last executing test programs: 12.166007128s ago: executing program 3 (id=3961): madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x421, 0x10, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x84, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r2 = socket(0x1e, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r5, 0x4, 0x0, 0x0, 0x38b) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, 0x0, 0x800) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, r2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) rename$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') 10.683608318s ago: executing program 3 (id=3964): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0xc00, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x10bc02, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x2, 0x2, 0x1) r3 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r2, 0x10000, 0xffffffffffffffff}, 0x10) mmap$auto(0x80000000000, 0x9, 0xe994, 0x8000000008011, r3, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x600000, 0xb7) rseq$auto(&(0x7f0000000040)={0x20006, 0x200000, 0x1, 0x7, 0x88, 0x80000001, "9d50e5feffd99a7484ffee9cc32e00"/28}, 0x1, 0xa, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0xa, 0x7) mmap$auto(0x8, 0x7, 0x5, 0x40df, r0, 0x5) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200dc0, 0x0) io_setup$auto(0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r4, r0, 0x3) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) 10.03211309s ago: executing program 3 (id=3968): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = io_uring_setup$auto(0x1, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', 0x0) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8002) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r4, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r7, &(0x7f0000000040)="65a90950732f", 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="780ebdfc", @ANYRES16=r6, @ANYBLOB="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"], 0x578}}, 0x0) mmap$auto(0x0, 0x20006, 0x3, 0x12, r5, 0x8000) 9.465416019s ago: executing program 3 (id=3970): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) socket(0x3, 0x3, 0x0) (async, rerun: 64) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r2 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) madvise$auto(0x400, 0x200007, 0x8) (async, rerun: 64) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) (async) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0xb0f, 0x7f, 0x100000000000df, 0x11, r0, 0x3) (async, rerun: 64) setsockopt$auto(0xffffffffffffffff, 0x40000002, 0x101e, 0x0, 0xd) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 9.229345228s ago: executing program 3 (id=3972): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setsockopt$auto_SO_OOBINLINE(r1, 0x3, 0xa, &(0x7f0000000140)='&\x00', 0x1d6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x2, 0x3, 0xe1c, 0x3, 0x3, 0xb5, 0x80000001, 0x40000007, 0x6d3f, 0x400000000000009, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/deo1\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) socket(0x25, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mlockall$auto(0x5) rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x40c0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r3, 0x0, 0x1ff) mmap$auto(0xfffffffffffffffc, 0x6, 0x100, 0x17, 0x2, 0x7fff) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/net/tun\x00', 0x4128) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 7.57328582s ago: executing program 3 (id=3978): ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x7, 0xffffffffffffffff, 0x9, 0x7, 0x400, 0x5}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, "68557d85682c29d5c5f6d3baaeb9abb62d2f11bd3d15b6b0d1d29093a4379a255ece5d6faacdf6a86fe309de815f8fb45d780fa8c66089a43d4ee46211998a586e576b1a0ab7d884683807fe94cabf3d6986"}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) close_range$auto(0x0, 0x5, 0x0) (async, rerun: 32) pipe$auto(0x0) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r2, 0x4140aecd, 0x0) 5.640398297s ago: executing program 0 (id=3983): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r1, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x204080, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000040)="65a9095073", 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) (fail_nth: 9) 4.92290961s ago: executing program 1 (id=3984): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d02, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d02, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x80, 0x104, 0x6, 0x20000000003}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0xec902, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) (async) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x294, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_IE_ASSOC_RESP={0x25c, 0x80, "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"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x294}}, 0x5040) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r0, 0xffffffff, &(0x7f0000000040)='\x00', &(0x7f0000000100)="3d70aa42ea72d62d7d2fe39f29603dff8f97c1b1b50e7e992be3959f9d7ee99631dcfa2436c0c16d6b7ce4ee4ec8cf2014a1b7042667e1556a1e592d73cb9181caa36be823fa68b77e63ca01d8a165e47bc429172f0e53852fb397d6dcaa0527abb4ca74db06a015a927aef31bc4804bb0595644acb2b83cbe1a201edd1befdc2cd21c360f43fbfbde7672c5485582b3b5e1f57505c660d153201f663f086f8d37a45d457285063c7ab32e0a0ccec8488beacb7556197bb94b0d63ae87ff5c7af050968766e3ba3ff8b53b44c0add5e509588a9269cf36fb81", 0x2) (async) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r0, 0xffffffff, &(0x7f0000000040)='\x00', &(0x7f0000000100)="3d70aa42ea72d62d7d2fe39f29603dff8f97c1b1b50e7e992be3959f9d7ee99631dcfa2436c0c16d6b7ce4ee4ec8cf2014a1b7042667e1556a1e592d73cb9181caa36be823fa68b77e63ca01d8a165e47bc429172f0e53852fb397d6dcaa0527abb4ca74db06a015a927aef31bc4804bb0595644acb2b83cbe1a201edd1befdc2cd21c360f43fbfbde7672c5485582b3b5e1f57505c660d153201f663f086f8d37a45d457285063c7ab32e0a0ccec8488beacb7556197bb94b0d63ae87ff5c7af050968766e3ba3ff8b53b44c0add5e509588a9269cf36fb81", 0x2) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card0\x00', 0x400, 0x0) (async) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card0\x00', 0x400, 0x0) ioctl$auto(r5, 0x9000643a, 0xc35) (async) ioctl$auto(r5, 0x9000643a, 0xc35) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyc7/dev\x00', 0x4000, 0x0) read$auto_urandom_fops_random(0xffffffffffffffff, &(0x7f0000000240)=""/98, 0x62) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) 4.765973243s ago: executing program 0 (id=3985): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000003c0)) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) mmap$auto(0x5, 0x8, 0x6, 0x393f, 0xb, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) msgctl$auto_IPC_INFO(0x44, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 4.629200233s ago: executing program 2 (id=3987): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptya5/dev\x00', 0x118000, 0x0) 4.517846277s ago: executing program 2 (id=3988): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x22, 0x2, 0x4) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r4 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) bpf$auto(0x4, &(0x7f0000000080)=@bpf_attr_5={@target_ifindex, r3, 0x40, 0x4, r4, @relative_fd=r2, 0xffffffffffffff7f}, 0x80000001) ioctl$auto_TUNGETIFF2(r5, 0x800454d2, &(0x7f0000000000)=0x8000) recvfrom$auto(r2, 0x0, 0x801000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) setfsuid$auto(0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) read$auto(r6, 0x0, 0xfff) write$auto(0x3, 0x0, 0x100082) 4.280103669s ago: executing program 1 (id=3989): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = io_uring_setup$auto(0x1, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', 0x0) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8002) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r4, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r7, &(0x7f0000000040)="65a90950732f", 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="780ebdfc", @ANYRES16=r6, @ANYBLOB="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"], 0x578}}, 0x0) mmap$auto(0x0, 0x20006, 0x3, 0x12, r5, 0x8000) 3.557154097s ago: executing program 0 (id=3990): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x7cc9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0xe) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x204080, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 3.545730447s ago: executing program 1 (id=3991): mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x10, 0x2, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x100, 0x0) socket(0xa, 0x80803, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/subpagesize\x00', 0x80000, 0x0) socket(0x2b, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2b, 0x5, 0x10d) connect$auto(r0, 0x0, 0x4) getsockopt$auto(r0, 0x11c, 0x2, 0x0, 0x0) 3.349743403s ago: executing program 2 (id=3992): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64$auto(r0, &(0x7f00000003c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x9, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/path\x00', 0xc8800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001280)=""/4124, 0x101c) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x2, 0x0) socket(0x2, 0x5, 0x0) r3 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf250100000014000100fe80000000000000000000000000001f05f4e9fb8200a6007eb1b32bd63f1eee6f2029ac15d0a8efc012ba11d4ce9e268471d870f9bdea2464fbef2a0b"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(r3, 0x8, 0x0) open(0x0, 0x2e200, 0x155) socket(0x2, 0x1, 0x100) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x280000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0xa, 0xffb, 0x8000040008011, r1, 0x3) readv$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000004c0)="b2e7fd0fb016920600000000000000fad285c43a73649dcf73418ddb5a14cea78970b09f1b1e78702e2b937df0e12c2fea1071a295dd9868dd7baa99fa9f6b340bc772ba32f482", 0xa}, 0xa5) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000280)="4ef1a372521d3263363c48e3f7d6fc47cb7de4f406559108750b7cb8772cd42ee0a6b0175dff754510d730b6d80119dc16c4f561d1e3f9e32354541728c4e08f222c9251ae466a2a603e704f0cfb7de0d6e0558904d388f864c4191dd10df73c416d9e0f5c26877cfa49f16223d9d3034d97bec892186c7917e6210db4d2e0a5730b639c5af2f4a3899e8a6a226966199b344e813e22582e2726cd1f223b5a42b0c9d08f63aad75a404a7178e89439801b1fecd09038d44996569d00"/200, 0x12, 0x0, 0x7, 0x0, 0x6, 0xb}, 0x80000c}, 0x5, 0x8) 3.205258261s ago: executing program 1 (id=3993): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r1, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x204080, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000040)="65a9095073", 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) (fail_nth: 10) 1.997932601s ago: executing program 1 (id=3994): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x12, 0x8, 0xfffffffffffffff8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x884) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000280), r4) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x2400a000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7}) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x20006, 0x3, 0x12, r3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x0, 0x19) clock_gettime$auto(0x3, 0x0) unshare$auto(0x40000080) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x14, 0x2, 0xe64) 1.916744471s ago: executing program 2 (id=3995): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_index\x00', 0x200001, 0x0) shutdown$auto(r0, 0xfffffffe) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20bc0, 0x0) r2 = pipe$auto(&(0x7f0000000080)=r0) sendmmsg$auto(r1, &(0x7f0000001240)={{&(0x7f00000000c0)="773a2f7eba2be670e570fbf335134952479ce79f686d070d602fdf48238993ea42ae89e34d9537e7a66b7908ca140eab91d818b2922616309c2e6b963422d21ca1df85db96e1022499", 0x5, &(0x7f0000001140)={&(0x7f0000000140)="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", 0xff}, 0xd, &(0x7f0000001180)="62f37bfc11f8f60d6ce482cce412257de03c232c5d8c378f7138a69a013baafd815389d8cc2d4f2192cb06cdacc2266c6b3affa0c228869ce10415b8f63011f15a6912cca4b25886ebfff31cd47e67ca3a4acfb9d78022f936440e5502e85d1223fde8f3fd7cd960bfe4ae603a2420eec5f24051958a1fd012f65cafccacb60512fe2a0c9fbb9a07623b8396fd98eb2f3349c8dd8f9fba11b4aee5ddb04bdd49fcfd4b5590b818", 0x100, 0x3ff}, 0x7f3f86e3}, 0x2, 0x3) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000012c0), r3) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xcc, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\x91$-'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '&\'.:'}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5}, @NFC_ATTR_VENDOR_DATA={0x90, 0x1f, "8628ac0b68b504bb01e781ccd30fc857b2e98e9fac19d0ed928fd42bb6912378662884375d5e17f502278470b05df493303efbd4a8d372b5b7c70a76b7e9be567b2cbd7680d26987c5a6dc69ce190b72dd84995d1df92aa82ca4e2fb893f543f31d402f9506d16ae0f9306935dab23c615ccb8e4b6576b0cff50cd46837fdcf60fa27b979e75cb12687c428d"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x7f}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000091}, 0xc040) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000014c0)={0x9, &(0x7f0000001480)={0x1, 0xe, 0x8, @raw=0x401}}) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f00000015c0)={@sival_ptr=&(0x7f0000001500)="83fdea30d6339815fd90f53b859cb1639d37a026ed5592c5fe378432a1d0edda59c92fe61ed08cd0d6dd05f565a81118908d28173c269add327098652655a4c35ee1c7db7b10677c8a280b18125170904136f2e115b7f4819bd92ff49826e182d8b9f506f10a0f21c6e28767506c944ba9b1e97eb0c43076d9670868f47a53e0f3fd899532712b6605c31885b7153693", @raw=0x80000001, 0xff}, &(0x7f0000001600)=0x8) r5 = memfd_secret$auto(0x8) getdents64$auto(r5, &(0x7f0000001640)={0x3, 0xe0, 0x7f, 0x9, "2efd64b9f457591e53e105dd748e0b21880aa24b6deffb0b26759a7926f3bf0ec0ccd776bd52b2be308f96fefe5b94c5be673a"}, 0x48) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r5, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xf8, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, "2355677f670fee9e53d1a35aa17efa05a938f9b0cea45ccb7ac6d48e606900ddd1a69be956edc5fdfb2fdc21c332a50decdf0c4cbf0d4270d424ad0a2fe321aa0aac0bf7a293b6962fa71f7eda485e034e9d56bf4b041e998c6de07c642a5ae8ad277353eb7674767a4b45748e8e27e4dd570e25324a861fcf1545d76e5ca270f95b7f8044d434b9abb979f3516fb190ddecf5270a7cc63ead1b708edeb3b92f03018d348e0e1edf51c47985ac3b0f76beed052d42d48ea06401b1ede8869981f28802f66980e2ac4690eb8d7aa536a30457dd17dcc5aa1237f15f62b8806511407fa0a5"}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c040}, 0x40000) write$auto_uinput_fops_uinput(r2, &(0x7f00000018c0)="feae176ed608cdc21c171b5863c8aaaf5526095f003d92217656578b4a9ad61169bb98794c29", 0x26) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001900)) sendmsg$auto_NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/devices/platform/vhci_hcd.2/usb14/power/runtime_suspended_time\x00', 0xc0200, 0x0) r7 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000001ac0), 0x88000, 0x0) mq_notify$auto(r7, &(0x7f0000001b40)={@sival_ptr=&(0x7f0000001b00)="6793f8a694d6f488573304bda7b1ce1d15d9fc78e64d6b0fb1970f86176e3accf06d5b09212848b548fe2111587a", @inferred=r3, 0x7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001bc0), r2) r10 = waitid$auto_P_ALL(0x0, 0xf, &(0x7f0000001c00)={@_si_pad}, 0x2, &(0x7f0000001c80)={{0xfff, 0x2}, {0x6, 0x8}, 0xd, 0x5, 0x1, 0x7f, 0x21b7, 0x171, 0x0, 0x8194, 0x3, 0x8, 0x5367, 0x8000000000000000, 0x6, 0x4}) sendmsg$auto_TIPC_NL_BEARER_SET(r8, &(0x7f0000004380)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004340)={&(0x7f0000001d40)={0x25dc, r9, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x142c, 0x9, 0x0, 0x1, [@generic="9c40c35c6760f32449bf5b911f2142a0ed144e75a2f1fec4e2308d4cd5cfb17d0fbfe1bd465ef0cfda705392b08e43ee95e116e4f1c346dcede19b602d06080ad32399482d8dafe40bc2be91a95e09d67c93fefaec40f38ab6a40c9fb9508e5c1ca81e98b741d21243f2bbc701b20d", @typed={0x8, 0x61, 0x0, 0x0, @pid=r10}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@private0}, @generic="b0baafc775f2b8fbc418668193859589678783c133eed923be1cf23192ebcf8f764c5112c7c693998bdc719a6aed43f884bbfa9008f904fdf3c4f6b0b75ff92cf8496b1fd15a621a4adb43351a40382c7746168a8d38491e650213e3f2dac1b4a1dcf82514d443f88e26ccf38804be68d5c86335a1adebf5cbe3cd9e68247a34fd913df29ba158d8da8b93bc480bb712fc4999f3e4f9fdc1a86832683d56e18742a963a1dc66fbce78835646711a4700b0007e15e90de7e64ed45a35f642c9313d9ebfd6d2cd9d250a131670499f21b10e3cbe5bf2676277c42ca856cdb62c455814f05d46", @nested={0x11f3, 0xca, 0x0, 0x1, [@nested={0x4, 0x10f}, @typed={0xf2, 0x27, 0x0, 0x0, @binary="dc98bd2e8173646a5d8182f5574ccf47f592b0b57e914df28fe7c2decb0aa2236e34b386c012fa12852dee7f821f189d299e147b9f748258c23d8fea4da4b9506a984f2b803dd423654cf7235594593c906890b5f3396b1de4232e8fadce6945da6dbdc595f434b490f3b1bc7efa00ccc7ff8427d5a91c6aba886a1aa35a990f402283494c23d1ebd7718bbec3628a4122fd5e60e98138946a38db09b1ff3d3d23a988059d7bf9f78e84e674793f847c75e5cf22c2d02b91c388f81b67daca63eb412fccc75252139735a10f7704eb4b30fe6b4afdb2f0630c835e2174bb7a59cd7d2c644939efce2d5eabf97469"}, @generic="beaf30fe96c0b20340af3ec9227d5af54ae3d0e33ef369b4b4b8add0bb7f5a3cda4ef80ddb179f988b80d2ce2600d670257f364c8ba5531e7ad5197e235b5721072e9bb8fba02d407db69267349215efaa50871cd76bbdcbc51dfa001ccc00f8167de3c6c45489ddd3104321b283218c7a0ca0edb169b8b8f635512a78c846e183b2e765477cc24132cb4c12938e931db2b21bb7d4a8cb639f5e552a183a27803d101a82a2366bb8b70cceaa127d6078aac5c46dafab700781f815c8ca5bf2a76aa08edde968469b165637a9904928c7b0e99c1e1ac74661f0303dff04982c2598aa20f17bbbb0d60c0842dde6d15744248946acab183a", @generic="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"]}, @nested={0xc4, 0x34, 0x0, 0x1, [@typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@private0}, @generic="82f7e6236bf8aff96be45554b33c757eb7cbd45a77d077fc3f61203059b09052fee14244ba6d3ffd5ad80b3229130f0a50f9440aa77d03f0e049e230f186f612b0c637acfe9e1a9462d23ee595b937f502729648cea17c76899a1c73b81ac30425f71154301bfa5a5d631dc0594b9c34945796e791528ea548293d044a1069fa69ac673da40e5ba6037784d47c9516ec51e4e92b713b302822eb4cd9662b990aee29055b6c2d2333", @nested={0x4, 0x45}]}]}, @TIPC_NLA_NET={0x119c, 0x7, 0x0, 0x1, [@typed={0x14, 0x123, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1182, 0x12, 0x0, 0x1, [@nested={0x4, 0x55}, @generic="f46da84452bdc73cf45f929bfaa9c8c595ce2448baa6e0039db4175512d7795eb98eb857d3fca1a5d403904daa79871ef01538fc3e0f9cb145b99fa45667594fe007f302b19a775cf75d263f4cb758e49aacc06d9abe73f4faa71719607362b03d0e87a6d23ac3c920fc564ef9c085233dec1749d1a68590b06b4ff9b73582", @generic="a5d69d841fabceae686e70c44cce174a6639f2e2", @generic="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", @typed={0xc1, 0x105, 0x0, 