last executing test programs: 8.359188151s ago: executing program 0 (id=2587): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x6) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24008090}, 0x24044805) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x5, 0x7fefffff, 0x42, 0x7, 0x8, 0x60, 0x40000104}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r2) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000806000000fcdbdf250900000005001100050000000a001f00000000000000000008001b000100000004001e0004001e0006001400ff0100000a000500ffffffffffff0000050038000100000005003800000000000500110016000000"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, r4, 0x9c, 0x7b2, 0x1, @relative_fd=r4, 0x80}, 0x96) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x400, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) ioctl$auto_FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000280)="d2117057c3af28da13df8438b55180c67c73370282049ca065f8ed581b693d49c0cdcfa1ebb426538f3b5d205b56db4dae33e1df454984b0e5afe8323684f7283ead5dc37c68aee86b1e47aacd32d89bcf8e078763e9e3773b2e4475f5bfc0fb450cec999edca010e5e88fab89351efad6942cd1891da7cf19ec3187248c17db14ea2ac11a6979ebe1ed80f7ea49") 7.595703793s ago: executing program 0 (id=2592): mmap$auto(0x69123c19, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty44\x00', 0x42c880, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x38d, 0x400, 0x2}]}) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r3) 6.76854642s ago: executing program 0 (id=2597): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES32=r0, @ANYBLOB="6a3032d372d70e1562b6e269c3a7e692ad5f3ebd9e215949536c6dfbc18574d7ca93794f06cce7d43a53d231c182a4122d0e51eba5b1adc58e2fe8e38d3a227adc2cec964928c95684bf9f897e65825e02a6ab3217e73efaba7205d92d66dd8dc4c2ecb4e6bbebc09d8c90daa3bcab2f8a65c2cb7db74292c098b687ca9e1d68525249e640f3aaf0a1bc84edf6f147570915e4ecf8ee94b4c727fc0baf0884c667c21d84c3312c5bbd2b6833c9228f26ac580b6ef0065d9b348f70e2d636db18"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x2040011) socket(0x10, 0x2, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8400, 0x0) ioctl$auto_SG_GET_COMMAND_Q2(r1, 0x2270, &(0x7f0000000040)="67b9a6d651aeadc14d11307aaf07e6d98db959835b7fb2bfa4670de7eb369e17db5ecfd61d9e6d34861acb64578dcdd39e3bf9bcf518ce65ea02c4f3e62a55c7de5ff66d5081419cfd370390fa9920a735f146f827625fb7e79b405f6ef1e0b867f2bd3440d972506a5d8c1d1e") socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000080)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\x1eA\xbb`\x0f\'\'!<\x82\x885\xc7\xfc.\xbb\x18\x81\xef\x99\xc9\xa4\xe2\nB\xb04\x17C\xc4U*`\x80\xf6\xa0X\xca<\x1d\xa6[\xcfU\x17\'\x16\xd0\xd1.\xfb\x97\xd9Q<\xc0z?\x8bf%k:P\x86 \x8f\beH\xcb\x1dGp{', 0x5) mmap$auto(0x0, 0x9, 0x2, 0x8000000008011, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000001c0)='2', 0x1) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x40000003, 0xd, 0x3) capget$auto(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES16=r5, @ANYBLOB="210026bd70dbdf25010005000000dde944c07d35e96704ddbd12b239d1a73e687b4f1bd714a3b5b9e13c6dcb8120deefc6b010cd76f0293ea0f54636dd5429b452ab80e9fe0135dd0f0000", @ANYRES32=0x4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x9, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x8884) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="d69b587cb836f34bc35b9d13384a82f6059463ccabbdfefe47032b3b89306388053d570cd353ac5df309ff311d89c673e00d31e17d6dab5c6f480367a2bef6e67b40d9d42f13ac1e83ad49bef51da991a03c74a6486c345cdf80c81113cd36459885182ec76aedef2323322dc71ab4dafdcbd593f832c0a1726d5048133dc44f00d1038f", @ANYBLOB="01002abd7000fedbdf2502"], 0x38}}, 0x4) mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) r7 = socket(0x2, 0x1, 0x0) r8 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(r7, 0x7) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x80000000, 0x3, 0x3, 0x18, 0x401, 0xd6c) 6.37701943s ago: executing program 2 (id=2598): mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501000000080002000300000005000d0030000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2a000323bd7000fbdbdf25000000ab9d000c000000000000000000200000000000000105000d000600f7ff080001000800000008000800dac88293461426010000000800010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/net/kcm_stats\x00', 0x60080, 0x0) mmap$auto(0x2, 0xa00006, 0x400002, 0x40ebf, r3, 0x2fffff7ffffd) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x7fffffffffffffff, 0x2, 0xc7cb) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f00000001c0)=@ethernet={0x6}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x3c523ff9, 0x9}]}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.838315106s ago: executing program 1 (id=2600): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2/port\x00', 0x11b001, 0x0) write$auto(r0, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, r0, 0x8000) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x6, 0x0, 0x0, 0x79, 0xd) r2 = epoll_create$auto(0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x20499d, 0x9) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25010000000800020002000b0006000100040000000c0003000000010000000000", @ANYRESOCT=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) epoll_pwait2$auto(r2, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8000, 0x0) bpf$auto(0xfffffffa, &(0x7f00000001c0)=@enable_stats={0x80}, 0x81) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) 5.680307424s ago: executing program 3 (id=2601): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 20) 5.554028257s ago: executing program 2 (id=2602): mprotect$auto(0x5, 0x8000000000000004, 0x5) mprotect$auto(0x7, 0x6, 0x0) mprotect$auto(0x792, 0x2, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c04, 0x0) 5.117583794s ago: executing program 3 (id=2603): r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = socket(0xa, 0x80803, 0x6) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x22, 0x6, 0x23) epoll_create1$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/99, 0x63) r4 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) socketpair$auto(0x3, 0x5, 0x7, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000100)="3224b10c53b885008171de95eca91408c8ab96f4cea4cddb05fb2386c40f19bbcca0befabaa81c12965a79284f1b8aa9a96225dcf51c50a4805f035ee6ff5f4948d95384adcd46650b6597b86c517c72e84a1830fceff49fba2ad95133137dcd9d320966e73b7cdc9977427ae17134a5c0b7c73f55b97d274db6b8820a8b7eb4188159868d6d0202a50226b0bb28ae6864535049647a8556dba810eecab2") connect$auto(r2, 0x0, 0x55) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x66) 5.099278326s ago: executing program 0 (id=2604): r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r0, 0x2, 0x0, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r1, &(0x7f0000002680)='/dev/snapshot\x00', 0x7352842c, 0x3) clone$auto(0x3, 0x5feb, 0x0, 0x0, 0x1) ioperm$auto(0x7, 0x6, 0x80) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xf578, 0x6, 0x7fff, &(0x7f0000000040)=0xb5) alarm$auto(0x7) ioctl$auto(0xffffffffffffffff, 0x8910, 0x24) 5.050746345s ago: executing program 2 (id=2605): socket(0x5, 0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) (async) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) socket(0x1e, 0xa, 0x3) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) socket(0x11, 0x3, 0x9) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x1120200, 0x0, 0x0, 0x0, 0x0, 0x0) select$auto(0x1d8cd6be, &(0x7f0000000040)={[0xa4, 0x0, 0xe7b, 0x5, 0x6, 0x6, 0xfffffffeffffffff, 0x36, 0x0, 0x7, 0x4, 0x2aff, 0x4000000000000, 0x4, 0x1, 0x6]}, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x7}) mprotect$auto(0x0, 0x8000000000000001, 0x6) bind$auto(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4088, 0xff8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) 5.03264838s ago: executing program 3 (id=2606): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/veth1/disable_policy\x00', 0x161241, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) r3 = socket(0x15, 0x5, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) getsockopt$auto(r3, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) read$auto(r2, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(r0, 0x5459, 0x0) 4.821108182s ago: executing program 0 (id=2607): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x21, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x5, 0x7fffffff, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r5) sendmsg$auto_TIPC_NL_NET_SET(r5, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32=0xee00, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r7 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r7, 0x0, 0x6) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) write$auto(r8, 0x0, 0x81) msgctl$auto_IPC_RMID(0xdda7, 0x0, 0x0) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x10) 2.119890496s ago: executing program 1 (id=2613): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x3, 0x40006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xffff7ffffffffffa, 0x8100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(0x0, 0x8004, 0x0, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(0x3, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x14) clock_settime$auto(0xfffffffa, &(0x7f00000015c0)={0x80000000, 0x1}) 1.71912851s ago: executing program 2 (id=2614): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='J\x00\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x1000000, 0x9}, 0x7}, 0x3, 0x0) 1.214153566s ago: executing program 2 (id=2615): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0x7fff, 0xfffffffffffffffa, 0x8001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x9978, 0x66) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1.190213986s ago: executing program 3 (id=2616): syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x404000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88a500, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x7, 0x5, 0xd, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x80, 0x0) 527.164447ms ago: executing program 0 (id=2617): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) 370.336219ms ago: executing program 1 (id=2618): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x1, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x84102, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) read$auto(r5, 0x0, 0x1000001d) r6 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$auto(r6, 0x0, 0x5) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000380)={0x10}, 0x8) pipe$auto(0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x1000, 0x15f4da0a, 0x3, 0x5, 0x62, 0x2, 0x20000005, 0x5, 0x9, 0x100, 0xfffffffffffffffe]}, 0x0) write$auto(r7, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbu\x85\xb4\xbbXY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x01\x80\x00\x00\x00\x00\x00\x00\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dd) setsockopt$auto_SO_BSDCOMPAT(r2, 0xfff, 0xe, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x2000000007, 0x6, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000001c0)={r3, &(0x7f0000000380)="51b93c28731d98255267bf8290b5f959cd057bc6ffe8a4c4ab25f9888161fb393b8d67cd48b86ac941372670aada2f37f5c03c30734c83a1cd935244d5b445e6d0ddaee4af75ace127bda0e4081149877d3df8617a4be7d8905c376bd3885674e87d3911e6433aea15f22ba9c8113662b7b7b4ab66d62b19b44400b2ac8213b7c70f48222ba6f078c9f5e67189647b4364233917c95fe4eb6c86128f38b1b016aadabc5010a0ce8a2c526c27823f05e3a6356b77f840b9ebd0ef2b69e4a3436c9a92f6517aebbcfbf0008a72bb18f1a434502c9309ea52b3d0f72c730e6eca55bebb752af01a09", 0x3, &(0x7f0000000100)="92c27e2d255681657f939797448bd1cd863c94e96f4b5f2de9e7290e2e77e846df50c464962ed7c670690032a87ba96f6a2f2f1ecf0a56e8f3102473", 0x40, &(0x7f0000000480)="03caa554bef481cdca612e1d0e993ff585f6cdb77b2ccb58c8941a33a3f9af393ec560a38efb620105ad8e460dfa25f736e9ad4ab1fcaf4512301f59ca8976e1907445ae65182d9060f30bb79ea22a3a100b770603001345ecf046da45eac77a453b06a3a8f8711ef26e25cfc3bf65362b7dd887c59e9ce8132c7fecb146d60112dba02287b34bbca9ba14890d7577dda38229c71d744b3e1d820a85dab84936d5ca9cc6652cebc0c117e3c2490a01965bc552ebcfcee2b421053cdf3e71882ad68ab801894b50eecde19cf8bb4af7472a86da3da7ba5aaafa32e0e99a487fa92604d32e51b59c7e0ef05bfd6f8dd49dd45bfa29cfae696ba89410499659c658c013326687ea4c1923f2202af4ff221c4362cac70cd933427804e0ce923227b6ca418eeb79532da2c4ef6f02855c35d7ac5b5d85f6f5bbe492bba7e8141275ebf71e8e72f5d7f537c6742b589558f0432948df0ff09d3e9e3b3a2243ad5fdf5bae5c8e18d49652571aa0352dab2298ab2abae7e8cb6598552603b8ac4c00b7c7b17765b01722d608bc9c82f3d52f7fe7e856168a3779dff484baf17741c42a234379ae437c6275feeb9f95c14ce9006c617cbb14905a125c49269227276d441960baaa3e5855e072ecd3b6528a192dd93b7759422ddbb877700de7809ff0b66f406b3fc60e96e5c38e9d764c832d3fd02312c0cf1e513f0e3a26e2ff31bfba68a7bfaeaefac7dadc7a175f650851cef149db1cec5200c7e3525f85e3a92225799ea9e15d5ea31dbe14458b1c637ba17215f72a75158782a48a0acebfc6e9f364af73ccc785289d368e0226d71733e28042df129e966993c693b2901e2b0bccf40ece9d9d04726a0900695730dcec5464517c1409449fef1beb35d3d8275a5cd7718a5d75e32d679e03b54ac5a771f7eeb05ec117adc667e938dbf64c7d4b10105c2d057ca3650a3fe7907290196bfe3a2eba80b1438fa761ef3279dbac146445a7681f630c017905ca6ef556e68ca46f9639426fddf43ef49e6bbf6899611b40b5db99e0f6789861328597f4f616cd59f16a335d3a59d5024699235004cd63159bc0d926fb091101261ee82c0a3356152efaab7e7cdd7bfce2b6f69dd6907ba57c02dca637a3ef94c4ee58402ea1694fff79e78818b94e17f1f42f2565e224c876e8257b2bb2069095e5083d4d9a86c8c0a99d9c75ef9446ca9f4cbc30de8ba29375459989e283b7b9b3dd851d4e281056d895aa7637b4e30ee038ea6304a21ea5e0688d5d7141b40a5b3758355c320833cf10536a9f12fa5aaa9d5ed81c5dee0d3fd1b7eea2fd2d5e63338ba56d8f3a583b3df619e203457a0ad41feff8c7ad97bdd3544896e6c202246025fe44c08eff8e50ebc9a557a009821b42569e5355e6fce95991b3fdfa90205f959718480396cb65d05ad56d1d1c24fcd8b8203910d3a0adafbfaf58c1a2db5a6f3a0539c59156d469810e655a27b9450f9a4e4cb7d0d83803d45d4f68cf990981b7046ab71dd5440982f01b60a2ab6ff731e410aaba3f3ff51ffd7ddcb56841b353a4b348da37b744cc6bc141b678e53afd07032e876e57986450cb0e5d2a04540dffcfd57eb061989a50c6d5173e9786a742c7c6ba3836f44d94f6c92999fc9b650576b816cf567d15df16ccbed81bfd4229c1e17c0097967c07d5a0fc8081b591ba9c9fce1fde6720816990e0ee815f9772629d08f6d9416884eb03afd23bb00c435d192aabc618f438b1d2f7d6fd877f5a1c31195d04341931435a555348c2b34e8c04b4a813961ff89d35d6866ddce1a829a5309c470936641555ad8fb41644b75a68cb5351f13f661147f31cb706849f4be02db0bae16bfb1330c91c0f2b9c3ebee3f0124715f71252edd38f01a2e2d2441f92b6b63b811b524de539a0650dff3e0214ed9c7a4ff500c376d8b94680b6b94e08b35eb34dde6ce75f9fa4f06d531d312833ecd475e04cadc454c8dbe589a54cd75a57993c89e58ac46f7fc5281192c740a2c14fad9bace7be58be617e8acdeda03c4b812f1c6facb2c7166898c9f1818b199c0c85104ea040483cb2931d5d301514b8674aa3392244bd739faebf82b9769ea050781c68fae3e7bc9eb4af6202f99239248a36ecbc2d2e2f33e4b163500129b16ed32c2b9d05f2b220df113d9a43855f01391d26fb980a12124a70e381e06e9261eb39aa8f5f82afa30f0b65f2259fa89a872628136c5341b54b442d4a6f7e9c8486c29b1cb3e45e65caf093a5dfd96cd8c9f40de20e332599bb2bd5dbebf8871011ef386f72e2125886470f11a2c19d5c2aa7b6a29fd148f44bba7c4aa5dd1ce0c1b33893a0a5af3e3eba0aee096136c031c4481c47ced57fe04f40c2211c64d98957ea88363366b1a938bb4c077f97e14c2a78624fff0c120631d3a825588017ecf05e2624970113709cf779f0e3b1015d511eabca459d49b163f3dbe176ad53b810795061db441be175863df1ad93eee46fe69193e08321a42b6778d2500f4f03a002ab95482c715ca593df5098c02d76a9cd281e87a744db7cb10bb921ed8083a2ae06ea1a69aa84ac0eeb78baaffae5d63d59619a33bbe76c258f9decb79cd239f820e96adac00f687646a873b3b6b5c91df06ffba612b356f4474df2708bd1672ae3697b0f0642e4d006773201bd742644e6fe26f95610e0b0db65f4b2dcc33cefaabe56d8cd93969ba9fb60be88dbd4e401b0b0d14c7cfc9efb0051762ed384b21cac4870b851256fd379d757e6f5dca5d0c1d69874b0e73bcf3aa4fae6d64deeef3b09458dc8bf80dc5b840ccdf659d8bdc6c8886f678ece20acddb726e1aaffe300932083d357afca363810e9dd9e9b3dbfe0a16c2c733dc6dfb3fc408a9156a4ea524101ac721908b51dd13f6c724cb472abb1c53a4e271ef8eda5453ec4490d715a393b6239acc62072893724bcc5f2c45eb9176a0765858a180a28174dd020401e39e76a4a6e1f21d71041d2bef6254e189dbe7272b8777059e186e2e16722e3221c8623f0f138cdadf4a9a9f862c3ed7c8e59772566b0740a94ecf71fb6a368adc9086275d2d67b0d8e3a02ec4f5bfeff0b2411c0e10a2798e4454a76f097e60f159b3c10a27dd46d2a4023e166c04fd1e22ce327015acc00e768d52d4b17b3d42f1ebcc0f9de91d700258e8def8dc083fd9047450a25b97864cd812eec79637507c629727cd781e39ee9eb2ac746b1d51201d21319d1e69a129a40c726d17026914ba5e7c044467694496b03f3a6a3f66447327f1a3f603535be30ca99714c73bf216131c81702aaee02965d7014520ea4eb9e55148d3dcdc641479d0d26ce08799b8df14557321d07ef97fddf6400c340dd13d2c3416f312613e2d4698b6e7b89fa640551080f30875830af0985a98a67f702d4fcaa5aba2e774c57fe4ddd572613068511de6b24047ac33478183d9b69b175870570c233a96174fb0c39c5d9c01a8c8806897dda4e9a0f676760928d21c9f23158ef7045f9fca74dc5d03c5fd72511b32d798dcebe5c8e1914493dac2a40ff6d9b5ed244b4c3617d37aee398509027e2ee0586780040a265309d