last executing test programs: 10.001040463s ago: executing program 3 (id=231): openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 9.422069515s ago: executing program 0 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x60) shmdt$auto(0x0) r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x646b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x80000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22241, 0x155) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xfb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) socket(0xa, 0x5, 0x0) ioctl$auto(r1, 0xfffffe01, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) process_madvise$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x1, 0x4, 0xf11) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x20000000) 9.308819279s ago: executing program 2 (id=233): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) read$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000200)=""/34, 0x22) pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff050000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000380)='./file0/file0\x00', 0x552) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 9.286128706s ago: executing program 3 (id=235): mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x2, 0x8b) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyx3\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1000000000001, 0x948e, 0x3, 0x3ca6, 0x6, 0x6, 0x62, 0x9, 0x100000000007, 0x6d3f, 0x40009, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) msync$auto(0x0, 0xe0, 0x6) socket(0x15, 0x5, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x2, &(0x7f0000000080)) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x7956, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) capset$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00'}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091ce, 0x4, 0x0, 0x6, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x100000000008, 0x8000) 8.391705426s ago: executing program 1 (id=237): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x11, &(0x7f00000001c0)='\x15O\xd2\xcd\xf3\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x400) 8.100401364s ago: executing program 1 (id=238): statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0xb622, [0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x2, 0x1000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0xb, 0x9) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0c, &(0x7f00000001c0)) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x4}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) r2 = accept$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000140)=0x8) writev$auto(r2, &(0x7f0000000480)={&(0x7f00000004c0)="397892ed7d99d028e69766a3a350e1249f6a3e84e091125248eb4ad0d2d6e5ebe3dd119244426906a850f2a325b551e15a9df8a4158c5855b24a1ca06446aff7524aaff799876a8336c7d1d1755c3b28a0a5900f1cbac978701316a2b60abaa447623364ae2bb38c3ac08fcc9d5c62f697a191c8683c97f38e13ca87f77f709363f3855f3be03d0f2441565a4a81173c5b6a826b2213a8b665427c4cc9358993ee2478606c33a6f05c7015887e0d3d2ad1a281f623a016219ed4142c0ac01019f09de653eb47a3d2df7a8e98027ea14ddd1746", 0x35}, 0x9fe) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) 7.696372086s ago: executing program 3 (id=239): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socket(0x11, 0x2, 0x40000e) capset$auto(0x0, &(0x7f0000000180)={0xc2f57677, 0x40, 0x9}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100) alarm$auto(0x2) mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$auto(r3, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r3, &(0x7f0000000000)=""/156, 0x9c) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffff7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b47, 0x1) unshare$auto(0x40000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r6) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="159e20b9d8bf8043d96c4ad60398a1827811df80", @ANYRES16=r2, @ANYRES8, @ANYRES32=r7, @ANYBLOB], 0x1178}}, 0x80) 7.001742367s ago: executing program 0 (id=240): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4604, 0x0) 6.89058514s ago: executing program 2 (id=241): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket(0x22, 0x2, 0xfffffffc) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, 0x0, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) mq_timedsend$auto(r2, 0x0, 0x2000, 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000100)={{0x521, 0x9, 0x7, 0x9, 0xffffffff}, 0x6, 0x3, "c5a22f1570cdb0fe850e4cfaaf82a9c429d59c884998450cc5a6b0e78c6fd6e0"}) msync$auto(0x1ffff002, 0x180000000000000, 0x0) 6.722155221s ago: executing program 0 (id=242): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xe8, 0x0, 0x603, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_RSS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x4}, @ETHTOOL_A_RSS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x8}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xc}, @ETHTOOL_A_RSS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xf}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x28811) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) write$auto(r5, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10000, 0xf4, 0xa, 0xeb1, 0x401, 0x5) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28000) 5.13355816s ago: executing program 1 (id=243): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="1f91f2c388274610e18d5fc5e5bfd9800e9b50", 0x13) 4.557325909s ago: executing program 0 (id=244): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto_SO_OOBINLINE(r1, 0x3, 0xa, &(0x7f0000000140)='&\x00', 0x1d6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x3, 0xb8, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/deo1\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) socket(0x25, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mlockall$auto(0x5) rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x40c0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) mmap$auto(0xfffffffffffffffc, 0x6, 0x100, 0x17, 0x2, 0x7fff) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/net/tun\x00', 0x4128) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 4.556702762s ago: executing program 1 (id=245): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) ioctl$auto_BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000140)) 4.539754198s ago: executing program 3 (id=246): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) 4.32692297s ago: executing program 1 (id=247): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) read$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000200)=""/34, 0x22) pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff050000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000380)='./file0/file0\x00', 0x552) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, 0x0, &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 3.780559836s ago: executing program 3 (id=248): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fanotify_init$auto(0x6a1, 0x2000000000002) readv$auto(0x0, 0x0, 0x3) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x83, @broadcast}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x10, 0x2, 0x0) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x6, 0x40a7a9, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2beedfebe6, 0x0) read$auto_null_fops_mem(r1, &(0x7f0000000100)=""/98, 0x62) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) mmap$auto(0x0, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x810004, 0x2, 0x8000000008011, 0x3, 0x8000) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) 2.267698881s ago: executing program 2 (id=249): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/tunl0/queues/tx-0/traffic_class\x00', 0x2600, 0x0) close_range$auto(0x2, 0x8, 0x0) fgetxattr$auto(r0, &(0x7f0000000100)='\'\x00', 0x0, 0x72) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x33, 0x0, 0x2) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCEXCL2(r3, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000480)='/dev/audio1\x00\xc2F\x00\xb1\xe5\xf7\xfb\xb1%\v$\x03\x13\xc9>\xeb{\xf2\xf37\xa6\x8b\x9a\xfc\x82\x9e\xe5Ox\xe5\xfc\x13\xf2Le\v\xc2\xbf\xc5/>*@\xe1\xdd\vs\x90\x05\xa88\x95\xe4h\xd6R\x18\xbf\x1bH\xc3[\tm\xd9=\xd1\xd0\xa2\x11\xd9\x93\xc3\xb9|P\xd2X\x00\"\nH\xa8_Y\xfdAv\xd8x\xd1dL\x03\r3\x86\x9a\xe8\x8f\xf4V\xb8U\xb0]\x85\xec\x93\xb8\x8b\xe5\x00\xe5H\r\x0f', 0x20100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) rseq$auto(0x0, 0x8000, 0x0, 0x8) madvise$auto(0x0, 0x454, 0x9) unshare$auto(0x8000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0082dfbdb9639d2d952464f00b1794faa703", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc4c1) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="11000000126584", 0x7) socket(0x6, 0x5, 0x8bb2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = socket(0xa, 0x3, 0x2c) setsockopt$auto(r6, 0x1, 0x44, &(0x7f0000000180)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\xb9E\x81\xb6F\x96\xa6\xba\xf4\x98;n\xb2nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x00\x00\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81', 0xa95e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1.833196776s ago: executing program 0 (id=250): userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.656652185s ago: executing program 1 (id=251): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0xa, 0x0, 0x4, 0x401}, 0xed7138c}, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17}, 0x9, 0x81) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) r1 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r1, 0x10f, 0x81, 0x0, 0x0) socket(0x21, 0x80a, 0x727eb3eb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 755.837979ms ago: executing program 0 (id=252): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x5408, r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) mbind$auto(0x7fffffff, 