last executing test programs: 3m49.629170661s ago: executing program 3 (id=649): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/2/wakeup\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffcee, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) socket(0x2, 0x80802, 0x0) r3 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/connector_id\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/38, 0x26) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1f000000, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)={0x5}) mmap$auto(0x0, 0xe983, 0xdf, 0xfffffffffffffffd, r0, 0x8000) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x80000000009b72, 0x2, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r6) sendmsg$auto_OVS_VPORT_CMD_SET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="201b7b25ff7523156f0000", @ANYRES16=r7, @ANYBLOB="5bd226bd7000fddbdf25040000000400248008000800", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x4004094) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r8, 0x5456, r8) 3m48.164370046s ago: executing program 3 (id=657): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xffffffff, &(0x7f0000000040)={[0x14, 0x13, 0x800000c8be, 0x7, 0x273a, 0xf, 0x8, 0x1, 0x7, 0x334, 0x101, 0x200cf, 0xfff, 0xc, 0x5, 0xb96]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x4, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) 3m47.811495551s ago: executing program 3 (id=658): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = epoll_create$auto(0x4) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x149443, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) open(0x0, 0x181080, 0x118) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, 0x0, 0x2201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon17\x00', 0x80, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) 3m47.522716919s ago: executing program 3 (id=659): mmap$auto(0x10000, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x18000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x602e42, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0xa, &(0x7f0000000240)={0x2, 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="08a83f00180008008217e5f617729ef46c76fe646a07e52fccb2c43e1fa6fd9095f7539f576ef593bc5f15e9dbc88d092047"], 0x24}, 0x1, 0x1400000000000000, 0x0, 0x20040810}, 0x20000084) mmap$auto(0x0, 0x2020009, 0x401, 0xeb2, 0xfffffffffffffffb, 0x8000) r3 = prctl$auto_SECCOMP_MODE_FILTER(0xf0dd, 0x2, 0xffffffffffffffff, 0x1, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) connect$auto(r3, &(0x7f0000000040)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, 0x8) close_range$auto(0x2, r3, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x8010aebb, 0x38) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000002dc0)={0x14a8, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x1357, 0x124, 0x0, 0x1, [@typed={0x14, 0x86, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="7f8751008eceef5d969b265a27052b7421e92fb99d0ccd0458ede5b1e48eca81ad2dc3d8027661586eda6fda5a8357e3e8536c63d578eeff7d86bfec85c308f40e26c6eaa48e001e4f4ab9e82e4ab2d9c54f", @nested={0xaa, 0xea, 0x0, 0x1, [@generic="e9def7b9bf39249d9c7b66b590950f5dbbc45b2bcd58692258a786191f62144d30bfdd569190fe4a3a43abb40ec300e5b5b19e2afd6093f8bd7f8cd437fb11edca54a9d891a19db48391c474d62574d3a75ac8122eace088bdc08c06523f2acc371e600456df115b283f3828469e6b783bca907c183e5370fbdd47bcd428baa33b1a47ad09ea46a7952a3939fc2bbe326e604b66b509", @nested={0x4, 0x5f}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @typed={0x4, 0x7c}]}, @nested={0x103a, 0x6c, 0x0, 0x1, [@generic="3e9ae40afb800c40b2600c4381faf0b12d9933d96cda", @typed={0x8, 0x20, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x23}, @nested={0x4, 0xd1}, @nested={0x4, 0x143}, @generic="a09e30c916b1ac0c", @generic="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", @nested={0x4, 0x142}]}, @nested={0x152, 0x3b, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x54}, @typed={0x8, 0x14b, 0x0, 0x0, @ipv4=@remote}, @generic="64ba0b059db832f0c945a6c07fb9f920f2f2a24b4899525ef05ffcd06dc1b0d431def1fe563e185bfae9b48cfc11c3237c02563f4206e2f55ee2fd1c14927bc43c5bafed27bf2e2f8fdf392e15de56fa73e8bea8c8d3fee04cc99e778b5ef276660f495efea2344a5d6436df43f0cccbef86ae424366f6e353604a5d3de4", @typed={0xbf, 0xd8, 0x0, 0x0, @binary="b1b5b3a9e1a3a600ad30e0b6e25df68415f9d62949564d3515af1c582c4d0339f69bfcfee205a9bb5ee6e1be392eada7925e867464576839e8f3cf888f4a394e2334987fa8d44cba1ddf6a40d68e686bdf613756ac7f600f80b63da907e56649ed4749bc855605754927fc0a69e4dbc0b7fc8c1fd6765cbc76c9e5ead66846d783410ccfb603eeef76b27f72d5323fbf7177b96eab0b5dbc99830d9b4093c269787be4a7170dcc09ca4ac609d03f633acfc8125f6abe15be809291"}]}, @generic="39d962c2dd85c4026e2b401196498e5f6ee694a14c6016a2f14da7a860076c933236cc7d93e07de6b5ec9e30c0b88c161543776472a32274ff71d0a56ceda0da8daf3c308afd86b95da71e887e880a2e80a58b6a8fe30240315e32", @generic="53e1ddbdf5280d8ec71aa2dac5a66cfbffffff09a912b43ba5a5f29ef1868db5e604e45556aa2b5645b668b734801e2cbc9548f30afbdc64262ade9eaeb8fce59d26c38351e4f11ef60966aa0b1d5f70bf1af2c28589"]}, @NL80211_ATTR_PMKID={0xf7, 0x55, "293d1de9bfc11dde8bae8d746eef76f4928fbfbc60ce435a5801278ba344c56501502b0e31a8307af8ef9aafc46239d7c59e699a3d80e8fe8e755851dbf7a8e6775e4f89dd6a9233a03d0e30c8acf0d016f2ecee777bae0370128742bfb9ba07378105c221947f90763d1445fbbacffb105a686475cd2c4871af702383e2cf046c1f6fbaebf76ff0e40fd26d2deb6a32ab3a400adc703eeb156a8cb594d1b63f35e9cce0cbd1bc06e15e8ecb90c8aacfdfc3f913a83ffff73ec1e9a17c8e5ab2faf676cb282e8b3101d982b390da887ded00b06133b399267e286c47c7f74f7e09af772a3a6da957fbf9b03988d58c6e3b582f"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_HE_CAPABILITY={0x16, 0x10d, "9a401c2e4004c5dcc72fe4dff9e7ed82212e"}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, "90deb1fa7b3550e4e0651cdea010e900e175cf9274fd55e71d2607a821"}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x23c00, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) fsopen$auto(0x0, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg/1:0:0:0\x00', 0x101000, 0x0) 3m47.058394844s ago: executing program 3 (id=663): socket(0x1e, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x4}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3m46.589068585s ago: executing program 3 (id=666): ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) (async) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2bf, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0xa, 0xb) sysfs$auto(0xfffffffe, 0x7, 0xd390) epoll_create$auto(0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) (async) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0x101, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) 3m46.197359131s ago: executing program 32 (id=666): ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) (async) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2bf, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0xa, 0xb) sysfs$auto(0xfffffffe, 0x7, 0xd390) epoll_create$auto(0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) (async) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0x101, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) 6.625308993s ago: executing program 2 (id=1522): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futex$auto(0x0, 0x6, 0x4, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) 6.530783687s ago: executing program 2 (id=1523): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000180)={0x9, 0x8, 0x0, 0x7, 0x0, 0x2, "2fd48c8b5dd60c3a87ae458c814aca7c45c15ff8cfbe332a3a778cfa53e3039edaf658c114462f17098e870bbc6427899d03bf94b9841163ca367dab2b3dafbfc7596580a47eaadb3fa44b8383187745a6c27bd1b57fa707a61218bc8f53df07ed5683ce4d6d8a1eab470c1d4df8cfe028868468b9fa539bcf5394a5c30bedf00dcba47ac23400"/148}, 0x7ffd, 0xfefffff4, 0x8) msync$auto(0x1ffff000, 0x20000000007, 0x100004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x400000, 0x1cc) ioprio_set$auto(0x2, 0x0, 0x208) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x7) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$auto(r0, 0x0, 0x7fffffff) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82801, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mmap$auto(0x20000000000000, 0x9bc, 0xe3, 0xeb5, 0xffffffffffffffff, 0x8001) open(0x0, 0x105040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) r2 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x40000009, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x1, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) socket(0x23, 0x80805, 0x0) io_uring_setup$auto(0x3, 0x0) 5.092807262s ago: executing program 0 (id=1528): socket(0x15, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aeb2, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) io_uring_setup$auto(0x1, 0x0) unshare$auto(0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x14480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x7fff) r3 = prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x3) mmap$auto(0x3, 0x200400008, 0x100000002, 0x19, 0x2, 0x8000) mmap$auto(0x6, 0x4, 0x14000000000df, 0x40eb2, r3, 0x300000000000) lseek$auto(r2, 0x7ff, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000000000000000, 0x3, 0x1a1d, 0x2, 0x3, 0x8, 0x2000007f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0x4]}, 0x0) 3.82447595s ago: executing program 1 (id=1534): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = socket(0x29, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x22004011}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x402000b, 0x9, 0x33, r1, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000c7f24efe7e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x890) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) 3.276418259s ago: executing program 2 (id=1535): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x88002, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/248, 0xf8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000140)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES16=r4, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x400000a5}, 0x8004) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0xffffffffffffffff, 0x2, 0x5, 0x40eb1, r5, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x101e40, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffc48, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r7, @ANYRES16, @ANYBLOB="6d26c0527c5db880", @ANYRES16], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 3.048807507s ago: executing program 0 (id=1536): io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x163340, 0x2a) 2.948059368s ago: executing program 1 (id=1537): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto(0xc8, 0x800454df, 0x2000000000000acd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/veth1_to_team/ucast_solicit\x00', 0x208200, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, 0x0, 0x28044004) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0xffffffffffffffff, 0x1, 0x8010, 0x0, 0xba) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) madvise$auto(0x1, 0x0, 0x1) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0x7, r2, 0x1, 0x51) move_pages$auto(r2, 0x9, &(0x7f0000000080)=&(0x7f0000000040)="f1255305fe40598dfcdc17c55e86eef70e6a1ea206f9d4975e7189a889d64b504481eb4650cb7a5c7e04fcd252249dbc88d39ffec1f0402e", &(0x7f00000000c0)=0xfffffbff, &(0x7f0000000100)=0x1, 0xd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.606453506s ago: executing program 4 (id=1538): connect$auto(0x3, 0x0, 0x54) write$auto(0xffffffffffffffff, 0x0, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000740)={0x48, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@typed={0x25, 0x3, 0x0, 0x0, @binary="bbc8f4736837dc869e2a3c10a0f72762cbdad8a3a8bf0fe42609cd8ca6cf68e88c"}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x890) 2.478283011s ago: executing program 2 (id=1539): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) semctl$auto(0x100, 0xfffffffffffffffa, 0x3, 0x8) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$auto(r0, 0x80045440, r1) 2.322700749s ago: executing program 2 (id=1540): statmount$auto(0x0, &(0x7f0000000640)={0xa, 0x1, 0x1ff, 0x7, 0x1f, 0x394, 0x7, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x2, 0x200, 0x0, 0x3ff, 0x0, 0x1580, 0x0, 0x0, 0xfffffd66, [0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0xd) socket(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x3, 0x1) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0xffffffffffffffff) mmap$auto(0xf, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x1e, 0x1, 0x8) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) read$auto_stat_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86) getpid() mlockall$auto(0x1004) rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0xfffffffffffffffd, 0x200, 0xe3, 0x200012, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f00000000c0)="6542084a1459f5", 0x200}, 0x9) io_uring_setup$auto(0xffffff75, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 2.272074626s ago: executing program 4 (id=1541): write$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x2275, 0xdd) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x14, 0x8, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0xe00b, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x145d) 2.074536326s ago: executing program 1 (id=1542): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) umount2$auto(&(0x7f0000000100)='-/\x00', 0x8) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b964e87cfce41d8b86d8574badcc9a0191d85605665e0fa950b247f4667f57ca338d45bd2f88e5dd3dfe6600774e6503521259e0c7c3ddd5099d8b948915c1d3f49efad80b766") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, r2, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000240)="e25a43a65c6cca6c9411c2746b41e9359a2d8bb15d8a3e5581af2300e0e4d52dab848a5e99dd3fb47ef1848ca5105bfd0c8db60ef1fef0e9bebc947cd9f6f1ca5ee8ebf43d91905392610ada852e3312f6cb3e874aa0eb47f59245386744ef1087c9dd1ca2d1f1cd3c844c1199b1dbaccbc09f1638f2f27352ee732b3daa6560b50e0a797394f17d0530dd316d542e58") sendmsg$auto_ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="35c7b8012821143c9f2c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25170000001800018014"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c850) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x200000, 0x48e, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto(r0, 0x0, 0x7ff) write$auto(0x3, 0x0, 0xffd8) r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(r6, 0x2, r6) 1.958149255s ago: executing program 4 (id=1543): r0 = socket(0xa, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b) 1.93075227s ago: executing program 0 (id=1544): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) write$auto_aoe_fops_aoechr(r1, 0x0, 0x0) read$auto(r0, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x3) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x20010, 0x0, 0x0, 0x0) 1.202616508s ago: executing program 4 (id=1545): mmap$auto(0x0, 0xc0009, 0xa, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x18, 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="d651d9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x6}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x2f0, 0x0) 1.116049025s ago: executing program 0 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x34, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "96e300"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0xf0ffff, 0x0, 0x20000000}, 0x20008000) 828.467889ms ago: executing program 0 (id=1547): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xa002, 0x0) writev$auto(r0, &(0x7f0000000300)={0x0, 0x1}, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x6, 0x3) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3fb, 0x0, 0x3, r1, 0x0, 0x6}, 0x6f3) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0xfffffffffffffffd, 0x20009, 0x1e3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000080)='\t\x00\x00\x00rl\x00\xc7D\xf8\x18c', 0x64) 569.650868ms ago: executing program 2 (id=1548): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x5) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x101001, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) write$auto(r2, 0x0, 0xa3d9) sendfile$auto(r1, r1, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf8}}, 0x10004010) recvmsg$auto(0xffffffffffffffff, 0x0, 0x80000001) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f0000000300)="48c9c499a9a55fc2a836723fb70537445460c9f0892a287c9eb350e6b7502695a40747d57c6d503a9321dfb65dfcdd31e011f135fea8b10f802afe673cf64aa66c9f61a38fcb31374ce2e32ab0609681ba696929e2d96bb3682b03969701b37156ff8b4721ea5f896578a106c1f2650052e1d1590d649f180185beeb9d020a55760412") ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) 435.329114ms ago: executing program 1 (id=1549): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x1000000000000000, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2, 0x0, 0x2}) 413.688423ms ago: executing program 4 (id=1550): mmap$auto(0x0, 0x7, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) r0 = socket(0x11, 0x6, 0x4000000) r1 = getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r7, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000002400)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)="34aeede84184", 0x6) sendmsg$auto_NL80211_CMD_START_AP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x222c, r5, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_EHT_CAPABILITY={0x4b, 0x136, "24c3fc500f1b78af65a4f1f04a60a62cbcb8fc80cb61dfc79c5f8e153fc6f17d3bd33fe1447bc837ed06c0bf0fe1b2e39fa5140c57b820c9c80db93405bef0b60f1988965e0ba0"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7f}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x21b4, 0x131, 0x0, 0x1, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1f38, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1f34, 0x5, 0x0, 0x1, [{0x4}, {0x146c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa5, 