last executing test programs: 11.318613616s ago: executing program 0 (id=1290): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) write$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x4020007, 0xdb, 0xeb1, 0x401, 0x7ffd) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) ioctl$auto(0x3, 0x4038ae7a, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="01032d90000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigaction$auto(0x4, &(0x7f0000000200)={0x0, 0x86a, 0x0, {0xa7}}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x545000, 0x0) ioctl$auto(0x20000000000003, 0x8936, 0x2) write$auto(0x3, 0x0, 0xfffffdef) 9.24238092s ago: executing program 2 (id=1296): socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd14/sched/write1_fifo_list\x00', 0x189e42, 0x0) socket(0x10, 0x2, 0xf) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440), 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x1ff, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V)\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1z\x88\f\x03\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) syz_clone(0x100, &(0x7f00000001c0)="768cf837c25bcac1415d6636160de3adf15d02b24731b1e105ef07b71ed2b10b42f943cfa7fabb4e66906d84f1499c79585735f808a7e16674a9ad3651c6a75bea9a87d147211e0b165f9be66f00d43855961e17b8352b0b4c0b0f0da725e7edc88adc84757b9ae30870c7677082fa9cf45c162e4f643dda374e14956f192a16c01e56634dd80a02031670252108a27f7765fe175b938975f29880e2c832396a374e437bd427aabdfdf2582f4ebd1b057f7a72c6346e386e81b8cde446e6188eb09c7299e7ef12c73e3e53f4bfcd31c7da8636d6cb114d40b06273cbc0c4a4164d5b322dbfff7982711a078cfb18789e89d92f0ff5633a", 0xf7, &(0x7f00000002c0), 0x0, &(0x7f0000000480)="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") openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@nfc, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) write$auto(0x3, 0x0, 0x63) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0xa, 0x6fe25ced) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0x7, 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x410000, 0x157) socket(0xa, 0x6, 0x1003b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0xf8, 0x20009, 0x20004000000000df, 0x18, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 8.152194859s ago: executing program 0 (id=1298): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x4000457b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) capset$auto(0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x98) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x3, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 7.616177074s ago: executing program 2 (id=1300): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x4, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffffd, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="00042cbd8a70b169adc8fecbe0cbeb87b4b8f0e022258731a398341c3ce7e3ea120e0bb8f3c8a6f863113da81ac25291a7a8217eba12f47be6a5bbe5b9f09c86f6b828bb0e89d7eb7fb5221521be9d0c0077adf406b58cff66b38d237b2a266d74017271812c9f4c5ee1d22fb09d99f0aa68752542b332458cf79867a8e47cf2b23bf87781260c092f0d3c7a68ba9889246fe564c823662a6264b0718ad93a0b957c8ac62b68fa125ca01608fe5926dde7d459f72629f95b5d666cf1d91c4b0605b5d918dce65f7a67a0e41bd4fc8cfb1bb3e25d23478a0dad5e5efdfbbcff8a77d32cc36c14531ba8b3823fcbb729bf2339884035dea46838bebe3502557a51eefba1dd5f2d57ad11090d40f62bea704b0850445c9660f749ca9297a374d14e379d0bd3a2"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) sendmsg$auto_IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010026bd70002e6eefb2f4762877265d863e537346fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x539db8c70649e70f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r5, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) 5.047463854s ago: executing program 0 (id=1308): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x1, 0x7, 0x0, 0x17, r0, 0x8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=r1, 0x4, @old_prog_fd=r2}, 0xa3) exit$auto(0x8) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) 4.389833102s ago: executing program 3 (id=1309): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffff7, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x24, 0xfffffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) pipe$auto(&(0x7f00000000c0)=r1) read$auto_mon_fops_text_t_mon_text(r2, &(0x7f0000000000)=""/84, 0x54) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4, 0x3, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a42]}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x23, 0x80805, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) 4.216431544s ago: executing program 1 (id=1310): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x9, 0x0, 0x0, 0x8) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f0000000180)=0x8) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x7ff) mmap$auto(0x0, 0x20006, 0x4000000000de, 0x10010, 0xffffffffffffffff, 0x8001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/power/autosuspend\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0xffffffffffffffff, 0x8, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) read$auto(0x4, 0x0, 0xfdef) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000080)={{0x7, 0xee01, 0xee00, 0x6, 0x7, 0xa, 0x8}, 0x0, 0x0, 0x5, 0x1, 0x0, 0x297, 0x8, 0xad2a, 0x82, 0x2}) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x301801, 0x0) ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) 4.052240484s ago: executing program 2 (id=1311): close_range$auto(0x0, 0xffffffffffffffff, 0x0) fanotify_init$auto(0x200, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket(0x1e, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(0xffffffffffffffff, 0xc0044dff, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000140)={r1, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x4000d, 0xdf, 0x10, r0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) open(&(0x7f0000000000)='./file0\x00', 0x4642, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x12ba7e, 0x145) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.913043255s ago: executing program 0 (id=1312): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setresgid$auto(0x0, 0xee01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x20100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x40000000002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/mq/0/cpu_list\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/64, 0x40) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x0, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) timerfd_create$auto(0x100, 0x150b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x102, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x9, 0x1, 0x4) mprotect$auto(0x5, 0x8000000000000004, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.563408109s ago: executing program 2 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d13afae66b1d900a4958396aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89edac932b8859c767780d65e849700", "e600d778751f5f9e03e1f2b96e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184b8d300c13be6e57970685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08fb733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r3, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r4) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="831f2abd7000fbdbdf25010000aaf57947799a09dd1f35000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x8000000000000001, 0x5, 0x7f, 0x10}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) (async) mmap$auto(0x7, 0x3, 0x401, 0x12, r4, 0xfff) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd5/hctx0/cpu1/read_rq_list\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/00/04.0\x00', 0xc8841, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket(0x10, 0x2, 0xf) r7 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r6, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r7, 0x98}, 0x5) (async) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000040)=0x10) r9 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x40400, 0x0) ioctl$auto_EXT4_IOC_SETVERSION_OLD(r9, 0x40087602, 0x0) 2.82155522s ago: executing program 1 (id=1314): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) read$auto_mon_fops_text_t_mon_text(r0, &(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x0, 0xb) 2.732341972s ago: executing program 0 (id=1315): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) (async) io_uring_register$auto(0x2, 0x1a, &(0x7f00000000c0), 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) signalfd$auto(0xffffffff, 0x0, 0x8) (async) socket(0x1d, 0x2, 0x6) (async) socket(0x1f, 0x2, 0x1) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 32) shutdown$auto(0x200000003, 0x2) (async, rerun: 32) writev$auto(0x3, 0x0, 0x8) io_uring_setup$auto(0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 2.661146173s ago: executing program 3 (id=1316): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioperm$auto(0x800, 0x5, 0xd) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/timestamp_mode\x00', 0x240801, 0x0) recvmmsg$auto(r2, 0x0, 0xdd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, 0x0, 0x8010) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) iopl$auto(0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) iopl$auto(0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) iopl$auto(0x7) umask$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x10000040) 2.023274511s ago: executing program 0 (id=1317): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x6) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x667c2, 0x0) r1 = prctl$auto(0x3e, 0x0, 0x0, 0xfffffffffffffffe, 0x4) mmap$auto(0x3, 0x200000000005, 0xdf, 0xeb5, 0x401, 0x8001) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x800ffc, 0x8) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0b/power/runtime_status\x00', 0x7ad982, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x8005, 0xffffffff, 0xffffffc0, 0x7, 0x2, 0x77, 0xfffffffd, 0x10003, 0x7}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffffff) socketpair$auto(0x8000, 0x2, 0x1, 0x0) r3 = timerfd_create$auto(0x9, 0x7) timerfd_settime$auto(r3, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x420d82, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) msgrcv$auto(0x6, &(0x7f0000000040)={0x3, 0x5}, 0x0, 0x8000000000000002, 0x5) 1.800166952s ago: executing program 1 (id=1318): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x16d3c2, 0x64) fallocate$auto(0x8000000000000003, 0x0, 0x3, 0xcbd5d) mmap$auto(0x0, 0x810004, 0xff7, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) r2 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x4040000) fstat$auto(r0, &(0x7f0000000040)={0x6, 0xc, 0x200, 0x3, 0xee01, 0x0, 0x0, 0x6, 0x8, 0xfffffffffffffff8, 0x5, 0xb, 0xfffffffffffffffc, 0x80000001, 0x9, 0x8, 0x2}) unshare$auto(0x20000) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, r2, r3, 0x42) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)) ppoll$auto(&(0x7f0000000000)={r5, 0x40}, 0x2, 0x0, 0x0, 0x8) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) sendfile$auto(r7, r7, 0x0, 0x200) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r6, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r5, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) r8 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r8, 0x9, &(0x7f0000000140)='/dev/kvm\x00', &(0x7f0000000180)="482ea4769fa41a8298a6097ff0d4eb8fc7410ec125fb7c654e4f2eeb4c58712d7b3903ab8d1577a63b8bbd33647723b7b0ef9cc8b00adcddccb90d67d593bae79c2730f3fd177c95056089", r2) 1.679641469s ago: executing program 3 (id=1319): socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0881, 0x0) memfd_create$auto(0x0, 0x5) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x3a) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) setsockopt$auto(r2, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) getsockopt$auto_SO_BINDTOIFINDEX(r1, 0x2, 0x3e, &(0x7f00000000c0)='/dev/dvb/adapter0/frontend0\x00', &(0x7f0000000100)=0x101) socketpair$auto(0x5, 0x1100005, 0x200, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x9, 0x8) ioctl$auto(r0, 0x40106f52, 0xffffffffffffffff) mprotect$auto(0x0, 0x4, 0x4) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/maps\x00', 0x40000, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x121903, 0x0) mmap$auto(0x0, 0xec, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) write$auto(r3, 0x0, 0xffff) getsockopt$auto_SO_PASSSEC(r3, 0x44b3, 0x22, &(0x7f0000000140)='/sys/devO\xdb\xa7\xcc.-aVAdzmt\xe8\r\xfdEM\x15\x84\xa6\xf6\xaa\x00\x00l\x7f\x00\x00\x00\x00\x00\x00\x00tl-led/\'\xb5!