0x2091d2, 0xffffffffffff0001, 0x0, 0x52c, 0x20005) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r5, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) pread64$auto(r3, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) 751.654869ms ago: executing program 2 (id=253): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x8000040006) ptrace$auto(0xd, r0, 0xf, 0x8000000000000000) 278.201067ms ago: executing program 3 (id=254): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xe8, 0x0, 0x603, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_RSS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x4}, @ETHTOOL_A_RSS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x8}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xc}, @ETHTOOL_A_RSS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xf}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x28811) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) write$auto(r5, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10000, 0xf4, 0xa, 0xeb1, 0x401, 0x5) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28000) 272.25158ms ago: executing program 2 (id=255): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 0s ago: executing program 2 (id=256): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/queue/scheduler\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) kernel console output (not intermixed with test programs): 1][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.485844][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495700][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.509702][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.602965][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.626097][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.645914][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.646321][ T5838] Bluetooth: hci3: command tx timeout [ 109.653761][ T55] Bluetooth: hci1: command tx timeout [ 109.705377][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.718729][ T55] Bluetooth: hci0: command tx timeout [ 109.719516][ T5838] Bluetooth: hci2: command tx timeout [ 109.729822][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.739317][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.748087][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.788244][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.830591][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.842336][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.861185][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.862719][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.880257][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.889346][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.992503][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.005251][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.189750][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.197638][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.254358][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.288773][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.461060][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.488875][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.497431][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.499470][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.555253][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.689067][ T30] audit: type=1800 audit(1748268657.384:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 110.991214][ T5907] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 111.132995][ T5907] HfR: entered promiscuous mode [ 111.162892][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 111.174035][ T5907] openvswitch: HfR: Dropping previously announced user features [ 111.203925][ T5907] device-mapper: ioctl: Unable to rename non-existent device,  to [ 111.720108][ T5838] Bluetooth: hci3: command tx timeout [ 111.720447][ T55] Bluetooth: hci1: command tx timeout [ 111.800166][ T55] Bluetooth: hci0: command tx timeout [ 111.805667][ T55] Bluetooth: hci2: command tx timeout [ 111.954693][ T5918] openvswitch: HfR: Dropping previously announced user features [ 112.006831][ T5918] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 112.993775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.003715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 113.052259][ T30] audit: type=1800 audit(1748268659.764:3): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 113.104672][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 113.338275][ T5936] bond0: (slave bond_slave_0): Releasing backup interface [ 113.534496][ T5936] Zero length message leads to an empty skb [ 114.308319][ T30] audit: type=1800 audit(1748268660.994:4): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14" name="members" dev="configfs" ino=7228 res=0 errno=0 [ 114.361355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.519552][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'. [ 114.629804][ T5943] netlink: 342 bytes leftover after parsing attributes in process `syz.0.13'. [ 115.084737][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.116503][ T5948] bond0 (unregistering): Released all slaves [ 115.499227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.669900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.748890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.798858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.188977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.259769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.279874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 116.754637][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 116.768088][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.010409][ T5975] bridge_slave_1 (unregistering): left allmulticast mode [ 117.017616][ T5975] bridge_slave_1 (unregistering): left promiscuous mode [ 117.039373][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.660292][ T5986] random: crng reseeded on system resumption [ 118.175289][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23'. [ 118.366850][ T5995] mmap: syz.3.23 (5995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.423901][ T5998] FAULT_INJECTION: forcing a failure. [ 118.423901][ T5998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 118.496184][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.1.24 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 118.496227][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.496252][ T5998] Call Trace: [ 118.496262][ T5998] [ 118.496277][ T5998] dump_stack_lvl+0x16c/0x1f0 [ 118.496335][ T5998] should_fail_ex+0x512/0x640 [ 118.496386][ T5998] should_fail_alloc_page+0xe7/0x130 [ 118.496436][ T5998] prepare_alloc_pages+0x3c2/0x610 [ 118.496490][ T5998] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 118.496531][ T5998] ? __lock_acquire+0x5ca/0x1ba0 [ 118.496581][ T5998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.496623][ T5998] ? find_held_lock+0x2b/0x80 [ 118.496655][ T5998] ? bpf_ksym_find+0x124/0x1c0 [ 118.496707][ T5998] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.496742][ T5998] ? is_bpf_text_address+0x94/0x1a0 [ 118.496780][ T5998] ? kernel_text_address+0x8d/0x100 [ 118.496806][ T5998] ? is_bpf_text_address+0x8a/0x1a0 [ 118.496842][ T5998] ? __kernel_text_address+0xd/0x40 [ 118.496868][ T5998] ? unwind_get_return_address+0x59/0xa0 [ 118.496903][ T5998] ? arch_stack_walk+0xa6/0x100 [ 118.496942][ T5998] ? wiphy_new_nm+0x701/0x2160 [ 118.496970][ T5998] __alloc_pages_noprof+0xb/0x1b0 [ 118.497005][ T5998] ___kmalloc_large_node+0x82/0x1e0 [ 118.497056][ T5998] __kmalloc_large_node_noprof+0x1c/0x70 [ 118.497105][ T5998] __kmalloc_noprof.cold+0xc/0x61 [ 118.497152][ T5998] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 118.497187][ T5998] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 118.497221][ T5998] wiphy_new_nm+0x701/0x2160 [ 118.497253][ T5998] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 118.497287][ T5998] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 118.497321][ T5998] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 118.497353][ T5998] ? __local_bh_enable_ip+0xa4/0x120 [ 118.497395][ T5998] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 118.497468][ T5998] ? __asan_memset+0x23/0x50 [ 118.497498][ T5998] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.497558][ T5998] hwsim_new_radio_nl+0xb51/0x12c0 [ 118.497609][ T5998] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.497666][ T5998] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 118.497717][ T5998] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 118.497776][ T5998] genl_family_rcv_msg_doit+0x206/0x2f0 [ 118.497827][ T5998] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.497874][ T5998] ? trace_cap_capable+0x18d/0x200 [ 118.497915][ T5998] ? bpf_lsm_capable+0x9/0x10 [ 118.497945][ T5998] ? security_capable+0x7e/0x260 [ 118.497977][ T5998] ? ns_capable+0xd7/0x110 [ 118.498011][ T5998] genl_rcv_msg+0x55c/0x800 [ 118.498062][ T5998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.498107][ T5998] ? __pfx___dev_queue_xmit+0x10/0x10 [ 118.498139][ T5998] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.498190][ T5998] ? __lock_acquire+0xaa4/0x1ba0 [ 118.498239][ T5998] netlink_rcv_skb+0x16a/0x440 [ 118.498280][ T5998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.498328][ T5998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.498391][ T5998] ? __pfx_down_read+0x10/0x10 [ 118.498422][ T5998] ? netlink_deliver_tap+0x1ae/0xd30 [ 118.498478][ T5998] genl_rcv+0x28/0x40 [ 118.498521][ T5998] netlink_unicast+0x53d/0x7f0 [ 118.498569][ T5998] ? __pfx_netlink_unicast+0x10/0x10 [ 118.498612][ T5998] ? __lock_acquire+0xaa4/0x1ba0 [ 118.498668][ T5998] netlink_sendmsg+0x8d1/0xdd0 [ 