0x1, "ce675845ec5bf86fc35ffd7188ce3dcce65613ecbb4dc884dc9a2f752cc71031ec54146f8b7ecc1856c368e4565146d362d4abfeb2e449d1e4ae0a1624554e258e8ee0b0cd9063954148098b3775c8a0b8eabe75b06912bc2a88f2d076e0b2e788a9a2c21d5fa822d54ef9b2666cda9df13eb5659322d318ad29120c424cc8fccc47e003b80a681a44785adc356a11586129a39dee4af2cdb3fd68b15594a614fd"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x18, 0x1, "9a06d1613eb562044b45d98882bc799d2f567a42"}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x416}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x89}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x51, 0x1, "1d6b7cf1f5702bcfa947b2928bbdaf430dd43586a394ea72704e97411dab6dd231cbc16d5e88c02294e880aeb819f7cc1075ec88f3300fec1705521a5dbfaf23d0a74c8236a7090c2c6dba8a97"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x48}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe9f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x49}]}]}]}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x62}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5f}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x91}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb9, 0x1, "b0131a23769f287ec74e9238e62a56410e50bb5c79837a3defa8b27f82413d06de36ae745c16d83bd5f42e2f531cb150c68ab73581ea714f7960b9512a5015e0959155ac5a33b93a14c06c3dfbdc3d188b976416d7ae30912295fe09322fca5a357768c119713b06a23f62e2cdb4498e7abd68e1f3da99545de0e1793027488f65164979cae0a9b6d9672b7339c8b09beaaba7c185f4fd5a369710f0b7defe566b77d5a885f9324fe3cee77b957b7ce0559489641b"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa9, 0x1, "3be0cc363b771b5b249a797d7d53645e53a0ef49b47e9ae8f49481d5876894c2677abeebbec1e19c338c2f97f3ec3d526c6a77c1436b0b82926bc0c1038cc7bc90cf0cb47869c6cad4a6c32ad1a343fadb5f27c5de72beebf4debc6f2f6d189aaa238fa9c8f763939ad9679d11bb4956deca7f4104933b5f3e902de354f918adf8cffa09e5a1d97389e16f3cce319cff50049f2dd7f5ede66a8e054e99a1d748c5b9e69769"}]}, {0x4f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x29c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xee}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x62}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x574}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x82}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8bd8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x74}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xd2, 0x1, "bd594f71244735325c374192fc2e1ac27cf975af561fffca7cb75a3e158234492de7ee076d972c1f9ba1fe9b98b15fec916e68e34de1227f4ddb3742b682126363ea9fa597c683cc277dd70c54163ae7b0939db99f48d26a39fda10f2ae82e317c53d319953863e3a1dfcfdf71ef0b30ea0189b8103c797515a81b02a275ea93bcf8ce61a312eec68495c1d477b202ea60d16d7981fe8c538411dfcf940542bb7a6bd866da0b91bd90bf19017a109a5f734034c3390e8b950004f89e4aa39b4a6b667ed228a75f563609ed323a87"}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x30, 0x1, "577447ce728e2362e96cd9e2d66398f6c67ede392b7f90b36ea75318219dd2306085ad156ea75367805d12df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xfc, 0x1, "47c2db8ef84788da45c6d6d003e533c6b6c7afccd51bd4ee9898ecc04180cbe0aa40709ca4a65d84dbab195f7a98c82d6c3262b9c1daeb6e17a77940dc39869a65dae3966951b75c83920084392ec4cd5e7e1e169c1245217ed8e1128a6f299f376cda41dc3b038b8c69fe5190ce76b3007c50fb0d0e71d8345c185adde59b101848128cf66c87c24c25e63bca5fc0f2a5cbaaa66925644bd835619f61fe1d580be38af197a54f57ddc7e645d37b340a92cae047f03a237d9b8a8d7c849ae19015aeb732d157b44d6af06ef0263b0ef16a6f09783c1ee93d3ef182ce9f0ae7c348b30da40c42ef60938d1e49688ef2081de9422123104dcc"}]}]}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x7}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_STA_FLAGS2={0x88, 0x43, "7c982100ad6de546bd1dc91540945a1504438ee24f6c83174d900c961ae832a804a7e2480ad4c47c6059ab64710f3edc98882c5f78573dc9695f6df3d2f1b2afc35ab1022ff66ca64b633a534deaf14a3430f4fc9a5bdeb61326ebdc3e865407853e957d55f3ac5815737fc77ed9af0d436f6e7f1c7a28a60f2c80d59190b71c603447d0"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_NAN_FUNC={0xf1, 0xf0, 0x0, 0x1, [@generic="b9ee8a8d6bcd3616f265d687eadb5eabeb7e1a209ba92bb1f934cfeb1b3fa3f53f5d460e9db725add350d8e6226202d67b166a33df8959aa50f9c4fea623dcbea2b30408a4de7e9b2061a77639d85a6f3249c20f2e200580a6756529da75861cf2bd3a743152d0802dce869e5685dabd0f75457429caa5e956d2fb13066d0c85d304884a448aae7f439bc5054bdfabc3b35604879b5b48b22b516c51e81c6170683785719b70010b00df227636245a64ba57c0df180e30353ef6b72579668a0a7ed84bcb5b3ee44ffb95cdb6d1f575a091a040b86292bf3f4a57d64e8274b8a04e3f2fde1b70bdecbfa4b75f49"]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_FILS_DISCOVERY={0xd0, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x2}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x4}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xaa, 0x3, "f98d8bf8cf05430bd61a6bfc3388b58235caced0e9dc0ce99db098d8c82eac7de53bce7fb8bfba4ab1f7e156b10766b03a59536081a665e1f3dcdb81cca23bb72384e68ccaab92fd2b1047baf0243e4fc314efc19b433e71530a948fc0f4e3354b942eb267bb27b8f5dde2d64e211a2adf4778abd717cdc9ac29b80e69c8ede5d6675154128bd443b2f00b9dc0100c152569b59084c704a8f40169a3b23944bd205d5c7e2c3b"}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xc}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1ff}]}, 0x222c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 270.172596ms ago: executing program 0 (id=1551): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto(0xc8, 0x800454df, 0x2000000000000acd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/neigh/veth1_to_team/ucast_solicit\x00', 0x208200, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, 0x0, 0x28044004) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0xffffffffffffffff, 0x1, 0x8010, 0x0, 0xba) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) madvise$auto(0x1, 0x0, 0x1) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0x7, r2, 0x1, 0x51) move_pages$auto(r2, 0x9, &(0x7f0000000080)=&(0x7f0000000040)="f1255305fe40598dfcdc17c55e86eef70e6a1ea206f9d4975e7189a889d64b504481eb4650cb7a5c7e04fcd252249dbc88d39ffec1f0402e", &(0x7f00000000c0)=0xfffffbff, &(0x7f0000000100)=0x1, 0xd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 229.169936ms ago: executing program 1 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x14, r1, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0xf0, 0x0, 0x200008d0}, 0x40080c4) 126.080863ms ago: executing program 4 (id=1553): unshare$auto(0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setpgid$auto(0x0, 0x0) mmap$auto(0x6aa, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x4a4b42, 0x0) r1 = socket(0x11, 0x80003, 0x300) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff7e, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x3, 0x7, 0x80000005}) setsockopt$auto(r1, 0x107, 0x3, 0x0, 0x80000001) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x5020009, 0xdf, 0xeb1, 0x401, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2002, 0x0) socket(0x2, 0x1, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r3, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0xb59, @_sigchld={r3, 0x0, 0x3fe, 0x5, 0x6}}}) open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x40) 0s ago: executing program 1 (id=1554): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) fcntl$auto_F_SETLK(r0, 0x6, 0x0) madvise$auto(0xf2ffffff, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) setitimer$auto(0x0, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b6, 0x6162) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r5, 0x301, 0x70bd29, 0x25dfdc01, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$auto_NETDEV_CMD_NAPI_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x7fffffff}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x6}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c870) kernel console output (not intermixed with test programs): 90 [ 340.675599][T10326] ? __pfx_tty_open+0x10/0x10 [ 340.675626][T10326] ? chrdev_open+0x10b/0x6a0 [ 340.675650][T10326] ? lock_release+0x201/0x2f0 [ 340.675679][T10326] ? __pfx_tty_open+0x10/0x10 [ 340.675706][T10326] chrdev_open+0x231/0x6a0 [ 340.675728][T10326] ? __pfx_apparmor_file_open+0x10/0x10 [ 340.675757][T10326] ? __pfx_chrdev_open+0x10/0x10 [ 340.675783][T10326] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 340.675825][T10326] do_dentry_open+0x741/0x1c10 [ 340.675849][T10326] ? __pfx_chrdev_open+0x10/0x10 [ 340.675877][T10326] vfs_open+0x82/0x3f0 [ 340.675906][T10326] path_openat+0x1e5e/0x2d40 [ 340.675935][T10326] ? __pfx_path_openat+0x10/0x10 [ 340.675961][T10326] do_filp_open+0x20b/0x470 [ 340.675983][T10326] ? __pfx_do_filp_open+0x10/0x10 [ 340.676018][T10326] ? alloc_fd+0x471/0x7d0 [ 340.676041][T10326] do_sys_openat2+0x11b/0x1d0 [ 340.676070][T10326] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.676102][T10326] ? __fget_files+0x20e/0x3c0 [ 340.676125][T10326] __x64_sys_openat+0x174/0x210 [ 340.676155][T10326] ? __pfx___x64_sys_openat+0x10/0x10 [ 340.676185][T10326] ? ksys_write+0x1b9/0x240 [ 340.676207][T10326] ? rcu_is_watching+0x12/0xc0 [ 340.676230][T10326] ? rcu_is_watching+0x12/0xc0 [ 340.676254][T10326] do_syscall_64+0xcd/0x230 [ 340.676287][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.676310][T10326] RIP: 0033:0x7f1e9db8e969 [ 340.676329][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.676352][T10326] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 340.676375][T10326] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 340.676391][T10326] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 340.676407][T10326] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 340.676422][T10326] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 340.676437][T10326] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 340.676460][T10326] [ 340.682166][T10326] syz.2.1011: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 341.064901][T10324] Invalid ELF header magic: != ELF [ 341.124565][T10326] ,cpuset=/,mems_allowed=0-1 [ 341.129234][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.2.1011 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 341.129265][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.129278][T10326] Call Trace: [ 341.129286][T10326] [ 341.129294][T10326] dump_stack_lvl+0x16c/0x1f0 [ 341.129329][T10326] warn_alloc+0x248/0x3a0 [ 341.129356][T10326] ? __pfx_warn_alloc+0x10/0x10 [ 341.129381][T10326] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 341.129408][T10326] ? __kasan_kmalloc+0x8a/0xb0 [ 341.129431][T10326] ? __get_vm_area_node+0x208/0x330 [ 341.129467][T10326] __vmalloc_node_range_noprof+0xd31/0x1540 [ 341.129489][T10326] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.129523][T10326] ? __pfx_prb_read_valid+0x10/0x10 [ 341.129551][T10326] ? n_tty_open+0x1a/0x170 [ 341.129592][T10326] ? __ldsem_down_write_nested+0x10e/0x850 [ 341.129624][T10326] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 341.129658][T10326] ? vc_cons_allocated+0x70/0x90 [ 341.129682][T10326] ? tty_termios_input_baud_rate+0xf8/0x2c0 [ 341.129716][T10326] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.129747][T10326] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.129779][T10326] ? n_tty_open+0x1a/0x170 [ 341.129808][T10326] vzalloc_noprof+0x6b/0x90 [ 341.129828][T10326] ? n_tty_open+0x1a/0x170 [ 341.129856][T10326] ? __pfx_n_tty_open+0x10/0x10 [ 341.129884][T10326] n_tty_open+0x1a/0x170 [ 341.129912][T10326] ? __pfx_n_tty_open+0x10/0x10 [ 341.129940][T10326] tty_ldisc_open+0x9c/0x120 [ 341.129964][T10326] tty_ldisc_setup+0x40/0x100 [ 341.129989][T10326] tty_init_dev.part.0+0x1ec/0x500 [ 341.130018][T10326] tty_open+0xa50/0xf90 [ 341.130048][T10326] ? __pfx_tty_open+0x10/0x10 [ 341.130074][T10326] ? chrdev_open+0x10b/0x6a0 [ 341.130098][T10326] ? lock_release+0x201/0x2f0 [ 341.130127][T10326] ? __pfx_tty_open+0x10/0x10 [ 341.130154][T10326] chrdev_open+0x231/0x6a0 [ 341.130177][T10326] ? __pfx_apparmor_file_open+0x10/0x10 [ 341.130207][T10326] ? __pfx_chrdev_open+0x10/0x10 [ 341.130232][T10326] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 341.130269][T10326] do_dentry_open+0x741/0x1c10 [ 341.130294][T10326] ? __pfx_chrdev_open+0x10/0x10 [ 341.130321][T10326] vfs_open+0x82/0x3f0 [ 341.130348][T10326] path_openat+0x1e5e/0x2d40 [ 341.130376][T10326] ? __pfx_path_openat+0x10/0x10 [ 341.130402][T10326] do_filp_open+0x20b/0x470 [ 341.130425][T10326] ? __pfx_do_filp_open+0x10/0x10 [ 341.130458][T10326] ? alloc_fd+0x471/0x7d0 [ 341.130482][T10326] do_sys_openat2+0x11b/0x1d0 [ 341.130510][T10326] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.130541][T10326] ? __fget_files+0x20e/0x3c0 [ 341.130572][T10326] __x64_sys_openat+0x174/0x210 [ 341.130601][T10326] ? __pfx___x64_sys_openat+0x10/0x10 [ 341.130630][T10326] ? ksys_write+0x1b9/0x240 [ 341.130649][T10326] ? rcu_is_watching+0x12/0xc0 [ 341.130670][T10326] ? rcu_is_watching+0x12/0xc0 [ 341.130688][T10326] do_syscall_64+0xcd/0x230 [ 341.130717][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.130739][T10326] RIP: 0033:0x7f1e9db8e969 [ 341.130757][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.130778][T10326] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 341.130799][T10326] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 341.130814][T10326] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 341.130829][T10326] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 341.130844][T10326] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 341.130856][T10326] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 341.130877][T10326] [ 341.130886][T10326] Mem-Info: [ 341.526067][T10326] active_anon:29113 inactive_anon:46273 isolated_anon:0 [ 341.526067][T10326] active_file:27103 inactive_file:37188 isolated_file:0 [ 341.526067][T10326] unevictable:769 dirty:585 writeback:0 [ 341.526067][T10326] slab_reclaimable:13439 slab_unreclaimable:100157 [ 341.526067][T10326] mapped:46157 shmem:42295 pagetables:1810 [ 341.526067][T10326] sec_pagetables:0 bounce:0 [ 341.526067][T10326] kernel_misc_reclaimable:0 [ 341.526067][T10326] free:1243518 free_pcp:3908 free_cma:0 [ 341.637052][T10326] Node 0 active_anon:116452kB inactive_anon:190592kB active_file:108408kB inactive_file:148620kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:184628kB dirty:2340kB writeback:0kB shmem:173144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14024kB pagetables:7240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.721932][T10326] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.814107][T10326] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.881562][T10326] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 341.904797][T10326] Node 0 DMA32 free:1040392kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:116404kB inactive_anon:205072kB active_file:106940kB inactive_file:148284kB unevictable:1540kB writepending:2416kB present:3129332kB managed:2544152kB mlocked:0kB bounce:0kB free_pcp:6952kB local_pcp:4748kB free_cma:0kB [ 341.974219][T10326] lowmem_reserve[]: 0 0 1 1 1 [ 342.018902][T10326] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1468kB inactive_file:336kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 342.123908][T10326] lowmem_reserve[]: 0 0 0 0 0 [ 342.128685][T10326] Node 1 Normal free:3899476kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8040kB local_pcp:4000kB free_cma:0kB [ 342.213940][T10326] lowmem_reserve[]: 0 0 0 0 0 [ 342.243850][T10326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 342.284371][T10326] Node 0 DMA32: 362*4kB (UM) 161*8kB (UE) 18*16kB (UE) 84*32kB (UE) 97*64kB (UME) 45*128kB (U) 25*256kB (UM) 110*512kB (UME) 46*1024kB (UME) 32*2048kB (UME) 204*4096kB (UM) = 1028624kB [ 342.332840][T10326] Node 0 Normal: 2*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 342.395299][T10326] Node 1 Normal: 68*4kB (UME) 1*8kB (E) 7*16kB (UE) 76*32kB (UME) 98*64kB (UME) 28*128kB (UE) 11*256kB (U) 8*512kB (UE) 3*1024kB (UM) 3*2048kB (UME) 945*4096kB (M) = 3899528kB [ 342.433398][T10326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.515083][T10326] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 342.548703][T10326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.587875][T10326] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.625323][T10326] 106525 total pagecache pages [ 342.640544][T10326] 1 pages in swap cache [ 342.662228][T10326] Free swap = 124992kB [ 342.678621][T10326] Total swap = 124996kB [ 342.717093][T10326] 2097051 pages RAM [ 342.720954][T10326] 0 pages HighMem/MovableOnly [ 342.743590][T10326] 428907 pages reserved [ 342.747783][T10326] 0 pages cma reserved [ 342.751862][T10326] tty tty26: ldisc open failed (-12), clearing slot 25 [ 344.086787][T10367] openvswitch: HfR: Dropping previously announced user features [ 344.153298][T10367] FAULT_INJECTION: forcing a failure. [ 344.153298][T10367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.172978][T10367] CPU: 1 UID: 0 PID: 10367 Comm: syz.0.1022 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 344.173008][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.173020][T10367] Call Trace: [ 344.173028][T10367] [ 344.173036][T10367] dump_stack_lvl+0x16c/0x1f0 [ 344.173070][T10367] should_fail_ex+0x512/0x640 [ 344.173091][T10367] _copy_from_iter+0x2a4/0x15b0 [ 344.173113][T10367] ? __alloc_skb+0x200/0x380 [ 344.173128][T10367] ? __pfx__copy_from_iter+0x10/0x10 [ 344.173149][T10367] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 344.173170][T10367] netlink_sendmsg+0x829/0xdd0 [ 344.173189][T10367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.173209][T10367] ____sys_sendmsg+0xa98/0xc70 [ 344.173229][T10367] ? copy_msghdr_from_user+0x10a/0x160 [ 344.173244][T10367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.173263][T10367] ? __pfx_kstrtouint+0x10/0x10 [ 344.173280][T10367] ? kstrtouint_from_user+0x13c/0x1d0 [ 344.173297][T10367] ___sys_sendmsg+0x134/0x1d0 [ 344.173312][T10367] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.173331][T10367] ? rcu_is_watching+0x12/0xc0 [ 344.173358][T10367] __sys_sendmsg+0x16d/0x220 [ 344.173373][T10367] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.173391][T10367] ? rcu_is_watching+0x12/0xc0 [ 344.173403][T10367] ? rcu_is_watching+0x12/0xc0 [ 344.173416][T10367] do_syscall_64+0xcd/0x230 [ 344.173437][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.173451][T10367] RIP: 