2934c184c3c76d7d29f811716d9e47738f228d642742e793a83e800776e597e8a8099b4232e0b7fae9415d6a965af22eafe9842d07b25b76c36c032b1708885f3ad4e326af2f5175f5bad1d0ac954170a7739177424d204ac54db6a3dfe3dacd076f75a50fcbb7240a2f5e9180eea2c9b642c5ec4f2dda785e417192862f89dc361f40c4498b244af5b476c51d7abc7be0e2c5c930ae9b1d1de3f152341149c3ab976f901b6b0a9bf7754c1bc89455b9367783d4fbe4a62747d3757c1f6a205b526398328d44ff77e35f61307b778a4a83af1345bae369259d65efa2f40a10b34dcbb94e4a7764a28322bab67b45bc7cf707b48cb6d243176b617fb6afb1d836adeebc625008ed169d6bbe4bb792fd16ac3ecffe95654542ea54383453d45f9745714f718b289db39490a65534c1fc4abcd82757022cbf49d2e967ebf786e7b3b2ac7acc7211d815ef283a84590481ebd5419b0c992c07d35993a4bcfa73dcf246ba74648b5c1e07e5d8e8f76a06b54bf399ba1a8dcf10fe9b9e78ca94739445c01a89f76b6a6c3bad9300a15c20a0d650f641a2f512a326f4e4b70c238d8f0e8a85cd641f453cd8eae32539f0413818cc2432fc8160c23db9fe64e419a7f8557d765497a6be2516586ee7575189f58fd6dc5efc38df4d0fa76ab791e085fc33d5eaa6151ab68ec3e0cbdc3bf9f357ee0a73dfbfd45c56cfc6879c7eeaf45dfa1861b82914bb43054a15c2f3b1bceb9e0f6d0949ea57926bf0ec05cdb31ef390a3cd07c22fed55b587e350df8218a59cf61d966024b9a12b8152ed356e480b3af7e71927c49e8a918e86adc8692f34ca4b033da1af60165f8df068dcea8aa1aa2097c55ed407aa31cb6a05115b41e76b15d41e9ba772efc74565df5edc02ee5d548edbedfb45caf940f9090f2487a2442e454891aac7e030a7b0be17aae57fdaaa331cf0d1478799e1c6b464a264fe36811cfd10b13f900226a187051cca0e3f8741c941c73985cd6d1890e5d2bb71af974262a4c481368357ca006e87db652cae17a0a7885c2a43c41d30d40c9c01dd169bb4d7c4b5d3aca7d21e114d43b602857904fa2adff74e4413a364133fad93719c35b40ebbe28ad8bf92e25dd2173d02a7a0968eeace75ca521d81443d69773fb713c1a59913f31b778644ea93cbf267af6ce1d8885c244d3c08697a2bc50341ac74cffa07b5f6f30d3d5d7a4266e1b908658daa9c77b4ca4c3b206fe7a14de9ef955bc419499485039f58e6bad82ddc6445aac444268357ecba1320d94daa367ce6dd19ba8e9de2a7e501950b3a54f1a811baa283dccf59e235181c2bd0541c4640b61dd91ae02c8582afd77e5744f1f681886cd04775da0e98f20bd21602d8425c5611d838216ce5e22558670131c9213ace0e31bce417576b5d8e28b1b522efb996b92c831f277c2a53629bab8b62e3ffd31d008dbe8fcc0c0e53855b8326b876865bed1db14da9f7bd0c0b952a0ac633dc7333d13bf8c017e36b5361ee1960a4d876dbfa76df82e4fd0741703f61e6cc2d78335cf4bff7b27f384181d666466e403d2f5722ace9baf35dd826de64fad6888b3d0dff0cb500ee1965e1754fc25250e53d0767a1cf19ef3e6278451bf1b1c5481acfd178d5e322718c56cf4a73c56964656fa7d64522295c2b1345914fa3aa7ba44c1c2390704e31c9d686572e4ac01bb9e26abfc2be20a3bed6f0ebe2a414bdc70ae54b3297def0bfe96c19109228fb5b978cdbb96c75f5f92f6a90b32f589cdbd1791a75f507acfbac307611b2e495ef626495d66f15430e035ce93fe08bdd41c564e5dce0cdb860d22da75ff3b113ae02b35f17d129d961c4e3c4f0f93ec0e1bb8acadd8ec9797dba2d6c6d6af85daab72905f92e9fbed17f1005b9082d34a01fbe931057f09a081f86db16be90e24cdf04c6dd0900c3ef43074f6b419920357d9c36504dcd320a6c987a99aee4436ec8e6bf9e975ec130a2e31def59e03bb4b2d2babe515d2ca8d9b7fc2eb3575e5c0dea48fe1acdb53c7ebe7eb6549df2c08abce3dfae9d55222e54f1061f9eb2309a3f2a61edea9097ab8f8ebdbcf55c926eacb6fbe22d08440bbfe0813d692e075c8fe9eb8a7d98c9ecc6d15eba566d21dfef7996cd8c4e42a466e6779049122a78b420ff768a13e74f9dd888cc556872bfbc46caef8c4113621fa229f5fd65f821f2", &(0x7f0000000180)=0x8}) 0s ago: executing program 2 (id=2619): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x87, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000e00)="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", 0xd44) adjtimex$auto(&(0x7f00000004c0)={0x23, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x2, 0x0, 0x3, 0x8, 0x2, {0x2100000000, 0x10000}, 0xfffffffffffffffc, 0x73d, 0xffffffffffffffdd, 0x1008001, 0x0, 0x6, 0x21b, 0xffffffff, 0xa747, 0x7, 0x1000}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xa2100, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) gettid() kexec_load$auto(0x3, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000140)="5bafd56c2c122bc0003f91ad0e2963b1259c512c75114cd1bf833777c5f1aa905ac6eaa258e2aca172f1b2fb7932baaa9e6bdd5d4c193da127fe2ae6116f2ad909a5ee204ca4094f82cb444aed85374298875fd1e2c861610242a6b8c01c0e2bb8d7896b6d6286d95dcd06fbd7120d0e562fe7fb9f334d7067ea429bd6914891fa48b2bea45968c3fe24052221cec0fd646ebea2baa46ac5f8e8af6bdfaa451cd4e6da", 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4d", 0x3a) kernel console output (not intermixed with test programs): 024] io_sqe_files_register+0x219/0x960 [ 724.765062][T15024] ? __pfx_io_sqe_files_register+0x10/0x10 [ 724.765118][T15024] ? __mutex_trylock_common+0xe9/0x250 [ 724.765156][T15024] ? __pfx___mutex_trylock_common+0x10/0x10 [ 724.765198][T15024] __io_uring_register+0x12e7/0x2310 [ 724.765252][T15024] ? trace_contention_end+0xdd/0x130 [ 724.765288][T15024] ? __pfx___io_uring_register+0x10/0x10 [ 724.765333][T15024] ? __mutex_lock+0x1ca/0xb90 [ 724.765374][T15024] ? __x64_sys_io_uring_register+0x159/0x280 [ 724.765426][T15024] ? __pfx___mutex_lock+0x10/0x10 [ 724.765478][T15024] ? __fget_files+0x20e/0x3c0 [ 724.765508][T15024] ? __fput_deferred+0x370/0x370 [ 724.765564][T15024] __x64_sys_io_uring_register+0x169/0x280 [ 724.765617][T15024] do_syscall_64+0xcd/0x490 [ 724.765661][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.765695][T15024] RIP: 0033:0x7f91c538e969 [ 724.765721][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.765754][T15024] RSP: 002b:00007f91c61f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 724.765785][T15024] RAX: ffffffffffffffda RBX: 00007f91c55b5fa0 RCX: 00007f91c538e969 [ 724.765808][T15024] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000002 [ 724.765830][T15024] RBP: 00007f91c61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 724.765850][T15024] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000002 [ 724.765871][T15024] R13: 0000000000000000 R14: 00007f91c55b5fa0 R15: 00007fff9eddbc28 [ 724.765915][T15024] [ 725.097650][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.110683][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.141863][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.150476][T15026] vhci_hcd: invalid port number 16 [ 725.157737][T15026] vhci_hcd: invalid port number 16 [ 725.160481][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.170571][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.200137][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.233975][ T5842] Bluetooth: hci2: command tx timeout [ 725.325505][T14988] hsr_slave_0: entered promiscuous mode [ 725.344382][T14988] hsr_slave_1: entered promiscuous mode [ 725.351157][T14988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.359059][T14988] Cannot create hsr debugfs directory [ 725.462760][T15033] Invalid ELF header magic: != ELF [ 725.633132][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 725.749558][T14988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.875872][T14988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.983858][T14988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.152970][T14988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.190192][T15057] netlink: 'syz.1.2311': attribute type 27 has an invalid length. [ 726.208838][T15057] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2311'. [ 726.904297][T14988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.948178][T14988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 727.014737][T14988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.066698][T14988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.273527][T11114] Bluetooth: hci2: command tx timeout [ 727.521224][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.753021][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.838315][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.846628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.876783][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.884061][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.947080][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.042063][T14988] veth0_vlan: entered promiscuous mode [ 729.134603][T15109] FAULT_INJECTION: forcing a failure. [ 729.134603][T15109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.163839][T14988] veth1_vlan: entered promiscuous mode [ 729.194149][T15109] CPU: 1 UID: 0 PID: 15109 Comm: syz.1.2322 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 729.194195][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.194215][T15109] Call Trace: [ 729.194225][T15109] [ 729.194236][T15109] dump_stack_lvl+0x16c/0x1f0 [ 729.194273][T15109] should_fail_ex+0x512/0x640 [ 729.194319][T15109] _copy_to_user+0x32/0xd0 [ 729.194365][T15109] simple_read_from_buffer+0xcb/0x170 [ 729.194413][T15109] proc_fail_nth_read+0x197/0x270 [ 729.194458][T15109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.194505][T15109] ? rw_verify_area+0xcf/0x680 [ 729.194549][T15109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.194593][T15109] vfs_read+0x1e1/0xc60 [ 729.194626][T15109] ? __pfx___mutex_lock+0x10/0x10 [ 729.194662][T15109] ? __pfx_vfs_read+0x10/0x10 [ 729.194704][T15109] ? __fget_files+0x20e/0x3c0 [ 729.194742][T15109] ksys_read+0x12a/0x250 [ 729.194770][T15109] ? __pfx_ksys_read+0x10/0x10 [ 729.194809][T15109] do_syscall_64+0xcd/0x490 [ 729.194846][T15109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.194874][T15109] RIP: 0033:0x7f9666b8d37c [ 729.194905][T15109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 729.194933][T15109] RSP: 002b:00007f9667917030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.194960][T15109] RAX: ffffffffffffffda RBX: 00007f9666db5fa0 RCX: 00007f9666b8d37c [ 729.194980][T15109] RDX: 000000000000000f RSI: 00007f96679170a0 RDI: 0000000000000004 [ 729.194997][T15109] RBP: 00007f9667917090 R08: 0000000000000000 R09: 0000000000000000 [ 729.195015][T15109] R10: 0000000000000ef3 R11: 0000000000000246 R12: 0000000000000002 [ 729.195032][T15109] R13: 0000000000000000 R14: 00007f9666db5fa0 R15: 00007ffe9a8a6ff8 [ 729.195068][T15109] [ 729.403437][T14988] veth0_macvtap: entered promiscuous mode [ 729.414662][T14988] veth1_macvtap: entered promiscuous mode [ 729.425651][T11114] Bluetooth: hci2: command tx timeout [ 729.444889][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.458463][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.566588][T14988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.575449][T14988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.598700][T14988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.620068][T14988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.782266][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.812558][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.915033][T10947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.926288][T10947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.938761][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 730.986994][T15142] ima: policy update failed [ 731.012376][ T30] audit: type=1802 audit(4295032922.738:114): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2330" res=0 errno=0 [ 731.481763][T11114] Bluetooth: hci2: command tx timeout [ 731.868079][T15157] afs: Bad value for 'source' [ 731.908866][T15157] zram: Added device: zram23 [ 732.353531][T15166] netlink: 'syz.3.2338': attribute type 27 has an invalid length. [ 732.381005][T15166] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2338'. [ 732.631678][T15171] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2340'. [ 732.642610][T15171] FAULT_INJECTION: forcing a failure. [ 732.642610][T15171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.699820][T15171] CPU: 1 UID: 0 PID: 15171 Comm: syz.0.2340 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 732.699870][T15171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.699892][T15171] Call Trace: [ 732.699903][T15171] [ 732.699917][T15171] dump_stack_lvl+0x16c/0x1f0 [ 732.699963][T15171] should_fail_ex+0x512/0x640 [ 732.700018][T15171] _copy_to_user+0x32/0xd0 [ 732.700074][T15171] simple_read_from_buffer+0xcb/0x170 [ 732.700133][T15171] proc_fail_nth_read+0x197/0x270 [ 732.700188][T15171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.700244][T15171] ? rw_verify_area+0xcf/0x680 [ 732.700296][T15171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.700350][T15171] vfs_read+0x1e1/0xc60 [ 732.700391][T15171] ? __pfx___mutex_lock+0x10/0x10 [ 732.700433][T15171] ? __pfx_vfs_read+0x10/0x10 [ 732.700480][T15171] ? __fget_files+0x20e/0x3c0 [ 732.700511][T15171] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 732.700586][T15171] ksys_read+0x12a/0x250 [ 732.700621][T15171] ? __pfx_ksys_read+0x10/0x10 [ 732.700669][T15171] do_syscall_64+0xcd/0x490 [ 732.700713][T15171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.700747][T15171] RIP: 0033:0x7fb7ca78d37c [ 732.700771][T15171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 732.700803][T15171] RSP: 002b:00007fb7cb6cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.700840][T15171] RAX: ffffffffffffffda RBX: 00007fb7ca9b5fa0 RCX: 00007fb7ca78d37c [ 732.700862][T15171] RDX: 000000000000000f RSI: 00007fb7cb6cf0a0 RDI: 0000000000000004 [ 732.700882][T15171] RBP: 00007fb7cb6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 732.700901][T15171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.700921][T15171] R13: 0000000000000000 R14: 00007fb7ca9b5fa0 R15: 00007fff2153cea8 [ 732.700969][T15171] [ 732.892656][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.211478][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 733.227527][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 733.238853][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 733.267738][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 733.276825][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 733.526516][T15188] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 734.186884][T15182] chnl_net:caif_netlink_parms(): no params data found [ 734.460755][T15182] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.468171][T15182] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.475517][T15182] bridge_slave_0: entered allmulticast mode [ 734.484710][T15182] bridge_slave_0: entered promiscuous mode [ 734.494820][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.502426][T15182] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.510319][T15182] bridge_slave_1: entered allmulticast mode [ 734.518575][T15182] bridge_slave_1: entered promiscuous mode [ 734.588559][T15182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.629232][T15182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.805531][T15182] team0: Port device team_slave_0 added [ 734.827710][T15182] team0: Port device team_slave_1 added [ 734.918604][T15182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.933351][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.959295][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.007452][T15182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.020986][T15182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.028507][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.054523][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.061384][T15182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.162979][T15217] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 735.329947][T11114] Bluetooth: hci4: command tx timeout [ 735.336862][T15224] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 735.489302][T15182] hsr_slave_0: entered promiscuous mode [ 735.495900][T15182] hsr_slave_1: entered promiscuous mode [ 735.502957][T15182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.511778][T15182] Cannot create hsr debugfs directory [ 736.297996][T15237] FAULT_INJECTION: forcing a failure. [ 736.297996][T15237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.320856][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.0.2357 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 736.320903][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.320924][T15237] Call Trace: [ 736.320936][T15237] [ 736.320950][T15237] dump_stack_lvl+0x16c/0x1f0 [ 736.320995][T15237] should_fail_ex+0x512/0x640 [ 736.321050][T15237] should_fail_alloc_page+0xe7/0x130 [ 736.321097][T15237] prepare_alloc_pages+0x3c2/0x610 [ 736.321150][T15237] ? rcu_is_watching+0x12/0xc0 [ 736.321202][T15237] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 736.321252][T15237] ? __lock_acquire+0xb8a/0x1c90 [ 736.321302][T15237] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.321345][T15237] ? do_raw_spin_lock+0x12c/0x2b0 [ 736.321387][T15237] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 736.321428][T15237] ? find_held_lock+0x2b/0x80 [ 736.321486][T15237] ? __lock_acquire+0xb8a/0x1c90 [ 736.321519][T15237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.321562][T15237] ? policy_nodemask+0xea/0x4e0 [ 736.321609][T15237] alloc_pages_mpol+0x1fb/0x550 [ 