0x0, @binary="fcf57c7d9670a2369116737d187b94f0c3ecf814992349c63f0d6388efcc771efb52bd9abb4fe7caab25cb9fe91571d39a8810d3769e9b29cb7ea0e11ebc96268e093597183bae7e7249ff36ba98bc69f80f5b685c47cb1b3cf0c012bc223c57a5477ced907ed58da2a507a82425c1341de21e818c9cf0e155267fd2a78a53a69f4f47c7ef81b0995f90f90385e90868b4681215b35236c5e07f894b4e17724a27dcf429d89ecdb4bbee40a13ff01e21e53b44ce0e96249579c723c6a3"}, @generic="44d4e9280c8a6c9c72df12a2e576ec46d397edf611dbfe8e17e4a1bf1707e7", @nested={0x4, 0x2d}]}]}]}, 0x25dc}, 0x1, 0x0, 0x0, 0x4040084}, 0x20008000) read$auto(r2, &(0x7f00000043c0)='/sys/kernel/debug/ubifs/chk_index\x00', 0xffffffffe45372e5) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004440), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004480)={'wg0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000004580)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004540)={&(0x7f00000044c0)={0x48, r11, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) ioctl$auto_BLKPBSZGET(r5, 0x127b, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000045c0)='/dev/input/event0\x00', 0x100, 0x0) mknod$auto(&(0x7f0000004600)='./file0\x00', 0xff, 0xa) 1.897828475s ago: executing program 0 (id=3996): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000480)={0x0, 0xfffffe86}, 0x1, 0x0, 0x0, 0x4004810}, 0x40d1) mmap$auto(0x0, 0x20089, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = socket(0x15, 0xa, 0x9) getsockopt$auto(r4, 0x84, 0x82, 0x0, &(0x7f0000000280)=0x1000c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mq_open$auto(&(0x7f0000000200)='\\*)A\x00', 0x83, 0x9, 0x0) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000440)={&(0x7f0000000100)=0x7, 0x8, &(0x7f0000000300)="91ce540422af60370ff036d7198e9c425ea7b9ab035c3abb799d9c6ba9efa39ef8ef36e9ae72c73b87983410a9dc9330b9e0191fa13ccbac0ae0586ff71cf2d1f0264dd12b41b82a3ec6512be2b51d3966644346469e75cb0434acbca9554ec51eeef9d8e8ea9703be7ef8b563d9fd6b6df35f2d690b6dff6dd70ff5f4795ed196875841a1e1e1becd8000ccf0582a014f58950edfcde5b884e6a4461140eef3be389c1bd8125e436e29666d17b0d90fc97d02ae473157273ede0b480c2886466e941bfbf4c78481635a9c73f45bdfea1807cc7e639f08f7d3afb2cbec78a507202aada94fd8c2cff9f5b456f3ef39c5d1e905", &(0x7f0000000400)}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) 1.681313369s ago: executing program 2 (id=3997): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x104) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000140)=0xa46) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) (async) mlockall$auto(0x7) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) (async) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8}) (async, rerun: 64) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48010) (async) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) r4 = syz_clone3(&(0x7f0000000300)={0x18ca22300, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_LOOP_CTL_GET_FREE(r3, 0x4c82, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000000500)={0xb8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x0, 0x9, 0x4, 0x0, 0x7, 0x4, 0x8}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0x6, 0x8000000000101, 0x9, 0x1, 0x6, 0xf, 0xfffffffffffffff9}}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x6}, @OVS_VPORT_ATTR_UPCALL_STATS={0x4, 0xa, 0x0, 0x1, [@generic]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_NETNSID={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) 1.521741087s ago: executing program 0 (id=3998): mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TIOCGWINSZ2(r0, 0x5413, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0xfffffffffffffffe, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) landlock_create_ruleset$auto(&(0x7f00000001c0)={0x1, 0x80000000, 0x1}, 0x7fff, 0x9) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r5, 0x40104593, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r6, 0x0, 0xc3) 534.1246ms ago: executing program 2 (id=3999): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0x8, 0x80003, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xc00000000000000) mmap$auto(0x2, 0x402008, 0x9000000000000100, 0x16, r1, 0xd) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b3010000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7b004600f9c6f9d86700900f1b702f7867517997c96af9b4888d285045605f52e9a0c3c7fc40cc832b75129c8752f31a88d298958e7658c6856be74cf5289afe63749b02108d2594aa66a1e604172665e5d92d91332e5658c9a475952f14b6c80ef916f2cb2ba39d8b4bc254dd241da66a3e9cbf8c25651f4926c300100003800c001780080001800ef9f18c12000100898771f1c19f17790485908286dd000004000280"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/queue/scheduler\x00', 0x189002, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) 138.366941ms ago: executing program 1 (id=4000): readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = io_uring_setup$auto(0x1, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', 0x0) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8002) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r4, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/dev_snmp6/wlan0\x00', 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r7, &(0x7f0000000040)="65a90950732f", 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="780ebdfc", @ANYRES16=r6, @ANYBLOB="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"], 0x578}}, 0x0) mmap$auto(0x0, 0x20006, 0x3, 0x12, r5, 0x8000) 0s ago: executing program 0 (id=4001): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x7ff, 0x10000, 0x13, 0x3) mbind$auto(0x0, 0x40, 0x4, 0x0, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x8, 0x3) mmap$auto(0x8000002, 0x20009, 0x8000000400000003, 0xeb1, 0x401, 0x8001) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = epoll_create$auto(0x7) r2 = socketpair$auto(0x2001e, 0x14, 0x8000000000000000, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/ppp/ppp/power/runtime_status\x00', 0x20040, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x622063, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) socket(0x18, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c800", @ANYRES64=r1, @ANYBLOB="020029bd7000ffdbdf25860000006e00ba088a196e799870147306e5445590070667e385aadb6df0267c49063038211dccb616d55912decc80ef7c62d2733d24c92f9febc49866039df128cafc8fa696275ed3b5c6ee011082b49a65b510f0aa140df5e768bd36e5671c4527dd22bd481e3295eca31a668a21bf218000003d00bd00b72bcea7b45660d5aece677b8795054f900a134b5f1c8130711ee2a2e8c07d221841ffb40c2d3feb"], 0xc8}, 0x1, 0x0, 0x0, 0x808}, 0x20040940) r4 = geteuid() fstat$auto(r0, &(0x7f0000000040)={0x6, 0xc, 0x200, 0x3, 0xee01, 0x0, 0x0, 0x3, 0x8, 0xfffffefffffffff6, 0x5, 0xb, 0xfffffffffffffffc, 0x80000001, 0x9, 0x8, 0xfffffffffffffffe}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, r4, r5, 0x42) msgctl$auto_IPC_RMID(0xffffff4b, 0x0, &(0x7f00000001c0)={{0x7f28, 0xee01, 0x0, 0xb024, 0x9, 0x6, 0x16d}, &(0x7f0000000440)=0x5f, &(0x7f0000000180)=0x80, 0xbffffffffffffff7, 0x30ba, 0x2, 0x4, 0x4, 0x10, 0x2, 0x8, @raw=0x4, @raw=0x114}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) kernel console output (not intermixed with test programs): ][T22323] irqentry_exit_to_user_mode+0x13f/0x280 [ 1059.704120][T22323] asm_exc_page_fault+0x26/0x30 [ 1059.704142][T22323] RIP: 0033:0x32bf [ 1059.704158][T22323] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 [ 1059.704180][T22323] RSP: 002b:000000000000000a EFLAGS: 00010a92 [ 1059.704196][T22323] RAX: 0000000000000033 RBX: 00007fe814fb5fa0 RCX: 00007fe814d8e969 [ 1059.704213][T22323] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1059.704226][T22323] RBP: 00007fe814e10ab1 R08: 0000000000000002 R09: 0000000000000000 [ 1059.704240][T22323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.704253][T22323] R13: 0000000000000000 R14: 00007fe814fb5fa0 R15: 00007fffa5e91ce8 [ 1059.704282][T22323] [ 1060.302422][T22323] memory: usage 307200kB, limit 307200kB, failcnt 40293 [ 1060.309422][T22323] memory+swap: usage 432052kB, limit 9007199254740988kB, failcnt 0 [ 1060.317380][T22323] kmem: usage 4404kB, limit 9007199254740988kB, failcnt 0 [ 1060.324553][T22323] Memory cgroup stats for /syz1: [ 1060.324724][T22323] cache 309780480 [ 1060.333354][T22323] rss 188416 [ 1060.336589][T22323] rss_huge 0 [ 1060.339836][T22323] shmem 309780480 [ 1060.343487][T22323] mapped_file 65146880 [ 1060.347578][T22323] dirty 0 [ 1060.351146][T22323] writeback 0 [ 1060.354453][T22323] workingset_refault_anon 11146 [ 1060.359469][T22323] workingset_refault_file 5861 [ 1060.364249][T22323] swap 127848448 [ 1060.367809][T22323] swapcached 61440 [ 1060.371593][T22323] pgpgin 1170443 [ 1060.375156][T22323] pgpgout 1109614 [ 1060.378807][T22323] pgfault 836225 [ 1060.382397][T22323] pgmajfault 1441 [ 1060.386058][T22323] inactive_anon 133378048 [ 1060.390617][T22323] active_anon 176652288 [ 1060.394788][T22323] inactive_file 0 [ 1060.398444][T22323] active_file 0 [ 1060.401959][T22323] unevictable 0 [ 1060.405433][T22323] hierarchical_memory_limit 314572800 [ 1060.411016][T22323] hierarchical_memsw_limit 9223372036854771712 [ 1060.417190][T22323] total_cache 309780480 [ 1060.421386][T22323] total_rss 188416 [ 1060.425128][T22323] total_rss_huge 0 [ 1060.428899][T22323] total_shmem 309780480 [ 1060.433073][T22323] total_mapped_file 65146880 [ 1060.437701][T22323] total_dirty 0 [ 1060.441207][T22323] total_writeback 0 [ 1060.445034][T22323] total_workingset_refault_anon 11146 [ 1060.450468][T22323] total_workingset_refault_file 5861 [ 1060.456451][T22323] total_swap 127848448 [ 1060.460591][T22323] total_swapcached 61440 [ 1060.464853][T22323] total_pgpgin 1170443 [ 1060.469033][T22323] total_pgpgout 1109614 [ 1060.473205][T22323] total_pgfault 836225 [ 1060.477294][T22323] total_pgmajfault 1441 [ 1060.481507][T22323] total_inactive_anon 133378048 [ 1060.486387][T22323] total_active_anon 176652288 [ 1060.491153][T22323] total_inactive_file 0 [ 1060.495325][T22323] total_active_file 0 [ 1060.499351][T22323] total_unevictable 0 [ 1060.503353][T22323] anon_cost 0 [ 1060.506669][T22323] file_cost 0 [ 1060.510064][T22323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3290,pid=22340,uid=0 [ 1060.525066][T22323] Memory cgroup out of memory: Killed process 22340 (syz.1.3290) total-vm:164300kB, anon-rss:1072kB, file-rss:21668kB, shmem-rss:63424kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 1061.732121][T22639] __nla_validate_parse: 23 callbacks suppressed [ 1061.732143][T22639] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1062.585287][ T32] oom_reaper: reaped process 22340 (syz.1.3290), now anon-rss:80kB, file-rss:20540kB, shmem-rss:63424kB [ 1063.188471][T22673] random: crng reseeded on system resumption [ 1063.697770][T22674] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1063.729863][T22674] CPU: 0 UID: 0 PID: 22674 Comm: syz.0.3360 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1063.729899][T22674] Tainted: [U]=USER [ 1063.729907][T22674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.729921][T22674] Call Trace: [ 1063.729929][T22674] [ 1063.729938][T22674] dump_stack_lvl+0x16c/0x1f0 [ 1063.729977][T22674] sysfs_warn_dup+0x7f/0xa0 [ 1063.730016][T22674] sysfs_create_dir_ns+0x24b/0x2b0 [ 1063.730052][T22674] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1063.730087][T22674] ? find_held_lock+0x2b/0x80 [ 1063.730122][T22674] ? nfs_netns_namespace+0xd/0x40 [ 1063.730153][T22674] kobject_add_internal+0x2c4/0x9b0 [ 1063.730181][T22674] kobject_init_and_add+0x11b/0x190 [ 1063.730207][T22674] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1063.730247][T22674] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1063.730280][T22674] nfs_net_init+0x10a/0x300 [ 1063.730314][T22674] ? __pfx_nfs_net_init+0x10/0x10 [ 1063.730346][T22674] ops_init+0x1e2/0x5f0 [ 1063.730380][T22674] setup_net+0x21e/0x850 [ 1063.730414][T22674] ? __pfx_setup_net+0x10/0x10 [ 1063.730442][T22674] ? lockdep_init_map_type+0x5c/0x280 [ 1063.730474][T22674] ? __pfx_down_read_killable+0x10/0x10 [ 1063.730502][T22674] ? debug_mutex_init+0x37/0x70 [ 1063.730527][T22674] copy_net_ns+0x2a6/0x5f0 [ 1063.730564][T22674] create_new_namespaces+0x3ea/0xad0 [ 1063.730597][T22674] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1063.730626][T22674] ksys_unshare+0x45b/0xa40 [ 1063.730662][T22674] ? __pfx_ksys_unshare+0x10/0x10 [ 1063.730693][T22674] ? xfd_validate_state+0x5d/0x180 [ 1063.730717][T22674] ? rcu_is_watching+0x12/0xc0 [ 1063.730746][T22674] __x64_sys_unshare+0x31/0x40 [ 1063.730777][T22674] do_syscall_64+0xcd/0x230 [ 1063.730815][T22674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.730839][T22674] RIP: 0033:0x7f5d8678e969 [ 1063.730857][T22674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.730882][T22674] RSP: 002b:00007f5d87535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1063.730903][T22674] RAX: ffffffffffffffda RBX: 00007f5d869b6320 RCX: 00007f5d8678e969 [ 1063.730919][T22674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1063.730934][T22674] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1063.730948][T22674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.730962][T22674] R13: 0000000000000000 R14: 00007f5d869b6320 R15: 00007ffc7bd74628 [ 1063.730992][T22674] [ 1063.731078][T22674] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1066.116062][T21623] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1066.843083][T13649] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1068.215324][T22735] sysfs_service_op_store: Client not running :-5: [ 1069.646891][T22756] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1070.269558][T22763] syz.0.3377 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1070.351940][T22763] CPU: 1 UID: 0 PID: 22763 Comm: syz.0.3377 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1070.351986][T22763] Tainted: [U]=USER [ 1070.351997][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1070.352014][T22763] Call Trace: [ 1070.352023][T22763] [ 1070.352034][T22763] dump_stack_lvl+0x16c/0x1f0 [ 1070.352104][T22763] dump_header+0x101/0x930 [ 1070.352151][T22763] oom_kill_process+0x270/0xa60 [ 1070.352189][T22763] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 1070.352244][T22763] out_of_memory+0x350/0x1700 [ 1070.352286][T22763] ? __lock_acquire+0xaa4/0x1ba0 [ 1070.352348][T22763] ? __pfx_out_of_memory+0x10/0x10 [ 1070.352404][T22763] mem_cgroup_out_of_memory+0x205/0x270 [ 1070.352455][T22763] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1070.352522][T22763] ? do_raw_spin_unlock+0x172/0x230 [ 1070.352581][T22763] try_charge_memcg+0xa07/0x10c0 [ 1070.352636][T22763] ? __pfx_try_charge_memcg+0x10/0x10 [ 1070.352697][T22763] ? find_held_lock+0x2b/0x80 [ 1070.352734][T22763] charge_memcg+0x8a/0x230 [ 1070.352774][T22763] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1070.352823][T22763] __read_swap_cache_async+0x43e/0x5a0 [ 1070.352862][T22763] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1070.352893][T22763] ? swp_swap_info+0xce/0x130 [ 1070.352932][T22763] ? __pfx_swp_swap_info+0x10/0x10 [ 1070.352983][T22763] swap_cluster_readahead+0x3eb/0x710 [ 1070.353024][T22763] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1070.353060][T22763] ? __pfx_shmem_split_large_entry.isra.0+0x10/0x10 [ 1070.353098][T22763] ? xa_get_order+0x15c/0x2c0 [ 1070.353148][T22763] shmem_swapin_folio+0x1933/0x2220 [ 1070.353201][T22763] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 1070.353235][T22763] ? __pfx_filemap_get_entry+0x10/0x10 [ 1070.353299][T22763] shmem_get_folio_gfp+0x2c6/0x1530 [ 1070.353347][T22763] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1070.353388][T22763] ? find_held_lock+0x2b/0x80 [ 1070.353423][T22763] shmem_get_folio+0x84/0xb0 [ 1070.353464][T22763] collapse_file+0xd2b/0x3030 [ 1070.353519][T22763] ? __pfx_collapse_file+0x10/0x10 [ 1070.353561][T22763] ? xas_move_index+0xb0/0x110 [ 1070.353627][T22763] ? find_held_lock+0x2b/0x80 [ 1070.353659][T22763] ? hpage_collapse_scan_file+0x410/0xce0 [ 1070.353720][T22763] hpage_collapse_scan_file+0x7ed/0xce0 [ 1070.353769][T22763] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 1070.353818][T22763] ? madvise_collapse+0x3f5/0xb20 [ 1070.353868][T22763] madvise_collapse+0x412/0xb20 [ 1070.353914][T22763] ? mtree_range_walk+0x718/0xc00 [ 1070.353955][T22763] ? __pfx_madvise_collapse+0x10/0x10 [ 1070.354002][T22763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.354049][T22763] madvise_vma_behavior+0xca3/0x1d50 [ 1070.354097][T22763] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1070.354140][T22763] ? find_vma_prev+0xda/0x160 [ 1070.354185][T22763] ? __pfx_find_vma_prev+0x10/0x10 [ 1070.354238][T22763] ? futex_wait+0x120/0x380 [ 1070.354283][T22763] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1070.354324][T22763] madvise_walk_vmas+0x1ce/0x2c0 [ 1070.354365][T22763] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1070.354415][T22763] madvise_do_behavior+0x12b/0x3b0 [ 1070.354452][T22763] ? __pfx___might_resched+0x10/0x10 [ 1070.354484][T22763] ? irqentry_exit+0x3b/0x90 [ 1070.354525][T22763] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1070.354590][T22763] do_madvise+0x10b/0x170 [ 1070.354639][T22763] __x64_sys_madvise+0xa9/0x110 [ 1070.354682][T22763] do_syscall_64+0xcd/0x230 [ 1070.354730][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.354758][T22763] RIP: 0033:0x7f5d8678e969 [ 1070.354782][T22763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.354809][T22763] RSP: 002b:00007f5d87577038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1070.354837][T22763] RAX: ffffffffffffffda RBX: 00007f5d869b6160 RCX: 00007f5d8678e969 [ 1070.354855][T22763] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 1070.354871][T22763] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1070.354888][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.354905][T22763] R13: 0000000000000000 R14: 00007f5d869b6160 R15: 00007ffc7bd74628 [ 1070.354942][T22763] [ 1070.763768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.205261][T22763] memory: usage 306832kB, limit 307200kB, failcnt 41059 [ 1071.213279][T22763] memory+swap: usage 418168kB, limit 9007199254740988kB, failcnt 0 [ 1071.222288][T22763] kmem: usage 4796kB, limit 9007199254740988kB, failcnt 0 [ 1071.233515][T22763] Memory cgroup stats for /syz1: [ 1071.237316][T22763] cache 304562176 [ 1071.356272][T22763] rss 4530176 [ 1071.365852][T22763] rss_huge 0 [ 1071.401448][T22763] shmem 304562176 [ 1071.429566][T22763] mapped_file 64237568 [ 1071.439831][T22763] dirty 0 [ 1071.471861][T22763] writeback 0 [ 1071.475198][T22763] workingset_refault_anon 11200 [ 1071.480313][T22763] workingset_refault_file 5976 [ 1071.485454][T22763] swap 114016256 [ 1071.489059][T22763] swapcached 159744 [ 1071.492942][T22763] pgpgin 1207444 [ 1071.496510][T22763] pgpgout 1146805 [ 1071.500167][T22763] pgfault 840993 [ 1071.503761][T22763] pgmajfault 1450 [ 1071.507405][T22763] inactive_anon 212910080 [ 1071.511788][T22763] active_anon 96079872 [ 1071.515903][T22763] inactive_file 0 [ 1071.519595][T22763] active_file 0 [ 1071.523121][T22763] unevictable 0 [ 1071.526603][T22763] hierarchical_memory_limit 314572800 [ 1071.532033][T22763] hierarchical_memsw_limit 9223372036854771712 [ 1071.538213][T22763] total_cache 