\xa7\xf1*Pa\xae\xc1\x10\xca\xbc6\x06\x85spr', &(0x7f0000000040)=0x7f7fffff) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 1.328726305s ago: executing program 3 (id=1320): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x2d, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, 0x0, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 91.316733ms ago: executing program 2 (id=1321): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x4101, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)='Z', 0x1) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x13, 0x0, 0x8008) 54.708934ms ago: executing program 3 (id=1322): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) lseek$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x3) r4 = io_uring_setup$auto(0x8, 0x0) keyctl$auto(0x4, 0xfffffffd, 0x2, 0x0, 0x5121) r5 = fsopen$auto(0x0, 0x1) r6 = setfsuid$auto(0xee01) setresuid$auto(0x0, r6, 0x0) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="d733ca4b742473802106228ad2b73b9e1e02374dd9482674268b132ad8ab5653f97f77fe4da875b305000000d577691f63e24ab3dfca928349bb73f0c8eed97b994d26cc741d74de949e3a9da46b3365b1cae6a0606116a799908e39a7764650df7ec9ecf20b7481cf3bcdae5f89a3c8cb9a7c733d1a7d1b15b329ea22ed55eb5191d05c61851aeccabf23b56bbf3cf1cc9340a76ba7896f83bff3feb985a1908836f2860c68b335b03b648138dbc08fc82d08b963c3f4b8d599b142a9e516247fa7eff34f8fa2d24a9975488862d4502e6f2056343b50cacb270bc40b1f1e56e0b7e1cf1615fcc91086bb00ffd7ee5208000a00", @ANYRES64=0x0, @ANYRES8=r1], 0x4c0}, 0x1, 0x0, 0x0, 0x1091}, 0x20000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c00, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0x10000, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/error_log\x00', 0x40, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) socket(0xa, 0x2, 0x88) semctl$auto_GETALL(0x0, 0x101, 0xd, 0x8000000000000000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x29b72, 0x2, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_vs_conn_sync\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000380)=""/23, 0x17) 0s ago: executing program 1 (id=1323): socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/aid\x00', 0x20000, 0x0) pwrite64$auto(0xc8, 0x0, 0x10, 0x6) (async) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xbce02, 0x0) (async) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) socket(0xa, 0x6, 0x0) (async) mkdir$auto(0x0, 0x6) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x5, 0xc, 0x80400001, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     [ 209.987926][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 210.003778][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. syzkaller syzkaller login: [ 210.401655][ T7760] FAULT_INJECTION: forcing a failure. [ 210.401655][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 210.424804][ T7755] FAULT_INJECTION: forcing a failure. [ 210.424804][ T7755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.429019][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.1.402 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 210.429059][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.429077][ T7760] Call Trace: [ 210.429087][ T7760] [ 210.429100][ T7760] dump_stack_lvl+0x16c/0x1f0 [ 210.429154][ T7760] should_fail_ex+0x512/0x640 [ 210.429198][ T7760] ? __kvmalloc_node_noprof+0x122/0x600 [ 210.429258][ T7760] should_failslab+0xc2/0x120 [ 210.429304][ T7760] __kvmalloc_node_noprof+0x135/0x600 [ 210.429350][ T7760] ? __pfx_down_write+0x10/0x10 [ 210.429378][ T7760] ? cache_write_procfs+0xd2/0x160 [ 210.429418][ T7760] ? __pfx_cache_write_procfs+0x10/0x10 [ 210.429458][ T7760] ? cache_write_procfs+0xd2/0x160 [ 210.429491][ T7760] cache_write_procfs+0xd2/0x160 [ 210.429528][ T7760] ? __pfx_cache_write_procfs+0x10/0x10 [ 210.429575][ T7760] proc_reg_write+0x23d/0x330 [ 210.429629][ T7760] vfs_write+0x25c/0x1180 [ 210.429670][ T7760] ? __pfx_proc_reg_write+0x10/0x10 [ 210.429719][ T7760] ? __pfx___mutex_lock+0x10/0x10 [ 210.429781][ T7760] ? __pfx_vfs_write+0x10/0x10 [ 210.429839][ T7760] ? __fget_files+0x20e/0x3c0 [ 210.429898][ T7760] ksys_write+0x12a/0x240 [ 210.429955][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 210.429997][ T7760] ? rcu_is_watching+0x12/0xc0 [ 210.430056][ T7760] do_syscall_64+0xcd/0x260 [ 210.430108][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.430139][ T7760] RIP: 0033:0x7fb11df8d169 [ 210.430164][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.430194][ T7760] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.430223][ T7760] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 210.430255][ T7760] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000003 [ 210.430273][ T7760] RBP: 00007fb11ee98090 R08: 0000000000000000 R09: 0000000000000000 [ 210.430290][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.430307][ T7760] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 210.430347][ T7760] [ 210.660328][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.0.401 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 210.660364][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.660381][ T7755] Call Trace: [ 210.660390][ T7755] [ 210.660401][ T7755] dump_stack_lvl+0x16c/0x1f0 [ 210.660447][ T7755] should_fail_ex+0x512/0x640 [ 210.660485][ T7755] get_futex_key+0x1c2/0x1000 [ 210.660528][ T7755] ? __pfx_get_futex_key+0x10/0x10 [ 210.660579][ T7755] futex_wake+0xe7/0x4e0 [ 210.660600][ T7755] ? rcu_is_watching+0x12/0xc0 [ 210.660649][ T7755] ? __pfx_futex_wake+0x10/0x10 [ 210.660684][ T7755] do_futex+0x1e3/0x350 [ 210.660718][ T7755] ? __pfx_do_futex+0x10/0x10 [ 210.660769][ T7755] ? __might_fault+0xe3/0x190 [ 210.660820][ T7755] mm_release+0x24e/0x300 [ 210.660855][ T7755] do_exit+0x898/0x2c30 [ 210.660896][ T7755] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.660927][ T7755] ? __pfx_do_exit+0x10/0x10 [ 210.660967][ T7755] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.660997][ T7755] ? find_held_lock+0x2b/0x80 [ 210.661035][ T7755] do_group_exit+0xd3/0x2a0 [ 210.661060][ T7755] get_signal+0x2673/0x26d0 [ 210.661107][ T7755] ? __pfx_get_signal+0x10/0x10 [ 210.661143][ T7755] ? do_futex+0x122/0x350 [ 210.661189][ T7755] ? __pfx_do_futex+0x10/0x10 [ 210.661237][ T7755] arch_do_signal_or_restart+0x8f/0x7d0 [ 210.661287][ T7755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.661348][ T7755] ? rcu_is_watching+0x12/0xc0 [ 210.661395][ T7755] syscall_exit_to_user_mode+0x150/0x2a0 [ 210.661444][ T7755] do_syscall_64+0xda/0x260 [ 210.661494][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.661526][ T7755] RIP: 0033:0x7f9b7018d169 [ 210.661550][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.661580][ T7755] RSP: 002b:00007f9b710a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.661608][ T7755] RAX: fffffffffffffe00 RBX: 00007f9b703a6088 RCX: 00007f9b7018d169 [ 210.661629][ T7755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b703a6088 [ 210.661659][ T7755] RBP: 00007f9b703a6080 R08: 0000000000000000 R09: 0000000000000000 [ 210.661677][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b703a608c [ 210.661696][ T7755] R13: 0000000000000000 R14: 00007ffec0c09880 R15: 00007ffec0c09968 [ 210.661737][ T7755] [ 210.664507][ T7765] netlink: 5036 bytes leftover after parsing attributes in process `syz.3.404'. [ 211.408809][ T7793] FAULT_INJECTION: forcing a failure. [ 211.408809][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.426218][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.1.411 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 211.426252][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.426268][ T7793] Call Trace: [ 211.426277][ T7793] [ 211.426287][ T7793] dump_stack_lvl+0x16c/0x1f0 [ 211.426332][ T7793] should_fail_ex+0x512/0x640 [ 211.426370][ T7793] _copy_from_user+0x2e/0xd0 [ 211.426408][ T7793] cache_do_downcall+0x66/0x160 [ 211.426440][ T7793] cache_write_procfs+0xf0/0x160 [ 211.426472][ T7793] ? __pfx_cache_write_procfs+0x10/0x10 [ 211.426505][ T7793] proc_reg_write+0x23d/0x330 [ 211.426538][ T7793] vfs_write+0x25c/0x1180 [ 211.426585][ T7793] ? __pfx_proc_reg_write+0x10/0x10 [ 211.426618][ T7793] ? __pfx___mutex_lock+0x10/0x10 [ 211.426661][ T7793] ? __pfx_vfs_write+0x10/0x10 [ 211.426710][ T7793] ? __fget_files+0x20e/0x3c0 [ 211.426763][ T7793] ksys_write+0x12a/0x240 [ 211.426803][ T7793] ? __pfx_ksys_write+0x10/0x10 [ 211.426841][ T7793] ? rcu_is_watching+0x12/0xc0 [ 211.426898][ T7793] do_syscall_64+0xcd/0x260 [ 211.426958][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.426987][ T7793] RIP: 0033:0x7fb11df8d169 [ 211.427008][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.427045][ T7793] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.427068][ T7793] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 211.427085][ T7793] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000003 [ 211.427100][ T7793] RBP: 00007fb11ee98090 R08: 0000000000000000 R09: 0000000000000000 [ 211.427115][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.427129][ T7793] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 211.427163][ T7793] [ 213.196112][ T7840] FAULT_INJECTION: forcing a failure. [ 213.196112][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 213.209033][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.2.423 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 213.209064][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.209078][ T7840] Call Trace: [ 213.209087][ T7840] [ 213.209097][ T7840] dump_stack_lvl+0x16c/0x1f0 [ 213.209139][ T7840] should_fail_ex+0x512/0x640 [ 213.209170][ T7840] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 213.209210][ T7840] should_failslab+0xc2/0x120 [ 213.209236][ T7840] __kmalloc_cache_noprof+0x6a/0x3e0 [ 213.209273][ T7840] ? idtoname_parse+0x15b/0x700 [ 213.209301][ T7840] ? stack_trace_save+0x8e/0xc0 [ 213.209341][ T7840] idtoname_parse+0x15b/0x700 [ 213.209369][ T7840] ? arch_stack_walk+0xa6/0x100 [ 213.209406][ T7840] ? __pfx_idtoname_parse+0x10/0x10 [ 213.209436][ T7840] ? kasan_save_stack+0x42/0x60 [ 213.209473][ T7840] ? kasan_save_stack+0x33/0x60 [ 213.209509][ T7840] ? kasan_save_track+0x14/0x30 [ 213.209545][ T7840] ? __kasan_kmalloc+0xaa/0xb0 [ 213.209581][ T7840] ? __kvmalloc_node_noprof+0x279/0x600 [ 213.209617][ T7840] ? cache_write_procfs+0xd2/0x160 [ 213.209646][ T7840] ? proc_reg_write+0x23d/0x330 [ 213.209688][ T7840] ? ksys_write+0x12a/0x240 [ 213.209725][ T7840] ? do_syscall_64+0xcd/0x260 [ 213.209773][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.209849][ T7840] ? find_held_lock+0x2b/0x80 [ 213.209882][ T7840] ? __might_fault+0xe3/0x190 [ 213.209924][ T7840] ? __might_fault+0xe3/0x190 [ 213.209964][ T7840] ? __might_fault+0x13b/0x190 [ 213.210023][ T7840] cache_do_downcall+0xdd/0x160 [ 213.210056][ T7840] cache_write_procfs+0xf0/0x160 [ 213.210087][ T7840] ? __pfx_cache_write_procfs+0x10/0x10 [ 213.210120][ T7840] proc_reg_write+0x23d/0x330 [ 213.210152][ T7840] vfs_write+0x25c/0x1180 [ 213.210188][ T7840] ? __pfx_proc_reg_write+0x10/0x10 [ 213.210221][ T7840] ? __pfx___mutex_lock+0x10/0x10 [ 213.210263][ T7840] ? __pfx_vfs_write+0x10/0x10 [ 213.210314][ T7840] ? __fget_files+0x20e/0x3c0 [ 213.210367][ T7840] ksys_write+0x12a/0x240 [ 213.210406][ T7840] ? __pfx_ksys_write+0x10/0x10 [ 213.210443][ T7840] ? rcu_is_watching+0x12/0xc0 [ 213.210490][ T7840] do_syscall_64+0xcd/0x260 [ 213.210536][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.210565][ T7840] RIP: 0033:0x7feb6438d169 [ 213.210587][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.210614][ T7840] RSP: 002b:00007feb651bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.210640][ T7840] RAX: ffffffffffffffda RBX: 00007feb645a5fa0 RCX: 00007feb6438d169 [ 213.210656][ T7840] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000003 [ 213.210672][ T7840] RBP: 00007feb651bc090 R08: 0000000000000000 R09: 0000000000000000 [ 213.210688][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.210704][ T7840] R13: 0000000000000000 R14: 00007feb645a5fa0 R15: 00007ffff9fc3a78 [ 213.210748][ T7840] [ 215.944634][ T7868] random: crng reseeded on system resumption [ 216.277999][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 218.092054][ T7933] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 218.099878][ T7933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.454'. [ 219.074631][ T7951] openvswitch: netlink: Unknown nsh attribute 0 [ 219.596696][ T7959] netlink: 330 bytes leftover after parsing attributes in process `syz.3.460'. [ 220.260423][ T7965] FAULT_INJECTION: forcing a failure. [ 220.260423][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 220.298502][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.1.463 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 220.298538][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.298555][ T7965] Call Trace: [ 220.298564][ T7965] [ 220.298574][ T7965] dump_stack_lvl+0x16c/0x1f0 [ 220.298622][ T7965] should_fail_ex+0x512/0x640 [ 220.298655][ T7965] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 220.298708][ T7965] should_failslab+0xc2/0x120 [ 220.298735][ T7965] __kmalloc_cache_noprof+0x6a/0x3e0 [ 220.298773][ T7965] ? snd_seq_port_connect+0x61/0x550 [ 220.298820][ T7965] snd_seq_port_connect+0x61/0x550 [ 220.298861][ T7965] ? _raw_read_unlock+0x28/0x50 [ 220.298896][ T7965] ? check_subscription_permission.isra.0+0xf5/0x240 [ 220.298946][ T7965] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 220.299001][ T7965] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 220.299063][ T7965] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 220.299113][ T7965] snd_seq_oss_midi_open+0x442/0x660 [ 220.299148][ T7965] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 220.299202][ T7965] snd_seq_oss_midi_open_all+0x91/0xe0 [ 220.299240][ T7965] snd_seq_oss_open+0x810/0xa20 [ 220.299291][ T7965] odev_open+0x6f/0x90 [ 220.299328][ T7965] ? __pfx_odev_open+0x10/0x10 [ 220.299367][ T7965] soundcore_open+0x409/0x580 [ 220.299409][ T7965] ? __pfx_soundcore_open+0x10/0x10 [ 220.299446][ T7965] chrdev_open+0x231/0x6a0 [ 220.299488][ T7965] ? __pfx_apparmor_file_open+0x10/0x10 [ 220.299523][ T7965] ? __pfx_chrdev_open+0x10/0x10 [ 220.299570][ T7965] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 220.299616][ T7965] do_dentry_open+0x741/0x1c10 [ 220.299657][ T7965] ? __pfx_chrdev_open+0x10/0x10 [ 220.299707][ T7965] vfs_open+0x82/0x3f0 [ 220.299752][ T7965] path_openat+0x1e5e/0x2d40 [ 220.299830][ T7965] ? __pfx_path_openat+0x10/0x10 [ 220.299891][ T7965] do_filp_open+0x20b/0x470 [ 220.299942][ T7965] ? __pfx_do_filp_open+0x10/0x10 [ 220.300028][ T7965] ? alloc_fd+0x471/0x7d0 [ 220.300087][ T7965] do_sys_openat2+0x11b/0x1d0 [ 220.300122][ T7965] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.300159][ T7965] ? __sys_sendmsg+0x199/0x220 [ 220.300214][ T7965] __x64_sys_openat+0x174/0x210 [ 220.300249][ T7965] ? __pfx___x64_sys_openat+0x10/0x10 [ 220.300288][ T7965] ? rcu_is_watching+0x12/0xc0 [ 220.300339][ T7965] do_syscall_64+0xcd/0x260 [ 220.300392][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.300425][ T7965] RIP: 0033:0x7fb11df8d169 [ 220.300450][ T7965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.300482][ T7965] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.300511][ T7965] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 220.300532][ T7965] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 220.300553][ T7965] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 220.300572][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.300591][ T7965] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 220.300632][ T7965] [ 220.696962][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 220.793075][ T7969] netlink: 338 bytes leftover after parsing attributes in process `syz.2.465'. [ 221.169385][ T5856] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 221.323440][ T30] audit: type=1800 audit(6039621758.737:3): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="dbroot" dev="configfs" ino=16045 res=0 errno=0 [ 221.764035][ T8020] ptrace attach of "./syz-executor exec"[5842] was attempted by ""[8020] [ 222.799749][ T8047] Invalid ELF header magic: != ELF [ 222.937991][ T8047] Invalid ELF header magic: != ELF [ 223.005959][ T8047] Invalid ELF header magic: != ELF [ 223.040865][ T8047] Invalid ELF header magic: != ELF [ 223.068595][ T8047] Invalid ELF header magic: != ELF [ 223.108087][ T8047] Invalid ELF header magic: != ELF [ 223.122934][ T8047] Invalid ELF header magic: != ELF [ 223.158641][ T8047] Invalid ELF header magic: != ELF [ 223.179540][ T8047] Invalid ELF header magic: != ELF [ 223.192682][ T8047] Invalid ELF header magic: != ELF [ 223.216189][ T8047] Invalid ELF header magic: != ELF [ 223.226889][ T8047] Invalid ELF header magic: != ELF [ 223.249643][ T8047] Invalid ELF header magic: != ELF [ 223.276381][ T8047] Invalid ELF header magic: != ELF [ 224.090833][ T8083] netlink: 'syz.2.495': attribute type 16 has an invalid length. [ 224.116981][ T8083] netlink: 330 bytes leftover after parsing attributes in process `syz.2.495'. [ 225.128106][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 225.209948][ T8101] program syz.2.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.277373][ T8105] netlink: 'syz.2.498': attribute type 5 has an invalid length. [ 226.166183][ T8123] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.892705][ T5856] Bluetooth: hci3: unexpected event 0x09 length: 11 > 3 [ 232.641620][ T8228] random: crng reseeded on system resumption [ 232.665752][ T8228] FAULT_INJECTION: forcing a failure. [ 232.665752][ T8228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.713803][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.0.531 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 232.713844][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.713868][ T8228] Call Trace: [ 232.713879][ T8228] [ 232.713895][ T8228] dump_stack_lvl+0x16c/0x1f0 [ 232.713948][ T8228] should_fail_ex+0x512/0x640 [ 232.713992][ T8228] should_fail_alloc_page+0xe7/0x130 [ 232.714026][ T8228] prepare_alloc_pages+0x3c2/0x610 [ 232.714066][ T8228] ? rcu_is_watching+0x12/0xc0 [ 232.714111][ T8228] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 232.714174][ T8228] ? stack_trace_save+0x8e/0xc0 [ 232.714217][ T8228] ? __pfx_stack_trace_save+0x10/0x10 [ 232.714260][ T8228] ? stack_depot_save_flags+0x28/0xa50 [ 232.714310][ T8228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.714358][ T8228] ? kasan_save_stack+0x42/0x60 [ 232.714399][ T8228] ? kasan_save_stack+0x33/0x60 [ 232.714438][ T8228] ? kasan_save_track+0x14/0x30 [ 232.714485][ T8228] ? vfs_open+0x82/0x3f0 [ 232.714510][ T8228] ? path_openat+0x1e5e/0x2d40 [ 232.714550][ T8228] ? do_filp_open+0x20b/0x470 [ 232.714589][ T8228] ? do_sys_openat2+0x11b/0x1d0 [ 232.714617][ T8228] ? __x64_sys_openat+0x174/0x210 [ 232.714646][ T8228] ? do_syscall_64+0xcd/0x260 [ 232.714688][ T8228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.714719][ T8228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.714749][ T8228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.714782][ T8228] ? policy_nodemask+0xea/0x4e0 [ 232.714832][ T8228] alloc_pages_mpol+0x1fb/0x550 [ 232.714869][ T8228] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.714909][ T8228] alloc_pages_noprof+0x131/0x390 [ 232.714940][ T8228] get_zeroed_page_noprof+0x14/0x50 [ 232.714973][ T8228] get_image_page+0x18/0x190 [ 232.715011][ T8228] alloc_rtree_node+0x3c/0xb0 [ 232.715048][ T8228] memory_bm_create+0x515/0x810 [ 232.715100][ T8228] create_basic_memory_bitmaps+0x10f/0x680 [ 232.715148][ T8228] snapshot_open+0x235/0x2b0 [ 232.715189][ T8228] ? __pfx_snapshot_open+0x10/0x10 [ 232.715232][ T8228] misc_open+0x35a/0x420 [ 232.715270][ T8228] ? __pfx_misc_open+0x10/0x10 [ 232.715306][ T8228] chrdev_open+0x231/0x6a0 [ 232.715349][ T8228] ? __pfx_apparmor_file_open+0x10/0x10 [ 232.715387][ T8228] ? __pfx_chrdev_open+0x10/0x10 [ 232.715435][ T8228] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 232.715484][ T8228] do_dentry_open+0x741/0x1c10 [ 232.715527][ T8228] ? __pfx_chrdev_open+0x10/0x10 [ 232.715580][ T8228] vfs_open+0x82/0x3f0 [ 232.715614][ T8228] path_openat+0x1e5e/0x2d40 [ 232.715672][ T8228] ? __pfx_path_openat+0x10/0x10 [ 232.715727][ T8228] do_filp_open+0x20b/0x470 [ 232.715777][ T8228] ? __pfx_do_filp_open+0x10/0x10 [ 232.715858][ T8228] ? alloc_fd+0x471/0x7d0 [ 232.715910][ T8228] do_sys_openat2+0x11b/0x1d0 [ 232.715940][ T8228] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.715985][ T8228] __x64_sys_openat+0x174/0x210 [ 232.716018][ T8228] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.716052][ T8228] ? rcu_is_watching+0x12/0xc0 [ 232.716100][ T8228] do_syscall_64+0xcd/0x260 [ 232.716147][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.716176][ T8228] RIP: 0033:0x7f9b7018d169 [ 232.716200][ T8228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.716227][ T8228] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.716255][ T8228] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 232.716273][ T8228] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 232.716291][ T8228] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 232.716307][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.716324][ T8228] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 232.716361][ T8228] [ 237.613407][ T8306] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 237.643356][ T8306] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 237.687511][ T8306] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 237.728504][ T8306] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 237.861741][ T8314] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 237.915063][ T8314] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 237.928654][ T8314] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 237.952966][ T8314] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 238.105209][ T8323] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 238.126895][ T8323] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 238.154660][ T8323] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 238.195625][ T8323] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 238.751636][ T8339] openvswitch: netlink: Key type 193 is out of range max 32 [ 239.730112][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.563'. [ 240.297571][ T8377] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.344689][ T8377] CIFS: VFS: Unsupported security flags: 0x200 [ 242.375645][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 242.899847][ T8424] FAULT_INJECTION: forcing a failure. [ 242.899847][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 242.930929][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.0.580 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 242.930973][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.930997][ T8424] Call Trace: [ 242.931009][ T8424] [ 242.931021][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 242.931077][ T8424] should_fail_ex+0x512/0x640 [ 242.931113][ T8424] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 242.931169][ T8424] should_failslab+0xc2/0x120 [ 242.931199][ T8424] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 242.931248][ T8424] ? do_raw_spin_unlock+0x172/0x230 [ 242.931286][ T8424] ? alloc_inode+0xc3/0x240 [ 242.931328][ T8424] alloc_inode+0xc3/0x240 [ 242.931364][ T8424] new_inode+0x22/0x1c0 [ 242.931404][ T8424] nfsd_get_inode+0x1a/0x190 [ 242.931455][ T8424] nfsd_fill_super+0x18e/0x530 [ 242.931509][ T8424] ? __pfx_nfsd_fill_super+0x10/0x10 [ 242.931560][ T8424] get_tree_keyed+0x10b/0x1d0 [ 242.931608][ T8424] vfs_get_tree+0x8b/0x340 [ 242.931652][ T8424] path_mount+0x14d4/0x1f30 [ 242.931686][ T8424] ? kmem_cache_free+0x2d4/0x4d0 [ 242.931733][ T8424] ? __pfx_path_mount+0x10/0x10 [ 242.931771][ T8424] ? putname+0x154/0x1a0 [ 242.931808][ T8424] __x64_sys_mount+0x28d/0x310 [ 242.931841][ T8424] ? __pfx___x64_sys_mount+0x10/0x10 [ 242.931871][ T8424] ? rcu_is_watching+0x12/0xc0 [ 242.931923][ T8424] do_syscall_64+0xcd/0x260 [ 242.931976][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.932026][ T8424] RIP: 0033:0x7f9b7018d169 [ 242.932052][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.932081][ T8424] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.932110][ T8424] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 242.932129][ T8424] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 242.932148][ T8424] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 242.932166][ T8424] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 242.932182][ T8424] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 242.932222][ T8424] [ 243.390042][ T8427] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 243.958482][ T5856] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 244.576344][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 245.562463][ T8475] FAULT_INJECTION: forcing a failure. [ 245.562463][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 245.804123][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.1.592 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 245.804155][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.804168][ T8475] Call Trace: [ 245.804175][ T8475] [ 245.804196][ T8475] dump_stack_lvl+0x16c/0x1f0 [ 245.804233][ T8475] should_fail_ex+0x512/0x640 [ 245.804269][ T8475] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 245.804304][ T8475] should_failslab+0xc2/0x120 [ 245.804323][ T8475] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 245.804352][ T8475] ? find_held_lock+0x2b/0x80 [ 245.804378][ T8475] ? alloc_vfsmnt+0x23/0x6f0 [ 245.804402][ T8475] alloc_vfsmnt+0x23/0x6f0 [ 245.804424][ T8475] vfs_create_mount+0x93/0x500 [ 245.804453][ T8475] path_mount+0x19e8/0x1f30 [ 245.804473][ T8475] ? kmem_cache_free+0x2d4/0x4d0 [ 245.804503][ T8475] ? __pfx_path_mount+0x10/0x10 [ 245.804526][ T8475] ? putname+0x154/0x1a0 [ 245.804548][ T8475] __x64_sys_mount+0x28d/0x310 [ 245.804568][ T8475] ? __pfx___x64_sys_mount+0x10/0x10 [ 245.804587][ T8475] ? rcu_is_watching+0x12/0xc0 [ 245.804619][ T8475] do_syscall_64+0xcd/0x260 [ 