get_vm_area_node+0x1a7/0x300 [ 2330.985978][ T7939] __vmalloc_node_range_noprof+0x277/0x1540 [ 2330.986022][ T7939] ? xsk_map_alloc+0x1a3/0x230 [ 2330.986045][ T7939] ? unwind_get_return_address+0x59/0xa0 [ 2330.986078][ T7939] ? __lock_acquire+0x5ca/0x1ba0 [ 2330.986107][ T7939] ? xsk_map_alloc+0x1a3/0x230 [ 2330.986131][ T7939] ? aa_get_newest_label+0x375/0x680 [ 2330.986158][ T7939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2330.986195][ T7939] ? rcu_is_watching+0x12/0xc0 [ 2330.986216][ T7939] ? trace_cap_capable+0x18d/0x200 [ 2330.986258][ T7939] ? xsk_map_alloc+0x1a3/0x230 [ 2330.986283][ T7939] __bpf_map_area_alloc+0xeb/0x190 [ 2330.986323][ T7939] ? xsk_map_alloc+0x1a3/0x230 [ 2330.986349][ T7939] xsk_map_alloc+0x1a3/0x230 [ 2330.986375][ T7939] map_create+0x58f/0x1db0 [ 2330.986414][ T7939] ? __pfx_map_create+0x10/0x10 [ 2330.986442][ T7939] ? __might_fault+0xe3/0x190 [ 2330.986466][ T7939] ? __might_fault+0xe3/0x190 [ 2330.986489][ T7939] ? __might_fault+0x13b/0x190 [ 2330.986525][ T7939] __sys_bpf+0x47cc/0x4d80 [ 2330.986562][ T7939] ? __pfx___sys_bpf+0x10/0x10 [ 2330.986594][ T7939] ? ksys_write+0x190/0x240 [ 2330.986620][ T7939] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2330.986667][ T7939] ? fput+0x70/0xf0 [ 2330.986693][ T7939] ? ksys_write+0x1b9/0x240 [ 2330.986714][ T7939] ? __pfx_ksys_write+0x10/0x10 [ 2330.986734][ T7939] ? rcu_is_watching+0x12/0xc0 [ 2330.986759][ T7939] __x64_sys_bpf+0x78/0xc0 [ 2330.986791][ T7939] ? lockdep_hardirqs_on+0x7c/0x110 [ 2330.986818][ T7939] do_syscall_64+0xcd/0x230 [ 2330.986849][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.986872][ T7939] RIP: 0033:0x7f213e18e969 [ 2330.986890][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2330.986913][ T7939] RSP: 002b:00007f213ef53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2330.986935][ T7939] RAX: ffffffffffffffda RBX: 00007f213e3b5fa0 RCX: 00007f213e18e969 [ 2330.986950][ T7939] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2330.986965][ T7939] RBP: 00007f213ef53090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.986979][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.986993][ T7939] R13: 0000000000000000 R14: 00007f213e3b5fa0 R15: 00007fff6c854c98 [ 2330.987022][ T7939] [ 2331.989287][ T7904] kernel write not supported for file /status (pid: 7904 comm: syz.5.7189) [ 2332.373584][ T7951] kernel write not supported for file /status (pid: 7951 comm: syz.5.7197) [ 2333.276730][ T7970] FAULT_INJECTION: forcing a failure. [ 2333.276730][ T7970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2333.379456][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.5.7200 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2333.379496][ T7970] Tainted: [U]=USER [ 2333.379503][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2333.379517][ T7970] Call Trace: [ 2333.379525][ T7970] [ 2333.379534][ T7970] dump_stack_lvl+0x16c/0x1f0 [ 2333.379566][ T7970] should_fail_ex+0x512/0x640 [ 2333.379600][ T7970] _copy_from_user+0x2e/0xd0 [ 2333.379634][ T7970] __sys_bpf+0x21d/0x4d80 [ 2333.379669][ T7970] ? __pfx___sys_bpf+0x10/0x10 [ 2333.379700][ T7970] ? ksys_write+0x190/0x240 [ 2333.379725][ T7970] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2333.379769][ T7970] ? fput+0x70/0xf0 [ 2333.379794][ T7970] ? ksys_write+0x1b9/0x240 [ 2333.379814][ T7970] ? __pfx_ksys_write+0x10/0x10 [ 2333.379833][ T7970] ? rcu_is_watching+0x12/0xc0 [ 2333.379857][ T7970] __x64_sys_bpf+0x78/0xc0 [ 2333.379887][ T7970] ? lockdep_hardirqs_on+0x7c/0x110 [ 2333.379913][ T7970] do_syscall_64+0xcd/0x230 [ 2333.379942][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.379964][ T7970] RIP: 0033:0x7f4792d8e969 [ 2333.379982][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2333.380004][ T7970] RSP: 002b:00007f4793cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2333.380025][ T7970] RAX: ffffffffffffffda RBX: 00007f4792fb5fa0 RCX: 00007f4792d8e969 [ 2333.380040][ T7970] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2333.380055][ T7970] RBP: 00007f4793cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2333.380068][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2333.380082][ T7970] R13: 0000000000000000 R14: 00007f4792fb5fa0 R15: 00007ffc802c2608 [ 2333.380110][ T7970] [ 2333.909324][ T7970] kernel write not supported for file /status (pid: 7970 comm: syz.5.7200) [ 2334.740571][ T7995] netlink: 330 bytes leftover after parsing attributes in process `syz.3.7205'. [ 2334.777147][ T7995] mac80211_hwsim hwsim68 : renamed from wlan0 (while UP) [ 2334.849612][ T7996] netlink: 342 bytes leftover after parsing attributes in process `syz.3.7205'. [ 2335.449808][ T7991] kernel write not supported for file /status (pid: 7991 comm: syz.5.7203) [ 2337.200134][ T8003] kernel write not supported for file /status (pid: 8003 comm: syz.5.7207) [ 2349.930560][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.937086][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.327014][T27886] Bluetooth: hci1: command 0x0406 tx timeout [ 2411.369614][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.376350][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2428.804939][T27886] Bluetooth: hci4: command 0x0406 tx timeout [ 2472.809451][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.816445][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2486.885159][ T31] INFO: task jbd2/sda1-8:5163 blocked for more than 143 seconds. [ 2486.892956][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 2486.902885][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2486.911740][ T31] task:jbd2/sda1-8 state:D stack:26008 pid:5163 tgid:5163 ppid:2 task_flags:0x240040 flags:0x00004000 [ 2486.923823][ T31] Call Trace: [ 2486.927230][ T31] [ 2486.930207][ T31] __schedule+0x116f/0x5de0 [ 2486.934798][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 2486.939807][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 2486.944898][ T31] ? __pfx___schedule+0x10/0x10 [ 2486.949877][ T31] ? find_held_lock+0x2b/0x80 [ 2486.954688][ T31] ? schedule+0x2d7/0x3a0 [ 2486.959426][ T31] schedule+0xe7/0x3a0 [ 2486.963560][ T31] io_schedule+0xbf/0x130 [ 2486.968131][ T31] bit_wait_io+0x15/0xe0 [ 2486.972429][ T31] __wait_on_bit+0x62/0x180 [ 2486.977119][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2486.982130][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2486.987612][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2486.993655][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2486.999217][ T31] ? __pfx___might_resched+0x10/0x10 [ 2487.004568][ T31] __wait_on_buffer+0x64/0x70 [ 2487.009377][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 2487.015830][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 2487.022584][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2487.028528][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 2487.034292][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2487.040362][ T31] ? find_held_lock+0x2b/0x80 [ 2487.045292][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2487.051176][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.056041][ T31] kjournald2+0x1f4/0x760 [ 2487.060699][ T31] ? __pfx_kjournald2+0x10/0x10 [ 2487.065699][ T31] ? find_held_lock+0x2b/0x80 [ 2487.070436][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2487.076612][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2487.082068][ T31] ? __kthread_parkme+0x19e/0x250 [ 2487.087412][ T31] ? __pfx_kjournald2+0x10/0x10 [ 2487.092328][ T31] kthread+0x3c2/0x780 [ 2487.097270][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.101936][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.107363][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.111994][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.119222][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.124029][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.133617][ T31] ret_from_fork+0x45/0x80 [ 2487.139969][ T31] ? __pfx_kthread+0x10/0x10 [ 2487.147665][ T31] ret_from_fork_asm+0x1a/0x30 [ 2487.152501][ T31] [ 2487.157507][ T31] INFO: task syz.4.7209:8011 blocked for more than 143 seconds. [ 2487.166396][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 2487.177873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.186977][ T31] task:syz.4.7209 state:D stack:25672 pid:8011 tgid:8011 ppid:30620 task_flags:0x440040 flags:0x00000004 [ 2487.199141][ T31] Call Trace: [ 2487.202457][ T31] [ 2487.205472][ T31] __schedule+0x116f/0x5de0 [ 2487.210038][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.215013][ T31] ? find_held_lock+0x2b/0x80 [ 2487.219732][ T31] ? schedule+0x2d7/0x3a0 [ 2487.224083][ T31] schedule+0xe7/0x3a0 [ 2487.228225][ T31] io_schedule+0xbf/0x130 [ 2487.232601][ T31] bit_wait_io+0x15/0xe0 [ 2487.236940][ T31] __wait_on_bit+0x62/0x180 [ 2487.241497][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2487.246549][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2487.251991][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2487.258103][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2487.263881][ T31] do_get_write_access+0x93d/0x12a0 [ 2487.269263][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2487.275372][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2487.281476][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 2487.287188][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2487.292715][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2487.298199][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2487.304243][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.309120][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2487.314877][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2487.320169][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2487.325929][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2487.331622][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2487.336658][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2487.342072][ T31] ext4_dirty_inode+0xd9/0x130 [ 2487.346924][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.351735][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2487.356869][ T31] generic_update_time+0xcf/0xf0 [ 2487.361857][ T31] file_update_time+0x17d/0x1c0 [ 2487.367127][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 2487.372220][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2487.377834][ T31] do_page_mkwrite+0x171/0x380 [ 2487.382655][ T31] do_pte_missing+0x29c/0x3fb0 [ 2487.387512][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 2487.392848][ T31] __handle_mm_fault+0x103d/0x2a40 [ 2487.398073][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2487.403573][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2487.408905][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2487.414194][ T31] handle_mm_fault+0x3fe/0xad0 [ 2487.419081][ T31] do_user_addr_fault+0x60c/0x1370 [ 2487.424247][ T31] exc_page_fault+0x5c/0xc0 [ 2487.428844][ T31] asm_exc_page_fault+0x26/0x30 [ 2487.433737][ T31] RIP: 0033:0x7f26b946eada [ 2487.438281][ T31] RSP: 002b:00007ffc66197100 EFLAGS: 00010202 [ 2487.444415][ T31] RAX: 0000001b2d3f7000 RBX: 00007f26ba2e5720 RCX: 0000001b2d3f6ff8 [ 2487.452849][ T31] RDX: 0000001b2d020220 RSI: 0000000000000008 RDI: 00007f26ba2e5720 [ 2487.461037][ T31] RBP: ffffffff8b25b831 R08: 00007f26b97b6038 R09: 00007f26b97a2000 [ 2487.469338][ T31] R10: 00007f26b8bff008 R11: 0000000000000017 R12: 0000000000000017 [ 2487.477442][ T31] R13: 000000000000019c R14: ffffffff8b25bb62 R15: 000000000000030f [ 2487.485503][ T31] ? register_net_sysctl_sz+0x92/0x3e0 [ 2487.491024][ T31] ? is_seen+0x11/0x80 [ 2487.495218][ T31] [ 2487.498297][ T31] INFO: task syz.3.7210:8014 blocked for more than 143 seconds. [ 2487.506004][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 2487.515299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.523997][ T31] task:syz.3.7210 state:D stack:26488 pid:8014 tgid:8014 ppid:7297 task_flags:0x440040 flags:0x00004004 [ 2487.536090][ T31] Call Trace: [ 2487.539402][ T31] [ 2487.542351][ T31] __schedule+0x116f/0x5de0 [ 2487.547078][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.552009][ T31] ? find_held_lock+0x2b/0x80 [ 2487.556892][ T31] ? schedule+0x2d7/0x3a0 [ 2487.561262][ T31] schedule+0xe7/0x3a0 [ 2487.565418][ T31] io_schedule+0xbf/0x130 [ 2487.570179][ T31] bit_wait_io+0x15/0xe0 [ 2487.574478][ T31] __wait_on_bit+0x62/0x180 [ 2487.579122][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2487.584128][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2487.589644][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2487.595784][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2487.601306][ T31] do_get_write_access+0x93d/0x12a0 [ 2487.606624][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2487.612659][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2487.618855][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 