304562176 [ 1071.542437][T22763] total_rss 4530176 [ 1071.546269][T22763] total_rss_huge 0 [ 1071.550012][T22763] total_shmem 304562176 [ 1071.593321][T22763] total_mapped_file 64237568 [ 1071.599147][T22763] total_dirty 0 [ 1071.602977][T22763] total_writeback 0 [ 1071.609332][T22763] total_workingset_refault_anon 11200 [ 1071.617267][T22763] total_workingset_refault_file 5976 [ 1071.636476][T22763] total_swap 114016256 [ 1071.644498][T22763] total_swapcached 159744 [ 1071.648933][T22763] total_pgpgin 1207444 [ 1071.656764][T22763] total_pgpgout 1146805 [ 1071.671761][T22763] total_pgfault 840993 [ 1071.691588][T22763] total_pgmajfault 1450 [ 1071.699324][T22763] total_inactive_anon 212910080 [ 1071.705417][T22763] total_active_anon 96079872 [ 1071.710013][T22763] total_inactive_file 0 [ 1071.715567][T22763] total_active_file 0 [ 1071.719570][T22763] total_unevictable 0 [ 1071.723668][T22763] anon_cost 0 [ 1071.727040][T22763] file_cost 0 [ 1071.731846][T22763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3290,pid=22319,uid=0 [ 1071.757351][T22763] Memory cgroup out of memory: Killed process 22319 (syz.1.3290) total-vm:164168kB, anon-rss:1076kB, file-rss:48064kB, shmem-rss:62848kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 1073.856399][ T32] oom_reaper: reaped process 22319 (syz.1.3290), now anon-rss:44kB, file-rss:48064kB, shmem-rss:57216kB [ 1074.183126][T22341] syz.1.3290 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1074.334889][T22341] CPU: 0 UID: 0 PID: 22341 Comm: syz.1.3290 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1074.334934][T22341] Tainted: [U]=USER [ 1074.334943][T22341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1074.334960][T22341] Call Trace: [ 1074.334970][T22341] [ 1074.334989][T22341] dump_stack_lvl+0x16c/0x1f0 [ 1074.335034][T22341] dump_header+0x101/0x930 [ 1074.335076][T22341] oom_kill_process+0x270/0xa60 [ 1074.335111][T22341] ? __lock_acquire+0x5ca/0x1ba0 [ 1074.335152][T22341] out_of_memory+0x350/0x1700 [ 1074.335198][T22341] ? __pfx_out_of_memory+0x10/0x10 [ 1074.335248][T22341] mem_cgroup_out_of_memory+0x205/0x270 [ 1074.335293][T22341] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1074.335344][T22341] ? do_raw_spin_unlock+0x172/0x230 [ 1074.335396][T22341] try_charge_memcg+0xa07/0x10c0 [ 1074.335441][T22341] ? __pfx_try_charge_memcg+0x10/0x10 [ 1074.335476][T22341] ? __print_lock_name+0xd1/0xe0 [ 1074.335509][T22341] ? rcu_read_unlock+0x17/0x60 [ 1074.335556][T22341] charge_memcg+0x8a/0x230 [ 1074.335617][T22341] __mem_cgroup_charge+0x2b/0x1e0 [ 1074.335666][T22341] shmem_alloc_and_add_folio+0x514/0xc20 [ 1074.335717][T22341] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1074.335762][T22341] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1074.335812][T22341] shmem_get_folio_gfp+0x687/0x1530 [ 1074.335861][T22341] ? __lock_acquire+0xaa4/0x1ba0 [ 1074.335906][T22341] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1074.335948][T22341] ? __pte_offset_map_lock+0x155/0x2f0 [ 1074.336010][T22341] shmem_write_begin+0x160/0x300 [ 1074.336054][T22341] ? __pfx_shmem_write_begin+0x10/0x10 [ 1074.336099][T22341] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1074.336154][T22341] ? __pfx_timestamp_truncate+0x10/0x10 [ 1074.336196][T22341] generic_perform_write+0x3d0/0x930 [ 1074.336252][T22341] ? __pfx_generic_perform_write+0x10/0x10 [ 1074.336296][T22341] ? inode_needs_update_time.part.0+0x191/0x270 [ 1074.336345][T22341] shmem_file_write_iter+0x10e/0x140 [ 1074.336397][T22341] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1074.336443][T22341] __kernel_write_iter+0x317/0xa90 [ 1074.336482][T22341] ? __pfx___kernel_write_iter+0x10/0x10 [ 1074.336515][T22341] ? __up_read+0x1f8/0x750 [ 1074.336571][T22341] ? dump_user_range+0x73d/0xb30 [ 1074.336625][T22341] dump_user_range+0x418/0xb30 [ 1074.336693][T22341] ? __pfx_dump_user_range+0x10/0x10 [ 1074.336741][T22341] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 1074.336794][T22341] ? __pfx_writenote+0x10/0x10 [ 1074.336855][T22341] elf_core_dump+0x288a/0x3a90 [ 1074.336918][T22341] ? __pfx_elf_core_dump+0x10/0x10 [ 1074.336959][T22341] ? kasan_save_stack+0x42/0x60 [ 1074.336994][T22341] ? kasan_save_stack+0x33/0x60 [ 1074.337022][T22341] ? kasan_save_track+0x14/0x30 [ 1074.337049][T22341] ? __kasan_kmalloc+0xaa/0xb0 [ 1074.337078][T22341] ? do_coredump+0x17aa/0x4480 [ 1074.337113][T22341] ? get_signal+0x22e3/0x26d0 [ 1074.337144][T22341] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 1074.337191][T22341] ? 0xffffffffff600000 [ 1074.337280][T22341] ? do_coredump+0x3186/0x4480 [ 1074.337316][T22341] do_coredump+0x3186/0x4480 [ 1074.337371][T22341] ? __pfx_do_coredump+0x10/0x10 [ 1074.337412][T22341] ? stack_trace_save+0x8e/0xc0 [ 1074.337440][T22341] ? __pfx_stack_trace_save+0x10/0x10 [ 1074.337469][T22341] ? stack_depot_save_flags+0x28/0xa50 [ 1074.337513][T22341] ? __lock_acquire+0xaa4/0x1ba0 [ 1074.337558][T22341] ? __kasan_slab_free+0x51/0x70 [ 1074.337588][T22341] ? kmem_cache_free+0x2d4/0x4d0 [ 1074.337616][T22341] ? __sigqueue_free+0xba/0x2a0 [ 1074.337651][T22341] ? get_signal+0xcba/0x26d0 [ 1074.337678][T22341] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 1074.337769][T22341] ? proc_coredump_connector+0x2d1/0x4f0 [ 1074.337814][T22341] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1074.337867][T22341] ? rcu_is_watching+0x12/0xc0 [ 1074.337899][T22341] get_signal+0x22e3/0x26d0 [ 1074.337939][T22341] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1074.337987][T22341] ? __pfx_get_signal+0x10/0x10 [ 1074.338031][T22341] arch_do_signal_or_restart+0x8f/0x7a0 [ 1074.338071][T22341] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1074.338119][T22341] ? exc_general_protection+0x1ba/0x230 [ 1074.338161][T22341] irqentry_exit_to_user_mode+0x13f/0x280 [ 1074.338224][T22341] asm_exc_general_protection+0x26/0x30 [ 1074.338255][T22341] RIP: 0033:0x7fe814d8e971 [ 1074.338279][T22341] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1074.338309][T22341] RSP: 002b:00002000000001f0 EFLAGS: 00010217 [ 1074.338333][T22341] RAX: 0000000000000000 RBX: 00007fe814fb6160 RCX: 00007fe814d8e969 [ 1074.338351][T22341] RDX: 0000200000000080 RSI: 00002000000001f0 RDI: 0000000000802000 [ 1074.338371][T22341] RBP: 00007fe814e10ab1 R08: 0000200000000300 R09: 0000200000000300 [ 1074.338389][T22341] R10: 00002000000002c0 R11: 0000000000000206 R12: 0000000000000000 [ 1074.338408][T22341] R13: 0000000000000000 R14: 00007fe814fb6160 R15: 00007fffa5e91ce8 [ 1074.338449][T22341] [ 1075.325226][T22341] memory: usage 284028kB, limit 307200kB, failcnt 42175 [ 1075.350159][T22341] memory+swap: usage 365376kB, limit 9007199254740988kB, failcnt 0 [ 1075.411688][T22341] kmem: usage 3784kB, limit 9007199254740988kB, failcnt 0 [ 1075.419258][T22341] Memory cgroup stats for /syz1: [ 1075.420061][T22341] cache 283422720 [ 1075.544314][T22341] rss 159744 [ 1075.566510][T22341] rss_huge 0 [ 1075.578536][T22341] shmem 283422720 [ 1075.586839][T22341] mapped_file 55582720 [ 1075.594944][T22341] dirty 0 [ 1075.602973][T22341] writeback 0 [ 1075.678399][T22341] workingset_refault_anon 11224 [ 1075.749784][T22341] workingset_refault_file 5976 [ 1075.754593][T22341] swap 85557248 [ 1075.758062][T22341] swapcached 86016 [ 1075.856038][T22341] pgpgin 1218249 [ 1075.900674][T22341] pgpgout 1163856 [ 1075.904366][T22341] pgfault 841685 [ 1075.907929][T22341] pgmajfault 1450 [ 1075.911955][T13649] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1076.023050][T22341] inactive_anon 126734336 [ 1076.058062][T22341] active_anon 156667904 [ 1076.068042][T22341] inactive_file 0 [ 1076.071714][T22341] active_file 0 [ 1076.083699][T22341] unevictable 0 [ 1076.087292][T22341] hierarchical_memory_limit 314572800 [ 1076.113655][T22341] hierarchical_memsw_limit 9223372036854771712 [ 1076.141828][T22341] total_cache 283422720 [ 1076.186377][T22341] total_rss 159744 [ 1076.204929][T22341] total_rss_huge 0 [ 1076.231983][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1076.243743][T22341] total_shmem 283422720 [ 1076.248631][T22828] ipvlan0: entered allmulticast mode [ 1076.254119][T22828] veth0_vlan: entered allmulticast mode [ 1076.269841][T22341] total_mapped_file 55582720 [ 1076.276718][T22828] sg_write: data in/out 2949100/28904 bytes for SCSI command 0x7-- guessing data in; [ 1076.276718][T22828] program syz.2.3393 not setting count and/or reply_len properly [ 1076.338592][T22341] total_dirty 0 [ 1076.355747][T22341] total_writeback 0 [ 1076.392996][T22341] total_workingset_refault_anon 11224 [ 1076.494639][T22341] total_workingset_refault_file 5976 [ 1076.545290][T22341] total_swap 85557248 [ 1076.592201][T22341] total_swapcached 86016 [ 1076.612585][T22341] total_pgpgin 1218249 [ 1076.647302][T22341] total_pgpgout 1163856 [ 1076.665991][T22341] total_pgfault 841685 [ 1076.692549][T22341] total_pgmajfault 1450 [ 1076.748882][T22341] total_inactive_anon 126734336 [ 1076.799311][T22341] total_active_anon 156667904 [ 1076.808061][T22341] total_inactive_file 0 [ 1076.874593][T22843] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 1076.884115][T22843] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3395'. [ 1077.053064][T22341] total_active_file 0 [ 1077.070972][T22341] total_unevictable 0 [ 1077.140228][T22341] anon_cost 0 [ 1077.183420][T22341] file_cost 0 [ 1077.203361][T22341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3290,pid=22341,uid=0 [ 1077.242795][T22850] random: crng reseeded on system resumption [ 1077.445007][T22341] Memory cgroup out of memory: Killed process 22341 (syz.1.3290) total-vm:164300kB, anon-rss:1044kB, file-rss:48512kB, shmem-rss:54400kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 1077.920660][T22847] can: request_module (can-proto-0) failed. [ 1079.911234][T22901] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1081.036372][T22922] FAULT_INJECTION: forcing a failure. [ 1081.036372][T22922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.094103][T22922] CPU: 1 UID: 0 PID: 22922 Comm: syz.3.3414 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1081.094146][T22922] Tainted: [U]=USER [ 1081.094156][T22922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1081.094172][T22922] Call Trace: [ 1081.094180][T22922] [ 1081.094191][T22922] dump_stack_lvl+0x16c/0x1f0 [ 1081.094237][T22922] should_fail_ex+0x512/0x640 [ 1081.094282][T22922] should_fail_alloc_page+0xe7/0x130 [ 1081.094319][T22922] prepare_alloc_pages+0x3c2/0x610 [ 1081.094367][T22922] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1081.094401][T22922] ? __pfx_page_vma_mapped_walk+0x10/0x10 [ 1081.094463][T22922] ? folio_remove_rmap_ptes+0x138/0x970 [ 1081.094499][T22922] ? try_to_migrate_one+0x13d8/0x3380 [ 1081.094528][T22922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1081.094580][T22922] ? __up_read+0x1f8/0x750 [ 1081.094615][T22922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1081.094660][T22922] ? policy_nodemask+0xea/0x4e0 [ 1081.094694][T22922] alloc_pages_mpol+0x1fb/0x550 [ 1081.094726][T22922] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1081.094755][T22922] ? rmap_walk_anon+0x503/0x710 [ 1081.094808][T22922] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1081.094847][T22922] alloc_migration_target_by_mpol+0x246/0x490 [ 1081.094892][T22922] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1081.094928][T22922] ? __pfx_invalid_migration_vma+0x10/0x10 [ 1081.094967][T22922] ? __pfx___might_resched+0x10/0x10 [ 1081.095000][T22922] ? folio_get_anon_vma+0xdd/0x760 [ 1081.095037][T22922] migrate_pages_batch+0x3bf/0x31a0 [ 1081.095082][T22922] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1081.095138][T22922] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1081.095187][T22922] ? __pfx_walk_pgd_range+0x10/0x10 [ 1081.095228][T22922] migrate_pages_sync+0x12d/0x8a0 [ 1081.095271][T22922] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1081.095321][T22922] ? queue_pages_test_walk+0x279/0x410 [ 1081.095358][T22922] ? __pfx_find_vma+0x10/0x10 [ 1081.095400][T22922] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1081.095461][T22922] migrate_pages+0x1b28/0x2350 [ 1081.095511][T22922] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1081.095606][T22922] ? __pfx_migrate_pages+0x10/0x10 [ 1081.095665][T22922] ? find_held_lock+0x2b/0x80 [ 1081.095706][T22922] ? up_write+0x1b2/0x520 [ 1081.095756][T22922] do_mbind+0x6f0/0xf30 [ 1081.095817][T22922] ? __pfx_do_mbind+0x10/0x10 [ 1081.095862][T22922] ? find_held_lock+0x2b/0x80 [ 1081.095894][T22922] ? ksys_write+0x190/0x240 [ 1081.095945][T22922] ? __pfx_get_nodes+0x10/0x10 [ 1081.095983][T22922] ? __fget_files+0x20e/0x3c0 [ 1081.096022][T22922] kernel_mbind+0x1e3/0x1f0 [ 1081.096075][T22922] ? __pfx_kernel_mbind+0x10/0x10 [ 1081.096118][T22922] ? rcu_is_watching+0x12/0xc0 [ 1081.096160][T22922] do_syscall_64+0xcd/0x230 [ 1081.096214][T22922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.096248][T22922] RIP: 0033:0x7f551d18e969 [ 1081.096274][T22922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.096305][T22922] RSP: 002b:00007f551dfab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1081.096336][T22922] RAX: ffffffffffffffda RBX: 00007f551d3b5fa0 RCX: 00007f551d18e969 [ 1081.096357][T22922] RDX: 0000000100000000 RSI: 8000000000000001 RDI: 000000000000f000 [ 1081.096377][T22922] RBP: 00007f551dfab090 R08: 0000000000000006 R09: 0000000000000002 [ 1081.096398][T22922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.096416][T22922] R13: 0000000000000000 R14: 00007f551d3b5fa0 R15: 00007fff4de87918 [ 1081.096457][T22922] [ 1082.455842][T22926] Process accounting paused [ 1082.723593][T22940] loop6: detected capacity change from 0 to 8 [ 1082.745860][T22940] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1082.754283][T22940] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1083.512420][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1086.008523][T22987] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1086.681385][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 1086.730502][T23002] random: crng reseeded on system resumption [ 1087.749820][T23028] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x700000000 pfn:0x78c00 [ 1087.760450][T23028] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1087.776423][T23028] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1087.793658][T23028] raw: 0000000700000000 0000000000000000 0000000500000003 0000000000000000 [ 1087.802657][T23028] page dumped because: unmovable page [ 1087.931950][T23028] page_owner tracks the page as allocated [ 1087.948080][T23028] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 18228, tgid 18228 (syz-executor), ts 811601178360, free_ts 804740149068 [ 1088.000727][T23028] post_alloc_hook+0x181/0x1b0 [ 1088.011206][T23030] could not allocate digest TFM handle binfmt_misc [ 1088.028091][T23028] get_page_from_freelist+0x135c/0x3920 [ 1088.059790][T23028] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1088.068250][T23028] alloc_pages_mpol+0x1fb/0x550 [ 1088.075297][T23028] alloc_pages_noprof+0x131/0x390 [ 1088.080469][T23028] __vmalloc_node_range_noprof+0x732/0x1540 [ 1088.087093][T23028] vmalloc_user_noprof+0x6b/0x90 [ 1088.092135][T23028] kcov_ioctl+0x4c/0x730 [ 1088.096569][T23028] __x64_sys_ioctl+0x190/0x200 [ 1088.101849][T23028] do_syscall_64+0xcd/0x230 [ 1088.106490][T23028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.112952][T23028] page last free pid 15 tgid 15 stack trace: [ 1088.119538][T23028] __free_frozen_pages+0x69d/0xff0 [ 1088.138758][T23028] tlb_remove_table_rcu+0x116/0x1a0 [ 1088.144237][T23028] rcu_core+0x79c/0x14e0 [ 1088.149456][T23028] handle_softirqs+0x216/0x8e0 [ 1088.154287][T23028] run_ksoftirqd+0x3a/0x60 [ 1088.158867][T23028] smpboot_thread_fn+0x3f7/0xae0 [ 1088.164422][T23028] kthread+0x3c2/0x780 [ 1088.168627][T23028] ret_from_fork+0x48/0x80 [ 1088.173089][T23028] ret_from_fork_asm+0x1a/0x30 [ 1089.562372][T23056] ima: policy update failed [ 1089.567105][ T30] audit: type=1802 audit(4294970994.146:53): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3444" res=0 errno=0 [ 1089.704716][T23062] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1089.722753][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1089.732031][T23061] ipvlan0: entered allmulticast mode [ 1089.737438][T23061] veth0_vlan: entered allmulticast mode [ 1089.761237][T23061] sg_write: data in/out 2949100/28904 bytes for SCSI command 0x7-- guessing data in; [ 1089.761237][T23061] program syz.3.3446 not setting count and/or reply_len properly [ 1090.328025][T23080] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1090.355759][T23080] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1090.420174][T23080] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1090.445921][T23080] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1091.972488][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.108864][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.126113][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.145070][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.161860][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.340285][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.353373][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.363273][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.371930][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.380543][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.396787][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.405183][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1092.500272][T23120] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1093.434270][T23157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1094.205542][T23165] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 1094.282957][T23154] batman_adv: Routing algorithm '' is not supported [ 1094.379495][T23165] nbd: must specify an index to disconnect [ 1094.447021][T23173] block2mtd: illegal erase size [ 1094.652675][T23180] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1094.674963][T23182] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 1094.690452][T23183] batman_adv: Routing algorithm '' is not supported [ 1094.962494][T23169] nbd: must specify an index to disconnect [ 1095.673091][T23189] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1095.766705][T23189] CPU: 0 UID: 0 PID: 23189 Comm: syz.1.3466 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1095.766753][T23189] Tainted: [U]=USER [ 1095.766763][T23189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1095.766782][T23189] Call Trace: [ 1095.766802][T23189] [ 1095.766813][T23189] dump_stack_lvl+0x16c/0x1f0 [ 1095.766859][T23189] sysfs_warn_dup+0x7f/0xa0 [ 1095.766905][T23189] sysfs_create_dir_ns+0x24b/0x2b0 [ 1095.766948][T23189] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1095.766987][T23189] ? find_held_lock+0x2b/0x80 [ 1095.767020][T23189] ? nfs_netns_namespace+0xd/0x40 [ 