0033:0x7f6439f8e969 [ 344.173462][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.173475][T10367] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.173488][T10367] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 344.173497][T10367] RDX: 0000000004000024 RSI: 00002000000002c0 RDI: 0000000000000006 [ 344.173506][T10367] RBP: 00007f643aeb5090 R08: 0000000000000000 R09: 0000000000000000 [ 344.173514][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.173522][T10367] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 344.173534][T10367] [ 344.977970][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 345.358364][T10377] mkiss: ax0: crc mode is auto. [ 345.751239][T10393] vivid-003: ================= START STATUS ================= [ 345.792457][T10393] vivid-003: Radio HW Seek Mode: Bounded [ 345.805761][T10393] vivid-003: Radio Programmable HW Seek: false [ 345.852446][T10393] vivid-003: RDS Rx I/O Mode: Block I/O [ 345.878633][T10393] vivid-003: Generate RBDS Instead of RDS: false [ 345.926180][T10393] vivid-003: RDS Reception: true [ 345.931190][T10393] vivid-003: RDS Program Type: 0 inactive [ 345.937047][T10393] vivid-003: RDS PS Name: inactive [ 345.991167][T10393] vivid-003: RDS Radio Text: inactive [ 345.996739][T10393] vivid-003: RDS Traffic Announcement: false inactive [ 346.003793][T10393] vivid-003: RDS Traffic Program: false inactive [ 346.010198][T10393] vivid-003: RDS Music: false inactive [ 346.015812][T10393] vivid-003: ================== END STATUS ================== [ 348.544432][T10456] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1046'. [ 348.591406][T10456] FAULT_INJECTION: forcing a failure. [ 348.591406][T10456] name failslab, interval 1, probability 0, space 0, times 0 [ 348.604079][T10456] CPU: 0 UID: 0 PID: 10456 Comm: syz.2.1046 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 348.604102][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.604111][T10456] Call Trace: [ 348.604116][T10456] [ 348.604123][T10456] dump_stack_lvl+0x16c/0x1f0 [ 348.604147][T10456] should_fail_ex+0x512/0x640 [ 348.604169][T10456] ? nsim_fib_event_nb+0x45e/0x10d0 [ 348.604183][T10456] should_failslab+0xc2/0x120 [ 348.604201][T10456] __kmalloc_noprof+0xd2/0x510 [ 348.604218][T10456] nsim_fib_event_nb+0x45e/0x10d0 [ 348.604232][T10456] ? rt6_flush_exceptions+0x6a/0x80 [ 348.604252][T10456] notifier_call_chain+0xbc/0x410 [ 348.604274][T10456] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 348.604289][T10456] atomic_notifier_call_chain+0x71/0x1c0 [ 348.604308][T10456] call_fib_notifiers+0x33/0x70 [ 348.604326][T10456] fib6_del+0xeb8/0x1770 [ 348.604343][T10456] ? __pfx_fib6_del+0x10/0x10 [ 348.604359][T10456] ? fib6_ifdown+0xcd/0x8f0 [ 348.604375][T10456] fib6_clean_node+0x424/0x5b0 [ 348.604391][T10456] ? __pfx_fib6_clean_node+0x10/0x10 [ 348.604409][T10456] fib6_walk_continue+0x452/0x8d0 [ 348.604423][T10456] fib6_walk+0x182/0x370 [ 348.604435][T10456] ? __pfx_fib6_ifdown+0x10/0x10 [ 348.604450][T10456] fib6_clean_tree+0xd4/0x110 [ 348.604462][T10456] ? __pfx_fib6_clean_tree+0x10/0x10 [ 348.604475][T10456] ? update_curr+0x74/0x800 [ 348.604496][T10456] ? __pfx_fib6_clean_node+0x10/0x10 [ 348.604511][T10456] ? __pfx_fib6_ifdown+0x10/0x10 [ 348.604526][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.604538][T10456] ? __fib6_clean_all+0x10f/0x2d0 [ 348.604552][T10456] ? __pfx_fib6_ifdown+0x10/0x10 [ 348.604566][T10456] __fib6_clean_all+0x107/0x2d0 [ 348.604582][T10456] rt6_disable_ip+0x2ec/0x990 [ 348.604601][T10456] ? __mutex_trylock_common+0xe9/0x250 [ 348.604619][T10456] ? __pfx___mutex_trylock_common+0x10/0x10 [ 348.604638][T10456] ? __pfx_rt6_disable_ip+0x10/0x10 [ 348.604658][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.604676][T10456] ? trace_contention_end+0xdd/0x130 [ 348.604696][T10456] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 348.604714][T10456] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 348.604736][T10456] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 348.604756][T10456] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 348.604773][T10456] ? net_generic+0xea/0x2a0 [ 348.604785][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.604800][T10456] addrconf_notify+0x220/0x19e0 [ 348.604819][T10456] ? ip6mr_device_event+0x1bc/0x230 [ 348.604839][T10456] notifier_call_chain+0xbc/0x410 [ 348.604855][T10456] ? __pfx_addrconf_notify+0x10/0x10 [ 348.604874][T10456] call_netdevice_notifiers_info+0xbe/0x140 [ 348.604895][T10456] __dev_notify_flags+0x1f7/0x2e0 [ 348.604911][T10456] ? __pfx___dev_notify_flags+0x10/0x10 [ 348.604927][T10456] ? __pfx___dev_change_flags+0x10/0x10 [ 348.604944][T10456] netif_change_flags+0x108/0x160 [ 348.604960][T10456] do_setlink.constprop.0+0xddf/0x44b0 [ 348.604979][T10456] ? __pfx_vprintk_emit+0x10/0x10 [ 348.604993][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605005][T10456] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 348.605024][T10456] ? ___ratelimit+0x247/0x570 [ 348.605049][T10456] ? _printk+0xc7/0x100 [ 348.605066][T10456] ? __mutex_trylock_common+0xe9/0x250 [ 348.605085][T10456] ? __pfx___mutex_trylock_common+0x10/0x10 [ 348.605104][T10456] ? __pfx___might_resched+0x10/0x10 [ 348.605120][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605134][T10456] ? trace_contention_end+0xdd/0x130 [ 348.605152][T10456] ? __mutex_lock+0x1ca/0xb90 [ 348.605171][T10456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 348.605187][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605199][T10456] ? rtnl_setlink+0x2b0/0x770 [ 348.605215][T10456] ? __pfx___mutex_lock+0x10/0x10 [ 348.605239][T10456] rtnl_setlink+0x3cb/0x770 [ 348.605257][T10456] ? __pfx_rtnl_setlink+0x10/0x10 [ 348.605280][T10456] ? __kasan_slab_free+0x51/0x70 [ 348.605296][T10456] ? dev_hard_start_xmit+0x93/0x740 [ 348.605309][T10456] ? __dev_queue_xmit+0x7eb/0x43e0 [ 348.605321][T10456] ? netlink_deliver_tap+0xa87/0xd30 [ 348.605338][T10456] ? netlink_unicast+0x5df/0x7f0 [ 348.605368][T10456] ? aa_get_newest_label+0x375/0x680 [ 348.605383][T10456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 348.605398][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605411][T10456] ? trace_cap_capable+0x18d/0x200 [ 348.605426][T10456] ? apparmor_capable+0x114/0x1d0 [ 348.605440][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605452][T10456] ? __pfx_rtnl_setlink+0x10/0x10 [ 348.605468][T10456] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 348.605484][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605496][T10456] ? __pfx_rtnl_setlink+0x10/0x10 [ 348.605511][T10456] ? lock_release+0x201/0x2f0 [ 348.605528][T10456] ? __pfx_rtnl_setlink+0x10/0x10 [ 348.605544][T10456] rtnetlink_rcv_msg+0x95b/0xe90 [ 348.605561][T10456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.605582][T10456] netlink_rcv_skb+0x16d/0x440 [ 348.605599][T10456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.605617][T10456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.605639][T10456] ? netlink_deliver_tap+0x1ae/0xd30 [ 348.605656][T10456] netlink_unicast+0x53a/0x7f0 [ 348.605674][T10456] ? __pfx_netlink_unicast+0x10/0x10 [ 348.605693][T10456] netlink_sendmsg+0x8d1/0xdd0 [ 348.605711][T10456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.605732][T10456] ____sys_sendmsg+0xa98/0xc70 [ 348.605752][T10456] ? copy_msghdr_from_user+0x10a/0x160 [ 348.605767][T10456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.605787][T10456] ? kfree+0x252/0x4d0 [ 348.605799][T10456] ? lock_release+0x201/0x2f0 [ 348.605816][T10456] ___sys_sendmsg+0x134/0x1d0 [ 348.605832][T10456] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.605847][T10456] ? __futex_wait+0x323/0x3c0 [ 348.605867][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605883][T10456] ? __pfx___might_resched+0x10/0x10 [ 348.605899][T10456] __sys_sendmmsg+0x200/0x420 [ 348.605916][T10456] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.605934][T10456] ? __pfx_do_futex+0x10/0x10 [ 348.605960][T10456] ? __pfx___x64_sys_futex+0x10/0x10 [ 348.605975][T10456] ? rcu_is_watching+0x12/0xc0 [ 348.605989][T10456] __x64_sys_sendmmsg+0x9c/0x100 [ 348.606005][T10456] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 348.606027][T10456] do_syscall_64+0xcd/0x230 [ 348.606052][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.606067][T10456] RIP: 0033:0x7f1e9db8e969 [ 348.606081][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.606096][T10456] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.606109][T10456] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 348.606119][T10456] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 348.606128][T10456] RBP: 00007f1e9dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 348.606137][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.606145][T10456] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 348.606159][T10456] [ 350.321584][T10472] FAULT_INJECTION: forcing a failure. [ 350.321584][T10472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.360819][T10472] CPU: 1 UID: 0 PID: 10472 Comm: syz.2.1048 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 350.360853][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.360867][T10472] Call Trace: [ 350.360874][T10472] [ 350.360888][T10472] dump_stack_lvl+0x16c/0x1f0 [ 350.360925][T10472] should_fail_ex+0x512/0x640 [ 350.360959][T10472] _copy_from_user+0x2e/0xd0 [ 350.360992][T10472] copy_msghdr_from_user+0x98/0x160 [ 350.361018][T10472] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 350.361047][T10472] ? kfree+0x252/0x4d0 [ 350.361072][T10472] ___sys_recvmsg+0xdb/0x1a0 [ 350.361098][T10472] ? __pfx____sys_recvmsg+0x10/0x10 [ 350.361132][T10472] ? __pfx___might_resched+0x10/0x10 [ 350.361162][T10472] do_recvmmsg+0x2fe/0x740 [ 350.361190][T10472] ? __pfx_do_recvmmsg+0x10/0x10 [ 350.361214][T10472] ? ksys_write+0x190/0x240 [ 350.361236][T10472] ? rcu_is_watching+0x12/0xc0 [ 350.361261][T10472] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 350.361299][T10472] ? __fget_files+0x20e/0x3c0 [ 350.361324][T10472] __x64_sys_recvmmsg+0x22a/0x280 [ 350.361352][T10472] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 350.361380][T10472] ? rcu_is_watching+0x12/0xc0 [ 350.361402][T10472] ? rcu_is_watching+0x12/0xc0 [ 350.361426][T10472] do_syscall_64+0xcd/0x230 [ 350.361459][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.361482][T10472] RIP: 0033:0x7f1e9db8e969 [ 350.361501][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.361524][T10472] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 350.361547][T10472] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 350.361564][T10472] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 350.361578][T10472] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 350.361593][T10472] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 350.361607][T10472] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 350.361630][T10472] [ 350.576447][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.954934][T10496] caif:caif_disconnect_client(): nothing to disconnect [ 352.011747][T10494] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 352.277949][T10508] can: request_module (can-proto-3) failed. [ 353.340789][T10538] FAULT_INJECTION: forcing a failure. [ 353.340789][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 353.421453][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.1.1064 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 353.421488][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.421501][T10538] Call Trace: [ 353.421509][T10538] [ 353.421518][T10538] dump_stack_lvl+0x16c/0x1f0 [ 353.421555][T10538] should_fail_ex+0x512/0x640 [ 353.421589][T10538] should_failslab+0xc2/0x120 [ 353.421616][T10538] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 353.421643][T10538] ? __mpol_dup+0x74/0x380 [ 353.421673][T10538] __mpol_dup+0x74/0x380 [ 353.421701][T10538] ? __pfx___mpol_dup+0x10/0x10 [ 353.421727][T10538] ? mas_walk+0x6a6/0x910 [ 353.421757][T10538] mbind_range+0x2ad/0x570 [ 353.421788][T10538] do_mbind+0x848/0xf30 [ 353.421822][T10538] ? __pfx_do_mbind+0x10/0x10 [ 353.421861][T10538] ? __pfx_get_nodes+0x10/0x10 [ 353.421885][T10538] ? __fget_files+0x20e/0x3c0 [ 353.421906][T10538] kernel_mbind+0x1e3/0x1f0 [ 353.421937][T10538] ? __pfx_kernel_mbind+0x10/0x10 [ 353.421975][T10538] ? rcu_is_watching+0x12/0xc0 [ 353.421998][T10538] ? rcu_is_watching+0x12/0xc0 [ 353.422021][T10538] do_syscall_64+0xcd/0x230 [ 353.422052][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.422074][T10538] RIP: 0033:0x7fc1c2b8e969 [ 353.422092][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.422115][T10538] RSP: 002b:00007fc1c39e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 353.422137][T10538] RAX: ffffffffffffffda RBX: 00007fc1c2db6080 RCX: 00007fc1c2b8e969 [ 353.422153][T10538] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 353.422168][T10538] RBP: 00007fc1c39e2090 R08: 0000000000000003 R09: 0000000000000003 [ 353.422183][T10538] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 353.422197][T10538] R13: 0000000000000000 R14: 00007fc1c2db6080 R15: 00007ffe0b2e56a8 [ 353.422221][T10538] [ 353.620890][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.412780][T10571] ieee80211 .: Selected rate control algorithm 'minstrel_ht' [ 354.456319][T10575] ubi0: attaching mtd0 [ 354.461556][T10575] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 354.805932][T10591] Device name cannot be null; rc = [-22] [ 355.198854][T10604] block2mtd: parameter too long [ 355.385117][T10612] FAULT_INJECTION: forcing a failure. [ 355.385117][T10612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.399654][T10612] CPU: 0 UID: 0 PID: 10612 Comm: syz.2.1082 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 355.399687][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.399701][T10612] Call Trace: [ 355.399709][T10612] [ 355.399717][T10612] dump_stack_lvl+0x16c/0x1f0 [ 355.399753][T10612] should_fail_ex+0x512/0x640 [ 355.399795][T10612] _copy_from_user+0x2e/0xd0 [ 355.399829][T10612] __x64_sys_epoll_ctl+0x131/0x1e0 [ 355.399863][T10612] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 355.399895][T10612] ? rcu_is_watching+0x12/0xc0 [ 355.399917][T10612] ? rcu_is_watching+0x12/0xc0 [ 355.399942][T10612] do_syscall_64+0xcd/0x230 [ 355.399975][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.399998][T10612] RIP: 0033:0x7f1e9db8e969 [ 355.400017][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.400040][T10612] RSP: 002b:00007f1e9ea55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 355.400063][T10612] RAX: ffffffffffffffda RBX: 00007f1e9ddb6080 RCX: 00007f1e9db8e969 [ 355.400080][T10612] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000008 [ 355.400094][T10612] RBP: 00007f1e9ea55090 R08: 0000000000000000 R09: 0000000000000000 [ 355.400109][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.400123][T10612] R13: 0000000000000000 R14: 00007f1e9ddb6080 R15: 00007ffc2fe6e8c8 [ 355.400146][T10612] [ 355.555407][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.891159][T10622] FAULT_INJECTION: forcing a failure. [ 355.891159][T10622] name failslab, interval 1, probability 0, space 0, times 0 [ 355.904076][T10622] CPU: 0 UID: 0 PID: 10622 Comm: syz.0.1086 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 355.904111][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.904127][T10622] Call Trace: [ 355.904135][T10622] [ 355.904145][T10622] dump_stack_lvl+0x16c/0x1f0 [ 355.904184][T10622] should_fail_ex+0x512/0x640 [ 355.904220][T10622] ? tomoyo_encode2+0x100/0x3e0 [ 355.904252][T10622] should_failslab+0xc2/0x120 [ 355.904282][T10622] __kmalloc_noprof+0xd2/0x510 [ 355.904308][T10622] ? d_absolute_path+0x136/0x1a0 [ 355.904341][T10622] tomoyo_encode2+0x100/0x3e0 [ 355.904376][T10622] tomoyo_encode+0x29/0x50 [ 355.904407][T10622] tomoyo_realpath_from_path+0x18f/0x6e0 [ 355.904446][T10622] tomoyo_check_open_permission+0x2ab/0x3c0 [ 355.904474][T10622] ? init_file+0x93/0x4c0 [ 355.904502][T10622] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 355.904533][T10622] ? do_sys_openat2+0x11b/0x1d0 [ 355.904566][T10622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.904594][T10622] ? rcu_is_watching+0x12/0xc0 [ 355.904622][T10622] ? do_raw_spin_lock+0x12c/0x2b0 [ 355.904643][T10622] ? path_get+0x61/0x80 [ 355.904658][T10622] ? rcu_is_watching+0x12/0xc0 [ 355.904671][T10622] tomoyo_file_open+0x6b/0x90 [ 355.904685][T10622] security_file_open+0x84/0x1e0 [ 355.904704][T10622] do_dentry_open+0x596/0x1c10 [ 355.904729][T10622] vfs_open+0x82/0x3f0 [ 355.904747][T10622] path_openat+0x1e5e/0x2d40 [ 355.904764][T10622] ? __pfx_path_openat+0x10/0x10 [ 355.904780][T10622] do_filp_open+0x20b/0x470 [ 355.904793][T10622] ? __pfx_do_filp_open+0x10/0x10 [ 355.904813][T10622] ? alloc_fd+0x471/0x7d0 [ 355.904827][T10622] do_sys_openat2+0x11b/0x1d0 [ 355.904845][T10622] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.904863][T10622] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.904889][T10622] ? __pfx___might_resched+0x10/0x10 [ 355.904918][T10622] __x64_sys_openat+0x174/0x210 [ 355.904948][T10622] ? __pfx___x64_sys_openat+0x10/0x10 [ 355.904971][T10622] ? rcu_is_watching+0x12/0xc0 [ 355.904984][T10622] ? rcu_is_watching+0x12/0xc0 [ 355.904998][T10622] do_syscall_64+0xcd/0x230 [ 355.905019][T10622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.905033][T10622] RIP: 0033:0x7f6439f8e969 [ 355.905045][T10622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.905059][T10622] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.905072][T10622] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 355.905082][T10622] RDX: 0000000000008081 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 355.905091][T10622] RBP: 00007f643a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 355.905100][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.905108][T10622] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 355.905121][T10622] [ 355.905135][T10622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.143997][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.332773][ T30] audit: type=1804 audit(6042310836.972:10): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1086" name="/newroot/307/file0" dev="tmpfs" ino=1639 res=1 errno=0 [ 356.406957][ T30] audit: type=1800 audit(6042310836.972:11): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1086" name="file0" dev="tmpfs" ino=1639 res=0 errno=0 [ 356.427567][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.933091][T10634] Process accounting resumed [ 357.097801][ T30] audit: type=1326 audit(6042310837.733:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.0.1090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6439f8e969 code=0x0 [ 357.136245][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'. [ 358.216463][T10664] FAULT_INJECTION: forcing a failure. [ 358.216463][T10664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.287041][T10664] CPU: 1 UID: 0 PID: 10664 Comm: syz.4.1094 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 358.287084][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.287100][T10664] Call Trace: [ 358.287108][T10664] [ 358.287118][T10664] dump_stack_lvl+0x16c/0x1f0 [ 358.287158][T10664] should_fail_ex+0x512/0x640 [ 358.287195][T10664] _copy_from_user+0x2e/0xd0 [ 358.287231][T10664] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 358.287275][T10664] snd_rawmidi_write+0x26e/0xc10 [ 358.287311][T10664] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 358.287337][T10664] ? __pfx_default_wake_function+0x10/0x10 [ 358.287365][T10664] ? bpf_lsm_file_permission+0x9/0x10 [ 358.287390][T10664] ? security_file_permission+0x71/0x210 [ 358.287425][T10664] ? rw_verify_area+0xcf/0x680 [ 358.287461][T10664] vfs_write+0x25c/0x1180 [ 358.287483][T10664] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 358.287510][T10664] ? __pfx_vfs_write+0x10/0x10 [ 358.287533][T10664] ? __fget_files+0x204/0x3c0 [ 358.287554][T10664] ? rcu_is_watching+0x12/0xc0 [ 358.287578][T10664] ? lock_release+0x201/0x2f0 [ 358.287610][T10664] ? __fget_files+0x20e/0x3c0 [ 358.287636][T10664] ksys_write+0x205/0x240 [ 358.287660][T10664] ? __pfx_ksys_write+0x10/0x10 [ 358.287683][T10664] ? rcu_is_watching+0x12/0xc0 [ 358.287706][T10664] ? rcu_is_watching+0x12/0xc0 [ 358.287732][T10664] do_syscall_64+0xcd/0x230 [ 358.287768][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.287794][T10664] RIP: 0033:0x7f9958d8e969 [ 358.287814][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.287839][T10664] RSP: 002b:00007f9956bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.287865][T10664] RAX: ffffffffffffffda RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 358.287883][T10664] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 358.287901][T10664] RBP: 00007f9958e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.287917][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.287932][T10664] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 358.287956][T10664] [ 359.241436][T10682] PM: Image not found (code -6) [ 359.418256][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 359.884703][T10684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.915245][T10684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.933691][T10684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.959045][T10684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.239092][T10644] kexec: Could not allocate control_code_buffer [ 361.344953][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.984217][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.990286][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.997065][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.550113][T10718] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1105'. [ 364.015364][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1111'. [ 364.066803][T10744] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1112'. [ 364.964416][T10747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.987872][T10747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.013564][T10747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.031854][T10747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.739747][T10773] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 366.271989][T10794] vivid-003: ================= START STATUS ================= [ 366.304587][T10794] vivid-003: Radio HW Seek Mode: Bounded [ 366.325858][T10794] vivid-003: Radio Programmable HW Seek: false [ 366.349813][T10794] vivid-003: RDS Rx I/O Mode: Block I/O [ 366.391176][T10779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.400490][T10794] vivid-003: Generate RBDS Instead of RDS: false [ 366.432709][T10794] vivid-003: RDS Reception: true [ 366.442258][T10779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.442829][T10794] vivid-003: RDS Program Type: [ 366.483076][T10779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.521752][T10794] 0 inactive [ 366.534864][T10779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.639930][T10794] vivid-003: RDS PS Name: inactive [ 366.732924][T10794] vivid-003: RDS Radio Text: inactive [ 366.755491][T10806] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1128'. [ 366.770032][T10794] vivid-003: RDS Traffic Announcement: false inactive [ 366.803286][T10804] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1128'. [ 366.829699][T10794] vivid-003: RDS Traffic Program: false inactive [ 366.893516][T10794] vivid-003: RDS Music: false inactive [ 366.899082][T10794] vivid-003: ================== END STATUS ================== [ 367.410598][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 367.724825][T10831] random: crng reseeded on system resumption [ 367.741311][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.818183][T10831] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 367.845284][T10821] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 367.921189][T10831] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 367.929520][T10831] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 367.979240][T10833] can: request_module (can-proto-0) failed. [ 368.352326][T10831] PM: hibernation: Basic memory bitmaps created [ 368.424879][T10830] PM: hibernation: Basic memory bitmaps freed [ 368.460974][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.461041][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.540794][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.661876][T10854] netlink: 246 bytes leftover after parsing attributes in process `syz.1.1138'. [ 369.532258][T10854] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78004 [ 369.640215][T10854] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 369.720118][T10854] memcg:ffff88803183c301 [ 369.724406][T10854] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 369.830078][T10854] page_type: f5(slab) [ 369.858225][T10854] raw: 00fff00000000040 ffff88801c6b8780 0000000000000000 dead000000000001 [ 369.900016][T10854] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff88803183c301 [ 369.908664][T10854] head: 00fff00000000040 ffff88801c6b8780 0000000000000000 dead000000000001 [ 369.941415][T10854] head: 0000000000000000 0000000000150015 00000000f5000000 ffff88803183c301 [ 370.057200][T10854] head: 00fff00000000001 ffffea0001e00101 00000000ffffffff 00000000ffffffff [ 370.086517][T10854] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 370.133903][T10854] page dumped because: unmovable page [ 370.139346][T10854] page_owner tracks the page as allocated [ 370.145849][T10854] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 85094866552, free_ts 27963627338 [ 370.169988][T10854] post_alloc_hook+0x181/0x1b0 [ 370.174952][T10854] get_page_from_freelist+0x135c/0x3920 [ 370.180616][T10854] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 370.186542][T10854] alloc_pages_mpol+0x1fb/0x550 [ 370.191496][T10854] new_slab+0x244/0x340 [ 370.195678][T10854] ___slab_alloc+0xd9c/0x1940 [ 370.200421][T10854] __slab_alloc.constprop.0+0x56/0xb0 [ 370.205828][T10854] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 370.211612][T10854] __d_alloc+0x31/0xaa0 [ 370.215799][T10854] d_alloc+0x4a/0x1e0 [ 370.226366][T10878] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(2192964143.3565445313.2197805062), cmd(15) [ 370.255832][T10854] d_alloc_parallel+0xe3/0x12e0 [ 370.275741][T10854] __lookup_slow+0x193/0x460 [ 370.290990][T10854] lookup_one_len+0x17f/0x1b0 [ 370.297422][T10854] start_creating.part.0+0x12f/0x3a0 [ 370.313173][T10854] debugfs_create_dir+0x6c/0x5f0 [ 370.318344][T10854] hci_register_dev+0x2f2/0xc60 [ 370.323403][T10854] page last free pid 1 tgid 1 stack trace: [ 370.329365][T10854] __free_frozen_pages+0x69d/0xff0 [ 370.335352][T10854] free_contig_range+0x135/0x3f0 [ 370.341186][T10854] destroy_args+0x66f/0x830 [ 370.345851][T10854] debug_vm_pgtable+0x130e/0x2d50 [ 370.351029][T10854] do_one_initcall+0x120/0x6e0 [ 370.375718][T10854] kernel_init_freeable+0x5c2/0x900 [ 370.389836][T10854] kernel_init+0x1c/0x2b0 [ 370.402734][T10854] ret_from_fork+0x48/0x80 [ 370.411045][T10854] ret_from_fork_asm+0x1a/0x30 [ 370.978078][ T22] numa_remove_cpu cpu 1 node 0: mask now 0 [ 370.983915][ T22] numa_remove_cpu cpu 1 node 1: mask now 0 [ 370.991822][ T5879] smpboot: CPU 1 is now offline [ 371.975300][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 372.471277][T10922] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1157'. [ 372.755673][T10922] veth1_macvtap: left promiscuous mode [ 372.820172][T10922] macsec0: entered allmulticast mode [ 373.346930][T10939] FAULT_INJECTION: forcing a failure. [ 373.346930][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 373.486212][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.1.1161 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 373.486243][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.486252][T10939] Call Trace: [ 373.486257][T10939] [ 373.486262][T10939] dump_stack_lvl+0x16c/0x1f0 [ 373.486286][T10939] should_fail_ex+0x512/0x640 [ 373.486308][T10939] ? kernfs_fop_write_iter+0x237/0x510 [ 373.486326][T10939] should_failslab+0xc2/0x120 [ 373.486343][T10939] __kmalloc_noprof+0xd2/0x510 [ 373.486360][T10939] kernfs_fop_write_iter+0x237/0x510 [ 373.486378][T10939] vfs_write+0x5bd/0x1180 [ 373.486391][T10939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 373.486409][T10939] ? __pfx___mutex_lock+0x10/0x10 [ 373.486430][T10939] ? __pfx_vfs_write+0x10/0x10 [ 373.486447][T10939] ksys_write+0x12a/0x240 [ 373.486460][T10939] ? __pfx_ksys_write+0x10/0x10 [ 373.486472][T10939] ? rcu_is_watching+0x12/0xc0 [ 373.486485][T10939] ? rcu_is_watching+0x12/0xc0 [ 373.486498][T10939] do_syscall_64+0xcd/0x230 [ 373.486519][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.486532][T10939] RIP: 0033:0x7fc1c2b8e969 [ 373.486543][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.486556][T10939] RSP: 002b:00007fc1c3a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.486570][T10939] RAX: ffffffffffffffda RBX: 00007fc1c2db5fa0 RCX: 00007fc1c2b8e969 [ 373.486579][T10939] RDX: 00000000000098c7 RSI: 0000200000000440 RDI: 0000000000000007 [ 373.486587][T10939] RBP: 00007fc1c3a03090 R08: 0000000000000000 R09: 0000000000000000 [ 373.486595][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.486603][T10939] R13: 0000000000000000 R14: 00007fc1c2db5fa0 R15: 00007ffe0b2e56a8 [ 373.486615][T10939] [ 373.669483][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.928177][T10946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 374.937039][T10946] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 375.026086][T10946] memcg:ffff88803e70eb81 [ 375.070621][T10946] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 375.124776][ T8377] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:64: bg 3: bad block bitmap checksum [ 375.138139][T10946] page_type: f5(slab) [ 375.142142][T10946] raw: 00fff00000000040 ffff888140e8f640 0000000000000000 dead000000000001 [ 375.191722][ T8377] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3350 with max blocks 7 with error 74 [ 375.232548][T10946] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88803e70eb81 [ 375.255127][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 375.298052][ T8377] EXT4-fs (sda1): This should not happen!! Data will be lost [ 375.298052][ T8377] [ 375.318175][T10946] head: 00fff00000000040 ffff888140e8f640 0000000000000000 dead000000000001 [ 375.326886][T10946] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff88803e70eb81 [ 375.439827][T10946] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 375.467818][T10966] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 375.489862][T10946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 375.539843][T10946] page dumped because: unmovable page [ 375.545247][T10946] page_owner tracks the page as allocated [ 375.637758][T10946] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 85347109306, free_ts 27963537366 [ 375.660905][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.794064][T10982] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1174'. [ 375.827987][T10946] post_alloc_hook+0x181/0x1b0 [ 375.856200][T10946] get_page_from_freelist+0x135c/0x3920 [ 375.893692][T10946] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 375.937266][T10946] alloc_pages_mpol+0x1fb/0x550 [ 375.942162][T10946] new_slab+0x244/0x340 [ 375.946316][T10946] ___slab_alloc+0xd9c/0x1940 [ 376.039264][T10946] __slab_alloc.constprop.0+0x56/0xb0 [ 376.044691][T10946] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 376.116948][T10946] proc_alloc_inode+0x25/0x200 [ 376.121740][T10946] alloc_inode+0x64/0x240 [ 376.126112][T10946] new_inode+0x22/0x1c0 [ 376.196454][T10946] proc_sys_make_inode+0x47/0x5c0 [ 376.327211][T10946] proc_sys_lookup+0x282/0x410 [ 376.332029][T10946] lookup_open.isra.0+0x4d7/0x1580 [ 376.397236][T10946] path_openat+0x905/0x2d40 [ 376.426955][T10946] do_filp_open+0x20b/0x470 [ 376.431481][T10946] page last free pid 1 tgid 1 stack trace: [ 376.496582][T10946] __free_frozen_pages+0x69d/0xff0 [ 376.676749][T10946] free_contig_range+0x135/0x3f0 [ 376.681714][T10946] destroy_args+0x66f/0x830 [ 376.897139][T10946] debug_vm_pgtable+0x130e/0x2d50 [ 376.989313][T10946] do_one_initcall+0x120/0x6e0 [ 377.164594][T10946] kernel_init_freeable+0x5c2/0x900 [ 377.236967][T10946] kernel_init+0x1c/0x2b0 [ 377.270872][T10946] ret_from_fork+0x48/0x80 [ 377.312642][T10946] ret_from_fork_asm+0x1a/0x30 [ 378.541130][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548068][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.148809][T11037] [U] »%§ [ 381.151788][T11037] [U] [ 381.154469][T11037] [U] ûä [ 381.399172][T11037] [U] [ 381.401949][T11037] [U] »‡† [ 381.404882][T11037] [U] [ 381.445034][T11037] [U] ;é· [ 381.527478][T11037] [U] [ 381.654221][T11037] [U]  [ 381.657109][T11037] [U] [ 381.659769][T11037] [U] à [ 381.662642][T11037] [U]  [ 381.934335][T11037] [U]   [ 381.937217][T11037] [U]  [ 382.052886][T11037] [U]  [ 382.102062][T11030] ima: policy update failed [ 382.158490][T11037] [U]  [ 382.295400][T11037] [U]  [ 382.298270][T11037] [U] €H` [ 382.301381][T11037] [U]  [ 382.374268][ T30] audit: type=1802 audit(6042310863.025:13): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1188" res=0 errno=0 [ 382.430437][T11037] [U] €¥c [ 382.433636][T11037] [U] 6 [ 382.503858][T11037] [U] [ 383.955537][T11094] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 385.193966][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 385.545379][T11122] FAULT_INJECTION: forcing a failure. [ 385.545379][T11122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.669381][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.4.1216 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 385.669404][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.669413][T11122] Call Trace: [ 385.669418][T11122] [ 385.669424][T11122] dump_stack_lvl+0x16c/0x1f0 [ 385.669448][T11122] should_fail_ex+0x512/0x640 [ 385.669469][T11122] _copy_from_user+0x2e/0xd0 [ 385.669490][T11122] kstrtouint_from_user+0xd6/0x1d0 [ 385.669507][T11122] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 385.669525][T11122] ? simple_read_from_buffer+0x10d/0x170 [ 385.669546][T11122] proc_fail_nth_write+0x83/0x250 [ 385.669567][T11122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.669586][T11122] ? __pfx___might_resched+0x10/0x10 [ 385.669603][T11122] vfs_write+0x25c/0x1180 [ 385.669616][T11122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.669636][T11122] ? __pfx___mutex_lock+0x10/0x10 [ 385.669656][T11122] ? __pfx_vfs_write+0x10/0x10 [ 385.669668][T11122] ? __fget_files+0x204/0x3c0 [ 385.669680][T11122] ? rcu_is_watching+0x12/0xc0 [ 385.669697][T11122] ? __fget_files+0x20e/0x3c0 [ 385.669711][T11122] ksys_write+0x12a/0x240 [ 385.669723][T11122] ? __pfx_ksys_write+0x10/0x10 [ 385.669735][T11122] ? rcu_is_watching+0x12/0xc0 [ 385.669747][T11122] ? rcu_is_watching+0x12/0xc0 [ 385.669761][T11122] do_syscall_64+0xcd/0x230 [ 385.669781][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.669795][T11122] RIP: 0033:0x7f9958d8d41f [ 385.669806][T11122] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.669820][T11122] RSP: 002b:00007f9956bf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.669833][T11122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9958d8d41f [ 385.669842][T11122] RDX: 0000000000000001 RSI: 00007f9956bf60a0 RDI: 0000000000000004 [ 385.669850][T11122] RBP: 00007f9956bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.669858][T11122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 385.669865][T11122] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 385.669878][T11122] [ 386.269671][T11126] Process accounting resumed [ 387.456070][T11146] Device name cannot be null; rc = [-22] [ 387.577472][T11115] Process accounting paused [ 387.913964][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'. [ 388.097551][T11151] netlink: 'syz.1.1223': attribute type 2 has an invalid length. [ 388.257237][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 389.043633][T11160] Invalid ELF header magic: != ELF [ 389.547626][T11167] caif:caif_disconnect_client(): nothing