last executing test programs: 12m18.352140518s ago: executing program 1 (id=1643): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x25, 0x8080b, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x6, 0x717e, 0x1ffde, 0x7, 0x3, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x8, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq$auto(0x0, 0x47fffd, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x6, &(0x7f00000001c0)=@query={@target_ifindex, 0x8, 0x81, 0x40, 0x1, @count=0x6, 0x0, 0x4, 0x4, 0x7, 0x570}, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a00010000000000000000", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 12m16.196532213s ago: executing program 1 (id=1650): socket(0xa, 0x801, 0x84) (async) mmap$auto(0x7, 0xffe, 0xcf6, 0x19, 0x400, 0x200004000028000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x16da, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa) read$auto(r0, 0x0, 0x7) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) socket(0x28, 0xa, 0x6) (async) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffff7fff, 0x1, 0x948b, 0x2, 0x17f4da0a, 0x400000006, 0x3, 0x300000000000000, 0x6, 0x5, 0x6d3c, 0x5, 0x80000000002]}, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="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", 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x4a3840, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.7/usb24/bMaxPacketSize0\x00', 0x80102, 0x0) sendfile$auto(r5, r5, 0x0, 0x800000) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xa}, 0x5) close_range$auto(r4, 0x8, 0x0) (async) socket(0x22, 0xa, 0x1) (async) socket(0xa, 0x1, 0x84) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x3, @multicast1}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, 0x54) 12m15.171152384s ago: executing program 1 (id=1653): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 12m14.417637463s ago: executing program 1 (id=1656): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r1, r1, 0x0, 0x400000000003) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2584c0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) io_uring_enter$auto(r3, 0x8001, 0x80, 0xf, &(0x7f0000000040)="6f6fdfc624482b6feebecf0c6f9b95dfda4c61249e97790decc0a3b8885108e61e06e4de584eb953737116e751be9b06447d68ceb2fbe4cab38f1f351737e8a1acfa09e4ad456d9b26a7f85a39540a7cb4f7adedabc87237db4dc316f7f529c11804c2db4dbf598c1ea68248f57e56", 0x5) read$auto(r3, 0x0, 0xb4d3) 12m12.202638226s ago: executing program 1 (id=1667): r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x8200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto_mon_fops_text_t_mon_text(r2, &(0x7f0000000040)=""/64, 0x40) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000140)={0x40, 0x0, r0}) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x21a400, 0x0) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25070000000400038008000100", @ANYRES32=0x0, @ANYBLOB="3b52cb49d92c767c5a1b910a7d11d9bab72c209ea8e21f3e2225ad273ee088973106271777f53725e4681ae8b25b1c603f211f5e069c2bb4a7eea27e527c462417b9f1e85f44fd0362ae2d9c319c17ba3af41d6fb9d4348f3d48ff8b1acd0d3574e7827d7bf322e7e75f898cd30a349a4cb93c1ecef7e5f32c5a1ebf71dd3a30af65a61a5723319c568a25a7a9b94ae23464940221145fdd8a29be02b5b7de172c13ee26061b1788c8278a8aaaa576f459f99b647725"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r4 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x108002, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000000280)="fd431769c0726ea6e89a7255b35417d0b69479a24eb0592f38019cbca68727b06108a4379027abeaa3edfd095e5ffaf29a61607e0c9d91e00d52681b36b465e0da7272d8ad79d1e4d843684f74c129e0e7b2566ea6d281dcb63afa98ffbdacd828943ce97e7ab7958365ffa0ad301fb8b6f17f8fc83bf37c19d683e60a432b7350a86f652067d14c24edf4c9", 0x8c) socket(0x29, 0x2, 0x0) 12m11.395903989s ago: executing program 1 (id=1674): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0xffffffffffff7d3f) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) munmap$auto(0x2, 0x7220) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x102, 0x0) write$auto_proc_fail_nth_operations_base(r1, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4c400, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3b, 0x9de9, 0xffffffffffffffff, 0x4, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="2f212cbd7000fcdbbd252100000008000300", @ANYRES32=r6, @ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="04e4e300040001800fcbadbd35abc427bafba034e79558bb8d851fdc20b20200287f8e2116a0a30b2b68"], 0x38}}, 0x4000000) getsockopt$auto(r4, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 12m10.902817675s ago: executing program 32 (id=1674): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0xffffffffffff7d3f) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) munmap$auto(0x2, 0x7220) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x102, 0x0) write$auto_proc_fail_nth_operations_base(r1, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4c400, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3b, 0x9de9, 0xffffffffffffffff, 0x4, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="2f212cbd7000fcdbbd252100000008000300", @ANYRES32=r6, @ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="04e4e300040001800fcbadbd35abc427bafba034e79558bb8d851fdc20b20200287f8e2116a0a30b2b68"], 0x38}}, 0x4000000) getsockopt$auto(r4, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 9m24.354598212s ago: executing program 4 (id=2250): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket(0xa, 0x2, 0x73) socket(0x18, 0x3, 0x0) socketpair$auto(0x1, 0x0, 0x3, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2512000000a500138056cbfa42c40766659aa29e5e977fd8c0c5ea07452724775bbe2a991a68ffcde27d30d9539f5af41857c946a10ab75d4455ff05a8c7e2dd82a1b193c14603e7d524459341b3e50ef2aa9f0036e435055f7ced71ecabd242d2772183e1ecccd5862bebfb0c8f2d4aeb08712114c79f828805a9f502ad2cf56faf93edaa4aed6a9f231f9ebe64ef8a62707c3d2a42aedbf90b43fa34f4d09b7d0ddf851881011ee196000000369d7c7bb77a80ef34d5264f437c77dc3c5801be321b62f55347c95a130d67"], 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) sendfile$auto(r3, r3, 0x0, 0x1000010000001fd) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) socket(0x1e, 0x4, 0x0) epoll_create$auto(0x3f) 9m22.250646273s ago: executing program 4 (id=2256): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) pipe$auto(0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) 9m21.274426419s ago: executing program 4 (id=2260): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000240)="ecb9f61b9943edb10e5f5e397623c09983519356d1aa0c8bf1618edbcd2e9ada051c8cdb3124b483a99243f15f862fe2f3c491a955e0aee929c3e42d4559bf0fd31d18126227285a81e7dabff16de062555470943010a6491cf6b3ceafb069898a27eb2d03ad8033d0c0", 0xe, 0x0, 0x9, 0x0, 0x1100000023, 0xf}, 0x6}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$auto(r1, 0x0, 0x1000000020) getcwd$auto(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x254, 0x9}, 0x20000007}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0x2, 0x1) socket(0xa, 0x801, 0x84) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r2, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 9m20.631954989s ago: executing program 4 (id=2262): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000240)="ecb9f61b9943edb10e5f5e397623c09983519356d1aa0c8bf1618edbcd2e9ada051c8cdb3124b483a99243f15f862fe2f3c491a955e0aee929c3e42d4559bf0fd31d18126227285a81e7dabff16de062555470943010a6491cf6b3ceafb069898a27eb2d03ad8033d0c0", 0xe, 0x0, 0x9, 0x0, 0x1100000023, 0xf}, 0x6}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x254, 0x9}, 0x20000007}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0x2, 0x1) socket(0xa, 0x801, 0x84) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r2, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 9m19.99990519s ago: executing program 4 (id=2266): r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x8200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto_mon_fops_text_t_mon_text(r2, &(0x7f0000000040)=""/64, 0x40) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000140)={0x40, 0x0, r0}) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x21a400, 0x0) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25070000000400038008000100", @ANYRES32=0x0, @ANYBLOB="3b52cb49d92c767c5a1b910a7d11d9bab72c209ea8e21f3e2225ad273ee088973106271777f53725e4681ae8b25b1c603f211f5e069c2bb4a7eea27e527c462417b9f1e85f44fd0362ae2d9c319c17ba3af41d6fb9d4348f3d48ff8b1acd0d3574e7827d7bf322e7e75f898cd30a349a4cb93c1ecef7e5f32c5a1ebf71dd3a30af65a61a5723319c568a25a7a9b94ae23464940221145fdd8a29be02b5b7de172c13ee26061b1788c8278a8aaaa576f459f99b647725"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r4 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x108002, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000000280)="fd431769c0726ea6e89a7255b35417d0b69479a24eb0592f38019cbca68727b06108a4379027abeaa3edfd095e5ffaf29a61607e0c9d91e00d52681b36b465e0da7272d8ad79d1e4d843684f74c129e0e7b2566ea6d281dcb63afa98ffbdacd828943ce97e7ab7958365ffa0ad301fb8b6f17f8fc83bf37c19d683e60a432b7350a86f652067d14c24edf4c9", 0x8c) socket(0x29, 0x2, 0x0) 9m19.4544608s ago: executing program 4 (id=2267): mmap$auto(0xf, 0x35, 0x3, 0x2000ebc, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x19, r1, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x80000001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0xc94) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x1000000003, 0x95f4da2d, 0xc, 0x6, 0x62, 0x48, 0x7, 0x6d3f, 0xa, 0x8, 0x8]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x10, 0x2, 0x8000) socket(0x15, 0x5, 0x0) 9m19.100287941s ago: executing program 33 (id=2267): mmap$auto(0xf, 0x35, 0x3, 0x2000ebc, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x19, r1, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x80000001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0xc94) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x1000000003, 0x95f4da2d, 0xc, 0x6, 0x62, 0x48, 0x7, 0x6d3f, 0xa, 0x8, 0x8]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x10, 0x2, 0x8000) socket(0x15, 0x5, 0x0) 13.612235356s ago: executing program 0 (id=3909): statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000003, 0x80, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffe]}, 0x200, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x5, 0x8) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x2) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0xf4, 0x0, &(0x7f00000002c0)=0x7, 0xc0040000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mlockall$auto(0x7) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'caif0\x00'}) socket(0x10, 0x2, 0xf) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) 12.713835546s ago: executing program 0 (id=3912): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0) write$auto(r0, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, 0x0, 0xa, 0xfffffffffffff806, 0x4) r1 = socket(0x2b, 0x1, 0xffffffff) socket(0xa, 0x2, 0x0) socket(0x3, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2501000000100002800c000100060000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) socket(0x1f, 0x3, 0xffffffff) 11.212677478s ago: executing program 3 (id=3914): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r0, 0x5, 0x2b, 0x0, &(0x7f0000000080)=0x7ff) connect$auto(0xffffffffffffffff, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) capget$auto(0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r1 = socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) bind$auto(r1, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto(0x3, 0x0, 0xf34) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c1282, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 10.448556517s ago: executing program 5 (id=3916): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop1\x00', 0x88800, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x1cb041, 0x0) ioctl$auto_FIONCLEX(r0, 0x5450, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4b", 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, 0x0, 0x28004853) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r4, 0x0, 0x6) adjtimex$auto(&(0x7f00000004c0)={0x7332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x4, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x5, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) setsockopt$auto(r3, 0xc, 0x97a, &(0x7f0000000040)='{+^\xba\'#(},{@/\x00', 0x100) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x7, 0x8, 0xfffffffffffffae5, 0x9487, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 10.315512344s ago: executing program 2 (id=3917): sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop13/hctx0/active\x00', 0x2, 0x0) ioctl$auto_BLKPBSZGET(r3, 0x127b, 0x0) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x43d) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)="3f4c4a4670e1bfc3b63ced3ebd751c86196a36e1d2ee0d") open(0x0, 0x4242, 0xe1d2b27bdc14aabc) io_uring_setup$auto(0x6, 0x0) clone$auto(0x8000000000000001, 0x4, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 9.676461532s ago: executing program 0 (id=3918): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r0, 0x100000000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xa, 0x1, 0x1, 0x4, 0x6) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x59, 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) read$auto_bdi_debug_stats_fops_(0xffffffffffffffff, &(0x7f00000001c0)=""/169, 0xa9) unshare$auto(0x40000080) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/hctx0/sched_tags_bitmap\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x6c, 0xfc) socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bpq3/statistics/rx_compressed\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video59\x00', 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) adjtimex$auto(0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x7ffc) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101202, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.675740415s ago: executing program 3 (id=3919): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pim6reg\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x7, &(0x7f0000000280)=@batch={0xa7, 0x3, 0x5ec, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x5a8}, 0x1092) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="85ce26bd7000ffdbdf251100000038000180080003000000010008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62617461647600080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="1c000180080003000a00000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="3c00018008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d3000000000000008000300030000001400020076657468315f746f5f687372000000001c00018008000300", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r6, @ANYBLOB="080003001100000014000200766c616e300000000000000000000000080003000300000008000300080000002000018008000300f600000014000200776c616e3000"/76], 0x118}, 0x1, 0x0, 0x0, 0x8c0}, 0x90) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd7c, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0x4000000000df, 0x19, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0x2) read$auto(r0, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x7) read$auto(r0, &(0x7f0000000180)='/sys/devic/net/bond0/bonding/all_sl\xbb\x85\xd4hd*\xba\xa1ive\x00\b7\xe6\xb9P\xa5Fd\xe5\xd9\xce9\x06\xd1V\x9a \xb5\xc1\xa5\x86\xeb@j\x9a\xf9\xc6\xa1NB\bxYc>N\xa9\x87\x8a\xe0\x19\xd9\x8d\xeen*0R@H\xee \x94t\xf0)\x91o\xd4\x91 \x81\xd5\xf2h\xc7\xb5\xeb\xf1\xec\xb1\x00'/128, 0x5) 9.384125492s ago: executing program 5 (id=3920): socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf25010000000c00078008000180"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4840) socket(0xa, 0x1, 0x84) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop13/hctx0/active\x00', 0x2, 0x0) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x722) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) clone$auto(0x8000000000000001, 0x4, 0x0, 0x0, 0x8) 8.349156691s ago: executing program 2 (id=3921): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, 0x0, 0x0, 0x0, 0x1000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0xffffffff}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, &(0x7f0000000100)={0x0, 0xfffffffd}, 0xa, 0xfffffffffffff806, 0x4) r1 = socket(0x2b, 0x1, 0xffffffff) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) socket(0x1f, 0x3, 0xffffffff) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) 8.339663284s ago: executing program 5 (id=3929): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x3, 0x3, 0x88) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x7, 0x6, 0x2) getrlimit$auto(0x6, &(0x7f0000000000)={0xe21, 0xa}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setns(r1, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/112, 0x70) mmap$auto(0x0, 0x40009, 0xdf, 0x2000000000000014, 0x7, 0x27fff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/12/effective_affinity\x00', 0x800, 0x0) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, 0x0, 0xa, 0xfffffffffffff806, 0x4) r2 = socket(0x1, 0x6, 0x4e31) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x8263c2a2) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) socket(0x1f, 0x3, 0xffffffff) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0xffffffffffffffdd, 0x2, 0x401) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffff1, 0x7ff, 0x185) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) 6.684536232s ago: executing program 5 (id=3922): sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop13/hctx0/active\x00', 0x2, 0x0) ioctl$auto_BLKPBSZGET(r3, 0x127b, 0x0) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x43d) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)="3f4c4a4670e1bfc3b63ced3ebd751c86196a36e1d2ee0d") open(0x0, 0x4242, 0xe1d2b27bdc14aabc) io_uring_setup$auto(0x6, 0x0) clone$auto(0x8000000000000001, 0x4, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6.175481681s ago: executing program 0 (id=3923): select$auto(0x11fff, 0x0, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000180)="17e1bb") read$auto(r0, 0x0, 0x7) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) tkill$auto(r2, 0x9) unshare$auto(0x40000080) 5.617933149s ago: executing program 3 (id=3924): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) read$auto(r1, 0x0, 0x1ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101200, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) statx$auto(r2, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0x3f00) 5.363355151s ago: executing program 5 (id=3925): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000001940)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) socket(0x11, 0x3, 0x6) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) set_tid_address$auto(&(0x7f0000000140)=0x6) (async) r5 = set_tid_address$auto(&(0x7f0000000140)=0x6) prctl$auto(0x5b, 0x9, r5, 0x0, 0xb) (async) prctl$auto(0x5b, 0x9, r5, 0x0, 