last executing test programs: 9.433843938s ago: executing program 2 (id=733): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) r0 = socket(0x2, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x10}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r3 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000c80)={0x9, &(0x7f0000000c40)={0x6, 0x6, 0x6, @inferred=r1}}) ioctl$auto_VHOST_SET_VRING_KICK2(r3, 0x4008af20, &(0x7f0000000cc0)={0x7, r0}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r5, @ANYBLOB="4d5f28bd7000fd6dd6251100000014003880210000800b000600519c7b06000000008c96d9069b1717da9867b151486c55ee8b274a07567d191dd0776867dcffcf94813bf63e5af7b94a2996c029d309de1b7cb6091e4d3943ca4d0686be1316a1088d42247ef7295f6152711aefb76a7dc02f7d0c001bdeff7781978dd3b6410fb1fa4fd4d191f10d6f36ff4e153358f42f16d29ae4660b460798e003fd458eb33a337bbbed149b771adf6f47f52e6e78f49b"], 0x28}, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) syz_clone3(&(0x7f0000000340)={0x62030000, 0x0, 0x0, &(0x7f0000000200), {0x12}, &(0x7f0000000240)=""/42, 0x2a, &(0x7f0000000280)=""/77, &(0x7f0000000300), 0x0, {r1}}, 0x58) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={0xd4, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_TAIL={0xb7, 0xf, "1773b1b55e2cfa8c8b9dd4e4741613ac6ba81d663cb88c731c865ac9ba5fb38713fc7e8f7e1737f0a76734894a068cb43f43fd37c7c700e0f87e4ca6b6c69a835d1e485ae9e00fd9daebc261f61d35115539b463c0d96e8ed4f38f20689a5ac2a285ee6dc5de86c5fe20be9cd878dec524b86d9cff79d691942f0a0b3a9562a9e930fec73b11542c9edf634ce1d7a8c64f19c4ed846c79e1ed2a6d209732addc2e407b71c4f0e28ce546228a106863eaac20e3"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040044) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x150, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_QOS_MAP={0xe4, 0xc7, "e1881ac5ae2a0b513b93f81dbdf7ceba316ae480c88440dda4f32f43af9a9ec3bec2e7beaa7323b51b48047df125dc69c591be0831057b901a4b479166c455c46acd05b1fe75180b5827d51bf3e3777b1a38778c02479a3e62dd43eb2d6f511206de787e45f3aae386bf64b7d1d511f231d4227ea6971dcc34adae6fde7d380810101ea219449d27b56e75108fabc852d4d650cc17aa612232c2792133c8c9744e4cbe50d13a3130757091c4d4af80939886c97e7c2d12f8065f514a39a8080be860faa759fa21b71665590d45766909343f1902a187a57339b57e3618fa5760"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xfffffdf7}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_FILS_KEK={0x8, 0xf2, '!T2b'}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_SSID={0x15, 0x34, "90afdd040ceff2a616d50d00979fe41db8"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x5}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8840}, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8240, 0x0) 8.503384309s ago: executing program 1 (id=737): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) fchmod$auto(0x0, 0x9b9a) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x400) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x82c00, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) 8.502371697s ago: executing program 0 (id=746): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/msr/events/tsc\x00', 0x129000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/219, 0xdb) r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, 0x0, 0x201, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) write$auto(r2, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) writev$auto(r1, &(0x7f0000001040)={0x0, 0x7fff}, 0x9) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram5/alignment_offset\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/40, 0x28) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0xc0603d06, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) socket(0x11, 0x3, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) 8.350890901s ago: executing program 3 (id=738): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) fsopen$auto(0x0, 0xfffffffc) memfd_create$auto(0x0, 0x1) ioctl$auto_SOUND_PCM_READ_FILTER(r3, 0x80045007, &(0x7f00000000c0)="7fd115") writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r6], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000100), r6) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0xda32, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000380)=""/172, 0xac) unshare$auto(0x40000080) 7.20395263s ago: executing program 0 (id=739): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) socket(0xa, 0x2, 0x0) connect$auto(r1, 0x0, 0x5b) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, r2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/stack\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000080)=""/112, 0x70) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0xa, 0xa) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xa, 0x7fffffff) fsopen$auto(0x0, 0x1) close_range$auto(r0, 0x8, 0x22000008) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x80201, 0x0) 7.203819385s ago: executing program 2 (id=740): r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x13}}, 0x3000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x1c, r3, 0x623f20d942d860e9, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x40) close_range$auto(0x2, 0x8, 0x2000000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x100000d551) r4 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0, {0x12}, &(0x7f0000000240)=""/42, 0x2a, &(0x7f0000000280)=""/77, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={0x5b0, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_BEACON_TAIL={0x1f1, 0xf, "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"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x29a, 0x2c, 0x0, 0x1, [@typed={0x15, 0xe9, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}, @typed={0x8, 0x13b, 0x0, 0x0, @pid=r6}, @nested={0x164, 0x48, 0x0, 0x1, [@typed={0x4, 0x11}, @typed={0x15, 0x4f, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}, @typed={0xf9, 0xfd, 0x0, 0x0, @binary="7195759944075f3fd6d489ad87222cf3ac97596441f982e363fe2d35bf69fe94e3e95b1cdc4330c1bd63d17f8f93069279373928c6a83a42b545d213175cdb279354d092e3f8bf2bed9ef38cc3567b021f1a74cff13876af7fbe14072a53ea5dc4f7289b781d2e98ab1d0d461c62ba73b00b7a86c8f80861f254e4d46ca541b35a027a6687a5197a6a2ca29d3e7d7dec3e546d26620604c3a877f115fc0252f3ed18efe0e33e01b733a7fe6e17bc5a98aa1516301edc12050832b79bd242754d9041fd403576569e3f78f92b4cb2d965f6e51994521c240b20364ce03cc7bfdfc666114854d39c871cc2e2fa344a82a6186b515d0e"}, @nested={0x4, 0x1d}, @nested={0x4, 0x3}, @generic="22c153e38bf9cac74acc3b9787a0325ff48fab113d81e6c37952c7587845fbabba665ec566c481524dd8d1df91833985974795c7c3c1e91520688600d3315946"]}, @generic="ebdeec4e679ccbb22a4dd2198625a68ad4bc7c5d67d7c73f23b3759a987a82ec2901b77f684aaa2f7aca9c73246f62e79b1f7940754ad8153976f4fdff78ac482ccdb84c395320a063d773a8a0a9a7233bf42ea7a6960a6af61e60eb8ac8d0fd28bd7fe516777f51e2a616f96cf08acb06ec79c0707ec4abd8c04a877c57de69cc549dfaba2c6540d50681b33aa1e37287e035b31aaba20ce370ddeb9517ba99abbb5f7364e30654fea602900856c78d85cddfea7daac1aaf8f81822cb1540648ddc77957655c2bf1e46040540bf41081e09093e8131da69141d", @nested={0x36, 0x6e, 0x0, 0x1, [@typed={0x4, 0x8d}, @nested={0x4, 0x48}, @generic="97f52214b1848faf4eb8f216494e60392bb5", @nested={0x4, 0x4a}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@remote}]}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffff8}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xf5, 0xe8, "610948cd915ca50757ba5740c617761b66f78e1d6f9ae09aea73ecbcadc05d5453e357132541ed2cc0689cf25c93e20c56572274f3b883d468decda544eb6aed8b1b4d01e2de848246beca9c576be2bdc144d6216004e9764b89ada530a7a55ed75df5da75faf89b62ee0672d3fac2ae975118a63975a3a08ad612a1197d032046895a1f0c4bb6bb2c1bef8ea2a17499843dea1ed4125e2d2a29408a626ea128f3e3678b59fe28274bffd3cb80124b2f441927df0998ff54c331c51dd23f10f7ed528dd9df0f4b3ed9ffbbcdecaa0cd0d1100cd5a242182884f7f0595fb5564ed3ada57caf6d4d63860be6d303e291dcf8"}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040044) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x158, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_QOS_MAP={0xe4, 0xc7, "e1881ac5ae2a0b513b93f81dbdf7ceba316ae480c88440dda4f32f43af9a9ec3bec2e7beaa7323b51b48047df125dc69c591be0831057b901a4b479166c455c46acd05b1fe75180b5827d51bf3e3777b1a38778c02479a3e62dd43eb2d6f511206de787e45f3aae386bf64b7d1d511f231d4227ea6971dcc34adae6fde7d380810101ea219449d27b56e75108fabc852d4d650cc17aa612232c2792133c8c9744e4cbe50d13a3130757091c4d4af80939886c97e7c2d12f8065f514a39a8080be860faa759fa21b71665590d45766909343f1902a187a57339b57e3618fa5760"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xfffffdf7}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_FILS_KEK={0x8, 0xf2, '!T2b'}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_SSID={0x15, 0x34, "90afdd040ceff2a616d50d00979fe41db8"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x14, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x5}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xa7a0}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8840}, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8240, 0x0) 5.390188226s ago: executing program 2 (id=748): r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, 0x0, 