1095.767056][T23189] kobject_add_internal+0x2c4/0x9b0 [ 1095.767091][T23189] kobject_init_and_add+0x11b/0x190 [ 1095.767127][T23189] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1095.767178][T23189] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1095.767217][T23189] nfs_net_init+0x10a/0x300 [ 1095.767259][T23189] ? __pfx_nfs_net_init+0x10/0x10 [ 1095.767296][T23189] ops_init+0x1e2/0x5f0 [ 1095.767336][T23189] setup_net+0x21e/0x850 [ 1095.767375][T23189] ? __pfx_setup_net+0x10/0x10 [ 1095.767410][T23189] ? lockdep_init_map_type+0x5c/0x280 [ 1095.767448][T23189] ? __pfx_down_read_killable+0x10/0x10 [ 1095.767480][T23189] ? debug_mutex_init+0x37/0x70 [ 1095.767512][T23189] copy_net_ns+0x2a6/0x5f0 [ 1095.767554][T23189] create_new_namespaces+0x3ea/0xad0 [ 1095.767594][T23189] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1095.767629][T23189] ksys_unshare+0x45b/0xa40 [ 1095.767668][T23189] ? __pfx_ksys_unshare+0x10/0x10 [ 1095.767705][T23189] ? xfd_validate_state+0x5d/0x180 [ 1095.767732][T23189] ? rcu_is_watching+0x12/0xc0 [ 1095.767768][T23189] __x64_sys_unshare+0x31/0x40 [ 1095.767805][T23189] do_syscall_64+0xcd/0x230 [ 1095.767847][T23189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.767875][T23189] RIP: 0033:0x7fe814d8e969 [ 1095.767897][T23189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.767925][T23189] RSP: 002b:00007fe812bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1095.767951][T23189] RAX: ffffffffffffffda RBX: 00007fe814fb6320 RCX: 00007fe814d8e969 [ 1095.767969][T23189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1095.767985][T23189] RBP: 00007fe814e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1095.768000][T23189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.768015][T23189] R13: 0000000000000000 R14: 00007fe814fb6320 R15: 00007fffa5e91ce8 [ 1095.768050][T23189] [ 1095.768077][T23189] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1098.393971][T23238] ubi: mtd0 is already attached to ubi0 [ 1098.496369][T23247] : Can't lookup blockdev [ 1100.221574][T23285] zram0: detected capacity change from 8 to 0 [ 1100.425004][T21626] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1351 with max blocks 19 with error 117 [ 1100.442305][T21626] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.442305][T21626] [ 1100.723193][T23285] zram: Removed device: zram0 [ 1104.627814][T23347] FAULT_INJECTION: forcing a failure. [ 1104.627814][T23347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1104.655704][T23347] CPU: 1 UID: 0 PID: 23347 Comm: syz.3.3498 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1104.655756][T23347] Tainted: [U]=USER [ 1104.655769][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1104.655790][T23347] Call Trace: [ 1104.655801][T23347] [ 1104.655814][T23347] dump_stack_lvl+0x16c/0x1f0 [ 1104.655870][T23347] should_fail_ex+0x512/0x640 [ 1104.655928][T23347] should_fail_alloc_page+0xe7/0x130 [ 1104.655976][T23347] prepare_alloc_pages+0x3c2/0x610 [ 1104.656038][T23347] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1104.656078][T23347] ? lock_acquire+0x179/0x350 [ 1104.656123][T23347] ? find_held_lock+0x2b/0x80 [ 1104.656158][T23347] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1104.656197][T23347] ? rcu_is_watching+0x12/0xc0 [ 1104.656229][T23347] ? finish_task_switch.isra.0+0x221/0xc10 [ 1104.656267][T23347] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 1104.656303][T23347] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1104.656343][T23347] ? rcu_is_watching+0x12/0xc0 [ 1104.656378][T23347] ? __schedule+0x1186/0x5de0 [ 1104.656422][T23347] ? kvm_sched_clock_read+0x11/0x20 [ 1104.656470][T23347] ? sched_clock+0x38/0x60 [ 1104.656534][T23347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1104.656585][T23347] ? policy_nodemask+0xea/0x4e0 [ 1104.656639][T23347] alloc_pages_mpol+0x1fb/0x550 [ 1104.656684][T23347] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1104.656727][T23347] ? __lock_acquire+0x5ca/0x1ba0 [ 1104.656791][T23347] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1104.656849][T23347] vma_alloc_folio_noprof+0xed/0x1e0 [ 1104.656892][T23347] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1104.656947][T23347] do_pte_missing+0x223d/0x3fb0 [ 1104.656992][T23347] __handle_mm_fault+0x103d/0x2a40 [ 1104.657032][T23347] ? __pfx___handle_mm_fault+0x10/0x10 [ 1104.657061][T23347] ? lock_vma_under_rcu+0x47d/0x970 [ 1104.657105][T23347] ? lock_vma_under_rcu+0x47d/0x970 [ 1104.657176][T23347] handle_mm_fault+0x3fe/0xad0 [ 1104.657212][T23347] do_user_addr_fault+0x60c/0x1370 [ 1104.657253][T23347] exc_page_fault+0x5c/0xc0 [ 1104.657297][T23347] asm_exc_page_fault+0x26/0x30 [ 1104.657325][T23347] RIP: 0033:0x7f551d05a35b [ 1104.657349][T23347] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1104.657378][T23347] RSP: 002b:00007f551dfa9fb0 EFLAGS: 00010202 [ 1104.657403][T23347] RAX: 0000000000000000 RBX: 00007f551d3b5fa0 RCX: 0000000000000000 [ 1104.657422][T23347] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001680 [ 1104.657441][T23347] RBP: 00007f551d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1104.657458][T23347] R10: 0000200000001680 R11: 0000000000000000 R12: 0000000000000000 [ 1104.657474][T23347] R13: 0000000000000000 R14: 00007f551d3b5fa0 R15: 00007fff4de87918 [ 1104.657511][T23347] [ 1104.718281][T23347] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1106.568556][T23390] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1106.580788][T23390] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1106.665015][T23388] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1106.672551][T23388] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1107.450947][T23407] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1109.081101][T23421] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1110.276123][T23454] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1110.309481][T23454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1112.598511][T23435] Process accounting resumed [ 1115.010508][T23538] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1117.853483][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.860015][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.791312][T23696] nla_validate_range_unsigned: 56 callbacks suppressed [ 1121.791334][T23696] netlink: 'syz.1.3573': attribute type 11 has an invalid length. [ 1122.334089][T23708] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1122.470794][T23715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1123.433297][ T30] audit: type=1400 audit(4294971028.194:54): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23736 comm="syz.2.3585" [ 1123.470509][T23731] FAULT_INJECTION: forcing a failure. [ 1123.470509][T23731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1123.484285][ T30] audit: type=1326 audit(4294971028.244:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23734 comm="syz.1.3583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe814d8e969 code=0x0 [ 1123.510485][T23731] CPU: 0 UID: 0 PID: 23731 Comm: syz.0.3582 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1123.510531][T23731] Tainted: [U]=USER [ 1123.510541][T23731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1123.510560][T23731] Call Trace: [ 1123.510570][T23731] [ 1123.510582][T23731] dump_stack_lvl+0x16c/0x1f0 [ 1123.510632][T23731] should_fail_ex+0x512/0x640 [ 1123.510681][T23731] should_fail_alloc_page+0xe7/0x130 [ 1123.510720][T23731] prepare_alloc_pages+0x3c2/0x610 [ 1123.510764][T23731] ? rcu_is_watching+0x12/0xc0 [ 1123.510798][T23731] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1123.510842][T23731] ? cgroup_rstat_updated+0x2a/0xb20 [ 1123.510890][T23731] ? __lock_acquire+0x5ca/0x1ba0 [ 1123.510932][T23731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1123.510975][T23731] ? lru_gen_add_folio+0x1a4/0xef0 [ 1123.511025][T23731] ? __lock_acquire+0x5ca/0x1ba0 [ 1123.511067][T23731] ? __lock_acquire+0x5ca/0x1ba0 [ 1123.511106][T23731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1123.511150][T23731] ? policy_nodemask+0xea/0x4e0 [ 1123.511192][T23731] alloc_pages_mpol+0x1fb/0x550 [ 1123.511230][T23731] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1123.511269][T23731] ? __lock_acquire+0x5ca/0x1ba0 [ 1123.511313][T23731] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1123.511360][T23731] vma_alloc_folio_noprof+0xed/0x1e0 [ 1123.511403][T23731] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1123.511458][T23731] do_pte_missing+0x223d/0x3fb0 [ 1123.511502][T23731] __handle_mm_fault+0x103d/0x2a40 [ 1123.511545][T23731] ? __pfx___handle_mm_fault+0x10/0x10 [ 1123.511575][T23731] ? __pte_offset_map_lock+0x155/0x2f0 [ 1123.511619][T23731] ? find_held_lock+0x2b/0x80 [ 1123.511644][T23731] ? find_held_lock+0x2b/0x80 [ 1123.511697][T23731] handle_mm_fault+0x3fe/0xad0 [ 1123.511735][T23731] __get_user_pages+0x771/0x36f0 [ 1123.511792][T23731] ? __pfx_mt_find+0x10/0x10 [ 1123.511821][T23731] ? __pfx___get_user_pages+0x10/0x10 [ 1123.511882][T23731] populate_vma_page_range+0x278/0x3a0 [ 1123.511916][T23731] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1123.511944][T23731] ? __pfx_find_vma_intersection+0x10/0x10 [ 1123.511996][T23731] ? do_mmap+0x69c/0x11b0 [ 1123.512045][T23731] __mm_populate+0x1d8/0x380 [ 1123.512076][T23731] ? __pfx___mm_populate+0x10/0x10 [ 1123.512109][T23731] ? up_write+0x1b2/0x520 [ 1123.512155][T23731] vm_mmap_pgoff+0x362/0x450 [ 1123.512204][T23731] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1123.512255][T23731] ? __x64_sys_futex+0x1e0/0x4c0 [ 1123.512287][T23731] ? __x64_sys_futex+0x1e9/0x4c0 [ 1123.512324][T23731] ksys_mmap_pgoff+0x7d/0x5c0 [ 1123.512369][T23731] ? rcu_is_watching+0x12/0xc0 [ 1123.512401][T23731] __x64_sys_mmap+0x125/0x190 [ 1123.512433][T23731] do_syscall_64+0xcd/0x230 [ 1123.512480][T23731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.512509][T23731] RIP: 0033:0x7f5d8678e969 [ 1123.512533][T23731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.512562][T23731] RSP: 002b:00007f5d87598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1123.512589][T23731] RAX: ffffffffffffffda RBX: 00007f5d869b6080 RCX: 00007f5d8678e969 [ 1123.512608][T23731] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1123.512625][T23731] RBP: 00007f5d86810ab1 R08: 0000000000000007 R09: 0000000000028000 [ 1123.512643][T23731] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1123.512659][T23731] R13: 0000000000000000 R14: 00007f5d869b6080 R15: 00007ffc7bd74628 [ 1123.512696][T23731] [ 1123.876126][T23741] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1123.892283][T23731] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1124.219103][T23753] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1125.113200][T23774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1125.191517][T23783] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1125.270586][T13649] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1125.278847][T13649] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1125.513107][T23793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1126.376370][T23793] netlink: 93 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1127.073159][T23819] FAULT_INJECTION: forcing a failure. [ 1127.073159][T23819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.110634][T23819] CPU: 0 UID: 0 PID: 23819 Comm: syz.3.3604 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1127.110676][T23819] Tainted: [U]=USER [ 1127.110692][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1127.110708][T23819] Call Trace: [ 1127.110717][T23819] [ 1127.110728][T23819] dump_stack_lvl+0x16c/0x1f0 [ 1127.110773][T23819] should_fail_ex+0x512/0x640 [ 1127.110814][T23819] ? 0xffffffffff600000 [ 1127.110838][T23819] _copy_to_user+0x32/0xd0 [ 1127.110864][T23819] ? 0xffffffffff600000 [ 1127.110886][T23819] __x64_sys_times+0xce/0x180 [ 1127.110925][T23819] ? __pfx___x64_sys_times+0x10/0x10 [ 1127.110969][T23819] ? syscall_trace_enter+0x5e/0x260 [ 1127.111013][T23819] do_syscall_64+0xcd/0x230 [ 1127.111060][T23819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.111089][T23819] RIP: 0033:0x7f551d18e969 [ 1127.111111][T23819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.111138][T23819] RSP: 002b:00007f551dfab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000064 [ 1127.111164][T23819] RAX: ffffffffffffffda RBX: 00007f551d3b5fa0 RCX: 00007f551d18e969 [ 1127.111182][T23819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600000 [ 1127.111199][T23819] RBP: 00007f551dfab090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.111215][T23819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.111231][T23819] R13: 0000000000000000 R14: 00007f551d3b5fa0 R15: 00007fff4de87918 [ 1127.111261][T23819] ? 0xffffffffff600000 [ 1127.111286][T23819] [ 1127.421034][T23828] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1128.480108][T23839] kexec: Could not allocate control_code_buffer [ 1128.856556][T23871] FAULT_INJECTION: forcing a failure. [ 1128.856556][T23871] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.911039][T23871] CPU: 1 UID: 0 PID: 23871 Comm: syz.3.3615 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1128.911084][T23871] Tainted: [U]=USER [ 1128.911094][T23871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1128.911112][T23871] Call Trace: [ 1128.911122][T23871] [ 1128.911133][T23871] dump_stack_lvl+0x16c/0x1f0 [ 1128.911181][T23871] should_fail_ex+0x512/0x640 [ 1128.911224][T23871] ? __kvmalloc_node_noprof+0x122/0x600 [ 1128.911261][T23871] should_failslab+0xc2/0x120 [ 1128.911297][T23871] __kvmalloc_node_noprof+0x135/0x600 [ 1128.911327][T23871] ? rcu_is_watching+0x12/0xc0 [ 1128.911355][T23871] ? kfree+0x252/0x4d0 [ 1128.911377][T23871] ? snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1128.911414][T23871] ? snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1128.911439][T23871] snd_pcm_plugin_alloc+0x5f8/0x7f0 [ 1128.911476][T23871] snd_pcm_plug_alloc+0x146/0x330 [ 1128.911508][T23871] snd_pcm_oss_change_params_locked+0x19b8/0x3a30 [ 1128.911582][T23871] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1128.911661][T23871] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1128.911714][T23871] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1128.911762][T23871] ? hook_file_ioctl_common+0x145/0x410 [ 1128.911797][T23871] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1128.911847][T23871] ? __fget_files+0x20e/0x3c0 [ 1128.911878][T23871] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1128.911928][T23871] __x64_sys_ioctl+0x190/0x200 [ 1128.911971][T23871] do_syscall_64+0xcd/0x230 [ 1128.912018][T23871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.912048][T23871] RIP: 0033:0x7f551d18e969 [ 1128.912072][T23871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.912100][T23871] RSP: 002b:00007f551df8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.912127][T23871] RAX: ffffffffffffffda RBX: 00007f551d3b6080 RCX: 00007f551d18e969 [ 1128.912146][T23871] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1128.912163][T23871] RBP: 00007f551d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1128.912180][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.912197][T23871] R13: 0000000000000000 R14: 00007f551d3b6080 R15: 00007fff4de87918 [ 1128.912233][T23871] [ 1129.189592][T23874] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1129.578581][T23877] FAULT_INJECTION: forcing a failure. [ 1129.578581][T23877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.602101][T23877] CPU: 0 UID: 0 PID: 23877 Comm: syz.1.3618 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1129.602141][T23877] Tainted: [U]=USER [ 1129.602151][T23877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1129.602167][T23877] Call Trace: [ 1129.602176][T23877] [ 1129.602187][T23877] dump_stack_lvl+0x16c/0x1f0 [ 1129.602243][T23877] should_fail_ex+0x512/0x640 [ 1129.602290][T23877] _copy_to_user+0x32/0xd0 [ 1129.602319][T23877] simple_read_from_buffer+0xcb/0x170 [ 1129.602364][T23877] proc_fail_nth_read+0x197/0x270 [ 1129.602404][T23877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.602447][T23877] ? rw_verify_area+0xcf/0x680 [ 1129.602489][T23877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.602531][T23877] vfs_read+0x1de/0xc70 [ 1129.602563][T23877] ? __pfx___mutex_lock+0x10/0x10 [ 1129.602606][T23877] ? __pfx_vfs_read+0x10/0x10 [ 1129.602644][T23877] ? __fget_files+0x20e/0x3c0 [ 1129.602680][T23877] ksys_read+0x12a/0x240 [ 1129.602707][T23877] ? __pfx_ksys_read+0x10/0x10 [ 1129.602733][T23877] ? syscall_user_dispatch+0x78/0x140 [ 1129.602786][T23877] do_syscall_64+0xcd/0x230 [ 1129.602832][T23877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.602861][T23877] RIP: 0033:0x7fe814d8d37c [ 1129.602883][T23877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1129.602909][T23877] RSP: 002b:00007fe815b79030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1129.602934][T23877] RAX: ffffffffffffffda RBX: 00007fe814fb5fa0 RCX: 00007fe814d8d37c [ 1129.602952][T23877] RDX: 000000000000000f RSI: 00007fe815b790a0 RDI: 0000000000000003 [ 1129.602969][T23877] RBP: 00007fe815b79090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.602986][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.603003][T23877] R13: 0000000000000000 R14: 00007fe814fb5fa0 R15: 00007fffa5e91ce8 [ 1129.603040][T23877] [ 1130.270757][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1130.585954][T23902] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1130.888259][T23912] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1131.953017][T23930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1135.774968][T23992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1136.149429][T23958] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1136.571939][T24009] FAULT_INJECTION: forcing a failure. [ 1136.571939][T24009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.603472][T24009] CPU: 0 UID: 0 PID: 24009 Comm: syz.1.3649 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1136.603516][T24009] Tainted: [U]=USER [ 1136.603526][T24009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1136.603543][T24009] Call Trace: [ 1136.603553][T24009] [ 1136.603564][T24009] dump_stack_lvl+0x16c/0x1f0 [ 1136.603610][T24009] should_fail_ex+0x512/0x640 [ 1136.603658][T24009] _copy_from_user+0x2e/0xd0 [ 1136.603687][T24009] aql_txq_limit_write+0x10d/0x770 [ 1136.603726][T24009] ? __pfx_aql_txq_limit_write+0x10/0x10 [ 1136.603756][T24009] ? __lock_acquire+0xaa4/0x1ba0 [ 1136.603834][T24009] full_proxy_write+0x13f/0x200 [ 1136.603883][T24009] vfs_write+0x25c/0x1180 [ 1136.603925][T24009] ? __pfx_full_proxy_write+0x10/0x10 [ 1136.603965][T24009] ? __pfx___mutex_lock+0x10/0x10 [ 1136.604010][T24009] ? __pfx_vfs_write+0x10/0x10 [ 1136.604051][T24009] ? __fget_files+0x20e/0x3c0 [ 1136.604090][T24009] ksys_write+0x12a/0x240 [ 1136.604119][T24009] ? __pfx_ksys_write+0x10/0x10 [ 1136.604146][T24009] ? rcu_is_watching+0x12/0xc0 [ 1136.604187][T24009] do_syscall_64+0xcd/0x230 [ 1136.604234][T24009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.604263][T24009] RIP: 0033:0x7fe814d8e969 [ 1136.604286][T24009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.604316][T24009] RSP: 002b:00007fe815b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1136.604343][T24009] RAX: ffffffffffffffda RBX: 00007fe814fb5fa0 RCX: 00007fe814d8e969 [ 1136.604363][T24009] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1136.604379][T24009] RBP: 00007fe815b79090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.604397][T24009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.604414][T24009] R13: 0000000000000000 R14: 00007fe814fb5fa0 R15: 00007fffa5e91ce8 [ 1136.604453][T24009] [ 1136.936987][T24013] FAULT_INJECTION: forcing a failure. [ 1136.936987][T24013] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.022195][T24013] CPU: 1 UID: 0 PID: 24013 Comm: syz.3.3650 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1137.022241][T24013] Tainted: [U]=USER [ 1137.022252][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.022269][T24013] Call Trace: [ 1137.022280][T24013] [ 1137.022292][T24013] dump_stack_lvl+0x16c/0x1f0 [ 1137.022339][T24013] should_fail_ex+0x512/0x640 [ 1137.022384][T24013] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1137.022421][T24013] should_failslab+0xc2/0x120 [ 1137.022455][T24013] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1137.022490][T24013] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1137.022534][T24013] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1137.022579][T24013] idr_get_free+0x528/0xa30 [ 1137.022634][T24013] idr_alloc_u32+0x190/0x2f0 [ 1137.022677][T24013] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1137.022722][T24013] ? __pfx___mutex_lock+0x10/0x10 [ 1137.022773][T24013] idr_alloc+0xc0/0x130 [ 1137.022811][T24013] ? __pfx_idr_alloc+0x10/0x10 [ 1137.022850][T24013] ? __radix_tree_lookup+0x21f/0x2c0 [ 1137.022905][T24013] ppp_dev_configure+0x905/0xc80 [ 1137.022954][T24013] ppp_ioctl+0x17e0/0x2660 [ 1137.022995][T24013] ? find_held_lock+0x2b/0x80 [ 1137.023023][T24013] ? __pfx_ppp_ioctl+0x10/0x10 [ 1137.023070][T24013] ? __fget_files+0x20e/0x3c0 [ 1137.023102][T24013] ? __pfx_ppp_ioctl+0x10/0x10 [ 1137.023143][T24013] __x64_sys_ioctl+0x190/0x200 [ 1137.023187][T24013] do_syscall_64+0xcd/0x230 [ 1137.023234][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.023263][T24013] RIP: 0033:0x7f551d18e969 [ 1137.023286][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.023314][T24013] RSP: 002b:00007f551dfab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.023342][T24013] RAX: ffffffffffffffda RBX: 00007f551d3b5fa0 RCX: 00007f551d18e969 [ 1137.023361][T24013] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000002 [ 1137.023379][T24013] RBP: 00007f551d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1137.023397][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.023416][T24013] R13: 0000000000000000 R14: 00007f551d3b5fa0 R15: 00007fff4de87918 [ 1137.023454][T24013] [ 1138.137950][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1138.844414][T24052] FAULT_INJECTION: forcing a failure. [ 1138.844414][T24052] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.916407][T24052] CPU: 1 UID: 0 PID: 24052 Comm: syz.1.3657 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1138.916463][T24052] Tainted: [U]=USER [ 1138.916473][T24052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1138.916488][T24052] Call Trace: [ 1138.916497][T24052] [ 1138.916507][T24052] dump_stack_lvl+0x16c/0x1f0 [ 1138.916553][T24052] should_fail_ex+0x512/0x640 [ 1138.916593][T24052] ? __kmalloc_noprof+0xbf/0x510 [ 1138.916626][T24052] ? __register_sysctl_table+0xb3/0x1900 [ 1138.916658][T24052] should_failslab+0xc2/0x120 [ 1138.916694][T24052] __kmalloc_noprof+0xd2/0x510 [ 1138.916743][T24052] __register_sysctl_table+0xb3/0x1900 [ 1138.916775][T24052] ? is_module_address+0x5f/0xf0 [ 1138.916815][T24052] ? __pfx___register_sysctl_table+0x10/0x10 [ 1138.916855][T24052] ? is_module_address+0x69/0xf0 [ 1138.916885][T24052] ? register_net_sysctl_sz+0x228/0x3e0 [ 1138.916915][T24052] __devinet_sysctl_register+0x1b9/0x360 [ 1138.916953][T24052] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1138.916984][T24052] ? trace_kmalloc+0x2b/0xd0 [ 1138.917016][T24052] ? devinet_init_net+0xeb/0x910 [ 1138.917049][T24052] ? __asan_memcpy+0x3c/0x60 [ 1138.917074][T24052] devinet_init_net+0x347/0x910 [ 1138.917107][T24052] ? __pfx_devinet_init_net+0x10/0x10 [ 1138.917139][T24052] ops_init+0x1e2/0x5f0 [ 1138.917173][T24052] setup_net+0x21e/0x850 [ 1138.917206][T24052] ? __pfx_setup_net+0x10/0x10 [ 1138.917235][T24052] ? lockdep_init_map_type+0x5c/0x280 [ 1138.917267][T24052] ? __pfx_down_read_killable+0x10/0x10 [ 1138.917294][T24052] ? debug_mutex_init+0x37/0x70 [ 1138.917319][T24052] copy_net_ns+0x2a6/0x5f0 [ 1138.917356][T24052] create_new_namespaces+0x3ea/0xad0 [ 1138.917389][T24052] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1138.917429][T24052] ksys_unshare+0x45b/0xa40 [ 1138.917461][T24052] ? __pfx_ksys_unshare+0x10/0x10 [ 1138.917491][T24052] ? xfd_validate_state+0x5d/0x180 [ 1138.917515][T24052] ? rcu_is_watching+0x12/0xc0 [ 1138.917544][T24052] __x64_sys_unshare+0x31/0x40 [ 1138.917575][T24052] do_syscall_64+0xcd/0x230 [ 1138.917614][T24052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.917637][T24052] RIP: 0033:0x7fe814d8e969 [ 1138.917655][T24052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.917680][T24052] RSP: 002b:00007fe815b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1138.917702][T24052] RAX: ffffffffffffffda RBX: 00007fe814fb5fa0 RCX: 00007fe814d8e969 [ 1138.917718][T24052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1138.917732][T24052] RBP: 00007fe814e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1138.917747][T24052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.917761][T24052] R13: 0000000000000000 R14: 00007fe814fb5fa0 R15: 00007fffa5e91ce8 [ 1138.917790][T24052] [ 1141.830000][T24108] FAULT_INJECTION: forcing a failure. [ 1141.830000][T24108] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.872881][T24108] CPU: 1 UID: 0 PID: 24108 Comm: syz.2.3668 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1141.872929][T24108] Tainted: [U]=USER [ 1141.872938][T24108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.872955][T24108] Call Trace: [ 1141.872964][T24108] [ 1141.872975][T24108] dump_stack_lvl+0x16c/0x1f0 [ 1141.873024][T24108] should_fail_ex+0x512/0x640 [ 1141.873066][T24108] ? __kmalloc_noprof+0xbf/0x510 [ 1141.873101][T24108] ? __register_sysctl_table+0xb3/0x1900 [ 1141.873135][T24108] should_failslab+0xc2/0x120 [ 1141.873181][T24108] __kmalloc_noprof+0xd2/0x510 [ 1141.873222][T24108] __register_sysctl_table+0xb3/0x1900 [ 1141.873257][T24108] ? is_module_address+0x5f/0xf0 [ 1141.873302][T24108] ? __pfx___register_sysctl_table+0x10/0x10 [ 1141.873336][T24108] ? is_module_address+0x69/0xf0 [ 1141.873373][T24108] ? register_net_sysctl_sz+0x228/0x3e0 [ 1141.873404][T24108] ? __asan_memcpy+0x3c/0x60 [ 1141.873434][T24108] nf_log_net_init+0x109/0x450 [ 1141.873473][T24108] ? __pfx_nf_log_net_init+0x10/0x10 [ 1141.873506][T24108] ops_init+0x1e2/0x5f0 [ 1141.873548][T24108] setup_net+0x21e/0x850 [ 1141.873588][T24108] ? __pfx_setup_net+0x10/0x10 [ 1141.873623][T24108] ? lockdep_init_map_type+0x5c/0x280 [ 1141.873665][T24108] ? __pfx_down_read_killable+0x10/0x10 [ 1141.873699][T24108] ? debug_mutex_init+0x37/0x70 [ 1141.873731][T24108] copy_net_ns+0x2a6/0x5f0 [ 1141.873776][T24108] create_new_namespaces+0x3ea/0xad0 [ 1141.873814][T24108] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1141.873845][T24108] ksys_unshare+0x45b/0xa40 [ 1141.873878][T24108] ? __pfx_ksys_unshare+0x10/0x10 [ 1141.873913][T24108] ? rcu_is_watching+0x12/0xc0 [ 1141.873942][T24108] __x64_sys_unshare+0x31/0x40 [ 1141.873974][T24108] do_syscall_64+0xcd/0x230 [ 1141.874012][T24108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.874037][T24108] RIP: 0033:0x7f7d4178e969 [ 1141.874056][T24108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.874080][T24108] RSP: 002b:00007f7d425ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1141.874103][T24108] RAX: ffffffffffffffda RBX: 00007f7d419b5fa0 RCX: 00007f7d4178e969 [ 1141.874120][T24108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1141.874134][T24108] RBP: 00007f7d41810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1141.874149][T24108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.874171][T24108] R13: 0000000000000000 R14: 00007f7d419b5fa0 R15: 00007fffdec66ea8 [ 1141.874201][T24108] [ 1141.896170][T24117] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1143.029672][T24136] can: request_module (can-proto-3) failed. [ 1143.277531][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1144.037492][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1146.541458][T24192] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1146.979908][T24197] mkiss: ax0: crc mode is auto. [ 1148.544218][T24226] ceph: Failed to parse sending metrics switch value 'P^' [ 1148.715988][T24223] can: request_module (can-proto-3) failed. [ 1148.917521][T24216] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 1149.167595][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1149.413150][ T30] audit: type=1800 audit(4294971054.300:56): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3702" name="members" dev="configfs" ino=104250 res=0 errno=0 [ 1152.004553][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1152.171921][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1152.767632][T24304] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 1152.804041][T24303] FAULT_INJECTION: forcing a failure. [ 1152.804041][T24303] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.874671][T24303] CPU: 1 UID: 0 PID: 24303 Comm: syz.2.3716 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1152.874710][T24303] Tainted: [U]=USER [ 1152.874720][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1152.874736][T24303] Call Trace: [ 1152.874746][T24303] [ 1152.874756][T24303] dump_stack_lvl+0x16c/0x1f0 [ 1152.874799][T24303] should_fail_ex+0x512/0x640 [ 1152.874841][T24303] ? __kvmalloc_node_noprof+0x122/0x600 [ 1152.874874][T24303] should_failslab+0xc2/0x120 [ 1152.874910][T24303] __kvmalloc_node_noprof+0x135/0x600 [ 1152.874940][T24303] ? __pfx___mutex_lock+0x10/0x10 [ 1152.874980][T24303] ? traverse.part.0.constprop.0+0x392/0x640 [ 1152.875029][T24303] ? traverse.part.0.constprop.0+0x392/0x640 [ 1152.875068][T24303] traverse.part.0.constprop.0+0x392/0x640 [ 1152.875114][T24303] ? aa_file_perm+0x4c7/0xfb0 [ 1152.875160][T24303] seq_read_iter+0x932/0x12c0 [ 1152.875223][T24303] seq_read+0x39e/0x4e0 [ 1152.875263][T24303] ? __pfx_seq_read+0x10/0x10 [ 1152.875306][T24303] ? get_pid_task+0xfc/0x250 [ 1152.875362][T24303] ? rw_verify_area+0xcf/0x680 [ 1152.875400][T24303] ? __pfx_seq_read+0x10/0x10 [ 1152.875442][T24303] vfs_read+0x1de/0xc70 [ 1152.875476][T24303] ? __pfx_vfs_read+0x10/0x10 [ 1152.875500][T24303] ? find_held_lock+0x2b/0x80 [ 1152.875529][T24303] ? __fget_files+0x204/0x3c0 [ 1152.875559][T24303] ? __fget_files+0x20e/0x3c0 [ 1152.875602][T24303] ? __fget_files+0x1f0/0x3c0 [ 1152.875643][T24303] __x64_sys_pread64+0x1f4/0x250 [ 1152.875679][T24303] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1152.875711][T24303] ? rcu_is_watching+0x12/0xc0 [ 1152.875755][T24303] do_syscall_64+0xcd/0x230 [ 1152.875809][T24303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.875841][T24303] RIP: 0033:0x7f7d4178e969 [ 1152.875866][T24303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.875898][T24303] RSP: 002b:00007f7d425ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1152.875927][T24303] RAX: ffffffffffffffda RBX: 00007f7d419b5fa0 RCX: 00007f7d4178e969 [ 1152.875947][T24303] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000005 [ 1152.875966][T24303] RBP: 00007f7d425ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.875985][T24303] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.876004][T24303] R13: 0000000000000000 R14: 00007f7d419b5fa0 R15: 00007fffdec66ea8 [ 1152.876046][T24303] [ 1153.449871][T24316] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1153.643866][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 1156.137838][T13649] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1156.137879][T13649] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1156.153477][T13649] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1156.153508][T13649] Bluetooth: hci2: Unknown advertising packet type: 0x74 [ 1156.162045][T13649] Bluetooth: hci2: adv larger than maximum supported [ 1156.169542][T13649] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 1156.176438][T13649] Bluetooth: hci2: adv larger than maximum supported [ 1156.183965][T13649] Bluetooth: hci2: adv larger than maximum supported [ 1156.191000][T13649] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1156.255483][T24374] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1156.291533][T24374] CPU: 1 UID: 0 PID: 24374 Comm: syz.0.3732 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1156.291578][T24374] Tainted: [U]=USER [ 1156.291589][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1156.291606][T24374] Call Trace: [ 1156.291616][T24374] [ 1156.291627][T24374] dump_stack_lvl+0x16c/0x1f0 [ 1156.291674][T24374] sysfs_warn_dup+0x7f/0xa0 [ 1156.291718][T24374] sysfs_create_dir_ns+0x24b/0x2b0 [ 1156.291765][T24374] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1156.291808][T24374] ? find_held_lock+0x2b/0x80 [ 1156.291842][T24374] ? nfs_netns_namespace+0xd/0x40 [ 1156.291880][T24374] kobject_add_internal+0x2c4/0x9b0 [ 1156.291916][T24374] kobject_init_and_add+0x11b/0x190 [ 1156.291954][T24374] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1156.292004][T24374] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1156.292045][T24374] nfs_net_init+0x10a/0x300 [ 1156.292086][T24374] ? __pfx_nfs_net_init+0x10/0x10 [ 1156.292126][T24374] ops_init+0x1e2/0x5f0 [ 1156.292168][T24374] setup_net+0x21e/0x850 [ 1156.292210][T24374] ? __pfx_setup_net+0x10/0x10 [ 1156.292245][T24374] ? lockdep_init_map_type+0x5c/0x280 [ 1156.292285][T24374] ? __pfx_down_read_killable+0x10/0x10 [ 1156.292319][T24374] ? debug_mutex_init+0x37/0x70 [ 1156.292351][T24374] copy_net_ns+0x2a6/0x5f0 [ 1156.292395][T24374] create_new_namespaces+0x3ea/0xad0 [ 1156.292436][T24374] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1156.292472][T24374] ksys_unshare+0x45b/0xa40 [ 1156.292512][T24374] ? __pfx_ksys_unshare+0x10/0x10 [ 1156.292547][T24374] ? xfd_validate_state+0x5d/0x180 [ 1156.292580][T24374] ? rcu_is_watching+0x12/0xc0 [ 1156.292618][T24374] __x64_sys_unshare+0x31/0x40 [ 1156.292658][T24374] do_syscall_64+0xcd/0x230 [ 1156.292706][T24374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.292735][T24374] RIP: 0033:0x7f5d8678e969 [ 1156.292757][T24374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.292786][T24374] RSP: 002b:00007f5d875b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1156.292813][T24374] RAX: ffffffffffffffda RBX: 00007f5d869b5fa0 RCX: 00007f5d8678e969 [ 1156.292832][T24374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1156.292849][T24374] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1156.292866][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.292882][T24374] R13: 0000000000000000 R14: 00007f5d869b5fa0 R15: 00007ffc7bd74628 [ 1156.292918][T24374] [ 1156.296286][T24374] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1157.183635][T24389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.633007][T24402] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1157.833610][T24409] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3740'. [ 1157.965970][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 1157.983091][T24418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3740'. [ 1158.008741][T24417] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1158.157745][T24418] caif0: entered promiscuous mode [ 1158.620729][T24434] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1159.560314][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1161.075258][ T9681] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 916 with max blocks 12 with error 117 [ 1161.118477][ T9681] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1161.118477][ T9681] [ 1161.553513][T24494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1166.688878][T24581] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1166.734681][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 1166.773051][T24596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1166.827826][T24596] hsr_slave_1: entered allmulticast mode [ 1167.326208][T24624] snd_aloop snd_aloop.0: control 16781579:65533:61173:'x?F/zF˷fC:0 is already present [ 1168.166967][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1168.697792][ T30] audit: type=1800 audit(4294972096.686:57): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3787" name="lu_gp_id" dev="configfs" ino=107719 res=0 errno=0 [ 1170.416150][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1170.617658][T24659] zswap: compressor not available [ 1171.170745][T24678] mkiss: ax0: crc mode is auto. [ 1172.464079][T24725] netlink: 'syz.3.3800': attribute type 11 has an invalid length. [ 1172.484346][T24725] netlink: 'syz.3.3800': attribute type 11 has an invalid length. [ 1172.499904][T24725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1172.529136][T24725] netlink: 'syz.3.3800': attribute type 11 has an invalid length. [ 1172.547958][T24725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1172.562041][T24725] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1173.204474][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3804'. [ 1174.009999][ T30] audit: type=1800 audit(4294972102.021:58): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3808" name="members" dev="configfs" ino=107266 res=0 errno=0 [ 1175.961774][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1176.859478][T24801] Invalid ELF header magic: != ELF [ 1177.787441][T24831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1178.983802][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.990214][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.914039][T24851] netlink: 30 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1179.934074][T24856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1179.945174][T24856] vcan0: entered promiscuous mode [ 1180.659910][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3829'. [ 1181.399985][T24888] FAULT_INJECTION: forcing a failure. [ 1181.399985][T24888] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.451651][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.3.3832 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1181.451697][T24888] Tainted: [U]=USER [ 1181.451707][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1181.451724][T24888] Call Trace: [ 1181.451734][T24888] [ 1181.451745][T24888] dump_stack_lvl+0x16c/0x1f0 [ 1181.451793][T24888] should_fail_ex+0x512/0x640 [ 1181.451835][T24888] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1181.451867][T24888] should_failslab+0xc2/0x120 [ 1181.451902][T24888] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1181.451931][T24888] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1181.451971][T24888] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1181.452008][T24888] devlink_fmsg_bool_pair_put+0x284/0x2f0 [ 1181.452057][T24888] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 1181.452095][T24888] ? __kasan_kmalloc+0xaa/0xb0 [ 1181.452127][T24888] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 1181.452167][T24888] nsim_dev_dummy_fmsg_put+0xe7/0x1e0 [ 1181.452202][T24888] devlink_health_do_dump+0x243/0x620 [ 1181.452244][T24888] devlink_health_report+0x3c9/0x9c0 [ 1181.452288][T24888] ? __pfx_devlink_health_report+0x10/0x10 [ 1181.452328][T24888] ? _copy_from_user+0x59/0xd0 [ 1181.452359][T24888] nsim_dev_health_break_write+0x166/0x210 [ 1181.452395][T24888] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1181.452439][T24888] full_proxy_write+0x13f/0x200 [ 1181.452475][T24888] vfs_write+0x25c/0x1180 [ 1181.452500][T24888] ? __pfx_full_proxy_write+0x10/0x10 [ 1181.452538][T24888] ? __pfx___mutex_lock+0x10/0x10 [ 1181.452580][T24888] ? __pfx_vfs_write+0x10/0x10 [ 1181.452616][T24888] ? __fget_files+0x20e/0x3c0 [ 1181.452651][T24888] ksys_write+0x12a/0x240 [ 1181.452680][T24888] ? __pfx_ksys_write+0x10/0x10 [ 1181.452705][T24888] ? rcu_is_watching+0x12/0xc0 [ 1181.452741][T24888] do_syscall_64+0xcd/0x230 [ 1181.452785][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.452814][T24888] RIP: 0033:0x7f551d18e969 [ 1181.452838][T24888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.452866][T24888] RSP: 002b:00007f551dfab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1181.452893][T24888] RAX: ffffffffffffffda RBX: 00007f551d3b5fa0 RCX: 00007f551d18e969 [ 1181.452911][T24888] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 1181.452927][T24888] RBP: 00007f551d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1181.452944][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.452961][T24888] R13: 0000000000000000 R14: 00007f551d3b5fa0 R15: 00007fff4de87918 [ 1181.452998][T24888] [ 1181.749419][T24901] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1182.771439][T24923] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1183.521419][T24916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1183.534587][T24916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1183.541032][T24916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1183.561198][T24916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1183.928237][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 1184.317163][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 1184.592006][T24935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1184.666493][T24943] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 1185.088848][T24954] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 1185.193902][T24945] can: request_module (can-proto-3) failed. [ 1185.590338][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 1185.592133][T20353] Bluetooth: hci2: command 0x0c1a tx timeout [ 1185.602647][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 1185.675312][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3851'. [ 1186.238000][T24991] FAULT_INJECTION: forcing a failure. [ 1186.238000][T24991] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.282065][T24991] CPU: 0 UID: 0 PID: 24991 Comm: syz.3.3856 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1186.282107][T24991] Tainted: [U]=USER [ 1186.282118][T24991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1186.282135][T24991] Call Trace: [ 1186.282144][T24991] [ 1186.282156][T24991] dump_stack_lvl+0x16c/0x1f0 [ 1186.282211][T24991] should_fail_ex+0x512/0x640 [ 1186.282255][T24991] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1186.282294][T24991] should_failslab+0xc2/0x120 [ 1186.282331][T24991] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1186.282362][T24991] ? find_held_lock+0x2b/0x80 [ 1186.282390][T24991] ? __d_alloc+0x31/0xaa0 [ 1186.282426][T24991] __d_alloc+0x31/0xaa0 [ 1186.282461][T24991] d_alloc+0x4a/0x1e0 [ 1186.282493][T24991] d_alloc_parallel+0xe3/0x12e0 [ 1186.282548][T24991] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1186.282592][T24991] ? lockdep_init_map_type+0x5c/0x280 [ 1186.282641][T24991] ? lockdep_init_map_type+0x5c/0x280 [ 1186.282694][T24991] __lookup_slow+0x193/0x460 [ 1186.282736][T24991] ? __pfx___lookup_slow+0x10/0x10 [ 1186.282780][T24991] ? __bpf_trace_mm_compaction_end+0x100/0x1e0 [ 1186.282836][T24991] ? __bpf_trace_mm_compaction_end+0x100/0x1e0 [ 1186.282882][T24991] ? d_lookup+0xe7/0x190 [ 1186.282929][T24991] lookup_one_len+0x17f/0x1b0 [ 1186.282967][T24991] ? __pfx_lookup_one_len+0x10/0x10 [ 1186.283007][T24991] ? mntput+0x10/0x90 [ 1186.283053][T24991] start_creating.part.0+0x12f/0x3a0 [ 1186.283101][T24991] debugfs_create_dir+0x6c/0x5f0 [ 1186.283147][T24991] ptp_open+0x307/0x520 [ 1186.283184][T24991] ? __pfx_ptp_open+0x10/0x10 [ 1186.283228][T24991] ? __pfx_ptp_open+0x10/0x10 [ 1186.283259][T24991] posix_clock_open+0x17b/0x290 [ 1186.283291][T24991] ? __pfx_posix_clock_open+0x10/0x10 [ 1186.283320][T24991] chrdev_open+0x234/0x6a0 [ 1186.283351][T24991] ? __pfx_apparmor_file_open+0x10/0x10 [ 1186.283391][T24991] ? __pfx_chrdev_open+0x10/0x10 [ 1186.283438][T24991] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1186.283488][T24991] do_dentry_open+0x741/0x1c10 [ 1186.283519][T24991] ? __pfx_chrdev_open+0x10/0x10 [ 1186.283557][T24991] vfs_open+0x82/0x3f0 [ 1186.283603][T24991] path_openat+0x1e5e/0x2d40 [ 1186.283647][T24991] ? __pfx_path_openat+0x10/0x10 [ 1186.283686][T24991] do_filp_open+0x20b/0x470 [ 1186.283716][T24991] ? __pfx_do_filp_open+0x10/0x10 [ 1186.283772][T24991] ? alloc_fd+0x471/0x7d0 [ 1186.283809][T24991] do_sys_openat2+0x11b/0x1d0 [ 1186.283847][T24991] ? __pfx_do_sys_openat2+0x10/0x10 [ 1186.283900][T24991] __x64_sys_openat+0x174/0x210 [ 1186.283940][T24991] ? __pfx___x64_sys_openat+0x10/0x10 [ 1186.283983][T24991] ? rcu_is_watching+0x12/0xc0 [ 1186.284021][T24991] do_syscall_64+0xcd/0x230 [ 1186.284069][T24991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.284096][T24991] RIP: 0033:0x7f551d18e969 [ 1186.284140][T24991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.284182][T24991] RSP: 002b:00007f551df8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1186.284208][T24991] RAX: ffffffffffffffda RBX: 00007f551d3b6080 RCX: 00007f551d18e969 [ 1186.284227][T24991] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1186.284247][T24991] RBP: 00007f551d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1186.284265][T24991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.284282][T24991] R13: 0000000000000000 R14: 00007f551d3b6080 R15: 00007fff4de87918 [ 1186.284319][T24991] [ 1186.827140][T24985] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1187.051229][T24985] CPU: 0 UID: 0 PID: 24985 Comm: syz.0.3852 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1187.051276][T24985] Tainted: [U]=USER [ 1187.051295][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1187.051311][T24985] Call Trace: [ 1187.051322][T24985] [ 1187.051333][T24985] dump_stack_lvl+0x16c/0x1f0 [ 1187.051384][T24985] sysfs_warn_dup+0x7f/0xa0 [ 1187.051430][T24985] sysfs_create_dir_ns+0x24b/0x2b0 [ 1187.051475][T24985] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1187.051520][T24985] ? find_held_lock+0x2b/0x80 [ 1187.051555][T24985] ? nfs_netns_namespace+0xd/0x40 [ 1187.051594][T24985] kobject_add_internal+0x2c4/0x9b0 [ 1187.051630][T24985] kobject_init_and_add+0x11b/0x190 [ 1187.051661][T24985] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1187.051712][T24985] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1187.051752][T24985] nfs_net_init+0x10a/0x300 [ 1187.051795][T24985] ? __pfx_nfs_net_init+0x10/0x10 [ 1187.051835][T24985] ops_init+0x1e2/0x5f0 [ 1187.051876][T24985] setup_net+0x21e/0x850 [ 1187.051918][T24985] ? __pfx_setup_net+0x10/0x10 [ 1187.051955][T24985] ? lockdep_init_map_type+0x5c/0x280 [ 1187.051995][T24985] ? __pfx_down_read_killable+0x10/0x10 [ 1187.052028][T24985] ? debug_mutex_init+0x37/0x70 [ 1187.052060][T24985] copy_net_ns+0x2a6/0x5f0 [ 1187.052105][T24985] create_new_namespaces+0x3ea/0xad0 [ 1187.052147][T24985] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1187.052183][T24985] ksys_unshare+0x45b/0xa40 [ 1187.052224][T24985] ? __pfx_ksys_unshare+0x10/0x10 [ 1187.052260][T24985] ? xfd_validate_state+0x5d/0x180 [ 1187.052298][T24985] ? rcu_is_watching+0x12/0xc0 [ 1187.052336][T24985] __x64_sys_unshare+0x31/0x40 [ 1187.052376][T24985] do_syscall_64+0xcd/0x230 [ 1187.052423][T24985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.052452][T24985] RIP: 0033:0x7f5d8678e969 [ 1187.052475][T24985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.052503][T24985] RSP: 002b:00007f5d87577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1187.052530][T24985] RAX: ffffffffffffffda RBX: 00007f5d869b6160 RCX: 00007f5d8678e969 [ 1187.052549][T24985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1187.052566][T24985] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1187.052582][T24985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.052598][T24985] R13: 0000000000000000 R14: 00007f5d869b6160 R15: 00007ffc7bd74628 [ 1187.052635][T24985] [ 1187.056360][T24985] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1187.420118][T25000] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1187.674559][T25005] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1187.706190][T25007] sd 0:0:1:0: PR command failed: 1026 [ 1187.711986][T25007] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1187.741470][T25007] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1187.884726][T25002] Setting dangerous option i915.mitigations - tainting kernel [ 1188.594922][T25020] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1189.420303][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1190.260684][T25065] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1191.114884][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3870'. [ 1191.870341][T25108] input: f as /devices/virtual/input/input49 [ 1192.492387][T25124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1192.987918][T25134] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1193.057249][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1193.894408][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1193.965124][T25153] futex_wake_op: syz.0.3887 tries to shift op by 64; fix this program [ 1193.974222][T25156] FAULT_INJECTION: forcing a failure. [ 1193.974222][T25156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.010875][T25156] CPU: 1 UID: 0 PID: 25156 Comm: syz.2.3888 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1194.010922][T25156] Tainted: [U]=USER [ 1194.010950][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1194.010968][T25156] Call Trace: [ 1194.010978][T25156] [ 1194.010989][T25156] dump_stack_lvl+0x16c/0x1f0 [ 1194.011054][T25156] should_fail_ex+0x512/0x640 [ 1194.011099][T25156] _copy_from_user+0x2e/0xd0 [ 1194.011127][T25156] copy_msghdr_from_user+0x98/0x160 [ 1194.011162][T25156] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1194.011237][T25156] ___sys_sendmsg+0xfe/0x1d0 [ 1194.011276][T25156] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.011365][T25156] __sys_sendmsg+0x16d/0x220 [ 1194.011404][T25156] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.011464][T25156] do_syscall_64+0xcd/0x230 [ 1194.011513][T25156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.011543][T25156] RIP: 0033:0x7f7d4178e969 [ 1194.011566][T25156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.011594][T25156] RSP: 002b:00007f7d425ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.011620][T25156] RAX: ffffffffffffffda RBX: 00007f7d419b6080 RCX: 00007f7d4178e969 [ 1194.011639][T25156] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1194.011656][T25156] RBP: 00007f7d425ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.011673][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.011690][T25156] R13: 0000000000000001 R14: 00007f7d419b6080 R15: 00007fffdec66ea8 [ 1194.011729][T25156] [ 1194.179762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.510892][T25160] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1195.056985][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1195.962307][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 1196.085108][T25195] FAULT_INJECTION: forcing a failure. [ 1196.085108][T25195] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.115468][T25196] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1196.171764][T25195] CPU: 1 UID: 0 PID: 25195 Comm: syz.2.3899 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1196.171804][T25195] Tainted: [U]=USER [ 1196.171814][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.171829][T25195] Call Trace: [ 1196.171839][T25195] [ 1196.171850][T25195] dump_stack_lvl+0x16c/0x1f0 [ 1196.171894][T25195] should_fail_ex+0x512/0x640 [ 1196.171935][T25195] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1196.171970][T25195] should_failslab+0xc2/0x120 [ 1196.172005][T25195] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1196.172038][T25195] ? __alloc_skb+0x2b2/0x380 [ 1196.172076][T25195] __alloc_skb+0x2b2/0x380 [ 1196.172106][T25195] ? __pfx___alloc_skb+0x10/0x10 [ 1196.172142][T25195] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1196.172177][T25195] ? __lock_acquire+0xaa4/0x1ba0 [ 1196.172218][T25195] netlink_alloc_large_skb+0x69/0x130 [ 1196.172258][T25195] netlink_sendmsg+0x6a1/0xdd0 [ 1196.172302][T25195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.172354][T25195] ____sys_sendmsg+0xa95/0xc70 [ 1196.172397][T25195] ? copy_msghdr_from_user+0x10a/0x160 [ 1196.172431][T25195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.172491][T25195] ___sys_sendmsg+0x134/0x1d0 [ 1196.172535][T25195] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.172612][T25195] __sys_sendmsg+0x16d/0x220 [ 1196.172646][T25195] ? __pfx___sys_sendmsg+0x10/0x10 [ 1196.172691][T25195] ? rcu_is_watching+0x12/0xc0 [ 1196.172727][T25195] do_syscall_64+0xcd/0x230 [ 1196.172774][T25195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.172801][T25195] RIP: 0033:0x7f7d4178e969 [ 1196.172823][T25195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.172851][T25195] RSP: 002b:00007f7d425ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.172877][T25195] RAX: ffffffffffffffda RBX: 00007f7d419b6080 RCX: 00007f7d4178e969 [ 1196.172895][T25195] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1196.172913][T25195] RBP: 00007f7d425ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.172930][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.172946][T25195] R13: 0000000000000001 R14: 00007f7d419b6080 R15: 00007fffdec66ea8 [ 1196.172982][T25195] [ 1196.946581][T25210] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1197.088169][T25215] random: crng reseeded on system resumption [ 1197.364850][T25220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1197.534760][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1198.320255][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 1198.850616][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1199.319088][T25280] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1199.378678][T25285] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1199.806419][T25289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1200.547546][T25306] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 1201.171778][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1201.776866][T25328] FAULT_INJECTION: forcing a failure. [ 1201.776866][T25328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.801529][T25328] CPU: 0 UID: 0 PID: 25328 Comm: syz.3.3925 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1201.801571][T25328] Tainted: [U]=USER [ 1201.801581][T25328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.801597][T25328] Call Trace: [ 1201.801606][T25328] [ 1201.801616][T25328] dump_stack_lvl+0x16c/0x1f0 [ 1201.801662][T25328] should_fail_ex+0x512/0x640 [ 1201.801708][T25328] _copy_from_iter+0x2a4/0x15b0 [ 1201.801755][T25328] ? __alloc_skb+0x200/0x380 [ 1201.801789][T25328] ? __pfx__copy_from_iter+0x10/0x10 [ 1201.801836][T25328] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1201.801873][T25328] ? __lock_acquire+0xaa4/0x1ba0 [ 1201.801921][T25328] netlink_sendmsg+0x829/0xdd0 [ 1201.801966][T25328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.802018][T25328] ____sys_sendmsg+0xa95/0xc70 [ 1201.802069][T25328] ? copy_msghdr_from_user+0x10a/0x160 [ 1201.802104][T25328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.802162][T25328] ___sys_sendmsg+0x134/0x1d0 [ 1201.802199][T25328] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.802278][T25328] __sys_sendmsg+0x16d/0x220 [ 1201.802315][T25328] ? __pfx___sys_sendmsg+0x10/0x10 [ 1201.802374][T25328] do_syscall_64+0xcd/0x230 [ 1201.802418][T25328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.802447][T25328] RIP: 0033:0x7f551d18e969 [ 1201.802469][T25328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.802497][T25328] RSP: 002b:00007f551df8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.802522][T25328] RAX: ffffffffffffffda RBX: 00007f551d3b6080 RCX: 00007f551d18e969 [ 1201.802541][T25328] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1201.802557][T25328] RBP: 00007f551df8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.802573][T25328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.802589][T25328] R13: 0000000000000001 R14: 00007f551d3b6080 R15: 00007fff4de87918 [ 1201.802623][T25328] [ 1202.008743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.586079][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3928'. [ 1203.584541][T25335] kexec: Could not allocate control_code_buffer [ 1203.622672][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1203.956147][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3933'. [ 1204.115090][T25380] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1204.130627][T25380] CPU: 1 UID: 0 PID: 25380 Comm: syz.0.3934 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1204.130668][T25380] Tainted: [U]=USER [ 1204.130678][T25380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1204.130694][T25380] Call Trace: [ 1204.130703][T25380] [ 1204.130714][T25380] dump_stack_lvl+0x16c/0x1f0 [ 1204.130760][T25380] sysfs_warn_dup+0x7f/0xa0 [ 1204.130812][T25380] sysfs_create_dir_ns+0x24b/0x2b0 [ 