736.321654][T15237] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 736.321710][T15237] folio_alloc_mpol_noprof+0x36/0x2f0 [ 736.321763][T15237] shmem_alloc_folio+0x135/0x160 [ 736.321797][T15237] shmem_alloc_and_add_folio+0x499/0xc20 [ 736.321847][T15237] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 736.321890][T15237] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 736.321939][T15237] shmem_get_folio_gfp+0x67f/0x1600 [ 736.321990][T15237] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 736.322035][T15237] ? filemap_map_pages+0xf6c/0x1680 [ 736.322083][T15237] shmem_fault+0x1fe/0xa30 [ 736.322125][T15237] ? __pfx_shmem_fault+0x10/0x10 [ 736.322171][T15237] ? __pfx_filemap_map_pages+0x10/0x10 [ 736.322233][T15237] __do_fault+0x10d/0x490 [ 736.322279][T15237] __handle_mm_fault+0x39fb/0x5450 [ 736.322327][T15237] ? __pfx___handle_mm_fault+0x10/0x10 [ 736.322387][T15237] ? find_vma+0xbf/0x140 [ 736.322433][T15237] ? __pfx_find_vma+0x10/0x10 [ 736.322486][T15237] handle_mm_fault+0x3fe/0xad0 [ 736.322529][T15237] do_user_addr_fault+0x7a6/0x1370 [ 736.322571][T15237] ? rcu_is_watching+0x12/0xc0 [ 736.322622][T15237] exc_page_fault+0x5c/0xb0 [ 736.322660][T15237] asm_exc_page_fault+0x26/0x30 [ 736.322692][T15237] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 736.322745][T15237] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 736.322779][T15237] RSP: 0018:ffffc90003f9f5b0 EFLAGS: 00050202 [ 736.322826][T15237] RAX: 0000000000000001 RBX: 000000000000ffcc RCX: 0000000000005fcc [ 736.322848][T15237] RDX: ffffed100d405ffc RSI: 000000000000a000 RDI: ffff88806a02a010 [ 736.322871][T15237] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d405ffb [ 736.322893][T15237] R10: ffff88806a02ffdb R11: 0000000000000000 R12: ffffc90003f9fd60 [ 736.322915][T15237] R13: 000000000000ffcc R14: ffff88806a020010 R15: 00007ffffffff000 [ 736.322960][T15237] _copy_from_iter+0x383/0x16f0 [ 736.323014][T15237] ? ip_route_output_key_hash+0x16b/0x2e0 [ 736.323061][T15237] ? __pfx__copy_from_iter+0x10/0x10 [ 736.323120][T15237] ? xfrm_lookup_route+0x6a/0x200 [ 736.323170][T15237] raw_sendmsg+0x1ee0/0x3820 [ 736.323230][T15237] ? __pfx_raw_sendmsg+0x10/0x10 [ 736.323281][T15237] ? __lock_acquire+0x622/0x1c90 [ 736.323332][T15237] ? __pfx___might_resched+0x10/0x10 [ 736.323380][T15237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.323427][T15237] ? aa_sk_perm+0x2f4/0xb10 [ 736.323472][T15237] ? __import_iovec+0x1dd/0x650 [ 736.323523][T15237] ? __might_fault+0xe3/0x190 [ 736.323558][T15237] ? __might_fault+0x13b/0x190 [ 736.323597][T15237] ? __pfx_raw_sendmsg+0x10/0x10 [ 736.323637][T15237] inet_sendmsg+0x119/0x140 [ 736.323676][T15237] ____sys_sendmsg+0x973/0xc70 [ 736.323728][T15237] ? copy_msghdr_from_user+0x10a/0x160 [ 736.323769][T15237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.323828][T15237] ? __pfx__kstrtoull+0x10/0x10 [ 736.323876][T15237] ___sys_sendmsg+0x134/0x1d0 [ 736.323920][T15237] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.323982][T15237] ? find_held_lock+0x2b/0x80 [ 736.324056][T15237] __sys_sendmmsg+0x200/0x420 [ 736.324103][T15237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 736.324161][T15237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.324231][T15237] ? fput+0x70/0xf0 [ 736.324274][T15237] ? ksys_write+0x1ac/0x250 [ 736.324310][T15237] ? __pfx_ksys_write+0x10/0x10 [ 736.324354][T15237] __x64_sys_sendmmsg+0x9c/0x100 [ 736.324395][T15237] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.324432][T15237] do_syscall_64+0xcd/0x490 [ 736.324476][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.324510][T15237] RIP: 0033:0x7fb7ca78e969 [ 736.324536][T15237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.324569][T15237] RSP: 002b:00007fb7cb6cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 736.324600][T15237] RAX: ffffffffffffffda RBX: 00007fb7ca9b5fa0 RCX: 00007fb7ca78e969 [ 736.324622][T15237] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 736.324643][T15237] RBP: 00007fb7cb6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 736.324663][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.324683][T15237] R13: 0000000000000000 R14: 00007fb7ca9b5fa0 R15: 00007fff2153cea8 [ 736.324727][T15237] [ 737.048986][T15182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.175249][T15182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.183868][T15245] ima: policy update failed [ 737.198645][ T30] audit: type=1802 audit(4295032928.960:115): pid=15245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2360" res=0 errno=0 [ 737.290032][T15182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.373969][T11114] Bluetooth: hci4: command tx timeout [ 737.451509][T15182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.644005][T15259] FAULT_INJECTION: forcing a failure. [ 737.644005][T15259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.674212][T15259] CPU: 1 UID: 0 PID: 15259 Comm: syz.0.2365 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 737.674265][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.674287][T15259] Call Trace: [ 737.674299][T15259] [ 737.674313][T15259] dump_stack_lvl+0x16c/0x1f0 [ 737.674361][T15259] should_fail_ex+0x512/0x640 [ 737.674421][T15259] _copy_from_user+0x2e/0xd0 [ 737.674480][T15259] copy_msghdr_from_user+0x98/0x160 [ 737.674527][T15259] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 737.674596][T15259] ___sys_sendmsg+0xfe/0x1d0 [ 737.674645][T15259] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.674688][T15259] ? __lock_acquire+0x622/0x1c90 [ 737.674783][T15259] __sys_sendmsg+0x16d/0x220 [ 737.674832][T15259] ? __pfx___sys_sendmsg+0x10/0x10 [ 737.674902][T15259] do_syscall_64+0xcd/0x490 [ 737.674946][T15259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.674984][T15259] RIP: 0033:0x7fb7ca78e969 [ 737.675014][T15259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.675052][T15259] RSP: 002b:00007fb7cb6cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.675087][T15259] RAX: ffffffffffffffda RBX: 00007fb7ca9b5fa0 RCX: 00007fb7ca78e969 [ 737.675122][T15259] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 737.675146][T15259] RBP: 00007fb7cb6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 737.675170][T15259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.675193][T15259] R13: 0000000000000000 R14: 00007fb7ca9b5fa0 R15: 00007fff2153cea8 [ 737.675242][T15259] [ 737.843168][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.852454][T15182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.981687][T15182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.048610][T15182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.083148][T15182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.166570][ C0] bridge0: port 3(team0) entered learning state [ 738.412947][T15182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.518367][T15182] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.552370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.559625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.591584][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.598812][T10964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.336660][T15182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.440804][T11114] Bluetooth: hci4: command tx timeout [ 739.470957][T15182] veth0_vlan: entered promiscuous mode [ 739.505873][T15182] veth1_vlan: entered promiscuous mode [ 739.616319][T15182] veth0_macvtap: entered promiscuous mode [ 739.653660][T15182] veth1_macvtap: entered promiscuous mode [ 739.755985][T15182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.797409][T15182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.839338][T15182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.897463][T15182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.906244][T15182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.925736][T15182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.062713][T15293] Invalid ELF header magic: != ELF [ 740.135206][T10947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.339337][T10947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.016307][T10947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.055478][T10947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.519297][T11114] Bluetooth: hci4: command tx timeout [ 741.705164][T15328] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2380'. [ 741.932104][T15334] FAULT_INJECTION: forcing a failure. [ 741.932104][T15334] name failslab, interval 1, probability 0, space 0, times 0 [ 741.952504][T15334] CPU: 0 UID: 0 PID: 15334 Comm: syz.3.2379 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 741.952560][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.952582][T15334] Call Trace: [ 741.952593][T15334] [ 741.952607][T15334] dump_stack_lvl+0x16c/0x1f0 [ 741.952651][T15334] should_fail_ex+0x512/0x640 [ 741.952699][T15334] ? fs_reclaim_acquire+0xae/0x150 [ 741.952754][T15334] ? tomoyo_encode2+0x100/0x3e0 [ 741.952796][T15334] should_failslab+0xc2/0x120 [ 741.952841][T15334] __kmalloc_noprof+0xd2/0x510 [ 741.952880][T15334] ? d_absolute_path+0x136/0x1a0 [ 741.952932][T15334] tomoyo_encode2+0x100/0x3e0 [ 741.952982][T15334] tomoyo_encode+0x29/0x50 [ 741.953023][T15334] tomoyo_realpath_from_path+0x18f/0x6e0 [ 741.953081][T15334] tomoyo_path_number_perm+0x245/0x580 [ 741.953118][T15334] ? tomoyo_path_number_perm+0x237/0x580 [ 741.953161][T15334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 741.953197][T15334] ? futex_wake+0x1ad/0x530 [ 741.953278][T15334] ? find_held_lock+0x2b/0x80 [ 741.953324][T15334] ? hook_file_ioctl_common+0x145/0x410 [ 741.953366][T15334] ? __fget_files+0x20e/0x3c0 [ 741.953408][T15334] security_file_ioctl+0x9b/0x240 [ 741.953450][T15334] __x64_sys_ioctl+0xb7/0x210 [ 741.953501][T15334] do_syscall_64+0xcd/0x490 [ 741.953555][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.953586][T15334] RIP: 0033:0x7f91c538e969 [ 741.953614][T15334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.953648][T15334] RSP: 002b:00007f91c6194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.953679][T15334] RAX: ffffffffffffffda RBX: 00007f91c55b6240 RCX: 00007f91c538e969 [ 741.953705][T15334] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000c [ 741.953725][T15334] RBP: 00007f91c5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 741.953745][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.953765][T15334] R13: 0000000000000000 R14: 00007f91c55b6240 R15: 00007fff9eddbc28 [ 741.953808][T15334] [ 742.199863][T15334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.464764][T15341] netlink: 'syz.0.2384': attribute type 27 has an invalid length. [ 742.503172][T15341] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2384'. [ 743.139013][T15359] device-mapper: ioctl: Unable to rename non-existent device,  to [ 744.000253][T15368] FAULT_INJECTION: forcing a failure. [ 744.000253][T15368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.056138][T15368] CPU: 0 UID: 0 PID: 15368 Comm: syz.1.2392 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 744.056183][T15368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.056203][T15368] Call Trace: [ 744.056214][T15368] [ 744.056226][T15368] dump_stack_lvl+0x16c/0x1f0 [ 744.056268][T15368] should_fail_ex+0x512/0x640 [ 744.056317][T15368] _copy_from_user+0x2e/0xd0 [ 744.056369][T15368] br_dev_read_uargs+0xcf/0x340 [ 744.056416][T15368] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 744.056450][T15368] ? rcu_is_watching+0x12/0xc0 [ 744.056482][T15368] ? trace_sched_exit_tp+0xde/0x130 [ 744.056538][T15368] br_dev_siocdevprivate+0xe7/0x1650 [ 744.056573][T15368] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 744.056606][T15368] ? __lock_acquire+0xb8a/0x1c90 [ 744.056638][T15368] ? __pfx___schedule+0x10/0x10 [ 744.056681][T15368] ? do_raw_spin_lock+0x12c/0x2b0 [ 744.056731][T15368] ? netdev_name_node_lookup+0x127/0x180 [ 744.056767][T15368] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 744.056798][T15368] dev_ifsioc+0x8ee/0x1ee0 [ 744.056834][T15368] ? __pfx_dev_ifsioc+0x10/0x10 [ 744.056860][T15368] ? __pfx___mutex_lock+0x10/0x10 [ 744.056898][T15368] ? dev_load+0x8e/0x240 [ 744.056928][T15368] dev_ioctl+0x1b2/0x1060 [ 744.056957][T15368] sock_ioctl+0x5b3/0x6b0 [ 744.056997][T15368] ? __pfx_sock_ioctl+0x10/0x10 [ 744.057031][T15368] ? hook_file_ioctl_common+0x145/0x410 [ 744.057062][T15368] ? __fget_files+0x20e/0x3c0 [ 744.057090][T15368] ? __pfx_sock_ioctl+0x10/0x10 [ 744.057131][T15368] __x64_sys_ioctl+0x18b/0x210 [ 744.057169][T15368] do_syscall_64+0xcd/0x490 [ 744.057199][T15368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.057224][T15368] RIP: 0033:0x7f62c678e969 [ 744.057243][T15368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.057267][T15368] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.057289][T15368] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 744.057306][T15368] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 744.057320][T15368] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.057335][T15368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.057349][T15368] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 744.057379][T15368] [ 744.303306][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.515999][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 744.613208][T15383] sd 0:0:1:0: PR command failed: 1026 [ 744.645059][T15383] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 744.679337][T15383] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 745.520479][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 745.554729][T15406] ubi: mtd0 is already attached to ubi0 [ 745.833150][T15406] FAULT_INJECTION: forcing a failure. [ 745.833150][T15406] name failslab, interval 1, probability 0, space 0, times 0 [ 745.862263][T15412] FAULT_INJECTION: forcing a failure. [ 745.862263][T15412] name failslab, interval 1, probability 0, space 0, times 0 [ 745.990749][T15412] CPU: 0 UID: 0 PID: 15412 Comm: syz.3.2404 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 745.990798][T15412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.990818][T15412] Call Trace: [ 745.990830][T15412] [ 745.990842][T15412] dump_stack_lvl+0x16c/0x1f0 [ 745.990888][T15412] should_fail_ex+0x512/0x640 [ 745.990934][T15412] ? __kmalloc_noprof+0xbf/0x510 [ 745.990976][T15412] ? io_cache_alloc_new+0x45/0xf0 [ 745.991022][T15412] should_failslab+0xc2/0x120 [ 745.991065][T15412] __kmalloc_noprof+0xd2/0x510 [ 745.991117][T15412] io_cache_alloc_new+0x45/0xf0 [ 745.991166][T15412] io_rsrc_node_alloc+0x221/0x2b0 [ 745.991217][T15412] io_sqe_files_register+0x2a7/0x960 [ 745.991273][T15412] ? __pfx_io_sqe_files_register+0x10/0x10 [ 745.991329][T15412] ? __mutex_trylock_common+0xe9/0x250 [ 745.991366][T15412] ? __pfx___mutex_trylock_common+0x10/0x10 [ 745.991407][T15412] __io_uring_register+0x12e7/0x2310 [ 745.991460][T15412] ? trace_contention_end+0xdd/0x130 [ 745.991495][T15412] ? __pfx___io_uring_register+0x10/0x10 [ 745.991540][T15412] ? __mutex_lock+0x1ca/0xb90 [ 745.991584][T15412] ? __x64_sys_io_uring_register+0x159/0x280 [ 745.991635][T15412] ? __pfx___mutex_lock+0x10/0x10 [ 745.991686][T15412] ? __fget_files+0x20e/0x3c0 [ 745.991717][T15412] ? __fput_deferred+0x370/0x370 [ 745.991774][T15412] __x64_sys_io_uring_register+0x169/0x280 [ 745.991827][T15412] do_syscall_64+0xcd/0x490 [ 745.991870][T15412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.991904][T15412] RIP: 0033:0x7f91c538e969 [ 745.991930][T15412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.991963][T15412] RSP: 002b:00007f91c61f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 745.991994][T15412] RAX: ffffffffffffffda RBX: 00007f91c55b5fa0 RCX: 00007f91c538e969 [ 745.992017][T15412] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000002 [ 745.992038][T15412] RBP: 00007f91c61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 745.992058][T15412] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000002 [ 745.992079][T15412] R13: 0000000000000000 R14: 00007f91c55b5fa0 R15: 00007fff9eddbc28 [ 745.992122][T15412] [ 746.217730][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.227511][T15406] CPU: 1 UID: 0 PID: 15406 Comm: syz.2.2401 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 746.227562][T15406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.227585][T15406] Call Trace: [ 746.227597][T15406] [ 746.227622][T15406] dump_stack_lvl+0x16c/0x1f0 [ 746.227669][T15406] should_fail_ex+0x512/0x640 [ 746.227718][T15406] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 746.227765][T15406] should_failslab+0xc2/0x120 [ 746.227829][T15406] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 746.227871][T15406] ? lockdep_init_map_type+0x5c/0x280 [ 746.227908][T15406] ? __d_alloc+0x31/0xaa0 [ 746.227955][T15406] __d_alloc+0x31/0xaa0 [ 746.228000][T15406] d_alloc_pseudo+0x1c/0xc0 [ 746.228052][T15406] alloc_file_pseudo+0xcf/0x230 [ 746.228104][T15406] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 746.228163][T15406] ? alloc_fd+0x471/0x7d0 [ 746.228206][T15406] sock_alloc_file+0x50/0x210 [ 746.228255][T15406] __sys_socket+0x1c0/0x260 [ 746.228311][T15406] ? __pfx___sys_socket+0x10/0x10 [ 746.228367][T15406] ? do_user_addr_fault+0x843/0x1370 [ 746.228413][T15406] __x64_sys_socket+0x72/0xb0 [ 746.228466][T15406] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.228505][T15406] do_syscall_64+0xcd/0x490 [ 746.228550][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.228586][T15406] RIP: 0033:0x7f952b390887 [ 746.228614][T15406] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.228648][T15406] RSP: 002b:00007f95291d3fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 746.228682][T15406] RAX: ffffffffffffffda RBX: 00007f952b5b6080 RCX: 00007f952b390887 [ 746.228706][T15406] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 746.228728][T15406] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 746.228748][T15406] R10: 0000200000000480 R11: 0000000000000286 R12: 0000000000000000 [ 746.228770][T15406] R13: 0000000000000000 R14: 00007f952b5b6080 R15: 00007ffefe8b4a88 [ 746.228814][T15406] [ 747.541399][T15420] Process accounting resumed [ 748.327190][T15465] netlink: 'syz.2.2413': attribute type 27 has an invalid length. [ 748.365324][T15465] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2413'. [ 748.397724][T15465] FAULT_INJECTION: forcing a failure. [ 748.397724][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 748.440006][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.2.2413 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 748.440051][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.440070][T15465] Call Trace: [ 748.440082][T15465] [ 748.440094][T15465] dump_stack_lvl+0x16c/0x1f0 [ 748.440139][T15465] should_fail_ex+0x512/0x640 [ 748.440191][T15465] should_failslab+0xc2/0x120 [ 748.440234][T15465] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 748.440275][T15465] ? skb_clone+0x190/0x3f0 [ 748.440321][T15465] skb_clone+0x190/0x3f0 [ 748.440363][T15465] netlink_deliver_tap+0xabd/0xd30 [ 748.440418][T15465] netlink_unicast+0x6b2/0x7f0 [ 748.440469][T15465] ? __pfx_netlink_unicast+0x10/0x10 [ 748.440528][T15465] netlink_ack+0x696/0xb80 [ 748.440589][T15465] netlink_rcv_skb+0x332/0x420 [ 748.440635][T15465] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.440681][T15465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.440744][T15465] ? netlink_deliver_tap+0x1ae/0xd30 [ 748.440797][T15465] netlink_unicast+0x53d/0x7f0 [ 748.440848][T15465] ? __pfx_netlink_unicast+0x10/0x10 [ 748.440907][T15465] netlink_sendmsg+0x8d1/0xdd0 [ 748.440969][T15465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.441033][T15465] ____sys_sendmsg+0xa95/0xc70 [ 748.441081][T15465] ? copy_msghdr_from_user+0x10a/0x160 [ 748.441119][T15465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.441174][T15465] ? kfree+0x24f/0x4d0 [ 748.441201][T15465] ? __pfx__kstrtoull+0x10/0x10 [ 748.441247][T15465] ___sys_sendmsg+0x134/0x1d0 [ 748.441289][T15465] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.441387][T15465] ? __pfx___might_resched+0x10/0x10 [ 748.441455][T15465] __sys_sendmmsg+0x200/0x420 [ 748.441501][T15465] ? __pfx___sys_sendmmsg+0x10/0x10 [ 748.441554][T15465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 748.441612][T15465] ? fput+0x70/0xf0 [ 748.441653][T15465] ? ksys_write+0x1ac/0x250 [ 748.441706][T15465] ? __pfx_ksys_write+0x10/0x10 [ 748.441773][T15465] __x64_sys_sendmmsg+0x9c/0x100 [ 748.441813][T15465] ? lockdep_hardirqs_on+0x7c/0x110 [ 748.441851][T15465] do_syscall_64+0xcd/0x490 [ 748.441893][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.441928][T15465] RIP: 0033:0x7f952b38e969 [ 748.441961][T15465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.441995][T15465] RSP: 002b:00007f95291f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 748.442027][T15465] RAX: ffffffffffffffda RBX: 00007f952b5b5fa0 RCX: 00007f952b38e969 [ 748.442050][T15465] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 748.442071][T15465] RBP: 00007f95291f6090 R08: 0000000000000000 R09: 0000000000000000 [ 748.442092][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.442111][T15465] R13: 0000000000000000 R14: 00007f952b5b5fa0 R15: 00007ffefe8b4a88 [ 748.442154][T15465] [ 748.724159][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.050582][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.099966][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.109052][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.139501][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.165020][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.861428][T15470] FAULT_INJECTION: forcing a failure. [ 749.861428][T15470] name failslab, interval 1, probability 0, space 0, times 0 [ 749.981620][T15470] CPU: 1 UID: 0 PID: 15470 Comm: syz.2.2415 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 749.981668][T15470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.981688][T15470] Call Trace: [ 749.981700][T15470] [ 749.981712][T15470] dump_stack_lvl+0x16c/0x1f0 [ 749.981758][T15470] should_fail_ex+0x512/0x640 [ 749.981799][T15470] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 749.981842][T15470] should_failslab+0xc2/0x120 [ 749.981883][T15470] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 749.981920][T15470] ? rcu_is_watching+0x12/0xc0 [ 749.981974][T15470] ? alloc_pid+0xc7/0xbc0 [ 749.982020][T15470] alloc_pid+0xc7/0xbc0 [ 749.982067][T15470] copy_process+0x382e/0x9170 [ 749.982099][T15470] ? __lock_acquire+0x622/0x1c90 [ 749.982157][T15470] ? __pfx_copy_process+0x10/0x10 [ 749.982200][T15470] ? find_held_lock+0x2b/0x80 [ 749.982243][T15470] ? __might_fault+0xe3/0x190 [ 749.982280][T15470] ? __might_fault+0xe3/0x190 [ 749.982315][T15470] ? __might_fault+0x13b/0x190 [ 749.982364][T15470] ? _copy_from_user+0x59/0xd0 [ 749.982422][T15470] kernel_clone+0xfc/0x960 [ 749.982456][T15470] ? __pfx_kernel_clone+0x10/0x10 [ 749.982501][T15470] ? __lock_acquire+0xb8a/0x1c90 [ 749.982542][T15470] __do_sys_clone3+0x212/0x290 [ 749.982574][T15470] ? __pfx___do_sys_clone3+0x10/0x10 [ 749.982663][T15470] do_syscall_64+0xcd/0x490 [ 749.982706][T15470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.982741][T15470] RIP: 0033:0x7f952b3c31c9 [ 749.982774][T15470] Code: bf 08 00 48 8d 3d dc bf 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 749.982808][T15470] RSP: 002b:00007ffefe8b4958 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 749.982841][T15470] RAX: ffffffffffffffda RBX: 00007f952b3455b0 RCX: 00007f952b3c31c9 [ 749.982864][T15470] RDX: 00007f952b3455b0 RSI: 0000000000000058 RDI: 00007ffefe8b49a0 [ 749.982886][T15470] RBP: 00007f9528d916c0 R08: 00007f9528d916c0 R09: 00007ffefe8b4a87 [ 749.982909][T15470] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 [ 749.982930][T15470] R13: 000000000000006e R14: 00007ffefe8b49a0 R15: 00007ffefe8b4a88 [ 749.982973][T15470] [ 750.535714][T15485] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2418'. [ 750.618966][T15433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.685653][T15466] chnl_net:caif_netlink_parms(): no params data found [ 751.194156][T15433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.218776][ T5842] Bluetooth: hci0: command tx timeout [ 751.671325][T15494] Invalid ELF header magic: != ELF [ 751.698353][T15433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.741738][T15494] Invalid ELF header magic: != ELF [ 751.776169][T15494] Invalid ELF header magic: != ELF [ 751.793871][T15494] Invalid ELF header magic: != ELF [ 751.809625][T15494] Invalid ELF header magic: != ELF [ 751.824890][T15494] Invalid ELF header magic: != ELF [ 751.868279][T15494] Invalid ELF header magic: != ELF [ 751.912996][T15433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.916221][T15494] Invalid ELF header magic: != ELF [ 751.946503][T15494] Invalid ELF header magic: != ELF [ 752.192437][T15466] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.225266][T15466] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.232591][T15466] bridge_slave_0: entered allmulticast mode [ 752.240872][T15466] bridge_slave_0: entered promiscuous mode [ 752.258414][T15466] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.265836][T15466] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.293241][T15466] bridge_slave_1: entered allmulticast mode [ 752.302546][T15466] bridge_slave_1: entered promiscuous mode [ 752.505353][T15466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.556149][T15466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.955378][ T30] audit: type=1800 audit(4295032952.800:116): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2428" name="dmabuf" dev="dmabuf" ino=12 res=0 errno=0 [ 752.997937][T15526] ima: policy update failed [ 753.018174][T15526] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2428'. [ 753.033677][ T30] audit: type=1802 audit(4295032952.860:117): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2428" res=0 errno=0 [ 753.293017][ T5842] Bluetooth: hci0: command tx timeout [ 753.458963][ C0] bridge0: port 3(team0) entered forwarding state [ 753.465533][ C0] bridge0: topology change detected, propagating [ 753.523099][T15466] team0: Port device team_slave_0 added [ 753.569351][T15466] team0: Port device team_slave_1 added [ 754.383789][T15433] team0: left allmulticast mode [ 754.397611][T15433] team_slave_0: left allmulticast mode [ 754.404079][T15433] team0: left promiscuous mode [ 754.409059][T15433] team_slave_0: left promiscuous mode [ 754.417680][T15433] bridge0: port 3(team0) entered disabled state [ 754.443078][T15433] bridge_slave_1: left allmulticast mode [ 754.466415][T15433] bridge_slave_1: left promiscuous mode [ 754.514445][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.550507][T15433] bridge_slave_0: left allmulticast mode [ 754.581453][T15433] bridge_slave_0: left promiscuous mode [ 754.587522][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.998467][ C1] vcan0: j1939_tp_rxtimer: 0xffff888070911000: rx timeout, send abort [ 755.008864][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880293f5000: rx timeout, send abort [ 755.017548][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888070911000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 755.033108][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880293f5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 755.358086][ T5842] Bluetooth: hci0: command tx timeout [ 755.855303][T15433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.886581][T15433] bond0 (unregistering): Released all slaves [ 756.005065][T15433] .SR: left promiscuous mode [ 756.091257][T15466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.101826][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.161005][T15466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.177904][T15466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.190270][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.241774][T15466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.309730][T15433] tipc: Left network mode [ 756.661547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.668366][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.892464][T15466] hsr_slave_0: entered promiscuous mode [ 756.920750][T15466] hsr_slave_1: entered promiscuous mode [ 756.927181][T15466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.979372][T15466] Cannot create hsr debugfs directory [ 757.064521][T15559] FAULT_INJECTION: forcing a failure. [ 757.064521][T15559] name failslab, interval 1, probability 0, space 0, times 0 [ 757.085149][T15559] CPU: 0 UID: 0 PID: 15559 Comm: syz.0.2434 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 757.085200][T15559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.085223][T15559] Call Trace: [ 757.085236][T15559] [ 757.085250][T15559] dump_stack_lvl+0x16c/0x1f0 [ 757.085298][T15559] should_fail_ex+0x512/0x640 [ 757.085355][T15559] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 757.085401][T15559] should_failslab+0xc2/0x120 [ 757.085446][T15559] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 757.085487][T15559] ? __kernfs_new_node+0xd2/0x8e0 [ 757.085531][T15559] __kernfs_new_node+0xd2/0x8e0 [ 757.085575][T15559] ? __pfx___kernfs_new_node+0x10/0x10 [ 757.085624][T15559] ? find_held_lock+0x2b/0x80 [ 757.085670][T15559] ? kernfs_root+0xee/0x2a0 [ 757.085713][T15559] kernfs_new_node+0x13c/0x1e0 [ 757.085765][T15559] __kernfs_create_file+0x53/0x350 [ 757.085822][T15559] sysfs_add_file_mode_ns+0x207/0x3c0 [ 757.085870][T15559] internal_create_group+0x578/0xf30 [ 757.085921][T15559] ? __pfx_internal_create_group+0x10/0x10 [ 757.085968][T15559] ? kernfs_create_link+0x1bd/0x240 [ 757.086029][T15559] internal_create_groups+0x9d/0x150 [ 757.086074][T15559] device_add+0x77f/0x1a70 [ 757.086113][T15559] ? __pfx_device_add+0x10/0x10 [ 757.086164][T15559] __add_disk+0x457/0xf00 [ 757.086212][T15559] ? find_held_lock+0x2b/0x80 [ 757.086262][T15559] add_disk_fwnode+0x3f8/0x5d0 [ 757.086316][T15559] zram_add+0x493/0x6c0 [ 757.086360][T15559] ? __pfx_zram_add+0x10/0x10 [ 757.086425][T15559] ? find_held_lock+0x2b/0x80 [ 757.086480][T15559] ? __pfx_hot_add_show+0x10/0x10 [ 757.086516][T15559] ? __pfx_class_attr_show+0x10/0x10 [ 757.086572][T15559] hot_add_show+0x21/0x80 [ 757.086609][T15559] class_attr_show+0x72/0xa0 [ 757.086666][T15559] sysfs_kf_seq_show+0x216/0x3e0 [ 757.086731][T15559] seq_read_iter+0x506/0x12c0 [ 757.086807][T15559] kernfs_fop_read_iter+0x40f/0x5a0 [ 757.086857][T15559] ? rw_verify_area+0xcf/0x680 [ 757.086917][T15559] vfs_read+0x8bc/0xc60 [ 757.086959][T15559] ? __pfx___mutex_lock+0x10/0x10 [ 757.087002][T15559] ? __pfx_vfs_read+0x10/0x10 [ 757.087069][T15559] ksys_read+0x12a/0x250 [ 757.087105][T15559] ? __pfx_ksys_read+0x10/0x10 [ 757.087155][T15559] do_syscall_64+0xcd/0x490 [ 757.087200][T15559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.087236][T15559] RIP: 0033:0x7fb7ca78e969 [ 757.087264][T15559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.087301][T15559] RSP: 002b:00007fb7cb6cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.087335][T15559] RAX: ffffffffffffffda RBX: 00007fb7ca9b5fa0 RCX: 00007fb7ca78e969 [ 757.087369][T15559] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 757.087392][T15559] RBP: 00007fb7ca810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 757.087414][T15559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.087436][T15559] R13: 0000000000000000 R14: 00007fb7ca9b5fa0 R15: 00007fff2153cea8 [ 757.087483][T15559] [ 757.450492][ T5842] Bluetooth: hci0: command tx timeout [ 758.184157][T15573] nbd: must specify a device to reconfigure [ 758.427579][T15433] hsr_slave_0: left promiscuous mode [ 758.516947][T15433] hsr_slave_1: left promiscuous mode [ 758.524666][T15433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.616637][T15433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.715314][T15433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.736021][T15433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.815655][T15433] veth1_macvtap: left promiscuous mode [ 758.830606][T15433] veth0_macvtap: left promiscuous mode [ 758.909348][T15433] veth1_vlan: left promiscuous mode [ 758.916004][T15433] veth0_vlan: left promiscuous mode [ 759.153139][T15587] Unable to find swap-space signature [ 759.682099][T15594] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2443'. [ 759.835637][T15433] team0 (unregistering): Port device team_slave_0 removed [ 761.550634][T15466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 761.602383][T15466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.677924][T15466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.729048][T15466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 762.436824][T15641] FAULT_INJECTION: forcing a failure. [ 762.436824][T15641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.452265][T15641] CPU: 0 UID: 0 PID: 15641 Comm: syz.1.2453 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 762.452308][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.452328][T15641] Call Trace: [ 762.452339][T15641] [ 762.452351][T15641] dump_stack_lvl+0x16c/0x1f0 [ 762.452395][T15641] should_fail_ex+0x512/0x640 [ 762.452449][T15641] should_fail_alloc_page+0xe7/0x130 [ 762.452495][T15641] prepare_alloc_pages+0x3c2/0x610 [ 762.452547][T15641] ? rcu_is_watching+0x12/0xc0 [ 762.452597][T15641] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 