0xf) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6b) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) ftruncate$auto(r0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x11, 0x0, &(0x7f0000000080)=0x9c8) 4.845698363s ago: executing program 0 (id=749): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/msr/events/tsc\x00', 0x129000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/219, 0xdb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) write$auto(r1, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) writev$auto(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x7fff}, 0x9) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/40, 0x28) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) 4.56088176s ago: executing program 3 (id=750): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/msr/events/tsc\x00', 0x129000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/219, 0xdb) r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) write$auto(r2, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) writev$auto(r1, &(0x7f0000001040)={0x0, 0x7fff}, 0x9) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram5/alignment_offset\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/40, 0x28) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0xc0603d06, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) socket(0x11, 0x3, 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) 4.441322132s ago: executing program 1 (id=752): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80202, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) open(0x0, 0x149443, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x200400, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x400) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) 3.909552111s ago: executing program 1 (id=753): socket(0x21, 0x80003, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x2, 0x0, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x19) r4 = socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x34, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x88c, r5, 0x10}, 0x22) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r3) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.119432634s ago: executing program 3 (id=754): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x189001, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fff2df277d03a5270500190077000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) pread64$auto(r1, &(0x7f0000000040)='/dev/kvm\x00', 0x6, 0x3) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000140)={0x1, &(0x7f00000000c0)={0x59ab, 0x8, 0x6, @inferred=r1}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x6000000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0xcee) r4 = socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(r2, 0x0, 0x8000000d, 0x5f6e) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3c, 0x4909b6fb, 0x1ffe0, 0x7, 0x6, 0x7fffffffffffffff, 0x0, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x8, 0x200, 0x0, 0x84}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r5 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r5, 0x0, 0x8fb5) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x0, 0xffffffffffffffff, 0x6, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.6121122s ago: executing program 1 (id=755): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801) ioperm$auto(0xffff, 0xe, 0x1) unshare$auto(0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xe, 0x100000000007) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) 2.610968945s ago: executing program 0 (id=756): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x100, 0x400, 0x0, 0x3fdf, 0x5, 0x1000000000e8}, {0x2, 0x100, 0x54f1, 0x0, 0x101, 0xff, 0x8d6, 0xa, 0x3}}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xfffffe09, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x40008800) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, &(0x7f00000001c0)={0x3, 0x8, 0x8, 0x5}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0xbf) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x100, 0x0) read$auto(r2, &(0x7f0000003580)='\x00', 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r4, r3, 0x0, 0x1000202) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.569851766s ago: executing program 3 (id=757): r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0x3, 0x80, 0x9d, 0x1, 0x1, 0x1, 0x1193, 0x5, 0x6, 0x800, 0xffffffff, 0x100, 0x1, 0x5}, 0xf) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6b) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) ftruncate$auto(r0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) madvise$auto(0x0, 0x200007, 0x8) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x11, 0x0, &(0x7f0000000080)=0x9c8) 1.861733003s ago: executing program 0 (id=758): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x7, 0x0, 0x0, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe97f, 0x7, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x4, 0x3}, 0x6f3) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/19, 0x13) r4 = fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0xbfd5, r0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES8=r4, @ANYBLOB="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", @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="000000080002000700000041000b80d6a878d8fe755a7537a4308fd4ea56aa568a157040b88fa8fc386415a921beac6f9304ade1006e72eafe1e10f09de86f2422f3000000000000000000000000006c76349690b37f557b7f1aa654f250f9f954ef855bbd8e21160d413b8497960ab17df7074058b20a7adaa9d676970e3b2c681c0972eaeedb60e7c35cd7f603f23a85d5bc39e0828a15a4091aacab04542d658993563825e3e391bd4caadb9d583456e1d6bf875a1ba25b0929733b0dd744759f68b2bb953bc43d68e7f9"], 0x224}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e00"], 0x24}}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.861458676s ago: executing program 2 (id=759): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0xa, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0xfffffff6], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0xa234, 0x76c5, 0x40008, 0x100000000}}) open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r1, 0x0, 0x4, 0x6}]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x801, 0x84) listen$auto(r2, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000e80)=""/215, 0xd7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x19, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8475, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) socket(0xa, 0x1, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x5, 0x801, 0x84) 0s ago: executing program 2 (id=760): mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) r0 = socket(0x2, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x10}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r3 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000c80)={0x9, &(0x7f0000000c40)={0x6, 0x6, 0x6, @inferred=r1}}) ioctl$auto_VHOST_SET_VRING_KICK2(r3, 0x4008af20, &(0x7f0000000cc0)={0x7, r0}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d5f28bd7000fd6dd6251100000014003880210000800b000600519c7b06000000008c96d9069b1717da9867b151486c55ee8b274a07567d191dd0776867dcffcf94813bf63e5af7b94a2996c029d309de1b7cb6091e4d3943ca4d0686be1316a1088d42247ef7295f6152711aefb76a7dc02f7d0c001bdeff7781978dd3b6410fb1fa4fd4d191"], 0x28}, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) syz_clone3(&(0x7f0000000340)={0x62030000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x12}, &(0x7f0000000240)=""/42, 0x2a, &(0x7f0000000280)=""/77, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={0x5b0, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_BEACON_TAIL={0x1f1, 0xf, "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"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x29a, 0x2c, 0x0, 0x1, [@typed={0x15, 0xe9, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}, @typed={0x8, 0x13b, 0x0, 0x0, @pid=r6}, @nested={0x164, 0x48, 0x0, 0x1, [@typed={0x4, 0x11}, @typed={0x15, 0x4f, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}, @typed={0xf9, 0xfd, 0x0, 0x0, @binary="7195759944075f3fd6d489ad87222cf3ac97596441f982e363fe2d35bf69fe94e3e95b1cdc4330c1bd63d17f8f93069279373928c6a83a42b545d213175cdb279354d092e3f8bf2bed9ef38cc3567b021f1a74cff13876af7fbe14072a53ea5dc4f7289b781d2e98ab1d0d461c62ba73b00b7a86c8f80861f254e4d46ca541b35a027a6687a5197a6a2ca29d3e7d7dec3e546d26620604c3a877f115fc0252f3ed18efe0e33e01b733a7fe6e17bc5a98aa1516301edc12050832b79bd242754d9041fd403576569e3f78f92b4cb2d965f6e51994521c240b20364ce03cc7bfdfc666114854d39c871cc2e2fa344a82a6186b515d0e"}, @nested={0x4, 0x1d}, @nested={0x4, 0x3}, @generic="22c153e38bf9cac74acc3b9787a0325ff48fab113d81e6c37952c7587845fbabba665ec566c481524dd8d1df91833985974795c7c3c1e91520688600d3315946"]}, @generic="ebdeec4e679ccbb22a4dd2198625a68ad4bc7c5d67d7c73f23b3759a987a82ec2901b77f684aaa2f7aca9c73246f62e79b1f7940754ad8153976f4fdff78ac482ccdb84c395320a063d773a8a0a9a7233bf42ea7a6960a6af61e60eb8ac8d0fd28bd7fe516777f51e2a616f96cf08acb06ec79c0707ec4abd8c04a877c57de69cc549dfaba2c6540d50681b33aa1e37287e035b31aaba20ce370ddeb9517ba99abbb5f7364e30654fea602900856c78d85cddfea7daac1aaf8f81822cb1540648ddc77957655c2bf1e46040540bf41081e09093e8131da69141d", @nested={0x36, 