0xb) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) readv$auto(r6, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, r6, 0x0, 0x2329) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r1, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r1, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 4.778115643s ago: executing program 2 (id=3926): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) kill$auto(0xffffffffffffffff, 0x9) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000180)={0x6, 0x6, 0x8, 0x7fff, 0x2, 0xfffe, 0xffffffffffffffff, [], {0x6, 0x9, 0x10001, 0x6, 0x9, 0x2d9, 0xfffffff9, 0x7ff, 0x18}, {0x5, 0x60b, 0x1000, 0x2, 0x200, 0x1, 0xff, 0x6, 0xe0000000000000}}) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004805}, 0x1) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1bc, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_PMKR0_NAME={0xa0, 0x102, "07ffc9c7e2b90442c8f64281be1a04f5613a794bc2c3267d953af50a13ea4bc03e47a00d271baa9d31420fbe477f75f6e87d859fb79467d1234c6691a198f4f8d227d4fde3d88ea6d9b4d6d4c462348c3117083797510bde6ad1456fcbd46190f4cecef5fcf3b1bea06d7dc0e12e5ce9cd69071dfbd76a89d7d0204c8c130fb6d877a7e926682a647ec7d93c4145f59574b69d3eef8ea123a70ff164"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xf6, 0xbd, "d163de8b22f1cf6f74881d3d19ea01a232e16b81560dab3a6deb10c5ab5fa987e1c45838c4f1fc32f8b4df373ee6a52b65c1b18854e39dec9d8739264ce1e6e863619d2208b3f37e9d90b98df4eec8755b4c34b97008a2a153d5d4934626eb4fb1d3c0dc2b6cfc5a6aaec72587744da58e3ee39cc167196bb400bdfce730f733e1037cc640bf99835ba9b25706f57f912312f04c99d57e40519f1f52235862fc1b39cfd7c89519b5e30145f99084462191300543dddef2afebae2eea703b35192c6a8337891261f7e9020a6d8ffa855a91d9d1008e96a8f2859e3ab6dd7b6151c24ed869ed428894bc8e8e1867af2b35e919"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000003c0), 0x248100, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0x8004ae98, 0x0) 3.866344464s ago: executing program 3 (id=3927): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x80080, 0x0) r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xa, 0x0, 0x0, 0x4, 0xb8a) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180)={0x7, 0x8, 0x3, 0x7, 0x2c, 0x13, 0x0, 0x0, 0x8001, 0x8, 0x2467, 0xffffffff, 0x8, @setup="797e25c75d1c8411", 0x100, 0xff, 0x1000, 0x1000}, &(0x7f0000000300)="951226e3c1b1f532f1e5a25993cf4f5e00695be2d3ee65bcb5b51508de36e09ddbfad02e480ff411630323515d7515e84edefbcae9969bd6addb282b89027cc956c972487d506406fe29d2d6c91a0cac54251bccb32304dd8b40f820108c00011f3b8ac6e272bf45307092066f0f86ef4bcd24bcfa4cc0c3d0eabc02aa9cf97e9ec0a9e22e58a2a53f747ab6d2913806afbb2c6d64b3c5798cefa1", 0x1}) socket(0x11, 0x80003, 0x300) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc0c3}, 0x4000881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b50", 0x3a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x40c00, 0x0) sendfile$auto(r3, r4, 0x0, 0x800048) 3.447565717s ago: executing program 3 (id=3928): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000211e789c0000000a00ffff0000000014002000ff01faffffff00000000000000000000060002000100"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x830) write$auto(r2, 0x0, 0x100) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/name_assign_type\x00', 0x0, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/025/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x10, 0x1, 0x4, &(0x7f00000001c0)}) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/213, 0xd5) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e53520008000200299604044fd4a51b3fe6069c9828ee7b3a5e16ba6775e89c1262b0563d7c891b267fcf6ddb51c53725c0c3f6a943674a41ccec006a142932a4d7289ac6f2c824c09ff3119ea2cfc72b15d43e993d3c327652f1a5427b014be7d9c98d988e59c0c0918d4e09077ad2be00371f57ba208c7301a71c72390bc3c511734141cb81bcc13a2df82cd95bd7", @ANYRES32=0x9, @ANYBLOB="0800070004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.729636705s ago: executing program 2 (id=3930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1000000003, 0x9, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010329bd700002dcdf2524"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 2.219145528s ago: executing program 0 (id=3931): setregid$auto(0xffffffffffffffff, 0xfffe) mount_setattr$auto(0x5, 0x0, 0x1000, &(0x7f0000000640)={0xa, 0x7f, 0x100000, @inferred=0xffffffffffffffff}, 0x20) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) fchmod$auto(r1, 0x7) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) socket(0x2, 0x80002, 0x73) (async) r4 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x801, 0x6) (async) r5 = socket(0x2, 0x801, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r7 = geteuid() sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x80) (async) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x80) ioprio_get$auto(0x360, r7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) setfsgid$auto(0x0) (async) r8 = setfsgid$auto(0x0) fchown$auto(r4, r7, r8) (async) fchown$auto(r4, r7, r8) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x3, 0x1, r2, r8, 0x40) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000274bf49052c11738b78f5f95ca8eeca877e5b3dee1845f8aacea1daa03ad86cf5280e52bf92928fe5d93447b26be513c727e9ffcf11aeaffa72841c4d504e593efd73cd3812e09d6db0a7296b67e1f17de57205089f59b37c0a01034957db12b536a62162768", @ANYRESHEX=r0, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000274bf49052c11738b78f5f95ca8eeca877e5b3dee1845f8aacea1daa03ad86cf5280e52bf92928fe5d93447b26be513c727e9ffcf11aeaffa72841c4d504e593efd73cd3812e09d6db0a7296b67e1f17de57205089f59b37c0a01034957db12b536a62162768", @ANYRESHEX=r0, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1d, 0xbb, "3b4ba31b7e45034274732e52f6546a982646a07bf807835954"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x12, 0x17, "a307e2030761ea388317ea25d6d7"}]}, 0x4c}}, 0x48800) 1.991214239s ago: executing program 0 (id=3932): select$auto(0x11fff, 0x0, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) read$auto(0xffffffffffffffff, 0x0, 0x7) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) tkill$auto(r1, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') unshare$auto(0x40000080) 1.919598701s ago: executing program 5 (id=3933): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pim6reg\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x7, &(0x7f0000000280)=@batch={0xa7, 0x3, 0x5ec, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x5a8}, 0x1092) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="85ce26bd7000ffdbdf251100000038000180080003000000010008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62617461647600080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="1c000180080003000a00000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="3c00018008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d3000000000000008000300030000001400020076657468315f746f5f687372000000001c00018008000300", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r6, @ANYBLOB="080003001100000014000200766c616e300000000000000000000000080003000300000008000300080000002000018008000300f600000014000200776c616e3000"/76], 0x118}, 0x1, 0x0, 0x0, 0x8c0}, 0x90) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd7c, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0x4000000000df, 0x19, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0x2) read$auto(r0, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x7) read$auto(r0, &(0x7f0000000180)='/sys/devic/net/bond0/bonding/all_sl\xbb\x85\xd4hd*\xba\xa1ive\x00\b7\xe6\xb9P\xa5Fd\xe5\xd9\xce9\x06\xd1V\x9a \xb5\xc1\xa5\x86\xeb@j\x9a\xf9\xc6\xa1NB\bxYc>N\xa9\x87\x8a\xe0\x19\xd9\x8d\xeen*0R@H\xee \x94t\xf0)\x91o\xd4\x91 \x81\xd5\xf2h\xc7\xb5\xeb\xf1\xec\xb1\x00'/128, 0x5) 1.757418023s ago: executing program 3 (id=3934): sysfs$auto(0xb, 0x3ff, 0xfffffffffffffffe) r0 = socket(0x27, 0x800, 0xa5) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x2404c004) socket(0x2, 0x80800, 0x0) mmap$auto(0x0, 0xa00006, 0xe4, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f00000015c0)={0x5, 0x85, 0x9416, 0x1, 0xb, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000a, 0x2, 0x19, r2, 0x27ffc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0x18eb41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0x8, 0xa, '$*,&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x841) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, 0x0, 0x300, 0x3, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_CDEV={0x17, 0xe, 0x0, 0x1, [@generic="093926193f8edd9dc3ea1cb1c1d96374b14037"]}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xcc64}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0xfffffeff}, @THERMAL_GENL_ATTR_TZ_GOV={0x16f, 0xc, 0x0, 0x1, [@nested={0x4, 0xb}, @generic="1c146a8ab79994", @generic="9e713ba5add41d7b5569613770a65ec5da5ad2ad71857f160c40569a30861d6eec5927950ac55993124a964e66bb7b05fb789a0654abf716c41ebe57fdd0e7d69965f8fdb4429c2085b9d0364ae3ac3d6a009c5612e8682ad833c77cdf1fb376113181e2c45cac4bb13867c48206b0748258af6b29dc8e27920de8810b3a6abae5c16d201832c76a502bed06b0a98f32f54043cec8ca9e02f92f3d3cd6a249018a6ac938b97ab79a37dbd6a29d30915bcdb564832028185e1e96f24577c0dafcea91f8abab39ba5232db7f5691cf1aac5f1ac0eb2c82bc3412a0b7993fd5d3a7bbb38335bc5cd6", @generic="dbc90a0d7a74467b645207557eaa751f191f37bc1ab3b56461055c0a46eb01f8681af8439b445e1b5d8ec487a9e1c51ae6", @nested={0x33, 0xa9, 0x0, 0x1, [@generic="11ac3c98e36b3f392db7c7c4c29d633ca7ea1282719453c448ff62937d064689759ff9ad53647d8a50f1a3", @nested={0x4, 0x3}]}, @typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1004c810}, 0xc000) open(0x0, 0xeee00, 0x129) socket(0x15, 0xa, 0x5) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x6, 0xfffc, 0x16, 0x401, 0x80000000008) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x7, 0x8001, 0x2000000000000149) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) mmap$auto(0xfffffffffffffffd, 0x6, 0x4, 0x17, r1, 0x7e) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyq4\x00', 0x2241, 0x0) mmap$auto(0x9, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x101c00, 0x0) 790.347207ms ago: executing program 2 (id=3935): sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop13/hctx0/active\x00', 0x2, 0x0) ioctl$auto_BLKPBSZGET(r3, 0x127b, 0x0) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x421) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)="3f4c4a4670e1bfc3b63ced3ebd751c86196a36e1d2ee0d") open(0x0, 0x4242, 0xe1d2b27bdc14aabc) io_uring_setup$auto(0x6, 0x0) clone$auto(0x8000000000000001, 0x4, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 0s ago: executing program 2 (id=3936): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x80202, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x124001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioperm$auto(0xffff, 0xe, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xe, 0x100000000007) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0xfffff7fffffffffa, 0x81) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) r6 = fcntl$auto(0x0, 0x8, 0x0) fcntl$auto_F_RDLCK(r6, 0x9, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/max_vfs\x00', 0x101a00, 0x0) kernel console output (not intermixed with test programs): T6734] do_syscall_64+0xcd/0x230 [ 970.231741][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.231774][ T6734] RIP: 0033:0x7f725658e969 [ 970.231809][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.231856][ T6734] RSP: 002b:00007f725748f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 970.231891][ T6734] RAX: ffffffffffffffda RBX: 00007f72567b5fa0 RCX: 00007f725658e969 [ 970.231910][ T6734] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 970.231929][ T6734] RBP: 00007f7256610ab1 R08: 0000000000000401 R09: 0000000000008000 [ 970.231947][ T6734] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 970.231965][ T6734] R13: 0000000000000000 R14: 00007f72567b5fa0 R15: 00007ffdf32ea248 [ 970.232001][ T6734] [ 970.540616][ T6734] tc_dump_action: action bad kind [ 971.075088][ T6750] CIFS mount error: No usable UNC path provided in device string! [ 971.075088][ T6750] [ 971.095780][ T6750] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 971.227385][ T6779] ptrace attach of "./syz-executor exec"[32428] was attempted by "./syz-executor exec"[6779] [ 971.302040][ T6776] bond0: option all_slaves_active: invalid value () [ 972.209657][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2835'. [ 972.262845][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.316806][ T6815] bridge_slave_1 (unregistering): left allmulticast mode [ 972.338584][ T6815] bridge_slave_1 (unregistering): left promiscuous mode [ 972.375230][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.830125][ T6848] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 974.372790][ T6867] bond0: option all_slaves_active: invalid value () [ 975.758527][ T6841] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 975.758628][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 975.772703][ T6841] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 976.439239][ T6841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.445940][ T6841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 976.462587][ T6841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 976.480245][ T6841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 976.502697][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.511135][ T6841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 976.810047][ T6970] block nbd7: not configured, cannot reconfigure [ 976.863961][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'. [ 976.882311][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.019998][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.389464][ T6980] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x27 pfn:0x7fe00 [ 977.433178][ T6980] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 977.461909][ T6980] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 977.486538][ T6980] raw: 0000000000000027 0000000000000000 0000000400000002 0000000000000000 [ 977.519589][ T6980] page dumped because: unmovable page [ 977.525040][ T6980] page_owner tracks the page as allocated [ 977.556983][ T6980] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 32411, tgid 32411 (syz-executor), ts 815674032049, free_ts 815343968816 [ 977.623244][ T6980] post_alloc_hook+0x181/0x1b0 [ 977.648426][ T6980] get_page_from_freelist+0x135c/0x3920 [ 977.657543][ T6980] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 977.683893][ T6980] alloc_pages_mpol+0x1fb/0x550 [ 977.695836][ T6980] alloc_pages_noprof+0x131/0x390 [ 977.705928][ T6980] __vmalloc_node_range_noprof+0x732/0x1540 [ 977.728266][ T6980] vmalloc_user_noprof+0x6b/0x90 [ 977.736283][ T6980] kcov_ioctl+0x4c/0x730 [ 977.743684][ T6980] __x64_sys_ioctl+0x190/0x200 [ 977.750611][ T6980] do_syscall_64+0xcd/0x230 [ 977.755303][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.764111][ T6980] page last free pid 32248 tgid 32234 stack trace: [ 977.777947][ T6980] free_unref_folios+0x999/0x1630 [ 977.787981][ T6980] folios_put_refs+0x56f/0x740 [ 977.805423][ T6980] shmem_undo_range+0x58f/0x1150 [ 977.820260][ T6980] shmem_evict_inode+0x3a1/0xbe0 [ 977.827732][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 977.827747][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 977.865812][ T6980] evict+0x3e3/0x920 [ 977.905295][ T6980] iput+0x521/0x880 [ 977.944947][ T6980] dentry_unlink_inode+0x29c/0x480 [ 977.987069][ T6980] __dentry_kill+0x1d0/0x600 [ 977.991782][ T6980] dput.part.0+0x4b1/0x9b0 [ 977.999083][ T6980] dput+0x1f/0x30 [ 978.005051][ T6980] __fput+0x51c/0xb70 [ 978.013899][ T6980] task_work_run+0x14d/0x240 [ 978.022067][ T6980] do_exit+0xafb/0x2c30 [ 978.027475][ T6980] do_group_exit+0xd3/0x2a0 [ 978.035455][ T6980] get_signal+0x2673/0x26d0 [ 978.043585][ T6980] arch_do_signal_or_restart+0x8f/0x7a0 [ 978.142739][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 978.475958][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 978.531852][ T7015] block nbd7: not configured, cannot reconfigure [ 978.554217][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 978.696636][ T7011] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2859'. [ 979.878668][ T7028] FAULT_INJECTION: forcing a failure. [ 979.878668][ T7028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.898540][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 979.948720][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.5.2863 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 979.948785][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 979.948814][ T7028] Call Trace: [ 979.948831][ T7028] [ 979.948845][ T7028] dump_stack_lvl+0x16c/0x1f0 [ 979.948890][ T7028] should_fail_ex+0x512/0x640 [ 979.948941][ T7028] _copy_from_user+0x2e/0xd0 [ 979.948990][ T7028] kstrtouint_from_user+0xd6/0x1d0 [ 979.949039][ T7028] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 979.949070][ T7028] ? __lock_acquire+0xaa4/0x1ba0 [ 979.949141][ T7028] proc_fail_nth_write+0x83/0x250 [ 979.949198][ T7028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 979.949280][ T7028] vfs_write+0x25c/0x1180 [ 979.949308][ T7028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 979.949367][ T7028] ? __pfx___mutex_lock+0x10/0x10 [ 979.949405][ T7028] ? __pfx_vfs_write+0x10/0x10 [ 979.949442][ T7028] ? __fget_files+0x20e/0x3c0 [ 979.949520][ T7028] ksys_write+0x12a/0x240 [ 979.949561][ T7028] ? __pfx_ksys_write+0x10/0x10 [ 979.949586][ T7028] ? rcu_is_watching+0x12/0xc0 [ 979.949625][ T7028] do_syscall_64+0xcd/0x230 [ 979.949670][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.949700][ T7028] RIP: 0033:0x7fb21a18d41f [ 979.949722][ T7028] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 979.949749][ T7028] RSP: 002b:00007fb21af89030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 979.949774][ T7028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb21a18d41f [ 979.949792][ T7028] RDX: 0000000000000001 RSI: 00007fb21af890a0 RDI: 0000000000000003 [ 979.949810][ T7028] RBP: 00007fb21af89090 R08: 0000000000000000 R09: 0000000000000000 [ 979.949827][ T7028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 979.949843][ T7028] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 979.949898][ T7028] [ 980.534703][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 980.613285][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 980.832929][ T7056] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x27 pfn:0x7fe00 [ 980.843126][ T7056] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 980.868604][ T7056] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 980.904779][ T7056] raw: 0000000000000027 0000000000000000 0000000500000003 0000000000000000 [ 980.921853][ T7056] page dumped because: unmovable page [ 980.927373][ T7056] page_owner tracks the page as allocated [ 980.952540][ T7056] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 32411, tgid 32411 (syz-executor), ts 815674032049, free_ts 815343968816 [ 981.021924][ T7056] post_alloc_hook+0x181/0x1b0 [ 981.026802][ T7056] get_page_from_freelist+0x135c/0x3920 [ 981.080723][ T7056] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 981.082861][ T7069] FAULT_INJECTION: forcing a failure. [ 981.082861][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 981.086689][ T7056] alloc_pages_mpol+0x1fb/0x550 [ 981.129075][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.0.2869 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 981.129116][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 981.129134][ T7069] Call Trace: [ 981.129145][ T7069] [ 981.129155][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 981.129202][ T7069] should_fail_ex+0x512/0x640 [ 981.129259][ T7069] ? fs_reclaim_acquire+0xae/0x150 [ 981.129308][ T7069] ? tomoyo_encode2+0x100/0x3e0 [ 981.129348][ T7069] should_failslab+0xc2/0x120 [ 981.129386][ T7069] __kmalloc_noprof+0xd2/0x510 [ 981.129428][ T7069] tomoyo_encode2+0x100/0x3e0 [ 981.129476][ T7069] tomoyo_encode+0x29/0x50 [ 981.129516][ T7069] tomoyo_realpath_from_path+0x18f/0x6e0 [ 981.129571][ T7069] tomoyo_check_open_permission+0x2ab/0x3c0 [ 981.129611][ T7069] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 981.129646][ T7069] ? do_raw_spin_unlock+0x172/0x230 [ 981.129731][ T7069] ? do_raw_spin_lock+0x12c/0x2b0 [ 981.129795][ T7069] tomoyo_file_open+0x6b/0x90 [ 981.129845][ T7069] security_file_open+0x84/0x1e0 [ 981.129889][ T7069] do_dentry_open+0x596/0x1c10 [ 981.129938][ T7069] vfs_open+0x82/0x3f0 [ 981.129984][ T7069] path_openat+0x1e5e/0x2d40 [ 981.130029][ T7069] ? __pfx_path_openat+0x10/0x10 [ 981.130070][ T7069] do_filp_open+0x20b/0x470 [ 981.130101][ T7069] ? __pfx_do_filp_open+0x10/0x10 [ 981.130145][ T7069] ? __pfx_kfree_link+0x10/0x10 [ 981.130195][ T7069] ? alloc_fd+0x471/0x7d0 [ 981.130254][ T7069] do_sys_openat2+0x11b/0x1d0 [ 981.130291][ T7069] ? __pfx_do_sys_openat2+0x10/0x10 [ 981.130331][ T7069] ? __pfx___might_resched+0x10/0x10 [ 981.130373][ T7069] __x64_sys_openat+0x174/0x210 [ 981.130413][ T7069] ? __pfx___x64_sys_openat+0x10/0x10 [ 981.130456][ T7069] ? rcu_is_watching+0x12/0xc0 [ 981.130495][ T7069] do_syscall_64+0xcd/0x230 [ 981.130541][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.130572][ T7069] RIP: 0033:0x7f7b28d8e969 [ 981.130597][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.130627][ T7069] RSP: 002b:00007f7b29c80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 981.130675][ T7069] RAX: ffffffffffffffda RBX: 00007f7b28fb6160 RCX: 00007f7b28d8e969 [ 981.130698][ T7069] RDX: 0000000000040080 RSI: 0000200000003640 RDI: ffffffffffffff9c [ 981.130720][ T7069] RBP: 00007f7b28e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 981.130740][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.130761][ T7069] R13: 0000000000000000 R14: 00007f7b28fb6160 R15: 00007ffd6f4fb7f8 [ 981.130804][ T7069] [ 981.441565][ T7069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 981.557038][ T7056] alloc_pages_noprof+0x131/0x390 [ 981.623060][ T7056] __vmalloc_node_range_noprof+0x732/0x1540 [ 981.716897][ T7056] vmalloc_user_noprof+0x6b/0x90 [ 981.732282][ T7056] kcov_ioctl+0x4c/0x730 [ 981.736623][ T7056] __x64_sys_ioctl+0x190/0x200 [ 981.787060][ T7056] do_syscall_64+0xcd/0x230 [ 981.817778][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.823784][ T7056] page last free pid 32248 tgid 32234 stack trace: [ 981.882394][ T7056] free_unref_folios+0x999/0x1630 [ 981.888630][ T7056] folios_put_refs+0x56f/0x740 [ 981.893589][ T7056] shmem_undo_range+0x58f/0x1150 [ 981.899099][ T7056] shmem_evict_inode+0x3a1/0xbe0 [ 981.904180][ T7056] evict+0x3e3/0x920 [ 981.908759][ T7056] iput+0x521/0x880 [ 981.912627][ T7056] dentry_unlink_inode+0x29c/0x480 [ 981.918301][ T7056] __dentry_kill+0x1d0/0x600 [ 981.922948][ T7056] dput.part.0+0x4b1/0x9b0 [ 981.939776][ T7056] dput+0x1f/0x30 [ 981.943483][ T7056] __fput+0x51c/0xb70 [ 981.966302][ T7056] task_work_run+0x14d/0x240 [ 981.973683][ T7056] do_exit+0xafb/0x2c30 [ 981.994380][ T7056] do_group_exit+0xd3/0x2a0 [ 981.999133][ T7056] get_signal+0x2673/0x26d0 [ 982.021714][ T7056] arch_do_signal_or_restart+0x8f/0x7a0 [ 983.720797][ T7233] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2877'. [ 984.242338][ T7272] block nbd7: not configured, cannot reconfigure [ 985.637398][ T5842] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 986.371421][ T7975] EXT4-fs (sda1): Delayed block allocation failed for inode 1929 at logical offset 9 with max blocks 3 with error 117 [ 986.416382][ T7975] EXT4-fs (sda1): This should not happen!! Data will be lost [ 986.416382][ T7975] [ 986.909983][ T7373] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x27 pfn:0x7fe00 [ 986.924376][ T7373] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 986.938499][ T7373] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 986.966815][ T7378] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2889'. [ 986.976657][ T7373] raw: 0000000000000027 0000000000000000 0000000400000002 0000000000000000 [ 987.040537][ T7373] page dumped because: unmovable page [ 987.062027][ T7373] page_owner tracks the page as allocated [ 987.075805][ T7380] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2889'. [ 987.099648][ T7373] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 32411, tgid 32411 (syz-executor), ts 815674032049, free_ts 815343968816 [ 987.150026][ T7373] post_alloc_hook+0x181/0x1b0 [ 987.185347][ T7373] get_page_from_freelist+0x135c/0x3920 [ 987.219190][ T7373] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 987.225172][ T7373] alloc_pages_mpol+0x1fb/0x550 [ 987.250661][ T7373] alloc_pages_noprof+0x131/0x390 [ 987.255788][ T7373] __vmalloc_node_range_noprof+0x732/0x1540 [ 987.282104][ T7373] vmalloc_user_noprof+0x6b/0x90 [ 987.287136][ T7373] kcov_ioctl+0x4c/0x730 [ 987.308155][ T7373] __x64_sys_ioctl+0x190/0x200 [ 987.318250][ T7373] do_syscall_64+0xcd/0x230 [ 987.322916][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.348150][ T7373] page last free pid 32248 tgid 32234 stack trace: [ 987.354709][ T7373] free_unref_folios+0x999/0x1630 [ 987.378057][ T7373] folios_put_refs+0x56f/0x740 [ 987.388150][ T7373] shmem_undo_range+0x58f/0x1150 [ 987.398061][ T7373] shmem_evict_inode+0x3a1/0xbe0 [ 987.403085][ T7373] evict+0x3e3/0x920 [ 987.418975][ T7373] iput+0x521/0x880 [ 987.440591][ T7373] dentry_unlink_inode+0x29c/0x480 [ 987.445809][ T7373] __dentry_kill+0x1d0/0x600 [ 987.460863][ T7373] dput.part.0+0x4b1/0x9b0 [ 987.465358][ T7373] dput+0x1f/0x30 [ 987.482208][ T7373] __fput+0x51c/0xb70 [ 987.486804][ T7373] task_work_run+0x14d/0x240 [ 987.517233][ T7373] do_exit+0xafb/0x2c30 [ 987.521473][ T7373] do_group_exit+0xd3/0x2a0 [ 987.526044][ T7373] get_signal+0x2673/0x26d0 [ 987.547133][ T7373] arch_do_signal_or_restart+0x8f/0x7a0 [ 987.837309][ T7393] tc_dump_action: action bad kind [ 987.984503][ T7395] FAULT_INJECTION: forcing a failure. [ 987.984503][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 987.997624][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.2.2893 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 987.997655][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 987.997677][ T7395] Call Trace: [ 987.997685][ T7395] [ 987.997693][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 987.997728][ T7395] should_fail_ex+0x512/0x640 [ 987.997759][ T7395] ? fs_reclaim_acquire+0xae/0x150 [ 987.997796][ T7395] should_failslab+0xc2/0x120 [ 987.997823][ T7395] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 987.997848][ T7395] ? security_inode_alloc+0x3b/0x2b0 [ 987.997876][ T7395] security_inode_alloc+0x3b/0x2b0 [ 987.997901][ T7395] inode_init_always_gfp+0xce4/0x1030 [ 987.997940][ T7395] alloc_inode+0x86/0x240 [ 987.997966][ T7395] path_from_stashed+0x2be/0xb00 [ 987.997988][ T7395] ? do_raw_spin_lock+0x12c/0x2b0 [ 987.998024][ T7395] ? __pfx_path_from_stashed+0x10/0x10 [ 987.998047][ T7395] ? do_raw_spin_unlock+0x172/0x230 [ 987.998084][ T7395] ns_get_path+0x5f/0x80 [ 987.998118][ T7395] proc_ns_get_link+0x121/0x260 [ 987.998153][ T7395] ? __pfx_proc_ns_get_link+0x10/0x10 [ 987.998189][ T7395] ? __pfx___might_resched+0x10/0x10 [ 987.998217][ T7395] ? __pfx_proc_ns_get_link+0x10/0x10 [ 987.998252][ T7395] step_into+0x1b22/0x2270 [ 987.998290][ T7395] ? __pfx_step_into+0x10/0x10 [ 987.998321][ T7395] ? find_held_lock+0x2b/0x80 [ 987.998350][ T7395] path_openat+0x749/0x2d40 [ 987.998380][ T7395] ? __pfx_path_openat+0x10/0x10 [ 987.998407][ T7395] do_filp_open+0x20b/0x470 [ 987.998428][ T7395] ? __pfx_do_filp_open+0x10/0x10 [ 987.998467][ T7395] ? alloc_fd+0x471/0x7d0 [ 987.998508][ T7395] do_sys_openat2+0x11b/0x1d0 [ 987.998537][ T7395] ? __pfx_do_sys_openat2+0x10/0x10 [ 987.998576][ T7395] __x64_sys_openat+0x174/0x210 [ 987.998606][ T7395] ? __pfx___x64_sys_openat+0x10/0x10 [ 987.998637][ T7395] ? rcu_is_watching+0x12/0xc0 [ 987.998670][ T7395] do_syscall_64+0xcd/0x230 [ 987.998723][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.998747][ T7395] RIP: 0033:0x7f228018d2d0 [ 987.998766][ T7395] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 987.998789][ T7395] RSP: 002b:00007f2281072f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 987.998811][ T7395] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f228018d2d0 [ 987.998826][ T7395] RDX: 0000000000000002 RSI: 00007f2281072fa0 RDI: 00000000ffffff9c [ 987.998841][ T7395] RBP: 00007f2281072fa0 R08: 0000000000000000 R09: 0000000000000000 [ 987.998856][ T7395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 987.998870][ T7395] R13: 0000000000000000 R14: 00007f22803b5fa0 R15: 00007fffbd7ca5d8 [ 987.998899][ T7395] [ 988.321662][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 988.331201][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 988.340300][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.349042][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.357060][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.403256][ T7403] FAULT_INJECTION: forcing a failure. [ 988.403256][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 988.416282][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.5.2895 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 988.416321][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 988.416340][ T7403] Call Trace: [ 988.416350][ T7403] [ 988.416362][ T7403] dump_stack_lvl+0x16c/0x1f0 [ 988.416407][ T7403] should_fail_ex+0x512/0x640 [ 988.416448][ T7403] ? __kmalloc_noprof+0xbf/0x510 [ 988.416483][ T7403] ? lsm_blob_alloc+0x68/0x90 [ 988.416535][ T7403] should_failslab+0xc2/0x120 [ 988.416573][ T7403] __kmalloc_noprof+0xd2/0x510 [ 988.416606][ T7403] ? __pfx_perf_event_init_task+0x10/0x10 [ 988.416634][ T7403] ? audit_alloc+0xa2/0x7b0 [ 988.416677][ T7403] ? __pfx_audit_alloc+0x10/0x10 [ 988.416724][ T7403] lsm_blob_alloc+0x68/0x90 [ 988.416770][ T7403] security_task_alloc+0x2d/0x260 [ 988.416813][ T7403] copy_process+0x24ba/0x91a0 [ 988.416851][ T7403] ? find_held_lock+0x2b/0x80 [ 988.416880][ T7403] ? schedule+0x2d7/0x3a0 [ 988.416936][ T7403] ? __pfx_copy_process+0x10/0x10 [ 988.416972][ T7403] ? __pfx___futex_wait+0x10/0x10 [ 988.417011][ T7403] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 988.417055][ T7403] ? __pfx_futex_wake_mark+0x10/0x10 [ 988.417124][ T7403] kernel_clone+0xfc/0x960 [ 988.417162][ T7403] ? __pfx_kernel_clone+0x10/0x10 [ 988.417217][ T7403] __do_sys_clone+0xce/0x120 [ 988.417252][ T7403] ? __pfx___do_sys_clone+0x10/0x10 [ 988.417307][ T7403] ? rcu_is_watching+0x12/0xc0 [ 988.417343][ T7403] do_syscall_64+0xcd/0x230 [ 988.417386][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.417415][ T7403] RIP: 0033:0x7fb21a18e969 [ 988.417437][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.417466][ T7403] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 988.417493][ T7403] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 988.417512][ T7403] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 988.417536][ T7403] RBP: 00007fb21a210ab1 R08: 0000000000000008 R09: 0000000000000000 [ 988.417554][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.417571][ T7403] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 988.417607][ T7403] [ 988.734305][ T7395] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x27 pfn:0x7fe00 [ 988.810346][ T7395] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 988.847087][ T7395] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 988.893209][ T6659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.938377][ T7395] raw: 0000000000000027 0000000000000000 0000000400000002 0000000000000000 [ 988.969771][ T7395] page dumped because: unmovable page [ 989.008403][ T7395] page_owner tracks the page as allocated [ 989.033973][ T7395] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 32411, tgid 32411 (syz-executor), ts 815674032049, free_ts 815343968816 [ 989.064045][ T7395] post_alloc_hook+0x181/0x1b0 [ 989.068957][ T7395] get_page_from_freelist+0x135c/0x3920 [ 989.077976][ T7395] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 989.088285][ T7395] alloc_pages_mpol+0x1fb/0x550 [ 989.093988][ T7395] alloc_pages_noprof+0x131/0x390 [ 989.117255][ T7395] __vmalloc_node_range_noprof+0x732/0x1540 [ 989.149305][ T7395] vmalloc_user_noprof+0x6b/0x90 [ 989.165394][ T7395] kcov_ioctl+0x4c/0x730 [ 989.188515][ T7395] __x64_sys_ioctl+0x190/0x200 [ 989.211383][ T7395] do_syscall_64+0xcd/0x230 [ 989.217501][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.229714][ T7395] page last free pid 32248 tgid 32234 stack trace: [ 989.236362][ T7395] free_unref_folios+0x999/0x1630 [ 989.243330][ T7395] folios_put_refs+0x56f/0x740 [ 989.252349][ T7395] shmem_undo_range+0x58f/0x1150 [ 989.258631][ T7395] shmem_evict_inode+0x3a1/0xbe0 [ 989.263791][ T7395] evict+0x3e3/0x920 [ 989.267849][ T7395] iput+0x521/0x880 [ 989.275231][ T7395] dentry_unlink_inode+0x29c/0x480 [ 989.281672][ T7395] __dentry_kill+0x1d0/0x600 [ 989.296721][ T7395] dput.part.0+0x4b1/0x9b0 [ 989.304603][ T7395] dput+0x1f/0x30 [ 989.308448][ T7395] __fput+0x51c/0xb70 [ 989.312536][ T7395] task_work_run+0x14d/0x240 [ 989.317223][ T7395] do_exit+0xafb/0x2c30 [ 989.327405][ T7395] do_group_exit+0xd3/0x2a0 [ 989.340927][ T7395] get_signal+0x2673/0x26d0 [ 989.347754][ T7395] arch_do_signal_or_restart+0x8f/0x7a0 [ 989.439650][ T6659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.638495][ T7482] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 989.739680][ T6659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.989256][ T6659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.084049][ T7458] bond0: option all_slaves_active: invalid value () [ 990.202237][ T7396] chnl_net:caif_netlink_parms(): no params data found [ 990.412881][ T5834] Bluetooth: hci0: command tx timeout [ 990.836686][ T6659] bridge_slave_1: left allmulticast mode [ 990.851281][ T6659] bridge_slave_1: left promiscuous mode [ 990.857065][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.923185][ T6659] bridge_slave_0: left allmulticast mode [ 990.943344][ T6659] bridge_slave_0: left promiscuous mode [ 990.950358][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.561233][ T6659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.571538][ T6659] bond0 (unregistering): Released all slaves [ 991.585779][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.593231][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.602421][ T7396] bridge_slave_0: entered allmulticast mode [ 991.614696][ T7396] bridge_slave_0: entered promiscuous mode [ 991.643896][ T7664] tc_dump_action: action bad kind [ 991.654975][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.662640][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.670958][ T7396] bridge_slave_1: entered allmulticast mode [ 991.692684][ T7396] bridge_slave_1: entered promiscuous mode [ 991.793672][ T7681] FAULT_INJECTION: forcing a failure. [ 991.793672][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 991.810575][ T7396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.816048][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.3.2904 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 991.816089][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 991.816110][ T7681] Call Trace: [ 991.816120][ T7681] [ 991.816132][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 991.816196][ T7681] should_fail_ex+0x512/0x640 [ 991.816242][ T7681] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 991.816292][ T7681] should_failslab+0xc2/0x120 [ 991.816344][ T7681] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 991.816380][ T7681] ? vm_area_dup+0x25/0x760 [ 991.816421][ T7681] vm_area_dup+0x25/0x760 [ 991.816475][ T7681] copy_process+0x7f67/0x91a0 [ 991.816554][ T7681] ? __pfx_copy_process+0x10/0x10 [ 991.816589][ T7681] ? __pfx___futex_wait+0x10/0x10 [ 991.816662][ T7681] kernel_clone+0xfc/0x960 [ 991.816703][ T7681] ? __pfx_kernel_clone+0x10/0x10 [ 991.816764][ T7681] __do_sys_clone+0xce/0x120 [ 991.816802][ T7681] ? __pfx___do_sys_clone+0x10/0x10 [ 991.816861][ T7681] ? rcu_is_watching+0x12/0xc0 [ 991.816900][ T7681] do_syscall_64+0xcd/0x230 [ 991.816946][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.816976][ T7681] RIP: 0033:0x7f725658e969 [ 991.817000][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.817030][ T7681] RSP: 002b:00007f725748f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 991.817058][ T7681] RAX: ffffffffffffffda RBX: 00007f72567b5fa0 RCX: 00007f725658e969 [ 991.817078][ T7681] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 991.817097][ T7681] RBP: 00007f7256610ab1 R08: 0000000000000008 R09: 0000000000000000 [ 991.817116][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.817134][ T7681] R13: 0000000000000000 R14: 00007f72567b5fa0 R15: 00007ffdf32ea248 [ 991.817173][ T7681] [ 992.051631][ T7396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.214408][ T7396] team0: Port device team_slave_0 added [ 992.280946][ T7396] team0: Port device team_slave_1 added [ 992.411052][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.432821][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.466162][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.476761][ T5834] Bluetooth: hci0: command tx timeout [ 992.497316][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.504642][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.538403][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.586217][ T6659] hsr_slave_0: left promiscuous mode [ 992.601870][ T6659] hsr_slave_1: left promiscuous mode [ 992.607772][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.615784][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.619347][ T7781] EXT4-fs warning: 12 callbacks suppressed [ 992.619368][ T7781] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 992.650111][ T7781] EXT4-fs error: 12 callbacks suppressed [ 992.650131][ T7781] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 992.670446][ T7781] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 992.686562][ T7781] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 992.711509][ T6659] veth1_macvtap: left promiscuous mode [ 992.717134][ T6659] veth0_macvtap: left promiscuous mode [ 992.734314][ T6659] veth1_vlan: left promiscuous mode [ 992.751556][ T6659] veth0_vlan: left promiscuous mode [ 992.789808][ T7784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 992.810295][ T7784] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 992.834683][ T7784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 992.862931][ T7784] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 993.273132][ T6659] team0 (unregistering): Port device team_slave_1 removed [ 993.317627][ T6659] team0 (unregistering): Port device team_slave_0 removed [ 993.896645][ T7396] hsr_slave_0: entered promiscuous mode [ 993.913607][ T7396] hsr_slave_1: entered promiscuous mode [ 994.090959][ T7872] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.124319][ T7872] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 994.149675][ T7872] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.167528][ T7872] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 994.268488][ T7901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.294809][ T7901] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 994.311709][ T7901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.331056][ T7901] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 994.541414][ T5834] Bluetooth: hci0: command tx timeout [ 994.637255][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.652513][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.687962][ T7951] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.711768][ T7951] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 994.725578][ T7951] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 994.744748][ T7951] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 994.905807][ T7971] size and base must be multiples of 4 kiB [ 994.913138][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.5.2912 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 994.913180][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 994.913199][ T7971] Call Trace: [ 994.913210][ T7971] [ 994.913222][ T7971] dump_stack_lvl+0x16c/0x1f0 [ 994.913270][ T7971] mtrr_del+0xd1/0x110 [ 994.913316][ T7971] mtrr_ioctl+0x922/0xcf0 [ 994.913364][ T7971] ? __pfx_mtrr_ioctl+0x10/0x10 [ 994.913416][ T7971] ? find_held_lock+0x2b/0x80 [ 994.913455][ T7971] ? __fget_files+0x20e/0x3c0 [ 994.913504][ T7971] ? __pfx_mtrr_ioctl+0x10/0x10 [ 994.913549][ T7971] proc_reg_unlocked_ioctl+0x226/0x320 [ 994.913580][ T7971] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 994.913615][ T7971] __x64_sys_ioctl+0x190/0x200 [ 994.913660][ T7971] do_syscall_64+0xcd/0x230 [ 994.913710][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.913742][ T7971] RIP: 0033:0x7fb21a18e969 [ 994.913766][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.913796][ T7971] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.913824][ T7971] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 994.913844][ T7971] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009 [ 994.913863][ T7971] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 994.913881][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.913899][ T7971] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 994.913942][ T7971] [ 995.705759][ T7396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 995.742579][ T7396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 995.873250][ T7396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 995.926656][ T7396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 996.310925][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 996.310949][ T30] audit: type=1326 audit(6041259301.648:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.3.2916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f725658e969 code=0x0 [ 996.437031][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.610022][ T5834] Bluetooth: hci0: command tx timeout [ 996.663360][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.685992][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.693275][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.771434][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.778736][ T7967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.604299][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.676735][ T7396] veth0_vlan: entered promiscuous mode [ 997.693176][ T7396] veth1_vlan: entered promiscuous mode [ 997.726208][ T7396] veth0_macvtap: entered promiscuous mode [ 997.738346][ T7396] veth1_macvtap: entered promiscuous mode [ 997.789843][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.824442][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.843599][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.859623][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.913165][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.933077][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.944910][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.978257][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.033452][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.062415][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.082756][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.112703][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.123791][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.143519][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.180270][ T7396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.231614][ T7396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.256647][ T7396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.271746][ T7396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.299401][ T8104] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2923'. [ 998.360184][ T8104] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2923'. [ 998.546470][ T6658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.573989][ T6658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.656860][ T6658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.693265][ T6658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.722038][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1252.753618][T18071] FAULT_INJECTION: forcing a failure. [ 1252.753618][T18071] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.819262][T18071] CPU: 1 UID: 0 PID: 18071 Comm: syz.5.3758 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1252.819294][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1252.819307][T18071] Call Trace: [ 1252.819315][T18071] [ 1252.819323][T18071] dump_stack_lvl+0x16c/0x1f0 [ 1252.819357][T18071] should_fail_ex+0x512/0x640 [ 1252.819385][T18071] ? fs_reclaim_acquire+0xae/0x150 [ 1252.819420][T18071] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1252.819449][T18071] should_failslab+0xc2/0x120 [ 1252.819476][T18071] __kmalloc_noprof+0xd2/0x510 [ 1252.819505][T18071] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1252.819548][T18071] ? tomoyo_profile+0x47/0x60 [ 1252.819582][T18071] tomoyo_path_number_perm+0x245/0x580 [ 1252.819605][T18071] ? tomoyo_path_number_perm+0x237/0x580 [ 1252.819631][T18071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1252.819656][T18071] ? find_held_lock+0x2b/0x80 [ 1252.819696][T18071] ? find_held_lock+0x2b/0x80 [ 1252.819714][T18071] ? hook_file_ioctl_common+0x145/0x410 [ 1252.819742][T18071] ? __fget_files+0x20e/0x3c0 [ 1252.819776][T18071] ? 0xffffffffff600000 [ 1252.819790][T18071] ? 0xffffffffff600000 [ 1252.819804][T18071] security_file_ioctl+0x9b/0x240 [ 1252.819830][T18071] __x64_sys_ioctl+0xb7/0x200 [ 1252.819860][T18071] do_syscall_64+0xcd/0x230 [ 1252.819895][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.819916][T18071] RIP: 0033:0x7fb21a18e969 [ 1252.819931][T18071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.819951][T18071] RSP: 002b:00007fb21af68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.819969][T18071] RAX: ffffffffffffffda RBX: 00007fb21a3b6080 RCX: 00007fb21a18e969 [ 1252.819983][T18071] RDX: ffffffffff600000 RSI: 0000000000005001 RDI: 0000000000000003 [ 1252.819995][T18071] RBP: 00007fb21af68090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.820008][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.820020][T18071] R13: 0000000000000001 R14: 00007fb21a3b6080 R15: 00007ffea68f3d48 [ 1252.820040][T18071] ? 0xffffffffff600000 [ 1252.820059][T18071] [ 1252.820067][T18071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1253.876595][T18075] FAULT_INJECTION: forcing a failure. [ 1253.876595][T18075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1254.049838][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.2.3759 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1254.049872][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1254.049885][T18075] Call Trace: [ 1254.049893][T18075] [ 1254.049901][T18075] dump_stack_lvl+0x16c/0x1f0 [ 1254.049936][T18075] should_fail_ex+0x512/0x640 [ 1254.049973][T18075] should_fail_alloc_page+0xe7/0x130 [ 1254.050002][T18075] prepare_alloc_pages+0x3c2/0x610 [ 1254.050048][T18075] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1254.050076][T18075] ? __lock_acquire+0xaa4/0x1ba0 [ 1254.050109][T18075] ? __kasan_kmalloc+0xaa/0xb0 [ 1254.050131][T18075] ? nfs4blocklayout_net_init+0x95/0x240 [ 1254.050159][T18075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1254.050189][T18075] ? __pfx___might_resched+0x10/0x10 [ 1254.050217][T18075] ? find_held_lock+0x2b/0x80 [ 1254.050238][T18075] ? rpc_get_sb_net+0x97/0xc0 [ 1254.050272][T18075] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1254.050320][T18075] ? ops_init+0x77/0x5f0 [ 1254.050342][T18075] __alloc_pages_noprof+0xb/0x1b0 [ 1254.050364][T18075] ___kmalloc_large_node+0x82/0x1e0 [ 1254.050399][T18075] __kmalloc_large_node_noprof+0x1c/0x70 [ 1254.050432][T18075] __kmalloc_noprof.cold+0xc/0x61 [ 1254.050460][T18075] ? rpc_get_sb_net+0x9c/0xc0 [ 1254.050491][T18075] ops_init+0x77/0x5f0 [ 1254.050517][T18075] setup_net+0x21e/0x850 [ 1254.050544][T18075] ? __pfx_setup_net+0x10/0x10 [ 1254.050567][T18075] ? lockdep_init_map_type+0x5c/0x280 [ 1254.050595][T18075] ? __pfx_down_read_killable+0x10/0x10 [ 1254.050630][T18075] ? debug_mutex_init+0x37/0x70 [ 1254.050685][T18075] copy_net_ns+0x2a6/0x5f0 [ 1254.050721][T18075] create_new_namespaces+0x3ea/0xad0 [ 1254.050752][T18075] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1254.050811][T18075] ksys_unshare+0x45b/0xa40 [ 1254.050844][T18075] ? __pfx_ksys_unshare+0x10/0x10 [ 1254.050875][T18075] ? xfd_validate_state+0x5d/0x180 [ 1254.050915][T18075] ? rcu_is_watching+0x12/0xc0 [ 1254.050944][T18075] __x64_sys_unshare+0x31/0x40 [ 1254.050975][T18075] do_syscall_64+0xcd/0x230 [ 1254.051010][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.051061][T18075] RIP: 0033:0x7f935ef8e969 [ 1254.051080][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1254.051105][T18075] RSP: 002b:00007f935fdfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1254.051127][T18075] RAX: ffffffffffffffda RBX: 00007f935f1b6080 RCX: 00007f935ef8e969 [ 1254.051144][T18075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1254.051159][T18075] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1254.051174][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.051189][T18075] R13: 0000000000000000 R14: 00007f935f1b6080 R15: 00007ffdde2f8d58 [ 1254.051219][T18075] [ 1254.337048][T18090] futex_wake_op: syz.5.3762 tries to shift op by 64; fix this program [ 1255.060126][T18095] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3763'. [ 1255.888084][T18104] block nbd7: not configured, cannot reconfigure [ 1255.898592][T29643] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1256.750162][T18116] FAULT_INJECTION: forcing a failure. [ 1256.750162][T18116] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.772878][T18118] FAULT_INJECTION: forcing a failure. [ 1256.772878][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.843637][T18118] CPU: 1 UID: 0 PID: 18118 Comm: syz.3.3769 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1256.843673][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1256.843688][T18118] Call Trace: [ 1256.843696][T18118] [ 1256.843718][T18118] dump_stack_lvl+0x16c/0x1f0 [ 1256.843755][T18118] should_fail_ex+0x512/0x640 [ 1256.843789][T18118] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1256.843818][T18118] should_failslab+0xc2/0x120 [ 1256.843852][T18118] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1256.843879][T18118] ? vm_area_dup+0x25/0x760 [ 1256.843911][T18118] vm_area_dup+0x25/0x760 [ 1256.843939][T18118] copy_process+0x7f67/0x91a0 [ 1256.843990][T18118] ? __pfx_copy_process+0x10/0x10 [ 1256.844019][T18118] ? __pfx___futex_wait+0x10/0x10 [ 1256.844076][T18118] kernel_clone+0xfc/0x960 [ 1256.844108][T18118] ? __pfx_kernel_clone+0x10/0x10 [ 1256.844155][T18118] __do_sys_clone+0xce/0x120 [ 1256.844185][T18118] ? __pfx___do_sys_clone+0x10/0x10 [ 1256.844231][T18118] ? rcu_is_watching+0x12/0xc0 [ 1256.844261][T18118] do_syscall_64+0xcd/0x230 [ 1256.844296][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.844320][T18118] RIP: 0033:0x7fbd7538e969 [ 1256.844339][T18118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.844362][T18118] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1256.844384][T18118] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1256.844399][T18118] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1256.844414][T18118] RBP: 00007fbd75410ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1256.844429][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.844443][T18118] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1256.844472][T18118] [ 1257.047639][T18116] CPU: 1 UID: 0 PID: 18116 Comm: syz.5.3768 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1257.047670][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1257.047682][T18116] Call Trace: [ 1257.047689][T18116] [ 1257.047696][T18116] dump_stack_lvl+0x16c/0x1f0 [ 1257.047728][T18116] should_fail_ex+0x512/0x640 [ 1257.047757][T18116] ? __kmalloc_noprof+0xbf/0x510 [ 1257.047782][T18116] ? cache_create_net+0x9d/0x220 [ 1257.047819][T18116] should_failslab+0xc2/0x120 [ 1257.047845][T18116] __kmalloc_noprof+0xd2/0x510 [ 1257.047874][T18116] cache_create_net+0x9d/0x220 [ 1257.047906][T18116] ? __pfx_nfsd_net_init+0x10/0x10 [ 1257.047940][T18116] nfsd_export_init+0x62/0x250 [ 1257.047973][T18116] ? __pfx_nfsd_net_init+0x10/0x10 [ 1257.048005][T18116] nfsd_net_init+0x33/0x3d0 [ 1257.048038][T18116] ? __pfx_nfsd_net_init+0x10/0x10 [ 1257.048071][T18116] ops_init+0x1df/0x5f0 [ 1257.048099][T18116] setup_net+0x21e/0x850 [ 1257.048126][T18116] ? __pfx_setup_net+0x10/0x10 [ 1257.048148][T18116] ? lockdep_init_map_type+0x5c/0x280 [ 1257.048177][T18116] ? __pfx_down_read_killable+0x10/0x10 [ 1257.048213][T18116] ? debug_mutex_init+0x37/0x70 [ 1257.048249][T18116] copy_net_ns+0x2a6/0x5f0 [ 1257.048279][T18116] create_new_namespaces+0x3ea/0xad0 [ 1257.048308][T18116] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1257.048334][T18116] ksys_unshare+0x45b/0xa40 [ 1257.048362][T18116] ? __pfx_ksys_unshare+0x10/0x10 [ 1257.048389][T18116] ? xfd_validate_state+0x5d/0x180 [ 1257.048424][T18116] ? rcu_is_watching+0x12/0xc0 [ 1257.048449][T18116] __x64_sys_unshare+0x31/0x40 [ 1257.048477][T18116] do_syscall_64+0xcd/0x230 [ 1257.048507][T18116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.048529][T18116] RIP: 0033:0x7fb21a18e969 [ 1257.048545][T18116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.048566][T18116] RSP: 002b:00007fb21af47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1257.048585][T18116] RAX: ffffffffffffffda RBX: 00007fb21a3b6160 RCX: 00007fb21a18e969 [ 1257.048599][T18116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1257.048611][T18116] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1257.048624][T18116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.048636][T18116] R13: 0000000000000000 R14: 00007fb21a3b6160 R15: 00007ffea68f3d48 [ 1257.048661][T18116] [ 1257.698037][T18129] zram: Removed device: zram0 [ 1259.844760][T18182] futex_wake_op: syz.2.3778 tries to shift op by 64; fix this program [ 1260.007875][T29643] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1262.196441][T18231] FAULT_INJECTION: forcing a failure. [ 1262.196441][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.279719][T18231] CPU: 1 UID: 0 PID: 18231 Comm: syz.2.3781 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1262.279753][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1262.279767][T18231] Call Trace: [ 1262.279775][T18231] [ 1262.279783][T18231] dump_stack_lvl+0x16c/0x1f0 [ 1262.279818][T18231] should_fail_ex+0x512/0x640 [ 1262.279849][T18231] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbd0 [ 1262.279878][T18231] should_failslab+0xc2/0x120 [ 1262.279906][T18231] kmem_cache_alloc_bulk_noprof+0x85/0xbd0 [ 1262.279935][T18231] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1262.279964][T18231] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1262.279987][T18231] ? register_lock_class+0x41/0x4c0 [ 1262.280017][T18231] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 1262.280052][T18231] ? mas_dup_build.constprop.0+0xc52/0x1740 [ 1262.280089][T18231] mas_dup_build.constprop.0+0xc52/0x1740 [ 1262.280132][T18231] __mt_dup+0xeb/0x1f0 [ 1262.280160][T18231] ? __pfx___mt_dup+0x10/0x10 [ 1262.280204][T18231] ? get_mm_exe_file+0x8a/0x1a0 [ 1262.280238][T18231] copy_process+0x7152/0x91a0 [ 1262.280286][T18231] ? __pfx_copy_process+0x10/0x10 [ 1262.280316][T18231] ? try_to_wake_up+0xa2f/0x1680 [ 1262.280342][T18231] ? plist_check_head+0xa3/0x150 [ 1262.280364][T18231] ? find_held_lock+0x2b/0x80 [ 1262.280389][T18231] ? wake_up_q+0xb0/0x160 [ 1262.280406][T18231] ? do_raw_spin_unlock+0x172/0x230 [ 1262.280445][T18231] kernel_clone+0xfc/0x960 [ 1262.280473][T18231] ? __pfx_futex_wake+0x10/0x10 [ 1262.280519][T18231] ? __pfx_kernel_clone+0x10/0x10 [ 1262.280567][T18231] __do_sys_clone+0xce/0x120 [ 1262.280596][T18231] ? __pfx___do_sys_clone+0x10/0x10 [ 1262.280646][T18231] ? rcu_is_watching+0x12/0xc0 [ 1262.280676][T18231] do_syscall_64+0xcd/0x230 [ 1262.280712][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.280739][T18231] RIP: 0033:0x7f935ef8e969 [ 1262.280775][T18231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.280800][T18231] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1262.280822][T18231] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1262.280839][T18231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1262.280854][T18231] RBP: 00007f935f010ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1262.280869][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.280883][T18231] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1262.280914][T18231] [ 1263.373010][T18243] block nbd7: not configured, cannot reconfigure [ 1263.483636][T18247] FAULT_INJECTION: forcing a failure. [ 