762.452649][T15641] ? __lock_acquire+0xb8a/0x1c90 [ 762.452699][T15641] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.452741][T15641] ? do_raw_spin_lock+0x12c/0x2b0 [ 762.452782][T15641] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 762.452822][T15641] ? find_held_lock+0x2b/0x80 [ 762.452881][T15641] ? __lock_acquire+0xb8a/0x1c90 [ 762.452913][T15641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.452956][T15641] ? policy_nodemask+0xea/0x4e0 [ 762.453003][T15641] alloc_pages_mpol+0x1fb/0x550 [ 762.453048][T15641] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 762.453103][T15641] folio_alloc_mpol_noprof+0x36/0x2f0 [ 762.453159][T15641] shmem_alloc_folio+0x135/0x160 [ 762.453193][T15641] shmem_alloc_and_add_folio+0x499/0xc20 [ 762.453242][T15641] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 762.453287][T15641] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 762.453335][T15641] shmem_get_folio_gfp+0x67f/0x1600 [ 762.453384][T15641] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 762.453428][T15641] ? filemap_map_pages+0xf6c/0x1680 [ 762.453476][T15641] shmem_fault+0x1fe/0xa30 [ 762.453517][T15641] ? __pfx_shmem_fault+0x10/0x10 [ 762.453564][T15641] ? __pfx_filemap_map_pages+0x10/0x10 [ 762.453626][T15641] __do_fault+0x10d/0x490 [ 762.453672][T15641] __handle_mm_fault+0x39fb/0x5450 [ 762.453717][T15641] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.453778][T15641] ? find_vma+0xbf/0x140 [ 762.453824][T15641] ? __pfx_find_vma+0x10/0x10 [ 762.453875][T15641] handle_mm_fault+0x3fe/0xad0 [ 762.453919][T15641] do_user_addr_fault+0x7a6/0x1370 [ 762.453959][T15641] ? rcu_is_watching+0x12/0xc0 [ 762.454009][T15641] exc_page_fault+0x5c/0xb0 [ 762.454047][T15641] asm_exc_page_fault+0x26/0x30 [ 762.454078][T15641] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 762.454140][T15641] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 762.454171][T15641] RSP: 0018:ffffc90003d6f5b0 EFLAGS: 00050202 [ 762.454196][T15641] RAX: 0000000000000001 RBX: 000000000000ffcc RCX: 0000000000004fcc [ 762.454217][T15641] RDX: ffffed10092fdffc RSI: 000000000000b000 RDI: ffff8880497eb010 [ 762.454238][T15641] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10092fdffb [ 762.454258][T15641] R10: ffff8880497effdb R11: 0000000000000000 R12: ffffc90003d6fd60 [ 762.454279][T15641] R13: 000000000000ffcc R14: ffff8880497e0010 R15: 00007ffffffff000 [ 762.454322][T15641] _copy_from_iter+0x383/0x16f0 [ 762.454371][T15641] ? ip_route_output_key_hash+0x16b/0x2e0 [ 762.454415][T15641] ? __pfx__copy_from_iter+0x10/0x10 [ 762.454471][T15641] ? xfrm_lookup_route+0x6a/0x200 [ 762.454519][T15641] raw_sendmsg+0x1ee0/0x3820 [ 762.454569][T15641] ? __pfx_raw_sendmsg+0x10/0x10 [ 762.454624][T15641] ? __lock_acquire+0x622/0x1c90 [ 762.454673][T15641] ? __pfx___might_resched+0x10/0x10 [ 762.454718][T15641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.454760][T15641] ? aa_sk_perm+0x2f4/0xb10 [ 762.454802][T15641] ? __import_iovec+0x1dd/0x650 [ 762.454850][T15641] ? __might_fault+0xe3/0x190 [ 762.454884][T15641] ? __might_fault+0x13b/0x190 [ 762.454922][T15641] ? __pfx_raw_sendmsg+0x10/0x10 [ 762.454960][T15641] inet_sendmsg+0x119/0x140 [ 762.454996][T15641] ____sys_sendmsg+0x973/0xc70 [ 762.455044][T15641] ? copy_msghdr_from_user+0x10a/0x160 [ 762.455081][T15641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.455137][T15641] ? __pfx__kstrtoull+0x10/0x10 [ 762.455183][T15641] ___sys_sendmsg+0x134/0x1d0 [ 762.455225][T15641] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.455284][T15641] ? find_held_lock+0x2b/0x80 [ 762.455353][T15641] __sys_sendmmsg+0x200/0x420 [ 762.455398][T15641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 762.455451][T15641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 762.455509][T15641] ? fput+0x70/0xf0 [ 762.455549][T15641] ? ksys_write+0x1ac/0x250 [ 762.455582][T15641] ? __pfx_ksys_write+0x10/0x10 [ 762.455630][T15641] __x64_sys_sendmmsg+0x9c/0x100 [ 762.455669][T15641] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.455705][T15641] do_syscall_64+0xcd/0x490 [ 762.455746][T15641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.455777][T15641] RIP: 0033:0x7f62c678e969 [ 762.455802][T15641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.455832][T15641] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 762.455861][T15641] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 762.455883][T15641] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 762.455902][T15641] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 762.455922][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.455942][T15641] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 762.455983][T15641] [ 762.999129][T15466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.039119][T15466] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.052731][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.059971][T15455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.149886][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.157124][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.945783][T15666] FAULT_INJECTION: forcing a failure. [ 763.945783][T15666] name failslab, interval 1, probability 0, space 0, times 0 [ 764.042001][T15666] CPU: 0 UID: 0 PID: 15666 Comm: syz.0.2458 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 764.042048][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.042069][T15666] Call Trace: [ 764.042080][T15666] [ 764.042094][T15666] dump_stack_lvl+0x16c/0x1f0 [ 764.042137][T15666] should_fail_ex+0x512/0x640 [ 764.042184][T15666] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 764.042229][T15666] should_failslab+0xc2/0x120 [ 764.042272][T15666] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 764.042312][T15666] ? __alloc_skb+0x2b2/0x380 [ 764.042356][T15666] __alloc_skb+0x2b2/0x380 [ 764.042392][T15666] ? __pfx___alloc_skb+0x10/0x10 [ 764.042433][T15666] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 764.042489][T15666] netlink_alloc_large_skb+0x69/0x130 [ 764.042541][T15666] netlink_sendmsg+0x6a1/0xdd0 [ 764.042596][T15666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.042662][T15666] ____sys_sendmsg+0xa95/0xc70 [ 764.042714][T15666] ? copy_msghdr_from_user+0x10a/0x160 [ 764.042754][T15666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.042845][T15666] ___sys_sendmsg+0x134/0x1d0 [ 764.042888][T15666] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.042924][T15666] ? __lock_acquire+0x622/0x1c90 [ 764.043005][T15666] __sys_sendmsg+0x16d/0x220 [ 764.043053][T15666] ? __pfx___sys_sendmsg+0x10/0x10 [ 764.043122][T15666] do_syscall_64+0xcd/0x490 [ 764.043168][T15666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.043203][T15666] RIP: 0033:0x7fb7ca78e969 [ 764.043230][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.043263][T15666] RSP: 002b:00007fb7cb6cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.043294][T15666] RAX: ffffffffffffffda RBX: 00007fb7ca9b5fa0 RCX: 00007fb7ca78e969 [ 764.043316][T15666] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 764.043337][T15666] RBP: 00007fb7cb6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 764.043358][T15666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.043379][T15666] R13: 0000000000000000 R14: 00007fb7ca9b5fa0 R15: 00007fff2153cea8 [ 764.043421][T15666] [ 764.640741][T15466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.201135][T15466] veth0_vlan: entered promiscuous mode [ 765.259535][T15466] veth1_vlan: entered promiscuous mode [ 765.293524][T15466] veth0_macvtap: entered promiscuous mode [ 765.341421][T15466] veth1_macvtap: entered promiscuous mode [ 765.474672][T15466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.549723][T15466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.581420][T15466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.608655][T15688] nfs: Bad value for 'source' [ 765.663179][T15466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.683670][T15466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.684971][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 765.692425][T15466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.080479][T15455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.114655][T15455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.189240][T15433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.229309][T15433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.488890][T15713] netlink: zone id is out of range [ 766.640703][T15713] netlink: zone id is out of range [ 766.727730][T15713] netlink: zone id is out of range [ 766.738824][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 766.815328][T15713] netlink: zone id is out of range [ 766.944829][T15713] netlink: set zone limit has 8 unknown bytes [ 767.085494][T15729] binder: 15719:15729 ioctl c018620c 0 returned -22 [ 769.604686][T11114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 769.624392][T11114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 769.643447][T11114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 769.653433][T11114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 769.661337][T11114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 770.592178][T15786] netlink: 'syz.1.2479': attribute type 27 has an invalid length. [ 770.605793][T15786] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2479'. [ 770.871638][T15790] netlink: zone id is out of range [ 770.908174][T15790] netlink: zone id is out of range [ 770.914386][T15790] netlink: zone id is out of range [ 770.921608][T15790] netlink: zone id is out of range [ 770.939524][T15790] netlink: set zone limit has 8 unknown bytes [ 771.361560][T15798] FAULT_INJECTION: forcing a failure. [ 771.361560][T15798] name failslab, interval 1, probability 0, space 0, times 0 [ 771.380866][T15454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.398933][T15798] CPU: 1 UID: 0 PID: 15798 Comm: syz.2.2482 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 771.398982][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.399005][T15798] Call Trace: [ 771.399017][T15798] [ 771.399032][T15798] dump_stack_lvl+0x16c/0x1f0 [ 771.399079][T15798] should_fail_ex+0x512/0x640 [ 771.399130][T15798] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 771.399176][T15798] should_failslab+0xc2/0x120 [ 771.399222][T15798] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 771.399261][T15798] ? __pfx___might_resched+0x10/0x10 [ 771.399310][T15798] ? __anon_vma_prepare+0x344/0x5e0 [ 771.399354][T15798] __anon_vma_prepare+0x344/0x5e0 [ 771.399390][T15798] ? __pfx___pte_alloc+0x10/0x10 [ 771.399442][T15798] __vmf_anon_prepare+0x11c/0x240 [ 771.399497][T15798] __handle_mm_fault+0x2881/0x5450 [ 771.399545][T15798] ? __pfx___handle_mm_fault+0x10/0x10 [ 771.399619][T15798] handle_mm_fault+0x3fe/0xad0 [ 771.399663][T15798] __get_user_pages+0x570/0x3bb0 [ 771.399751][T15798] ? __pfx_mt_find+0x10/0x10 [ 771.399797][T15798] ? __pfx___get_user_pages+0x10/0x10 [ 771.399868][T15798] populate_vma_page_range+0x278/0x3a0 [ 771.399905][T15798] ? __pfx_populate_vma_page_range+0x10/0x10 [ 771.399944][T15798] ? __pfx_find_vma_intersection+0x10/0x10 [ 771.399999][T15798] ? do_mmap+0x69c/0x11b0 [ 771.400055][T15798] __mm_populate+0x1d8/0x380 [ 771.400090][T15798] ? __pfx___mm_populate+0x10/0x10 [ 771.400126][T15798] ? up_write+0x1b2/0x520 [ 771.400170][T15798] vm_mmap_pgoff+0x362/0x450 [ 771.400227][T15798] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 771.400287][T15798] ? __x64_sys_futex+0x1e0/0x4c0 [ 771.400316][T15798] ? __x64_sys_futex+0x1e9/0x4c0 [ 771.400354][T15798] ksys_mmap_pgoff+0x7d/0x5c0 [ 771.400404][T15798] ? xfd_validate_state+0x61/0x180 [ 771.400438][T15798] ? __pfx_do_writev+0x10/0x10 [ 771.400477][T15798] __x64_sys_mmap+0x125/0x190 [ 771.400520][T15798] do_syscall_64+0xcd/0x490 [ 771.400565][T15798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.400599][T15798] RIP: 0033:0x7f952b38e969 [ 771.400627][T15798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.400662][T15798] RSP: 002b:00007f95291f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 771.400695][T15798] RAX: ffffffffffffffda RBX: 00007f952b5b5fa0 RCX: 00007f952b38e969 [ 771.400718][T15798] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 771.400740][T15798] RBP: 00007f952b410ab1 R08: ffffffffffffffff R09: 0000000000000000 [ 771.400762][T15798] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 771.400784][T15798] R13: 0000000000000000 R14: 00007f952b5b5fa0 R15: 00007ffefe8b4a88 [ 771.400828][T15798] [ 771.672508][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.702744][T15773] chnl_net:caif_netlink_parms(): no params data found [ 771.763345][T11114] Bluetooth: hci1: command tx timeout [ 771.815990][T15454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.007931][T15454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.645726][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.675088][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.693356][T15773] bridge_slave_0: entered allmulticast mode [ 772.716322][T15773] bridge_slave_0: entered promiscuous mode [ 772.749132][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.770585][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.790032][T15773] bridge_slave_1: entered allmulticast mode [ 772.805980][T15773] bridge_slave_1: entered promiscuous mode [ 773.078125][T15773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.190864][T15773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.421932][T15773] team0: Port device team_slave_0 added [ 773.438994][T15454] team0: left allmulticast mode [ 773.456682][T15454] team_slave_0: left allmulticast mode [ 773.462656][T15454] team0: left promiscuous mode [ 773.492859][T15454] team_slave_0: left promiscuous mode [ 773.501342][T15454] bridge0: port 4(team0) entered disabled state [ 773.530653][T15454] batadv0: left allmulticast mode [ 773.542518][T15454] batadv0: left promiscuous mode [ 773.552731][T15454] bridge0: port 3(batadv0) entered disabled state [ 773.580288][T15454] bridge_slave_0: left allmulticast mode [ 773.592287][T15454] bridge_slave_0: left promiscuous mode [ 773.602810][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.821760][T11114] Bluetooth: hci1: command tx timeout [ 774.426701][T15832] random: crng reseeded on system resumption [ 774.538327][T15454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.595030][T15454] bond0 (unregistering): Released all slaves [ 774.648023][T15773] team0: Port device team_slave_1 added [ 774.813933][T15773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.846370][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.893381][T15773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.987380][T15454] .SR: left promiscuous mode [ 775.143391][T15773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.167838][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.194333][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.279224][T15773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.328627][T15842] FAULT_INJECTION: forcing a failure. [ 775.328627][T15842] name failslab, interval 1, probability 0, space 0, times 0 [ 775.341622][T15842] CPU: 1 UID: 0 PID: 15842 Comm: syz.2.2491 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 775.341665][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.341684][T15842] Call Trace: [ 775.341694][T15842] [ 775.341706][T15842] dump_stack_lvl+0x16c/0x1f0 [ 775.341747][T15842] should_fail_ex+0x512/0x640 [ 775.341790][T15842] ? __kmalloc_noprof+0xbf/0x510 [ 775.341830][T15842] ? br_dev_siocdevprivate+0x189/0x1650 [ 775.341871][T15842] should_failslab+0xc2/0x120 [ 775.341912][T15842] __kmalloc_noprof+0xd2/0x510 [ 775.341948][T15842] ? trace_sched_exit_tp+0xde/0x130 [ 775.342004][T15842] br_dev_siocdevprivate+0x189/0x1650 [ 775.342062][T15842] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 775.342108][T15842] ? __lock_acquire+0xb8a/0x1c90 [ 775.342143][T15842] ? __pfx___schedule+0x10/0x10 [ 775.342182][T15842] ? do_raw_spin_lock+0x12c/0x2b0 [ 775.342249][T15842] ? netdev_name_node_lookup+0x127/0x180 [ 775.342297][T15842] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 775.342338][T15842] dev_ifsioc+0x8ee/0x1ee0 [ 775.342377][T15842] ? __pfx_dev_ifsioc+0x10/0x10 [ 775.342413][T15842] ? __pfx___mutex_lock+0x10/0x10 [ 775.342465][T15842] ? dev_load+0x8e/0x240 [ 775.342518][T15842] dev_ioctl+0x1b2/0x1060 [ 775.342548][T15842] sock_ioctl+0x5b3/0x6b0 [ 775.342584][T15842] ? __pfx_sock_ioctl+0x10/0x10 [ 775.342625][T15842] ? hook_file_ioctl_common+0x145/0x410 [ 775.342658][T15842] ? __fget_files+0x20e/0x3c0 [ 775.342685][T15842] ? __pfx_sock_ioctl+0x10/0x10 [ 775.342724][T15842] __x64_sys_ioctl+0x18b/0x210 [ 775.342763][T15842] do_syscall_64+0xcd/0x490 [ 775.342792][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.342815][T15842] RIP: 0033:0x7f952b38e969 [ 775.342832][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.342855][T15842] RSP: 002b:00007f95291f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.342877][T15842] RAX: ffffffffffffffda RBX: 00007f952b5b5fa0 RCX: 00007f952b38e969 [ 775.342893][T15842] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 775.342907][T15842] RBP: 00007f95291f6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.342923][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.342937][T15842] R13: 0000000000000000 R14: 00007f952b5b5fa0 R15: 00007ffefe8b4a88 [ 775.342965][T15842] [ 775.581332][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.891914][T11114] Bluetooth: hci1: command tx timeout [ 776.186213][T15773] hsr_slave_0: entered promiscuous mode [ 776.210530][T15773] hsr_slave_1: entered promiscuous mode [ 776.223108][T15773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.240768][T15773] Cannot create hsr debugfs directory [ 776.863153][T15454] hsr_slave_0: left promiscuous mode [ 776.887873][T15454] hsr_slave_1: left promiscuous mode [ 776.925855][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.949091][T15454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.964582][T15878] misc userio: No port type given on /dev/userio [ 776.974246][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.987716][T15454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.153550][T15454] veth1_macvtap: left promiscuous mode [ 777.160148][T15454] veth0_macvtap: left promiscuous mode [ 777.166746][T15454] veth1_vlan: left promiscuous mode [ 777.172120][T15454] veth0_vlan: left promiscuous mode [ 777.970480][T11114] Bluetooth: hci1: command tx timeout [ 778.074865][T15885] misc userio: Invalid payload size [ 778.216363][T15454] team0 (unregistering): Port device team_slave_0 removed [ 778.834629][T15881] Process accounting paused [ 779.429227][T15902] FAULT_INJECTION: forcing a failure. [ 779.429227][T15902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.447708][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.1.2502 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 779.447752][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.447772][T15902] Call Trace: [ 779.447784][T15902] [ 779.447796][T15902] dump_stack_lvl+0x16c/0x1f0 [ 779.447840][T15902] should_fail_ex+0x512/0x640 [ 779.447892][T15902] _copy_from_user+0x2e/0xd0 [ 779.447945][T15902] io_sqe_files_register+0x219/0x960 [ 779.448001][T15902] ? __pfx_io_sqe_files_register+0x10/0x10 [ 779.448050][T15902] ? __mutex_trylock_common+0xe9/0x250 [ 779.448077][T15902] ? __pfx___mutex_trylock_common+0x10/0x10 [ 779.448105][T15902] __io_uring_register+0x12e7/0x2310 [ 779.448139][T15902] ? trace_contention_end+0xdd/0x130 [ 779.448163][T15902] ? __pfx___io_uring_register+0x10/0x10 [ 779.448193][T15902] ? __mutex_lock+0x1ca/0xb90 [ 779.448223][T15902] ? __x64_sys_io_uring_register+0x159/0x280 [ 779.448258][T15902] ? __pfx___mutex_lock+0x10/0x10 [ 779.448293][T15902] ? __fget_files+0x20e/0x3c0 [ 779.448315][T15902] ? __fput_deferred+0x370/0x370 [ 779.448353][T15902] __x64_sys_io_uring_register+0x169/0x280 [ 779.448399][T15902] do_syscall_64+0xcd/0x490 [ 779.448430][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.448454][T15902] RIP: 0033:0x7f62c678e969 [ 779.448473][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.448497][T15902] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 779.448520][T15902] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 779.448536][T15902] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000002 [ 779.448551][T15902] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 779.448566][T15902] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000002 [ 779.448581][T15902] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 779.448611][T15902] [ 780.279896][T15454] team0: left allmulticast mode [ 780.299692][T15454] team_slave_0: left allmulticast mode [ 780.305533][T15454] team_slave_1: left allmulticast mode [ 780.354073][T15454] team0: left promiscuous mode [ 780.377801][T15454] team_slave_0: left promiscuous mode [ 780.392955][T15454] team_slave_1: left promiscuous mode [ 780.418093][T15454] bridge0: port 3(team0) entered disabled state [ 780.458268][T15454] bridge_slave_1: left allmulticast mode [ 780.463989][T15454] bridge_slave_1: left promiscuous mode [ 780.482515][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.519096][T15454] bridge_slave_0: left allmulticast mode [ 780.535074][T15454] bridge_slave_0: left promiscuous mode [ 780.545408][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.998357][T15942] netlink: 'syz.1.2512': attribute type 27 has an invalid length. [ 781.019866][T15942] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2512'. [ 781.295481][T15454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.307743][T15454] bond0 (unregistering): Released all slaves [ 781.329752][T15930] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2508'. [ 781.342718][T15942] FAULT_INJECTION: forcing a failure. [ 781.342718][T15942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.382538][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.1.2512 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 781.382588][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.382609][T15942] Call Trace: [ 781.382620][T15942] [ 781.382634][T15942] dump_stack_lvl+0x16c/0x1f0 [ 781.382681][T15942] should_fail_ex+0x512/0x640 [ 781.382739][T15942] _copy_from_user+0x2e/0xd0 [ 781.382795][T15942] copy_msghdr_from_user+0x98/0x160 [ 781.382839][T15942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 781.382892][T15942] ? kfree+0x24f/0x4d0 [ 781.382921][T15942] ? __pfx__kstrtoull+0x10/0x10 [ 781.382973][T15942] ___sys_sendmsg+0xfe/0x1d0 [ 781.383020][T15942] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.383103][T15942] ? __pfx___might_resched+0x10/0x10 [ 781.383166][T15942] __sys_sendmmsg+0x200/0x420 [ 781.383223][T15942] ? __pfx___sys_sendmmsg+0x10/0x10 [ 781.383284][T15942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.383348][T15942] ? fput+0x70/0xf0 [ 781.383393][T15942] ? ksys_write+0x1ac/0x250 [ 781.383429][T15942] ? __pfx_ksys_write+0x10/0x10 [ 781.383475][T15942] __x64_sys_sendmmsg+0x9c/0x100 [ 781.383518][T15942] ? lockdep_hardirqs_on+0x7c/0x110 [ 781.383562][T15942] do_syscall_64+0xcd/0x490 [ 781.383608][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.383646][T15942] RIP: 0033:0x7f62c678e969 [ 781.383673][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.383709][T15942] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 781.383743][T15942] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 781.383767][T15942] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 781.383790][T15942] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 781.383813][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.383835][T15942] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 781.383882][T15942] [ 781.724348][T15773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.783540][T15454] .SR: left promiscuous mode [ 781.885911][T15773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 781.906027][T15773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 781.933992][T15773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.980938][T15454] tipc: Left network mode [ 782.004425][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 783.059380][T15773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.192054][T15975] .SR: entered promiscuous mode [ 783.594418][T15454] hsr_slave_0: left promiscuous mode [ 783.668163][T15454] hsr_slave_1: left promiscuous mode [ 783.702618][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.732776][T15454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.930846][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.947808][T15454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.990445][T15454] veth1_macvtap: left promiscuous mode [ 783.996375][T15454] veth0_macvtap: left promiscuous mode [ 784.002657][T15454] veth1_vlan: left promiscuous mode [ 784.009225][T15454] veth0_vlan: left promiscuous mode [ 784.783803][T15454] team0 (unregistering): Port device team_slave_1 removed [ 784.860888][T15454] team0 (unregistering): Port device team_slave_0 removed [ 785.442612][T15992] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2521'. [ 785.472387][T15773] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.617192][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.624489][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.714746][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.721966][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.719289][T16035] ima: policy update failed [ 786.737667][ T30] audit: type=1802 audit(4295032986.745:118): pid=16035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2525" res=0 errno=0 [ 787.066575][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.254374][T15773] veth0_vlan: entered promiscuous mode [ 787.338385][T15773] veth1_vlan: entered promiscuous mode [ 787.485517][T15773] veth0_macvtap: entered promiscuous mode [ 787.518064][T15773] veth1_macvtap: entered promiscuous mode [ 787.577923][T15773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.598646][T15773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.648600][T15773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.667949][T15773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.689400][T15773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.698180][T15773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.941299][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.960232][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.073859][T15454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.082331][T15454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.152336][T16059] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2531'. [ 788.361735][T16073] FAULT_INJECTION: forcing a failure. [ 788.361735][T16073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.425335][T16073] CPU: 1 UID: 0 PID: 16073 Comm: syz.0.2471 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 788.425383][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.425404][T16073] Call Trace: [ 788.425415][T16073] [ 788.425429][T16073] dump_stack_lvl+0x16c/0x1f0 [ 788.425473][T16073] should_fail_ex+0x512/0x640 [ 788.425525][T16073] _copy_from_iter+0x29f/0x16f0 [ 788.425581][T16073] ? __alloc_skb+0x200/0x380 [ 788.425620][T16073] ? __pfx__copy_from_iter+0x10/0x10 [ 788.425708][T16073] ? __lock_acquire+0xb8a/0x1c90 [ 788.425752][T16073] netlink_sendmsg+0x829/0xdd0 [ 788.425808][T16073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.425872][T16073] ____sys_sendmsg+0xa95/0xc70 [ 788.425923][T16073] ? copy_msghdr_from_user+0x10a/0x160 [ 788.425964][T16073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.426035][T16073] ___sys_sendmsg+0x134/0x1d0 [ 788.426078][T16073] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.426115][T16073] ? __lock_acquire+0x622/0x1c90 [ 788.426199][T16073] __sys_sendmsg+0x16d/0x220 [ 788.426240][T16073] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.426307][T16073] do_syscall_64+0xcd/0x490 [ 788.426358][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.426392][T16073] RIP: 0033:0x7efe1998e969 [ 788.426418][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.426451][T16073] RSP: 002b:00007efe1a865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.426483][T16073] RAX: ffffffffffffffda RBX: 00007efe19bb5fa0 RCX: 00007efe1998e969 [ 788.426505][T16073] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 788.426527][T16073] RBP: 00007efe1a865090 R08: 0000000000000000 R09: 0000000000000000 [ 788.426548][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.426569][T16073] R13: 0000000000000000 R14: 00007efe19bb5fa0 R15: 00007fff53ba3a68 [ 788.426612][T16073] [ 788.880438][T16075] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 788.921898][T16075] netlink: 'syz.1.2536': attribute type 27 has an invalid length. [ 788.949339][T16075] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2536'. [ 789.349111][T16085] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2541'. [ 789.965626][T16097] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2545'. [ 790.497007][T16110] FAULT_INJECTION: forcing a failure. [ 790.497007][T16110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.530166][T16110] CPU: 1 UID: 0 PID: 16110 Comm: syz.1.2549 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 790.530214][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.530235][T16110] Call Trace: [ 790.530246][T16110] [ 790.530259][T16110] dump_stack_lvl+0x16c/0x1f0 [ 790.530303][T16110] should_fail_ex+0x512/0x640 [ 790.530359][T16110] should_fail_alloc_page+0xe7/0x130 [ 790.530406][T16110] prepare_alloc_pages+0x3c2/0x610 [ 790.530458][T16110] ? rcu_is_watching+0x12/0xc0 [ 790.530509][T16110] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 790.530553][T16110] ? __lock_acquire+0xb8a/0x1c90 [ 790.530603][T16110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.530646][T16110] ? do_raw_spin_lock+0x12c/0x2b0 [ 790.530692][T16110] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 790.530732][T16110] ? find_held_lock+0x2b/0x80 [ 790.530791][T16110] ? __lock_acquire+0xb8a/0x1c90 [ 790.530824][T16110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.530867][T16110] ? policy_nodemask+0xea/0x4e0 [ 790.530925][T16110] alloc_pages_mpol+0x1fb/0x550 [ 790.530970][T16110] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 790.531024][T16110] folio_alloc_mpol_noprof+0x36/0x2f0 [ 790.531076][T16110] shmem_alloc_folio+0x135/0x160 [ 790.531109][T16110] shmem_alloc_and_add_folio+0x499/0xc20 [ 790.531163][T16110] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 790.531207][T16110] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 790.531254][T16110] shmem_get_folio_gfp+0x67f/0x1600 [ 790.531302][T16110] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 790.531346][T16110] ? filemap_map_pages+0xf6c/0x1680 [ 790.531392][T16110] shmem_fault+0x1fe/0xa30 [ 790.531431][T16110] ? __pfx_shmem_fault+0x10/0x10 [ 790.531476][T16110] ? __pfx_filemap_map_pages+0x10/0x10 [ 790.531530][T16110] __do_fault+0x10d/0x490 [ 790.531574][T16110] __handle_mm_fault+0x39fb/0x5450 [ 790.531618][T16110] ? __pfx___handle_mm_fault+0x10/0x10 [ 790.531676][T16110] ? find_vma+0xbf/0x140 [ 790.531721][T16110] ? __pfx_find_vma+0x10/0x10 [ 790.531772][T16110] handle_mm_fault+0x3fe/0xad0 [ 790.531813][T16110] do_user_addr_fault+0x7a6/0x1370 [ 790.531855][T16110] ? rcu_is_watching+0x12/0xc0 [ 790.531904][T16110] exc_page_fault+0x5c/0xb0 [ 790.531942][T16110] asm_exc_page_fault+0x26/0x30 [ 790.531973][T16110] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 790.532024][T16110] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 790.532055][T16110] RSP: 0018:ffffc900036975b0 EFLAGS: 00050202 [ 790.532081][T16110] RAX: 0000000000000001 RBX: 000000000000ffcc RCX: 0000000000003fcc [ 790.532102][T16110] RDX: ffffed100c7d5ffc RSI: 000000000000c000 RDI: ffff888063eac010 [ 790.532124][T16110] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100c7d5ffb [ 790.532207][T16110] R10: ffff888063eaffdb R11: 0000000000000000 R12: ffffc90003697d60 [ 790.532230][T16110] R13: 000000000000ffcc R14: ffff888063ea0010 R15: 00007ffffffff000 [ 790.532272][T16110] _copy_from_iter+0x383/0x16f0 [ 790.532326][T16110] ? ip_route_output_key_hash+0x16b/0x2e0 [ 790.532371][T16110] ? __pfx__copy_from_iter+0x10/0x10 [ 790.532428][T16110] ? xfrm_lookup_route+0x6a/0x200 [ 790.532478][T16110] raw_sendmsg+0x1ee0/0x3820 [ 790.532529][T16110] ? __pfx_raw_sendmsg+0x10/0x10 [ 790.532579][T16110] ? __lock_acquire+0x622/0x1c90 [ 790.532628][T16110] ? __pfx___might_resched+0x10/0x10 [ 790.532674][T16110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.532737][T16110] ? aa_sk_perm+0x2f4/0xb10 [ 790.532782][T16110] ? __import_iovec+0x1dd/0x650 [ 790.532833][T16110] ? __might_fault+0xe3/0x190 [ 790.532869][T16110] ? __might_fault+0x13b/0x190 [ 790.532908][T16110] ? __pfx_raw_sendmsg+0x10/0x10 [ 790.532947][T16110] inet_sendmsg+0x119/0x140 [ 790.532985][T16110] ____sys_sendmsg+0x973/0xc70 [ 790.533039][T16110] ? copy_msghdr_from_user+0x10a/0x160 [ 790.533080][T16110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.533140][T16110] ? __pfx__kstrtoull+0x10/0x10 [ 790.533194][T16110] ___sys_sendmsg+0x134/0x1d0 [ 790.533238][T16110] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.533300][T16110] ? find_held_lock+0x2b/0x80 [ 790.533371][T16110] __sys_sendmmsg+0x200/0x420 [ 790.533419][T16110] ? __pfx___sys_sendmmsg+0x10/0x10 [ 