1204.130855][T25380] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1204.130898][T25380] ? find_held_lock+0x2b/0x80 [ 1204.130933][T25380] ? nfs_netns_namespace+0xd/0x40 [ 1204.130970][T25380] kobject_add_internal+0x2c4/0x9b0 [ 1204.131004][T25380] kobject_init_and_add+0x11b/0x190 [ 1204.131035][T25380] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1204.131084][T25380] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1204.131124][T25380] nfs_net_init+0x10a/0x300 [ 1204.131166][T25380] ? __pfx_nfs_net_init+0x10/0x10 [ 1204.131204][T25380] ops_init+0x1e2/0x5f0 [ 1204.131244][T25380] setup_net+0x21e/0x850 [ 1204.131284][T25380] ? __pfx_setup_net+0x10/0x10 [ 1204.131319][T25380] ? lockdep_init_map_type+0x5c/0x280 [ 1204.131357][T25380] ? __pfx_down_read_killable+0x10/0x10 [ 1204.131390][T25380] ? debug_mutex_init+0x37/0x70 [ 1204.131421][T25380] copy_net_ns+0x2a6/0x5f0 [ 1204.131464][T25380] create_new_namespaces+0x3ea/0xad0 [ 1204.131504][T25380] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1204.131542][T25380] ksys_unshare+0x45b/0xa40 [ 1204.131578][T25380] ? __pfx_ksys_unshare+0x10/0x10 [ 1204.131615][T25380] ? xfd_validate_state+0x5d/0x180 [ 1204.131643][T25380] ? rcu_is_watching+0x12/0xc0 [ 1204.131683][T25380] __x64_sys_unshare+0x31/0x40 [ 1204.131720][T25380] do_syscall_64+0xcd/0x230 [ 1204.131764][T25380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.131792][T25380] RIP: 0033:0x7f5d8678e969 [ 1204.131820][T25380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.131846][T25380] RSP: 002b:00007f5d875b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1204.131871][T25380] RAX: ffffffffffffffda RBX: 00007f5d869b5fa0 RCX: 00007f5d8678e969 [ 1204.131888][T25380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1204.131904][T25380] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1204.131920][T25380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.131935][T25380] R13: 0000000000000000 R14: 00007f5d869b5fa0 R15: 00007ffc7bd74628 [ 1204.131971][T25380] [ 1204.132193][T25380] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1204.310390][T25386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3935'. [ 1204.916163][T25394] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1205.087763][T25406] FAULT_INJECTION: forcing a failure. [ 1205.087763][T25406] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.147193][T25406] CPU: 0 UID: 0 PID: 25406 Comm: syz.1.3937 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1205.147224][T25406] Tainted: [U]=USER [ 1205.147231][T25406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.147243][T25406] Call Trace: [ 1205.147250][T25406] [ 1205.147258][T25406] dump_stack_lvl+0x16c/0x1f0 [ 1205.147293][T25406] should_fail_ex+0x512/0x640 [ 1205.147328][T25406] should_failslab+0xc2/0x120 [ 1205.147354][T25406] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1205.147379][T25406] ? skb_clone+0x190/0x3f0 [ 1205.147408][T25406] skb_clone+0x190/0x3f0 [ 1205.147435][T25406] netlink_deliver_tap+0xabd/0xd30 [ 1205.147467][T25406] netlink_unicast+0x5df/0x7f0 [ 1205.147497][T25406] ? __pfx_netlink_unicast+0x10/0x10 [ 1205.147524][T25406] ? __lock_acquire+0xaa4/0x1ba0 [ 1205.147559][T25406] netlink_sendmsg+0x8d1/0xdd0 [ 1205.147591][T25406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.147630][T25406] ____sys_sendmsg+0xa95/0xc70 [ 1205.147680][T25406] ? copy_msghdr_from_user+0x10a/0x160 [ 1205.147706][T25406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1205.147757][T25406] ___sys_sendmsg+0x134/0x1d0 [ 1205.147786][T25406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.147848][T25406] __sys_sendmsg+0x16d/0x220 [ 1205.147876][T25406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1205.147936][T25406] do_syscall_64+0xcd/0x230 [ 1205.147971][T25406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.147992][T25406] RIP: 0033:0x7fe814d8e969 [ 1205.148008][T25406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.148029][T25406] RSP: 002b:00007fe815b58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.148047][T25406] RAX: ffffffffffffffda RBX: 00007fe814fb6080 RCX: 00007fe814d8e969 [ 1205.148061][T25406] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1205.148074][T25406] RBP: 00007fe815b58090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.148086][T25406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.148099][T25406] R13: 0000000000000001 R14: 00007fe814fb6080 R15: 00007fffa5e91ce8 [ 1205.148125][T25406] [ 1205.148157][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1207.200790][T25452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 1207.824827][T25450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1207.870196][T25450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1207.942919][T25450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1207.949008][T25450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1208.126281][T25477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3947'. [ 1208.220759][T25482] FAULT_INJECTION: forcing a failure. [ 1208.220759][T25482] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.235213][T25482] CPU: 0 UID: 0 PID: 25482 Comm: syz.2.3948 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1208.235257][T25482] Tainted: [U]=USER [ 1208.235266][T25482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.235284][T25482] Call Trace: [ 1208.235295][T25482] [ 1208.235306][T25482] dump_stack_lvl+0x16c/0x1f0 [ 1208.235353][T25482] should_fail_ex+0x512/0x640 [ 1208.235395][T25482] ? __kmalloc_noprof+0xbf/0x510 [ 1208.235431][T25482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1208.235486][T25482] should_failslab+0xc2/0x120 [ 1208.235524][T25482] __kmalloc_noprof+0xd2/0x510 [ 1208.235561][T25482] ? kasan_quarantine_put+0x10a/0x240 [ 1208.235616][T25482] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1208.235677][T25482] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1208.235730][T25482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.235781][T25482] ? trace_cap_capable+0x18d/0x200 [ 1208.235828][T25482] ? bpf_lsm_capable+0x9/0x10 [ 1208.235862][T25482] ? security_capable+0x7e/0x260 [ 1208.235898][T25482] ? ns_capable+0xd7/0x110 [ 1208.235939][T25482] genl_rcv_msg+0x55c/0x800 [ 1208.235995][T25482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.236043][T25482] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1208.236078][T25482] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1208.236126][T25482] ? __pfx_nl80211_del_interface+0x10/0x10 [ 1208.236161][T25482] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1208.236211][T25482] ? __lock_acquire+0xaa4/0x1ba0 [ 1208.236261][T25482] netlink_rcv_skb+0x16a/0x440 [ 1208.236305][T25482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.236359][T25482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.236425][T25482] ? __pfx_down_read+0x10/0x10 [ 1208.236467][T25482] ? netlink_deliver_tap+0x1ae/0xd30 [ 1208.236516][T25482] genl_rcv+0x28/0x40 [ 1208.236560][T25482] netlink_unicast+0x53d/0x7f0 [ 1208.236611][T25482] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.236651][T25482] ? __lock_acquire+0xaa4/0x1ba0 [ 1208.236702][T25482] netlink_sendmsg+0x8d1/0xdd0 [ 1208.236765][T25482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.236825][T25482] ____sys_sendmsg+0xa95/0xc70 [ 1208.236878][T25482] ? copy_msghdr_from_user+0x10a/0x160 [ 1208.236912][T25482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.236972][T25482] ___sys_sendmsg+0x134/0x1d0 [ 1208.237007][T25482] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.237089][T25482] __sys_sendmsg+0x16d/0x220 [ 1208.237123][T25482] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.237182][T25482] do_syscall_64+0xcd/0x230 [ 1208.237226][T25482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.237255][T25482] RIP: 0033:0x7f7d4178e969 [ 1208.237276][T25482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.237304][T25482] RSP: 002b:00007f7d425ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.237330][T25482] RAX: ffffffffffffffda RBX: 00007f7d419b6080 RCX: 00007f7d4178e969 [ 1208.237348][T25482] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1208.237365][T25482] RBP: 00007f7d425ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.237382][T25482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.237399][T25482] R13: 0000000000000001 R14: 00007f7d419b6080 R15: 00007fffdec66ea8 [ 1208.237436][T25482] [ 1209.347655][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1209.500193][T25500] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1209.606872][T25500] FAULT_INJECTION: forcing a failure. [ 1209.606872][T25500] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.623076][T25499] Invalid ELF header magic: != ELF [ 1209.668811][T25500] CPU: 1 UID: 0 PID: 25500 Comm: syz.1.3951 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1209.668853][T25500] Tainted: [U]=USER [ 1209.668861][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1209.668873][T25500] Call Trace: [ 1209.668881][T25500] [ 1209.668889][T25500] dump_stack_lvl+0x16c/0x1f0 [ 1209.668926][T25500] should_fail_ex+0x512/0x640 [ 1209.668959][T25500] ? __kvmalloc_node_noprof+0x122/0x600 [ 1209.668985][T25500] should_failslab+0xc2/0x120 [ 1209.669013][T25500] __kvmalloc_node_noprof+0x135/0x600 [ 1209.669037][T25500] ? alloc_netdev_mqs+0xfbe/0x1570 [ 1209.669070][T25500] ? alloc_netdev_mqs+0xfbe/0x1570 [ 1209.669096][T25500] alloc_netdev_mqs+0xfbe/0x1570 [ 1209.669128][T25500] ? __pfx_loopback_net_init+0x10/0x10 [ 1209.669158][T25500] loopback_net_init+0x38/0x170 [ 1209.669187][T25500] ? __pfx_loopback_net_init+0x10/0x10 [ 1209.669215][T25500] ops_init+0x1e2/0x5f0 [ 1209.669246][T25500] setup_net+0x21e/0x850 [ 1209.669277][T25500] ? __pfx_setup_net+0x10/0x10 [ 1209.669304][T25500] ? lockdep_init_map_type+0x5c/0x280 [ 1209.669334][T25500] ? __pfx_down_read_killable+0x10/0x10 [ 1209.669359][T25500] ? debug_mutex_init+0x37/0x70 [ 1209.669383][T25500] copy_net_ns+0x2a6/0x5f0 [ 1209.669415][T25500] create_new_namespaces+0x3ea/0xad0 [ 1209.669445][T25500] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1209.669471][T25500] ksys_unshare+0x45b/0xa40 [ 1209.669500][T25500] ? __pfx_ksys_unshare+0x10/0x10 [ 1209.669527][T25500] ? xfd_validate_state+0x5d/0x180 [ 1209.669548][T25500] ? rcu_is_watching+0x12/0xc0 [ 1209.669573][T25500] __x64_sys_unshare+0x31/0x40 [ 1209.669602][T25500] do_syscall_64+0xcd/0x230 [ 1209.669644][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.669665][T25500] RIP: 0033:0x7fe814d8e969 [ 1209.669682][T25500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.669703][T25500] RSP: 002b:00007fe815b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1209.669723][T25500] RAX: ffffffffffffffda RBX: 00007fe814fb6080 RCX: 00007fe814d8e969 [ 1209.669737][T25500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1209.669750][T25500] RBP: 00007fe814e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1209.669764][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.669776][T25500] R13: 0000000000000000 R14: 00007fe814fb6080 R15: 00007fffa5e91ce8 [ 1209.669803][T25500] [ 1210.022906][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.023035][T20353] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.053108][T20353] Bluetooth: hci2: command 0x0c1a tx timeout [ 1210.059465][T20353] Bluetooth: hci3: command 0x0c1a tx timeout [ 1210.068286][T25513] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 1210.787485][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1211.042603][T25535] program syz.1.3958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1211.496866][T25529] FAULT_INJECTION: forcing a failure. [ 1211.496866][T25529] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.580665][T25529] CPU: 1 UID: 0 PID: 25529 Comm: syz.2.3957 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1211.580711][T25529] Tainted: [U]=USER [ 1211.580723][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1211.580741][T25529] Call Trace: [ 1211.580752][T25529] [ 1211.580763][T25529] dump_stack_lvl+0x16c/0x1f0 [ 1211.580812][T25529] should_fail_ex+0x512/0x640 [ 1211.580859][T25529] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1211.580898][T25529] should_failslab+0xc2/0x120 [ 1211.580935][T25529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1211.580971][T25529] ? security_file_alloc+0x34/0x2b0 [ 1211.581016][T25529] security_file_alloc+0x34/0x2b0 [ 1211.581059][T25529] init_file+0x93/0x4c0 [ 1211.581095][T25529] alloc_empty_file+0x73/0x1e0 [ 1211.581134][T25529] alloc_file_pseudo+0x13a/0x230 [ 1211.581175][T25529] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1211.581216][T25529] ? alloc_fd+0x471/0x7d0 [ 1211.581247][T25529] sock_alloc_file+0x50/0x210 [ 1211.581287][T25529] __sys_socket+0x1c0/0x260 [ 1211.581314][T25529] ? __pfx___sys_socket+0x10/0x10 [ 1211.581343][T25529] ? rcu_is_watching+0x12/0xc0 [ 1211.581379][T25529] __x64_sys_socket+0x72/0xb0 [ 1211.581403][T25529] ? lockdep_hardirqs_on+0x7c/0x110 [ 1211.581453][T25529] do_syscall_64+0xcd/0x230 [ 1211.581499][T25529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.581528][T25529] RIP: 0033:0x7f7d4178e969 [ 1211.581550][T25529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.581581][T25529] RSP: 002b:00007f7d425ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1211.581609][T25529] RAX: ffffffffffffffda RBX: 00007f7d419b5fa0 RCX: 00007f7d4178e969 [ 1211.581628][T25529] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1211.581646][T25529] RBP: 00007f7d41810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1211.581663][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.581681][T25529] R13: 0000000000000000 R14: 00007f7d419b5fa0 R15: 00007fffdec66ea8 [ 1211.581717][T25529] [ 1212.127299][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1212.137027][T25552] FAULT_INJECTION: forcing a failure. [ 1212.137027][T25552] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.222605][T25552] CPU: 1 UID: 0 PID: 25552 Comm: syz.1.3960 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1212.222645][T25552] Tainted: [U]=USER [ 1212.222655][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1212.222671][T25552] Call Trace: [ 1212.222680][T25552] [ 1212.222691][T25552] dump_stack_lvl+0x16c/0x1f0 [ 1212.222735][T25552] should_fail_ex+0x512/0x640 [ 1212.222777][T25552] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1212.222814][T25552] should_failslab+0xc2/0x120 [ 1212.222850][T25552] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1212.222883][T25552] ? __alloc_skb+0x2b2/0x380 [ 1212.222916][T25552] ? bpf_lsm_capable+0x9/0x10 [ 1212.222951][T25552] __alloc_skb+0x2b2/0x380 [ 1212.222982][T25552] ? __pfx___alloc_skb+0x10/0x10 [ 1212.223014][T25552] ? genl_rcv_msg+0x470/0x800 [ 1212.223054][T25552] ? genl_rcv_msg+0x4bb/0x800 [ 1212.223104][T25552] netlink_ack+0x15d/0xb80 [ 1212.223142][T25552] ? __lock_acquire+0xaa4/0x1ba0 [ 1212.223186][T25552] netlink_rcv_skb+0x347/0x440 [ 1212.223224][T25552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.223270][T25552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1212.223327][T25552] ? __pfx_down_read+0x10/0x10 [ 1212.223355][T25552] ? netlink_deliver_tap+0x1ae/0xd30 [ 1212.223403][T25552] genl_rcv+0x28/0x40 [ 1212.223440][T25552] netlink_unicast+0x53d/0x7f0 [ 1212.223482][T25552] ? __pfx_netlink_unicast+0x10/0x10 [ 1212.223518][T25552] ? __lock_acquire+0xaa4/0x1ba0 [ 1212.223563][T25552] netlink_sendmsg+0x8d1/0xdd0 [ 1212.223608][T25552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.223661][T25552] ____sys_sendmsg+0xa95/0xc70 [ 1212.223705][T25552] ? copy_msghdr_from_user+0x10a/0x160 [ 1212.223740][T25552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.223801][T25552] ___sys_sendmsg+0x134/0x1d0 [ 1212.223838][T25552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.223920][T25552] __sys_sendmsg+0x16d/0x220 [ 1212.223955][T25552] ? __pfx___sys_sendmsg+0x10/0x10 [ 1212.224014][T25552] do_syscall_64+0xcd/0x230 [ 1212.224059][T25552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.224086][T25552] RIP: 0033:0x7fe814d8e969 [ 1212.224108][T25552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.224135][T25552] RSP: 002b:00007fe815b58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.224161][T25552] RAX: ffffffffffffffda RBX: 00007fe814fb6080 RCX: 00007fe814d8e969 [ 1212.224179][T25552] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1212.224197][T25552] RBP: 00007fe815b58090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.224214][T25552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.224230][T25552] R13: 0000000000000001 R14: 00007fe814fb6080 R15: 00007fffa5e91ce8 [ 1212.224266][T25552] [ 1213.978628][T25578] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1214.454915][T25581] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1214.466000][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 1215.044577][T25606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1216.932823][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1217.454523][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1217.644374][T25641] KVM: debugfs: duplicate directory 25641-4 [ 1218.781131][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 1218.806759][T25675] FAULT_INJECTION: forcing a failure. [ 1218.806759][T25675] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.840320][T25675] CPU: 1 UID: 0 PID: 25675 Comm: syz.0.3983 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1218.840366][T25675] Tainted: [U]=USER [ 1218.840377][T25675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1218.840397][T25675] Call Trace: [ 1218.840407][T25675] [ 1218.840420][T25675] dump_stack_lvl+0x16c/0x1f0 [ 1218.840470][T25675] should_fail_ex+0x512/0x640 [ 1218.840525][T25675] should_failslab+0xc2/0x120 [ 1218.840566][T25675] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1218.840604][T25675] ? skb_clone+0x190/0x3f0 [ 1218.840651][T25675] skb_clone+0x190/0x3f0 [ 1218.840693][T25675] netlink_deliver_tap+0xabd/0xd30 [ 1218.840755][T25675] netlink_unicast+0x6b2/0x7f0 [ 1218.840807][T25675] ? __pfx_netlink_unicast+0x10/0x10 [ 1218.840859][T25675] ? genl_rcv_msg+0x4bb/0x800 [ 1218.840910][T25675] netlink_ack+0x696/0xb80 [ 1218.840960][T25675] netlink_rcv_skb+0x347/0x440 [ 1218.840998][T25675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1218.841042][T25675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1218.841097][T25675] ? __pfx_down_read+0x10/0x10 [ 1218.841127][T25675] ? netlink_deliver_tap+0x1ae/0xd30 [ 1218.841169][T25675] genl_rcv+0x28/0x40 [ 1218.841206][T25675] netlink_unicast+0x53d/0x7f0 [ 1218.841248][T25675] ? __pfx_netlink_unicast+0x10/0x10 [ 1218.841282][T25675] ? __lock_acquire+0xaa4/0x1ba0 [ 1218.841327][T25675] netlink_sendmsg+0x8d1/0xdd0 [ 1218.841374][T25675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.841426][T25675] ____sys_sendmsg+0xa95/0xc70 [ 1218.841468][T25675] ? copy_msghdr_from_user+0x10a/0x160 [ 