0x6e, 0x0, 0x1, [@typed={0x4, 0x8d}, @nested={0x4, 0x48}, @generic="97f52214b1848faf4eb8f216494e60392bb5", @nested={0x4, 0x4a}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@remote}]}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffff8}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x9}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xf5, 0xe8, "610948cd915ca50757ba5740c617761b66f78e1d6f9ae09aea73ecbcadc05d5453e357132541ed2cc0689cf25c93e20c56572274f3b883d468decda544eb6aed8b1b4d01e2de848246beca9c576be2bdc144d6216004e9764b89ada530a7a55ed75df5da75faf89b62ee0672d3fac2ae975118a63975a3a08ad612a1197d032046895a1f0c4bb6bb2c1bef8ea2a17499843dea1ed4125e2d2a29408a626ea128f3e3678b59fe28274bffd3cb80124b2f441927df0998ff54c331c51dd23f10f7ed528dd9df0f4b3ed9ffbbcdecaa0cd0d1100cd5a242182884f7f0595fb5564ed3ada57caf6d4d63860be6d303e291dcf8"}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040044) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x158, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_QOS_MAP={0xe4, 0xc7, "e1881ac5ae2a0b513b93f81dbdf7ceba316ae480c88440dda4f32f43af9a9ec3bec2e7beaa7323b51b48047df125dc69c591be0831057b901a4b479166c455c46acd05b1fe75180b5827d51bf3e3777b1a38778c02479a3e62dd43eb2d6f511206de787e45f3aae386bf64b7d1d511f231d4227ea6971dcc34adae6fde7d380810101ea219449d27b56e75108fabc852d4d650cc17aa612232c2792133c8c9744e4cbe50d13a3130757091c4d4af80939886c97e7c2d12f8065f514a39a8080be860faa759fa21b71665590d45766909343f1902a187a57339b57e3618fa5760"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xfffffdf7}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_FILS_KEK={0x8, 0xf2, '!T2b'}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_SSID={0x15, 0x34, "90afdd040ceff2a616d50d00979fe41db8"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x14, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x5}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xa7a0}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8840}, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8240, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.60' (ED25519) to the list of known hosts. [ 88.973648][ T5815] cgroup: Unknown subsys name 'net' [ 89.139819][ T5815] cgroup: Unknown subsys name 'cpuset' [ 89.148825][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.925764][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.171992][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.180141][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.189612][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.197670][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.205492][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.216271][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.223654][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.228432][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.231944][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.249053][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.251270][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.258227][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.264394][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.270264][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.285482][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.293738][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.301769][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.310099][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.318876][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.326339][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.953191][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 93.978427][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 94.002623][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 94.116506][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 94.222803][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.231309][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.238795][ T5824] bridge_slave_0: entered allmulticast mode [ 94.246244][ T5824] bridge_slave_0: entered promiscuous mode [ 94.293383][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.300675][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.308631][ T5824] bridge_slave_1: entered allmulticast mode [ 94.316515][ T5824] bridge_slave_1: entered promiscuous mode [ 94.329383][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.336683][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.343852][ T5833] bridge_slave_0: entered allmulticast mode [ 94.352560][ T5833] bridge_slave_0: entered promiscuous mode [ 94.394495][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.401922][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.409308][ T5833] bridge_slave_1: entered allmulticast mode [ 94.416651][ T5833] bridge_slave_1: entered promiscuous mode [ 94.479662][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.487196][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.494339][ T5825] bridge_slave_0: entered allmulticast mode [ 94.502833][ T5825] bridge_slave_0: entered promiscuous mode [ 94.513591][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.551795][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.559107][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.566776][ T5825] bridge_slave_1: entered allmulticast mode [ 94.574067][ T5825] bridge_slave_1: entered promiscuous mode [ 94.598656][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.608071][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.615887][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.623070][ T5827] bridge_slave_0: entered allmulticast mode [ 94.630782][ T5827] bridge_slave_0: entered promiscuous mode [ 94.641763][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.679797][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.687397][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.694559][ T5827] bridge_slave_1: entered allmulticast mode [ 94.702785][ T5827] bridge_slave_1: entered promiscuous mode [ 94.712272][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.739739][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.810059][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.837770][ T5824] team0: Port device team_slave_0 added [ 94.847251][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.860208][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.872305][ T5833] team0: Port device team_slave_0 added [ 94.892954][ T5824] team0: Port device team_slave_1 added [ 94.935973][ T5833] team0: Port device team_slave_1 added [ 94.944137][ T5825] team0: Port device team_slave_0 added [ 94.953154][ T5825] team0: Port device team_slave_1 added [ 94.988949][ T5827] team0: Port device team_slave_0 added [ 95.023599][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.031755][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.059002][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.074552][ T5827] team0: Port device team_slave_1 added [ 95.112527][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.119689][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.145707][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.171512][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.178665][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.204894][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.216943][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.223914][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.250053][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.282252][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.289350][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.315731][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.328088][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.335369][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.346115][ T55] Bluetooth: hci2: command tx timeout [ 95.361388][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.395077][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.402063][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.427301][ T55] Bluetooth: hci0: command tx timeout [ 95.428279][ T5841] Bluetooth: hci1: command tx timeout [ 95.433434][ T5834] Bluetooth: hci3: command tx timeout [ 95.440159][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.463141][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.470156][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.496155][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.536450][ T5825] hsr_slave_0: entered promiscuous mode [ 95.542982][ T5825] hsr_slave_1: entered promiscuous mode [ 95.590433][ T5824] hsr_slave_0: entered promiscuous mode [ 95.597272][ T5824] hsr_slave_1: entered promiscuous mode [ 95.603504][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.611342][ T5824] Cannot create hsr debugfs directory [ 95.738580][ T5833] hsr_slave_0: entered promiscuous mode [ 95.745259][ T5833] hsr_slave_1: entered promiscuous mode [ 95.751447][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.759239][ T5833] Cannot create hsr debugfs directory [ 95.770488][ T5827] hsr_slave_0: entered promiscuous mode [ 95.777059][ T5827] hsr_slave_1: entered promiscuous mode [ 95.783112][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.790760][ T5827] Cannot create hsr debugfs directory [ 96.266970][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.280382][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.301108][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.322644][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.362192][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.396035][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.407810][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.441741][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.507651][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.523048][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.534366][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.545409][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.657844][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.668963][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.692803][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.704267][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.812882][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.855392][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.898744][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.926539][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.950659][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.957967][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.976575][ T10] cfg80211: failed to load regulatory.db [ 96.980920][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.012451][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.019935][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.032086][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.039234][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.078431][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.085657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.103139][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.128966][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.136233][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.203541][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.210710][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.321778][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.419289][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.436545][ T5834] Bluetooth: hci2: command tx timeout [ 97.479814][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.487117][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.505261][ T5834] Bluetooth: hci1: command tx timeout [ 97.510730][ T5834] Bluetooth: hci3: command tx timeout [ 97.520943][ T55] Bluetooth: hci0: command tx timeout [ 97.521468][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.533560][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.772350][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.794458][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.901350][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.958565][ T5827] veth0_vlan: entered promiscuous mode [ 97.982521][ T5824] veth0_vlan: entered promiscuous mode [ 98.000516][ T5827] veth1_vlan: entered promiscuous mode [ 98.097464][ T5824] veth1_vlan: entered promiscuous mode [ 98.107962][ T5825] veth0_vlan: entered promiscuous mode [ 98.153313][ T5827] veth0_macvtap: entered promiscuous mode [ 98.172305][ T5825] veth1_vlan: entered promiscuous mode [ 98.184434][ T5824] veth0_macvtap: entered promiscuous mode [ 98.194337][ T5827] veth1_macvtap: entered promiscuous mode [ 98.206340][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.219808][ T5824] veth1_macvtap: entered promiscuous mode [ 98.259736][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.278429][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.306304][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.317097][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.326041][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.337100][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.349956][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.361236][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.373007][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.394537][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.406851][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.420273][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.448399][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.457554][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.467819][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.478342][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508263][ T5825] veth0_macvtap: entered promiscuous mode [ 98.543639][ T5825] veth1_macvtap: entered promiscuous mode [ 98.611530][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.622752][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.634469][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.646384][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.659553][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.682126][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.693321][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.704083][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.717459][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.728779][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.737212][ T5833] veth0_vlan: entered promiscuous mode [ 98.793619][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.806862][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.816619][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.825856][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.840542][ T5833] veth1_vlan: entered promiscuous mode [ 98.846969][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.856080][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.914469][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.923255][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.972428][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.980370][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.052136][ T5833] veth0_macvtap: entered promiscuous mode [ 99.073262][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.090565][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.092367][ T5833] veth1_macvtap: entered promiscuous mode [ 99.123859][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.140955][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.164423][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.247870][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.262963][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.287488][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.331710][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.364614][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.382653][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.404937][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.417541][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.437899][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.476381][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.488235][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.498586][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.509159][ T5894] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 99.514995][ T55] Bluetooth: hci2: command tx timeout [ 99.550686][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.565580][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.578121][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.588978][ T55] Bluetooth: hci1: command tx timeout [ 99.595603][ T5834] Bluetooth: hci3: command tx timeout [ 99.601128][ T55] Bluetooth: hci0: command tx timeout [ 99.623211][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.654400][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.694942][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.704867][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.714461][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.219486][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.276037][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.337324][ T5899] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 100.409291][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.440789][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.776575][ T5908] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 100.981146][ T5910] Zero length message leads to an empty skb [ 101.201815][ T5905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 101.379663][ T5913] syz.0.5 (5913): attempted to duplicate a private mapping with mremap. This is not supported. [ 101.604295][ T55] Bluetooth: hci2: command tx timeout [ 101.642192][ T5928] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 101.665836][ T55] Bluetooth: hci0: command tx timeout [ 101.671300][ T55] Bluetooth: hci3: command tx timeout [ 101.679536][ T55] Bluetooth: hci1: command tx timeout [ 102.025062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.034164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.043437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.043832][ T5933] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 102.145734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.503105][ T5938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 102.915826][ T5954] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 104.146217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.522526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.585323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.894765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.959169][ T5981] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 105.544167][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.874924][ T6004] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 106.515129][ T6013] kernel read not supported for file /set_event_notrace_pid (pid: 6013 comm: syz.0.22) [ 106.543712][ T30] audit: type=1800 audit(1746380596.594:2): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 106.626048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.325085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.944610][ T6030] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 108.331413][ T6047] can: request_module (can-proto-3) failed. [ 108.795177][ T6049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 109.483616][ T6057] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 110.214247][ T6064] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 110.966490][ T6082] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 111.961178][ T6103] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 112.004938][ T6092] can: request_module (can-proto-3) failed. [ 112.399430][ T6108] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 112.472375][ T6108] CIFS mount error: No usable UNC path provided in device string! [ 112.472375][ T6108] [ 112.522840][ T6108] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 112.730025][ T6118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 113.460896][ T6128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 113.523364][ T6133] Invalid ELF header magic: != ELF [ 113.901918][ T6135] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 114.383398][ T6143] can: request_module (can-proto-3) failed. [ 114.873678][ T6149] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 115.246249][ T6159] mmap: syz.3.46 (6159) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.375141][ T6161] kernel read not supported for file /set_event_notrace_pid (pid: 6161 comm: syz.2.47) [ 115.440228][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.441885][ T30] audit: type=1800 audit(1746380605.434:3): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 115.575609][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.664389][ T6155] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 116.895229][ T6171] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 117.394146][ T6179] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 118.565910][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 119.132637][ T6207] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 119.638321][ T6213] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 120.579122][ T6232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 120.846337][ T6236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 121.249396][ T6246] futex_wake_op: syz.1.60 tries to shift op by 64; fix this program [ 122.437336][ T6253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 122.520241][ T6264] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 124.512150][ T6285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 124.836949][ T6289] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 124.896842][ T6295] nbd0: detected capacity change from 0 to 8388607 [ 124.921830][ T6266] block nbd0: Send control failed (result -22) [ 124.951206][ T6266] block nbd0: Request send failed, requeueing [ 124.996056][ T55] block nbd0: Receive control failed (result -32) [ 125.005519][ T6266] block nbd0: Dead connection, failed to find a fallback [ 125.012604][ T6266] block nbd0: shutting down sockets [ 125.018899][ T45] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.028473][ T45] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.036856][ T6266] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.046471][ T6266] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.054531][ T6266] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.084825][ T6266] Buffer I/O error on dev nbd0, logical block 2, async page read [ 125.124197][ T6266] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.156310][ T6266] Buffer I/O error on dev nbd0, logical block 3, async page read [ 125.210983][ T6266] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.220531][ T6266] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.228821][ T6266] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.239148][ T6266] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.247541][ T6266] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.281900][ T6266] Buffer I/O error on dev nbd0, logical block 2, async page read [ 125.305064][ T6266] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.315679][ T6266] Buffer I/O error on dev nbd0, logical block 3, async page read [ 125.323667][ T6266] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.360944][ T6266] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.401578][ T6298] Invalid ELF header magic: != ELF [ 125.405456][ T6266] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.454713][ T6266] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.476503][ T6266] ldm_validate_partition_table(): Disk read failed. [ 125.495927][ T6266] Dev nbd0: unable to read RDB block 0 [ 125.503813][ T6266] nbd0: unable to read partition table [ 125.646511][ T6266] ldm_validate_partition_table(): Disk read failed. [ 125.702609][ T6266] Dev nbd0: unable to read RDB block 0 [ 125.722078][ T6301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 125.788193][ T6266] nbd0: unable to read partition table [ 126.822044][ T6321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 127.393598][ T6330] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 127.477003][ T6332] can: request_module (can-proto-0) failed. [ 127.798167][ T6336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 127.826592][ T6343] kernel read not supported for file /set_event_notrace_pid (pid: 6343 comm: syz.1.78) [ 127.842936][ T30] audit: type=1800 audit(6041347916.897:4): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.78" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 128.109406][ T6344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 129.143643][ T6363] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 130.587074][ T6382] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 130.859435][ T6392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 132.738763][ T6405] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 132.913235][ T6403] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.153573][ T6414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 134.323482][ T6436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 135.071287][ T6438] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 135.818121][ T6453] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 137.013755][ T6485] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 137.922132][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.931388][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.502054][ T6517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 138.784523][ T6525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 139.750036][ T6542] can: request_module (can-proto-3) failed. [ 140.599933][ T6548] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 141.229371][ T6549] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 141.865472][ T6564] can: request_module (can-proto-3) failed. [ 142.474500][ T6575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 143.466845][ T6570] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 144.110134][ T6594] can: request_module (can-proto-0) failed. [ 144.504531][ T6603] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 144.953376][ T6607] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 145.435462][ T6618] can: request_module (can-proto-0) failed. [ 147.308697][ T6638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 147.543878][ T6643] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 148.279641][ T6656] can: request_module (can-proto-3) failed. [ 149.128920][ T6669] kernel read not supported for file /set_event_notrace_pid (pid: 6669 comm: syz.0.135) [ 149.164746][ T30] audit: type=1800 audit(6041347938.217:5): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.135" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 149.199321][ T6662] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 