1263.483636][T18247] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.522798][T18247] CPU: 1 UID: 0 PID: 18247 Comm: syz.5.3787 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1263.522834][T18247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1263.522849][T18247] Call Trace: [ 1263.522857][T18247] [ 1263.522867][T18247] dump_stack_lvl+0x16c/0x1f0 [ 1263.522912][T18247] should_fail_ex+0x512/0x640 [ 1263.522947][T18247] ? __kmalloc_noprof+0xbf/0x510 [ 1263.522975][T18247] ? snd_pcm_plugin_build+0x434/0x650 [ 1263.523011][T18247] should_failslab+0xc2/0x120 [ 1263.523053][T18247] __kmalloc_noprof+0xd2/0x510 [ 1263.523083][T18247] snd_pcm_plugin_build+0x434/0x650 [ 1263.523121][T18247] snd_pcm_plugin_build_rate+0x27c/0x760 [ 1263.523147][T18247] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 1263.523179][T18247] snd_pcm_plug_format_plugins+0x866/0x1430 [ 1263.523219][T18247] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1263.523259][T18247] ? _raw_spin_unlock_irq+0x23/0x50 [ 1263.523294][T18247] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 1263.523340][T18247] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1263.523394][T18247] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1263.523431][T18247] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1263.523466][T18247] ? hook_file_ioctl_common+0x145/0x410 [ 1263.523491][T18247] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1263.523527][T18247] ? __fget_files+0x20e/0x3c0 [ 1263.523565][T18247] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1263.523600][T18247] __x64_sys_ioctl+0x190/0x200 [ 1263.523633][T18247] do_syscall_64+0xcd/0x230 [ 1263.523666][T18247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.523689][T18247] RIP: 0033:0x7fb21a18e969 [ 1263.523707][T18247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.523729][T18247] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.523751][T18247] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1263.523766][T18247] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1263.523779][T18247] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1263.523811][T18247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.523825][T18247] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1263.523855][T18247] [ 1264.552760][T18255] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1265.249256][T18266] FAULT_INJECTION: forcing a failure. [ 1265.249256][T18266] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.477962][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.3.3793 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1265.477996][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1265.478009][T18266] Call Trace: [ 1265.478017][T18266] [ 1265.478025][T18266] dump_stack_lvl+0x16c/0x1f0 [ 1265.478060][T18266] should_fail_ex+0x512/0x640 [ 1265.478092][T18266] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1265.478120][T18266] should_failslab+0xc2/0x120 [ 1265.478148][T18266] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1265.478173][T18266] ? percpu_counter_add_batch+0xb8/0x1f0 [ 1265.478200][T18266] ? vm_area_dup+0x25/0x760 [ 1265.478229][T18266] vm_area_dup+0x25/0x760 [ 1265.478256][T18266] copy_process+0x7f67/0x91a0 [ 1265.478303][T18266] ? __pfx_copy_process+0x10/0x10 [ 1265.478333][T18266] ? try_to_wake_up+0xa2f/0x1680 [ 1265.478359][T18266] ? plist_check_head+0xa3/0x150 [ 1265.478382][T18266] ? find_held_lock+0x2b/0x80 [ 1265.478407][T18266] ? wake_up_q+0xb0/0x160 [ 1265.478425][T18266] ? do_raw_spin_unlock+0x172/0x230 [ 1265.478463][T18266] kernel_clone+0xfc/0x960 [ 1265.478491][T18266] ? __pfx_futex_wake+0x10/0x10 [ 1265.478519][T18266] ? __pfx_kernel_clone+0x10/0x10 [ 1265.478563][T18266] __do_sys_clone+0xce/0x120 [ 1265.478591][T18266] ? __pfx___do_sys_clone+0x10/0x10 [ 1265.478634][T18266] ? rcu_is_watching+0x12/0xc0 [ 1265.478662][T18266] do_syscall_64+0xcd/0x230 [ 1265.478695][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.478727][T18266] RIP: 0033:0x7fbd7538e969 [ 1265.478746][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.478767][T18266] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1265.478788][T18266] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1265.478803][T18266] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1265.478817][T18266] RBP: 00007fbd75410ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1265.478831][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.478844][T18266] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1265.478872][T18266] [ 1266.073617][T18275] FAULT_INJECTION: forcing a failure. [ 1266.073617][T18275] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.123354][T18275] CPU: 1 UID: 0 PID: 18275 Comm: syz.3.3794 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1266.123389][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1266.123404][T18275] Call Trace: [ 1266.123413][T18275] [ 1266.123422][T18275] dump_stack_lvl+0x16c/0x1f0 [ 1266.123462][T18275] should_fail_ex+0x512/0x640 [ 1266.123518][T18275] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1266.123547][T18275] should_failslab+0xc2/0x120 [ 1266.123576][T18275] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1266.123603][T18275] ? copy_process+0x6c58/0x91a0 [ 1266.123648][T18275] copy_process+0x6c58/0x91a0 [ 1266.123700][T18275] ? __pfx_copy_process+0x10/0x10 [ 1266.123730][T18275] ? try_to_wake_up+0xa2f/0x1680 [ 1266.123753][T18275] ? __pfx_try_to_wake_up+0x10/0x10 [ 1266.123775][T18275] ? plist_check_head+0xa3/0x150 [ 1266.123798][T18275] ? find_held_lock+0x2b/0x80 [ 1266.123823][T18275] ? wake_up_q+0xb0/0x160 [ 1266.123840][T18275] ? do_raw_spin_unlock+0x172/0x230 [ 1266.123878][T18275] kernel_clone+0xfc/0x960 [ 1266.123916][T18275] ? __pfx_futex_wake+0x10/0x10 [ 1266.123942][T18275] ? __pfx_kernel_clone+0x10/0x10 [ 1266.123982][T18275] __do_sys_clone+0xce/0x120 [ 1266.124008][T18275] ? __pfx___do_sys_clone+0x10/0x10 [ 1266.124047][T18275] ? rcu_is_watching+0x12/0xc0 [ 1266.124072][T18275] do_syscall_64+0xcd/0x230 [ 1266.124103][T18275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.124124][T18275] RIP: 0033:0x7fbd7538e969 [ 1266.124140][T18275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.124161][T18275] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1266.124181][T18275] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1266.124195][T18275] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1266.124208][T18275] RBP: 00007fbd75410ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1266.124220][T18275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.124233][T18275] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1266.124257][T18275] [ 1266.986203][T18292] syz.3.3796 (18292): attempted to duplicate a private mapping with mremap. This is not supported. [ 1267.074971][T18286] netlink: zone id is out of range [ 1267.080139][T18286] netlink: zone id is out of range [ 1267.183702][T18286] netlink: zone id is out of range [ 1267.259500][T18286] netlink: zone id is out of range [ 1267.307512][T18286] netlink: zone id is out of range [ 1267.312668][T18286] netlink: zone id is out of range [ 1267.433738][T18286] netlink: zone id is out of range [ 1267.492636][T18286] netlink: zone id is out of range [ 1267.541284][T18286] netlink: zone id is out of range [ 1267.591810][T18286] netlink: zone id is out of range [ 1268.035662][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3797'. [ 1269.553188][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3799'. [ 1269.713944][T18324] bond0: (slave bond_slave_1): Releasing backup interface [ 1269.788980][T18337] ipvlan1: entered allmulticast mode [ 1269.800555][T18337] veth0_vlan: entered allmulticast mode [ 1270.105504][T18349] FAULT_INJECTION: forcing a failure. [ 1270.105504][T18349] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.164151][T18349] CPU: 1 UID: 0 PID: 18349 Comm: syz.3.3800 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1270.164184][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1270.164197][T18349] Call Trace: [ 1270.164204][T18349] [ 1270.164212][T18349] dump_stack_lvl+0x16c/0x1f0 [ 1270.164247][T18349] should_fail_ex+0x512/0x640 [ 1270.164278][T18349] ? __kmalloc_noprof+0xbf/0x510 [ 1270.164305][T18349] ? snd_pcm_plugin_build+0x64/0x650 [ 1270.164348][T18349] should_failslab+0xc2/0x120 [ 1270.164375][T18349] __kmalloc_noprof+0xd2/0x510 [ 1270.164405][T18349] snd_pcm_plugin_build+0x64/0x650 [ 1270.164439][T18349] ? snd_pcm_plugin_build+0x4b7/0x650 [ 1270.164476][T18349] snd_pcm_plugin_build_linear+0x29d/0x850 [ 1270.164501][T18349] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 1270.164532][T18349] snd_pcm_plug_format_plugins+0x614/0x1430 [ 1270.164573][T18349] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1270.164614][T18349] ? _raw_spin_unlock_irq+0x23/0x50 [ 1270.164649][T18349] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 1270.164694][T18349] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1270.164749][T18349] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1270.164786][T18349] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1270.164821][T18349] ? hook_file_ioctl_common+0x145/0x410 [ 1270.164846][T18349] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1270.164883][T18349] ? __fget_files+0x20e/0x3c0 [ 1270.164921][T18349] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1270.164956][T18349] __x64_sys_ioctl+0x190/0x200 [ 1270.164988][T18349] do_syscall_64+0xcd/0x230 [ 1270.165021][T18349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.165044][T18349] RIP: 0033:0x7fbd7538e969 [ 1270.165061][T18349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.165083][T18349] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.165104][T18349] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1270.165119][T18349] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1270.165133][T18349] RBP: 00007fbd75410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1270.165147][T18349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.165160][T18349] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1270.165186][T18349] [ 1272.783253][T18398] FAULT_INJECTION: forcing a failure. [ 1272.783253][T18398] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.892116][T18398] CPU: 1 UID: 0 PID: 18398 Comm: syz.5.3806 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1272.892149][T18398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1272.892162][T18398] Call Trace: [ 1272.892169][T18398] [ 1272.892178][T18398] dump_stack_lvl+0x16c/0x1f0 [ 1272.892213][T18398] should_fail_ex+0x512/0x640 [ 1272.892251][T18398] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1272.892282][T18398] should_failslab+0xc2/0x120 [ 1272.892329][T18398] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1272.892356][T18398] ? vm_area_dup+0x25/0x760 [ 1272.892388][T18398] vm_area_dup+0x25/0x760 [ 1272.892417][T18398] copy_process+0x7f67/0x91a0 [ 1272.892471][T18398] ? __pfx_copy_process+0x10/0x10 [ 1272.892499][T18398] ? __pfx___futex_wait+0x10/0x10 [ 1272.892556][T18398] kernel_clone+0xfc/0x960 [ 1272.892587][T18398] ? __pfx_kernel_clone+0x10/0x10 [ 1272.892634][T18398] __do_sys_clone+0xce/0x120 [ 1272.892664][T18398] ? __pfx___do_sys_clone+0x10/0x10 [ 1272.892709][T18398] ? rcu_is_watching+0x12/0xc0 [ 1272.892750][T18398] do_syscall_64+0xcd/0x230 [ 1272.892784][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.892806][T18398] RIP: 0033:0x7fb21a18e969 [ 1272.892824][T18398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.892846][T18398] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1272.892867][T18398] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1272.892882][T18398] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1272.892896][T18398] RBP: 00007fb21a210ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1272.892910][T18398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.892923][T18398] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1272.892950][T18398] [ 1273.753027][T18414] net_ratelimit: 461 callbacks suppressed [ 1273.753045][T18414] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 1276.399874][T18519] FAULT_INJECTION: forcing a failure. [ 1276.399874][T18519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1276.471333][T18519] CPU: 1 UID: 0 PID: 18519 Comm: syz.2.3812 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1276.471368][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1276.471383][T18519] Call Trace: [ 1276.471391][T18519] [ 1276.471401][T18519] dump_stack_lvl+0x16c/0x1f0 [ 1276.471440][T18519] should_fail_ex+0x512/0x640 [ 1276.471479][T18519] should_fail_alloc_page+0xe7/0x130 [ 1276.471512][T18519] prepare_alloc_pages+0x3c2/0x610 [ 1276.471555][T18519] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1276.471584][T18519] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 1276.471616][T18519] ? __lock_acquire+0x5ca/0x1ba0 [ 1276.471655][T18519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1276.471690][T18519] ? look_up_lock_class+0x6b/0x150 [ 1276.471733][T18519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1276.471776][T18519] ? policy_nodemask+0xea/0x4e0 [ 1276.471809][T18519] alloc_pages_mpol+0x1fb/0x550 [ 1276.471840][T18519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1276.471870][T18519] ? do_raw_spin_lock+0x12c/0x2b0 [ 1276.471906][T18519] ? find_held_lock+0x2b/0x80 [ 1276.471934][T18519] alloc_pages_noprof+0x131/0x390 [ 1276.471977][T18519] __pmd_alloc+0x3f/0x870 [ 1276.472015][T18519] copy_page_range+0x420e/0x5fe0 [ 1276.472091][T18519] ? __pfx_copy_page_range+0x10/0x10 [ 1276.472127][T18519] ? mas_store+0x93a/0x10c0 [ 1276.472160][T18519] ? __pfx___might_resched+0x10/0x10 [ 1276.472189][T18519] ? __pfx_mas_store+0x10/0x10 [ 1276.472221][T18519] ? __vma_enter_locked+0x163/0x3f0 [ 1276.472245][T18519] ? down_write+0x14d/0x200 [ 1276.472292][T18519] copy_process+0x862b/0x91a0 [ 1276.472358][T18519] ? __pfx_copy_process+0x10/0x10 [ 1276.472387][T18519] ? __pfx___futex_wait+0x10/0x10 [ 1276.472454][T18519] kernel_clone+0xfc/0x960 [ 1276.472484][T18519] ? __pfx_kernel_clone+0x10/0x10 [ 1276.472528][T18519] __do_sys_clone+0xce/0x120 [ 1276.472556][T18519] ? __pfx___do_sys_clone+0x10/0x10 [ 1276.472598][T18519] ? rcu_is_watching+0x12/0xc0 [ 1276.472626][T18519] do_syscall_64+0xcd/0x230 [ 1276.472659][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.472681][T18519] RIP: 0033:0x7f935ef8e969 [ 1276.472699][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.472720][T18519] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1276.472740][T18519] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1276.472755][T18519] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1276.472774][T18519] RBP: 00007f935f010ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1276.472787][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.472800][T18519] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1276.472827][T18519] [ 1276.856419][T18529] FAULT_INJECTION: forcing a failure. [ 1276.856419][T18529] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.869452][T18529] CPU: 1 UID: 0 PID: 18529 Comm: syz.3.3811 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1276.869486][T18529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1276.869501][T18529] Call Trace: [ 1276.869508][T18529] [ 1276.869517][T18529] dump_stack_lvl+0x16c/0x1f0 [ 1276.869554][T18529] should_fail_ex+0x512/0x640 [ 1276.869588][T18529] ? __kmalloc_noprof+0xbf/0x510 [ 1276.869616][T18529] ? snd_pcm_plugin_build+0x434/0x650 [ 1276.869652][T18529] should_failslab+0xc2/0x120 [ 1276.869681][T18529] __kmalloc_noprof+0xd2/0x510 [ 1276.869713][T18529] snd_pcm_plugin_build+0x434/0x650 [ 1276.869754][T18529] snd_pcm_plugin_build_rate+0x27c/0x760 [ 1276.869781][T18529] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 1276.869823][T18529] snd_pcm_plug_format_plugins+0x866/0x1430 [ 1276.869865][T18529] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1276.869908][T18529] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.869946][T18529] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 1276.869995][T18529] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1276.870054][T18529] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1276.870094][T18529] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1276.870131][T18529] ? hook_file_ioctl_common+0x145/0x410 [ 1276.870158][T18529] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1276.870197][T18529] ? __fget_files+0x20e/0x3c0 [ 1276.870238][T18529] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1276.870275][T18529] __x64_sys_ioctl+0x190/0x200 [ 1276.870310][T18529] do_syscall_64+0xcd/0x230 [ 1276.870345][T18529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.870370][T18529] RIP: 0033:0x7fbd7538e969 [ 1276.870389][T18529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.870412][T18529] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.870435][T18529] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1276.870451][T18529] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1276.870466][T18529] RBP: 00007fbd75410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1276.870481][T18529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.870495][T18529] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1276.870524][T18529] [ 1277.204342][T18532] block nbd7: not configured, cannot reconfigure [ 1277.244987][T18514] CIFS mount error: No usable UNC path provided in device string! [ 1277.244987][T18514] [ 1277.255056][T18514] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1277.716001][T29643] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1278.306350][T18562] futex_wake_op: syz.2.3817 tries to shift op by 64; fix this program [ 1279.275642][T18557] FAULT_INJECTION: forcing a failure. [ 1279.275642][T18557] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.417928][T18557] CPU: 1 UID: 0 PID: 18557 Comm: syz.3.3816 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1279.417960][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1279.417973][T18557] Call Trace: [ 1279.417980][T18557] [ 1279.417988][T18557] dump_stack_lvl+0x16c/0x1f0 [ 1279.418022][T18557] should_fail_ex+0x512/0x640 [ 1279.418052][T18557] ? __kmalloc_noprof+0xbf/0x510 [ 1279.418076][T18557] ? ops_init+0x77/0x5f0 [ 1279.418099][T18557] should_failslab+0xc2/0x120 [ 1279.418125][T18557] __kmalloc_noprof+0xd2/0x510 [ 1279.418147][T18557] ? __pfx_grace_init_net+0x10/0x10 [ 1279.418177][T18557] ops_init+0x77/0x5f0 [ 1279.418203][T18557] setup_net+0x21e/0x850 [ 1279.418230][T18557] ? __pfx_setup_net+0x10/0x10 [ 1279.418253][T18557] ? lockdep_init_map_type+0x5c/0x280 [ 1279.418281][T18557] ? __pfx_down_read_killable+0x10/0x10 [ 1279.418317][T18557] ? debug_mutex_init+0x37/0x70 [ 1279.418353][T18557] copy_net_ns+0x2a6/0x5f0 [ 1279.418383][T18557] create_new_namespaces+0x3ea/0xad0 [ 1279.418412][T18557] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1279.418437][T18557] ksys_unshare+0x45b/0xa40 [ 