118.498720][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.498782][ T5998] ____sys_sendmsg+0xa95/0xc70 [ 118.498836][ T5998] ? copy_msghdr_from_user+0x10a/0x160 [ 118.498873][ T5998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.498938][ T5998] ___sys_sendmsg+0x134/0x1d0 [ 118.498977][ T5998] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.499063][ T5998] __sys_sendmsg+0x16d/0x220 [ 118.499102][ T5998] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.499139][ T5998] ? __x64_sys_futex+0x1e0/0x4c0 [ 118.499184][ T5998] ? rcu_is_watching+0x12/0xc0 [ 118.499224][ T5998] do_syscall_64+0xcd/0x230 [ 118.499274][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.499305][ T5998] RIP: 0033:0x7f00a7b8e969 [ 118.499329][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.499367][ T5998] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.499395][ T5998] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 118.499415][ T5998] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 118.499440][ T5998] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 118.499457][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.499475][ T5998] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 118.499516][ T5998] [ 119.256326][ T6006] process 'syz.0.22' launched './file0' with NULL argv: empty string added [ 119.903172][ T6011] ima: policy update failed [ 119.912325][ T6011] netlink: 25 bytes leftover after parsing attributes in process `syz.3.26'. [ 119.923473][ T30] audit: type=1802 audit(1748268666.614:5): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.26" res=0 errno=0 [ 120.612071][ T6002] random: crng reseeded on system resumption [ 122.627760][ T6033] netlink: 330 bytes leftover after parsing attributes in process `syz.1.30'. [ 122.684258][ T6033] FAULT_INJECTION: forcing a failure. [ 122.684258][ T6033] name failslab, interval 1, probability 0, space 0, times 1 [ 122.697766][ T6033] CPU: 1 UID: 0 PID: 6033 Comm: syz.1.30 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 122.697803][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.697822][ T6033] Call Trace: [ 122.697833][ T6033] [ 122.697845][ T6033] dump_stack_lvl+0x16c/0x1f0 [ 122.697901][ T6033] should_fail_ex+0x512/0x640 [ 122.697958][ T6033] ? nsim_fib_event_nb+0x45e/0x10d0 [ 122.697990][ T6033] should_failslab+0xc2/0x120 [ 122.698031][ T6033] __kmalloc_noprof+0xd2/0x510 [ 122.698079][ T6033] nsim_fib_event_nb+0x45e/0x10d0 [ 122.698126][ T6033] ? lock_acquire+0x179/0x350 [ 122.698177][ T6033] notifier_call_chain+0xbc/0x410 [ 122.698216][ T6033] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 122.698260][ T6033] atomic_notifier_call_chain+0x71/0x1c0 [ 122.698307][ T6033] call_fib_notifiers+0x33/0x70 [ 122.698350][ T6033] fib6_del+0xeb8/0x1770 [ 122.698405][ T6033] ? __pfx_fib6_del+0x10/0x10 [ 122.698450][ T6033] ? fib6_ifdown+0xcd/0x8f0 [ 122.698500][ T6033] fib6_clean_node+0x424/0x5b0 [ 122.698543][ T6033] ? __pfx_fib6_clean_node+0x10/0x10 [ 122.698600][ T6033] fib6_walk_continue+0x452/0x8d0 [ 122.698642][ T6033] fib6_walk+0x182/0x370 [ 122.698675][ T6033] ? __pfx_fib6_ifdown+0x10/0x10 [ 122.698707][ T6033] fib6_clean_tree+0xd4/0x110 [ 122.698741][ T6033] ? __pfx_fib6_clean_tree+0x10/0x10 [ 122.698774][ T6033] ? update_curr+0x74/0x800 [ 122.698832][ T6033] ? __pfx_fib6_clean_node+0x10/0x10 [ 122.698874][ T6033] ? __pfx_fib6_ifdown+0x10/0x10 [ 122.698924][ T6033] ? __pfx_fib6_ifdown+0x10/0x10 [ 122.698963][ T6033] __fib6_clean_all+0x107/0x2d0 [ 122.699010][ T6033] rt6_disable_ip+0x2ec/0x990 [ 122.699060][ T6033] ? __mutex_trylock_common+0xe9/0x250 [ 122.699118][ T6033] ? __pfx___mutex_trylock_common+0x10/0x10 [ 122.699170][ T6033] ? __pfx_rt6_disable_ip+0x10/0x10 [ 122.699225][ T6033] ? rcu_is_watching+0x12/0xc0 [ 122.699265][ T6033] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 122.699314][ T6033] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 122.699373][ T6033] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 122.699435][ T6033] addrconf_notify+0x220/0x19e0 [ 122.699482][ T6033] ? ip6mr_device_event+0x1bc/0x230 [ 122.699539][ T6033] notifier_call_chain+0xbc/0x410 [ 122.699576][ T6033] ? __pfx_addrconf_notify+0x10/0x10 [ 122.699632][ T6033] call_netdevice_notifiers_info+0xbe/0x140 [ 122.699689][ T6033] __dev_notify_flags+0x1f7/0x2e0 [ 122.699730][ T6033] ? __pfx___dev_notify_flags+0x10/0x10 [ 122.699776][ T6033] ? __pfx___dev_change_flags+0x10/0x10 [ 122.699832][ T6033] netif_change_flags+0x108/0x160 [ 122.699878][ T6033] do_setlink.constprop.0+0xddf/0x44b0 [ 122.699926][ T6033] ? __lock_acquire+0xaa4/0x1ba0 [ 122.699973][ T6033] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 122.700017][ T6033] ? __pfx___schedule+0x10/0x10 [ 122.700069][ T6033] ? do_raw_spin_lock+0x12c/0x2b0 [ 122.700138][ T6033] ? mark_held_locks+0x49/0x80 [ 122.700180][ T6033] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.700226][ T6033] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.700279][ T6033] ? __mutex_lock+0x1ca/0xb90 [ 122.700327][ T6033] ? __pfx_aa_get_newest_label+0x10/0x10 [ 122.700439][ T6033] ? rcu_watching_snap_stopped_since+0x61/0x110 [ 122.700478][ T6033] ? rtnl_setlink+0x2b0/0x770 [ 122.700523][ T6033] ? __pfx___mutex_lock+0x10/0x10 [ 122.700607][ T6033] rtnl_setlink+0x3cb/0x770 [ 122.700658][ T6033] ? __pfx_rtnl_setlink+0x10/0x10 [ 122.700697][ T6033] ? __kasan_slab_free+0x51/0x70 [ 122.700738][ T6033] ? dev_hard_start_xmit+0x93/0x740 [ 122.700769][ T6033] ? __dev_queue_xmit+0x7eb/0x43e0 [ 122.700798][ T6033] ? netlink_deliver_tap+0xa87/0xd30 [ 122.700836][ T6033] ? netlink_unicast+0x5df/0x7f0 [ 122.700958][ T6033] ? __lock_acquire+0x5ca/0x1ba0 [ 122.701005][ T6033] ? rcu_is_watching+0x12/0xc0 [ 122.701036][ T6033] ? trace_cap_capable+0x18d/0x200 [ 122.701085][ T6033] ? find_held_lock+0x2b/0x80 [ 122.701128][ T6033] ? __pfx_rtnl_setlink+0x10/0x10 [ 122.701170][ T6033] ? __pfx_rtnl_setlink+0x10/0x10 [ 122.701212][ T6033] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.701258][ T6033] ? __pfx_rtnl_setlink+0x10/0x10 [ 122.701304][ T6033] rtnetlink_rcv_msg+0x95b/0xe90 [ 122.701354][ T6033] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.701424][ T6033] netlink_rcv_skb+0x16a/0x440 [ 122.701471][ T6033] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.701519][ T6033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.701593][ T6033] ? netlink_deliver_tap+0x1ae/0xd30 [ 122.701647][ T6033] netlink_unicast+0x53d/0x7f0 [ 122.701700][ T6033] ? __pfx_netlink_unicast+0x10/0x10 [ 122.701743][ T6033] ? __lock_acquire+0xaa4/0x1ba0 [ 122.701798][ T6033] netlink_sendmsg+0x8d1/0xdd0 [ 122.701852][ T6033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.701917][ T6033] ____sys_sendmsg+0xa95/0xc70 [ 122.701972][ T6033] ? copy_msghdr_from_user+0x10a/0x160 [ 122.702013][ T6033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.702064][ T6033] ? __pfx___schedule+0x10/0x10 [ 122.702123][ T6033] ? kfree+0x252/0x4d0 [ 122.702165][ T6033] ___sys_sendmsg+0x134/0x1d0 [ 122.702211][ T6033] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.702300][ T6033] ? __pfx___might_resched+0x10/0x10 [ 122.702352][ T6033] __sys_sendmmsg+0x200/0x420 [ 122.702402][ T6033] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.702458][ T6033] ? __pfx_do_futex+0x10/0x10 [ 122.702521][ T6033] ? xfd_validate_state+0x5d/0x180 [ 122.702557][ T6033] ? rcu_is_watching+0x12/0xc0 [ 122.702596][ T6033] __x64_sys_sendmmsg+0x9c/0x100 [ 122.702639][ T6033] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.702682][ T6033] do_syscall_64+0xcd/0x230 [ 122.702732][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.702763][ T6033] RIP: 0033:0x7f00a7b8e969 [ 122.702788][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.702818][ T6033] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.702846][ T6033] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 122.702866][ T6033] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 122.702884][ T6033] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 122.702903][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.702920][ T6033] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 122.702962][ T6033] [ 122.734745][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 123.293875][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.992169][ T6033] syz.1.30 (6033) used greatest stack depth: 21384 bytes left [ 124.065555][ T6049] Setting dangerous option i915.mitigations - tainting kernel [ 124.637126][ T6052] loop6: detected capacity change from 0 to 8 [ 124.765902][ T6052] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 124.838647][ T6052] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.422155][ T6062] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81630d69 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 125.437772][ T6062] Call Trace: [ 125.441967][ T6062] [ 125.445134][ T6062] mce_cpu_restart+0x98/0xb0 [ 125.449876][ T6062] ? __pfx_mce_cpu_restart+0x10/0x10 [ 125.455240][ T6062] smp_call_function_many_cond+0xd7d/0x1290 [ 125.461223][ T6062] ? __pfx_mce_cpu_restart+0x10/0x10 [ 125.466595][ T6062] ? __pfx_mce_cpu_restart+0x10/0x10 [ 125.472047][ T6062] on_each_cpu_cond_mask+0x40/0x90 [ 125.477289][ T6062] set_bank+0x240/0x3a0 [ 125.481521][ T6062] ? __pfx_set_bank+0x10/0x10 [ 125.486360][ T6062] ? find_held_lock+0x2b/0x80 [ 125.491121][ T6062] ? __pfx_set_bank+0x10/0x10 [ 125.495864][ T6062] dev_attr_store+0x55/0x80 [ 125.500459][ T6062] ? __pfx_dev_attr_store+0x10/0x10 [ 125.506361][ T6062] sysfs_kf_write+0xf2/0x150 [ 125.511040][ T6062] kernfs_fop_write_iter+0x354/0x510 [ 125.516404][ T6062] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.521697][ T6062] vfs_write+0x5bd/0x1180 [ 125.526095][ T6062] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.531991][ T6062] ? __pfx___mutex_lock+0x10/0x10 [ 125.537105][ T6062] ? __pfx_vfs_write+0x10/0x10 [ 125.541979][ T6062] ksys_write+0x12a/0x240 [ 125.546552][ T6062] ? __pfx_ksys_write+0x10/0x10 [ 125.551507][ T6062] ? rcu_is_watching+0x12/0xc0 [ 125.556348][ T6062] do_syscall_64+0xcd/0x230 [ 125.560940][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.566925][ T6062] RIP: 0033:0x7f00a7b8e969 [ 125.571397][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.591347][ T6062] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.600187][ T6062] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 125.608227][ T6062] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000005 [ 125.616253][ T6062] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 125.624274][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.632314][ T6062] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 125.640359][ T6062] [ 125.643548][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.689470][ T6072] MTRR 1 not used [ 127.061794][ T6083] netlink: 330 bytes leftover after parsing attributes in process `syz.0.40'. [ 127.137672][ T6083] : renamed from hsr0 (while UP) [ 127.290721][ T30] audit: type=1800 audit(6043235970.005:6): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.41" name="dummy_udc" dev="gadgetfs" ino=6622 res=0 errno=0 [ 128.013162][ T6096] mkiss: ax0: crc mode is auto. [ 128.789565][ T30] audit: type=1806 audit(6043235971.505:7): xattr="" res=-22 [ 131.175493][ T6124] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 131.644764][ T6136] FAULT_INJECTION: forcing a failure. [ 131.644764][ T6136] name failslab, interval 1, probability 0, space 0, times 0 [ 131.657508][ T6136] CPU: 1 UID: 0 PID: 6136 Comm: syz.1.52 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 131.657544][ T6136] Tainted: [U]=USER [ 131.657552][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.657567][ T6136] Call Trace: [ 131.657576][ T6136] [ 131.657585][ T6136] dump_stack_lvl+0x16c/0x1f0 [ 131.657634][ T6136] should_fail_ex+0x512/0x640 [ 131.657671][ T6136] ? __kmalloc_noprof+0xbf/0x510 [ 131.657701][ T6136] ? create_ruleset+0x21/0x140 [ 131.657723][ T6136] should_failslab+0xc2/0x120 [ 131.657754][ T6136] __kmalloc_noprof+0xd2/0x510 [ 131.657788][ T6136] create_ruleset+0x21/0x140 [ 131.657812][ T6136] landlock_merge_ruleset+0xbb/0x870 [ 131.657846][ T6136] ? prepare_creds+0x583/0x7d0 [ 131.657886][ T6136] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 131.657916][ T6136] do_syscall_64+0xcd/0x230 [ 131.657957][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.657981][ T6136] RIP: 0033:0x7f00a7b8e969 [ 131.658000][ T6136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.658022][ T6136] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 131.658044][ T6136] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 131.658063][ T6136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 131.658077][ T6136] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 131.658092][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.658105][ T6136] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 131.658134][ T6136] [ 136.344296][ T6160] kafs: addr_prefs: Invalid Command [ 137.072722][ T6183] mkiss: ax0: crc mode is auto.                                                                                                                                                                 syzkaller syzkaller login: [ 143.940688][ T6273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fe04000 pfn:0x7fe00 [ 144.012883][ T6273] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.101140][ T6273] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 144.119040][ T6273] page_type: f5(slab) [ 144.125764][ T6273] raw: 00fff00000000240 ffff88801b442000 ffffea0000d84a10 ffffea0000d9cc10 [ 144.171979][ T6278] could not allocate digest TFM handle binfmt_misc [ 144.240097][ T6273] raw: ffff88807fe04000 0000000000080001 00000000f5000000 0000000000000000 [ 144.293579][ T6273] head: 00fff00000000240 ffff88801b442000 ffffea0000d84a10 ffffea0000d9cc10 [ 144.322004][ T6273] head: ffff88807fe04000 0000000000080001 00000000f5000000 0000000000000000 [ 144.342132][ T6273] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 144.408836][ T6273] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 144.524254][ T6273] page dumped because: unmovable page [ 144.553297][ T6273] page_owner tracks the page as allocated [ 144.563038][ T6273] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 [ 144.588682][ T6273] post_alloc_hook+0x181/0x1b0 [ 144.605626][ T6273] get_page_from_freelist+0x135c/0x3920 [ 144.628796][ T6273] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 144.662847][ T6273] alloc_pages_mpol+0x1fb/0x550 [ 144.698213][ T6273] new_slab+0x244/0x340 [ 144.753550][ T6273] ___slab_alloc+0xd9c/0x1940 [ 144.758296][ T6273] __slab_alloc.constprop.0+0x56/0xb0 [ 144.783180][ T6273] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 144.809330][ T6273] kmalloc_reserve+0xef/0x2c0 [ 144.831670][ T6273] __alloc_skb+0x166/0x380 [ 144.895987][ T6273] inet6_ifinfo_notify+0x77/0x150 [ 144.918836][ T6273] addrconf_notify+0x81a/0x19e0 [ 144.946139][ T6273] notifier_call_chain+0xbc/0x410 [ 144.961887][ T6273] call_netdevice_notifiers_info+0xbe/0x140 [ 145.046982][ T6273] __dev_notify_flags+0x12c/0x2e0 [ 145.068709][ T6273] netif_change_flags+0x108/0x160 [ 145.073809][ T6273] page last free pid 5829 tgid 5829 stack trace: [ 145.115354][ T6273] __free_frozen_pages+0x69d/0xff0 [ 145.185942][ T6273] __put_partials+0x16d/0x1c0 [ 145.211596][ T6273] qlist_free_all+0x4e/0x120 [ 145.216308][ T6273] kasan_quarantine_reduce+0x195/0x1e0 [ 145.288558][ T6273] __kasan_slab_alloc+0x69/0x90 [ 145.294396][ T6273] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 145.312167][ T6273] __alloc_skb+0x2b2/0x380 [ 145.322321][ T6273] netlink_alloc_large_skb+0x69/0x130 [ 145.338610][ T6273] netlink_sendmsg+0x6a1/0xdd0 [ 145.358776][ T6273] __sys_sendto+0x498/0x510 [ 145.378664][ T6273] __x64_sys_sendto+0xe0/0x1c0 [ 145.395577][ T6273] do_syscall_64+0xcd/0x230 [ 145.404475][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f                             syzkaller syzkaller login: [ 153.747128][ T6368] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe10 [ 153.808708][ T6368] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.890974][ T6368] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.099072][ T6368] page_type: f5(slab) [ 154.110202][ T6368] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 154.180047][ T6368] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 154.188965][ T6368] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 154.201656][ T6368] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 154.218573][ T6368] head: 00fff00000000003 ffffea0001ff8401 00000000ffffffff 00000000ffffffff [ 154.227740][ T6368] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.343183][ T6358] could not allocate digest TFM handle binfmt_misc [ 154.458614][ T6368] page dumped because: unmovable page [ 154.500111][ T6368] page_owner tracks the page as allocated [ 154.506086][ T6368] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1335, tgid 1335 (kworker/u8:5), ts 147681493766, free_ts 147548345344 [ 154.600615][ T6368] post_alloc_hook+0x181/0x1b0 [ 154.622272][ T6368] get_page_from_freelist+0x135c/0x3920 [ 154.687420][ T6368] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 154.712406][ T6368] alloc_pages_mpol+0x1fb/0x550 [ 154.717377][ T6368] new_slab+0x244/0x340 [ 154.731986][ T6368] ___slab_alloc+0xd9c/0x1940 [ 154.738799][ T6368] __slab_alloc.constprop.0+0x56/0xb0 [ 154.751230][ T6368] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 154.781471][ T6368] kmalloc_reserve+0xef/0x2c0 [ 154.787313][ T6368] __alloc_skb+0x166/0x380 [ 154.818608][ T6368] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 154.824529][ T6368] process_one_work+0x9cf/0x1b70 [ 154.834679][ T6368] worker_thread+0x6c8/0xf10 [ 154.868362][ T6368] kthread+0x3c2/0x780 [ 154.908547][ T6368] ret_from_fork+0x48/0x80 [ 154.913385][ T6368] ret_from_fork_asm+0x1a/0x30 [ 154.918186][ T6368] page last free pid 6308 tgid 6296 stack trace: [ 154.984434][ T6368] __free_frozen_pages+0x69d/0xff0 [ 154.999827][ T6368] __put_partials+0x16d/0x1c0 [ 155.017250][ T6368] qlist_free_all+0x4e/0x120 [ 155.035755][ T6368] kasan_quarantine_reduce+0x195/0x1e0 [ 155.068700][ T6368] __kasan_slab_alloc+0x69/0x90 [ 155.098671][ T6368] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 155.114523][ T6368] __kernfs_new_node+0xd2/0x8a0 [ 155.139163][ T6368] kernfs_new_node+0x13c/0x1e0 [ 155.143994][ T6368] __kernfs_create_file+0x53/0x350 [ 155.166269][ T6368] sysfs_add_file_mode_ns+0x207/0x3c0 [ 155.185807][ T6368] internal_create_group+0x578/0xf30 [ 155.202302][ T6368] internal_create_groups+0x9d/0x150 [ 155.224534][ T6368] device_add+0x6d1/0x1a70 [ 155.268734][ T6368] netdev_register_kobject+0x182/0x3a0 [ 155.292169][ T6368] register_netdevice+0x13dc/0x2270 [ 155.308878][ T6368] register_netdev+0x34/0x50                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    [ 215.732935][ T7085] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 215.743088][ T7085] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 215.753194][ T7085] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 215.768953][ T7085] page dumped because: unmovable page [ 215.789347][ T7085] page_owner tracks the page as allocated [ 215.805475][ T7085] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 syzkaller syzkaller login: [ 215.889940][ T7094] random: crng reseeded on system resumption [ 215.928910][ T7085] post_alloc_hook+0x181/0x1b0 [ 215.935243][ T7085] get_page_from_freelist+0x135c/0x3920 [ 215.989845][ T7085] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 216.008675][ T7085] alloc_pages_mpol+0x1fb/0x550 [ 216.031972][ T7085] new_slab+0x244/0x340 [ 216.038503][ T7085] ___slab_alloc+0xd9c/0x1940 [ 216.044156][ T7085] __slab_alloc.constprop.0+0x56/0xb0 [ 216.095474][ T7085] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 216.102919][ T7085] kmalloc_reserve+0xef/0x2c0 [ 216.108162][ T7085] __alloc_skb+0x166/0x380 [ 216.114215][ T7085] inet6_ifinfo_notify+0x77/0x150 [ 216.119905][ T7085] addrconf_notify+0x81a/0x19e0 [ 216.189981][ T7086] could not allocate digest TFM handle binfmt_misc [ 216.216727][ T7085] notifier_call_chain+0xbc/0x410 [ 216.222996][ T7085] call_netdevice_notifiers_info+0xbe/0x140 [ 216.229825][ T7085] __dev_notify_flags+0x12c/0x2e0 [ 216.235457][ T7085] netif_change_flags+0x108/0x160 [ 216.241214][ T7085] page last free pid 5829 tgid 5829 stack trace: [ 216.251418][ T7085] __free_frozen_pages+0x69d/0xff0 [ 216.257153][ T7085] __put_partials+0x16d/0x1c0 [ 216.262537][ T7085] qlist_free_all+0x4e/0x120 [ 216.267674][ T7085] kasan_quarantine_reduce+0x195/0x1e0 [ 216.274122][ T7085] __kasan_slab_alloc+0x69/0x90 [ 216.431015][ T7085] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 216.451722][ T7085] __alloc_skb+0x2b2/0x380 [ 216.456744][ T7085] netlink_alloc_large_skb+0x69/0x130 [ 216.540981][ T7085] netlink_sendmsg+0x6a1/0xdd0 [ 216.550571][ T7085] __sys_sendto+0x498/0x510 [ 216.568593][ T7085] __x64_sys_sendto+0xe0/0x1c0 [ 216.576349][ T7085] do_syscall_64+0xcd/0x230 [ 216.582308][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.195347][ T7120] netlink: 'syz.0.195': attribute type 11 has an invalid length. [ 218.207233][ T7120] netlink: 'syz.0.195': attribute type 11 has an invalid length. [ 218.219924][ T7120] netlink: 'syz.0.195': attribute type 11 has an invalid length. [ 218.937149][ T7121] could not allocate digest TFM handle binfmt_misc [ 220.198964][ T7147] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 220.209679][ T7147] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 220.218226][ T7147] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 220.749202][ T7147] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fe00000 pfn:0x7fe00 [ 220.763392][ T7147] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.773201][ T7147] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 220.843131][ T7147] page_type: f5(slab) [ 220.893859][ T7147] raw: 00fff00000000240 ffff88801b442000 ffffea000174ac10 ffffea0000ab5c10 [ 221.053509][ T7147] raw: ffff88807fe00000 0000000000080007 00000000f5000000 0000000000000000 [ 221.063914][ T7147] head: 00fff00000000240 ffff88801b442000 ffffea000174ac10 ffffea0000ab5c10 [ 221.084264][ T7147] head: ffff88807fe00000 0000000000080007 00000000f5000000 0000000000000000 [ 221.108562][ T7147] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 221.118202][ T7147] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.225244][ T7147] page dumped because: unmovable page [ 221.307197][ T7156] could not allocate digest TFM handle binfmt_misc [ 221.361360][ T7131] Process accounting paused [ 221.390860][ T7147] page_owner tracks the page as allocated [ 221.397247][ T7147] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 [ 221.578778][ T7147] post_alloc_hook+0x181/0x1b0 [ 221.591065][ T7147] get_page_from_freelist+0x135c/0x3920 [ 221.597493][ T7147] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 221.604629][ T7147] alloc_pages_mpol+0x1fb/0x550 [ 221.610644][ T7147] new_slab+0x244/0x340 [ 221.615284][ T7147] ___slab_alloc+0xd9c/0x1940 [ 221.621205][ T7147] __slab_alloc.constprop.0+0x56/0xb0 [ 221.627682][ T7147] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 221.635556][ T7147] kmalloc_reserve+0xef/0x2c0 [ 221.642809][ T7147] __alloc_skb+0x166/0x380 [ 221.647995][ T7147] inet6_ifinfo_notify+0x77/0x150 [ 221.656138][ T7147] addrconf_notify+0x81a/0x19e0 [ 221.662191][ T7147] notifier_call_chain+0xbc/0x410 [ 221.667910][ T7147] call_netdevice_notifiers_info+0xbe/0x140 [ 221.675122][ T7147] __dev_notify_flags+0x12c/0x2e0 [ 221.681136][ T7147] netif_change_flags+0x108/0x160 [ 221.686942][ T7147] page last free pid 5829 tgid 5829 stack trace: [ 221.694985][ T7147] __free_frozen_pages+0x69d/0xff0 [ 221.701242][ T7147] __put_partials+0x16d/0x1c0 [ 221.706596][ T7147] qlist_free_all+0x4e/0x120 [ 221.720651][ T7147] kasan_quarantine_reduce+0x195/0x1e0 [ 221.727091][ T7147] __kasan_slab_alloc+0x69/0x90 [ 221.734607][ T7147] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 221.758933][ T7147] __alloc_skb+0x2b2/0x380 [ 221.764093][ T7147] netlink_alloc_large_skb+0x69/0x130 [ 221.770644][ T7147] netlink_sendmsg+0x6a1/0xdd0 [ 221.813791][ T7147] __sys_sendto+0x498/0x510 [ 221.831762][ T7147] __x64_sys_sendto+0xe0/0x1c0 [ 221.857126][ T7147] do_syscall_64+0xcd/0x230 [ 221.873314][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.259589][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 222.557323][ T7175] mkiss: ax0: crc mode is auto. [ 223.468978][ T7179] random: crng reseeded on system resumption [ 224.197093][ T7188] could not allocate digest TFM handle binfmt_misc [ 225.090746][ T7201] FAULT_INJECTION: forcing a failure. [ 225.090746][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 225.127125][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.1.206 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 225.127189][ T7201] Tainted: [U]=USER [ 225.127200][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.127219][ T7201] Call Trace: [ 225.127230][ T7201] [ 225.127243][ T7201] dump_stack_lvl+0x16c/0x1f0 [ 225.127298][ T7201] should_fail_ex+0x512/0x640 [ 225.127346][ T7201] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 225.127389][ T7201] should_failslab+0xc2/0x120 [ 225.127431][ T7201] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 225.127471][ T7201] ? __kernfs_new_node+0xd2/0x8a0 [ 225.127508][ T7201] __kernfs_new_node+0xd2/0x8a0 [ 225.127544][ T7201] ? __pfx___kernfs_new_node+0x10/0x10 [ 225.127587][ T7201] ? find_held_lock+0x2b/0x80 [ 225.127620][ T7201] ? kernfs_root+0xee/0x2a0 [ 225.127661][ T7201] kernfs_new_node+0x13c/0x1e0 [ 225.127706][ T7201] __kernfs_create_file+0x53/0x350 [ 225.127755][ T7201] sysfs_add_file_mode_ns+0x207/0x3c0 [ 225.127818][ T7201] internal_create_group+0x578/0xf30 [ 225.127862][ T7201] ? __pfx_internal_create_group+0x10/0x10 [ 225.127904][ T7201] ? kernfs_create_link+0x1bd/0x240 [ 225.127958][ T7201] internal_create_groups+0x9d/0x150 [ 225.127995][ T7201] device_add+0x6d1/0x1a70 [ 225.128046][ T7201] ? __pfx_device_add+0x10/0x10 [ 225.128093][ T7201] ? lockdep_init_map_type+0x5c/0x280 [ 225.128145][ T7201] ? __init_waitqueue_head+0xca/0x150 [ 225.128191][ T7201] netdev_register_kobject+0x182/0x3a0 [ 225.128246][ T7201] register_netdevice+0x13dc/0x2270 [ 225.128303][ T7201] ? __pfx_register_netdevice+0x10/0x10 [ 225.128347][ T7201] ? rcu_is_watching+0x12/0xc0 [ 225.128378][ T7201] ? trace_kmalloc+0x2b/0xd0 [ 225.128420][ T7201] ? __kmalloc_noprof+0x242/0x510 [ 225.128462][ T7201] register_netdev+0x34/0x50 [ 225.128505][ T7201] mkiss_open+0x4cd/0x9a0 [ 225.128536][ T7201] ? __pfx_mkiss_open+0x10/0x10 [ 225.128567][ T7201] tty_ldisc_open+0x9c/0x120 [ 225.128604][ T7201] tty_set_ldisc+0x32b/0x780 [ 225.128647][ T7201] tty_ioctl+0xc42/0x1610 [ 225.128689][ T7201] ? __pfx_tty_ioctl+0x10/0x10 [ 225.128745][ T7201] ? find_held_lock+0x2b/0x80 [ 225.128776][ T7201] ? hook_file_ioctl_common+0x145/0x410 [ 225.128824][ T7201] ? __fget_files+0x20e/0x3c0 [ 225.128862][ T7201] ? __pfx_tty_ioctl+0x10/0x10 [ 225.128906][ T7201] __x64_sys_ioctl+0x190/0x200 [ 225.128958][ T7201] do_syscall_64+0xcd/0x230 [ 225.129012][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.129044][ T7201] RIP: 0033:0x7f00a7b8e969 [ 225.129071][ T7201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.129103][ T7201] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.129134][ T7201] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 225.129155][ T7201] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000006 [ 225.129183][ T7201] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 225.129201][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.129219][ T7201] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 225.129261][ T7201] [ 225.607604][ T7201] Falling back ldisc for ttyS2. [ 226.885970][ T7224] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 226.936074][ T7224] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 226.965221][ T7224] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 227.173674][ T7224] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 227.184424][ T7224] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.194682][ T7224] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.203978][ T7224] page_type: f5(slab) [ 227.208789][ T7224] raw: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 227.359238][ T7224] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 227.375211][ T7224] head: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 227.385288][ T7224] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 227.395249][ T7224] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 227.405179][ T7224] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 227.442588][ T7224] page dumped because: unmovable page [ 227.448878][ T7224] page_owner tracks the page as allocated [ 227.455317][ T7224] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 [ 227.482121][ T7224] post_alloc_hook+0x181/0x1b0 [ 227.493083][ T7224] get_page_from_freelist+0x135c/0x3920 [ 227.639726][ T7225] could not allocate digest TFM handle binfmt_misc [ 227.676390][ T7224] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 227.708668][ T7224] alloc_pages_mpol+0x1fb/0x550 [ 227.714299][ T7224] new_slab+0x244/0x340 [ 227.719430][ T7224] ___slab_alloc+0xd9c/0x1940 [ 227.724910][ T7224] __slab_alloc.constprop.0+0x56/0xb0 [ 227.731211][ T7224] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 227.836946][ T7224] kmalloc_reserve+0xef/0x2c0 [ 227.850823][ T7224] __alloc_skb+0x166/0x380 [ 227.858579][ T7224] inet6_ifinfo_notify+0x77/0x150 [ 227.864199][ T7224] addrconf_notify+0x81a/0x19e0 [ 227.887869][ T7224] notifier_call_chain+0xbc/0x410 [ 227.894752][ T7224] call_netdevice_notifiers_info+0xbe/0x140 [ 227.931064][ T7224] __dev_notify_flags+0x12c/0x2e0 [ 227.936662][ T7224] netif_change_flags+0x108/0x160 [ 227.944867][ T7224] page last free pid 5829 tgid 5829 stack trace: [ 227.985452][ T7224] __free_frozen_pages+0x69d/0xff0 [ 228.009220][ T7224] __put_partials+0x16d/0x1c0 [ 228.031139][ T7224] qlist_free_all+0x4e/0x120 [ 228.036472][ T7224] kasan_quarantine_reduce+0x195/0x1e0 [ 228.043544][ T7224] __kasan_slab_alloc+0x69/0x90 [ 228.049395][ T7224] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 228.055919][ T7224] __alloc_skb+0x2b2/0x380 [ 228.061498][ T7224] netlink_alloc_large_skb+0x69/0x130 [ 228.067453][ T7224] netlink_sendmsg+0x6a1/0xdd0 [ 228.073852][ T7224] __sys_sendto+0x498/0x510 [ 228.083100][ T7224] __x64_sys_sendto+0xe0/0x1c0 [ 228.095997][ T7224] do_syscall_64+0xcd/0x230 [ 228.102047][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.140806][ T55] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 229.140845][ T55] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 229.158020][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 229.158063][ T55] Bluetooth: hci2: adv larger than maximum supported [ 229.166860][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 229.174535][ T55] Bluetooth: hci2: adv larger than maximum supported [ 229.188672][ T55] Bluetooth: hci2: adv larger than maximum supported [ 229.196219][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 229.203868][ T55] Bluetooth: hci2: Malformed LE Event: 0x0d [ 230.038334][ T7249] FAULT_INJECTION: forcing a failure. [ 230.038334][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 230.090712][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.3.213 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 230.090765][ T7249] Tainted: [U]=USER [ 230.090775][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.090793][ T7249] Call Trace: [ 230.090804][ T7249] [ 230.090816][ T7249] dump_stack_lvl+0x16c/0x1f0 [ 230.090871][ T7249] should_fail_ex+0x512/0x640 [ 230.090921][ T7249] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 230.090964][ T7249] should_failslab+0xc2/0x120 [ 230.091016][ T7249] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 230.091056][ T7249] ? __kernfs_new_node+0xd2/0x8a0 [ 230.091094][ T7249] __kernfs_new_node+0xd2/0x8a0 [ 230.091128][ T7249] ? kernfs_add_one+0x37d/0x840 [ 230.091165][ T7249] ? __pfx___kernfs_new_node+0x10/0x10 [ 230.091208][ T7249] ? find_held_lock+0x2b/0x80 [ 230.091242][ T7249] ? kernfs_root+0xee/0x2a0 [ 230.091283][ T7249] kernfs_new_node+0x13c/0x1e0 [ 230.091328][ T7249] __kernfs_create_file+0x53/0x350 [ 230.091379][ T7249] sysfs_add_file_mode_ns+0x207/0x3c0 [ 230.091444][ T7249] sysfs_create_file_ns+0x13d/0x1d0 [ 230.091496][ T7249] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 230.091547][ T7249] ? down_read+0x13d/0x480 [ 230.091578][ T7249] ? __pfx___up_read+0x10/0x10 [ 230.091628][ T7249] ? acpi_device_notify+0x351/0x480 [ 230.091677][ T7249] device_create_file+0xf2/0x1e0 [ 230.091734][ T7249] device_add+0x2bf/0x1a70 [ 230.091782][ T7249] ? __pfx_dev_set_name+0x10/0x10 [ 230.091835][ T7249] ? __pfx_device_add+0x10/0x10 [ 230.091883][ T7249] ? lockdep_init_map_type+0x5c/0x280 [ 230.091930][ T7249] ? __init_waitqueue_head+0xca/0x150 [ 230.091971][ T7249] netdev_register_kobject+0x182/0x3a0 [ 230.092033][ T7249] register_netdevice+0x13dc/0x2270 [ 230.092089][ T7249] ? __pfx_register_netdevice+0x10/0x10 [ 230.092132][ T7249] ? rcu_is_watching+0x12/0xc0 [ 230.092163][ T7249] ? trace_kmalloc+0x2b/0xd0 [ 230.092206][ T7249] ? __kmalloc_noprof+0x242/0x510 [ 230.092252][ T7249] register_netdev+0x34/0x50 [ 230.092297][ T7249] mkiss_open+0x4cd/0x9a0 [ 230.092329][ T7249] ? __pfx_mkiss_open+0x10/0x10 [ 230.092360][ T7249] tty_ldisc_open+0x9c/0x120 [ 230.092396][ T7249] tty_set_ldisc+0x32b/0x780 [ 230.092440][ T7249] tty_ioctl+0xc42/0x1610 [ 230.092484][ T7249] ? __pfx_tty_ioctl+0x10/0x10 [ 230.092538][ T7249] ? find_held_lock+0x2b/0x80 [ 230.092569][ T7249] ? hook_file_ioctl_common+0x145/0x410 [ 230.092617][ T7249] ? __fget_files+0x20e/0x3c0 [ 230.092654][ T7249] ? __pfx_tty_ioctl+0x10/0x10 [ 230.092698][ T7249] __x64_sys_ioctl+0x190/0x200 [ 230.092750][ T7249] do_syscall_64+0xcd/0x230 [ 230.092805][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.092839][ T7249] RIP: 0033:0x7fe50e58e969 [ 230.092866][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.092898][ T7249] RSP: 002b:00007fe50f40b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.092929][ T7249] RAX: ffffffffffffffda RBX: 00007fe50e7b5fa0 RCX: 00007fe50e58e969 [ 230.092949][ T7249] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 230.092967][ T7249] RBP: 00007fe50e610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 230.092985][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.093009][ T7249] R13: 0000000000000000 R14: 00007fe50e7b5fa0 R15: 00007ffde143bd68 [ 230.093052][ T7249] [ 230.935698][ T7256] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 231.192173][ T7260] netlink: 338 bytes leftover after parsing attributes in process `syz.0.215'. [ 231.290771][ T7260] veth1_macvtap: left promiscuous mode [ 231.311304][ T7260] macsec0: entered allmulticast mode [ 231.575135][ T7256] could not allocate digest TFM handle [ 231.717809][ T7266] FAULT_INJECTION: forcing a failure. [ 231.717809][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 231.755068][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.1.216 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 231.755123][ T7266] Tainted: [U]=USER [ 231.755134][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.755152][ T7266] Call Trace: [ 231.755163][ T7266] [ 231.755176][ T7266] dump_stack_lvl+0x16c/0x1f0 [ 231.755233][ T7266] should_fail_ex+0x512/0x640 [ 231.755284][ T7266] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.755328][ T7266] should_failslab+0xc2/0x120 [ 231.755372][ T7266] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.755413][ T7266] ? __kernfs_new_node+0xd2/0x8a0 [ 231.755454][ T7266] __kernfs_new_node+0xd2/0x8a0 [ 231.755491][ T7266] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.755536][ T7266] ? find_held_lock+0x2b/0x80 [ 231.755571][ T7266] ? kernfs_root+0xee/0x2a0 [ 231.755631][ T7266] kernfs_new_node+0x13c/0x1e0 [ 231.755678][ T7266] __kernfs_create_file+0x53/0x350 [ 231.755729][ T7266] sysfs_add_file_mode_ns+0x207/0x3c0 [ 231.755792][ T7266] internal_create_group+0x578/0xf30 [ 231.755850][ T7266] ? __pfx_internal_create_group+0x10/0x10 [ 231.755893][ T7266] ? kernfs_create_link+0x1bd/0x240 [ 231.755948][ T7266] internal_create_groups+0x9d/0x150 [ 231.755988][ T7266] device_add+0x6d1/0x1a70 [ 231.756047][ T7266] ? __pfx_device_add+0x10/0x10 [ 231.756095][ T7266] ? lockdep_init_map_type+0x5c/0x280 [ 231.756143][ T7266] ? __init_waitqueue_head+0xca/0x150 [ 231.756184][ T7266] netdev_register_kobject+0x182/0x3a0 [ 231.756239][ T7266] register_netdevice+0x13dc/0x2270 [ 231.756293][ T7266] ? __pfx_register_netdevice+0x10/0x10 [ 231.756336][ T7266] ? rcu_is_watching+0x12/0xc0 [ 231.756369][ T7266] ? trace_kmalloc+0x2b/0xd0 [ 231.756413][ T7266] ? __kmalloc_noprof+0x242/0x510 [ 231.756453][ T7266] register_netdev+0x34/0x50 [ 231.756495][ T7266] mkiss_open+0x4cd/0x9a0 [ 231.756526][ T7266] ? __pfx_mkiss_open+0x10/0x10 [ 231.756558][ T7266] tty_ldisc_open+0x9c/0x120 [ 231.756594][ T7266] tty_set_ldisc+0x32b/0x780 [ 231.756634][ T7266] tty_ioctl+0xc42/0x1610 [ 231.756679][ T7266] ? __pfx_tty_ioctl+0x10/0x10 [ 231.756731][ T7266] ? find_held_lock+0x2b/0x80 [ 231.756761][ T7266] ? hook_file_ioctl_common+0x145/0x410 [ 231.756811][ T7266] ? __fget_files+0x20e/0x3c0 [ 231.756852][ T7266] ? __pfx_tty_ioctl+0x10/0x10 [ 231.756889][ T7266] __x64_sys_ioctl+0x190/0x200 [ 231.756936][ T7266] do_syscall_64+0xcd/0x230 [ 231.756991][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.757024][ T7266] RIP: 0033:0x7f00a7b8e969 [ 231.757050][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.757080][ T7266] RSP: 002b:00007f00a8963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.757109][ T7266] RAX: ffffffffffffffda RBX: 00007f00a7db5fa0 RCX: 00007f00a7b8e969 [ 231.757129][ T7266] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000006 [ 231.757148][ T7266] RBP: 00007f00a7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 231.757169][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.757187][ T7266] R13: 0000000000000000 R14: 00007f00a7db5fa0 R15: 00007ffe892f77e8 [ 231.757229][ T7266] [ 236.279095][ T7297] netlink: 'syz.0.222': attribute type 11 has an invalid length. [ 236.291304][ T7297] netlink: 'syz.0.222': attribute type 11 has an invalid length. [ 236.301472][ T7297] netlink: 'syz.0.222': attribute type 11 has an invalid length. [ 236.559320][ T7291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.580050][ T7291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.611689][ T7291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.618804][ T7291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.992869][ T7295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 237.014640][ T7295] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.179469][ T7295] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.238096][ T7295] page_type: f5(slab) [ 237.243406][ T7295] raw: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 237.259197][ T7295] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 237.268952][ T7295] head: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 237.289665][ T7295] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 237.299972][ T7295] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 237.318222][ T7295] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 237.417245][ T7295] page dumped because: unmovable page [ 237.447421][ T7295] page_owner tracks the page as allocated [ 237.529035][ T7295] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 [ 237.562926][ T7295] post_alloc_hook+0x181/0x1b0 [ 237.568341][ T7295] get_page_from_freelist+0x135c/0x3920 [ 237.574904][ T7295] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 237.575667][ T7297] could not allocate digest TFM handle binfmt_misc [ 237.585696][ T7295] alloc_pages_mpol+0x1fb/0x550 [ 237.599689][ T7295] new_slab+0x244/0x340 [ 237.604356][ T7295] ___slab_alloc+0xd9c/0x1940 [ 237.609871][ T7295] __slab_alloc.constprop.0+0x56/0xb0 [ 237.617499][ T7295] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 237.624860][ T7295] kmalloc_reserve+0xef/0x2c0 [ 237.630247][ T7295] __alloc_skb+0x166/0x380 [ 237.635278][ T7295] inet6_ifinfo_notify+0x77/0x150 [ 237.641361][ T7295] addrconf_notify+0x81a/0x19e0 [ 237.646956][ T7295] notifier_call_chain+0xbc/0x410 [ 237.652649][ T7295] call_netdevice_notifiers_info+0xbe/0x140 [ 237.680849][ T7295] __dev_notify_flags+0x12c/0x2e0 [ 237.697099][ T7295] netif_change_flags+0x108/0x160 [ 237.849950][ T7315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.224'. [ 238.008287][ T7295] page last free pid 5829 tgid 5829 stack trace: [ 238.112740][ T7295] __free_frozen_pages+0x69d/0xff0 [ 238.122573][ T7295] __put_partials+0x16d/0x1c0 [ 238.139159][ T7295] qlist_free_all+0x4e/0x120 [ 238.162538][ T7295] kasan_quarantine_reduce+0x195/0x1e0 [ 238.188553][ T7295] __kasan_slab_alloc+0x69/0x90 [ 238.419683][ T7295] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 238.426237][ T7295] __alloc_skb+0x2b2/0x380 [ 238.565324][ T7295] netlink_alloc_large_skb+0x69/0x130 [ 238.598767][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.598795][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.613796][ T7295] netlink_sendmsg+0x6a1/0xdd0 [ 238.639169][ T7295] __sys_sendto+0x498/0x510 [ 238.648810][ T7295] __x64_sys_sendto+0xe0/0x1c0 [ 238.658791][ T7295] do_syscall_64+0xcd/0x230 [ 238.668806][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.681701][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.688469][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.486454][ T7325] FAULT_INJECTION: forcing a failure. [ 239.486454][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 239.501744][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.0.234 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 239.501799][ T7325] Tainted: [U]=USER [ 239.501808][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.501825][ T7325] Call Trace: [ 239.501836][ T7325] [ 239.501846][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 239.501894][ T7325] should_fail_ex+0x512/0x640 [ 239.501937][ T7325] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 239.501973][ T7325] should_failslab+0xc2/0x120 [ 239.502009][ T7325] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 239.502042][ T7325] ? __kernfs_new_node+0xd2/0x8a0 [ 239.502083][ T7325] __kernfs_new_node+0xd2/0x8a0 [ 239.502114][ T7325] ? __pfx___kernfs_new_node+0x10/0x10 [ 239.502152][ T7325] ? find_held_lock+0x2b/0x80 [ 239.502182][ T7325] ? kernfs_root+0xee/0x2a0 [ 239.502217][ T7325] kernfs_new_node+0x13c/0x1e0 [ 239.502257][ T7325] __kernfs_create_file+0x53/0x350 [ 239.502301][ T7325] sysfs_add_file_mode_ns+0x207/0x3c0 [ 239.502356][ T7325] internal_create_group+0x578/0xf30 [ 239.502394][ T7325] ? __pfx_internal_create_group+0x10/0x10 [ 239.502429][ T7325] ? kernfs_create_link+0x1bd/0x240 [ 239.502473][ T7325] internal_create_groups+0x9d/0x150 [ 239.502505][ T7325] device_add+0x6d1/0x1a70 [ 239.502548][ T7325] ? __pfx_device_add+0x10/0x10 [ 239.502589][ T7325] ? lockdep_init_map_type+0x5c/0x280 [ 239.502628][ T7325] ? __init_waitqueue_head+0xca/0x150 [ 239.502662][ T7325] netdev_register_kobject+0x182/0x3a0 [ 239.502708][ T7325] register_netdevice+0x13dc/0x2270 [ 239.502754][ T7325] ? __pfx_register_netdevice+0x10/0x10 [ 239.502792][ T7325] ? rcu_is_watching+0x12/0xc0 [ 239.502818][ T7325] ? trace_kmalloc+0x2b/0xd0 [ 239.502855][ T7325] ? __kmalloc_noprof+0x242/0x510 [ 239.502892][ T7325] register_netdev+0x34/0x50 [ 239.502930][ T7325] mkiss_open+0x4cd/0x9a0 [ 239.502960][ T7325] ? __pfx_mkiss_open+0x10/0x10 [ 239.502992][ T7325] tty_ldisc_open+0x9c/0x120 [ 239.503025][ T7325] tty_set_ldisc+0x32b/0x780 [ 239.503069][ T7325] tty_ioctl+0xc42/0x1610 [ 239.503106][ T7325] ? __pfx_tty_ioctl+0x10/0x10 [ 239.503152][ T7325] ? find_held_lock+0x2b/0x80 [ 239.503179][ T7325] ? hook_file_ioctl_common+0x145/0x410 [ 239.503220][ T7325] ? __fget_files+0x20e/0x3c0 [ 239.503250][ T7325] ? __pfx_tty_ioctl+0x10/0x10 [ 239.503286][ T7325] __x64_sys_ioctl+0x190/0x200 [ 239.503329][ T7325] do_syscall_64+0xcd/0x230 [ 239.503376][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.503404][ T7325] RIP: 0033:0x7f0f9f78e969 [ 239.503427][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.503456][ T7325] RSP: 002b:00007f0fa05fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.503482][ T7325] RAX: ffffffffffffffda RBX: 00007f0f9f9b5fa0 RCX: 00007f0f9f78e969 [ 239.503501][ T7325] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000006 [ 239.503519][ T7325] RBP: 00007f0f9f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 239.503536][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.503553][ T7325] R13: 0000000000000000 R14: 00007f0f9f9b5fa0 R15: 00007ffd3b6e2be8 [ 239.503589][ T7325] [ 239.953101][ T7324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.000494][ T7324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.008153][ T7324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.015680][ T7324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.246117][ T7338] netlink: 'syz.0.229': attribute type 11 has an invalid length. [ 240.283423][ T7338] netlink: 'syz.0.229': attribute type 11 has an invalid length. [ 240.298757][ T7338] netlink: 'syz.0.229': attribute type 11 has an invalid length. [ 240.375668][ T7329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 240.577746][ T7338] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 240.588957][ T7338] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.598914][ T7338] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 240.609500][ T7338] page_type: f5(slab) [ 240.614086][ T7338] raw: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 240.751334][ T7338] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 240.791440][ T7338] head: 00fff00000000040 ffff88801b442000 0000000000000000 dead000000000001 [ 240.926214][ T7338] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 240.938711][ T7338] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 240.983048][ T7342] could not allocate digest TFM handle binfmt_misc [ 240.984106][ T7338] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 241.002034][ T7338] page dumped because: unmovable page [ 241.008083][ T7338] page_owner tracks the page as allocated [ 241.023345][ T7338] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 107589802272, free_ts 107581657054 [ 241.063147][ T7338] post_alloc_hook+0x181/0x1b0 [ 241.125495][ T7338] get_page_from_freelist+0x135c/0x3920 [ 241.131812][ T7338] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 241.143062][ T7338] alloc_pages_mpol+0x1fb/0x550 [ 241.148661][ T7338] new_slab+0x244/0x340 [ 241.156674][ T7338] ___slab_alloc+0xd9c/0x1940 [ 241.166821][ T7338] __slab_alloc.constprop.0+0x56/0xb0 [ 241.173454][ T7338] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 241.181163][ T7338] kmalloc_reserve+0xef/0x2c0 [ 241.186542][ T7338] __alloc_skb+0x166/0x380 [ 241.193417][ T7338] inet6_ifinfo_notify+0x77/0x150 [ 241.201017][ T7338] addrconf_notify+0x81a/0x19e0 [ 241.206458][ T7338] notifier_call_chain+0xbc/0x410 [ 241.212671][ T7338] call_netdevice_notifiers_info+0xbe/0x140 [ 241.220129][ T7338] __dev_notify_flags+0x12c/0x2e0 [ 241.225872][ T7338] netif_change_flags+0x108/0x160 [ 241.232544][ T7338] page last free pid 5829 tgid 5829 stack trace: [ 241.240041][ T7338] __free_frozen_pages+0x69d/0xff0 [ 241.245725][ T7338] __put_partials+0x16d/0x1c0 [ 241.251512][ T7338] qlist_free_all+0x4e/0x120 [ 241.256626][ T7338] kasan_quarantine_reduce+0x195/0x1e0 [ 241.347846][ T7338] __kasan_slab_alloc+0x69/0x90 [ 241.362468][ T7338] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 241.371703][ T7338] __alloc_skb+0x2b2/0x380 [ 241.377240][ T7338] netlink_alloc_large_skb+0x69/0x130 [ 241.427625][ T7338] netlink_sendmsg+0x6a1/0xdd0 [ 241.436196][ T7338] __sys_sendto+0x498/0x510 [ 241.443939][ T7338] __x64_sys_sendto+0xe0/0x1c0 [ 241.449581][ T7338] do_syscall_64+0xcd/0x230 [ 241.454767][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.486833][ T7328] random: crng reseeded on system resumption [ 241.958748][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.038666][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.038718][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.038771][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.800042][ T7378] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input8 [ 244.252665][ T7359] FAULT_INJECTION: forcing a failure. [ 244.252665][ T7359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.268784][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.0.232 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 244.268836][ T7359] Tainted: [U]=USER [ 244.268848][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.268871][ T7359] Call Trace: [ 244.268882][ T7359] [ 244.268900][ T7359] dump_stack_lvl+0x16c/0x1f0 [ 244.268957][ T7359] should_fail_ex+0x512/0x640 [ 244.269012][ T7359] should_fail_alloc_page+0xe7/0x130 [ 244.269057][ T7359] prepare_alloc_pages+0x3c2/0x610 [ 244.269117][ T7359] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 244.269156][ T7359] ? stack_trace_save+0x8e/0xc0 [ 244.269190][ T7359] ? __pfx_stack_trace_save+0x10/0x10 [ 244.269224][ T7359] ? stack_depot_save_flags+0x28/0xa50 [ 244.269287][ T7359] ? kasan_save_stack+0x42/0x60 [ 