149.440610][ T6675] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 150.981502][ T6682] vivid-009: ================= START STATUS ================= [ 151.004934][ T6682] vivid-009: Enable Output Cropping: true [ 151.034009][ T6682] vivid-009: Enable Output Composing: true [ 151.064204][ T6682] vivid-009: Enable Output Scaler: true [ 151.074523][ T6682] vivid-009: Tx RGB Quantization Range: Automatic [ 151.083425][ T6682] vivid-009: Transmit Mode: HDMI [ 151.091329][ T6682] vivid-009: Hotplug Present: 0x00000000 [ 151.107705][ T6682] vivid-009: RxSense Present: 0x00000000 [ 151.127975][ T6682] vivid-009: EDID Present: 0x00000000 [ 151.135124][ T6682] vivid-009: ================== END STATUS ================== [ 151.238257][ T6686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 151.269889][ T6695] can: request_module (can-proto-3) failed. [ 151.601024][ T6693] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 152.484859][ T6714] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 152.718069][ T6718] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 153.134218][ T6722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 153.208475][ T6728] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 153.542500][ T6731] can: request_module (can-proto-3) failed. [ 154.466522][ T6742] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 154.798798][ T6743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 155.490462][ T6757] Invalid ELF header magic: != ELF [ 155.878142][ T6762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 155.983993][ T6769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 157.016768][ T6777] can: request_module (can-proto-3) failed. [ 157.854461][ T6793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 158.156483][ T6800] can: request_module (can-proto-3) failed. [ 158.497164][ T6790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 159.089770][ T6808] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 159.800906][ T6812] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 160.446679][ T6833] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 160.551365][ T6836] can: request_module (can-proto-3) failed. [ 160.936125][ T6841] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 161.803212][ T6851] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 161.943799][ T6860] can: request_module (can-proto-3) failed. [ 162.623752][ T6862] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 162.928251][ T6870] vivid-009: ================= START STATUS ================= [ 162.936133][ T6870] vivid-009: Enable Output Cropping: true [ 162.941884][ T6870] vivid-009: Enable Output Composing: true [ 162.953152][ T6870] vivid-009: Enable Output Scaler: true [ 162.961427][ T6870] vivid-009: Tx RGB Quantization Range: Automatic [ 162.972337][ T6868] Invalid ELF header magic: != ELF [ 162.977738][ T6870] vivid-009: Transmit Mode: HDMI [ 162.982875][ T6870] vivid-009: Hotplug Present: 0x00000000 [ 162.998533][ T6870] vivid-009: RxSense Present: 0x00000000 [ 163.051969][ T6870] vivid-009: EDID Present: 0x00000000 [ 163.266626][ T6870] vivid-009: ================== END STATUS ================== [ 163.630294][ T6876] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 164.027430][ T6886] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 164.477383][ T6879] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 164.815136][ T6885] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 165.076638][ T6895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 165.390022][ T6899] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 165.803178][ T6912] can: request_module (can-proto-3) failed. [ 166.043755][ T6905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 166.530472][ T6909] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 166.960609][ T6917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 167.223326][ T6919] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 167.358254][ T6923] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 167.619020][ T6942] CIFS mount error: No usable UNC path provided in device string! [ 167.619020][ T6942] [ 167.649856][ T6942] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 167.673120][ T6927] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 167.834497][ T6931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 168.223198][ T6935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 169.071321][ T6961] can: request_module (can-proto-3) failed. [ 169.887905][ T6976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 170.258731][ T6990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 170.531707][ T6993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 170.739575][ T6983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 171.110987][ T7002] kernel read not supported for file /set_event_notrace_pid (pid: 7002 comm: syz.3.199) [ 171.155188][ T30] audit: type=1800 audit(6041347960.207:6): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.199" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 171.312299][ T7006] CIFS mount error: No usable UNC path provided in device string! [ 171.312299][ T7006] [ 171.353280][ T7006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.612257][ T7008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97 [ 172.206426][ T7012] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 174.106628][ T7051] can: request_module (can-proto-3) failed. [ 174.408805][ T7059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99 [ 174.641722][ T7066] can: request_module (can-proto-3) failed. [ 175.129409][ T7073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100 [ 176.280998][ T7092] kernel read not supported for file /set_event_notrace_pid (pid: 7092 comm: syz.1.208) [ 176.321338][ T30] audit: type=1800 audit(6041347965.377:7): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.208" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 178.066612][ T7109] can: request_module (can-proto-0) failed. [ 178.865958][ T7123] can: request_module (can-proto-3) failed. [ 179.496483][ T7131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101 [ 179.998870][ T7138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102 [ 180.444158][ T7145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103 [ 181.267273][ T7151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104 [ 182.493958][ T7167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105 [ 182.733958][ T7173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106 [ 185.014736][ T7201] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107 [ 185.355298][ T7208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108 [ 185.415387][ T7212] can: request_module (can-proto-0) failed. [ 187.868099][ T7239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109 [ 188.167018][ T7249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 189.590168][ T7272] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 189.831374][ T7280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 189.948122][ T7283] can: request_module (can-proto-3) failed. [ 190.694902][ T7291] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 191.140138][ T7292] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 191.951749][ T7306] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 193.947389][ T7344] can: request_module (can-proto-3) failed. [ 195.298116][ T7360] can: request_module (can-proto-3) failed. [ 196.609758][ T7384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 197.770340][ T7411] can: request_module (can-proto-3) failed. [ 198.987006][ T7425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 199.349844][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.356526][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.479328][ T7436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 200.433559][ T7457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 200.612889][ T7468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 200.974986][ T7462] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 201.215498][ T7466] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 202.861722][ T7497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 202.912821][ T7502] netlink: 330 bytes leftover after parsing attributes in process `syz.2.302'. [ 203.185624][ T7508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 205.360790][ T7550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 205.976731][ T7556] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 207.100114][ T7577] Console: switching to colour VGA+ 80x25 [ 207.117618][ T7577] FAULT_INJECTION: forcing a failure. [ 207.117618][ T7577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.132804][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.0.326 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 207.132842][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 207.132862][ T7577] Call Trace: [ 207.132871][ T7577] [ 207.132886][ T7577] dump_stack_lvl+0x16c/0x1f0 [ 207.132930][ T7577] should_fail_ex+0x512/0x640 [ 207.132977][ T7577] should_fail_alloc_page+0xe7/0x130 [ 