1279.418466][T18557] ? __pfx_ksys_unshare+0x10/0x10 [ 1279.418492][T18557] ? xfd_validate_state+0x5d/0x180 [ 1279.418534][T18557] ? rcu_is_watching+0x12/0xc0 [ 1279.418559][T18557] __x64_sys_unshare+0x31/0x40 [ 1279.418587][T18557] do_syscall_64+0xcd/0x230 [ 1279.418619][T18557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.418658][T18557] RIP: 0033:0x7fbd7538e969 [ 1279.418676][T18557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.418698][T18557] RSP: 002b:00007fbd7614a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1279.418719][T18557] RAX: ffffffffffffffda RBX: 00007fbd755b6080 RCX: 00007fbd7538e969 [ 1279.418734][T18557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1279.418747][T18557] RBP: 00007fbd75410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1279.418761][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.418775][T18557] R13: 0000000000000000 R14: 00007fbd755b6080 R15: 00007fff96f6f368 [ 1279.418802][T18557] [ 1282.123892][T18587] CIFS mount error: No usable UNC path provided in device string! [ 1282.123892][T18587] [ 1282.242470][T18591] ptrace attach of "./syz-executor exec"[29639] was attempted by "./syz-executor exec"[18591] [ 1282.347262][T18587] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1283.343031][T18607] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 1284.150619][T18630] ERROR: Out of memory at tomoyo_memory_ok. [ 1284.242090][T18630] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/52/file0' not defined. [ 1285.167526][T18598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1285.192535][T29643] Bluetooth: hci2: command 0x0406 tx timeout [ 1285.233638][T18598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1285.266969][T18598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.299056][T18598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1285.360202][T18598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1285.581669][T18598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1285.762407][T18598] CPU0 is offline. [ 1286.003445][ T30] audit: type=1326 audit(4294967483.237:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18681 comm="syz.5.3830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb21a18e969 code=0x0 [ 1286.700306][ T30] audit: type=1326 audit(4294967483.941:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18687 comm="syz.2.3832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f935ef8e969 code=0x0 [ 1287.091096][T29643] Bluetooth: hci2: Malformed HCI Event [ 1287.259703][T29643] Bluetooth: hci1: command 0x0c1a tx timeout [ 1287.265808][T29643] Bluetooth: hci0: command 0x0c1a tx timeout [ 1287.338741][T29643] Bluetooth: hci3: command 0x0c1a tx timeout [ 1288.623928][T18728] FAULT_INJECTION: forcing a failure. [ 1288.623928][T18728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1288.691764][T18728] CPU: 1 UID: 0 PID: 18728 Comm: syz.3.3835 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1288.691801][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1288.691816][T18728] Call Trace: [ 1288.691824][T18728] [ 1288.691832][T18728] dump_stack_lvl+0x16c/0x1f0 [ 1288.691869][T18728] should_fail_ex+0x512/0x640 [ 1288.691908][T18728] should_fail_alloc_page+0xe7/0x130 [ 1288.691940][T18728] prepare_alloc_pages+0x3c2/0x610 [ 1288.692000][T18728] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1288.692027][T18728] ? stack_trace_save+0x8e/0xc0 [ 1288.692054][T18728] ? __lock_acquire+0xaa4/0x1ba0 [ 1288.692080][T18728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1288.692107][T18728] ? __lock_acquire+0xaa4/0x1ba0 [ 1288.692145][T18728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1288.692175][T18728] ? policy_nodemask+0xea/0x4e0 [ 1288.692202][T18728] alloc_pages_mpol+0x1fb/0x550 [ 1288.692228][T18728] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1288.692259][T18728] alloc_pages_noprof+0x131/0x390 [ 1288.692285][T18728] pgd_alloc+0x49/0x4f0 [ 1288.692310][T18728] mm_init+0x6f4/0x1370 [ 1288.692332][T18728] ? copy_process+0x6c58/0x91a0 [ 1288.692360][T18728] copy_process+0x6cc6/0x91a0 [ 1288.692385][T18728] ? find_held_lock+0x2b/0x80 [ 1288.692405][T18728] ? schedule+0x2d7/0x3a0 [ 1288.692442][T18728] ? __pfx_copy_process+0x10/0x10 [ 1288.692466][T18728] ? __pfx___futex_wait+0x10/0x10 [ 1288.692498][T18728] ? __pfx_futex_wake_mark+0x10/0x10 [ 1288.692537][T18728] kernel_clone+0xfc/0x960 [ 1288.692565][T18728] ? __pfx_kernel_clone+0x10/0x10 [ 1288.692605][T18728] __do_sys_clone+0xce/0x120 [ 1288.692630][T18728] ? __pfx___do_sys_clone+0x10/0x10 [ 1288.692676][T18728] ? rcu_is_watching+0x12/0xc0 [ 1288.692703][T18728] do_syscall_64+0xcd/0x230 [ 1288.692734][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.692756][T18728] RIP: 0033:0x7fbd7538e969 [ 1288.692772][T18728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.692793][T18728] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1288.692812][T18728] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1288.692826][T18728] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1288.692839][T18728] RBP: 00007fbd75410ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1288.692852][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.692865][T18728] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1288.692891][T18728] [ 1289.272466][T18730] futex_wake_op: syz.5.3836 tries to shift op by 64; fix this program [ 1289.334114][T18733] FAULT_INJECTION: forcing a failure. [ 1289.334114][T18733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.457427][T29643] Bluetooth: hci3: command 0x0c1a tx timeout [ 1289.498729][T18733] CPU: 1 UID: 0 PID: 18733 Comm: syz.2.3837 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1289.498763][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1289.498777][T18733] Call Trace: [ 1289.498785][T18733] [ 1289.498794][T18733] dump_stack_lvl+0x16c/0x1f0 [ 1289.498830][T18733] should_fail_ex+0x512/0x640 [ 1289.498865][T18733] _copy_from_iter+0x2a4/0x15b0 [ 1289.498904][T18733] ? __pfx__copy_from_iter+0x10/0x10 [ 1289.498934][T18733] ? rcu_is_watching+0x12/0xc0 [ 1289.498957][T18733] ? rcu_is_watching+0x12/0xc0 [ 1289.498976][T18733] ? kfree+0x252/0x4d0 [ 1289.499008][T18733] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 1289.499041][T18733] file_tty_write.constprop.0+0x486/0x9b0 [ 1289.499080][T18733] redirected_tty_write+0xd4/0x150 [ 1289.499107][T18733] vfs_write+0x5ba/0x1180 [ 1289.499130][T18733] ? __pfx_redirected_tty_write+0x10/0x10 [ 1289.499161][T18733] ? __pfx_vfs_write+0x10/0x10 [ 1289.499180][T18733] ? find_held_lock+0x2b/0x80 [ 1289.499220][T18733] ksys_write+0x12a/0x240 [ 1289.499241][T18733] ? __pfx_ksys_write+0x10/0x10 [ 1289.499261][T18733] ? rcu_is_watching+0x12/0xc0 [ 1289.499289][T18733] do_syscall_64+0xcd/0x230 [ 1289.499323][T18733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.499346][T18733] RIP: 0033:0x7f935ef8e969 [ 1289.499365][T18733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.499387][T18733] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1289.499408][T18733] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1289.499424][T18733] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000008 [ 1289.499439][T18733] RBP: 00007f935fe1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.499453][T18733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.499467][T18733] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1289.499496][T18733] [ 1290.512512][ T30] audit: type=1326 audit(4294967491.736:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18750 comm="syz.3.3840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd7538e969 code=0x0 [ 1291.142181][T18764] FAULT_INJECTION: forcing a failure. [ 1291.142181][T18764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1291.203552][T18764] CPU: 1 UID: 0 PID: 18764 Comm: syz.5.3843 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1291.203584][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1291.203597][T18764] Call Trace: [ 1291.203604][T18764] [ 1291.203612][T18764] dump_stack_lvl+0x16c/0x1f0 [ 1291.203646][T18764] should_fail_ex+0x512/0x640 [ 1291.203680][T18764] should_fail_alloc_page+0xe7/0x130 [ 1291.203709][T18764] prepare_alloc_pages+0x3c2/0x610 [ 1291.203746][T18764] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1291.203775][T18764] ? cpa_flush+0x3d3/0x9e0 [ 1291.203798][T18764] ? __pfx_cpa_flush+0x10/0x10 [ 1291.203818][T18764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1291.203846][T18764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1291.203875][T18764] ? change_page_attr_set_clr+0x355/0x4a0 [ 1291.203899][T18764] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1291.203919][T18764] ? find_next_iomem_res+0x1c6/0x4f0 [ 1291.203947][T18764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1291.203978][T18764] ? policy_nodemask+0xea/0x4e0 [ 1291.204006][T18764] alloc_pages_mpol+0x1fb/0x550 [ 1291.204032][T18764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1291.204065][T18764] alloc_pages_noprof+0x131/0x390 [ 1291.204092][T18764] kimage_alloc_pages+0x75/0x300 [ 1291.204125][T18764] kimage_alloc_page+0x132/0x890 [ 1291.204153][T18764] ? machine_kexec_prepare+0x34d/0xf90 [ 1291.204191][T18764] kimage_add_entry+0x148/0x290 [ 1291.204219][T18764] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1291.204252][T18764] kimage_load_segment+0x13d/0x760 [ 1291.204282][T18764] ? __pfx_kimage_crash_copy_vmcoreinfo+0x10/0x10 [ 1291.204328][T18764] do_kexec_load+0x6fe/0x8d0 [ 1291.204362][T18764] ? __pfx_do_kexec_load+0x10/0x10 [ 1291.204396][T18764] ? _copy_from_user+0x59/0xd0 [ 1291.204431][T18764] __x64_sys_kexec_load+0x1bf/0x230 [ 1291.204473][T18764] do_syscall_64+0xcd/0x230 [ 1291.204505][T18764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.204527][T18764] RIP: 0033:0x7fb21a18e969 [ 1291.204544][T18764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.204566][T18764] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1291.204586][T18764] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1291.204600][T18764] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 1291.204614][T18764] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1291.204627][T18764] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1291.204640][T18764] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1291.204666][T18764] [ 1291.835582][T29643] Bluetooth: hci3: command 0x0c1a tx timeout [ 1291.892514][T17979] syz.0.3750 (17979) used greatest stack depth: 19704 bytes left [ 1291.956213][T18769] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 1292.183016][ T30] audit: type=1326 audit(4294967493.455:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18774 comm="syz.5.3853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb21a18e969 code=0x0 [ 1292.270547][T29643] Bluetooth: hci1: Malformed HCI Event [ 1293.568006][T18817] block nbd7: not configured, cannot reconfigure [ 1294.209760][T18825] FAULT_INJECTION: forcing a failure. [ 1294.209760][T18825] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.314430][T18825] CPU: 1 UID: 0 PID: 18825 Comm: syz.3.3848 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1294.314463][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1294.314476][T18825] Call Trace: [ 1294.314484][T18825] [ 1294.314493][T18825] dump_stack_lvl+0x16c/0x1f0 [ 1294.314528][T18825] should_fail_ex+0x512/0x640 [ 1294.314559][T18825] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1294.314587][T18825] should_failslab+0xc2/0x120 [ 1294.314615][T18825] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1294.314639][T18825] ? __proc_create+0xc3/0x8c0 [ 1294.314662][T18825] ? __proc_create+0x2ce/0x8c0 [ 1294.314689][T18825] __proc_create+0x2ce/0x8c0 [ 1294.314714][T18825] ? __pfx___proc_create+0x10/0x10 [ 1294.314749][T18825] proc_mkdir+0x81/0x170 [ 1294.314773][T18825] ? __pfx_proc_mkdir+0x10/0x10 [ 1294.314798][T18825] ? cache_register_net+0x137/0x5e0 [ 1294.314825][T18825] cache_register_net+0x18f/0x5e0 [ 1294.314860][T18825] nfsd_export_init+0xb6/0x250 [ 1294.314894][T18825] ? __pfx_nfsd_net_init+0x10/0x10 [ 1294.314926][T18825] nfsd_net_init+0x33/0x3d0 [ 1294.314959][T18825] ? __pfx_nfsd_net_init+0x10/0x10 [ 1294.314992][T18825] ops_init+0x1df/0x5f0 [ 1294.315019][T18825] setup_net+0x21e/0x850 [ 1294.315046][T18825] ? __pfx_setup_net+0x10/0x10 [ 1294.315069][T18825] ? lockdep_init_map_type+0x5c/0x280 [ 1294.315097][T18825] ? __pfx_down_read_killable+0x10/0x10 [ 1294.315133][T18825] ? debug_mutex_init+0x37/0x70 [ 1294.315169][T18825] copy_net_ns+0x2a6/0x5f0 [ 1294.315198][T18825] create_new_namespaces+0x3ea/0xad0 [ 1294.315246][T18825] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1294.315287][T18825] ksys_unshare+0x45b/0xa40 [ 1294.315317][T18825] ? __pfx_ksys_unshare+0x10/0x10 [ 1294.315346][T18825] ? xfd_validate_state+0x5d/0x180 [ 1294.315386][T18825] ? rcu_is_watching+0x12/0xc0 [ 1294.315413][T18825] __x64_sys_unshare+0x31/0x40 [ 1294.315442][T18825] do_syscall_64+0xcd/0x230 [ 1294.315480][T18825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.315503][T18825] RIP: 0033:0x7fbd7538e969 [ 1294.315521][T18825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.315543][T18825] RSP: 002b:00007fbd7614a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1294.315563][T18825] RAX: ffffffffffffffda RBX: 00007fbd755b6080 RCX: 00007fbd7538e969 [ 1294.315578][T18825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1294.315592][T18825] RBP: 00007fbd75410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1294.315606][T18825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.315619][T18825] R13: 0000000000000000 R14: 00007fbd755b6080 R15: 00007fff96f6f368 [ 1294.315647][T18825] [ 1295.218008][T18076] syz.0.3757 (18076) used greatest stack depth: 18376 bytes left [ 1295.408331][T18873] FAULT_INJECTION: forcing a failure. [ 1295.408331][T18873] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1295.431807][T18873] CPU: 1 UID: 0 PID: 18873 Comm: syz.3.3850 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1295.431842][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1295.431857][T18873] Call Trace: [ 1295.431865][T18873] [ 1295.431874][T18873] dump_stack_lvl+0x16c/0x1f0 [ 1295.431929][T18873] should_fail_ex+0x512/0x640 [ 1295.431974][T18873] ? snd_pcm_oss_change_params_locked+0x247d/0x3b40 [ 1295.432009][T18873] get_futex_key+0x49e/0x1000 [ 1295.432030][T18873] ? snd_pcm_oss_change_params_locked+0x13d/0x3b40 [ 1295.432063][T18873] ? __pfx_get_futex_key+0x10/0x10 [ 1295.432091][T18873] ? find_held_lock+0x2b/0x80 [ 1295.432112][T18873] ? snd_pcm_oss_get_active_substream+0x172/0x1d0 [ 1295.432149][T18873] futex_wake+0xe7/0x4e0 [ 1295.432177][T18873] ? __pfx_futex_wake+0x10/0x10 [ 1295.432214][T18873] do_futex+0x1e3/0x350 [ 1295.432237][T18873] ? __pfx_do_futex+0x10/0x10 [ 1295.432258][T18873] ? snd_pcm_oss_ioctl+0x2c2/0x37a0 [ 1295.432294][T18873] __x64_sys_futex+0x1e0/0x4c0 [ 1295.432320][T18873] ? __pfx___x64_sys_futex+0x10/0x10 [ 1295.432343][T18873] ? rcu_is_watching+0x12/0xc0 [ 1295.432369][T18873] do_syscall_64+0xcd/0x230 [ 1295.432400][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.432422][T18873] RIP: 0033:0x7fbd7538e969 [ 1295.432438][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.432459][T18873] RSP: 002b:00007fbd7616b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1295.432479][T18873] RAX: ffffffffffffffda RBX: 00007fbd755b5fa8 RCX: 00007fbd7538e969 [ 1295.432493][T18873] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd755b5fac [ 1295.432506][T18873] RBP: 00007fbd755b5fa0 R08: 00007fbd7616c000 R09: 0000000000000000 [ 1295.432519][T18873] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fbd755b5fac [ 1295.432532][T18873] R13: 0000000000000000 R14: 00007fff96f6f280 R15: 00007fff96f6f368 [ 1295.432557][T18873] [ 1296.040691][T18880] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 1296.240965][T29643] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1296.511652][T18889] bond0: option all_slaves_active: invalid value () [ 1297.018129][T18819] kexec: Could not allocate control_code_buffer [ 1297.140303][T18907] FAULT_INJECTION: forcing a failure. [ 1297.140303][T18907] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.188068][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.5.3854 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1297.188100][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1297.188113][T18907] Call Trace: [ 1297.188120][T18907] [ 1297.188128][T18907] dump_stack_lvl+0x16c/0x1f0 [ 1297.188161][T18907] should_fail_ex+0x512/0x640 [ 1297.188191][T18907] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1297.188217][T18907] should_failslab+0xc2/0x120 [ 1297.188242][T18907] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1297.188265][T18907] ? d_instantiate+0x77/0x90 [ 1297.188286][T18907] ? alloc_empty_file+0x55/0x1e0 [ 1297.188316][T18907] alloc_empty_file+0x55/0x1e0 [ 1297.188343][T18907] alloc_file_pseudo+0x13a/0x230 [ 1297.188371][T18907] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1297.188396][T18907] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1297.188436][T18907] create_pipe_files+0x364/0x930 [ 1297.188461][T18907] do_pipe2+0xaf/0x1c0 [ 1297.188482][T18907] ? __pfx_do_pipe2+0x10/0x10 [ 1297.188512][T18907] __x64_sys_pipe+0x33/0x50 [ 1297.188533][T18907] do_syscall_64+0xcd/0x230 [ 1297.188564][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.188585][T18907] RIP: 0033:0x7fb21a18e969 [ 1297.188602][T18907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.188623][T18907] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1297.188643][T18907] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1297.188657][T18907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1297.188688][T18907] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1297.188701][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.188715][T18907] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1297.188741][T18907] [ 1297.778222][T18915] FAULT_INJECTION: forcing a failure. [ 1297.778222][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.824460][T18915] CPU: 1 UID: 0 PID: 18915 Comm: syz.5.3856 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1297.824493][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1297.824507][T18915] Call Trace: [ 1297.824514][T18915] [ 1297.824523][T18915] dump_stack_lvl+0x16c/0x1f0 [ 1297.824559][T18915] should_fail_ex+0x512/0x640 [ 1297.824591][T18915] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1297.824620][T18915] should_failslab+0xc2/0x120 [ 1297.824647][T18915] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1297.824673][T18915] ? vm_area_dup+0x25/0x760 [ 1297.824702][T18915] vm_area_dup+0x25/0x760 [ 1297.824729][T18915] copy_process+0x7f67/0x91a0 [ 1297.824776][T18915] ? __pfx_copy_process+0x10/0x10 [ 1297.824802][T18915] ? __pfx___futex_wait+0x10/0x10 [ 1297.824860][T18915] kernel_clone+0xfc/0x960 [ 1297.824890][T18915] ? __pfx_kernel_clone+0x10/0x10 [ 1297.824934][T18915] __do_sys_clone+0xce/0x120 [ 1297.824962][T18915] ? __pfx___do_sys_clone+0x10/0x10 [ 1297.825005][T18915] ? rcu_is_watching+0x12/0xc0 [ 1297.825033][T18915] do_syscall_64+0xcd/0x230 [ 1297.825066][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.825089][T18915] RIP: 0033:0x7fb21a18e969 [ 1297.825106][T18915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.825128][T18915] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1297.825148][T18915] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1297.825163][T18915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1297.825177][T18915] RBP: 00007fb21a210ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1297.825190][T18915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.825203][T18915] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1297.825231][T18915] [ 1299.243317][T18953] netlink: 346 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1299.302428][ T132] EXT4-fs (sda1): Delayed block allocation failed for inode 1932 at logical offset 3457 with max blocks 11 with error 117 [ 1299.360285][ T132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1299.360285][ T132] [ 1299.684112][ T6651] EXT4-fs (sda1): Delayed block allocation failed for inode 1932 at logical offset 3457 with max blocks 1 with error 117 [ 1299.780469][ T6651] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1299.780469][ T6651] [ 1300.084142][ T132] EXT4-fs (sda1): Delayed block allocation failed for inode 1932 at logical offset 3456 with max blocks 2 with error 117 [ 1300.177064][ T132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1300.177064][ T132] [ 1300.239335][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.245827][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.949593][T18998] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1301.055586][T18998] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 1301.134760][T18998] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1301.265694][T18998] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 1301.454700][T19004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1301.628028][T19004] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 1301.718880][T19004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1301.870184][T19004] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 1302.150018][T19042] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1302.280185][T19042] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 1302.383069][T19042] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1302.506631][T19042] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 1302.693132][T19049] FAULT_INJECTION: forcing a failure. [ 1302.693132][T19049] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.732181][T19057] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1302.841929][T19057] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 1302.869135][T19061] futex_wake_op: syz.2.3873 tries to shift op by 64; fix this program [ 1302.883696][T19049] CPU: 1 UID: 0 PID: 19049 Comm: syz.5.3871 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1302.883730][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1302.883745][T19049] Call Trace: [ 1302.883754][T19049] [ 1302.883764][T19049] dump_stack_lvl+0x16c/0x1f0 [ 1302.883802][T19049] should_fail_ex+0x512/0x640 [ 1302.883836][T19049] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1302.883868][T19049] should_failslab+0xc2/0x120 [ 1302.883897][T19049] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1302.883923][T19049] ? bpf_ksym_find+0x124/0x1c0 [ 1302.883961][T19049] ? __kernfs_new_node+0xd2/0x8a0 [ 1302.884004][T19049] __kernfs_new_node+0xd2/0x8a0 [ 1302.884043][T19049] ? unwind_get_return_address+0x59/0xa0 [ 1302.884073][T19049] ? __pfx___kernfs_new_node+0x10/0x10 [ 1302.884120][T19049] ? find_held_lock+0x2b/0x80 [ 1302.884144][T19049] ? kernfs_root+0xee/0x2a0 [ 1302.884189][T19049] kernfs_new_node+0x13c/0x1e0 [ 1302.884220][T19049] kernfs_create_dir_ns+0x4c/0x1a0 [ 1302.884251][T19049] sysfs_create_dir_ns+0x13a/0x2b0 [ 1302.884290][T19049] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1302.884327][T19049] ? find_held_lock+0x2b/0x80 [ 1302.884354][T19049] ? nfs_netns_namespace+0xd/0x40 [ 1302.884385][T19049] kobject_add_internal+0x2c4/0x9b0 [ 1302.884438][T19049] kobject_init_and_add+0x11b/0x190 [ 1302.884479][T19049] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1302.884535][T19049] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1302.884568][T19049] nfs_net_init+0x10a/0x300 [ 1302.884604][T19049] ? __pfx_nfs_net_init+0x10/0x10 [ 1302.884637][T19049] ops_init+0x1df/0x5f0 [ 1302.884669][T19049] setup_net+0x21e/0x850 [ 1302.884701][T19049] ? __pfx_setup_net+0x10/0x10 [ 1302.884731][T19049] ? lockdep_init_map_type+0x5c/0x280 [ 1302.884764][T19049] ? __pfx_down_read_killable+0x10/0x10 [ 1302.884806][T19049] ? debug_mutex_init+0x37/0x70 [ 1302.884862][T19049] copy_net_ns+0x2a6/0x5f0 [ 1302.884896][T19049] create_new_namespaces+0x3ea/0xad0 [ 1302.884929][T19049] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1302.884958][T19049] ksys_unshare+0x45b/0xa40 [ 1302.884991][T19049] ? __pfx_ksys_unshare+0x10/0x10 [ 1302.885021][T19049] ? xfd_validate_state+0x5d/0x180 [ 1302.885061][T19049] ? rcu_is_watching+0x12/0xc0 [ 1302.885089][T19049] __x64_sys_unshare+0x31/0x40 [ 1302.885120][T19049] do_syscall_64+0xcd/0x230 [ 1302.885155][T19049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.885179][T19049] RIP: 0033:0x7fb21a18e969 [ 1302.885198][T19049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.885221][T19049] RSP: 002b:00007fb21af68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1302.885242][T19049] RAX: ffffffffffffffda RBX: 00007fb21a3b6080 RCX: 00007fb21a18e969 [ 1302.885258][T19049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1302.885272][T19049] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1302.885287][T19049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.885301][T19049] R13: 0000000000000000 R14: 00007fb21a3b6080 R15: 00007ffea68f3d48 [ 1302.885330][T19049] [ 1303.190281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.204138][T19063] FAULT_INJECTION: forcing a failure. [ 1303.204138][T19063] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.216945][T19063] CPU: 1 UID: 0 PID: 19063 Comm: syz.3.3874 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1303.216976][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1303.216990][T19063] Call Trace: [ 1303.216998][T19063] [ 1303.217006][T19063] dump_stack_lvl+0x16c/0x1f0 [ 1303.217040][T19063] should_fail_ex+0x512/0x640 [ 1303.217072][T19063] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1303.217100][T19063] should_failslab+0xc2/0x120 [ 1303.217128][T19063] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1303.217153][T19063] ? __pmd_alloc+0xc3/0x870 [ 1303.217189][T19063] __pmd_alloc+0xc3/0x870 [ 1303.217224][T19063] copy_page_range+0x420e/0x5fe0 [ 1303.217286][T19063] ? __pfx_copy_page_range+0x10/0x10 [ 1303.217322][T19063] ? mas_store+0x93a/0x10c0 [ 1303.217355][T19063] ? __pfx___might_resched+0x10/0x10 [ 1303.217390][T19063] ? __pfx_mas_store+0x10/0x10 [ 1303.217423][T19063] ? __vma_enter_locked+0x163/0x3f0 [ 1303.217448][T19063] ? down_write+0x14d/0x200 [ 1303.217495][T19063] copy_process+0x862b/0x91a0 [ 1303.217544][T19063] ? __pfx_copy_process+0x10/0x10 [ 1303.217569][T19063] ? __pfx___futex_wait+0x10/0x10 [ 1303.217622][T19063] kernel_clone+0xfc/0x960 [ 1303.217652][T19063] ? __pfx_kernel_clone+0x10/0x10 [ 1303.217696][T19063] __do_sys_clone+0xce/0x120 [ 1303.217724][T19063] ? __pfx___do_sys_clone+0x10/0x10 [ 1303.217784][T19063] ? rcu_is_watching+0x12/0xc0 [ 1303.217814][T19063] do_syscall_64+0xcd/0x230 [ 1303.217850][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.217875][T19063] RIP: 0033:0x7fbd7538e969 [ 1303.217893][T19063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1303.217918][T19063] RSP: 002b:00007fbd7616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1303.217940][T19063] RAX: ffffffffffffffda RBX: 00007fbd755b5fa0 RCX: 00007fbd7538e969 [ 1303.217956][T19063] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1303.217970][T19063] RBP: 00007fbd75410ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1303.217985][T19063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.218000][T19063] R13: 0000000000000000 R14: 00007fbd755b5fa0 R15: 00007fff96f6f368 [ 1303.218030][T19063] [ 1303.446431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.478043][T19049] kobject: kobject_add_internal failed for net (error: -12 parent: nfs) [ 1303.753586][T19057] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1303.781427][T19057] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 1303.929414][T19094] block nbd7: not configured, cannot reconfigure [ 1304.461555][T19117] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1304.548792][T19117] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #243: comm dhcpcd-run-hook: Directory block failed checksum [ 1304.591838][T19117] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #243: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1304.656347][T19117] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #243: comm dhcpcd-run-hook: checksumming directory block 0 [ 1306.366523][T19218] FAULT_INJECTION: forcing a failure. [ 1306.366523][T19218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1306.435954][T19218] CPU: 1 UID: 0 PID: 19218 Comm: syz.5.3885 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1306.435986][T19218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1306.435999][T19218] Call Trace: [ 1306.436005][T19218] [ 1306.436013][T19218] dump_stack_lvl+0x16c/0x1f0 [ 1306.436046][T19218] should_fail_ex+0x512/0x640 [ 1306.436080][T19218] should_fail_alloc_page+0xe7/0x130 [ 1306.436108][T19218] prepare_alloc_pages+0x3c2/0x610 [ 1306.436144][T19218] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1306.436170][T19218] ? __pfx_stack_trace_save+0x10/0x10 [ 1306.436198][T19218] ? stack_depot_save_flags+0x28/0xa50 [ 1306.436235][T19218] ? kasan_save_stack+0x42/0x60 [ 1306.436256][T19218] ? kasan_save_stack+0x33/0x60 [ 1306.436276][T19218] ? kasan_save_track+0x14/0x30 [ 1306.436297][T19218] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1306.436321][T19218] ? copy_page_range+0x420e/0x5fe0 [ 1306.436352][T19218] ? kernel_clone+0xfc/0x960 [ 1306.436377][T19218] ? do_syscall_64+0xcd/0x230 [ 1306.436404][T19218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.436439][T19218] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1306.436470][T19218] ? policy_nodemask+0xea/0x4e0 [ 1306.436497][T19218] alloc_pages_mpol+0x1fb/0x550 [ 1306.436523][T19218] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1306.436556][T19218] alloc_pages_noprof+0x131/0x390 [ 1306.436582][T19218] pte_alloc_one+0x19/0x380 [ 1306.436606][T19218] __pte_alloc+0x6d/0x3c0 [ 1306.436633][T19218] ? __pfx___pte_alloc+0x10/0x10 [ 1306.436661][T19218] ? _raw_spin_unlock+0x28/0x50 [ 1306.436685][T19218] ? __pmd_alloc+0x3c2/0x870 [ 1306.436718][T19218] copy_page_range+0x3a29/0x5fe0 [ 1306.436776][T19218] ? __pfx_copy_page_range+0x10/0x10 [ 1306.436810][T19218] ? mas_store+0x93a/0x10c0 [ 1306.436841][T19218] ? __pfx___might_resched+0x10/0x10 [ 1306.436869][T19218] ? __pfx_mas_store+0x10/0x10 [ 1306.436898][T19218] ? __vma_enter_locked+0x163/0x3f0 [ 1306.436921][T19218] ? down_write+0x14d/0x200 [ 1306.436966][T19218] copy_process+0x862b/0x91a0 [ 1306.437015][T19218] ? __pfx_copy_process+0x10/0x10 [ 1306.437040][T19218] ? __pfx___futex_wait+0x10/0x10 [ 1306.437089][T19218] kernel_clone+0xfc/0x960 [ 1306.437118][T19218] ? __pfx_kernel_clone+0x10/0x10 [ 1306.437160][T19218] __do_sys_clone+0xce/0x120 [ 1306.437190][T19218] ? __pfx___do_sys_clone+0x10/0x10 [ 1306.437231][T19218] ? rcu_is_watching+0x12/0xc0 [ 1306.437258][T19218] do_syscall_64+0xcd/0x230 [ 1306.437290][T19218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.437311][T19218] RIP: 0033:0x7fb21a18e969 [ 1306.437327][T19218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.437348][T19218] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1306.437367][T19218] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1306.437381][T19218] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1306.437394][T19218] RBP: 00007fb21a210ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1306.437406][T19218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.437419][T19218] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1306.437445][T19218] [ 1308.726694][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1308.895650][T19267] ERROR: Out of memory at tomoyo_memory_ok. [ 1308.958446][T19245] ERROR: Out of memory at tomoyo_memory_ok. [ 1309.042781][T19279] ERROR: Out of memory at tomoyo_memory_ok. [ 1309.184426][T19280] ERROR: Out of memory at tomoyo_memory_ok. [ 1309.312461][T17190] EXT4-fs (sda1): Delayed block allocation failed for inode 1932 at logical offset 940 with max blocks 7 with error 117 [ 1309.400882][T17190] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1309.400882][T17190] [ 1309.961431][T19322] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3894'. [ 1310.409734][ T132] EXT4-fs (sda1): Delayed block allocation failed for inode 1932 at logical offset 940 with max blocks 1 with error 117 [ 1310.450258][ T30] audit: type=1326 audit(4294967519.824:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.5.3895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb21a18e969 code=0x0 [ 1310.484999][ T132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1310.484999][ T132] [ 1310.526522][T19328] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3894'. [ 1312.466474][T19392] FAULT_INJECTION: forcing a failure. [ 1312.466474][T19392] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.507673][T29643] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1312.571594][T19392] CPU: 1 UID: 0 PID: 19392 Comm: syz.3.3898 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1312.571630][T19392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1312.571646][T19392] Call Trace: [ 1312.571654][T19392] [ 1312.571664][T19392] dump_stack_lvl+0x16c/0x1f0 [ 1312.571704][T19392] should_fail_ex+0x512/0x640 [ 1312.571739][T19392] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1312.571774][T19392] should_failslab+0xc2/0x120 [ 1312.571811][T19392] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1312.571843][T19392] ? cache_create_net+0x2b/0x220 [ 1312.571885][T19392] kmemdup_noprof+0x29/0x60 [ 1312.571917][T19392] cache_create_net+0x2b/0x220 [ 1312.571968][T19392] ip_map_cache_create+0x60/0x130 [ 1312.572017][T19392] ? __pfx_sunrpc_init_net+0x10/0x10 [ 1312.572046][T19392] sunrpc_init_net+0x55/0x190 [ 1312.572078][T19392] ops_init+0x1df/0x5f0 [ 1312.572108][T19392] setup_net+0x21e/0x850 [ 1312.572137][T19392] ? __pfx_setup_net+0x10/0x10 [ 1312.572161][T19392] ? lockdep_init_map_type+0x5c/0x280 [ 1312.572192][T19392] ? __pfx_down_read_killable+0x10/0x10 [ 1312.572230][T19392] ? debug_mutex_init+0x37/0x70 [ 1312.572268][T19392] copy_net_ns+0x2a6/0x5f0 [ 1312.572299][T19392] create_new_namespaces+0x3ea/0xad0 [ 1312.572335][T19392] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1312.572362][T19392] ksys_unshare+0x45b/0xa40 [ 1312.572393][T19392] ? __pfx_ksys_unshare+0x10/0x10 [ 1312.572422][T19392] ? xfd_validate_state+0x5d/0x180 [ 1312.572460][T19392] ? rcu_is_watching+0x12/0xc0 [ 1312.572487][T19392] __x64_sys_unshare+0x31/0x40 [ 1312.572516][T19392] do_syscall_64+0xcd/0x230 [ 1312.572549][T19392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.572572][T19392] RIP: 0033:0x7fbd7538e969 [ 1312.572590][T19392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.572613][T19392] RSP: 002b:00007fbd7614a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1312.572634][T19392] RAX: ffffffffffffffda RBX: 00007fbd755b6080 RCX: 00007fbd7538e969 [ 1312.572649][T19392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1312.572662][T19392] RBP: 00007fbd75410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1312.572676][T19392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.572689][T19392] R13: 0000000000000000 R14: 00007fbd755b6080 R15: 00007fff96f6f368 [ 1312.572717][T19392] [ 1312.815191][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.579570][T19484] FAULT_INJECTION: forcing a failure. [ 1315.579570][T19484] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.842767][T19484] CPU: 1 UID: 0 PID: 19484 Comm: syz.2.3906 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1315.842801][T19484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1315.842815][T19484] Call Trace: [ 1315.842823][T19484] [ 1315.842832][T19484] dump_stack_lvl+0x16c/0x1f0 [ 1315.842869][T19484] should_fail_ex+0x512/0x640 [ 1315.842902][T19484] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1315.842932][T19484] should_failslab+0xc2/0x120 [ 1315.842961][T19484] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1315.842987][T19484] ? copy_process+0x6c58/0x91a0 [ 1315.843022][T19484] copy_process+0x6c58/0x91a0 [ 1315.843049][T19484] ? find_held_lock+0x2b/0x80 [ 1315.843072][T19484] ? schedule+0x2d7/0x3a0 [ 1315.843115][T19484] ? __pfx_copy_process+0x10/0x10 [ 1315.843143][T19484] ? __pfx___futex_wait+0x10/0x10 [ 1315.843173][T19484] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1315.843208][T19484] ? __pfx_futex_wake_mark+0x10/0x10 [ 1315.843253][T19484] kernel_clone+0xfc/0x960 [ 1315.843291][T19484] ? __pfx_kernel_clone+0x10/0x10 [ 1315.843336][T19484] __do_sys_clone+0xce/0x120 [ 1315.843368][T19484] ? __pfx___do_sys_clone+0x10/0x10 [ 1315.843412][T19484] ? rcu_is_watching+0x12/0xc0 [ 1315.843441][T19484] do_syscall_64+0xcd/0x230 [ 1315.843476][T19484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.843500][T19484] RIP: 0033:0x7f935ef8e969 [ 1315.843519][T19484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1315.843543][T19484] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1315.843565][T19484] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1315.843580][T19484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 8000000000000001 [ 1315.843595][T19484] RBP: 00007f935f010ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1315.843609][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.843623][T19484] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1315.843652][T19484] [ 1316.052747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.065885][T19492] futex_wake_op: syz.0.3909 tries to shift op by 64; fix this program [ 1319.660923][T19620] FAULT_INJECTION: forcing a failure. [ 1319.660923][T19620] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.704830][T19628] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 1320.013028][T19620] CPU: 1 UID: 0 PID: 19620 Comm: syz.2.3917 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1320.013060][T19620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1320.013075][T19620] Call Trace: [ 1320.013082][T19620] [ 