244.269321][ T7359] ? kasan_save_stack+0x33/0x60 [ 244.269355][ T7359] ? kasan_save_track+0x14/0x30 [ 244.269390][ T7359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.269428][ T7359] ? copy_page_range+0x420e/0x5fe0 [ 244.269477][ T7359] ? kernel_clone+0xfc/0x960 [ 244.269519][ T7359] ? do_syscall_64+0xcd/0x230 [ 244.269569][ T7359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.269635][ T7359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.269684][ T7359] ? policy_nodemask+0xea/0x4e0 [ 244.269734][ T7359] alloc_pages_mpol+0x1fb/0x550 [ 244.269780][ T7359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 244.269825][ T7359] ? cgroup_rstat_updated+0x2a/0xb20 [ 244.269890][ T7359] alloc_pages_noprof+0x131/0x390 [ 244.269936][ T7359] pte_alloc_one+0x19/0x380 [ 244.269975][ T7359] __pte_alloc+0x6d/0x3c0 [ 244.270020][ T7359] ? __pfx___pte_alloc+0x10/0x10 [ 244.270066][ T7359] ? _raw_spin_unlock+0x28/0x50 [ 244.270106][ T7359] ? __pmd_alloc+0x3c2/0x870 [ 244.270161][ T7359] copy_page_range+0x3a29/0x5fe0 [ 244.270256][ T7359] ? __pfx_copy_page_range+0x10/0x10 [ 244.270310][ T7359] ? mas_store+0x93a/0x10c0 [ 244.270339][ T7359] ? __pfx___might_resched+0x10/0x10 [ 244.270381][ T7359] ? __pfx_mas_store+0x10/0x10 [ 244.270411][ T7359] ? __vma_enter_locked+0x163/0x3f0 [ 244.270449][ T7359] ? down_write+0x14d/0x200 [ 244.270504][ T7359] copy_process+0x8644/0x91b0 [ 244.270574][ T7359] ? __pfx_copy_process+0x10/0x10 [ 244.270614][ T7359] ? __pfx___futex_wait+0x10/0x10 [ 244.270713][ T7359] kernel_clone+0xfc/0x960 [ 244.270760][ T7359] ? __pfx_kernel_clone+0x10/0x10 [ 244.270832][ T7359] __do_sys_clone+0xce/0x120 [ 244.270876][ T7359] ? __pfx___do_sys_clone+0x10/0x10 [ 244.270918][ T7359] ? ksys_unshare+0x687/0xa40 [ 244.270986][ T7359] ? rcu_is_watching+0x12/0xc0 [ 244.271031][ T7359] do_syscall_64+0xcd/0x230 [ 244.271086][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.271119][ T7359] RIP: 0033:0x7f0f9f78e969 [ 244.271145][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.271178][ T7359] RSP: 002b:00007f0fa05fbfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 244.271209][ T7359] RAX: ffffffffffffffda RBX: 00007f0f9f9b5fa0 RCX: 00007f0f9f78e969 [ 244.271230][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 244.271249][ T7359] RBP: 00007f0f9f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 244.271269][ T7359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.271288][ T7359] R13: 0000000000000000 R14: 00007f0f9f9b5fa0 R15: 00007ffd3b6e2be8 [ 244.271333][ T7359] [ 244.825593][ T7362] Process accounting paused [ 247.307322][ T7412] binder: 7411:7412 ioctl 400c620e 200000000140 returned -22 [ 247.576997][ T7419] syz.3.246 (7419): attempted to duplicate a private mapping with mremap. This is not supported. [ 248.303074][ T7422] bridge0: port 3(vlan1) entered blocking state [ 248.316001][ T7422] bridge0: port 3(vlan1) entered disabled state [ 248.324536][ T7422] vlan1: entered allmulticast mode [ 248.330331][ T7422] veth0_vlan: entered allmulticast mode [ 248.344584][ T7422] vlan1: entered promiscuous mode [ 248.352001][ T7422] bridge0: port 3(vlan1) entered blocking state [ 248.359192][ T7422] bridge0: port 3(vlan1) entered forwarding state [ 251.206333][ T7445] random: crng reseeded on system resumption [ 251.267204][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 251.468922][ T7439] bridge_slave_0: left allmulticast mode [ 251.475221][ T7439] bridge_slave_0: left promiscuous mode [ 251.518902][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.040185][ T7455] [ 252.042815][ T7455] ====================================================== [ 252.050558][ T7455] WARNING: possible circular locking dependency detected [ 252.058287][ T7455] 6.15.0-syzkaller #0 Tainted: G U [ 252.065639][ T7455] ------------------------------------------------------ [ 252.073458][ T7455] syz.2.256/7455 is trying to acquire lock: [ 252.079939][ T7455] ffff888143b705d8 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 252.090609][ T7455] [ 252.090609][ T7455] but task is already holding lock: [ 252.098751][ T7455] ffff888143b700a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 252.111159][ T7455] [ 252.111159][ T7455] which lock already depends on the new lock. [ 252.111159][ T7455] [ 252.122718][ T7455] [ 252.122718][ T7455] the existing dependency chain (in reverse order) is: [ 252.132650][ T7455] [ 252.132650][ T7455] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 252.142157][ T7455] blk_alloc_queue+0x619/0x760 [ 252.148003][ T7455] blk_mq_alloc_queue+0x179/0x290 [ 252.154138][ T7455] __blk_mq_alloc_disk+0x29/0x120 [ 252.160275][ T7455] nbd_dev_add+0x49d/0xbb0 [ 252.165732][ T7455] nbd_init+0x181/0x320 [ 252.170909][ T7455] do_one_initcall+0x120/0x6e0 [ 252.176751][ T7455] kernel_init_freeable+0x5c2/0x900 [ 252.183097][ T7455] kernel_init+0x1c/0x2b0 [ 252.188472][ T7455] ret_from_fork+0x48/0x80 [ 252.193933][ T7455] ret_from_fork_asm+0x1a/0x30 [ 252.199795][ T7455] [ 252.199795][ T7455] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 252.207755][ T7455] fs_reclaim_acquire+0x102/0x150 [ 252.213887][ T7455] kmem_cache_alloc_noprof+0x53/0x3b0 [ 252.220404][ T7455] __kernfs_new_node+0xd2/0x8a0 [ 252.226325][ T7455] kernfs_new_node+0x13c/0x1e0 [ 252.232151][ T7455] kernfs_create_dir_ns+0x4c/0x1a0 [ 252.238366][ T7455] sysfs_create_dir_ns+0x13a/0x2b0 [ 252.244598][ T7455] kobject_add_internal+0x2c4/0x9b0 [ 252.250901][ T7455] kobject_add+0x16e/0x240 [ 252.256345][ T7455] elv_register_queue+0xd3/0x2a0 [ 252.262389][ T7455] blk_register_queue+0x3c4/0x560 [ 252.268512][ T7455] add_disk_fwnode+0x911/0x13a0 [ 252.274459][ T7455] nbd_dev_add+0x78e/0xbb0 [ 252.279907][ T7455] nbd_init+0x181/0x320 [ 252.285079][ T7455] do_one_initcall+0x120/0x6e0 [ 252.290917][ T7455] kernel_init_freeable+0x5c2/0x900 [ 252.297233][ T7455] kernel_init+0x1c/0x2b0 [ 252.302584][ T7455] ret_from_fork+0x48/0x80 [ 252.308221][ T7455] ret_from_fork_asm+0x1a/0x30 [ 252.314067][ T7455] [ 252.314067][ T7455] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 252.322729][ T7455] __lock_acquire+0x1173/0x1ba0 [ 252.328670][ T7455] lock_acquire+0x179/0x350 [ 252.334219][ T7455] __mutex_lock+0x199/0xb90 [ 252.339775][ T7455] elv_iosched_store+0x201/0x5f0 [ 252.345825][ T7455] queue_attr_store+0x273/0x310 [ 252.351849][ T7455] sysfs_kf_write+0xf2/0x150 [ 252.357496][ T7455] kernfs_fop_write_iter+0x354/0x510 [ 252.363910][ T7455] iter_file_splice_write+0x91f/0x1150 [ 252.370525][ T7455] direct_splice_actor+0x18f/0x6c0 [ 252.376760][ T7455] splice_direct_to_actor+0x342/0xa30 [ 252.383270][ T7455] do_splice_direct+0x174/0x240 [ 252.389205][ T7455] do_sendfile+0xafd/0xe50 [ 252.394645][ T7455] __x64_sys_sendfile64+0x1d8/0x220 [ 252.400957][ T7455] do_syscall_64+0xcd/0x230 [ 252.406545][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.413628][ T7455] [ 252.413628][ T7455] other info that might help us debug this: [ 252.413628][ T7455] [ 252.424886][ T7455] Chain exists of: [ 252.424886][ T7455] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 252.424886][ T7455] [ 252.440031][ T7455] Possible unsafe locking scenario: [ 252.440031][ T7455] [ 252.448230][ T7455] CPU0 CPU1 [ 252.454135][ T7455] ---- ---- [ 252.460039][ T7455] lock(&q->q_usage_counter(io)#55); [ 252.465975][ T7455] lock(fs_reclaim); [ 252.473145][ T7455] lock(&q->q_usage_counter(io)#55); [ 252.481867][ T7455] lock(&q->elevator_lock); [ 252.486945][ T7455] [ 252.486945][ T7455] *** DEADLOCK *** [ 252.486945][ T7455] [ 252.495904][ T7455] 5 locks held by syz.2.256/7455: [ 252.501548][ T7455] #0: ffff888031a34420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 252.512648][ T7455] #1: ffff888032da2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 252.523514][ T7455] #2: ffff8881437fe968 (kn->active#105){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 252.534772][ T7455] #3: ffff888143b700a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 252.547876][ T7455] #4: ffff888143b700e0 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 252.561081][ T7455] [ 252.561081][ T7455] stack backtrace: [ 252.567575][ T7455] CPU: 0 UID: 0 PID: 7455 Comm: syz.2.256 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 252.567614][ T7455] Tainted: [U]=USER [ 252.567623][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.567639][ T7455] Call Trace: [ 252.567647][ T7455] [ 252.567658][ T7455] dump_stack_lvl+0x116/0x1f0 [ 252.567703][ T7455] print_circular_bug+0x275/0x350 [ 252.567740][ T7455] check_noncircular+0x14c/0x170 [ 252.567779][ T7455] __lock_acquire+0x1173/0x1ba0 [ 252.567820][ T7455] lock_acquire+0x179/0x350 [ 252.567854][ T7455] ? elv_iosched_store+0x201/0x5f0 [ 252.567891][ T7455] ? __pfx___might_resched+0x10/0x10 [ 252.567922][ T7455] ? do_raw_spin_lock+0x12c/0x2b0 [ 252.567964][ T7455] __mutex_lock+0x199/0xb90 [ 252.568005][ T7455] ? elv_iosched_store+0x201/0x5f0 [ 252.568041][ T7455] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 252.568084][ T7455] ? elv_iosched_store+0x201/0x5f0 [ 252.568119][ T7455] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.568159][ T7455] ? __pfx___mutex_lock+0x10/0x10 [ 252.568204][ T7455] ? __pfx_autoremove_wake_function+0x10/0x10 [ 252.568242][ T7455] ? elv_iosched_store+0x201/0x5f0 [ 252.568276][ T7455] elv_iosched_store+0x201/0x5f0 [ 252.568312][ T7455] ? __x64_sys_sendfile64+0x1d8/0x220 [ 252.568346][ T7455] ? __pfx_elv_iosched_store+0x10/0x10 [ 252.568384][ T7455] ? __mutex_trylock_common+0xe9/0x250 [ 252.568424][ T7455] ? __pfx_elv_iosched_store+0x10/0x10 [ 252.568464][ T7455] queue_attr_store+0x273/0x310 [ 252.568493][ T7455] ? __pfx_queue_attr_store+0x10/0x10 [ 252.568532][ T7455] ? find_held_lock+0x2b/0x80 [ 252.568561][ T7455] ? sysfs_file_kobj+0xe4/0x290 [ 252.568608][ T7455] ? __pfx_queue_attr_store+0x10/0x10 [ 252.568637][ T7455] sysfs_kf_write+0xf2/0x150 [ 252.568683][ T7455] kernfs_fop_write_iter+0x354/0x510