790.533487][T16110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 790.533546][T16110] ? fput+0x70/0xf0 [ 790.533607][T16110] ? ksys_write+0x1ac/0x250 [ 790.533650][T16110] ? __pfx_ksys_write+0x10/0x10 [ 790.533693][T16110] __x64_sys_sendmmsg+0x9c/0x100 [ 790.533734][T16110] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.533772][T16110] do_syscall_64+0xcd/0x490 [ 790.533816][T16110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.533850][T16110] RIP: 0033:0x7f62c678e969 [ 790.533877][T16110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.533909][T16110] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 790.533939][T16110] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 790.533962][T16110] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 790.533982][T16110] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 790.534002][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.534023][T16110] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 790.534066][T16110] [ 793.059326][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 793.975294][T16134] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2557'. [ 794.678992][T16158] bond0: Unable to set down delay as MII monitoring is disabled [ 794.913802][T11114] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 795.945244][T16177] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2570'. [ 796.166994][T16184] netlink: 'syz.0.2572': attribute type 27 has an invalid length. [ 796.217579][T16184] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2572'. [ 797.025982][ T30] audit: type=1800 audit(4295032997.096:119): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2573" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 797.177143][T16209] FAULT_INJECTION: forcing a failure. [ 797.177143][T16209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.273903][T16209] CPU: 1 UID: 0 PID: 16209 Comm: syz.2.2578 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 797.273947][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.273967][T16209] Call Trace: [ 797.273977][T16209] [ 797.273992][T16209] dump_stack_lvl+0x16c/0x1f0 [ 797.274033][T16209] should_fail_ex+0x512/0x640 [ 797.274081][T16209] _copy_from_iter+0x29f/0x16f0 [ 797.274149][T16209] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 797.274192][T16209] ? __pfx__copy_from_iter+0x10/0x10 [ 797.274237][T16209] ? __sk_mem_raise_allocated+0x895/0x1700 [ 797.274297][T16209] mptcp_sendmsg+0x1034/0x1eb0 [ 797.274354][T16209] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 797.274388][T16209] ? __pfx_aa_sk_perm+0x10/0x10 [ 797.274429][T16209] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 797.274468][T16209] inet_sendmsg+0x119/0x140 [ 797.274505][T16209] sock_write_iter+0x4aa/0x5b0 [ 797.274555][T16209] ? __pfx_sock_write_iter+0x10/0x10 [ 797.274626][T16209] ? bpf_lsm_file_permission+0x9/0x10 [ 797.274674][T16209] ? security_file_permission+0x71/0x210 [ 797.274716][T16209] ? rw_verify_area+0xcf/0x680 [ 797.274772][T16209] vfs_write+0x6c4/0x1150 [ 797.274807][T16209] ? __pfx_sock_write_iter+0x10/0x10 [ 797.274860][T16209] ? __pfx_vfs_write+0x10/0x10 [ 797.274891][T16209] ? find_held_lock+0x2b/0x80 [ 797.274960][T16209] ksys_write+0x1f8/0x250 [ 797.274993][T16209] ? __pfx_ksys_write+0x10/0x10 [ 797.275041][T16209] do_syscall_64+0xcd/0x490 [ 797.275083][T16209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.275116][T16209] RIP: 0033:0x7f952b38e969 [ 797.275141][T16209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.275172][T16209] RSP: 002b:00007f95291d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.275201][T16209] RAX: ffffffffffffffda RBX: 00007f952b5b6080 RCX: 00007f952b38e969 [ 797.275223][T16209] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 797.275243][T16209] RBP: 00007f95291d5090 R08: 0000000000000000 R09: 0000000000000000 [ 797.275263][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.275283][T16209] R13: 0000000000000001 R14: 00007f952b5b6080 R15: 00007ffefe8b4a88 [ 797.275325][T16209] [ 797.786072][T16122] ima: policy update failed [ 797.816901][ T30] audit: type=1802 audit(4295032997.889:120): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2554" res=0 errno=0 [ 798.952087][T16231] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2583'. [ 799.261036][T16239] FAULT_INJECTION: forcing a failure. [ 799.261036][T16239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.324710][T16239] CPU: 0 UID: 0 PID: 16239 Comm: syz.3.2584 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 799.324754][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.324774][T16239] Call Trace: [ 799.324785][T16239] [ 799.324798][T16239] dump_stack_lvl+0x16c/0x1f0 [ 799.324840][T16239] should_fail_ex+0x512/0x640 [ 799.324893][T16239] _copy_to_user+0x32/0xd0 [ 799.324945][T16239] br_dev_siocdevprivate+0x1fd/0x1650 [ 799.324994][T16239] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 799.325043][T16239] ? __lock_acquire+0xb8a/0x1c90 [ 799.325090][T16239] ? __mutex_trylock_common+0xe9/0x250 [ 799.325134][T16239] ? netdev_name_node_lookup+0x127/0x180 [ 799.325175][T16239] dev_ifsioc+0x8ee/0x1ee0 [ 799.325215][T16239] ? __pfx_dev_ifsioc+0x10/0x10 [ 799.325253][T16239] ? __pfx___mutex_lock+0x10/0x10 [ 799.325306][T16239] ? dev_load+0x8e/0x240 [ 799.325348][T16239] dev_ioctl+0x1b2/0x1060 [ 799.325389][T16239] sock_ioctl+0x5b3/0x6b0 [ 799.325440][T16239] ? __pfx_sock_ioctl+0x10/0x10 [ 799.325487][T16239] ? hook_file_ioctl_common+0x145/0x410 [ 799.325528][T16239] ? __fget_files+0x20e/0x3c0 [ 799.325568][T16239] ? __pfx_sock_ioctl+0x10/0x10 [ 799.325627][T16239] __x64_sys_ioctl+0x18b/0x210 [ 799.325680][T16239] do_syscall_64+0xcd/0x490 [ 799.325723][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.325756][T16239] RIP: 0033:0x7f15fc38e969 [ 799.325798][T16239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.325832][T16239] RSP: 002b:00007f15fd1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.325864][T16239] RAX: ffffffffffffffda RBX: 00007f15fc5b5fa0 RCX: 00007f15fc38e969 [ 799.325887][T16239] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000004 [ 799.325908][T16239] RBP: 00007f15fd1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 799.325929][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.325950][T16239] R13: 0000000000000000 R14: 00007f15fc5b5fa0 R15: 00007ffd13584138 [ 799.325993][T16239] [ 799.539046][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.374131][T16272] FAULT_INJECTION: forcing a failure. [ 800.374131][T16272] name failslab, interval 1, probability 0, space 0, times 0 [ 800.401924][T16272] CPU: 1 UID: 0 PID: 16272 Comm: syz.1.2593 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 800.401968][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.401987][T16272] Call Trace: [ 800.401998][T16272] [ 800.402010][T16272] dump_stack_lvl+0x16c/0x1f0 [ 800.402053][T16272] should_fail_ex+0x512/0x640 [ 800.402097][T16272] ? __kmalloc_noprof+0xbf/0x510 [ 800.402138][T16272] ? io_cache_alloc_new+0x45/0xf0 [ 800.402182][T16272] should_failslab+0xc2/0x120 [ 800.402223][T16272] __kmalloc_noprof+0xd2/0x510 [ 800.402270][T16272] io_cache_alloc_new+0x45/0xf0 [ 800.402325][T16272] io_rsrc_node_alloc+0x221/0x2b0 [ 800.402373][T16272] io_sqe_files_register+0x2a7/0x960 [ 800.402426][T16272] ? __pfx_io_sqe_files_register+0x10/0x10 [ 800.402479][T16272] ? __mutex_trylock_common+0xe9/0x250 [ 800.402516][T16272] ? __pfx___mutex_trylock_common+0x10/0x10 [ 800.402555][T16272] __io_uring_register+0x12e7/0x2310 [ 800.402603][T16272] ? trace_contention_end+0xdd/0x130 [ 800.402637][T16272] ? __pfx___io_uring_register+0x10/0x10 [ 800.402677][T16272] ? __mutex_lock+0x1ca/0xb90 [ 800.402718][T16272] ? __x64_sys_io_uring_register+0x159/0x280 [ 800.402767][T16272] ? __pfx___mutex_lock+0x10/0x10 [ 800.402817][T16272] ? __fget_files+0x20e/0x3c0 [ 800.402846][T16272] ? __fput_deferred+0x370/0x370 [ 800.402900][T16272] __x64_sys_io_uring_register+0x169/0x280 [ 800.402952][T16272] do_syscall_64+0xcd/0x490 [ 800.402994][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.403027][T16272] RIP: 0033:0x7f62c678e969 [ 800.403052][T16272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.403085][T16272] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 800.403115][T16272] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 800.403137][T16272] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000002 [ 800.403157][T16272] RBP: 00007f62c45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 800.403178][T16272] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000002 [ 800.403198][T16272] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 800.403258][T16272] [ 800.992968][T16276] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2595'. [ 802.081740][T16299] netlink: 'syz.3.2601': attribute type 27 has an invalid length. [ 802.099465][T16299] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2601'. [ 802.153014][T16299] FAULT_INJECTION: forcing a failure. [ 802.153014][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.171208][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.3.2601 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 802.171265][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 802.171286][T16299] Call Trace: [ 802.171296][T16299] [ 802.171309][T16299] dump_stack_lvl+0x16c/0x1f0 [ 802.171351][T16299] should_fail_ex+0x512/0x640 [ 802.171403][T16299] _copy_from_user+0x2e/0xd0 [ 802.171460][T16299] move_addr_to_kernel+0x65/0x170 [ 802.171513][T16299] __copy_msghdr+0x386/0x470 [ 802.171551][T16299] copy_msghdr_from_user+0xc1/0x160 [ 802.171589][T16299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 802.171635][T16299] ? kfree+0x24f/0x4d0 [ 802.171662][T16299] ? __pfx__kstrtoull+0x10/0x10 [ 802.171707][T16299] ___sys_sendmsg+0xfe/0x1d0 [ 802.171748][T16299] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.171825][T16299] ? __pfx___might_resched+0x10/0x10 [ 802.171880][T16299] __sys_sendmmsg+0x200/0x420 [ 802.171923][T16299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 802.171977][T16299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 802.172035][T16299] ? fput+0x70/0xf0 [ 802.172075][T16299] ? ksys_write+0x1ac/0x250 [ 802.172108][T16299] ? __pfx_ksys_write+0x10/0x10 [ 802.172149][T16299] __x64_sys_sendmmsg+0x9c/0x100 [ 802.172189][T16299] ? lockdep_hardirqs_on+0x7c/0x110 [ 802.172225][T16299] do_syscall_64+0xcd/0x490 [ 802.172266][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.172299][T16299] RIP: 0033:0x7f15fc38e969 [ 802.172324][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.172357][T16299] RSP: 002b:00007f15fd1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 802.172387][T16299] RAX: ffffffffffffffda RBX: 00007f15fc5b5fa0 RCX: 00007f15fc38e969 [ 802.172409][T16299] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 802.172436][T16299] RBP: 00007f15fd1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 802.172456][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.172477][T16299] R13: 0000000000000000 R14: 00007f15fc5b5fa0 R15: 00007ffd13584138 [ 802.172517][T16299] [ 802.390795][ C0] vkms_vblank_simulate: vblank timer overrun -1 ]Op *{qP 0IgC`%WDIF&ŒT܂-6&~CFPY'w""K?q]:mn=ZD$9|<GTGwjC`'e,'RyI]x$CFs^Co#{-E|/Ʒ80k+E600 6U!(Qp<_ODb3Ȑker퐬g嫬54bXِwLúSװ?/TK4ura0,d.ꛭ| s;y.N$gƶ\Ψܲ>g]Ǧnww 0B^Φ/Ӫ|rmBDO޶ڄH|:;Q-݈a:hsB FHt|wfa˱:cZzN$lS}bh+v 0Nw^,ckĭ՛<&cQ@a/?E aoj=tur^_N6-o68B2$i28nn tn)r5W%E-OahBHi UrͭgWgK'Ux &D1߹CF6tL@K$ J'v^,XY07*(&xϩWԏ \=}j~@9kTκE|)+²x6{ꚏ@]oH (: mb6>6&©qAuT?_Nx@ H.XZ5k{I ^0[ͱaʢW}R[6ew?t61Q僪C?A3J^9r 6--aֶnQ^LU]3DH75I z HSEݸ 0\ @&[0DWT:: lsoŕhG7.ثRg]x*wpH+]/@>"tJo@ Q:;;XVK#/Pom$Xm@7wO*p(%B6#RMH3ő޵>]1t's)cJ1=<b7Kr4:_};%rF?+`Wtv%wDI7CxqD"7V! ʧ*/*I+9s جYEZc_[$ ֽ <3BQU.$Ī'+J3 Us5AGב+adh-2@D<}.,MQ}9(+#tcFtr@OPʎrr~`t12cG_'TķK=1ư I,C 솬,=&Ul'p! @S{hU)́v|)=1SnkNЛ/~U{):Y3oиK;G{]}Aq9`qsյy|A*-bG+-n6  vKJ˓Yg kAQdJ21ӷ$Bޔxb LI32~DSJ4ܲ@>لpe>dԃo^@~u 'P9($}ljq^=ZBN0jlӦ>gR((~xa_vv$s]m=d$;tt RbqQZ|f' aU$ᜌlggJu'.^k1vyaNOe͏b`Ovҋφ QJ#zF&$AvuNN 7ٹhewL]0*xsb W/SR> ?O`z3"?^2(τΩn~hغs) P+c 6w+ѩ{F,xL}xX% z{"T^YmK$ԭCMҧ,1+ݳhSʫ7aMC:[/};|qP* YA*=3OXv n4׃adj\& L2fJ&e[],l`AHڴŕ6GV?W9vSBb* FոK=WRUE^|;qc#Gf֚n_g.fϏ=c]O[ 803.166355][T16320] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2608'. ƶsiB[&8[ֆ$cۉiߒwuMɣ& ˦kk":/F(*)Pnf/|H `v]lB ӰؖKI mUFbaWI֕oR0rzVhcb׭~iO3XR^ JXdr"pb-lP"!~.n0 Q"복mje녽YbЇ\[@]6<&7%XjOh$5;h1k& ϸjZT\TGU&ư:2LxYl^"XD rF|~n)B<M#qR&5c:_ߢpͷBr M~}JM!8XaX!Tg@K_x_3hK$sS%RjrM4($H1:HΆ4~p  o+'.TymQju MuwQT&)vh>3㫙@eUXwfTV }F&5#:/7l=3qZVH˞HBlr$~O viµE@"cRL!B@jz' Om0{?K2vbn|c6]+WSF$c0tR"J󙏣)TSwIfrP Aמtj 8R}'qf:]c)դ8(rj zu||M9O)2܊1 񠼗H Chx-hgJRR{Ë4mU2s[ 803.366906][T16322] FAULT_INJECTION: forcing a failure. [ 803.366906][T16322] name fail_page_alloc, interval 1, probability 0, space 0, times 0  , td.kkw9iC6 v{:@HʿR'L:U`8 u!%!jﳃTs|݇spT9W2 \0q-J$5 KX4PQ<8tek&#D"M:, &=1 [ 803.410814][T16322] dump_stack_lvl+0x16c/0x1f0 [ 803.410860][T16322] should_fail_ex+0x512/0x640 [ 803.410919][T16322] should_fail_alloc_page+0xe7/0x130 [ 803.410967][T16322] prepare_alloc_pages+0x3c2/0x610 [ 803.411021][T16322] ? rcu_is_watching+0x12/0xc0 [ 803.411073][T16322] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 803.411128][T16322] ? should_fail_alloc_page+0xee/0x130 [ 803.411175][T16322] ? rcu_is_watching+0x12/0xc0 [ 803.411219][T16322] ? trace_mm_page_alloc+0x11f/0x1a0 [ 803.411271][T16322] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 803.411324][T16322] ? __pfx_stack_trace_save+0x10/0x10 [ 803.411373][T16322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 803.411430][T16322] ? alloc_vmap_area+0x64e/0x28f0 [ 803.411478][T16322] ? __vmalloc_node_range_noprof+0x277/0x1520 [ 803.411529][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.411582][T16322] ? do_syscall_64+0xcd/0x490 [ 803.411622][T16322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.411679][T16322] alloc_pages_bulk_noprof+0x71c/0x1410 [ 803.411722][T16322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 803.411764][T16322] ? policy_nodemask+0xea/0x4e0 [ 803.411812][T16322] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 803.411856][T16322] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 803.411920][T16322] kasan_populate_vmalloc+0xf1/0x1f0 [ 803.411968][T16322] alloc_vmap_area+0x963/0x28f0 [ 803.412037][T16322] ? __pfx_alloc_vmap_area+0x10/0x10 [ 803.412100][T16322] __get_vm_area_node+0x1ca/0x330 [ 803.412165][T16322] __vmalloc_node_range_noprof+0x277/0x1520 [ 803.412202][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.412266][T16322] ? __lock_acquire+0xb8a/0x1c90 [ 803.412320][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.412401][T16322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 803.412439][T16322] ? __alloc_pages_noprof+0xb/0x1b0 [ 803.412479][T16322] ? ___kmalloc_large_node+0x84/0x1e0 [ 803.412530][T16322] ? find_held_lock+0x2b/0x80 [ 803.412584][T16322] __kvmalloc_node_noprof+0x308/0x620 [ 803.412623][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.412679][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.412740][T16322] ? __do_sys_listmount+0x1c2/0xec0 [ 803.412805][T16322] __do_sys_listmount+0x1c2/0xec0 [ 803.412865][T16322] ? __x64_sys_futex+0x1e0/0x4c0 [ 803.412893][T16322] ? __x64_sys_futex+0x1e9/0x4c0 [ 803.412924][T16322] ? __pfx___do_sys_listmount+0x10/0x10 [ 803.412997][T16322] do_syscall_64+0xcd/0x490 [ 803.413040][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.413073][T16322] RIP: 0033:0x7efe1998e969 [ 803.413099][T16322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.413132][T16322] RSP: 002b:00007efe1a865038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 803.413182][T16322] RAX: ffffffffffffffda RBX: 00007efe19bb5fa0 RCX: 00007efe1998e969 [ 803.413205][T16322] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 803.413227][T16322] RBP: 00007efe19a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 803.413249][T16322] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 803.413269][T16322] R13: 0000000000000000 R14: 00007efe19bb5fa0 R15: 00007fff53ba3a68 [ 803.413318][T16322] [ 803.750830][ C0] vkms_vblank_simulate: vblank timer overrun n!"MĢC .4 ea"YTRgH~QaPO4QyQÒCGP^˵kD J}?w"'K&H؀?YΥF/#bx&5wC;<x" %q3Vͱkn2[ 803.777737][T16322] warn_alloc: 2 callbacks suppressed Zgm Ir|[ 803.777763][T16322] syz.0.2607: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 P8Eڒ!ڧCGdʾ^M7qѣtUM.nigO뢠uI*ex1 9kY\Q 2oOrZ8"Z4)a +䈷ʰџ]r%v?'kÈI\̺;!J~蛎Ӵti>˟ݎY 0lM.