245.804658][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.804679][ T8475] RIP: 0033:0x7fb11df8d169 [ 245.804695][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.804715][ T8475] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.804734][ T8475] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 245.804748][ T8475] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 245.804760][ T8475] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 245.804772][ T8475] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 245.804784][ T8475] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 245.804809][ T8475] [ 250.127496][ T5846] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 250.127537][ T5846] Bluetooth: hci3: unexpected subevent 0x05 length: 725 > 12 [ 251.228201][ T5846] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 251.351544][ T8579] netlink: 'syz.1.619': attribute type 11 has an invalid length. [ 252.173821][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.186334][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'. [ 258.039524][ T8715] WARNING! power/level is deprecated; use power/control instead [ 258.269363][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 259.229784][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 259.309627][ T8735] netlink: 13 bytes leftover after parsing attributes in process `syz.1.662'. [ 260.056980][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.063418][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.793384][ T8774] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 260.852263][ T8774] ep_00: uevent: failed to send synthetic uevent: -22 [ 260.953663][ T8774] netlink: 214 bytes leftover after parsing attributes in process `syz.1.673'. [ 260.990106][ T8774] netlink: 118 bytes leftover after parsing attributes in process `syz.1.673'. [ 261.103581][ T8779] netlink: 504 bytes leftover after parsing attributes in process `syz.0.674'. [ 263.300938][ T8823] FAULT_INJECTION: forcing a failure. [ 263.300938][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 263.351539][ T8823] CPU: 0 UID: 0 PID: 8823 Comm: syz.0.686 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 263.351582][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.351599][ T8823] Call Trace: [ 263.351609][ T8823] [ 263.351620][ T8823] dump_stack_lvl+0x16c/0x1f0 [ 263.351669][ T8823] should_fail_ex+0x512/0x640 [ 263.351703][ T8823] ? fs_reclaim_acquire+0xae/0x150 [ 263.351742][ T8823] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.351795][ T8823] should_failslab+0xc2/0x120 [ 263.351823][ T8823] __kmalloc_noprof+0xd2/0x510 [ 263.351897][ T8823] tomoyo_realpath_from_path+0xc2/0x6e0 [ 263.351944][ T8823] ? tomoyo_profile+0x47/0x60 [ 263.351996][ T8823] tomoyo_path_number_perm+0x245/0x580 [ 263.352032][ T8823] ? tomoyo_path_number_perm+0x237/0x580 [ 263.352073][ T8823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.352126][ T8823] ? kmem_cache_free+0x2d4/0x4d0 [ 263.352192][ T8823] ? __pfx___might_resched+0x10/0x10 [ 263.352236][ T8823] ? hook_file_ioctl_common+0x145/0x410 [ 263.352273][ T8823] ? __x64_sys_futex+0x1e0/0x4c0 [ 263.352333][ T8823] ? __x64_sys_futex+0x1e9/0x4c0 [ 263.352383][ T8823] ? xfd_validate_state+0x5d/0x180 [ 263.352423][ T8823] security_file_ioctl+0x9b/0x240 [ 263.352463][ T8823] __x64_sys_ioctl+0xb7/0x200 [ 263.352507][ T8823] do_syscall_64+0xcd/0x260 [ 263.352589][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.352621][ T8823] RIP: 0033:0x7f9b7018d169 [ 263.352646][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.352675][ T8823] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.352717][ T8823] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 263.352737][ T8823] RDX: 0000000000000000 RSI: 0000000040045108 RDI: 0000000000000003 [ 263.352764][ T8823] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 263.352783][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.352801][ T8823] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 263.352841][ T8823] [ 263.562933][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.694162][ T8823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.102931][ T8840] FAULT_INJECTION: forcing a failure. [ 264.102931][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 264.188459][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.1.690 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 264.188498][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.188513][ T8840] Call Trace: [ 264.188522][ T8840] [ 264.188531][ T8840] dump_stack_lvl+0x16c/0x1f0 [ 264.188575][ T8840] should_fail_ex+0x512/0x640 [ 264.188604][ T8840] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 264.188647][ T8840] should_failslab+0xc2/0x120 [ 264.188672][ T8840] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 264.188714][ T8840] ? __d_alloc+0x31/0xaa0 [ 264.188742][ T8840] __d_alloc+0x31/0xaa0 [ 264.188768][ T8840] d_alloc+0x4a/0x1e0 [ 264.188797][ T8840] d_alloc_name+0x83/0xb0 [ 264.188820][ T8840] ? __pfx_d_alloc_name+0x10/0x10 [ 264.188845][ T8840] ? do_raw_spin_unlock+0x172/0x230 [ 264.188880][ T8840] nfsd_mkdir+0x59/0x3a0 [ 264.188922][ T8840] nfsd_fill_super+0x3b4/0x530 [ 264.188976][ T8840] ? __pfx_nfsd_fill_super+0x10/0x10 [ 264.189018][ T8840] get_tree_keyed+0x10b/0x1d0 [ 264.189055][ T8840] vfs_get_tree+0x8b/0x340 [ 264.189085][ T8840] path_mount+0x14d4/0x1f30 [ 264.189110][ T8840] ? kmem_cache_free+0x2d4/0x4d0 [ 264.189156][ T8840] ? __pfx_path_mount+0x10/0x10 [ 264.189182][ T8840] ? putname+0x154/0x1a0 [ 264.189207][ T8840] __x64_sys_mount+0x28d/0x310 [ 264.189231][ T8840] ? __pfx___x64_sys_mount+0x10/0x10 [ 264.189252][ T8840] ? rcu_is_watching+0x12/0xc0 [ 264.189289][ T8840] do_syscall_64+0xcd/0x260 [ 264.189327][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.189352][ T8840] RIP: 0033:0x7fb11df8d169 [ 264.189371][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.189394][ T8840] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.189416][ T8840] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 264.189431][ T8840] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 264.189445][ T8840] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 264.189459][ T8840] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 264.189473][ T8840] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 264.189502][ T8840] [ 264.419487][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.756132][ T8890] FAULT_INJECTION: forcing a failure. [ 266.756132][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 266.797282][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.0.702 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 266.797319][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.797337][ T8890] Call Trace: [ 266.797346][ T8890] [ 266.797356][ T8890] dump_stack_lvl+0x16c/0x1f0 [ 266.797406][ T8890] should_fail_ex+0x512/0x640 [ 266.797439][ T8890] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 266.797492][ T8890] should_failslab+0xc2/0x120 [ 266.797538][ T8890] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 266.797584][ T8890] ? do_raw_spin_unlock+0x172/0x230 [ 266.797620][ T8890] ? alloc_inode+0xc3/0x240 [ 266.797660][ T8890] alloc_inode+0xc3/0x240 [ 266.797693][ T8890] new_inode+0x22/0x1c0 [ 266.797741][ T8890] nfsd_get_inode+0x1a/0x190 [ 266.797790][ T8890] nfsd_fill_super+0x18e/0x530 [ 266.797841][ T8890] ? __pfx_nfsd_fill_super+0x10/0x10 [ 266.797891][ T8890] get_tree_keyed+0x10b/0x1d0 [ 266.797937][ T8890] vfs_get_tree+0x8b/0x340 [ 266.797973][ T8890] path_mount+0x14d4/0x1f30 [ 266.798005][ T8890] ? kmem_cache_free+0x2d4/0x4d0 [ 266.798049][ T8890] ? __pfx_path_mount+0x10/0x10 [ 266.798084][ T8890] ? putname+0x154/0x1a0 [ 266.798118][ T8890] __x64_sys_mount+0x28d/0x310 [ 266.798148][ T8890] ? __pfx___x64_sys_mount+0x10/0x10 [ 266.798175][ T8890] ? rcu_is_watching+0x12/0xc0 [ 266.798223][ T8890] do_syscall_64+0xcd/0x260 [ 266.798274][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.798305][ T8890] RIP: 0033:0x7f9b7018d169 [ 266.798339][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.798366][ T8890] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.798392][ T8890] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 266.798411][ T8890] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 266.798428][ T8890] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 266.798444][ T8890] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 266.798461][ T8890] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 266.798496][ T8890] [ 267.211679][ T8898] FAULT_INJECTION: forcing a failure. [ 267.211679][ T8898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.280343][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.1.706 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 267.280379][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.280401][ T8898] Call Trace: [ 267.280427][ T8898] [ 267.280438][ T8898] dump_stack_lvl+0x16c/0x1f0 [ 267.280488][ T8898] should_fail_ex+0x512/0x640 [ 267.280529][ T8898] _copy_from_user+0x2e/0xd0 [ 267.280568][ T8898] copy_msghdr_from_user+0x98/0x160 [ 267.280610][ T8898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.280670][ T8898] ___sys_sendmsg+0xfe/0x1d0 [ 267.280713][ T8898] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.280808][ T8898] __sys_sendmsg+0x16d/0x220 [ 267.280847][ T8898] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.280895][ T8898] ? rcu_is_watching+0x12/0xc0 [ 267.280941][ T8898] do_syscall_64+0xcd/0x260 [ 267.280987][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.281016][ T8898] RIP: 0033:0x7fb11df8d169 [ 267.281038][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.281065][ T8898] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.281091][ T8898] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 267.281109][ T8898] RDX: 00000000000480b0 RSI: 0000200000000240 RDI: 0000000000000003 [ 267.281126][ T8898] RBP: 00007fb11ee98090 R08: 0000000000000000 R09: 0000000000000000 [ 267.281143][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.281159][ T8898] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 267.281195][ T8898] [ 268.792202][ T8924] FAULT_INJECTION: forcing a failure. [ 268.792202][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 268.867347][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.1.715 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 268.867427][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.867464][ T8924] Call Trace: [ 268.867483][ T8924] [ 268.867505][ T8924] dump_stack_lvl+0x16c/0x1f0 [ 268.867574][ T8924] should_fail_ex+0x512/0x640 [ 268.867611][ T8924] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 268.867668][ T8924] should_failslab+0xc2/0x120 [ 268.867699][ T8924] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 268.867760][ T8924] ? find_held_lock+0x2b/0x80 [ 268.867800][ T8924] ? alloc_vfsmnt+0x23/0x6f0 [ 268.867839][ T8924] alloc_vfsmnt+0x23/0x6f0 [ 268.867875][ T8924] vfs_create_mount+0x93/0x500 [ 268.867921][ T8924] path_mount+0x19e8/0x1f30 [ 268.867954][ T8924] ? kmem_cache_free+0x2d4/0x4d0 [ 268.868000][ T8924] ? __pfx_path_mount+0x10/0x10 [ 268.868036][ T8924] ? putname+0x154/0x1a0 [ 268.868072][ T8924] __x64_sys_mount+0x28d/0x310 [ 268.868104][ T8924] ? __pfx___x64_sys_mount+0x10/0x10 [ 268.868133][ T8924] ? rcu_is_watching+0x12/0xc0 [ 268.868184][ T8924] do_syscall_64+0xcd/0x260 [ 268.868240][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.868273][ T8924] RIP: 0033:0x7fb11df8d169 [ 268.868308][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.868340][ T8924] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 268.868385][ T8924] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 268.868405][ T8924] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 268.868424][ T8924] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 268.868442][ T8924] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 268.868460][ T8924] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 268.868499][ T8924] [ 268.972230][ T8917] bridge0: port 3(gretap0) entered blocking state [ 269.123392][ T8917] bridge0: port 3(gretap0) entered disabled state [ 269.130031][ T8917] gretap0: entered allmulticast mode [ 269.154757][ T8917] gretap0: entered promiscuous mode [ 269.160628][ T8917] bridge0: port 3(gretap0) entered blocking state [ 269.167261][ T8917] bridge0: port 3(gretap0) entered forwarding state [ 269.457002][ T8930] FAULT_INJECTION: forcing a failure. [ 269.457002][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 269.520665][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.1.716 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 269.520703][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.520720][ T8930] Call Trace: [ 269.520729][ T8930] [ 269.520738][ T8930] dump_stack_lvl+0x16c/0x1f0 [ 269.520786][ T8930] should_fail_ex+0x512/0x640 [ 269.520822][ T8930] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 269.520871][ T8930] should_failslab+0xc2/0x120 [ 269.520899][ T8930] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 269.520943][ T8930] ? acpi_ut_create_integer_object+0x64/0x180 [ 269.520980][ T8930] ? acpi_ds_init_aml_walk+0x2d3/0x590 [ 269.521012][ T8930] acpi_ut_create_integer_object+0x64/0x180 [ 269.521050][ T8930] acpi_ps_execute_method+0x516/0xb30 [ 269.521081][ T8930] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 269.521118][ T8930] acpi_ns_evaluate+0x76c/0xca0 [ 269.521150][ T8930] ? kasan_save_track+0x14/0x30 [ 269.521194][ T8930] acpi_evaluate_object+0x1fa/0xa90 [ 269.521239][ T8930] ? do_syscall_64+0xcd/0x260 [ 269.521280][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.521310][ T8930] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 269.521355][ T8930] ? __mutex_trylock_common+0xe9/0x250 [ 269.521388][ T8930] acpi_evaluate_integer+0xdd/0x200 [ 269.521427][ T8930] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 269.521496][ T8930] ? __pfx_status_show+0x10/0x10 [ 269.521541][ T8930] status_show+0xa0/0x120 [ 269.521585][ T8930] ? __pfx_status_show+0x10/0x10 [ 269.521638][ T8930] dev_attr_show+0x53/0xe0 [ 269.521669][ T8930] ? __pfx_dev_attr_show+0x10/0x10 [ 269.521695][ T8930] sysfs_kf_seq_show+0x213/0x3e0 [ 269.521742][ T8930] seq_read_iter+0x506/0x12c0 [ 269.521797][ T8930] kernfs_fop_read_iter+0x40f/0x5a0 [ 269.521832][ T8930] ? rw_verify_area+0xcf/0x680 [ 269.521870][ T8930] vfs_read+0x8c8/0xc70 [ 269.521914][ T8930] ? __pfx___mutex_lock+0x10/0x10 [ 269.521956][ T8930] ? __pfx_vfs_read+0x10/0x10 [ 269.522019][ T8930] ksys_read+0x12a/0x240 [ 269.522058][ T8930] ? __pfx_ksys_read+0x10/0x10 [ 269.522095][ T8930] ? rcu_is_watching+0x12/0xc0 [ 269.522141][ T8930] do_syscall_64+0xcd/0x260 [ 269.522186][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.522215][ T8930] RIP: 0033:0x7fb11df8d169 [ 269.522236][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.522262][ T8930] RSP: 002b:00007fb11ee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.522287][ T8930] RAX: ffffffffffffffda RBX: 00007fb11e1a6080 RCX: 00007fb11df8d169 [ 269.522304][ T8930] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 269.522321][ T8930] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 269.522337][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.522352][ T8930] R13: 0000000000000000 R14: 00007fb11e1a6080 R15: 00007ffcbcb0e1e8 [ 269.522389][ T8930] [ 269.523406][ T8930] ACPI Error: [ 269.826273][ T8939] FAULT_INJECTION: forcing a failure. [ 269.826273][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 269.864490][ T8930] Could not allocate an object descriptor (20240827/utobject-180) [ 269.872576][ T8930] ACPI Error: ffff888027f02000 walk still has a scope list (20240827/dswstate-694) [ 269.916196][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.0.719 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 269.916234][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.916252][ T8939] Call Trace: [ 269.916263][ T8939] [ 269.916274][ T8939] dump_stack_lvl+0x16c/0x1f0 [ 269.916324][ T8939] should_fail_ex+0x512/0x640 [ 269.916366][ T8939] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 269.916431][ T8939] should_failslab+0xc2/0x120 [ 269.916465][ T8939] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 269.916522][ T8939] ? __alloc_skb+0x2b2/0x380 [ 269.916563][ T8939] __alloc_skb+0x2b2/0x380 [ 269.916598][ T8939] ? __pfx___alloc_skb+0x10/0x10 [ 269.916637][ T8939] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 269.916679][ T8939] ? __lock_acquire+0xaa4/0x1ba0 [ 269.916730][ T8939] netlink_alloc_large_skb+0x69/0x130 [ 269.916775][ T8939] netlink_sendmsg+0x6a1/0xdd0 [ 269.916824][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.916881][ T8939] ____sys_sendmsg+0xa95/0xc70 [ 269.916909][ T8939] ? copy_msghdr_from_user+0x10a/0x160 [ 269.916946][ T8939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.916990][ T8939] ___sys_sendmsg+0x134/0x1d0 [ 269.917030][ T8939] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.917113][ T8939] __sys_sendmsg+0x16d/0x220 [ 269.917153][ T8939] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.917202][ T8939] ? rcu_is_watching+0x12/0xc0 [ 269.917253][ T8939] do_syscall_64+0xcd/0x260 [ 269.917299][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.917328][ T8939] RIP: 0033:0x7f9b7018d169 [ 269.917349][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.917375][ T8939] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.917401][ T8939] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 269.917419][ T8939] RDX: 00000000000480b0 RSI: 0000200000000240 RDI: 0000000000000003 [ 269.917437][ T8939] RBP: 00007f9b710c3090 R08: 0000000000000000 R09: 0000000000000000 [ 269.917454][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.917476][ T8939] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 269.917512][ T8939] [ 271.169632][ T8950] nbd: couldn't find a device at index 64 [ 274.616686][ T9018] FAULT_INJECTION: forcing a failure. [ 274.616686][ T9018] name failslab, interval 1, probability 0, space 0, times 0 [ 274.653911][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.2.742 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 274.653952][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.653979][ T9018] Call Trace: [ 274.653989][ T9018] [ 274.654001][ T9018] dump_stack_lvl+0x16c/0x1f0 [ 274.654054][ T9018] should_fail_ex+0x512/0x640 [ 274.654092][ T9018] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 274.654148][ T9018] should_failslab+0xc2/0x120 [ 274.654179][ T9018] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 274.654228][ T9018] ? find_held_lock+0x2b/0x80 [ 274.654268][ T9018] ? alloc_vfsmnt+0x23/0x6f0 [ 274.654307][ T9018] alloc_vfsmnt+0x23/0x6f0 [ 274.654344][ T9018] vfs_create_mount+0x93/0x500 [ 274.654389][ T9018] path_mount+0x19e8/0x1f30 [ 274.654422][ T9018] ? kmem_cache_free+0x2d4/0x4d0 [ 274.654469][ T9018] ? __pfx_path_mount+0x10/0x10 [ 274.654505][ T9018] ? putname+0x154/0x1a0 [ 274.654541][ T9018] __x64_sys_mount+0x28d/0x310 [ 274.654572][ T9018] ? __pfx___x64_sys_mount+0x10/0x10 [ 274.654601][ T9018] ? rcu_is_watching+0x12/0xc0 [ 274.654653][ T9018] do_syscall_64+0xcd/0x260 [ 274.654719][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.654754][ T9018] RIP: 0033:0x7feb6438d169 [ 274.654779][ T9018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.654810][ T9018] RSP: 002b:00007feb6519b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.654840][ T9018] RAX: ffffffffffffffda RBX: 00007feb645a6080 RCX: 00007feb6438d169 [ 274.654862][ T9018] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 274.654881][ T9018] RBP: 00007feb6440e990 R08: 0000000000000000 R09: 0000000000000000 [ 274.654900][ T9018] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 274.654918][ T9018] R13: 0000000000000000 R14: 00007feb645a6080 R15: 00007ffff9fc3a78 [ 274.654958][ T9018] [ 275.520576][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 276.107875][ T9043] FAULT_INJECTION: forcing a failure. [ 276.107875][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 276.136278][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.2.751 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 276.136328][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.136345][ T9043] Call Trace: [ 276.136355][ T9043] [ 276.136365][ T9043] dump_stack_lvl+0x16c/0x1f0 [ 276.136413][ T9043] should_fail_ex+0x512/0x640 [ 276.136446][ T9043] ? fs_reclaim_acquire+0xae/0x150 [ 276.136487][ T9043] should_failslab+0xc2/0x120 [ 276.136514][ T9043] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 276.136561][ T9043] ? security_inode_alloc+0x3b/0x2b0 [ 276.136599][ T9043] security_inode_alloc+0x3b/0x2b0 [ 276.136633][ T9043] inode_init_always_gfp+0xce4/0x1030 [ 276.136684][ T9043] alloc_inode+0x86/0x240 [ 276.136717][ T9043] new_inode+0x22/0x1c0 [ 276.136753][ T9043] simple_fill_super+0x306/0x720 [ 276.136804][ T9043] ? __pfx_nfsd_fill_super+0x10/0x10 [ 276.136851][ T9043] nfsd_fill_super+0x90/0x530 [ 276.136897][ T9043] ? __pfx_set_anon_super_fc+0x10/0x10 [ 276.136943][ T9043] ? __pfx_nfsd_fill_super+0x10/0x10 [ 276.136990][ T9043] get_tree_keyed+0x10b/0x1d0 [ 276.137033][ T9043] vfs_get_tree+0x8b/0x340 [ 276.137068][ T9043] path_mount+0x14d4/0x1f30 [ 276.137098][ T9043] ? kmem_cache_free+0x2d4/0x4d0 [ 276.137152][ T9043] ? __pfx_path_mount+0x10/0x10 [ 276.137183][ T9043] ? putname+0x154/0x1a0 [ 276.137214][ T9043] __x64_sys_mount+0x28d/0x310 [ 276.137241][ T9043] ? __pfx___x64_sys_mount+0x10/0x10 [ 276.137266][ T9043] ? rcu_is_watching+0x12/0xc0 [ 276.137310][ T9043] do_syscall_64+0xcd/0x260 [ 276.137351][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.137379][ T9043] RIP: 0033:0x7feb6438d169 [ 276.137400][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.137424][ T9043] RSP: 002b:00007feb651bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.137449][ T9043] RAX: ffffffffffffffda RBX: 00007feb645a5fa0 RCX: 00007feb6438d169 [ 276.137466][ T9043] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 276.137481][ T9043] RBP: 00007feb6440e990 R08: 0000000000000000 R09: 0000000000000000 [ 276.137496][ T9043] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 276.137511][ T9043] R13: 0000000000000000 R14: 00007feb645a5fa0 R15: 00007ffff9fc3a78 [ 276.137545][ T9043] [ 279.082721][ T9095] FAULT_INJECTION: forcing a failure. [ 279.082721][ T9095] name failslab, interval 1, probability 0, space 0, times 0 [ 279.155920][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.2.765 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 279.155962][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.155980][ T9095] Call Trace: [ 279.155989][ T9095] [ 279.156001][ T9095] dump_stack_lvl+0x16c/0x1f0 [ 279.156053][ T9095] should_fail_ex+0x512/0x640 [ 279.156090][ T9095] ? fs_reclaim_acquire+0xae/0x150 [ 279.156134][ T9095] should_failslab+0xc2/0x120 [ 279.156164][ T9095] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 279.156215][ T9095] ? security_inode_alloc+0x3b/0x2b0 [ 279.156257][ T9095] security_inode_alloc+0x3b/0x2b0 [ 279.156294][ T9095] inode_init_always_gfp+0xce4/0x1030 [ 279.156348][ T9095] alloc_inode+0x86/0x240 [ 279.156384][ T9095] new_inode+0x22/0x1c0 [ 279.156423][ T9095] simple_fill_super+0x306/0x720 [ 279.156494][ T9095] ? __pfx_nfsd_fill_super+0x10/0x10 [ 279.156548][ T9095] nfsd_fill_super+0x90/0x530 [ 279.156607][ T9095] ? __pfx_set_anon_super_fc+0x10/0x10 [ 279.156652][ T9095] ? __pfx_nfsd_fill_super+0x10/0x10 [ 279.156715][ T9095] get_tree_keyed+0x10b/0x1d0 [ 279.156762][ T9095] vfs_get_tree+0x8b/0x340 [ 279.156799][ T9095] path_mount+0x14d4/0x1f30 [ 279.156832][ T9095] ? kmem_cache_free+0x2d4/0x4d0 [ 279.156876][ T9095] ? __pfx_path_mount+0x10/0x10 [ 279.156913][ T9095] ? putname+0x154/0x1a0 [ 279.156948][ T9095] __x64_sys_mount+0x28d/0x310 [ 279.156979][ T9095] ? __pfx___x64_sys_mount+0x10/0x10 [ 279.157007][ T9095] ? rcu_is_watching+0x12/0xc0 [ 279.157059][ T9095] do_syscall_64+0xcd/0x260 [ 279.157110][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.157142][ T9095] RIP: 0033:0x7feb6438d169 [ 279.157167][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.157197][ T9095] RSP: 002b:00007feb651bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.157225][ T9095] RAX: ffffffffffffffda RBX: 00007feb645a5fa0 RCX: 00007feb6438d169 [ 279.157246][ T9095] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 279.157266][ T9095] RBP: 00007feb6440e990 R08: 0000000000000000 R09: 0000000000000000 [ 279.157284][ T9095] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 279.157302][ T9095] R13: 0000000000000000 R14: 00007feb645a5fa0 R15: 00007ffff9fc3a78 [ 279.157341][ T9095] [ 280.566539][ T9116] sysfs_service_op_show: Client not running :-5: [ 280.801228][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 281.357038][ T9135] FAULT_INJECTION: forcing a failure. [ 281.357038][ T9135] name failslab, interval 1, probability 0, space 0, times 0 [ 281.381597][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.2.775 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 281.381637][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.381655][ T9135] Call Trace: [ 281.381663][ T9135] [ 281.381674][ T9135] dump_stack_lvl+0x16c/0x1f0 [ 281.381739][ T9135] should_fail_ex+0x512/0x640 [ 281.381774][ T9135] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 281.381826][ T9135] should_failslab+0xc2/0x120 [ 281.381854][ T9135] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 281.381903][ T9135] ? __d_alloc+0x31/0xaa0 [ 281.381937][ T9135] __d_alloc+0x31/0xaa0 [ 281.381966][ T9135] ? __pfx_nfsd_fill_super+0x10/0x10 [ 281.382013][ T9135] d_alloc+0x4a/0x1e0 [ 281.382041][ T9135] ? __pfx_nfsd_fill_super+0x10/0x10 [ 281.382087][ T9135] d_alloc_name+0x83/0xb0 [ 281.382124][ T9135] ? __pfx_d_alloc_name+0x10/0x10 [ 281.382163][ T9135] nfsd_fill_super+0x12a/0x530 [ 281.382213][ T9135] ? __pfx_nfsd_fill_super+0x10/0x10 [ 281.382259][ T9135] get_tree_keyed+0x10b/0x1d0 [ 281.382303][ T9135] vfs_get_tree+0x8b/0x340 [ 281.382338][ T9135] path_mount+0x14d4/0x1f30 [ 281.382369][ T9135] ? kmem_cache_free+0x2d4/0x4d0 [ 281.382411][ T9135] ? __pfx_path_mount+0x10/0x10 [ 281.382445][ T9135] ? putname+0x154/0x1a0 [ 281.382478][ T9135] __x64_sys_mount+0x28d/0x310 [ 281.382507][ T9135] ? __pfx___x64_sys_mount+0x10/0x10 [ 281.382535][ T9135] ? rcu_is_watching+0x12/0xc0 [ 281.382582][ T9135] do_syscall_64+0xcd/0x260 [ 281.382628][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.382658][ T9135] RIP: 0033:0x7feb6438d169 [ 281.382683][ T9135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.382712][ T9135] RSP: 002b:00007feb651bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.382741][ T9135] RAX: ffffffffffffffda RBX: 00007feb645a5fa0 RCX: 00007feb6438d169 [ 281.382761][ T9135] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 281.382778][ T9135] RBP: 00007feb6440e990 R08: 0000000000000000 R09: 0000000000000000 [ 281.382795][ T9135] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 281.382812][ T9135] R13: 0000000000000000 R14: 00007feb645a5fa0 R15: 00007ffff9fc3a78 [ 281.382849][ T9135] [ 281.612266][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.132063][ T9153] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 283.534909][ T9173] FAULT_INJECTION: forcing a failure. [ 283.534909][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 283.617376][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.0.785 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 283.617419][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.617439][ T9173] Call Trace: [ 283.617449][ T9173] [ 283.617461][ T9173] dump_stack_lvl+0x16c/0x1f0 [ 283.617513][ T9173] should_fail_ex+0x512/0x640 [ 283.617547][ T9173] ? fs_reclaim_acquire+0xae/0x150 [ 283.617588][ T9173] should_failslab+0xc2/0x120 [ 283.617616][ T9173] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 283.617664][ T9173] ? security_inode_alloc+0x3b/0x2b0 [ 283.617704][ T9173] security_inode_alloc+0x3b/0x2b0 [ 283.617740][ T9173] inode_init_always_gfp+0xce4/0x1030 [ 283.617794][ T9173] alloc_inode+0x86/0x240 [ 283.617830][ T9173] new_inode+0x22/0x1c0 [ 283.617868][ T9173] nfsd_get_inode+0x1a/0x190 [ 283.617933][ T9173] nfsd_fill_super+0x18e/0x530 [ 283.617989][ T9173] ? __pfx_nfsd_fill_super+0x10/0x10 [ 283.618040][ T9173] get_tree_keyed+0x10b/0x1d0 [ 283.618087][ T9173] vfs_get_tree+0x8b/0x340 [ 283.618125][ T9173] path_mount+0x14d4/0x1f30 [ 283.618162][ T9173] ? kmem_cache_free+0x2d4/0x4d0 [ 283.618208][ T9173] ? __pfx_path_mount+0x10/0x10 [ 283.618243][ T9173] ? putname+0x154/0x1a0 [ 283.618280][ T9173] __x64_sys_mount+0x28d/0x310 [ 283.618311][ T9173] ? __pfx___x64_sys_mount+0x10/0x10 [ 283.618340][ T9173] ? rcu_is_watching+0x12/0xc0 [ 283.618391][ T9173] do_syscall_64+0xcd/0x260 [ 283.618442][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.618475][ T9173] RIP: 0033:0x7f9b7018d169 [ 283.618499][ T9173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.618531][ T9173] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.618561][ T9173] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 283.618582][ T9173] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 283.618602][ T9173] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 283.618622][ T9173] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 283.618641][ T9173] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 283.618683][ T9173] [ 283.844971][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.717076][ T5856] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 284.726498][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 284.738409][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: kworker/u9:8 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 284.738444][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.738463][ T5856] Workqueue: hci3 hci_rx_work [ 284.738496][ T5856] Call Trace: [ 284.738504][ T5856] [ 284.738514][ T5856] dump_stack_lvl+0x16c/0x1f0 [ 284.738554][ T5856] sysfs_warn_dup+0x7f/0xa0 [ 284.738596][ T5856] sysfs_create_dir_ns+0x24b/0x2b0 [ 284.738634][ T5856] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 284.738672][ T5856] ? find_held_lock+0x2b/0x80 [ 284.738710][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 284.738743][ T5856] kobject_add_internal+0x2c4/0x9b0 [ 284.738794][ T5856] kobject_add+0x16e/0x240 [ 284.738819][ T5856] ? __pfx_kobject_add+0x10/0x10 [ 284.738845][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 284.738876][ T5856] ? kobject_put+0xab/0x5a0 [ 284.738928][ T5856] device_add+0x288/0x1a70 [ 284.738959][ T5856] ? __pfx_dev_set_name+0x10/0x10 [ 284.738994][ T5856] ? __pfx_device_add+0x10/0x10 [ 284.739023][ T5856] ? mgmt_send_event_skb+0x2fb/0x460 [ 284.739071][ T5856] hci_conn_add_sysfs+0x17e/0x230 [ 284.739108][ T5856] le_conn_complete_evt+0x1075/0x1d70 [ 284.739148][ T5856] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 284.739179][ T5856] ? bt_warn+0xe4/0x120 [ 284.739204][ T5856] ? __pfx_bt_warn+0x10/0x10 [ 284.739241][ T5856] hci_le_conn_complete_evt+0x23c/0x370 [ 284.739280][ T5856] hci_le_meta_evt+0x2f3/0x5e0 [ 284.739313][ T5856] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 284.739351][ T5856] hci_event_packet+0x669/0x1190 [ 284.739381][ T5856] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 284.739417][ T5856] ? __pfx_hci_event_packet+0x10/0x10 [ 284.739457][ T5856] ? kcov_remote_start+0x3c9/0x6d0 [ 284.739485][ T5856] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.739532][ T5856] hci_rx_work+0x2c5/0x16b0 [ 284.739586][ T5856] ? rcu_is_watching+0x12/0xc0 [ 284.739628][ T5856] process_one_work+0x9cc/0x1b70 [ 284.739688][ T5856] ? __pfx_process_one_work+0x10/0x10 [ 284.739732][ T5856] ? assign_work+0x1a0/0x250 [ 284.739765][ T5856] worker_thread+0x6c8/0xf10 [ 284.739809][ T5856] ? __kthread_parkme+0x19e/0x250 [ 284.739872][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 284.739907][ T5856] kthread+0x3c2/0x780 [ 284.739938][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.739964][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.739992][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.740020][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.740055][ T5856] ? rcu_is_watching+0x12/0xc0 [ 284.740092][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.740134][ T5856] ret_from_fork+0x45/0x80 [ 284.740164][ T5856] ? __pfx_kthread+0x10/0x10 [ 284.740194][ T5856] ret_from_fork_asm+0x1a/0x30 [ 284.740291][ T5856] [ 284.740389][ T5856] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 285.027164][ T5856] Bluetooth: hci3: failed to register connection device [ 287.851068][ T9262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.029570][ T9262] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 288.059257][ T9262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.103280][ T9262] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 288.260038][ T9271] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.330010][ T9271] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 288.373146][ T9271] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.419876][ T9271] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 288.560750][ T9273] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.626905][ T9273] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 288.671141][ T9273] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 288.707654][ T9273] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 290.541760][ T9307] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 293.322125][ T9280] delete_channel: no stack [ 294.428518][ T9360] netlink: 252 bytes leftover after parsing attributes in process `syz.3.833'. [ 294.493900][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 295.655910][ T5846] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 295.655951][ T5846] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 295.673084][ T5846] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 295.673149][ T5846] Bluetooth: hci1: adv larger than maximum supported [ 295.680570][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0d [ 298.416211][ T9443] random: crng reseeded on system resumption [ 302.025056][ T5846] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 302.083692][ T9485] kexec: Could not allocate control_code_buffer [ 306.088147][ T9552] netlink: 294 bytes leftover after parsing attributes in process `syz.2.883'. [ 308.296166][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 310.070210][ T9601] netlink: 334 bytes leftover after parsing attributes in process `syz.2.898'. [ 310.160923][ T9628] netlink: 330 bytes leftover after parsing attributes in process `syz.3.903'. [ 310.170162][ T9628] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 310.285872][ T9607] kexec: Could not allocate control_code_buffer [ 311.633821][ T9660] ubi0: attaching mtd0 [ 311.764334][ T9660] ubi0: scanning is finished [ 311.794982][ T9660] ubi0: empty MTD device detected [ 311.804430][ T9660] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 312.791889][ T9660] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 313.228994][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 313.996315][ T9700] FAULT_INJECTION: forcing a failure. [ 313.996315][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 314.053564][ T9700] CPU: 0 UID: 0 PID: 9700 Comm: syz.1.921 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 314.053610][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.053631][ T9700] Call Trace: [ 314.053642][ T9700] [ 314.053654][ T9700] dump_stack_lvl+0x16c/0x1f0 [ 314.053710][ T9700] should_fail_ex+0x512/0x640 [ 314.053747][ T9700] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 314.053804][ T9700] should_failslab+0xc2/0x120 [ 314.053835][ T9700] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 314.053889][ T9700] ? __d_alloc+0x31/0xaa0 [ 314.053924][ T9700] __d_alloc+0x31/0xaa0 [ 314.053960][ T9700] d_alloc_pseudo+0x1c/0xc0 [ 314.054001][ T9700] alloc_file_pseudo+0xcf/0x230 [ 314.054038][ T9700] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 314.054087][ T9700] ? do_raw_spin_unlock+0x172/0x230 [ 314.054134][ T9700] __anon_inode_getfile+0xf7/0x370 [ 314.054194][ T9700] anon_inode_getfd+0x52/0xb0 [ 314.054254][ T9700] __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 314.054312][ T9700] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 314.054359][ T9700] ? rcu_is_watching+0x12/0xc0 [ 314.054404][ T9700] do_syscall_64+0xcd/0x260 [ 314.054450][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.054479][ T9700] RIP: 0033:0x7fb11df8d169 [ 314.054518][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.054547][ T9700] RSP: 002b:00007fb11ee98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 314.054577][ T9700] RAX: ffffffffffffffda RBX: 00007fb11e1a5fa0 RCX: 00007fb11df8d169 [ 314.054596][ T9700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000000 [ 314.054615][ T9700] RBP: 00007fb11e00e990 R08: 0000000000000000 R09: 0000000000000000 [ 314.054633][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.054651][ T9700] R13: 0000000000000000 R14: 00007fb11e1a5fa0 R15: 00007ffcbcb0e1e8 [ 314.054688][ T9700] [ 315.383118][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 316.536800][ T9759] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 317.665856][ T5846] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 317.665900][ T5846] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 317.681097][ T5846] Bluetooth: hci2: adv larger than maximum supported [ 317.681129][ T5846] Bluetooth: hci2: adv larger than maximum supported [ 319.870651][ T9843] FAULT_INJECTION: forcing a failure. [ 319.870651][ T9843] name failslab, interval 1, probability 0, space 0, times 0 [ 319.929409][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: syz.2.956 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 319.929451][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.929470][ T9843] Call Trace: [ 319.929480][ T9843] [ 319.929492][ T9843] dump_stack_lvl+0x16c/0x1f0 [ 319.929543][ T9843] should_fail_ex+0x512/0x640 [ 319.929579][ T9843] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 319.929626][ T9843] should_failslab+0xc2/0x120 [ 319.929657][ T9843] __kmalloc_cache_noprof+0x6a/0x3e0 [ 319.929699][ T9843] ? do_raw_spin_lock+0x12c/0x2b0 [ 319.929736][ T9843] ? single_open+0x4d/0x1f0 [ 319.929777][ T9843] ? __pfx_tracing_clock_show+0x10/0x10 [ 319.929823][ T9843] single_open+0x4d/0x1f0 [ 319.929861][ T9843] tracing_clock_open+0xa7/0x100 [ 319.929892][ T9843] do_dentry_open+0x741/0x1c10 [ 319.929938][ T9843] ? __pfx_tracing_clock_open+0x10/0x10 [ 319.929975][ T9843] vfs_open+0x82/0x3f0 [ 319.930012][ T9843] path_openat+0x1e5e/0x2d40 [ 319.930073][ T9843] ? __pfx_path_openat+0x10/0x10 [ 319.930130][ T9843] do_filp_open+0x20b/0x470 [ 319.930177][ T9843] ? __pfx_do_filp_open+0x10/0x10 [ 319.930253][ T9843] ? alloc_fd+0x471/0x7d0 [ 319.930309][ T9843] do_sys_openat2+0x11b/0x1d0 [ 319.930342][ T9843] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.930390][ T9843] __x64_sys_openat+0x174/0x210 [ 319.930425][ T9843] ? __pfx___x64_sys_openat+0x10/0x10 [ 319.930461][ T9843] ? rcu_is_watching+0x12/0xc0 [ 319.930511][ T9843] do_syscall_64+0xcd/0x260 [ 319.930602][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.930636][ T9843] RIP: 0033:0x7feb6438d169 [ 319.930662][ T9843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.930693][ T9843] RSP: 002b:00007feb651bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.930724][ T9843] RAX: ffffffffffffffda RBX: 00007feb645a5fa0 RCX: 00007feb6438d169 [ 319.930746][ T9843] RDX: 0000000000022500 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 319.930766][ T9843] RBP: 00007feb6440e990 R08: 0000000000000000 R09: 0000000000000000 [ 319.930786][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.930810][ T9843] R13: 0000000000000000 R14: 00007feb645a5fa0 R15: 00007ffff9fc3a78 [ 319.930852][ T9843] [ 320.769735][ T9860] synth uevent: /devices/virtual/net/lapb5: unknown uevent action string [ 320.802194][ T9860] net lapb5: uevent: failed to send synthetic uevent: -22 [ 321.180104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.189018][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.913633][ T9888] netlink: 350 bytes leftover after parsing attributes in process `syz.0.968'. [ 321.945183][ T9888] FAULT_INJECTION: forcing a failure. [ 321.945183][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 321.957909][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.0.968 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 321.957946][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.957960][ T9888] Call Trace: [ 321.957968][ T9888] [ 321.957976][ T9888] dump_stack_lvl+0x16c/0x1f0 [ 321.958013][ T9888] should_fail_ex+0x512/0x640 [ 321.958037][ T9888] ? fs_reclaim_acquire+0xae/0x150 [ 321.958067][ T9888] should_failslab+0xc2/0x120 [ 321.958088][ T9888] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 321.958123][ T9888] ? security_inode_alloc+0x3b/0x2b0 [ 321.958151][ T9888] security_inode_alloc+0x3b/0x2b0 [ 321.958176][ T9888] inode_init_always_gfp+0xce4/0x1030 [ 321.958214][ T9888] alloc_inode+0x86/0x240 [ 321.958238][ T9888] new_inode+0x22/0x1c0 [ 321.958265][ T9888] nfsd_get_inode+0x1a/0x190 [ 321.958299][ T9888] nfsd_mkdir+0xba/0x3a0 [ 321.958334][ T9888] nfsd_fill_super+0x3b4/0x530 [ 321.958379][ T9888] ? __pfx_nfsd_fill_super+0x10/0x10 [ 321.958414][ T9888] get_tree_keyed+0x10b/0x1d0 [ 321.958469][ T9888] vfs_get_tree+0x8b/0x340 [ 321.958495][ T9888] path_mount+0x14d4/0x1f30 [ 321.958519][ T9888] ? kmem_cache_free+0x2d4/0x4d0 [ 321.958551][ T9888] ? __pfx_path_mount+0x10/0x10 [ 321.958576][ T9888] ? putname+0x154/0x1a0 [ 321.958602][ T9888] __x64_sys_mount+0x28d/0x310 [ 321.958624][ T9888] ? __pfx___x64_sys_mount+0x10/0x10 [ 321.958645][ T9888] ? rcu_is_watching+0x12/0xc0 [ 321.958681][ T9888] do_syscall_64+0xcd/0x260 [ 321.958730][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.958753][ T9888] RIP: 0033:0x7f9b7018d169 [ 321.958770][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.958792][ T9888] RSP: 002b:00007f9b710c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.958813][ T9888] RAX: ffffffffffffffda RBX: 00007f9b703a5fa0 RCX: 00007f9b7018d169 [ 321.958827][ T9888] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 321.958841][ T9888] RBP: 00007f9b7020e990 R08: 0000000000000000 R09: 0000000000000000 [ 321.958854][ T9888] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 321.958880][ T9888] R13: 0000000000000000 R14: 00007f9b703a5fa0 R15: 00007ffec0c09968 [ 321.958906][ T9888] [ 322.926749][ T9902] netlink: 342 bytes leftover after parsing attributes in process `syz.1.972'. [ 323.239036][ T9895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.295802][ T9895] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 323.384813][ T9895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.404500][ T9895] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 323.581622][ T9895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.599513][ T9895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 323.665466][ T9895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.681923][ T9895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 323.796811][ T9895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.820567][ T9926] can: request_module (can-proto-4) failed. [ 324.832985][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.390136][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.629271][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.710617][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.111204][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 326.274251][ T9950] .SR: entered promiscuous mode [ 326.716397][ T9952] Invalid ELF header magic: != ELF [ 326.904229][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.228417][ T9978] FAULT_INJECTION: forcing a failure. [ 327.228417][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 327.268497][ T9978] CPU: 1 UID: 0 PID: 9978 Comm: syz.2.992 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 327.268535][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.268551][ T9978] Call Trace: [ 327.268561][ T9978] [ 327.268572][ T9978] dump_stack_lvl+0x16c/0x1f0 [ 327.268620][ T9978] should_fail_ex+0x512/0x640 [ 327.268654][ T9978] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 327.268706][ T9978] should_failslab+0xc2/0x120 [ 327.268734][ T9978] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 327.268780][ T9978] ? find_held_lock+0x2b/0x80 [ 327.268824][ T9978] ? __alloc_skb+0x2b2/0x380 [ 327.268863][ T9978] __alloc_skb+0x2b2/0x380 [ 327.268897][ T9978] ? __pfx___alloc_skb+0x10/0x10 [ 327.268935][ T9978] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 327.268983][ T9978] netlink_alloc_large_skb+0x69/0x130 [ 327.269027][ T9978] netlink_sendmsg+0x6a1/0xdd0 [ 327.269074][ T9978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.269136][ T9978] __sys_sendto+0x495/0x510 [ 327.269171][ T9978] ? __pfx___sys_sendto+0x10/0x10 [ 327.269215][ T9978] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 327.269270][ T9978] __x64_sys_sendto+0xe0/0x1c0 [ 327.269302][ T9978] ? do_syscall_64+0x91/0x260 [ 327.269342][ T9978] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.269379][ T9978] do_syscall_64+0xcd/0x260 [ 327.269423][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.269451][ T9978] RIP: 0033:0x7feb6438effc [ 327.269473][ T9978] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 327.269499][ T9978] RSP: 002b:00007feb651baec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 327.269526][ T9978] RAX: ffffffffffffffda RBX: 00007feb651bafc0 RCX: 00007feb6438effc [ 327.269545][ T9978] RDX: 0000000000000020 RSI: 00007feb651bb010 RDI: 0000000000000002 [ 327.269562][ T9978] RBP: 0000000000000000 R08: 00007feb651baf14 R09: 000000000000000c [ 327.269577][ T9978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 327.269592][ T9978] R13: 00007feb651baf68 R14: 00007feb651bb010 R15: 0000000000000000 [ 327.269624][ T9978] [ 327.479452][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.544640][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.704084][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.780780][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 328.186636][T10006] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 329.118322][T10021] random: crng reseeded on system resumption [ 329.515279][T10030] HfR: entered promiscuous mode [ 329.627386][T10030] openvswitch: HfR: Dropping previously announced user features [ 329.858037][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.869931][T10038] delete_channel: no stack [ 330.240003][T10046] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 332.774818][T10102] FAULT_INJECTION: forcing a failure. [ 332.774818][T10102] name fail_futex, interval 1, probability 0, space 0, times 0 [ 332.900281][T10102] CPU: 1 UID: 0 PID: 10102 Comm: syz.2.1026 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 332.900322][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.900341][T10102] Call Trace: [ 332.900350][T10102] [ 332.900363][T10102] dump_stack_lvl+0x16c/0x1f0 [ 332.900430][T10102] should_fail_ex+0x512/0x640 [ 332.900473][T10102] get_futex_key+0x49e/0x1000 [ 332.900532][T10102] ? __pfx_get_futex_key+0x10/0x10 [ 332.900603][T10102] futex_wake+0xe7/0x4e0 [ 332.900637][T10102] ? __pfx_futex_wake+0x10/0x10 [ 332.900679][T10102] ? kmem_cache_free+0x2d4/0x4d0 [ 332.900724][T10102] ? fd_install+0x225/0x750 [ 332.900766][T10102] ? putname+0x154/0x1a0 [ 332.900804][T10102] do_futex+0x1e3/0x350 [ 332.900849][T10102] ? __pfx_do_futex+0x10/0x10 [ 332.900909][T10102] __x64_sys_futex+0x1e0/0x4c0 [ 332.900960][T10102] ? __pfx___x64_sys_futex+0x10/0x10 [ 332.901009][T10102] ? rcu_is_watching+0x12/0xc0 [ 332.901058][T10102] do_syscall_64+0xcd/0x260 [ 332.901108][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.901140][T10102] RIP: 0033:0x7feb6438d169 [ 332.901165][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.901196][T10102] RSP: 002b:00007feb651bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.901226][T10102] RAX: ffffffffffffffda RBX: 00007feb645a5fa8 RCX: 00007feb6438d169 [ 332.901246][T10102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb645a5fac [ 332.901265][T10102] RBP: 00007feb645a5fa0 R08: 00007feb651bd000 R09: 0000000000000000 [ 332.901284][T10102] R10: 0000000000000006 R11: 0000000000000246 R12: 00007feb645a5fac [ 332.901315][T10102] R13: 0000000000000000 R14: 00007ffff9fc3990 R15: 00007ffff9fc3a78 [ 332.901352][T10102] [ 333.460674][T10122] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1030'. [ 333.509061][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'. [ 335.417854][T10159] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 335.424723][T10159] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 335.837874][T10169] openvswitch: HfR: Dropping previously announced user features [ 335.843142][T10152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.856194][T10152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.862377][T10152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.897179][T10152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.209765][T10170] netlink: 'syz.2.1043': attribute type 5 has an invalid length. [ 337.170349][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.885254][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.885474][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 337.964728][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.711534][T10260] nbd: nbd11811 already in use [ 340.878705][ T5856] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 340.878768][ T5856] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 340.893677][ T5856] Bluetooth: hci2: adv larger than maximum supported [ 340.893714][ T5856] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 342.863145][T10333] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 343.020436][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 348.730549][T10442] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 348.763706][T10442] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 348.820779][T10442] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 348.881691][T10442] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 349.172298][T10450] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.206317][T10450] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 349.220630][T10450] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.237041][T10450] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 349.400674][T10458] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.468205][T10458] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 349.500588][T10458] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 349.528961][T10458] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 349.769192][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 349.882173][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'. [ 349.917211][T10475] ipvlan1: entered allmulticast mode [ 349.952513][T10475] veth0_vlan: entered allmulticast mode [ 350.068187][T10481] FAULT_INJECTION: forcing a failure. [ 350.068187][T10481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 350.091692][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.2.1123 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 350.091752][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.091769][T10481] Call Trace: [ 350.091779][T10481] [ 350.091790][T10481] dump_stack_lvl+0x16c/0x1f0 [ 350.091837][T10481] should_fail_ex+0x512/0x640 [ 350.091891][T10481] get_futex_key+0x49e/0x1000 [ 350.091935][T10481] ? __pfx_get_futex_key+0x10/0x10 [ 350.091990][T10481] futex_wake+0xe7/0x4e0 [ 350.092022][T10481] ? __pfx_futex_wake+0x10/0x10 [ 350.092056][T10481] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 350.092089][T10481] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.092140][T10481] do_futex+0x1e3/0x350 [ 350.092181][T10481] ? __pfx_do_futex+0x10/0x10 [ 350.092236][T10481] __x64_sys_futex+0x1e0/0x4c0 [ 350.092285][T10481] ? __pfx___x64_sys_futex+0x10/0x10 [ 350.092327][T10481] ? __pfx_fput_close_sync+0x10/0x10 [ 350.092379][T10481] do_syscall_64+0xcd/0x260 [ 350.092428][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.092460][T10481] RIP: 0033:0x7feb6438d169 [ 350.092494][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.092522][T10481] RSP: 002b:00007feb651bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.092567][T10481] RAX: ffffffffffffffda RBX: 00007feb645a5fa8 RCX: 00007feb6438d169 [ 350.092599][T10481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb645a5fac [ 350.092616][T10481] RBP: 00007feb645a5fa0 R08: 00007feb651bd000 R09: 0000000000000000 [ 350.092632][T10481] R10: 000000000000003a R11: 0000000000000246 R12: 00007feb645a5fac [ 350.092649][T10481] R13: 0000000000000000 R14: 00007ffff9fc3990 R15: 00007ffff9fc3a78 [ 350.092684][T10481] [ 350.277348][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.327298][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'. [ 352.706079][T10529] netlink: 'syz.1.1134': attribute type 35 has an invalid length. [ 352.821211][T10529] Process accounting resumed [ 354.030183][T10557] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 354.277277][T10572] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 354.288476][T10572] netlink: 230 bytes leftover after parsing attributes in process `syz.0.1148'. [ 354.365143][T10572] team0: Port device team_slave_1 removed [ 357.462881][ T5856] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 359.652140][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 361.399077][T10690] netlink: 'syz.3.1175': attribute type 22 has an invalid length. [ 362.268825][T10694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.275192][T10694] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 362.287927][T10694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.296784][T10694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.316999][T10694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.671680][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.307895][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 364.314092][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.387316][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 364.489079][ T5846] Bluetooth: hci3: unexpected event 0x04 length: 459 > 10 [ 364.489155][ T5846] Bluetooth: hci3: connection err: -111 [ 365.740220][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.874533][T10805] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1204'. [ 366.443167][T10819] Invalid ELF header magic: != ELF [ 368.777924][T10867] nbd: illegal input index 2147483647 [ 369.844467][T10887] nvme_fabrics: missing parameter 'transport=%s' [ 369.858977][T10887] nvme_fabrics: missing parameter 'nqn=%s' [ 370.067103][T10898] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 370.094455][T10898] CIFS mount error: No usable UNC path provided in device string! [ 370.094455][T10898] [ 370.107644][T10898] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 372.427121][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 372.603445][T10957] ubi0: attaching mtd0 [ 372.637821][T10957] ubi0: scanning is finished [ 372.658507][T10957] ubi0: empty MTD device detected [ 372.896495][T10957] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 372.981788][T10946] ubi0: attaching mtd0 [ 373.023085][T10946] ubi0: scanning is finished [ 373.392804][T10946] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 374.339168][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1250'. [ 376.614084][T11018] bridge0: port 3(team0) entered blocking state [ 376.633775][T11018] bridge0: port 3(team0) entered disabled state [ 376.644113][T11018] team0: entered allmulticast mode [ 376.649278][T11018] team_slave_0: entered allmulticast mode [ 376.668314][T11018] team0: entered promiscuous mode [ 376.736197][T11018] team_slave_0: entered promiscuous mode [ 376.743874][T11018] bridge0: port 3(team0) entered blocking state [ 376.750304][T11018] bridge0: port 3(team0) entered forwarding state [ 379.057097][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 379.141586][T11079] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[11079] [ 379.169184][T11080] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[11080] [ 379.260004][ T30] audit: type=1800 audit(6039621917.479:4): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1272" name="file0" dev="tmpfs" ino=1563 res=0 errno=0 [ 379.990240][T11116] Invalid ELF header magic: != ELF [ 380.018102][T11121] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1277'. [ 381.527839][T11145] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 382.303928][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.310401][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.735588][T11157] Process accounting paused [ 382.831084][T11171] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 383.046322][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 384.272128][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1291'. [ 385.031620][T11199] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1291'. [ 385.192705][T11205] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.260445][T11205] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 385.299201][T11205] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.348249][T11205] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 385.483831][T11207] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.547158][T11207] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 385.568216][T11207] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.586959][T11207] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 385.675185][T11210] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.706313][T11210] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 385.766497][T11210] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 385.805838][T11210] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 388.402921][ T5846] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 388.410236][ T30] audit: type=1800 audit(6039621934.679:5): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="dbroot" dev="configfs" ino=30670 res=0 errno=0 [ 390.126964][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 390.318545][T11274] ipvlan1: entered allmulticast mode [ 390.391436][T11274] veth0_vlan: entered allmulticast mode [ 391.094411][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 391.113174][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.225789][T11294] bridge_slave_1 (unregistering): left allmulticast mode [ 391.234381][T11294] bridge_slave_1 (unregistering): left promiscuous mode [ 391.259125][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.625508][ T30] audit: type=1800 audit(6039621939.926:6): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1318" name="file0" dev="tmpfs" ino=1819 res=0 errno=0 [ 395.353963][T11364] [ 395.356349][T11364] ====================================================== [ 395.363475][T11364] WARNING: possible circular locking dependency detected [ 395.370516][T11364] 6.15.0-rc2-syzkaller #0 Not tainted [ 395.375911][T11364] ------------------------------------------------------ [ 395.382946][T11364] syz.1.1323/11364 is trying to acquire lock: [ 395.389016][T11364] ffff888027b25f58 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 395.398274][T11364] [ 395.398274][T11364] but task is already holding lock: [ 395.405640][T11364] ffffffff9012e5a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 395.414539][T11364] [ 395.414539][T11364] which lock already depends on the new lock. [ 395.414539][T11364] [ 395.424959][T11364] [ 395.424959][T11364] the existing dependency chain (in reverse order) is: [ 395.433979][T11364] [ 395.433979][T11364] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 395.441213][T11364] __mutex_lock+0x199/0xb90 [ 395.446263][T11364] do_ipv6_setsockopt+0x2042/0x4420 [ 395.452028][T11364] ipv6_setsockopt+0xcb/0x170 [ 395.457254][T11364] tcp_setsockopt+0xa4/0x100 [ 395.462387][T11364] smc_setsockopt+0x1b3/0xa00 [ 395.467607][T11364] do_sock_setsockopt+0x221/0x470 [ 395.473181][T11364] __sys_setsockopt+0x1a0/0x230 [ 395.478570][T11364] __x64_sys_setsockopt+0xbd/0x160 [ 395.484220][T11364] do_syscall_64+0xcd/0x260 [ 395.489269][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.495686][T11364] [ 395.495686][T11364] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 395.504387][T11364] __mutex_lock+0x199/0xb90 [ 395.509434][T11364] smc_switch_to_fallback+0x2d/0x9f0 [ 395.515334][T11364] smc_sendmsg+0x13d/0x520 [ 395.520282][T11364] ____sys_sendmsg+0xa95/0xc70 [ 395.525570][T11364] ___sys_sendmsg+0x134/0x1d0 [ 395.530784][T11364] __sys_sendmsg+0x16d/0x220 [ 395.535903][T11364] do_syscall_64+0xcd/0x260 [ 395.540945][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.547364][T11364] [ 395.547364][T11364] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 395.555021][T11364] __lock_acquire+0x1173/0x1ba0 [ 395.560424][T11364] lock_acquire+0x179/0x350 [ 395.565461][T11364] lock_sock_nested+0x41/0xf0 [ 395.570793][T11364] sockopt_lock_sock+0x54/0x70 [ 395.576116][T11364] do_ip_setsockopt+0xfe/0x3240 [ 395.581496][T11364] ip_setsockopt+0x59/0xf0 [ 395.586445][T11364] udp_setsockopt+0x7d/0xd0 [ 395.591496][T11364] do_sock_setsockopt+0x221/0x470 [ 395.597076][T11364] __sys_setsockopt+0x1a0/0x230 [ 395.602461][T11364] __x64_sys_setsockopt+0xbd/0x160 [ 395.608198][T11364] do_syscall_64+0xcd/0x260 [ 395.613251][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.619686][T11364] [ 395.619686][T11364] other info that might help us debug this: [ 395.619686][T11364] [ 395.629919][T11364] Chain exists of: [ 395.629919][T11364] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 395.629919][T11364] [ 395.643504][T11364] Possible unsafe locking scenario: [ 395.643504][T11364] [ 395.650968][T11364] CPU0 CPU1 [ 395.656328][T11364] ---- ---- [ 395.661687][T11364] lock(rtnl_mutex); [ 395.665702][T11364] lock(&smc->clcsock_release_lock); [ 395.673608][T11364] lock(rtnl_mutex); [ 395.680124][T11364] lock(sk_lock-AF_INET); [ 395.684575][T11364] [ 395.684575][T11364] *** DEADLOCK *** [ 395.684575][T11364] [ 395.692745][T11364] 1 lock held by syz.1.1323/11364: [ 395.697860][T11364] #0: ffffffff9012e5a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 395.707191][T11364] [ 395.707191][T11364] stack backtrace: [ 395.713081][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.1.1323 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 395.713134][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.713150][T11364] Call Trace: [ 395.713159][T11364] [ 395.713168][T11364] dump_stack_lvl+0x116/0x1f0 [ 395.713207][T11364] print_circular_bug+0x275/0x350 [ 395.713249][T11364] check_noncircular+0x14c/0x170 [ 395.713293][T11364] __lock_acquire+0x1173/0x1ba0 [ 395.713337][T11364] ? do_ip_setsockopt+0xf6/0x3240 [ 395.713364][T11364] lock_acquire+0x179/0x350 [ 395.713386][T11364] ? sockopt_lock_sock+0x54/0x70 [ 395.713424][T11364] lock_sock_nested+0x41/0xf0 [ 395.713455][T11364] ? sockopt_lock_sock+0x54/0x70 [ 395.713489][T11364] sockopt_lock_sock+0x54/0x70 [ 395.713520][T11364] do_ip_setsockopt+0xfe/0x3240 [ 395.713553][T11364] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 395.713583][T11364] ? aa_sk_perm+0x2f4/0xb10 [ 395.713614][T11364] ip_setsockopt+0x59/0xf0 [ 395.713640][T11364] udp_setsockopt+0x7d/0xd0 [ 395.713678][T11364] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 395.713719][T11364] do_sock_setsockopt+0x221/0x470 [ 395.713759][T11364] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 395.713809][T11364] __sys_setsockopt+0x1a0/0x230 [ 395.713842][T11364] __x64_sys_setsockopt+0xbd/0x160 [ 395.713873][T11364] ? do_syscall_64+0x91/0x260 [ 395.713911][T11364] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.713946][T11364] do_syscall_64+0xcd/0x260 [ 395.713986][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.714012][T11364] RIP: 0033:0x7fb11df8d169 [ 395.714032][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.714057][T11364] RSP: 002b:00007fb11ee77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.714080][T11364] RAX: ffffffffffffffda RBX: 00007fb11e1a6080 RCX: 00007fb11df8d169 [ 395.714098][T11364] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 395.714113][T11364] RBP: 00007fb11e00e990 R08: 0000000000000028 R09: 0000000000000000 [ 395.714129][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.714144][T11364] R13: 0000000000000000 R14: 00007fb11e1a6080 R15: 00007ffcbcb0e1e8 [ 395.714168][T11364]