1320.013091][T19620] dump_stack_lvl+0x16c/0x1f0 [ 1320.013125][T19620] should_fail_ex+0x512/0x640 [ 1320.013156][T19620] ? __kmalloc_noprof+0xbf/0x510 [ 1320.013182][T19620] ? snd_pcm_plugin_build+0x434/0x650 [ 1320.013216][T19620] should_failslab+0xc2/0x120 [ 1320.013243][T19620] __kmalloc_noprof+0xd2/0x510 [ 1320.013273][T19620] snd_pcm_plugin_build+0x434/0x650 [ 1320.013311][T19620] snd_pcm_plugin_build_rate+0x27c/0x760 [ 1320.013337][T19620] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 1320.013369][T19620] snd_pcm_plug_format_plugins+0x866/0x1430 [ 1320.013408][T19620] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1320.013447][T19620] ? _raw_spin_unlock_irq+0x23/0x50 [ 1320.013482][T19620] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 1320.013527][T19620] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1320.013581][T19620] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1320.013619][T19620] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1320.013653][T19620] ? hook_file_ioctl_common+0x145/0x410 [ 1320.013679][T19620] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1320.013715][T19620] ? __fget_files+0x20e/0x3c0 [ 1320.013753][T19620] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1320.013788][T19620] __x64_sys_ioctl+0x190/0x200 [ 1320.013821][T19620] do_syscall_64+0xcd/0x230 [ 1320.013854][T19620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.013877][T19620] RIP: 0033:0x7f935ef8e969 [ 1320.013901][T19620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.013925][T19620] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.013946][T19620] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1320.013961][T19620] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1320.013975][T19620] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1320.013989][T19620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.014001][T19620] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1320.014028][T19620] [ 1321.216524][T19665] ERROR: Out of memory at tomoyo_memory_ok. [ 1321.336628][T19622] bond0: option all_slaves_active: invalid value () [ 1322.829296][T19734] FAULT_INJECTION: forcing a failure. [ 1322.829296][T19734] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.055538][T19734] CPU: 1 UID: 0 PID: 19734 Comm: syz.5.3922 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1323.055572][T19734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1323.055585][T19734] Call Trace: [ 1323.055593][T19734] [ 1323.055602][T19734] dump_stack_lvl+0x16c/0x1f0 [ 1323.055641][T19734] should_fail_ex+0x512/0x640 [ 1323.055673][T19734] ? __kmalloc_noprof+0xbf/0x510 [ 1323.055699][T19734] ? snd_pcm_plugin_build+0x434/0x650 [ 1323.055734][T19734] should_failslab+0xc2/0x120 [ 1323.055760][T19734] __kmalloc_noprof+0xd2/0x510 [ 1323.055790][T19734] snd_pcm_plugin_build+0x434/0x650 [ 1323.055828][T19734] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1323.055865][T19734] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1323.055902][T19734] ? _raw_spin_unlock_irq+0x23/0x50 [ 1323.055937][T19734] snd_pcm_oss_change_params_locked+0x2f61/0x3b40 [ 1323.055983][T19734] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1323.056037][T19734] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1323.056075][T19734] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1323.056109][T19734] ? hook_file_ioctl_common+0x145/0x410 [ 1323.056135][T19734] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1323.056171][T19734] ? __fget_files+0x20e/0x3c0 [ 1323.056209][T19734] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1323.056243][T19734] __x64_sys_ioctl+0x190/0x200 [ 1323.056275][T19734] do_syscall_64+0xcd/0x230 [ 1323.056308][T19734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.056331][T19734] RIP: 0033:0x7fb21a18e969 [ 1323.056348][T19734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.056370][T19734] RSP: 002b:00007fb21af89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1323.056391][T19734] RAX: ffffffffffffffda RBX: 00007fb21a3b5fa0 RCX: 00007fb21a18e969 [ 1323.056406][T19734] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1323.056420][T19734] RBP: 00007fb21a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1323.056434][T19734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.056447][T19734] R13: 0000000000000000 R14: 00007fb21a3b5fa0 R15: 00007ffea68f3d48 [ 1323.056474][T19734] [ 1325.413138][T19753] ERROR: Out of memory at tomoyo_memory_ok. [ 1328.611349][T19882] FAULT_INJECTION: forcing a failure. [ 1328.611349][T19882] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.661950][T19882] CPU: 1 UID: 0 PID: 19882 Comm: syz.2.3935 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1328.661995][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1328.662009][T19882] Call Trace: [ 1328.662017][T19882] [ 1328.662026][T19882] dump_stack_lvl+0x16c/0x1f0 [ 1328.662061][T19882] should_fail_ex+0x512/0x640 [ 1328.662091][T19882] ? __kmalloc_noprof+0xbf/0x510 [ 1328.662117][T19882] ? snd_pcm_plugin_build+0x434/0x650 [ 1328.662158][T19882] should_failslab+0xc2/0x120 [ 1328.662186][T19882] __kmalloc_noprof+0xd2/0x510 [ 1328.662216][T19882] snd_pcm_plugin_build+0x434/0x650 [ 1328.662254][T19882] snd_pcm_plugin_build_rate+0x27c/0x760 [ 1328.662280][T19882] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 1328.662312][T19882] snd_pcm_plug_format_plugins+0x866/0x1430 [ 1328.662351][T19882] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1328.662390][T19882] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.662425][T19882] snd_pcm_oss_change_params_locked+0x2eeb/0x3b40 [ 1328.662470][T19882] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1328.662525][T19882] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1328.662563][T19882] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1328.662597][T19882] ? hook_file_ioctl_common+0x145/0x410 [ 1328.662622][T19882] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1328.662658][T19882] ? __fget_files+0x20e/0x3c0 [ 1328.662696][T19882] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1328.662730][T19882] __x64_sys_ioctl+0x190/0x200 [ 1328.662763][T19882] do_syscall_64+0xcd/0x230 [ 1328.662796][T19882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.662818][T19882] RIP: 0033:0x7f935ef8e969 [ 1328.662836][T19882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.662859][T19882] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.662899][T19882] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1328.662914][T19882] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000006 [ 1328.662929][T19882] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1328.662943][T19882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.662957][T19882] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1328.662986][T19882] [ 1329.407942][T19912] Console: switching to colour VGA+ 80x25 [ 1329.665740][T19895] FAULT_INJECTION: forcing a failure. [ 1329.665740][T19895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1329.743846][T19895] CPU: 1 UID: 0 PID: 19895 Comm: syz.2.3936 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1329.743879][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1329.743892][T19895] Call Trace: [ 1329.743900][T19895] [ 1329.743909][T19895] dump_stack_lvl+0x16c/0x1f0 [ 1329.743943][T19895] should_fail_ex+0x512/0x640 [ 1329.743979][T19895] should_fail_alloc_page+0xe7/0x130 [ 1329.744008][T19895] prepare_alloc_pages+0x3c2/0x610 [ 1329.744049][T19895] ? rcu_is_watching+0x12/0xc0 [ 1329.744074][T19895] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1329.744103][T19895] ? rcu_is_watching+0x12/0xc0 [ 1329.744123][T19895] ? __mod_memcg_lruvec_state+0x533/0x760 [ 1329.744159][T19895] ? __mod_zone_page_state+0xcc/0x1a0 [ 1329.744185][T19895] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1329.744213][T19895] ? folios_put_refs+0x5ce/0x740 [ 1329.744252][T19895] ? __lock_acquire+0x5ca/0x1ba0 [ 1329.744280][T19895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1329.744312][T19895] ? policy_nodemask+0xea/0x4e0 [ 1329.744340][T19895] alloc_pages_mpol+0x1fb/0x550 [ 1329.744368][T19895] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1329.744397][T19895] ? filemap_get_entry+0x1a7/0x3b0 [ 1329.744431][T19895] folio_alloc_noprof+0x20/0x2d0 [ 1329.744462][T19895] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1329.744488][T19895] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1329.744512][T19895] ? rcu_is_watching+0x12/0xc0 [ 1329.744537][T19895] __filemap_get_folio+0x5e9/0xc10 [ 1329.744574][T19895] ioctx_alloc+0x761/0x2060 [ 1329.744619][T19895] ? __pfx_ioctx_alloc+0x10/0x10 [ 1329.744649][T19895] ? __might_fault+0x13b/0x190 [ 1329.744681][T19895] __x64_sys_io_setup+0xc9/0x210 [ 1329.744716][T19895] do_syscall_64+0xcd/0x230 [ 1329.744749][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.744771][T19895] RIP: 0033:0x7f935ef8e969 [ 1329.744789][T19895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.744811][T19895] RSP: 002b:00007f935fe1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1329.744832][T19895] RAX: ffffffffffffffda RBX: 00007f935f1b5fa0 RCX: 00007f935ef8e969 [ 1329.744847][T19895] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1329.744860][T19895] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1329.744873][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.744887][T19895] R13: 0000000000000000 R14: 00007f935f1b5fa0 R15: 00007ffdde2f8d58 [ 1329.744914][T19895] [ 1329.801958][T19912] ================================================================== [ 1329.801987][T19912] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1329.802032][T19912] Read of size 10 at addr ffff88802639a99a by task syz.2.3936/19912 [ 1329.802056][T19912] [ 1329.802066][T19912] CPU: 1 UID: 0 PID: 19912 Comm: syz.2.3936 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1329.802093][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1329.802106][T19912] Call Trace: [ 1329.802113][T19912] [ 1329.802121][T19912] dump_stack_lvl+0x116/0x1f0 [ 1329.802151][T19912] print_report+0xc3/0x670 [ 1329.802175][T19912] ? __virt_addr_valid+0x5e/0x590 [ 1329.802202][T19912] ? __phys_addr+0xc6/0x150 [ 1329.802229][T19912] ? fbcon_prepare_logo+0xa03/0xc70 [ 1329.802253][T19912] kasan_report+0xe0/0x110 [ 1329.802278][T19912] ? fbcon_prepare_logo+0xa03/0xc70 [ 1329.802306][T19912] kasan_check_range+0xef/0x1a0 [ 1329.802335][T19912] __asan_memcpy+0x23/0x60 [ 1329.802368][T19912] fbcon_prepare_logo+0xa03/0xc70 [ 1329.802398][T19912] fbcon_init+0xd77/0x1900 [ 1329.802423][T19912] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1329.802447][T19912] visual_init+0x31d/0x620 [ 1329.802480][T19912] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1329.802507][T19912] store_bind+0x61d/0x760 [ 1329.802530][T19912] ? sysfs_file_kobj+0xe4/0x290 [ 1329.802559][T19912] ? __pfx_store_bind+0x10/0x10 [ 1329.802580][T19912] dev_attr_store+0x55/0x80 [ 1329.802605][T19912] ? __pfx_dev_attr_store+0x10/0x10 [ 1329.802630][T19912] sysfs_kf_write+0xef/0x150 [ 1329.802660][T19912] kernfs_fop_write_iter+0x351/0x510 [ 1329.802686][T19912] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1329.802716][T19912] vfs_write+0x5ba/0x1180 [ 1329.802736][T19912] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1329.802764][T19912] ? __pfx___mutex_lock+0x10/0x10 [ 1329.802793][T19912] ? __pfx_vfs_write+0x10/0x10 [ 1329.802820][T19912] ksys_write+0x12a/0x240 [ 1329.802838][T19912] ? __pfx_ksys_write+0x10/0x10 [ 1329.802857][T19912] ? rcu_is_watching+0x12/0xc0 [ 1329.802880][T19912] do_syscall_64+0xcd/0x230 [ 1329.802909][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.802931][T19912] RIP: 0033:0x7f935ef8e969 [ 1329.802947][T19912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.802968][T19912] RSP: 002b:00007f935fdfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1329.802987][T19912] RAX: ffffffffffffffda RBX: 00007f935f1b6080 RCX: 00007f935ef8e969 [ 1329.803001][T19912] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1329.803014][T19912] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1329.803027][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.803045][T19912] R13: 0000000000000000 R14: 00007f935f1b6080 R15: 00007ffdde2f8d58 [ 1329.803064][T19912] [ 1329.803071][T19912] [ 1329.803076][T19912] Allocated by task 19895: [ 1329.803087][T19912] kasan_save_stack+0x33/0x60 [ 1329.803107][T19912] kasan_save_track+0x14/0x30 [ 1329.803128][T19912] __kasan_kmalloc+0xaa/0xb0 [ 1329.803147][T19912] ref_tracker_alloc+0x18e/0x5b0 [ 1329.803175][T19912] sk_alloc+0xaf4/0xc20 [ 1329.803193][T19912] tipc_sk_create+0xcf/0x21a0 [ 1329.803212][T19912] __sock_create+0x335/0x8d0 [ 1329.803239][T19912] tipc_topsrv_init_net+0x4f8/0x9e0 [ 1329.803262][T19912] ops_init+0x1df/0x5f0 [ 1329.803284][T19912] setup_net+0x21e/0x850 [ 1329.803323][T19912] copy_net_ns+0x2a6/0x5f0 [ 1329.803349][T19912] create_new_namespaces+0x3ea/0xad0 [ 1329.803371][T19912] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1329.803394][T19912] ksys_unshare+0x45b/0xa40 [ 1329.803422][T19912] __x64_sys_unshare+0x31/0x40 [ 1329.803450][T19912] do_syscall_64+0xcd/0x230 [ 1329.803478][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.803499][T19912] [ 1329.803504][T19912] The buggy address belongs to the object at ffff88802639a980 [ 1329.803504][T19912] which belongs to the cache kmalloc-32 of size 32 [ 1329.803522][T19912] The buggy address is located 26 bytes inside of [ 1329.803522][T19912] allocated 32-byte region [ffff88802639a980, ffff88802639a9a0) [ 1329.803544][T19912] [ 1329.803549][T19912] The buggy address belongs to the physical page: [ 1329.803558][T19912] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2639a [ 1329.803578][T19912] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1329.803595][T19912] page_type: f5(slab) [ 1329.803614][T19912] raw: 00fff00000000000 ffff88801b441780 0000000000000000 dead000000000001 [ 1329.803634][T19912] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 1329.803648][T19912] page dumped because: kasan: bad access detected [ 1329.803658][T19912] page_owner tracks the page as allocated [ 1329.803666][T19912] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5826, tgid 5826 (syz-executor), ts 96524640422, free_ts 96523467418 [ 1329.803703][T19912] post_alloc_hook+0x181/0x1b0 [ 1329.803723][T19912] get_page_from_freelist+0x135c/0x3920 [ 1329.803746][T19912] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1329.803769][T19912] alloc_pages_mpol+0x1fb/0x550 [ 1329.803792][T19912] new_slab+0x244/0x340 [ 1329.803824][T19912] ___slab_alloc+0xd9c/0x1940 [ 1329.803856][T19912] __slab_alloc.constprop.0+0x56/0xb0 [ 1329.803890][T19912] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1329.803923][T19912] ref_tracker_alloc+0x18e/0x5b0 [ 1329.803953][T19912] qdisc_alloc+0x900/0xc50 [ 1329.803972][T19912] qdisc_create_dflt+0x73/0x430 [ 1329.803993][T19912] dev_activate+0x63f/0x12d0 [ 1329.804012][T19912] __dev_open+0x43a/0x7d0 [ 1329.804031][T19912] __dev_change_flags+0x55d/0x720 [ 1329.804060][T19912] netif_change_flags+0x8d/0x160 [ 1329.804081][T19912] do_setlink.constprop.0+0xddf/0x44b0 [ 1329.804106][T19912] page last free pid 5869 tgid 5869 stack trace: [ 1329.804118][T19912] __free_frozen_pages+0x69d/0xff0 [ 1329.804152][T19912] vfree+0x176/0x960 [ 1329.804183][T19912] delayed_vfree_work+0x56/0x70 [ 1329.804215][T19912] process_one_work+0x9cc/0x1b70 [ 1329.804248][T19912] worker_thread+0x6c8/0xf10 [ 1329.804279][T19912] kthread+0x3c2/0x780 [ 1329.804307][T19912] ret_from_fork+0x45/0x80 [ 1329.804341][T19912] ret_from_fork_asm+0x1a/0x30 [ 1329.804371][T19912] [ 1329.804376][T19912] Memory state around the buggy address: [ 1329.804387][T19912] ffff88802639a880: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1329.804403][T19912] ffff88802639a900: fa fb fb fb fc fc fc fc 00 00 04 fc fc fc fc fc [ 1329.804419][T19912] >ffff88802639a980: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1329.804431][T19912] ^ [ 1329.804443][T19912] ffff88802639aa00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1329.804458][T19912] ffff88802639aa80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1329.804470][T19912] ================================================================== [ 1329.804482][T19912] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1329.804497][T19912] CPU: 1 UID: 0 PID: 19912 Comm: syz.2.3936 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1329.804525][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1329.804538][T19912] Call Trace: [ 1329.804546][T19912] [ 1329.804554][T19912] dump_stack_lvl+0x3d/0x1f0 [ 1329.804584][T19912] panic+0x71c/0x800 [ 1329.804615][T19912] ? __pfx_panic+0x10/0x10 [ 1329.804648][T19912] ? __pfx__printk+0x10/0x10 [ 1329.804682][T19912] ? fbcon_prepare_logo+0xa03/0xc70 [ 1329.804708][T19912] check_panic_on_warn+0xab/0xb0 [ 1329.804743][T19912] end_report+0x107/0x170 [ 1329.804768][T19912] kasan_report+0xee/0x110 [ 1329.804795][T19912] ? fbcon_prepare_logo+0xa03/0xc70 [ 1329.804824][T19912] kasan_check_range+0xef/0x1a0 [ 1329.804855][T19912] __asan_memcpy+0x23/0x60 [ 1329.804891][T19912] fbcon_prepare_logo+0xa03/0xc70 [ 1329.804922][T19912] fbcon_init+0xd77/0x1900 [ 1329.804948][T19912] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1329.804974][T19912] visual_init+0x31d/0x620 [ 1329.805009][T19912] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1329.805043][T19912] store_bind+0x61d/0x760 [ 1329.805068][T19912] ? sysfs_file_kobj+0xe4/0x290 [ 1329.805100][T19912] ? __pfx_store_bind+0x10/0x10 [ 1329.805122][T19912] dev_attr_store+0x55/0x80 [ 1329.805149][T19912] ? __pfx_dev_attr_store+0x10/0x10 [ 1329.805176][T19912] sysfs_kf_write+0xef/0x150 [ 1329.805207][T19912] kernfs_fop_write_iter+0x351/0x510 [ 1329.805235][T19912] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1329.805268][T19912] vfs_write+0x5ba/0x1180 [ 1329.805288][T19912] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1329.805317][T19912] ? __pfx___mutex_lock+0x10/0x10 [ 1329.805348][T19912] ? __pfx_vfs_write+0x10/0x10 [ 1329.805377][T19912] ksys_write+0x12a/0x240 [ 1329.805397][T19912] ? __pfx_ksys_write+0x10/0x10 [ 1329.805417][T19912] ? rcu_is_watching+0x12/0xc0 [ 1329.805441][T19912] do_syscall_64+0xcd/0x230 [ 1329.805472][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.805495][T19912] RIP: 0033:0x7f935ef8e969 [ 1329.805511][T19912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.805533][T19912] RSP: 002b:00007f935fdfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1329.805554][T19912] RAX: ffffffffffffffda RBX: 00007f935f1b6080 RCX: 00007f935ef8e969 [ 1329.805570][T19912] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1329.805584][T19912] RBP: 00007f935f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1329.805599][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.805613][T19912] R13: 0000000000000000 R14: 00007f935f1b6080 R15: 00007ffdde2f8d58 [ 1329.805652][T19912] [ 1329.805715][T19912] Kernel Offset: disabled