to disconnect [ 390.716147][T11187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 390.861236][T11188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 391.146807][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 391.245187][T11187] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 391.775460][T11209] FAULT_INJECTION: forcing a failure. [ 391.775460][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.851350][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.0.1237 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 391.851373][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.851382][T11209] Call Trace: [ 391.851386][T11209] [ 391.851392][T11209] dump_stack_lvl+0x16c/0x1f0 [ 391.851416][T11209] should_fail_ex+0x512/0x640 [ 391.851438][T11209] _copy_from_user+0x2e/0xd0 [ 391.851459][T11209] snd_pcm_oss_write2+0x1c2/0x410 [ 391.851482][T11209] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 391.851502][T11209] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 391.851518][T11209] snd_pcm_oss_write+0x711/0xa10 [ 391.851539][T11209] ? security_file_permission+0x71/0x210 [ 391.851559][T11209] vfs_write+0x25c/0x1180 [ 391.851572][T11209] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 391.851595][T11209] ? __pfx_vfs_write+0x10/0x10 [ 391.851607][T11209] ? __fget_files+0x204/0x3c0 [ 391.851618][T11209] ? rcu_is_watching+0x12/0xc0 [ 391.851632][T11209] ? lock_release+0x201/0x2f0 [ 391.851650][T11209] ? __fget_files+0x20e/0x3c0 [ 391.851663][T11209] ksys_write+0x12a/0x240 [ 391.851675][T11209] ? __pfx_ksys_write+0x10/0x10 [ 391.851688][T11209] ? rcu_is_watching+0x12/0xc0 [ 391.851700][T11209] ? rcu_is_watching+0x12/0xc0 [ 391.851713][T11209] do_syscall_64+0xcd/0x230 [ 391.851733][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.851747][T11209] RIP: 0033:0x7f6439f8e969 [ 391.851758][T11209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.851771][T11209] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.851784][T11209] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 391.851793][T11209] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 391.851801][T11209] RBP: 00007f643aeb5090 R08: 0000000000000000 R09: 0000000000000000 [ 391.851809][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.851817][T11209] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 391.851830][T11209] [ 392.535628][T11221] warn_alloc: 1 callbacks suppressed [ 392.535642][T11221] syz.2.1241: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.708705][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.2.1241 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 392.708729][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.708738][T11221] Call Trace: [ 392.708743][T11221] [ 392.708749][T11221] dump_stack_lvl+0x16c/0x1f0 [ 392.708773][T11221] warn_alloc+0x248/0x3a0 [ 392.708789][T11221] ? __pfx_warn_alloc+0x10/0x10 [ 392.708804][T11221] ? alloc_pages_mpol+0x25a/0x550 [ 392.708822][T11221] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 392.708838][T11221] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 392.708859][T11221] ? rcu_is_watching+0x12/0xc0 [ 392.708872][T11221] ? trace_kmalloc+0x2b/0xd0 [ 392.708900][T11221] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 392.708918][T11221] ? kernel_clone+0xfc/0x960 [ 392.708938][T11221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.708960][T11221] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 392.708981][T11221] ? rcu_is_watching+0x12/0xc0 [ 392.708994][T11221] ? kernel_clone+0xfc/0x960 [ 392.709010][T11221] __vmalloc_node_noprof+0x74/0xa0 [ 392.709023][T11221] ? kernel_clone+0xfc/0x960 [ 392.709040][T11221] copy_process+0x2ead/0x91a0 [ 392.709057][T11221] ? schedule+0x2d7/0x3a0 [ 392.709074][T11221] ? rcu_is_watching+0x12/0xc0 [ 392.709086][T11221] ? lock_release+0x201/0x2f0 [ 392.709104][T11221] ? futex_wait_queue+0x24/0x220 [ 392.709121][T11221] ? schedule+0xf1/0x3a0 [ 392.709138][T11221] ? futex_wait_queue+0x14c/0x220 [ 392.709157][T11221] ? __pfx_copy_process+0x10/0x10 [ 392.709173][T11221] ? __pfx___futex_wait+0x10/0x10 [ 392.709190][T11221] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 392.709210][T11221] ? __pfx_futex_wake_mark+0x10/0x10 [ 392.709231][T11221] kernel_clone+0xfc/0x960 [ 392.709248][T11221] ? __pfx_kernel_clone+0x10/0x10 [ 392.709270][T11221] __do_sys_clone+0xce/0x120 [ 392.709287][T11221] ? __pfx___do_sys_clone+0x10/0x10 [ 392.709308][T11221] ? rcu_is_watching+0x12/0xc0 [ 392.709321][T11221] ? rcu_is_watching+0x12/0xc0 [ 392.709334][T11221] do_syscall_64+0xcd/0x230 [ 392.709355][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.709369][T11221] RIP: 0033:0x7f1e9db8e969 [ 392.709381][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.709395][T11221] RSP: 002b:00007f1e9ea75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 392.709408][T11221] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 392.709418][T11221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.709426][T11221] RBP: 00007f1e9dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 392.709434][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.709442][T11221] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 392.709455][T11221] [ 392.709460][T11221] Mem-Info: [ 392.709467][T11221] active_anon:29115 inactive_anon:59024 isolated_anon:0 [ 392.709467][T11221] active_file:27026 inactive_file:37380 isolated_file:0 [ 392.709467][T11221] unevictable:769 dirty:1157 writeback:0 [ 392.709467][T11221] slab_reclaimable:13710 slab_unreclaimable:101955 [ 392.709467][T11221] mapped:44130 shmem:49753 pagetables:1961 [ 392.709467][T11221] sec_pagetables:0 bounce:0 [ 392.709467][T11221] kernel_misc_reclaimable:0 [ 392.709467][T11221] free:1232660 free_pcp:1462 free_cma:0 [ 392.709504][T11221] Node 0 active_anon:116460kB inactive_anon:236096kB active_file:108100kB inactive_file:149388kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:176520kB dirty:4624kB writeback:0kB shmem:197476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14160kB pagetables:7844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.709543][T11221] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.709579][T11221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.709615][T11221] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 392.709640][T11221] Node 0 DMA32 free:1012340kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:116412kB inactive_anon:236096kB active_file:106632kB inactive_file:149052kB unevictable:1540kB writepending:4624kB present:3129332kB managed:2544152kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:196kB free_cma:0kB [ 392.709697][T11221] lowmem_reserve[]: 0 0 1 1 1 [ 392.709723][T11221] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1468kB inactive_file:336kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 392.711339][T11221] lowmem_reserve[]: 0 0 0 0 0 [ 392.711368][T11221] Node 1 Normal free:3902916kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5628kB local_pcp:5628kB free_cma:0kB [ 392.711407][T11221] lowmem_reserve[]: 0 0 0 0 0 [ 392.711431][T11221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.711513][T11221] Node 0 DMA32: 480*4kB (UME) 785*8kB (UE) 607*16kB (UE) 293*32kB (UME) 83*64kB (UE) 84*128kB (UM) 208*256kB (UME) 54*512kB (UM) 35*1024kB (UM) 20*2048kB (UME) 198*4096kB (UME) = 1012056kB [ 392.711624][T11221] Node 0 Normal: 2*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 392.711699][T11221] Node 1 Normal: 224*4kB (UME) 58*8kB (UME) 36*16kB (UME) 187*32kB (UME) 98*64kB (UME) 29*128kB (UME) 12*256kB (UM) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UME) 944*4096kB (M) = 3902960kB [ 392.711811][T11221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.711835][T11221] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.711847][T11221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.711858][T11221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.711869][T11221] 114208 total pagecache pages [ 392.711881][T11221] 1 pages in swap cache [ 392.711886][T11221] Free swap = 124732kB [ 392.711891][T11221] Total swap = 124996kB [ 392.711897][T11221] 2097051 pages RAM [ 392.711901][T11221] 0 pages HighMem/MovableOnly [ 392.711906][T11221] 428907 pages reserved [ 392.711911][T11221] 0 pages cma reserved [ 393.409958][T11226] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.1243: bg 4: bad block bitmap checksum [ 393.410025][T11226] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2049 with max blocks 2 with error 74 [ 393.410043][T11226] EXT4-fs (sda1): This should not happen!! Data will be lost [ 393.410043][T11226] [ 396.289790][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.889982][T11196] tty tty12: ldisc open failed (-12), clearing slot 11 [ 398.518620][T11275] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 398.518620][T11275] The task syz.4.1252 (11275) triggered the difference, watch for misbehavior. [ 398.675365][T11274] Process accounting resumed [ 398.775918][T11281] FAULT_INJECTION: forcing a failure. [ 398.775918][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 398.840353][T11281] CPU: 0 UID: 0 PID: 11281 Comm: syz.2.1257 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 398.840376][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.840385][T11281] Call Trace: [ 398.840390][T11281] [ 398.840396][T11281] dump_stack_lvl+0x16c/0x1f0 [ 398.840430][T11281] should_fail_ex+0x512/0x640 [ 398.840452][T11281] should_failslab+0xc2/0x120 [ 398.840469][T11281] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 398.840485][T11281] ? do_epoll_ctl+0x1158/0x3590 [ 398.840506][T11281] do_epoll_ctl+0x1158/0x3590 [ 398.840525][T11281] ? ksys_write+0x190/0x240 [ 398.840538][T11281] ? rcu_is_watching+0x12/0xc0 [ 398.840553][T11281] ? __pfx_do_epoll_ctl+0x10/0x10 [ 398.840572][T11281] ? __might_fault+0xe3/0x190 [ 398.840587][T11281] ? __might_fault+0x13b/0x190 [ 398.840601][T11281] ? rcu_is_watching+0x12/0xc0 [ 398.840616][T11281] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 398.840635][T11281] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 398.840655][T11281] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 398.840675][T11281] ? rcu_is_watching+0x12/0xc0 [ 398.840686][T11281] ? rcu_is_watching+0x12/0xc0 [ 398.840700][T11281] do_syscall_64+0xcd/0x230 [ 398.840720][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.840734][T11281] RIP: 0033:0x7f1e9db8e969 [ 398.840745][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.840758][T11281] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 398.840771][T11281] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 398.840780][T11281] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 398.840788][T11281] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 398.840796][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.840804][T11281] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 398.840816][T11281] [ 399.961862][T11283] program syz.0.1258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.417911][T11320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.079034][T11360] FAULT_INJECTION: forcing a failure. [ 402.079034][T11360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.149453][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.4.1279 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 402.149476][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.149485][T11360] Call Trace: [ 402.149489][T11360] [ 402.149494][T11360] dump_stack_lvl+0x16c/0x1f0 [ 402.149519][T11360] should_fail_ex+0x512/0x640 [ 402.149541][T11360] strncpy_from_user+0x3b/0x2e0 [ 402.149560][T11360] getname_flags.part.0+0x8f/0x550 [ 402.149580][T11360] getname_flags+0x93/0xf0 [ 402.149600][T11360] do_sys_openat2+0xb8/0x1d0 [ 402.149619][T11360] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.149638][T11360] ? __fget_files+0x20e/0x3c0 [ 402.149651][T11360] __x64_sys_openat+0x174/0x210 [ 402.149670][T11360] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.149688][T11360] ? ksys_write+0x1b9/0x240 [ 402.149700][T11360] ? rcu_is_watching+0x12/0xc0 [ 402.149714][T11360] ? rcu_is_watching+0x12/0xc0 [ 402.149727][T11360] do_syscall_64+0xcd/0x230 [ 402.149748][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.149762][T11360] RIP: 0033:0x7f9958d8e969 [ 402.149772][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.149786][T11360] RSP: 002b:00007f9956bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 402.149799][T11360] RAX: ffffffffffffffda RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 402.149808][T11360] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 402.149817][T11360] RBP: 00007f9956bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.149825][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.149833][T11360] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 402.149845][T11360] [ 402.623381][T11364] FAULT_INJECTION: forcing a failure. [ 402.623381][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 402.640002][T11365] Invalid ELF header magic: != ELF [ 402.672429][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.2.1280 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 402.672454][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.672464][T11364] Call Trace: [ 402.672469][T11364] [ 402.672474][T11364] dump_stack_lvl+0x16c/0x1f0 [ 402.672501][T11364] should_fail_ex+0x512/0x640 [ 402.672523][T11364] ? handler_new_ref+0x1b0/0xc60 [ 402.672543][T11364] should_failslab+0xc2/0x120 [ 402.672561][T11364] __kmalloc_noprof+0xd2/0x510 [ 402.672576][T11364] ? __asan_memcpy+0x3c/0x60 [ 402.672590][T11364] handler_new_ref+0x1b0/0xc60 [ 402.672613][T11364] v4l2_ctrl_new+0x1963/0x2180 [ 402.672635][T11364] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 402.672657][T11364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.672678][T11364] v4l2_ctrl_new_std+0x1be/0x290 [ 402.672701][T11364] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 402.672723][T11364] ? rcu_is_watching+0x12/0xc0 [ 402.672737][T11364] ? trace_kmalloc+0x2b/0xd0 [ 402.672755][T11364] ? __kvmalloc_node_noprof+0x296/0x600 [ 402.672770][T11364] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 402.672791][T11364] ? media_request_object_init+0x100/0x180 [ 402.672809][T11364] vicodec_open+0x1d0/0xf90 [ 402.672829][T11364] v4l2_open+0x225/0x490 [ 402.672846][T11364] ? __pfx_v4l2_open+0x10/0x10 [ 402.672864][T11364] chrdev_open+0x231/0x6a0 [ 402.672880][T11364] ? __pfx_apparmor_file_open+0x10/0x10 [ 402.672899][T11364] ? __pfx_chrdev_open+0x10/0x10 [ 402.672915][T11364] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 402.672940][T11364] do_dentry_open+0x741/0x1c10 [ 402.672955][T11364] ? __pfx_chrdev_open+0x10/0x10 [ 402.672972][T11364] vfs_open+0x82/0x3f0 [ 402.672991][T11364] path_openat+0x1e5e/0x2d40 [ 402.673008][T11364] ? __pfx_path_openat+0x10/0x10 [ 402.673024][T11364] do_filp_open+0x20b/0x470 [ 402.673038][T11364] ? __pfx_do_filp_open+0x10/0x10 [ 402.673057][T11364] ? alloc_fd+0x471/0x7d0 [ 402.673072][T11364] do_sys_openat2+0x11b/0x1d0 [ 402.673090][T11364] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.673112][T11364] __x64_sys_openat+0x174/0x210 [ 402.673131][T11364] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.673163][T11364] ? rcu_is_watching+0x12/0xc0 [ 402.673178][T11364] ? rcu_is_watching+0x12/0xc0 [ 402.673194][T11364] do_syscall_64+0xcd/0x230 [ 402.673216][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.673232][T11364] RIP: 0033:0x7f1e9db8e969 [ 402.673243][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.673258][T11364] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 402.673272][T11364] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 402.673281][T11364] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 402.673290][T11364] RBP: 00007f1e9dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 402.673299][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.673307][T11364] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 402.673321][T11364] [ 404.357435][T11382] FAULT_INJECTION: forcing a failure. [ 404.357435][T11382] name failslab, interval 1, probability 0, space 0, times 0 [ 404.562063][T11382] CPU: 0 UID: 0 PID: 11382 Comm: syz.0.1285 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 404.562089][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.562099][T11382] Call Trace: [ 404.562104][T11382] [ 404.562110][T11382] dump_stack_lvl+0x16c/0x1f0 [ 404.562134][T11382] should_fail_ex+0x512/0x640 [ 404.562156][T11382] ? handler_new_ref+0x1b0/0xc60 [ 404.562177][T11382] should_failslab+0xc2/0x120 [ 404.562195][T11382] __kmalloc_noprof+0xd2/0x510 [ 404.562210][T11382] ? __asan_memcpy+0x3c/0x60 [ 404.562224][T11382] handler_new_ref+0x1b0/0xc60 [ 404.562245][T11382] v4l2_ctrl_new+0x1963/0x2180 [ 404.562266][T11382] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 404.562288][T11382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.562311][T11382] v4l2_ctrl_new_std+0x1be/0x290 [ 404.562333][T11382] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 404.562353][T11382] ? rcu_is_watching+0x12/0xc0 [ 404.562367][T11382] ? trace_kmalloc+0x2b/0xd0 [ 404.562385][T11382] ? __kvmalloc_node_noprof+0x296/0x600 [ 404.562399][T11382] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 404.562420][T11382] ? media_request_object_init+0x100/0x180 [ 404.562437][T11382] vicodec_open+0x1d0/0xf90 [ 404.562456][T11382] v4l2_open+0x225/0x490 [ 404.562472][T11382] ? __pfx_v4l2_open+0x10/0x10 [ 404.562489][T11382] chrdev_open+0x231/0x6a0 [ 404.562503][T11382] ? __pfx_apparmor_file_open+0x10/0x10 [ 404.562521][T11382] ? __pfx_chrdev_open+0x10/0x10 [ 404.562536][T11382] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 404.562559][T11382] do_dentry_open+0x741/0x1c10 [ 404.562573][T11382] ? __pfx_chrdev_open+0x10/0x10 [ 404.562589][T11382] vfs_open+0x82/0x3f0 [ 404.562607][T11382] path_openat+0x1e5e/0x2d40 [ 404.562623][T11382] ? __pfx_path_openat+0x10/0x10 [ 404.562638][T11382] do_filp_open+0x20b/0x470 [ 404.562651][T11382] ? __pfx_do_filp_open+0x10/0x10 [ 404.562669][T11382] ? alloc_fd+0x471/0x7d0 [ 404.562683][T11382] do_sys_openat2+0x11b/0x1d0 [ 404.562701][T11382] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.562722][T11382] __x64_sys_openat+0x174/0x210 [ 404.562740][T11382] ? __pfx___x64_sys_openat+0x10/0x10 [ 404.562759][T11382] ? rcu_is_watching+0x12/0xc0 [ 404.562771][T11382] ? rcu_is_watching+0x12/0xc0 [ 404.562785][T11382] do_syscall_64+0xcd/0x230 [ 404.562806][T11382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.562819][T11382] RIP: 0033:0x7f6439f8e969 [ 404.562831][T11382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.562845][T11382] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.562859][T11382] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 404.562868][T11382] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 404.562876][T11382] RBP: 00007f643a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 404.562885][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.562893][T11382] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 404.562905][T11382] [ 405.193209][T11385] FAULT_INJECTION: forcing a failure. [ 405.193209][T11385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.222423][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.2.1286 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 405.222445][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.222454][T11385] Call Trace: [ 405.222458][T11385] [ 405.222464][T11385] dump_stack_lvl+0x16c/0x1f0 [ 405.222488][T11385] should_fail_ex+0x512/0x640 [ 405.222509][T11385] should_fail_alloc_page+0xe7/0x130 [ 405.222528][T11385] prepare_alloc_pages+0x3c2/0x610 [ 405.222549][T11385] ? unwind_next_frame+0x3f4/0x20a0 [ 405.222566][T11385] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 405.222583][T11385] ? rcu_is_watching+0x12/0xc0 [ 405.222597][T11385] ? unwind_next_frame+0x3f4/0x20a0 [ 405.222611][T11385] ? rcu_is_watching+0x12/0xc0 [ 405.222624][T11385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.222640][T11385] ? is_bpf_text_address+0x8a/0x1a0 [ 405.222657][T11385] ? rcu_is_watching+0x12/0xc0 [ 405.222669][T11385] ? lock_release+0x201/0x2f0 [ 405.222686][T11385] ? bpf_ksym_find+0x124/0x1c0 [ 405.222707][T11385] ? is_bpf_text_address+0x94/0x1a0 [ 405.222723][T11385] ? kernel_text_address+0x8d/0x100 [ 405.222736][T11385] ? __kernel_text_address+0xd/0x40 [ 405.222748][T11385] ? unwind_get_return_address+0x59/0xa0 [ 405.222763][T11385] ? arch_stack_walk+0xa6/0x100 [ 405.222778][T11385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.222797][T11385] ? policy_nodemask+0xea/0x4e0 [ 405.222815][T11385] alloc_pages_mpol+0x1fb/0x550 [ 405.222831][T11385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 405.222848][T11385] ? stack_depot_save_flags+0x28/0xa50 [ 405.222869][T11385] alloc_pages_noprof+0x131/0x390 [ 405.222886][T11385] __pmd_alloc+0x3f/0x870 [ 405.222907][T11385] __handle_mm_fault+0x948/0x2a40 [ 405.222922][T11385] ? __pfx___handle_mm_fault+0x10/0x10 [ 405.222945][T11385] ? find_vma+0xbf/0x140 [ 405.222963][T11385] ? __pfx_find_vma+0x10/0x10 [ 405.222982][T11385] handle_mm_fault+0x3fe/0xad0 [ 405.222996][T11385] do_user_addr_fault+0x7a6/0x1370 [ 405.223011][T11385] ? rcu_is_watching+0x12/0xc0 [ 405.223024][T11385] exc_page_fault+0x5c/0xc0 [ 405.223042][T11385] asm_exc_page_fault+0x26/0x30 [ 405.223056][T11385] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 405.223073][T11385] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 405.223086][T11385] RSP: 0018:ffffc9000bdcfe10 EFLAGS: 00050212 [ 405.223098][T11385] RAX: 0000000003f13e43 RBX: 0000000000000010 RCX: 0000000000000010 [ 405.223107][T11385] RDX: fffff520017b9fd1 RSI: ffffc9000bdcfe78 RDI: 0000000000000005 [ 405.223115][T11385] RBP: 0000000000000005 R08: 0000000000000000 R09: fffff520017b9fd0 [ 405.223124][T11385] R10: ffffc9000bdcfe87 R11: 0000000000000001 R12: ffffc9000bdcfe78 [ 405.223132][T11385] R13: 0000000000000015 R14: 00007ffffffff000 R15: 0000000000000000 [ 405.223144][T11385] _copy_to_user+0xbb/0xd0 [ 405.223166][T11385] blkdev_ioctl+0x5bb/0x6d0 [ 405.223182][T11385] ? __pfx_blkdev_ioctl+0x10/0x10 [ 405.223199][T11385] ? __pfx_blkdev_ioctl+0x10/0x10 [ 405.223215][T11385] __x64_sys_ioctl+0x193/0x200 [ 405.223235][T11385] do_syscall_64+0xcd/0x230 [ 405.223255][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.223268][T11385] RIP: 0033:0x7f1e9db8e969 [ 405.223278][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.223291][T11385] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.223303][T11385] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 405.223312][T11385] RDX: 0000000000000005 RSI: 0000000000000301 RDI: 0000000000000003 [ 405.223320][T11385] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 405.223328][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.223336][T11385] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 405.223348][T11385] [ 405.751275][T11388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'. [ 407.047990][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1292'. [ 407.703785][T11411] Device name cannot be null; rc = [-22] [ 408.040816][T11421] FAULT_INJECTION: forcing a failure. [ 408.040816][T11421] name failslab, interval 1, probability 0, space 0, times 0 [ 408.146092][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.4.1296 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 408.146116][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.146125][T11421] Call Trace: [ 408.146130][T11421] [ 408.146136][T11421] dump_stack_lvl+0x16c/0x1f0 [ 408.146159][T11421] should_fail_ex+0x512/0x640 [ 408.146181][T11421] should_failslab+0xc2/0x120 [ 408.146199][T11421] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 408.146214][T11421] ? dup_fd+0x6ac/0xb90 [ 408.146226][T11421] ? copy_fs_struct+0x49/0x340 [ 408.146244][T11421] copy_fs_struct+0x49/0x340 [ 408.146261][T11421] copy_process+0x34c8/0x91a0 [ 408.146278][T11421] ? schedule+0x2d7/0x3a0 [ 408.146294][T11421] ? rcu_is_watching+0x12/0xc0 [ 408.146307][T11421] ? lock_release+0x201/0x2f0 [ 408.146329][T11421] ? __pfx_copy_process+0x10/0x10 [ 408.146345][T11421] ? __pfx___futex_wait+0x10/0x10 [ 408.146365][T11421] ? __pfx_futex_wake_mark+0x10/0x10 [ 408.146384][T11421] ? import_iovec+0x86/0xb0 [ 408.146397][T11421] kernel_clone+0xfc/0x960 [ 408.146414][T11421] ? __pfx_kernel_clone+0x10/0x10 [ 408.146436][T11421] __do_sys_clone+0xce/0x120 [ 408.146452][T11421] ? __pfx___do_sys_clone+0x10/0x10 [ 408.146473][T11421] ? rcu_is_watching+0x12/0xc0 [ 408.146485][T11421] ? rcu_is_watching+0x12/0xc0 [ 408.146499][T11421] do_syscall_64+0xcd/0x230 [ 408.146520][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.146533][T11421] RIP: 0033:0x7f9958d8e969 [ 408.146544][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.146558][T11421] RSP: 002b:00007f9956bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 408.146572][T11421] RAX: ffffffffffffffda RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 408.146582][T11421] RDX: 0000000000000000 RSI: 0000000000001100 RDI: 0000000000000000 [ 408.146591][T11421] RBP: 00007f9958e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 408.146600][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.146608][T11421] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 408.146622][T11421] [ 410.684743][ T8320] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2053 with max blocks 2 with error 117 [ 410.768695][ T8320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 410.768695][ T8320] [ 412.231420][T11465] vhci_hcd: invalid port number 16 [ 412.764505][T11493] netlink: 'syz.4.1313': attribute type 3 has an invalid length. [ 413.608566][T11518] random: crng reseeded on system resumption [ 413.841294][T11518] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 413.978030][T11518] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 414.106766][T11528] Device name cannot be null; rc = [-22] [ 414.208068][T11518] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 414.732533][T11518] PM: hibernation: Basic memory bitmaps created [ 414.946217][T11518] PM: hibernation: Basic memory bitmaps freed [ 416.298002][T11570] Device name cannot be null; rc = [-22] [ 416.345682][T11572] vivid-003: ================= START STATUS ================= [ 416.487868][T11572] vivid-003: Radio HW Seek Mode: Bounded [ 416.601968][T11572] vivid-003: Radio Programmable HW Seek: false [ 416.689405][T11572] vivid-003: RDS Rx I/O Mode: Block I/O [ 416.694982][T11572] vivid-003: Generate RBDS Instead of RDS: false [ 416.854211][T11572] vivid-003: RDS Reception: true [ 416.895770][T11572] vivid-003: RDS Program Type: 0 inactive [ 416.970311][T11572] vivid-003: RDS PS Name: inactive [ 417.061056][T11572] vivid-003: RDS Radio Text: inactive [ 417.133909][T11572] vivid-003: RDS Traffic Announcement: false inactive [ 417.231086][T11572] vivid-003: RDS Traffic Program: false inactive [ 417.297613][T11572] vivid-003: RDS Music: false inactive [ 417.389120][T11572] vivid-003: ================== END STATUS ================== [ 419.066496][T11613] FAULT_INJECTION: forcing a failure. [ 419.066496][T11613] name fail_futex, interval 1, probability 0, space 0, times 1 [ 419.170140][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.4.1343 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 419.170163][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.170171][T11613] Call Trace: [ 419.170176][T11613] [ 419.170181][T11613] dump_stack_lvl+0x16c/0x1f0 [ 419.170205][T11613] should_fail_ex+0x512/0x640 [ 419.170227][T11613] get_futex_key+0x1c2/0x1000 [ 419.170240][T11613] ? __pfx_udp_recvmsg+0x10/0x10 [ 419.170258][T11613] ? __pfx_get_futex_key+0x10/0x10 [ 419.170272][T11613] ? __mutex_trylock_common+0xe9/0x250 [ 419.170291][T11613] ? __pfx___mutex_trylock_common+0x10/0x10 [ 419.170310][T11613] futex_wake+0xe7/0x4e0 [ 419.170326][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170339][T11613] ? __pfx_futex_wake+0x10/0x10 [ 419.170355][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170367][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170380][T11613] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 419.170401][T11613] do_futex+0x1e3/0x350 [ 419.170415][T11613] ? __pfx_do_futex+0x10/0x10 [ 419.170429][T11613] ? lock_release+0x201/0x2f0 [ 419.170448][T11613] mm_release+0x24e/0x300 [ 419.170463][T11613] do_exit+0x898/0x2c30 [ 419.170483][T11613] ? __pfx_do_exit+0x10/0x10 [ 419.170501][T11613] ? do_raw_spin_lock+0x12c/0x2b0 [ 419.170521][T11613] ? get_signal+0x8f5/0x26d0 [ 419.170540][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170552][T11613] do_group_exit+0xd3/0x2a0 [ 419.170571][T11613] get_signal+0x2673/0x26d0 [ 419.170587][T11613] ? __pfx_do_recvmmsg+0x10/0x10 [ 419.170603][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170616][T11613] ? __pfx_get_signal+0x10/0x10 [ 419.170633][T11613] arch_do_signal_or_restart+0x8f/0x7a0 [ 419.170652][T11613] ? __fget_files+0x20e/0x3c0 [ 419.170664][T11613] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 419.170685][T11613] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 419.170701][T11613] ? rcu_is_watching+0x12/0xc0 [ 419.170714][T11613] syscall_exit_to_user_mode+0x150/0x2a0 [ 419.170735][T11613] do_syscall_64+0xda/0x230 [ 419.170756][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.170769][T11613] RIP: 0033:0x7f9958d8e969 [ 419.170780][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.170794][T11613] RSP: 002b:00007f9956bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.170807][T11613] RAX: fffffffffffffe00 RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 419.170817][T11613] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.170825][T11613] RBP: 00007f9956bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.170833][T11613] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 419.170841][T11613] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 419.170854][T11613] [ 419.449357][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.866981][T11637] netlink: 'syz.4.1347': attribute type 11 has an invalid length. [ 419.874851][T11637] netlink: 'syz.4.1347': attribute type 11 has an invalid length. [ 419.906666][T11637] netlink: 'syz.4.1347': attribute type 11 has an invalid length. [ 420.465824][T11645] vivid-003: ================= START STATUS ================= [ 420.509567][T11645] vivid-003: Radio HW Seek Mode: Bounded [ 420.529916][T11645] vivid-003: Radio Programmable HW Seek: false [ 420.592929][T11645] vivid-003: RDS Rx I/O Mode: Block I/O [ 420.744826][T11645] vivid-003: Generate RBDS Instead of RDS: false [ 420.751204][T11645] vivid-003: RDS Reception: true [ 420.929108][T11645] vivid-003: RDS Program Type: 0 inactive [ 421.039383][T11645] vivid-003: RDS PS Name: inactive [ 421.077206][T11645] vivid-003: RDS Radio Text: inactive [ 421.139778][T11645] vivid-003: RDS Traffic Announcement: false inactive [ 421.236373][T11645] vivid-003: RDS Traffic Program: false inactive [ 421.352086][T11645] vivid-003: RDS Music: false inactive [ 421.392132][T11645] vivid-003: ================== END STATUS ================== [ 421.728644][T11660] netlink: 'syz.0.1351': attribute type 3 has an invalid length. [ 425.200305][T11710] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2060 with max blocks 2 with error 117 [ 425.300493][T11710] EXT4-fs (sda1): This should not happen!! Data will be lost [ 425.300493][T11710] [ 425.794863][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 425.851886][T11719] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2063 with max blocks 2 with error 117 [ 425.972091][T11719] EXT4-fs (sda1): This should not happen!! Data will be lost [ 425.972091][T11719] [ 426.906323][T11728] zswap: compressor not available [ 427.334249][T11748] netlink: 'syz.0.1373': attribute type 3 has an invalid length. [ 427.831906][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 428.935861][T11781] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.0.1381: Error -117 reading block bitmap for 4 [ 429.088103][T11781] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.1381: bg 1: bad block bitmap checksum [ 429.149901][T11781] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6548: Filesystem failed CRC [ 431.019090][ T8355] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3423 with max blocks 24 with error 117 [ 431.082697][ T8355] EXT4-fs (sda1): This should not happen!! Data will be lost [ 431.082697][ T8355] [ 432.761819][T11830] FAULT_INJECTION: forcing a failure. [ 432.761819][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 432.839201][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.2.1392 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 432.839224][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.839233][T11830] Call Trace: [ 432.839237][T11830] [ 432.839242][T11830] dump_stack_lvl+0x16c/0x1f0 [ 432.839266][T11830] should_fail_ex+0x512/0x640 [ 432.839288][T11830] should_failslab+0xc2/0x120 [ 432.839305][T11830] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 432.839321][T11830] ? __pmd_alloc+0xc3/0x870 [ 432.839342][T11830] __pmd_alloc+0xc3/0x870 [ 432.839362][T11830] __handle_mm_fault+0x948/0x2a40 [ 432.839378][T11830] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.839396][T11830] ? find_vma+0xbf/0x140 [ 432.839414][T11830] ? __pfx_find_vma+0x10/0x10 [ 432.839433][T11830] handle_mm_fault+0x3fe/0xad0 [ 432.839447][T11830] do_user_addr_fault+0x7a6/0x1370 [ 432.839461][T11830] ? rcu_is_watching+0x12/0xc0 [ 432.839475][T11830] exc_page_fault+0x5c/0xc0 [ 432.839494][T11830] asm_exc_page_fault+0x26/0x30 [ 432.839507][T11830] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 432.839524][T11830] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 432.839538][T11830] RSP: 0018:ffffc9000c28f988 EFLAGS: 00050206 [ 432.839550][T11830] RAX: 000000000000002d RBX: 0000000000000003 RCX: 0000000000000003 [ 432.839558][T11830] RDX: ffffed100bcfa001 RSI: ffff88805e7d0000 RDI: 0000000000000000 [ 432.839567][T11830] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100bcfa000 [ 432.839575][T11830] R10: ffff88805e7d0002 R11: 0000000000000001 R12: 0000000000000000 [ 432.839584][T11830] R13: ffffc9000c28fd38 R14: 0000000000000003 R15: ffff88805e7d0000 [ 432.839597][T11830] _copy_to_iter+0x391/0x15a0 [ 432.839611][T11830] ? __pfx_kexec_limit_handler+0x10/0x10 [ 432.839630][T11830] ? rcu_is_watching+0x12/0xc0 [ 432.839642][T11830] ? __pfx__copy_to_iter+0x10/0x10 [ 432.839655][T11830] ? lock_release+0x201/0x2f0 [ 432.839672][T11830] ? proc_sys_call_handler+0x2a6/0x5c0 [ 432.839689][T11830] proc_sys_call_handler+0x42c/0x5c0 [ 432.839704][T11830] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 432.839720][T11830] ? kstrtouint+0xdd/0x130 [ 432.839736][T11830] ? __pfx_kstrtouint+0x10/0x10 [ 432.839751][T11830] do_iter_readv_writev+0x735/0x950 [ 432.839773][T11830] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 432.839796][T11830] ? bpf_lsm_file_permission+0x9/0x10 [ 432.839808][T11830] ? security_file_permission+0x71/0x210 [ 432.839827][T11830] ? rw_verify_area+0xcf/0x680 [ 432.839848][T11830] vfs_readv+0x4c5/0x8a0 [ 432.839858][T11830] ? __pfx___mutex_trylock_common+0x10/0x10 [ 432.839878][T11830] ? __pfx___might_resched+0x10/0x10 [ 432.839894][T11830] ? __pfx_vfs_readv+0x10/0x10 [ 432.839914][T11830] ? __mutex_lock+0x1ca/0xb90 [ 432.839934][T11830] ? rcu_is_watching+0x12/0xc0 [ 432.839947][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 432.839970][T11830] ? __fget_files+0x20e/0x3c0 [ 432.839981][T11830] ? __fget_files+0x140/0x3c0 [ 432.839999][T11830] ? do_readv+0x132/0x330 [ 432.840009][T11830] do_readv+0x132/0x330 [ 432.840020][T11830] ? __pfx_do_readv+0x10/0x10 [ 432.840030][T11830] ? rcu_is_watching+0x12/0xc0 [ 432.840042][T11830] ? rcu_is_watching+0x12/0xc0 [ 432.840055][T11830] do_syscall_64+0xcd/0x230 [ 432.840075][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.840088][T11830] RIP: 0033:0x7f1e9db8e969 [ 432.840098][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.840111][T11830] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 432.840123][T11830] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 