֜1l L{_8Rt<kFJُqA뿥˯ܥ%YX{\6="%r[ 803.938791][T16322] #3~>^7lj[ 803.938805][T16322] dump_stack_lvl+0x16c/0x1f0 R:{BV [ 803.938852][T16322] warn_alloc+0x248/0x3a0 ݊]Qº-P)M[ 803.938897][T16322] ? __pfx_warn_alloc+0x10/0x10 !62Gcg<"[ 803.938941][T16322] ? kfree+0x2b4/0x4d0 _?cO%FQ[ 803.938984][T16322] ? __get_vm_area_node+0x208/0x330 f|JDB7l)K [ 803.939048][T16322] __vmalloc_node_range_noprof+0xd32/0x1520 q:*[ 803.939095][T16322] ? __lock_acquire+0xb8a/0x1c90 դn{q[ 803.939130][T16322] ? __do_sys_listmount+0x1c2/0xec0 _+LyX_(SJ[ 803.939242][T16322] ? __alloc_pages_noprof+0xb/0x1b0 5z}~uT[ 803.939282][T16322] ? ___kmalloc_large_node+0x84/0x1e0 Vcu<8[ 803.939345][T16322] ? find_held_lock+0x2b/0x80 >z~6ɒa$[ 803.939399][T16322] __kvmalloc_node_noprof+0x308/0x620 Bi$=˺h[ 803.939437][T16322] ? __do_sys_listmount+0x1c2/0xec0 >Eq~xr[ 803.939491][T16322] ? __do_sys_listmount+0x1c2/0xec0 -j%h:Z}[ 803.939553][T16322] ? __do_sys_listmount+0x1c2/0xec0 ;I[mPYr[ 803.939604][T16322] __do_sys_listmount+0x1c2/0xec0 z͍+Lo}o^}[ 803.939665][T16322] ? __x64_sys_futex+0x1e0/0x4c0 Ĕ $[#^w[ 803.939693][T16322] ? __x64_sys_futex+0x1e9/0x4c0 W4qm[ 803.939724][T16322] ? __pfx___do_sys_listmount+0x10/0x10 [ 803.939799][T16322] do_syscall_64+0xcd/0x490 [ 803.939844][T16322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.939878][T16322] RIP: 0033:0x7efe1998e969 [ 803.939906][T16322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.939941][T16322] RSP: 002b:00007efe1a865038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 803.939975][T16322] RAX: ffffffffffffffda RBX: 00007efe19bb5fa0 RCX: 00007efe1998e969 [ 803.940000][T16322] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 803.940025][T16322] RBP: 00007efe19a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 803.940049][T16322] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 803.940072][T16322] R13: 0000000000000000 R14: 00007efe19bb5fa0 R15: 00007fff53ba3a68 [ 803.940116][T16322] [ 803.940128][T16322] Mem-Info: [ 804.246498][T16322] active_anon:3303 inactive_anon:13613 isolated_anon:0 [ 804.246498][T16322] active_file:24073 inactive_file:38550 isolated_file:0 [ 804.246498][T16322] unevictable:768 dirty:351 writeback:0 [ 804.246498][T16322] slab_reclaimable:11397 slab_unreclaimable:99144 [ 804.246498][T16322] mapped:32482 shmem:6544 pagetables:948 [ 804.246498][T16322] sec_pagetables:0 bounce:0 [ 804.246498][T16322] kernel_misc_reclaimable:0 [ 804.246498][T16322] free:1312878 free_pcp:8464 free_cma:0 [ 804.302737][T16322] Node 0 active_anon:13212kB inactive_anon:55952kB active_file:96288kB inactive_file:154076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135828kB dirty:1400kB writeback:0kB shmem:26540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:3792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 804.458637][T16322] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 804.557822][T16322] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.714482][T16322] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 804.792836][T16322] Node 0 DMA32 free:1329792kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:13168kB inactive_anon:61264kB active_file:92864kB inactive_file:154004kB unevictable:4676kB writepending:1400kB present:3129332kB managed:2541160kB mlocked:3184kB bounce:0kB free_pcp:9464kB local_pcp:5796kB free_cma:0kB [ 805.108918][T16322] lowmem_reserve[]: 0 0 1 1 1 [ 805.114997][T16322] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1496kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 805.201415][T16322] lowmem_reserve[]: 0 0 0 0 0 [ 805.208697][T16322] Node 1 Normal free:3903296kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:20612kB free_cma:0kB [ 805.238255][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.328211][T16322] lowmem_reserve[]: 0 0 0 0 0 [ 805.336303][T16322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 805.399120][T16322] Node 0 DMA32: 775*4kB (UE) 597*8kB (UE) 146*16kB (UME) 604*32kB (UME) 385*64kB (UME) 180*128kB (ME) 141*256kB (UME) 58*512kB (UM) 36*1024kB (UME) 10*2048kB (UME) 276*4096kB (UM) = 1330852kB [ 805.432175][T16322] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 805.444995][T16322] Node 1 Normal: 222*4kB (UME) 27*8kB (UM) 35*16kB (UE) 222*32kB (UME) 102*64kB (UME) 43*128kB (UME) 26*256kB (UME) 14*512kB (UME) 6*1024kB (UME) 8*2048kB (UME) 939*4096kB (M) = 3903296kB [ 805.579979][T16322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.633352][T16322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 805.723008][T16322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.810904][T16354] tipc: Started in network mode [ 805.817311][T16354] tipc: Node identity ee00, cluster identity 4711 [ 805.824484][T16354] tipc: Node number set to 60928 [ 805.919061][T16322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 806.030158][T16322] 73357 total pagecache pages [ 806.168296][T16322] 0 pages in swap cache [ 806.284335][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 806.299317][T16322] Free swap = 123148kB [ 806.303536][T16322] Total swap = 124996kB [ 806.379142][T16360] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2613'. [ 806.399686][T16322] 2097051 pages RAM [ 806.438891][T16322] 0 pages HighMem/MovableOnly [ 806.459210][T16322] 429719 pages reserved [ 806.463483][T16322] 0 pages cma reserved [ 806.753002][T16366] FAULT_INJECTION: forcing a failure. [ 806.753002][T16366] name failslab, interval 1, probability 0, space 0, times 0 [ 806.810324][T16366] CPU: 0 UID: 0 PID: 16366 Comm: syz.2.2615 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 806.810359][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 806.810374][T16366] Call Trace: [ 806.810382][T16366] [ 806.810392][T16366] dump_stack_lvl+0x16c/0x1f0 [ 806.810425][T16366] should_fail_ex+0x512/0x640 [ 806.810465][T16366] should_failslab+0xc2/0x120 [ 806.810497][T16366] __kmalloc_cache_noprof+0x6a/0x3e0 [ 806.810522][T16366] ? __pfx___might_resched+0x10/0x10 [ 806.810556][T16366] ? cfcnfg_create+0x5e/0x500 [ 806.810587][T16366] ? __pfx_caif_init_net+0x10/0x10 [ 806.810613][T16366] cfcnfg_create+0x5e/0x500 [ 806.810640][T16366] ? debug_mutex_init+0x37/0x70 [ 806.810672][T16366] ? __pfx_caif_init_net+0x10/0x10 [ 806.810697][T16366] caif_init_net+0x7d/0xe0 [ 806.810723][T16366] ops_init+0x1e2/0x5f0 [ 806.810758][T16366] setup_net+0x1ff/0x510 [ 806.810787][T16366] ? lockdep_init_map_type+0x5c/0x280 [ 806.810813][T16366] ? __pfx_setup_net+0x10/0x10 [ 806.810859][T16366] ? debug_mutex_init+0x37/0x70 [ 806.810892][T16366] copy_net_ns+0x2a6/0x5f0 [ 806.810928][T16366] create_new_namespaces+0x3ea/0xa90 [ 806.810978][T16366] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 806.811017][T16366] ksys_unshare+0x45b/0xa40 [ 806.811043][T16366] ? __pfx_ksys_unshare+0x10/0x10 [ 806.811068][T16366] ? xfd_validate_state+0x61/0x180 [ 806.811101][T16366] __x64_sys_unshare+0x31/0x40 [ 806.811125][T16366] do_syscall_64+0xcd/0x490 [ 806.811155][T16366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.811179][T16366] RIP: 0033:0x7f952b38e969 [ 806.811197][T16366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.811221][T16366] RSP: 002b:00007f95291d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 806.811244][T16366] RAX: ffffffffffffffda RBX: 00007f952b5b6080 RCX: 00007f952b38e969 [ 806.811260][T16366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 806.811275][T16366] RBP: 00007f952b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 806.811290][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.811304][T16366] R13: 0000000000000000 R14: 00007f952b5b6080 R15: 00007ffefe8b4a88 [ 806.811334][T16366] [ 807.826964][T16374] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2617'. [ 807.899264][T16375] FAULT_INJECTION: forcing a failure. [ 807.899264][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 807.957423][T16375] CPU: 1 UID: 0 PID: 16375 Comm: syz.1.2618 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 807.957459][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.957474][T16375] Call Trace: [ 807.957483][T16375] [ 807.957493][T16375] dump_stack_lvl+0x16c/0x1f0 [ 807.957527][T16375] should_fail_ex+0x512/0x640 [ 807.957562][T16375] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 807.957659][T16375] should_failslab+0xc2/0x120 [ 807.957692][T16375] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 807.957723][T16375] ? shmem_alloc_inode+0x25/0x50 [ 807.957763][T16375] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 807.957797][T16375] shmem_alloc_inode+0x25/0x50 [ 807.957843][T16375] alloc_inode+0x64/0x240 [ 807.957891][T16375] new_inode+0x22/0x1c0 [ 807.957933][T16375] ? trace_cap_capable+0x18d/0x200 [ 807.958002][T16375] shmem_get_inode+0x19a/0xfb0 [ 807.958054][T16375] ? __vm_enough_memory+0x184/0x3f0 [ 807.958106][T16375] __shmem_file_setup+0x16f/0x300 [ 807.958147][T16375] shmem_zero_setup+0x93/0x1a0 [ 807.958193][T16375] __mmap_region+0x2036/0x27c0 [ 807.958239][T16375] ? __pfx___mmap_region+0x10/0x10 [ 807.958278][T16375] ? trace_sched_exit_tp+0xde/0x130 [ 807.958410][T16375] ? trace_cap_capable+0x18d/0x200 [ 807.958478][T16375] mmap_region+0x1ab/0x3f0 [ 807.958529][T16375] ? __get_unmapped_area+0x267/0x440 [ 807.958587][T16375] do_mmap+0xd8e/0x11b0 [ 807.958653][T16375] ? __pfx_do_mmap+0x10/0x10 [ 807.958705][T16375] ? __pfx_down_write_killable+0x10/0x10 [ 807.958759][T16375] vm_mmap_pgoff+0x281/0x450 [ 807.958816][T16375] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 807.958876][T16375] ? __x64_sys_futex+0x1e0/0x4c0 [ 807.958904][T16375] ? __x64_sys_futex+0x1e9/0x4c0 [ 807.958941][T16375] ksys_mmap_pgoff+0x7d/0x5c0 [ 807.958988][T16375] ? xfd_validate_state+0x61/0x180 [ 807.959021][T16375] ? __pfx_ksys_write+0x10/0x10 [ 807.959080][T16375] __x64_sys_mmap+0x125/0x190 [ 807.959123][T16375] do_syscall_64+0xcd/0x490 [ 807.959169][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.959206][T16375] RIP: 0033:0x7f62c678e969 [ 807.959235][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.959272][T16375] RSP: 002b:00007f62c45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 807.959305][T16375] RAX: ffffffffffffffda RBX: 00007f62c69b5fa0 RCX: 00007f62c678e969 [ 807.959330][T16375] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 807.959353][T16375] RBP: 00007f62c6810ab1 R08: 0000000000000401 R09: 0000000000008000 [ 807.959375][T16375] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 807.959397][T16375] R13: 0000000000000000 R14: 00007f62c69b5fa0 R15: 00007ffe5f61f9d8 [ 807.959442][T16375] [ 808.464627][T16382] ================================================================== [ 808.464652][T16382] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 808.464701][T16382] Write of size 8 at addr ffffc90003af9000 by task syz.2.2619/16382 [ 808.464732][T16382] [ 808.464747][T16382] CPU: 0 UID: 0 PID: 16382 Comm: syz.2.2619 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 808.464791][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.464814][T16382] Call Trace: [ 808.464825][T16382] [ 808.464839][T16382] dump_stack_lvl+0x116/0x1f0 [ 808.464881][T16382] print_report+0xcd/0x680 [ 808.464923][T16382] ? __virt_addr_valid+0x81/0x610 [ 808.464977][T16382] ? sys_fillrect+0x15d4/0x17b0 [ 808.465025][T16382] kasan_report+0xe0/0x110 [ 808.465068][T16382] ? sys_fillrect+0x15d4/0x17b0 [ 808.465109][T16382] sys_fillrect+0x15d4/0x17b0 [ 808.465150][T16382] ? __pfx_sys_fillrect+0x10/0x10 [ 808.465196][T16382] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 808.465239][T16382] bit_clear+0x17a/0x220 [ 808.465290][T16382] ? __pfx_bit_clear+0x10/0x10 [ 808.465341][T16382] ? __pfx___might_resched+0x10/0x10 [ 808.465388][T16382] ? fb_get_color_depth+0x120/0x250 [ 808.465435][T16382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.465477][T16382] ? __pfx_bit_clear+0x10/0x10 [ 808.465527][T16382] __fbcon_clear+0x603/0x780 [ 808.465585][T16382] fbcon_scroll+0x48b/0x690 [ 808.465634][T16382] con_scroll+0x45c/0x690 [ 808.465685][T16382] do_con_write+0x6869/0x7c90 [ 808.465749][T16382] ? __pfx_do_con_write+0x10/0x10 [ 808.465811][T16382] con_write+0x23/0xb0 [ 808.465878][T16382] n_tty_write+0x40f/0x1160 [ 808.465922][T16382] ? __pfx_n_tty_write+0x10/0x10 [ 808.465960][T16382] ? __pfx_woken_wake_function+0x10/0x10 [ 808.466009][T16382] ? __pfx_n_tty_write+0x10/0x10 [ 808.466047][T16382] file_tty_write.constprop.0+0x502/0x9b0 [ 808.466108][T16382] redirected_tty_write+0xd4/0x150 [ 808.466161][T16382] vfs_write+0x6c4/0x1150 [ 808.466198][T16382] ? __pfx_redirected_tty_write+0x10/0x10 [ 808.466253][T16382] ? __pfx_vfs_write+0x10/0x10 [ 808.466287][T16382] ? find_held_lock+0x2b/0x80 [ 808.466346][T16382] ksys_write+0x12a/0x250 [ 808.466383][T16382] ? __pfx_ksys_write+0x10/0x10 [ 808.466426][T16382] do_syscall_64+0xcd/0x490 [ 808.466469][T16382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.466506][T16382] RIP: 0033:0x7f952b38e969 [ 808.466532][T16382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.466575][T16382] RSP: 002b:00007f95291b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.466609][T16382] RAX: ffffffffffffffda RBX: 00007f952b5b6160 RCX: 00007f952b38e969 [ 808.466633][T16382] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 808.466656][T16382] RBP: 00007f952b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 808.466679][T16382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.466701][T16382] R13: 0000000000000000 R14: 00007f952b5b6160 R15: 00007ffefe8b4a88 [ 808.466736][T16382] [ 808.466749][T16382] [ 808.466765][T16382] The buggy address ffffc90003af9000 belongs to a vmalloc virtual mapping [ 808.466785][T16382] Memory state around the buggy address: [ 808.466811][T16382] ffffc90003af8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 808.466838][T16382] ffffc90003af8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 808.466862][T16382] >ffffc90003af9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 808.466883][T16382] ^ [ 808.466901][T16382] ffffc90003af9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 808.466927][T16382] ffffc90003af9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 808.466947][T16382] ================================================================== [ 808.466966][T16382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 808.466988][T16382] CPU: 0 UID: 0 PID: 16382 Comm: syz.2.2619 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 808.467032][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.467054][T16382] Call Trace: [ 808.467066][T16382] [ 808.467079][T16382] dump_stack_lvl+0x3d/0x1f0 [ 808.467120][T16382] panic+0x71c/0x800 [ 808.467159][T16382] ? __pfx_panic+0x10/0x10 [ 808.467201][T16382] ? __pfx__printk+0x10/0x10 [ 808.467235][T16382] ? rcu_is_watching+0x12/0xc0 [ 808.467288][T16382] ? sys_fillrect+0x15d4/0x17b0 [ 808.467326][T16382] check_panic_on_warn+0xab/0xb0 [ 808.467368][T16382] end_report+0x107/0x170 [ 808.467410][T16382] kasan_report+0xee/0x110 [ 808.467454][T16382] ? sys_fillrect+0x15d4/0x17b0 [ 808.467499][T16382] sys_fillrect+0x15d4/0x17b0 [ 808.467552][T16382] ? __pfx_sys_fillrect+0x10/0x10 [ 808.467605][T16382] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 808.467651][T16382] bit_clear+0x17a/0x220 [ 808.467703][T16382] ? __pfx_bit_clear+0x10/0x10 [ 808.467755][T16382] ? __pfx___might_resched+0x10/0x10 [ 808.467803][T16382] ? fb_get_color_depth+0x120/0x250 [ 808.467852][T16382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.467897][T16382] ? __pfx_bit_clear+0x10/0x10 [ 808.467948][T16382] __fbcon_clear+0x603/0x780 [ 808.468002][T16382] fbcon_scroll+0x48b/0x690 [ 808.468051][T16382] con_scroll+0x45c/0x690 [ 808.468104][T16382] do_con_write+0x6869/0x7c90 [ 808.468169][T16382] ? __pfx_do_con_write+0x10/0x10 [ 808.468233][T16382] con_write+0x23/0xb0 [ 808.468284][T16382] n_tty_write+0x40f/0x1160 [ 808.468338][T16382] ? __pfx_n_tty_write+0x10/0x10 [ 808.468374][T16382] ? __pfx_woken_wake_function+0x10/0x10 [ 808.468442][T16382] ? __pfx_n_tty_write+0x10/0x10 [ 808.468479][T16382] file_tty_write.constprop.0+0x502/0x9b0 [ 808.468537][T16382] redirected_tty_write+0xd4/0x150 [ 808.468595][T16382] vfs_write+0x6c4/0x1150 [ 808.468642][T16382] ? __pfx_redirected_tty_write+0x10/0x10 [ 808.468697][T16382] ? __pfx_vfs_write+0x10/0x10 [ 808.468732][T16382] ? find_held_lock+0x2b/0x80 [ 808.468792][T16382] ksys_write+0x12a/0x250 [ 808.468829][T16382] ? __pfx_ksys_write+0x10/0x10 [ 808.468872][T16382] do_syscall_64+0xcd/0x490 [ 808.468915][T16382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.468951][T16382] RIP: 0033:0x7f952b38e969 [ 808.468977][T16382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.469012][T16382] RSP: 002b:00007f95291b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.469046][T16382] RAX: ffffffffffffffda RBX: 00007f952b5b6160 RCX: 00007f952b38e969 [ 808.469071][T16382] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 808.469095][T16382] RBP: 00007f952b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 808.469118][T16382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.469140][T16382] R13: 0000000000000000 R14: 00007f952b5b6160 R15: 00007ffefe8b4a88 [ 808.469175][T16382] [ 808.469532][T16382] Kernel Offset: disabled