1218.841502][T25675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.841560][T25675] ___sys_sendmsg+0x134/0x1d0 [ 1218.841595][T25675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.841670][T25675] __sys_sendmsg+0x16d/0x220 [ 1218.841699][T25675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1218.841748][T25675] do_syscall_64+0xcd/0x230 [ 1218.841786][T25675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.841815][T25675] RIP: 0033:0x7f5d8678e969 [ 1218.841833][T25675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.841856][T25675] RSP: 002b:00007f5d87598038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.841877][T25675] RAX: ffffffffffffffda RBX: 00007f5d869b6080 RCX: 00007f5d8678e969 [ 1218.841893][T25675] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000007 [ 1218.841907][T25675] RBP: 00007f5d87598090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.841921][T25675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.841935][T25675] R13: 0000000000000001 R14: 00007f5d869b6080 R15: 00007ffc7bd74628 [ 1218.841964][T25675] [ 1220.205364][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'. [ 1220.977496][T25710] ima: policy update failed [ 1220.994217][ T30] audit: type=1802 audit(4294972149.222:59): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3991" res=0 errno=0 [ 1221.092735][T25713] FAULT_INJECTION: forcing a failure. [ 1221.092735][T25713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1221.190503][T25713] CPU: 1 UID: 0 PID: 25713 Comm: syz.0.3990 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1221.190546][T25713] Tainted: [U]=USER [ 1221.190555][T25713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1221.190571][T25713] Call Trace: [ 1221.190582][T25713] [ 1221.190594][T25713] dump_stack_lvl+0x16c/0x1f0 [ 1221.190644][T25713] should_fail_ex+0x512/0x640 [ 1221.190693][T25713] should_fail_alloc_page+0xe7/0x130 [ 1221.190731][T25713] prepare_alloc_pages+0x3c2/0x610 [ 1221.190779][T25713] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1221.190812][T25713] ? __lock_acquire+0xaa4/0x1ba0 [ 1221.190852][T25713] ? find_held_lock+0x2b/0x80 [ 1221.190881][T25713] ? psi_task_switch+0x2c1/0x8e0 [ 1221.190919][T25713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1221.190951][T25713] ? find_held_lock+0x2b/0x80 [ 1221.190979][T25713] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1221.191012][T25713] ? rcu_is_watching+0x12/0xc0 [ 1221.191043][T25713] ? finish_task_switch.isra.0+0x221/0xc10 [ 1221.191073][T25713] ? rcu_is_watching+0x12/0xc0 [ 1221.191100][T25713] ? trace_sched_exit_tp+0xde/0x130 [ 1221.191136][T25713] ? __schedule+0x1186/0x5de0 [ 1221.191172][T25713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1221.191212][T25713] ? policy_nodemask+0xea/0x4e0 [ 1221.191248][T25713] alloc_pages_mpol+0x1fb/0x550 [ 1221.191284][T25713] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1221.191330][T25713] alloc_pages_noprof+0x131/0x390 [ 1221.191382][T25713] __pmd_alloc+0x3f/0x870 [ 1221.191424][T25713] ? find_held_lock+0x2b/0x80 [ 1221.191456][T25713] __handle_mm_fault+0x948/0x2a40 [ 1221.191498][T25713] ? __pfx___handle_mm_fault+0x10/0x10 [ 1221.191550][T25713] ? find_vma+0xbf/0x140 [ 1221.191590][T25713] ? __pfx_find_vma+0x10/0x10 [ 1221.191637][T25713] handle_mm_fault+0x3fe/0xad0 [ 1221.191673][T25713] do_user_addr_fault+0x7a6/0x1370 [ 1221.191707][T25713] ? rcu_is_watching+0x12/0xc0 [ 1221.191739][T25713] exc_page_fault+0x5c/0xc0 [ 1221.191781][T25713] asm_exc_page_fault+0x26/0x30 [ 1221.191810][T25713] RIP: 0010:__put_user_4+0xd/0x20 [ 1221.191853][T25713] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 54 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1221.191882][T25713] RSP: 0018:ffffc9000d9e7e28 EFLAGS: 00050246 [ 1221.191905][T25713] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000000000 [ 1221.191922][T25713] RDX: 0000000000080000 RSI: ffffffff893b4664 RDI: ffffffff8bf48da0 [ 1221.191939][T25713] RBP: 1ffff92001b3cfc9 R08: 24349432358cc39f R09: 0000000000000001 [ 1221.191957][T25713] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000006 [ 1221.191973][T25713] R13: 0000000000000007 R14: 0000000000000003 R15: dffffc0000000000 [ 1221.192002][T25713] ? __sys_socketpair+0x114/0x5a0 [ 1221.192037][T25713] __sys_socketpair+0x120/0x5a0 [ 1221.192067][T25713] ? __pfx___sys_socketpair+0x10/0x10 [ 1221.192097][T25713] ? xfd_validate_state+0x5d/0x180 [ 1221.192127][T25713] ? rcu_is_watching+0x12/0xc0 [ 1221.192160][T25713] __x64_sys_socketpair+0x96/0x100 [ 1221.192186][T25713] ? lockdep_hardirqs_on+0x7c/0x110 [ 1221.192227][T25713] do_syscall_64+0xcd/0x230 [ 1221.192273][T25713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.192300][T25713] RIP: 0033:0x7f5d8678e969 [ 1221.192322][T25713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.192361][T25713] RSP: 002b:00007f5d875b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1221.192388][T25713] RAX: ffffffffffffffda RBX: 00007f5d869b5fa0 RCX: 00007f5d8678e969 [ 1221.192408][T25713] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000001 [ 1221.192427][T25713] RBP: 00007f5d86810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1221.192445][T25713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.192463][T25713] R13: 0000000000000000 R14: 00007f5d869b5fa0 R15: 00007ffc7bd74628 [ 1221.192502][T25713] [ 1221.362646][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'. [ 1221.616447][T25724] FAULT_INJECTION: forcing a failure. [ 1221.616447][T25724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.679497][T25724] CPU: 0 UID: 0 PID: 25724 Comm: syz.1.3993 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1221.679541][T25724] Tainted: [U]=USER [ 1221.679551][T25724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1221.679571][T25724] Call Trace: [ 1221.679581][T25724] [ 1221.679592][T25724] dump_stack_lvl+0x16c/0x1f0 [ 1221.679641][T25724] should_fail_ex+0x512/0x640 [ 1221.679691][T25724] _copy_to_user+0x32/0xd0 [ 1221.679721][T25724] simple_read_from_buffer+0xcb/0x170 [ 1221.679766][T25724] proc_fail_nth_read+0x197/0x270 [ 1221.679810][T25724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.679856][T25724] ? rw_verify_area+0xcf/0x680 [ 1221.679897][T25724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.679941][T25724] vfs_read+0x1de/0xc70 [ 1221.679974][T25724] ? __pfx___mutex_lock+0x10/0x10 [ 1221.680018][T25724] ? __pfx_vfs_read+0x10/0x10 [ 1221.680057][T25724] ? __fget_files+0x20e/0x3c0 [ 1221.680081][T25724] ? rcu_watching_snap_stopped_since+0x60/0x110 [ 1221.680124][T25724] ksys_read+0x12a/0x240 [ 1221.680153][T25724] ? __pfx_ksys_read+0x10/0x10 [ 1221.680178][T25724] ? rcu_is_watching+0x12/0xc0 [ 1221.680217][T25724] do_syscall_64+0xcd/0x230 [ 1221.680265][T25724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.680296][T25724] RIP: 0033:0x7fe814d8d37c [ 1221.680328][T25724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1221.680355][T25724] RSP: 002b:00007fe815b58030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.680383][T25724] RAX: ffffffffffffffda RBX: 00007fe814fb6080 RCX: 00007fe814d8d37c [ 1221.680401][T25724] RDX: 000000000000000f RSI: 00007fe815b580a0 RDI: 0000000000000008 [ 1221.680431][T25724] RBP: 00007fe815b58090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.680448][T25724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.680464][T25724] R13: 0000000000000001 R14: 00007fe814fb6080 R15: 00007fffa5e91ce8 [ 1221.680499][T25724] [ 1222.729407][T25728] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 1222.776698][T25728] CPU: 0 UID: 0 PID: 25728 Comm: syz.1.3994 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1222.776749][T25728] Tainted: [U]=USER [ 1222.776761][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1222.776781][T25728] Call Trace: [ 1222.776805][T25728] [ 1222.776817][T25728] dump_stack_lvl+0x16c/0x1f0 [ 1222.776869][T25728] sysfs_warn_dup+0x7f/0xa0 [ 1222.776920][T25728] sysfs_create_dir_ns+0x24b/0x2b0 [ 1222.776969][T25728] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1222.777027][T25728] ? find_held_lock+0x2b/0x80 [ 1222.777062][T25728] ? nfs_netns_namespace+0xd/0x40 [ 1222.777099][T25728] kobject_add_internal+0x2c4/0x9b0 [ 1222.777134][T25728] kobject_init_and_add+0x11b/0x190 [ 1222.777165][T25728] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1222.777215][T25728] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 1222.777256][T25728] nfs_net_init+0x10a/0x300 [ 1222.777300][T25728] ? __pfx_nfs_net_init+0x10/0x10 [ 1222.777340][T25728] ops_init+0x1e2/0x5f0 [ 1222.777381][T25728] setup_net+0x21e/0x850 [ 1222.777438][T25728] ? __pfx_setup_net+0x10/0x10 [ 1222.777482][T25728] ? lockdep_init_map_type+0x5c/0x280 [ 1222.777521][T25728] ? __pfx_down_read_killable+0x10/0x10 [ 1222.777554][T25728] ? debug_mutex_init+0x37/0x70 [ 1222.777595][T25728] copy_net_ns+0x2a6/0x5f0 [ 1222.777636][T25728] create_new_namespaces+0x3ea/0xad0 [ 1222.777675][T25728] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1222.777712][T25730] hugetlbfs: syz.1.3994 (25730): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1222.777709][T25728] ksys_unshare+0x45b/0xa40 [ 1222.777749][T25728] ? __pfx_ksys_unshare+0x10/0x10 [ 1222.777806][T25728] ? xfd_validate_state+0x5d/0x180 [ 1222.777847][T25728] ? rcu_is_watching+0x12/0xc0 [ 1222.777881][T25728] __x64_sys_unshare+0x31/0x40 [ 1222.777914][T25728] do_syscall_64+0xcd/0x230 [ 1222.777953][T25728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.777979][T25728] RIP: 0033:0x7fe814d8e969 [ 1222.778000][T25728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.778028][T25728] RSP: 002b:00007fe815b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1222.778053][T25728] RAX: ffffffffffffffda RBX: 00007fe814fb5fa0 RCX: 00007fe814d8e969 [ 1222.778073][T25728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1222.778093][T25728] RBP: 00007fe814e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1222.778114][T25728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.778134][T25728] R13: 0000000000000000 R14: 00007fe814fb5fa0 R15: 00007fffa5e91ce8 [ 1222.778175][T25728] [ 1222.778210][T25728] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 1223.100516][T25744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1223.660474][T25747] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1224.272994][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4000'. [ 1224.417113][T25754] [ 1224.419458][T25754] ====================================================== [ 1224.426470][T25754] WARNING: possible circular locking dependency detected [ 1224.433484][T25754] 6.15.0-syzkaller #0 Tainted: G U [ 1224.440061][T25754] ------------------------------------------------------ [ 1224.447067][T25754] syz.2.3999/25754 is trying to acquire lock: [ 1224.453117][T25754] ffff8880264f0f98 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 1224.462702][T25754] [ 1224.462702][T25754] but task is already holding lock: [ 1224.470056][T25754] ffff8880264f0a68 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1224.481301][T25754] [ 1224.481301][T25754] which lock already depends on the new lock. [ 1224.481301][T25754] [ 1224.491696][T25754] [ 1224.491696][T25754] the existing dependency chain (in reverse order) is: [ 1224.500697][T25754] [ 1224.500697][T25754] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1224.509305][T25754] blk_alloc_queue+0x619/0x760 [ 1224.514598][T25754] blk_mq_alloc_queue+0x179/0x290 [ 1224.520161][T25754] __blk_mq_alloc_disk+0x29/0x120 [ 1224.525737][T25754] nbd_dev_add+0x49d/0xbb0 [ 1224.530715][T25754] nbd_init+0x181/0x320 [ 1224.535463][T25754] do_one_initcall+0x120/0x6e0 [ 1224.540805][T25754] kernel_init_freeable+0x5c2/0x900 [ 1224.546581][T25754] kernel_init+0x1c/0x2b0 [ 1224.551482][T25754] ret_from_fork+0x48/0x80 [ 1224.556445][T25754] ret_from_fork_asm+0x1a/0x30 [ 1224.561764][T25754] [ 1224.561764][T25754] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1224.568987][T25754] fs_reclaim_acquire+0x102/0x150 [ 1224.574552][T25754] kmem_cache_alloc_noprof+0x53/0x3b0 [ 1224.580456][T25754] __kernfs_new_node+0xd2/0x8a0 [ 1224.585838][T25754] kernfs_new_node+0x13c/0x1e0 [ 1224.591138][T25754] kernfs_create_dir_ns+0x4c/0x1a0 [ 1224.596793][T25754] sysfs_create_dir_ns+0x13a/0x2b0 [ 1224.602474][T25754] kobject_add_internal+0x2c4/0x9b0 [ 1224.608212][T25754] kobject_add+0x16e/0x240 [ 1224.613160][T25754] elv_register_queue+0xd3/0x2a0 [ 1224.618644][T25754] blk_register_queue+0x3c4/0x560 [ 1224.624209][T25754] add_disk_fwnode+0x911/0x13a0 [ 1224.629599][T25754] nbd_dev_add+0x78e/0xbb0 [ 1224.634544][T25754] nbd_init+0x181/0x320 [ 1224.639242][T25754] do_one_initcall+0x120/0x6e0 [ 1224.644545][T25754] kernel_init_freeable+0x5c2/0x900 [ 1224.650285][T25754] kernel_init+0x1c/0x2b0 [ 1224.655151][T25754] ret_from_fork+0x48/0x80 [ 1224.660098][T25754] ret_from_fork_asm+0x1a/0x30 [ 1224.665403][T25754] [ 1224.665403][T25754] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1224.673251][T25754] __lock_acquire+0x1173/0x1ba0 [ 1224.678651][T25754] lock_acquire+0x179/0x350 [ 1224.683688][T25754] __mutex_lock+0x199/0xb90 [ 1224.688737][T25754] elv_iosched_store+0x201/0x5f0 [ 1224.694209][T25754] queue_attr_store+0x273/0x310 [ 1224.699587][T25754] sysfs_kf_write+0xf2/0x150 [ 1224.704711][T25754] kernfs_fop_write_iter+0x354/0x510 [ 1224.710529][T25754] iter_file_splice_write+0x91f/0x1150 [ 1224.716535][T25754] direct_splice_actor+0x18f/0x6c0 [ 1224.722198][T25754] splice_direct_to_actor+0x342/0xa30 [ 1224.728113][T25754] do_splice_direct+0x174/0x240 [ 1224.733511][T25754] do_sendfile+0xafd/0xe50 [ 1224.738456][T25754] __x64_sys_sendfile64+0x1d8/0x220 [ 1224.744187][T25754] do_syscall_64+0xcd/0x230 [ 1224.749230][T25754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.755669][T25754] [ 1224.755669][T25754] other info that might help us debug this: [ 1224.755669][T25754] [ 1224.765905][T25754] Chain exists of: [ 1224.765905][T25754] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 1224.765905][T25754] [ 1224.779682][T25754] Possible unsafe locking scenario: [ 1224.779682][T25754] [ 1224.787132][T25754] CPU0 CPU1 [ 1224.792499][T25754] ---- ---- [ 1224.797864][T25754] lock(&q->q_usage_counter(io)#55); [ 1224.803250][T25754] lock(fs_reclaim); [ 1224.809759][T25754] lock(&q->q_usage_counter(io)#55); [ 1224.817667][T25754] lock(&q->elevator_lock); [ 1224.822264][T25754] [ 1224.822264][T25754] *** DEADLOCK *** [ 1224.822264][T25754] [ 1224.830406][T25754] 5 locks held by syz.2.3999/25754: [ 1224.835624][T25754] #0: ffff888036830420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 1224.845718][T25754] #1: ffff88806029b088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1224.855518][T25754] #2: ffff8881417af698 (kn->active#239){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1224.865712][T25754] #3: ffff8880264f0a68 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1224.877431][T25754] #4: ffff8880264f0aa0 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1224.889307][T25754] [ 1224.889307][T25754] stack backtrace: [ 1224.895197][T25754] CPU: 0 UID: 0 PID: 25754 Comm: syz.2.3999 Tainted: G U 6.15.0-syzkaller #0 PREEMPT(full) [ 1224.895230][T25754] Tainted: [U]=USER [ 1224.895238][T25754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1224.895253][T25754] Call Trace: [ 1224.895260][T25754] [ 1224.895269][T25754] dump_stack_lvl+0x116/0x1f0 [ 1224.895310][T25754] print_circular_bug+0x275/0x350 [ 1224.895341][T25754] check_noncircular+0x14c/0x170 [ 1224.895374][T25754] __lock_acquire+0x1173/0x1ba0 [ 1224.895410][T25754] lock_acquire+0x179/0x350 [ 1224.895439][T25754] ? elv_iosched_store+0x201/0x5f0 [ 1224.895470][T25754] ? __pfx___might_resched+0x10/0x10 [ 1224.895497][T25754] ? do_raw_spin_lock+0x12c/0x2b0 [ 1224.895534][T25754] __mutex_lock+0x199/0xb90 [ 1224.895569][T25754] ? elv_iosched_store+0x201/0x5f0 [ 1224.895619][T25754] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1224.895656][T25754] ? elv_iosched_store+0x201/0x5f0 [ 1224.895692][T25754] ? lockdep_hardirqs_on+0x7c/0x110 [ 1224.895731][T25754] ? __pfx___mutex_lock+0x10/0x10 [ 1224.895777][T25754] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1224.895815][T25754] ? elv_iosched_store+0x201/0x5f0 [ 1224.895850][T25754] elv_iosched_store+0x201/0x5f0 [ 1224.895884][T25754] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1224.895918][T25754] ? __pfx_elv_iosched_store+0x10/0x10 [ 1224.895957][T25754] ? __mutex_trylock_common+0xe9/0x250 [ 1224.895995][T25754] ? __pfx_elv_iosched_store+0x10/0x10 [ 1224.896031][T25754] queue_attr_store+0x273/0x310 [ 1224.896058][T25754] ? __pfx_queue_attr_store+0x10/0x10 [ 1224.896092][T25754] ? find_held_lock+0x2b/0x80 [ 1224.896118][T25754] ? sysfs_file_kobj+0xe4/0x290 [ 1224.896158][T25754] ? __pfx_queue_attr_store+0x10/0x10 [ 1224.896183][T25754] sysfs_kf_write+0xf2/0x150 [ 1224.896223][T25754] kernfs_fop_write_iter+0x354/0x510 [ 1224.896257][T25754] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1224.896305][T25754] iter_file_splice_write+0x91f/0x1150 [ 1224.896358][T25754] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1224.896405][T25754] ? __pfx_copy_splice_read+0x10/0x10 [ 1224.896454][T25754] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1224.896499][T25754] direct_splice_actor+0x18f/0x6c0 [ 1224.896542][T25754] splice_direct_to_actor+0x342/0xa30 [ 1224.896585][T25754] ? __pfx_direct_splice_actor+0x10/0x10 [ 1224.896630][T25754] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1224.896677][T25754] do_splice_direct+0x174/0x240 [ 1224.896718][T25754] ? __pfx_do_splice_direct+0x10/0x10 [ 1224.896759][T25754] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1224.896813][T25754] ? rw_verify_area+0xcf/0x680 [ 1224.896860][T25754] do_sendfile+0xafd/0xe50 [ 1224.896883][T25754] ? __pfx_do_sendfile+0x10/0x10 [ 1224.896902][T25754] ? __sys_sendmsg+0x199/0x220 [ 1224.896933][T25754] ? __x64_sys_futex+0x1e0/0x4c0 [ 1224.896959][T25754] ? __x64_sys_futex+0x1e9/0x4c0 [ 1224.896985][T25754] __x64_sys_sendfile64+0x1d8/0x220 [ 1224.897014][T25754] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1224.897041][T25754] ? rcu_is_watching+0x12/0xc0 [ 1224.897068][T25754] do_syscall_64+0xcd/0x230 [ 1224.897104][T25754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.897127][T25754] RIP: 0033:0x7f7d4178e969 [ 1224.897147][T25754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.897171][T25754] RSP: 002b:00007f7d4258c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1224.897192][T25754] RAX: ffffffffffffffda RBX: 00007f7d419b6160 RCX: 00007f7d4178e969 [ 1224.897209][T25754] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1224.897223][T25754] RBP: 00007f7d41810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1224.897238][T25754] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1224.897252][T25754] R13: 0000000000000000 R14: 00007f7d419b6160 R15: 00007fffdec66ea8 [ 1224.897274][T25754] [ 1225.866328][T25765] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51