2487.624475][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2487.630047][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2487.635541][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2487.641594][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.646487][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2487.652166][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2487.657468][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2487.663190][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2487.668912][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2487.674181][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2487.679689][ T31] ext4_dirty_inode+0xd9/0x130 [ 2487.684494][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.689466][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2487.694553][ T31] generic_update_time+0xcf/0xf0 [ 2487.699632][ T31] file_update_time+0x17d/0x1c0 [ 2487.704539][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 2487.709691][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2487.715254][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2487.720773][ T31] ? do_page_mkwrite+0x118/0x380 [ 2487.725835][ T31] ? do_page_mkwrite+0x126/0x380 [ 2487.730864][ T31] do_page_mkwrite+0x171/0x380 [ 2487.735753][ T31] do_pte_missing+0x29c/0x3fb0 [ 2487.740567][ T31] __handle_mm_fault+0x103d/0x2a40 [ 2487.745776][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2487.751279][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2487.756617][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2487.761898][ T31] handle_mm_fault+0x3fe/0xad0 [ 2487.766939][ T31] do_user_addr_fault+0x60c/0x1370 [ 2487.772109][ T31] exc_page_fault+0x5c/0xc0 [ 2487.777058][ T31] asm_exc_page_fault+0x26/0x30 [ 2487.781959][ T31] RIP: 0033:0x7fa6a0a6f282 [ 2487.786463][ T31] RSP: 002b:00007ffc5b04fb50 EFLAGS: 00010202 [ 2487.792572][ T31] RAX: 000000000000c008 RBX: 00007fa6a18e5720 RCX: 0000000000000000 [ 2487.800648][ T31] RDX: 0000001b33714000 RSI: 0000000000000008 RDI: 00007fa6a18e5720 [ 2487.808720][ T31] RBP: 000000000000063e R08: 00007fa6a01ff070 R09: 00007fa6a0da2000 [ 2487.816833][ T31] R10: 00007fa6a01ff008 R11: 0000000000000003 R12: ffffffff8b627f33 [ 2487.824971][ T31] R13: 00007fa6a0db6038 R14: 0000000000000036 R15: ffffffffffff4000 [ 2487.832999][ T31] ? mas_wr_store_entry+0x1023/0x2550 [ 2487.838533][ T31] [ 2487.841619][ T31] INFO: task syz.2.7212:8026 blocked for more than 144 seconds. [ 2487.849770][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 2487.859085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.867836][ T31] task:syz.2.7212 state:D stack:26488 pid:8026 tgid:8026 ppid:7579 task_flags:0x440040 flags:0x00000004 [ 2487.880214][ T31] Call Trace: [ 2487.883532][ T31] [ 2487.886547][ T31] __schedule+0x116f/0x5de0 [ 2487.891117][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.896092][ T31] ? find_held_lock+0x2b/0x80 [ 2487.900852][ T31] ? schedule+0x2d7/0x3a0 [ 2487.905278][ T31] schedule+0xe7/0x3a0 [ 2487.909391][ T31] io_schedule+0xbf/0x130 [ 2487.913736][ T31] bit_wait_io+0x15/0xe0 [ 2487.918115][ T31] __wait_on_bit+0x62/0x180 [ 2487.922664][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2487.927704][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2487.933211][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2487.939300][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2487.944918][ T31] do_get_write_access+0x93d/0x12a0 [ 2487.950173][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2487.956252][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2487.962381][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 2487.968077][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2487.973615][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2487.979101][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2487.985581][ T31] ? rcu_is_watching+0x12/0xc0 [ 2487.990398][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2487.996156][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2488.001402][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2488.007362][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2488.013081][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2488.018212][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2488.023682][ T31] ext4_dirty_inode+0xd9/0x130 [ 2488.028546][ T31] ? rcu_is_watching+0x12/0xc0 [ 2488.033347][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2488.038473][ T31] generic_update_time+0xcf/0xf0 [ 2488.043454][ T31] file_update_time+0x17d/0x1c0 [ 2488.048379][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 2488.053452][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2488.059018][ T31] do_page_mkwrite+0x171/0x380 [ 2488.063830][ T31] do_pte_missing+0x29c/0x3fb0 [ 2488.068690][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 2488.074024][ T31] __handle_mm_fault+0x103d/0x2a40 [ 2488.079474][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2488.085375][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2488.090639][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2488.095996][ T31] handle_mm_fault+0x3fe/0xad0 [ 2488.100813][ T31] do_user_addr_fault+0x60c/0x1370 [ 2488.106053][ T31] exc_page_fault+0x5c/0xc0 [ 2488.110617][ T31] asm_exc_page_fault+0x26/0x30 [ 2488.115585][ T31] RIP: 0033:0x7f213e06eada [ 2488.120052][ T31] RSP: 002b:00007fff6c854cd0 EFLAGS: 00010202 [ 2488.126211][ T31] RAX: 0000001b2c91e000 RBX: 00007f213eee5720 RCX: 0000001b2c91dff8 [ 2488.134223][ T31] RDX: 0000001b2c520220 RSI: 0000000000000008 RDI: 00007f213eee5720 [ 2488.142340][ T31] RBP: ffffffff82261f91 R08: 00007f213e3b6118 R09: 00007f213e3a2000 [ 2488.150408][ T31] R10: 00007f213d3fd008 R11: 0000000000000004 R12: 0000000000000004 [ 2488.158478][ T31] R13: 0000000000000063 R14: ffffffff82261d68 R15: 0000000000000078 [ 2488.167591][ T31] ? page_counter_charge+0x128/0x240 [ 2488.172950][ T31] ? page_counter_try_charge+0x101/0x3f0 [ 2488.184780][ T31] [ 2488.187956][ T31] INFO: task syz.5.7213:8029 blocked for more than 144 seconds. [ 2488.197520][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 [ 2488.207146][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2488.216248][ T31] task:syz.5.7213 state:D stack:27592 pid:8029 tgid:8029 ppid:2374 task_flags:0x440040 flags:0x00000004 [ 2488.228661][ T31] Call Trace: [ 2488.231985][ T31] [ 2488.235474][ T31] __schedule+0x116f/0x5de0 [ 2488.240074][ T31] ? __pfx___schedule+0x10/0x10 [ 2488.245672][ T31] ? find_held_lock+0x2b/0x80 [ 2488.250421][ T31] ? schedule+0x2d7/0x3a0 [ 2488.255397][ T31] schedule+0xe7/0x3a0 [ 2488.259526][ T31] io_schedule+0xbf/0x130 [ 2488.263905][ T31] bit_wait_io+0x15/0xe0 [ 2488.268832][ T31] __wait_on_bit+0x62/0x180 [ 2488.273396][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2488.278970][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2488.284426][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2488.292293][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2488.298357][ T31] do_get_write_access+0x93d/0x12a0 [ 2488.303640][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2488.310222][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2488.316736][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 2488.322372][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2488.328431][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2488.333880][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2488.341741][ T31] ? rcu_is_watching+0x12/0xc0 [ 2488.347250][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2488.352951][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2488.358716][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2488.364424][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2488.370638][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2488.376002][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2488.381443][ T31] ext4_dirty_inode+0xd9/0x130 [ 2488.386801][ T31] ? rcu_is_watching+0x12/0xc0 [ 2488.391979][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2488.397679][ T31] generic_update_time+0xcf/0xf0 [ 2488.402690][ T31] file_update_time+0x17d/0x1c0 [ 2488.408074][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 2488.413182][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2488.419247][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 2488.425067][ T31] ? pte_alloc_one+0x2b1/0x380 [ 2488.429901][ T31] do_page_mkwrite+0x171/0x380 [ 2488.435288][ T31] do_pte_missing+0x29c/0x3fb0 [ 2488.440105][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2488.445844][ T31] ? __pmd_alloc+0x3c2/0x870 [ 2488.450529][ T31] __handle_mm_fault+0x103d/0x2a40 [ 2488.456285][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2488.461797][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2488.467534][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2488.472833][ T31] handle_mm_fault+0x3fe/0xad0 [ 2488.478213][ T31] do_user_addr_fault+0x60c/0x1370 [ 2488.483397][ T31] exc_page_fault+0x5c/0xc0 [ 2488.488441][ T31] asm_exc_page_fault+0x26/0x30 [ 2488.493706][ T31] RIP: 0033:0x7f4792c6547b [ 2488.499972][ T31] RSP: 002b:00007ffc802c2770 EFLAGS: 00010246 [ 2488.506408][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2488.514426][ T31] RDX: 0000001b2f620000 RSI: 0000000000400000 RDI: 00007f4792e98d50 [ 2488.522860][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 2488.532249][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2488.542327][ T31] R13: 00000000000927c0 R14: 000000000023a8ef R15: 00007ffc802c2a20 [ 2488.550754][ T31] [ 2488.553886][ T31] [ 2488.553886][ T31] Showing all locks held in the system: [ 2488.562379][ T31] 1 lock held by khungtaskd/31: [ 2488.567653][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2488.578277][ T31] 3 locks held by syz-executor/5817: [ 2488.583613][ T31] #0: ffff888033703bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2488.596915][ T31] #1: ffff88814bd80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 2488.606972][ T31] #2: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.620490][ T31] 6 locks held by kworker/u8:19/21579: [ 2488.626374][ T31] #0: ffff8881412e6148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2488.642471][ T31] #1: ffffc90005497d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2488.658433][ T31] #2: ffff88814bd800e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 2488.669446][ T31] #3: ffff88814bd82b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 2488.681487][ T31] #4: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.691226][ T31] #5: ffff88807c6a65d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 2488.701430][ T31] 2 locks held by getty/6201: [ 2488.706211][ T31] #0: ffff88803156c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2488.716099][ T31] #1: ffffc900040f52f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2488.726299][ T31] 3 locks held by syz.4.7209/8011: [ 2488.731435][ T31] #0: ffff8880284be088 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2488.740885][ T31] #1: ffff88814bd80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 2488.750542][ T31] #2: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.760315][ T31] 3 locks held by syz.3.7210/8014: [ 2488.765500][ T31] #0: ffff888031ec66c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2488.774988][ T31] #1: ffff88814bd80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 2488.784579][ T31] #2: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.794314][ T31] 3 locks held by syz.2.7212/8026: [ 2488.799951][ T31] #0: ffff888062bf1448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2488.809602][ T31] #1: ffff88814bd80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 2488.819296][ T31] #2: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.829022][ T31] 3 locks held by syz.5.7213/8029: [ 2488.834143][ T31] #0: ffff888060346bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2488.843576][ T31] #1: ffff88814bd80518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 2488.853219][ T31] #2: ffff88814bd84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2488.862977][ T31] [ 2488.865381][ T31] ============================================= [ 2488.865381][ T31] [ 2488.873823][ T31] NMI backtrace for cpu 0 [ 2488.873844][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2488.873879][ T31] Tainted: [U]=USER [ 2488.873886][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2488.873901][ T31] Call Trace: [ 2488.873909][ T31] [ 2488.873919][ T31] dump_stack_lvl+0x116/0x1f0 [ 2488.873952][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2488.873990][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2488.874026][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2488.874070][ T31] watchdog+0xf70/0x12c0 [ 2488.874106][ T31] ? __pfx_watchdog+0x10/0x10 [ 2488.874134][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2488.874163][ T31] ? __kthread_parkme+0x19e/0x250 [ 2488.874192][ T31] ? __pfx_watchdog+0x10/0x10 [ 2488.874222][ T31] kthread+0x3c2/0x780 [ 2488.874254][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874285][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874315][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874346][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874376][ T31] ? rcu_is_watching+0x12/0xc0 [ 2488.874398][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874430][ T31] ret_from_fork+0x45/0x80 [ 2488.874465][ T31] ? __pfx_kthread+0x10/0x10 [ 2488.874497][ T31] ret_from_fork_asm+0x1a/0x30 [ 2488.874543][ T31] [ 2488.874551][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2489.013091][ C1] NMI backtrace for cpu 1 [ 2489.013114][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2489.013152][ C1] Tainted: [U]=USER [ 2489.013161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2489.013177][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2489.013211][ C1] Code: 86 65 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 29 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2489.013237][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 2489.013258][ C1] RAX: 0000000000e49a75 RBX: 0000000000000001 RCX: ffffffff8b68c3e9 [ 2489.013275][ C1] RDX: 0000000000000000 RSI: ffffffff8dbd9985 RDI: ffffffff8bf467a0 [ 2489.013292][ C1] RBP: ffffed1003b59b40 R08: 0000000000000001 R09: ffffed10170a65bd [ 2489.013309][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 2489.013324][ C1] R13: ffff88801dacda00 R14: ffffffff90850d10 R15: 0000000000000000 [ 2489.013341][ C1] FS: 0000000000000000(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000 [ 2489.013366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2489.013383][ C1] CR2: 00007ffe43b36eac CR3: 000000000e180000 CR4: 00000000003526f0 [ 2489.013399][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2489.013415][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2489.013430][ C1] Call Trace: [ 2489.013438][ C1] [ 2489.013447][ C1] default_idle+0x13/0x20 [ 2489.013480][ C1] default_idle_call+0x6d/0xb0 [ 2489.013513][ C1] do_idle+0x391/0x510 [ 2489.013541][ C1] ? __pfx_do_idle+0x10/0x10 [ 2489.013565][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 2489.013598][ C1] cpu_startup_entry+0x4f/0x60 [ 2489.013622][ C1] start_secondary+0x21d/0x2b0 [ 2489.013659][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2489.013700][ C1] common_startup_64+0x13e/0x148 [ 2489.013737][ C1] [ 2489.014134][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2489.214602][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 2489.228017][ T31] Tainted: [U]=USER [ 2489.231829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2489.241891][ T31] Call Trace: [ 2489.245175][ T31] [ 2489.248114][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2489.252726][ T31] panic+0x71c/0x800 [ 2489.256651][ T31] ? __pfx_panic+0x10/0x10 [ 2489.261088][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2489.266490][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2489.272496][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2489.277897][ T31] ? watchdog+0xdda/0x12c0 [ 2489.282332][ T31] ? watchdog+0xdcd/0x12c0 [ 2489.286774][ T31] watchdog+0xdeb/0x12c0 [ 2489.291047][ T31] ? __pfx_watchdog+0x10/0x10 [ 2489.295741][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2489.300966][ T31] ? __kthread_parkme+0x19e/0x250 [ 2489.306039][ T31] ? __pfx_watchdog+0x10/0x10 [ 2489.310756][ T31] kthread+0x3c2/0x780 [ 2489.314886][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.319503][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.324112][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.328721][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.333334][ T31] ? rcu_is_watching+0x12/0xc0 [ 2489.338113][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.342742][ T31] ret_from_fork+0x45/0x80 [ 2489.347201][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.351837][ T31] ret_from_fork_asm+0x1a/0x30 [ 2489.356642][ T31] [ 2489.360090][ T31] Kernel Offset: disabled [ 2489.364428][ T31] Rebooting in 86400 seconds..