432.840131][T11830] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 432.840140][T11830] RBP: 00007f1e9ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 432.840148][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.840155][T11830] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 432.840167][T11830] [ 434.075692][T11842] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 435.354702][T11845] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 435.509374][T11890] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 435.516316][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 435.522053][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 436.097521][T11913] ceph: Failed to parse sending metrics switch value 'P^' [ 436.190408][ T53] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 912 with max blocks 33 with error 117 [ 436.306426][ T53] EXT4-fs (sda1): This should not happen!! Data will be lost [ 436.306426][ T53] [ 436.356448][T11920] FAULT_INJECTION: forcing a failure. [ 436.356448][T11920] name failslab, interval 1, probability 0, space 0, times 0 [ 436.372140][T11913] Invalid ELF header magic: != ELF [ 436.416741][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.0.1406 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 436.416780][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.416796][T11920] Call Trace: [ 436.416804][T11920] [ 436.416813][T11920] dump_stack_lvl+0x16c/0x1f0 [ 436.416851][T11920] should_fail_ex+0x512/0x640 [ 436.416889][T11920] should_failslab+0xc2/0x120 [ 436.416920][T11920] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 436.416962][T11920] ? __pfx___might_resched+0x10/0x10 [ 436.416993][T11920] ? __anon_vma_prepare+0xae/0x5e0 [ 436.417024][T11920] __anon_vma_prepare+0xae/0x5e0 [ 436.417050][T11920] ? __pfx___pte_alloc+0x10/0x10 [ 436.417084][T11920] __vmf_anon_prepare+0x11c/0x240 [ 436.417121][T11920] do_pte_missing+0x1194/0x3fb0 [ 436.417148][T11920] ? _raw_spin_unlock+0x28/0x50 [ 436.417178][T11920] ? __pmd_alloc+0x3c2/0x870 [ 436.417214][T11920] __handle_mm_fault+0x103d/0x2a40 [ 436.417245][T11920] ? __pfx___handle_mm_fault+0x10/0x10 [ 436.417280][T11920] ? find_vma+0xbf/0x140 [ 436.417311][T11920] ? __pfx_find_vma+0x10/0x10 [ 436.417348][T11920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.417387][T11920] handle_mm_fault+0x3fe/0xad0 [ 436.417416][T11920] __get_user_pages+0x771/0x36f0 [ 436.417456][T11920] ? __pfx_mt_find+0x10/0x10 [ 436.417479][T11920] ? __pfx___get_user_pages+0x10/0x10 [ 436.417517][T11920] ? __pfx___might_resched+0x10/0x10 [ 436.417548][T11920] populate_vma_page_range+0x278/0x3a0 [ 436.417575][T11920] ? __pfx_populate_vma_page_range+0x10/0x10 [ 436.417599][T11920] ? __pfx_find_vma_intersection+0x10/0x10 [ 436.417636][T11920] ? do_mmap+0x69c/0x11b0 [ 436.417672][T11920] __mm_populate+0x1d8/0x380 [ 436.417696][T11920] ? __pfx___mm_populate+0x10/0x10 [ 436.417718][T11920] ? up_write+0x1b2/0x520 [ 436.417750][T11920] vm_mmap_pgoff+0x362/0x450 [ 436.417784][T11920] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 436.417819][T11920] ? __x64_sys_futex+0x1e0/0x4c0 [ 436.417843][T11920] ? __x64_sys_futex+0x1e9/0x4c0 [ 436.417870][T11920] ksys_mmap_pgoff+0x7d/0x5c0 [ 436.417903][T11920] ? rcu_is_watching+0x12/0xc0 [ 436.417925][T11920] __x64_sys_mmap+0x125/0x190 [ 436.417960][T11920] do_syscall_64+0xcd/0x230 [ 436.417996][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.418021][T11920] RIP: 0033:0x7f6439f8e969 [ 436.418039][T11920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.418061][T11920] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 436.418083][T11920] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 436.418100][T11920] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 436.418114][T11920] RBP: 00007f643a010ab1 R08: 0000000000000002 R09: 0000000000008000 [ 436.418128][T11920] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 436.418142][T11920] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 436.418166][T11920] [ 437.396730][T11938] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1410'. [ 437.438776][T11937] QAT: Device 0 not found [ 437.928051][T11961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 438.560669][T11976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 438.606000][T11975] FAULT_INJECTION: forcing a failure. [ 438.606000][T11975] name failslab, interval 1, probability 0, space 0, times 0 [ 438.752503][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.4.1422 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 438.752541][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.752555][T11975] Call Trace: [ 438.752563][T11975] [ 438.752580][T11975] dump_stack_lvl+0x16c/0x1f0 [ 438.752621][T11975] should_fail_ex+0x512/0x640 [ 438.752658][T11975] should_failslab+0xc2/0x120 [ 438.752687][T11975] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 438.752713][T11975] ? lockdep_init_map_type+0x5c/0x280 [ 438.752745][T11975] ? seq_open+0x55/0x170 [ 438.752775][T11975] seq_open+0x55/0x170 [ 438.752805][T11975] kernfs_fop_open+0x59f/0xda0 [ 438.752837][T11975] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 438.752876][T11975] do_dentry_open+0x741/0x1c10 [ 438.752901][T11975] ? __pfx_kernfs_fop_open+0x10/0x10 [ 438.752934][T11975] vfs_open+0x82/0x3f0 [ 438.752965][T11975] path_openat+0x1e5e/0x2d40 [ 438.752994][T11975] ? __pfx_path_openat+0x10/0x10 [ 438.753022][T11975] do_filp_open+0x20b/0x470 [ 438.753045][T11975] ? __pfx_do_filp_open+0x10/0x10 [ 438.753081][T11975] ? alloc_fd+0x471/0x7d0 [ 438.753104][T11975] do_sys_openat2+0x11b/0x1d0 [ 438.753131][T11975] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.753166][T11975] __x64_sys_openat+0x174/0x210 [ 438.753198][T11975] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.753229][T11975] ? rcu_is_watching+0x12/0xc0 [ 438.753251][T11975] ? rcu_is_watching+0x12/0xc0 [ 438.753276][T11975] do_syscall_64+0xcd/0x230 [ 438.753308][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.753333][T11975] RIP: 0033:0x7f9958d8e969 [ 438.753352][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.753378][T11975] RSP: 002b:00007f9956bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.753404][T11975] RAX: ffffffffffffffda RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 438.753421][T11975] RDX: 0000000000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 438.753438][T11975] RBP: 00007f9958e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 438.753454][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.753470][T11975] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 438.753495][T11975] [ 438.989432][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 439.206736][T11986] random: crng reseeded on system resumption [ 439.224903][T11986] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 439.295481][T11986] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 439.303639][T11986] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 439.440170][T11978] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 439.727213][T11986] PM: hibernation: Basic memory bitmaps created [ 439.798714][T11996] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 439.908497][T11986] PM: hibernation: Basic memory bitmaps freed [ 439.951682][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.958269][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.259345][T12015] FAULT_INJECTION: forcing a failure. [ 440.259345][T12015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.309119][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.1.1429 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 440.309142][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.309150][T12015] Call Trace: [ 440.309155][T12015] [ 440.309160][T12015] dump_stack_lvl+0x16c/0x1f0 [ 440.309184][T12015] should_fail_ex+0x512/0x640 [ 440.309206][T12015] should_fail_alloc_page+0xe7/0x130 [ 440.309225][T12015] prepare_alloc_pages+0x3c2/0x610 [ 440.309248][T12015] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 440.309265][T12015] ? stack_trace_save+0x8e/0xc0 [ 440.309279][T12015] ? __pfx_stack_trace_save+0x10/0x10 [ 440.309293][T12015] ? stack_depot_save_flags+0x28/0xa50 [ 440.309314][T12015] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 440.309330][T12015] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.309346][T12015] ? __kasan_slab_alloc+0x89/0x90 [ 440.309361][T12015] ? __pmd_alloc+0xc3/0x870 [ 440.309381][T12015] ? handle_mm_fault+0x3fe/0xad0 [ 440.309394][T12015] ? do_user_addr_fault+0x7a6/0x1370 [ 440.309407][T12015] ? exc_page_fault+0x5c/0xc0 [ 440.309424][T12015] ? asm_exc_page_fault+0x26/0x30 [ 440.309437][T12015] ? rep_movs_alternative+0x30/0x90 [ 440.309452][T12015] ? _copy_from_user+0x98/0xd0 [ 440.309473][T12015] ? vt_ioctl+0x1c39/0x2f50 [ 440.309497][T12015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.309516][T12015] ? policy_nodemask+0xea/0x4e0 [ 440.309533][T12015] alloc_pages_mpol+0x1fb/0x550 [ 440.309550][T12015] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 440.309567][T12015] ? cgroup_rstat_updated+0x2a/0xb20 [ 440.309590][T12015] alloc_pages_noprof+0x131/0x390 [ 440.309607][T12015] pte_alloc_one+0x19/0x380 [ 440.309622][T12015] do_pte_missing+0x1c0b/0x3fb0 [ 440.309635][T12015] ? do_raw_spin_unlock+0x172/0x230 [ 440.309656][T12015] ? __pmd_alloc+0x3c2/0x870 [ 440.309683][T12015] __handle_mm_fault+0x103d/0x2a40 [ 440.309699][T12015] ? __pfx___handle_mm_fault+0x10/0x10 [ 440.309717][T12015] ? find_vma+0xbf/0x140 [ 440.309735][T12015] ? __pfx_find_vma+0x10/0x10 [ 440.309754][T12015] handle_mm_fault+0x3fe/0xad0 [ 440.309768][T12015] do_user_addr_fault+0x7a6/0x1370 [ 440.309782][T12015] ? rcu_is_watching+0x12/0xc0 [ 440.309795][T12015] exc_page_fault+0x5c/0xc0 [ 440.309814][T12015] asm_exc_page_fault+0x26/0x30 [ 440.309826][T12015] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 440.309843][T12015] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 440.309856][T12015] RSP: 0018:ffffc9000c9e7b60 EFLAGS: 00050202 [ 440.309868][T12015] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 000000000000000c [ 440.309876][T12015] RDX: fffff5200193cf83 RSI: 0000000000000004 RDI: ffffc9000c9e7c10 [ 440.309885][T12015] RBP: 000000000000000c R08: 0000000000000001 R09: fffff5200193cf83 [ 440.309893][T12015] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 440.309901][T12015] R13: ffffc9000c9e7c10 R14: 1ffff9200193cf78 R15: ffff88805c1db000 [ 440.309914][T12015] _copy_from_user+0x98/0xd0 [ 440.309935][T12015] vt_ioctl+0x1c39/0x2f50 [ 440.309956][T12015] ? __pfx_vt_ioctl+0x10/0x10 [ 440.309976][T12015] ? tomoyo_path_number_perm+0x295/0x580 [ 440.309992][T12015] ? rcu_is_watching+0x12/0xc0 [ 440.310004][T12015] ? lock_release+0x201/0x2f0 [ 440.310022][T12015] ? tomoyo_path_number_perm+0x18d/0x580 [ 440.310039][T12015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.310055][T12015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.310074][T12015] ? do_vfs_ioctl+0x512/0x1990 [ 440.310093][T12015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.310111][T12015] ? tty_jobctrl_ioctl+0x152/0xe00 [ 440.310132][T12015] ? __pfx_vt_ioctl+0x10/0x10 [ 440.310152][T12015] tty_ioctl+0x65a/0x1610 [ 440.310168][T12015] ? __pfx_tty_ioctl+0x10/0x10 [ 440.310185][T12015] ? rcu_is_watching+0x12/0xc0 [ 440.310198][T12015] ? __fget_files+0x204/0x3c0 [ 440.310209][T12015] ? hook_file_ioctl_common+0x145/0x410 [ 440.310226][T12015] ? __fget_files+0x20e/0x3c0 [ 440.310239][T12015] ? __pfx_tty_ioctl+0x10/0x10 [ 440.310254][T12015] __x64_sys_ioctl+0x193/0x200 [ 440.310273][T12015] do_syscall_64+0xcd/0x230 [ 440.310293][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.310306][T12015] RIP: 0033:0x7fc1c2b8e969 [ 440.310316][T12015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.310329][T12015] RSP: 002b:00007fc1c3a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.310341][T12015] RAX: ffffffffffffffda RBX: 00007fc1c2db5fa0 RCX: 00007fc1c2b8e969 [ 440.310350][T12015] RDX: 0000000000000004 RSI: 000000000000560f RDI: 0000000000000003 [ 440.310358][T12015] RBP: 00007fc1c3a03090 R08: 0000000000000000 R09: 0000000000000000 [ 440.310366][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.310374][T12015] R13: 0000000000000000 R14: 00007fc1c2db5fa0 R15: 00007ffe0b2e56a8 [ 440.310386][T12015] [ 441.499904][ T8338] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 3499 with max blocks 62 with error 117 [ 441.565569][ T8338] EXT4-fs (sda1): This should not happen!! Data will be lost [ 441.565569][ T8338] [ 441.615867][ T8338] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:28: bg 5: bad block bitmap checksum [ 441.716776][ T8338] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2061 with max blocks 1 with error 74 [ 441.784111][ T8338] EXT4-fs (sda1): This should not happen!! Data will be lost [ 441.784111][ T8338] [ 442.181096][ T5834] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 443.509210][T12065] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2065 with max blocks 2 with error 117 [ 443.563220][T12065] EXT4-fs (sda1): This should not happen!! Data will be lost [ 443.563220][T12065] [ 443.856156][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'. [ 445.044912][T12096] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 2070 with max blocks 1 with error 117 [ 445.082493][T12096] EXT4-fs (sda1): This should not happen!! Data will be lost [ 445.082493][T12096] [ 446.931560][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1452'. [ 447.353250][T12131] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.2.1454: Error -117 reading block bitmap for 5 [ 448.650869][T12134] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 449.753889][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 450.993121][T12168] caif:caif_disconnect_client(): nothing to disconnect [ 452.177030][T12177] kexec: Could not allocate control_code_buffer [ 452.430394][T12198] FAULT_INJECTION: forcing a failure. [ 452.430394][T12198] name fail_futex, interval 1, probability 0, space 0, times 0 [ 452.648621][T12198] CPU: 1 UID: 0 PID: 12198 Comm: syz.1.1468 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 452.648660][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.648675][T12198] Call Trace: [ 452.648683][T12198] [ 452.648692][T12198] dump_stack_lvl+0x16c/0x1f0 [ 452.648730][T12198] should_fail_ex+0x512/0x640 [ 452.648764][T12198] get_futex_key+0x49e/0x1000 [ 452.648790][T12198] ? __pfx_get_futex_key+0x10/0x10 [ 452.648812][T12198] ? lock_release+0x201/0x2f0 [ 452.648845][T12198] ? simple_read_from_buffer+0x10d/0x170 [ 452.648882][T12198] futex_wake+0xe7/0x4e0 [ 452.648908][T12198] ? __pfx_oom_adj_read+0x10/0x10 [ 452.648938][T12198] ? __pfx_futex_wake+0x10/0x10 [ 452.648963][T12198] ? __pfx_oom_adj_read+0x10/0x10 [ 452.648994][T12198] ? ksys_read+0x190/0x240 [ 452.649014][T12198] ? rcu_is_watching+0x12/0xc0 [ 452.649038][T12198] ? lock_release+0x201/0x2f0 [ 452.649070][T12198] do_futex+0x1e3/0x350 [ 452.649097][T12198] ? __pfx_do_futex+0x10/0x10 [ 452.649128][T12198] __x64_sys_futex+0x1e0/0x4c0 [ 452.649156][T12198] ? fput+0x70/0xf0 [ 452.649183][T12198] ? __pfx___x64_sys_futex+0x10/0x10 [ 452.649210][T12198] ? ksys_read+0x1b9/0x240 [ 452.649233][T12198] ? __pfx_ksys_read+0x10/0x10 [ 452.649256][T12198] ? rcu_is_watching+0x12/0xc0 [ 452.649280][T12198] ? rcu_is_watching+0x12/0xc0 [ 452.649307][T12198] do_syscall_64+0xcd/0x230 [ 452.649341][T12198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.649367][T12198] RIP: 0033:0x7fc1c2b8e969 [ 452.649388][T12198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.649413][T12198] RSP: 002b:00007fc1c3a030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 452.649440][T12198] RAX: ffffffffffffffda RBX: 00007fc1c2db5fa8 RCX: 00007fc1c2b8e969 [ 452.649458][T12198] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc1c2db5fac [ 452.649474][T12198] RBP: 00007fc1c2db5fa0 R08: 00007fc1c3a04000 R09: 0000000000000000 [ 452.649490][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1c2db5fac [ 452.649507][T12198] R13: 0000000000000000 R14: 00007ffe0b2e55c0 R15: 00007ffe0b2e56a8 [ 452.649532][T12198] [ 456.154749][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'. [ 456.626866][T12247] bond0: option all_slaves_active: invalid value () [ 458.306433][T12294] FAULT_INJECTION: forcing a failure. [ 458.306433][T12294] name failslab, interval 1, probability 0, space 0, times 0 [ 458.355307][T12294] CPU: 1 UID: 0 PID: 12294 Comm: syz.0.1490 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 458.355344][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.355359][T12294] Call Trace: [ 458.355366][T12294] [ 458.355376][T12294] dump_stack_lvl+0x16c/0x1f0 [ 458.355412][T12294] should_fail_ex+0x512/0x640 [ 458.355447][T12294] should_failslab+0xc2/0x120 [ 458.355477][T12294] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 458.355505][T12294] ? do_epoll_ctl+0x22ea/0x3590 [ 458.355541][T12294] do_epoll_ctl+0x22ea/0x3590 [ 458.355580][T12294] ? __pfx_do_epoll_ctl+0x10/0x10 [ 458.355611][T12294] ? __might_fault+0xe3/0x190 [ 458.355637][T12294] ? __might_fault+0x13b/0x190 [ 458.355663][T12294] ? rcu_is_watching+0x12/0xc0 [ 458.355693][T12294] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 458.355723][T12294] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 458.355754][T12294] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 458.355786][T12294] ? rcu_is_watching+0x12/0xc0 [ 458.355809][T12294] ? rcu_is_watching+0x12/0xc0 [ 458.355834][T12294] do_syscall_64+0xcd/0x230 [ 458.355868][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.355894][T12294] RIP: 0033:0x7f6439f8e969 [ 458.355912][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.355936][T12294] RSP: 002b:00007f643aeb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 458.355960][T12294] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 458.355976][T12294] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 458.355991][T12294] RBP: 00007f643aeb5090 R08: 0000000000000000 R09: 0000000000000000 [ 458.356006][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.356021][T12294] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 458.356046][T12294] [ 458.543284][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.989116][T12306] random: crng reseeded on system resumption [ 459.047213][T12306] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 459.114678][T12306] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 459.122964][T12306] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 459.384462][T12306] PM: hibernation: Basic memory bitmaps created [ 459.391140][T12321] can: request_module (can-proto-4) failed. [ 459.458176][T12305] PM: hibernation: Basic memory bitmaps freed [ 459.710330][T12331] program syz.0.1497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.131610][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 460.686266][T12346] warning: `syz.0.1503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 460.719321][T12309] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 464.204209][T12394] Invalid ELF header magic: != ELF [ 464.640035][T12402] FAULT_INJECTION: forcing a failure. [ 464.640035][T12402] name failslab, interval 1, probability 0, space 0, times 0 [ 464.653735][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.2.1515 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 464.653774][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.653789][T12402] Call Trace: [ 464.653797][T12402] [ 464.653807][T12402] dump_stack_lvl+0x16c/0x1f0 [ 464.653845][T12402] should_fail_ex+0x512/0x640 [ 464.653882][T12402] ? handler_new_ref+0x1b0/0xc60 [ 464.653914][T12402] should_failslab+0xc2/0x120 [ 464.653943][T12402] __kmalloc_noprof+0xd2/0x510 [ 464.653969][T12402] ? __asan_memcpy+0x3c/0x60 [ 464.653995][T12402] handler_new_ref+0x1b0/0xc60 [ 464.654030][T12402] v4l2_ctrl_new+0x1963/0x2180 [ 464.654069][T12402] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 464.654106][T12402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.654140][T12402] v4l2_ctrl_new_std+0x1be/0x290 [ 464.654178][T12402] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 464.654213][T12402] ? rcu_is_watching+0x12/0xc0 [ 464.654236][T12402] ? trace_kmalloc+0x2b/0xd0 [ 464.654266][T12402] ? __kvmalloc_node_noprof+0x296/0x600 [ 464.654293][T12402] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 464.654328][T12402] ? media_request_object_init+0x100/0x180 [ 464.654359][T12402] vicodec_open+0x1d0/0xf90 [ 464.654391][T12402] v4l2_open+0x225/0x490 [ 464.654421][T12402] ? __pfx_v4l2_open+0x10/0x10 [ 464.654449][T12402] chrdev_open+0x231/0x6a0 [ 464.654475][T12402] ? __pfx_apparmor_file_open+0x10/0x10 [ 464.654507][T12402] ? __pfx_chrdev_open+0x10/0x10 [ 464.654537][T12402] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 464.654575][T12402] do_dentry_open+0x741/0x1c10 [ 464.654602][T12402] ? __pfx_chrdev_open+0x10/0x10 [ 464.654632][T12402] vfs_open+0x82/0x3f0 [ 464.654673][T12402] path_openat+0x1e5e/0x2d40 [ 464.654708][T12402] ? __pfx_path_openat+0x10/0x10 [ 464.654740][T12402] do_filp_open+0x20b/0x470 [ 464.654764][T12402] ? __pfx_do_filp_open+0x10/0x10 [ 464.654799][T12402] ? alloc_fd+0x471/0x7d0 [ 464.654825][T12402] do_sys_openat2+0x11b/0x1d0 [ 464.654856][T12402] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.654893][T12402] __x64_sys_openat+0x174/0x210 [ 464.654925][T12402] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.654958][T12402] ? rcu_is_watching+0x12/0xc0 [ 464.654982][T12402] ? rcu_is_watching+0x12/0xc0 [ 464.655008][T12402] do_syscall_64+0xcd/0x230 [ 464.655044][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.655070][T12402] RIP: 0033:0x7f1e9db8e969 [ 464.655090][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.655114][T12402] RSP: 002b:00007f1e9ea76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.655139][T12402] RAX: ffffffffffffffda RBX: 00007f1e9ddb5fa0 RCX: 00007f1e9db8e969 [ 464.655157][T12402] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 464.655174][T12402] RBP: 00007f1e9dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 464.655190][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.655206][T12402] R13: 0000000000000000 R14: 00007f1e9ddb5fa0 R15: 00007ffc2fe6e8c8 [ 464.655230][T12402] [ 468.125362][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1526'. [ 468.608672][T12449] FAULT_INJECTION: forcing a failure. [ 468.608672][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 468.707124][T12449] CPU: 1 UID: 0 PID: 12449 Comm: syz.4.1530 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 468.707165][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.707182][T12449] Call Trace: [ 468.707192][T12449] [ 468.707203][T12449] dump_stack_lvl+0x16c/0x1f0 [ 468.707244][T12449] should_fail_ex+0x512/0x640 [ 468.707283][T12449] ? handler_new_ref+0x1b0/0xc60 [ 468.707317][T12449] should_failslab+0xc2/0x120 [ 468.707349][T12449] __kmalloc_noprof+0xd2/0x510 [ 468.707375][T12449] ? __asan_memcpy+0x3c/0x60 [ 468.707400][T12449] handler_new_ref+0x1b0/0xc60 [ 468.707437][T12449] v4l2_ctrl_new+0x1963/0x2180 [ 468.707477][T12449] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 468.707515][T12449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.707550][T12449] v4l2_ctrl_new_std+0x1be/0x290 [ 468.707588][T12449] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 468.707624][T12449] ? rcu_is_watching+0x12/0xc0 [ 468.707659][T12449] ? trace_kmalloc+0x2b/0xd0 [ 468.707692][T12449] ? __kvmalloc_node_noprof+0x296/0x600 [ 468.707720][T12449] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 468.707755][T12449] ? media_request_object_init+0x100/0x180 [ 468.707788][T12449] vicodec_open+0x1d0/0xf90 [ 468.707821][T12449] v4l2_open+0x225/0x490 [ 468.707850][T12449] ? __pfx_v4l2_open+0x10/0x10 [ 468.707879][T12449] chrdev_open+0x231/0x6a0 [ 468.707906][T12449] ? __pfx_apparmor_file_open+0x10/0x10 [ 468.707939][T12449] ? __pfx_chrdev_open+0x10/0x10 [ 468.707969][T12449] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 468.708012][T12449] do_dentry_open+0x741/0x1c10 [ 468.708039][T12449] ? __pfx_chrdev_open+0x10/0x10 [ 468.708069][T12449] vfs_open+0x82/0x3f0 [ 468.708100][T12449] path_openat+0x1e5e/0x2d40 [ 468.708131][T12449] ? __pfx_path_openat+0x10/0x10 [ 468.708159][T12449] do_filp_open+0x20b/0x470 [ 468.708184][T12449] ? __pfx_do_filp_open+0x10/0x10 [ 468.708220][T12449] ? alloc_fd+0x471/0x7d0 [ 468.708247][T12449] do_sys_openat2+0x11b/0x1d0 [ 468.708278][T12449] ? __pfx_do_sys_openat2+0x10/0x10 [ 468.708316][T12449] __x64_sys_openat+0x174/0x210 [ 468.708349][T12449] ? __pfx___x64_sys_openat+0x10/0x10 [ 468.708381][T12449] ? rcu_is_watching+0x12/0xc0 [ 468.708406][T12449] ? rcu_is_watching+0x12/0xc0 [ 468.708431][T12449] do_syscall_64+0xcd/0x230 [ 468.708469][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.708495][T12449] RIP: 0033:0x7f9958d8e969 [ 468.708516][T12449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.708543][T12449] RSP: 002b:00007f9956bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.708568][T12449] RAX: ffffffffffffffda RBX: 00007f9958fb5fa0 RCX: 00007f9958d8e969 [ 468.708587][T12449] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 468.708604][T12449] RBP: 00007f9958e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 468.708621][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.708648][T12449] R13: 0000000000000000 R14: 00007f9958fb5fa0 R15: 00007ffef8963868 [ 468.708674][T12449] [ 469.011584][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.123780][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 469.493272][T12456] FAULT_INJECTION: forcing a failure. [ 469.493272][T12456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.601365][T12456] CPU: 0 UID: 0 PID: 12456 Comm: syz.4.1531 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 469.601401][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.601416][T12456] Call Trace: [ 469.601426][T12456] [ 469.601436][T12456] dump_stack_lvl+0x16c/0x1f0 [ 469.601474][T12456] should_fail_ex+0x512/0x640 [ 469.601509][T12456] _copy_from_user+0x2e/0xd0 [ 469.601544][T12456] csum_and_copy_from_iter_full+0x6f4/0x1e20 [ 469.601594][T12456] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 469.601630][T12456] ? sock_alloc_send_pskb+0x757/0x990 [ 469.601656][T12456] ? folio_add_file_rmap_ptes+0x548/0x840 [ 469.601687][T12456] ip_generic_getfrag+0x170/0x270 [ 469.601716][T12456] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 469.601743][T12456] ? finish_fault+0x75c/0x1120 [ 469.601777][T12456] __ip6_append_data+0x2e78/0x4710 [ 469.601812][T12456] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 469.601840][T12456] ? rcu_is_watching+0x12/0xc0 [ 469.601864][T12456] ? rcu_is_watching+0x12/0xc0 [ 469.601888][T12456] ? __pfx___ip6_append_data+0x10/0x10 [ 469.601917][T12456] ? ip6_setup_cork+0xd01/0x15d0 [ 469.601946][T12456] ip6_append_data+0x1bd/0x4c0 [ 469.601975][T12456] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 469.602005][T12456] udpv6_sendmsg+0x1d88/0x3070 [ 469.602027][T12456] ? rcu_is_watching+0x12/0xc0 [ 469.602050][T12456] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 469.602082][T12456] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 469.602104][T12456] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 469.602153][T12456] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.602179][T12456] ? lock_release+0x201/0x2f0 [ 469.602208][T12456] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 469.602232][T12456] ? inet6_sendmsg+0x105/0x140 [ 469.602254][T12456] inet6_sendmsg+0x105/0x140 [ 469.602278][T12456] ____sys_sendmsg+0x705/0xc70 [ 469.602312][T12456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.602346][T12456] ? __pfx__kstrtoull+0x10/0x10 [ 469.602373][T12456] ? aa_file_perm+0x4c7/0xfb0 [ 469.602405][T12456] ___sys_sendmsg+0x134/0x1d0 [ 469.602432][T12456] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.602464][T12456] ? rcu_is_watching+0x12/0xc0 [ 469.602498][T12456] __sys_sendmmsg+0x200/0x420 [ 469.602525][T12456] ? __pfx___sys_sendmmsg+0x10/0x10 [ 469.602551][T12456] ? lock_release+0x201/0x2f0 [ 469.602590][T12456] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.602631][T12456] ? fput+0x70/0xf0 [ 469.602658][T12456] ? ksys_write+0x1b9/0x240 [ 469.602681][T12456] ? __pfx_ksys_write+0x10/0x10 [ 469.602707][T12456] __x64_sys_sendmmsg+0x9c/0x100 [ 469.602732][T12456] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 469.602762][T12456] do_syscall_64+0xcd/0x230 [ 469.602795][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.602820][T12456] RIP: 0033:0x7f9958d8e969 [ 469.602840][T12456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.602864][T12456] RSP: 002b:00007f9956bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 469.602888][T12456] RAX: ffffffffffffffda RBX: 00007f9958fb6080 RCX: 00007f9958d8e969 [ 469.602905][T12456] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 469.602920][T12456] RBP: 00007f9956bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 469.602935][T12456] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 469.602951][T12456] R13: 0000000000000000 R14: 00007f9958fb6080 R15: 00007ffef8963868 [ 469.602975][T12456] [ 470.014806][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1534'. [ 471.560669][T12497] FAULT_INJECTION: forcing a failure. [ 471.560669][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 471.641028][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.0.1544 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 471.641070][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.641087][T12497] Call Trace: [ 471.641096][T12497] [ 471.641106][T12497] dump_stack_lvl+0x16c/0x1f0 [ 471.641148][T12497] should_fail_ex+0x512/0x640 [ 471.641187][T12497] should_failslab+0xc2/0x120 [ 471.641219][T12497] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 471.641248][T12497] ? dup_fd+0x6ac/0xb90 [ 471.641271][T12497] ? copy_fs_struct+0x49/0x340 [ 471.641306][T12497] copy_fs_struct+0x49/0x340 [ 471.641327][T12497] copy_process+0x34c8/0x91a0 [ 471.641345][T12497] ? schedule+0x2d7/0x3a0 [ 471.641361][T12497] ? rcu_is_watching+0x12/0xc0 [ 471.641374][T12497] ? lock_release+0x201/0x2f0 [ 471.641396][T12497] ? __pfx_copy_process+0x10/0x10 [ 471.641412][T12497] ? __pfx___futex_wait+0x10/0x10 [ 471.641432][T12497] ? __pfx_futex_wake_mark+0x10/0x10 [ 471.641451][T12497] ? import_iovec+0x86/0xb0 [ 471.641466][T12497] kernel_clone+0xfc/0x960 [ 471.641483][T12497] ? __pfx_kernel_clone+0x10/0x10 [ 471.641505][T12497] __do_sys_clone+0xce/0x120 [ 471.641531][T12497] ? __pfx___do_sys_clone+0x10/0x10 [ 471.641554][T12497] ? rcu_is_watching+0x12/0xc0 [ 471.641567][T12497] ? rcu_is_watching+0x12/0xc0 [ 471.641582][T12497] do_syscall_64+0xcd/0x230 [ 471.641604][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.641618][T12497] RIP: 0033:0x7f6439f8e969 [ 471.641630][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.641644][T12497] RSP: 002b:00007f643aeb4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 471.641659][T12497] RAX: ffffffffffffffda RBX: 00007f643a1b5fa0 RCX: 00007f6439f8e969 [ 471.641669][T12497] RDX: 0000000000000000 RSI: 0000000000020010 RDI: 0000000000000000 [ 471.641678][T12497] RBP: 00007f643a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 471.641686][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.641695][T12497] R13: 0000000000000000 R14: 00007f643a1b5fa0 R15: 00007ffdae360618 [ 471.641708][T12497] [ 473.717902][T12539] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 473.726281][T12539] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 473.734102][T12539] #PF: supervisor instruction fetch in kernel mode [ 473.740617][T12539] #PF: error_code(0x0011) - permissions violation [ 473.747045][T12539] PGD 800000007566d067 P4D 800000007566d067 PUD 3883c067 PMD 414008e7 [ 473.755348][T12539] Oops: Oops: 0011 [#1] SMP KASAN PTI [ 473.760740][T12539] CPU: 1 UID: 0 PID: 12539 Comm: syz.4.1553 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 473.772829][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.782904][T12539] RIP: 0010:0x0 [ 473.786394][T12539] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 473.793772][T12539] RSP: 0018:ffffc9000411f9c8 EFLAGS: 00010283 [ 473.799866][T12539] RAX: 00000000000009ad RBX: 0000000000000000 RCX: ffffc90018b64000 [ 473.807859][T12539] RDX: 0000000000080000 RSI: ffffea0002130600 RDI: ffff88802d382a80 [ 473.815860][T12539] RBP: ffffea0002130600 R08: 0000000000000007 R09: 0000000000000000 [ 473.823855][T12539] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000823f3a [ 473.831848][T12539] R13: ffff88802d382a80 R14: 0000000000000000 R15: dffffc0000000000 [ 473.839841][T12539] FS: 00007f9956bd56c0(0000) GS:ffff888124aea000(0000) knlGS:0000000000000000 [ 473.848795][T12539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.855402][T12539] CR2: ffffffffffffffd6 CR3: 0000000078fd8000 CR4: 00000000003526f0 [ 473.863400][T12539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.871387][T12539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.879402][T12539] Call Trace: [ 473.882703][T12539] [ 473.885649][T12539] filemap_read_folio+0xc5/0x2a0 [ 473.890620][T12539] ? __pfx_filemap_read_folio+0x10/0x10 [ 473.896202][T12539] ? __filemap_get_folio+0x333/0xc10 [ 473.901523][T12539] ? down_read+0x13d/0x480 [ 473.905969][T12539] do_read_cache_folio+0x263/0x5c0 [ 473.911140][T12539] freader_get_folio+0x337/0x8e0 [ 473.916112][T12539] ? lock_release+0x201/0x2f0 [ 473.920825][T12539] freader_fetch+0xc2/0x5e0 [ 473.925360][T12539] ? mt_find+0x3ef/0xa30 [ 473.929623][T12539] __build_id_parse.isra.0+0xec/0x7a0 [ 473.935029][T12539] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 473.941065][T12539] ? __pfx_find_vma+0x10/0x10 [ 473.945782][T12539] do_procmap_query+0xd96/0x1090 [ 473.950757][T12539] ? do_vfs_ioctl+0x512/0x1990 [ 473.955555][T12539] ? __pfx_do_procmap_query+0x10/0x10 [ 473.960975][T12539] ? __fget_files+0x20e/0x3c0 [ 473.965679][T12539] procfs_procmap_ioctl+0x7d/0xb0 [ 473.970734][T12539] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 473.976487][T12539] __x64_sys_ioctl+0x193/0x200 [ 473.981278][T12539] do_syscall_64+0xcd/0x230 [ 473.985816][T12539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.991731][T12539] RIP: 0033:0x7f9958d8e969 [ 473.996164][T12539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.015793][T12539] RSP: 002b:00007f9956bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.024230][T12539] RAX: ffffffffffffffda RBX: 00007f9958fb6080 RCX: 00007f9958d8e969 [ 474.032215][T12539] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000006 [ 474.040204][T12539] RBP: 00007f9958e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 474.048189][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.056174][T12539] R13: 0000000000000000 R14: 00007f9958fb6080 R15: 00007ffef8963868 [ 474.064168][T12539] [ 474.067198][T12539] Modules linked in: [ 474.071108][T12539] CR2: 0000000000000000 [ 474.075281][T12539] ---[ end trace 0000000000000000 ]--- [ 474.080744][T12539] RIP: 0010:0x0 [ 474.084222][T12539] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 474.091595][T12539] RSP: 0018:ffffc9000411f9c8 EFLAGS: 00010283 [ 474.097677][T12539] RAX: 00000000000009ad RBX: 0000000000000000 RCX: ffffc90018b64000 [ 474.105666][T12539] RDX: 0000000000080000 RSI: ffffea0002130600 RDI: ffff88802d382a80 [ 474.113653][T12539] RBP: ffffea0002130600 R08: 0000000000000007 R09: 0000000000000000 [ 474.121637][T12539] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000823f3a [ 474.129625][T12539] R13: ffff88802d382a80 R14: 0000000000000000 R15: dffffc0000000000 [ 474.137617][T12539] FS: 00007f9956bd56c0(0000) GS:ffff888124aea000(0000) knlGS:0000000000000000 [ 474.146563][T12539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.153163][T12539] CR2: ffffffffffffffd6 CR3: 0000000078fd8000 CR4: 00000000003526f0 [ 474.161156][T12539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.169144][T12539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.177135][T12539] Kernel panic - not syncing: Fatal exception [ 474.183433][T12539] Kernel Offset: disabled [ 474.187749][T12539] Rebooting in 86400 seconds..