207.133015][ T7577] prepare_alloc_pages+0x3c2/0x610 [ 207.133060][ T7577] ? rcu_is_watching+0x12/0xc0 [ 207.133090][ T7577] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 207.133129][ T7577] ? __lock_acquire+0x5ca/0x1ba0 [ 207.133172][ T7577] ? xas_create+0x1d7/0x1460 [ 207.133226][ T7577] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.133260][ T7577] ? cgroup_rstat_updated+0x2a/0xb20 [ 207.133324][ T7577] ? __lock_acquire+0x5ca/0x1ba0 [ 207.133361][ T7577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.133408][ T7577] ? policy_nodemask+0xea/0x4e0 [ 207.133448][ T7577] alloc_pages_mpol+0x1fb/0x550 [ 207.133484][ T7577] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 207.133521][ T7577] ? filemap_get_entry+0x1a7/0x3b0 [ 207.133567][ T7577] folio_alloc_noprof+0x20/0x2d0 [ 207.133607][ T7577] filemap_alloc_folio_noprof+0x3a1/0x470 [ 207.133640][ T7577] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 207.133673][ T7577] ? rcu_is_watching+0x12/0xc0 [ 207.133706][ T7577] __filemap_get_folio+0x5e9/0xc10 [ 207.133760][ T7577] ioctx_alloc+0x761/0x2060 [ 207.133823][ T7577] ? __pfx_ioctx_alloc+0x10/0x10 [ 207.133864][ T7577] ? __might_fault+0x13b/0x190 [ 207.133906][ T7577] __x64_sys_io_setup+0xc9/0x210 [ 207.133953][ T7577] do_syscall_64+0xcd/0x230 [ 207.133998][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.134027][ T7577] RIP: 0033:0x7fd42d38e969 [ 207.134051][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.134078][ T7577] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 207.134106][ T7577] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 207.134125][ T7577] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 207.134143][ T7577] RBP: 00007fd42d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.134159][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.134176][ T7577] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 207.134213][ T7577] [ 207.376733][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.663368][ T7581] Console: switching to colour frame buffer device 128x48 [ 208.489717][ T7609] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 208.808179][ T7606] process 'syz.0.333' launched '/dev/fd/5' with NULL argv: empty string added [ 208.823004][ T7616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 211.141059][ T7666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129 [ 211.342828][ T7680] FAULT_INJECTION: forcing a failure. [ 211.342828][ T7680] name failslab, interval 1, probability 0, space 0, times 0 [ 211.377527][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.3.353 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 211.377569][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 211.377586][ T7680] Call Trace: [ 211.377596][ T7680] [ 211.377607][ T7680] dump_stack_lvl+0x16c/0x1f0 [ 211.377655][ T7680] should_fail_ex+0x512/0x640 [ 211.377695][ T7680] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 211.377759][ T7680] should_failslab+0xc2/0x120 [ 211.377797][ T7680] __kmalloc_cache_noprof+0x6a/0x3e0 [ 211.377850][ T7680] ? copy_net_ns+0x135/0x5f0 [ 211.377896][ T7680] copy_net_ns+0x135/0x5f0 [ 211.377934][ T7680] ? copy_cgroup_ns+0xa4/0x6f0 [ 211.377966][ T7680] create_new_namespaces+0x3ea/0xad0 [ 211.378010][ T7680] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 211.378048][ T7680] ksys_unshare+0x45b/0xa40 [ 211.378091][ T7680] ? __pfx_ksys_unshare+0x10/0x10 [ 211.378134][ T7680] ? ksys_write+0x1b9/0x240 [ 211.378163][ T7680] ? rcu_is_watching+0x12/0xc0 [ 211.378201][ T7680] __x64_sys_unshare+0x31/0x40 [ 211.378243][ T7680] do_syscall_64+0xcd/0x230 [ 211.378288][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.378319][ T7680] RIP: 0033:0x7f850ad8e969 [ 211.378344][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.378373][ T7680] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 211.378412][ T7680] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 211.378431][ T7680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 211.378448][ T7680] RBP: 00007f850bb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 211.378466][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.378483][ T7680] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 211.378520][ T7680] [ 211.571433][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.926223][ T7685] kernel read not supported for file /set_event_notrace_pid (pid: 7685 comm: syz.3.354) [ 211.961291][ T7671] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 211.991568][ T30] audit: type=1800 audit(6041348001.047:8): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.354" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 213.063519][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 213.344744][ T7699] Invalid ELF header magic: != ELF [ 214.261845][ T7732] FAULT_INJECTION: forcing a failure. [ 214.261845][ T7732] name failslab, interval 1, probability 0, space 0, times 0 [ 214.278727][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.3.362 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 214.278810][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 214.278845][ T7732] Call Trace: [ 214.278864][ T7732] [ 214.278885][ T7732] dump_stack_lvl+0x16c/0x1f0 [ 214.278975][ T7732] should_fail_ex+0x512/0x640 [ 214.279059][ T7732] ? __kmalloc_noprof+0xbf/0x510 [ 214.279114][ T7732] ? __register_sysctl_table+0xb3/0x1900 [ 214.279150][ T7732] should_failslab+0xc2/0x120 [ 214.279189][ T7732] __kmalloc_noprof+0xd2/0x510 [ 214.279232][ T7732] __register_sysctl_table+0xb3/0x1900 [ 214.279269][ T7732] ? is_module_address+0x5f/0xf0 [ 214.279318][ T7732] ? __pfx___register_sysctl_table+0x10/0x10 [ 214.279353][ T7732] ? is_module_address+0x69/0xf0 [ 214.279394][ T7732] ? register_net_sysctl_sz+0x228/0x3e0 [ 214.279447][ T7732] ? __asan_memcpy+0x3c/0x60 [ 214.279499][ T7732] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 214.279537][ T7732] nf_lwtunnel_net_init+0x60/0xf0 [ 214.279576][ T7732] ops_init+0x1df/0x5f0 [ 214.279619][ T7732] setup_net+0x21e/0x850 [ 214.279662][ T7732] ? __pfx_setup_net+0x10/0x10 [ 214.279704][ T7732] ? lockdep_init_map_type+0x5c/0x280 [ 214.279749][ T7732] ? __pfx_down_read_killable+0x10/0x10 [ 214.279805][ T7732] ? debug_mutex_init+0x37/0x70 [ 214.279861][ T7732] copy_net_ns+0x2a6/0x5f0 [ 214.279908][ T7732] create_new_namespaces+0x3ea/0xad0 [ 214.279954][ T7732] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 214.279994][ T7732] ksys_unshare+0x45b/0xa40 [ 214.280039][ T7732] ? __pfx_ksys_unshare+0x10/0x10 [ 214.280080][ T7732] ? xfd_validate_state+0x5d/0x180 [ 214.280133][ T7732] ? rcu_is_watching+0x12/0xc0 [ 214.280172][ T7732] __x64_sys_unshare+0x31/0x40 [ 214.280213][ T7732] do_syscall_64+0xcd/0x230 [ 214.280262][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.280295][ T7732] RIP: 0033:0x7f850ad8e969 [ 214.280321][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.280352][ T7732] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 214.280382][ T7732] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 214.280404][ T7732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 214.280422][ T7732] RBP: 00007f850ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 214.280443][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.280462][ T7732] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 214.280503][ T7732] [ 214.539163][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.216916][ T7743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 215.636765][ T7744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 216.868370][ T5139] Bluetooth: hci0: command 0x0406 tx timeout [ 216.874526][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 216.881344][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 216.887527][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 217.700832][ T7803] FAULT_INJECTION: forcing a failure. [ 217.700832][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 217.729515][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.1.380 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 217.729561][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 217.729578][ T7803] Call Trace: [ 217.729588][ T7803] [ 217.729600][ T7803] dump_stack_lvl+0x16c/0x1f0 [ 217.729650][ T7803] should_fail_ex+0x512/0x640 [ 217.729695][ T7803] ? fs_reclaim_acquire+0xae/0x150 [ 217.729747][ T7803] should_failslab+0xc2/0x120 [ 217.729788][ T7803] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 217.729825][ T7803] ? security_inode_alloc+0x3b/0x2b0 [ 217.729867][ T7803] security_inode_alloc+0x3b/0x2b0 [ 217.729905][ T7803] inode_init_always_gfp+0xce4/0x1030 [ 217.729963][ T7803] alloc_inode+0x86/0x240 [ 217.730002][ T7803] path_from_stashed+0x2be/0xb00 [ 217.730032][ T7803] ? do_raw_spin_lock+0x12c/0x2b0 [ 217.730085][ T7803] ? __pfx_path_from_stashed+0x10/0x10 [ 217.730118][ T7803] ? do_raw_spin_unlock+0x172/0x230 [ 217.730174][ T7803] ns_get_path+0x5f/0x80 [ 217.730221][ T7803] proc_ns_get_link+0x121/0x260 [ 217.730282][ T7803] ? __pfx_proc_ns_get_link+0x10/0x10 [ 217.730331][ T7803] ? __pfx___might_resched+0x10/0x10 [ 217.730381][ T7803] ? __pfx_proc_ns_get_link+0x10/0x10 [ 217.730430][ T7803] step_into+0x1b22/0x2270 [ 217.730484][ T7803] ? __pfx_step_into+0x10/0x10 [ 217.730534][ T7803] ? find_held_lock+0x2b/0x80 [ 217.730577][ T7803] path_openat+0x749/0x2d40 [ 217.730621][ T7803] ? __pfx_path_openat+0x10/0x10 [ 217.730661][ T7803] do_filp_open+0x20b/0x470 [ 217.730691][ T7803] ? __pfx_do_filp_open+0x10/0x10 [ 217.730749][ T7803] ? alloc_fd+0x471/0x7d0 [ 217.730810][ T7803] do_sys_openat2+0x11b/0x1d0 [ 217.730852][ T7803] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.730909][ T7803] __x64_sys_openat+0x174/0x210 [ 217.730952][ T7803] ? __pfx___x64_sys_openat+0x10/0x10 [ 217.730997][ T7803] ? rcu_is_watching+0x12/0xc0 [ 217.731037][ T7803] do_syscall_64+0xcd/0x230 [ 217.731084][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.731115][ T7803] RIP: 0033:0x7fdc4ab8d2d0 [ 217.731140][ T7803] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 217.731169][ T7803] RSP: 002b:00007fdc4bae2f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 217.731198][ T7803] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdc4ab8d2d0 [ 217.731217][ T7803] RDX: 0000000000000002 RSI: 00007fdc4bae2fa0 RDI: 00000000ffffff9c [ 217.731237][ T7803] RBP: 00007fdc4bae2fa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.731256][ T7803] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.731274][ T7803] R13: 0000000000000000 R14: 00007fdc4adb5fa0 R15: 00007ffe1ad510a8 [ 217.731313][ T7803] [ 221.158135][ T7861] FAULT_INJECTION: forcing a failure. [ 221.158135][ T7861] name failslab, interval 1, probability 0, space 0, times 0 [ 221.184028][ T7861] CPU: 1 UID: 0 PID: 7861 Comm: syz.3.398 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 221.184070][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 221.184087][ T7861] Call Trace: [ 221.184096][ T7861] [ 221.184107][ T7861] dump_stack_lvl+0x16c/0x1f0 [ 221.184154][ T7861] should_fail_ex+0x512/0x640 [ 221.184194][ T7861] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 221.184247][ T7861] should_failslab+0xc2/0x120 [ 221.184284][ T7861] __kmalloc_cache_noprof+0x6a/0x3e0 [ 221.184332][ T7861] ? copy_net_ns+0x135/0x5f0 [ 221.184378][ T7861] copy_net_ns+0x135/0x5f0 [ 221.184415][ T7861] ? copy_cgroup_ns+0xa4/0x6f0 [ 221.184447][ T7861] create_new_namespaces+0x3ea/0xad0 [ 221.184490][ T7861] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 221.184528][ T7861] ksys_unshare+0x45b/0xa40 [ 221.184571][ T7861] ? __pfx_ksys_unshare+0x10/0x10 [ 221.184617][ T7861] ? ksys_write+0x1b9/0x240 [ 221.184644][ T7861] ? rcu_is_watching+0x12/0xc0 [ 221.184681][ T7861] __x64_sys_unshare+0x31/0x40 [ 221.184720][ T7861] do_syscall_64+0xcd/0x230 [ 221.184765][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.184794][ T7861] RIP: 0033:0x7f850ad8e969 [ 221.184817][ T7861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.184843][ T7861] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.184869][ T7861] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 221.184886][ T7861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 221.184903][ T7861] RBP: 00007f850bb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.184920][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.184936][ T7861] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 221.184974][ T7861] [ 222.522733][ T7886] FAULT_INJECTION: forcing a failure. [ 222.522733][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 222.611502][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 222.611503][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.0.405 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 222.611542][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 222.611559][ T7886] Call Trace: [ 222.611568][ T7886] [ 222.611579][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 222.611625][ T7886] should_fail_ex+0x512/0x640 [ 222.611666][ T7886] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 222.611722][ T7886] should_failslab+0xc2/0x120 [ 222.611766][ T7886] __kmalloc_cache_noprof+0x6a/0x3e0 [ 222.611824][ T7886] ? __do_sys_memfd_create+0x17b/0x8a0 [ 222.611877][ T7886] __do_sys_memfd_create+0x17b/0x8a0 [ 222.611936][ T7886] do_syscall_64+0xcd/0x230 [ 222.611998][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.612047][ T7886] RIP: 0033:0x7fd42d38e969 [ 222.612073][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.612104][ T7886] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 222.612144][ T7886] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 222.612164][ T7886] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 222.612182][ T7886] RBP: 00007fd42d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 222.612200][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.612218][ T7886] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 222.612255][ T7886] [ 222.764589][ T7891] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 222.853711][ T7886] FAULT_INJECTION: forcing a failure. [ 222.853711][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 222.924799][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.0.405 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 222.924843][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 222.924867][ T7886] Call Trace: [ 222.924877][ T7886] [ 222.924888][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 222.924937][ T7886] should_fail_ex+0x512/0x640 [ 222.924986][ T7886] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 222.925026][ T7886] should_failslab+0xc2/0x120 [ 222.925063][ T7886] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 222.925099][ T7886] ? __alloc_skb+0x2b2/0x380 [ 222.925137][ T7886] __alloc_skb+0x2b2/0x380 [ 222.925166][ T7886] ? __pfx___alloc_skb+0x10/0x10 [ 222.925213][ T7886] netlink_ack+0x15d/0xb80 [ 222.925265][ T7886] rdma_nl_rcv_skb.constprop.0.isra.0+0x345/0x450 [ 222.925314][ T7886] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 222.925380][ T7886] ? netlink_deliver_tap+0x1ae/0xd30 [ 222.925424][ T7886] netlink_unicast+0x53a/0x7f0 [ 222.925467][ T7886] ? __pfx_netlink_unicast+0x10/0x10 [ 222.925517][ T7886] netlink_sendmsg+0x8d1/0xdd0 [ 222.925563][ T7886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.925610][ T7886] __sys_sendto+0x495/0x510 [ 222.925640][ T7886] ? __pfx___sys_sendto+0x10/0x10 [ 222.925683][ T7886] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 222.925758][ T7886] __x64_sys_sendto+0xe0/0x1c0 [ 222.925787][ T7886] ? do_syscall_64+0x91/0x230 [ 222.925830][ T7886] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.925876][ T7886] do_syscall_64+0xcd/0x230 [ 222.925922][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.925953][ T7886] RIP: 0033:0x7fd42d3907fc [ 222.925989][ T7886] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 222.926017][ T7886] RSP: 002b:00007fd42e1c1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 222.926045][ T7886] RAX: ffffffffffffffda RBX: 00007fd42e1c1fc0 RCX: 00007fd42d3907fc [ 222.926063][ T7886] RDX: 0000000000000028 RSI: 00007fd42e1c2010 RDI: 0000000000000009 [ 222.926081][ T7886] RBP: 0000000000000000 R08: 00007fd42e1c1f14 R09: 000000000000000c [ 222.926099][ T7886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 222.926115][ T7886] R13: 00007fd42e1c1f68 R14: 00007fd42e1c2010 R15: 0000000000000000 [ 222.926153][ T7886] [ 224.016886][ T7895] ima: policy update failed [ 224.023363][ T30] audit: type=1802 audit(6041348013.077:9): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.408" res=0 errno=0 [ 226.294573][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 227.843791][ T5840] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 228.245353][ T7990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 228.694456][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 229.017166][ T8001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.340504][ T8010] random: crng reseeded on system resumption [ 230.523951][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.445'. [ 230.805958][ T8030] ima: policy update failed [ 230.836416][ T30] audit: type=1802 audit(6041348019.897:10): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.445" res=0 errno=0 [ 231.209425][ T8050] netlink: 342 bytes leftover after parsing attributes in process `syz.1.451'. [ 231.296940][ T8052] CIFS mount error: No usable UNC path provided in device string! [ 231.296940][ T8052] [ 231.309556][ T8052] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 231.496507][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 231.531540][ T8054] hsr0: entered allmulticast mode [ 231.538341][ T8054] hsr_slave_0: entered allmulticast mode [ 231.544126][ T8054] hsr_slave_1: entered allmulticast mode [ 231.959836][ T8069] FAULT_INJECTION: forcing a failure. [ 231.959836][ T8069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.963234][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.000369][ T8067] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.012474][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.1.456 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 232.012515][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 232.012533][ T8069] Call Trace: [ 232.012542][ T8069] [ 232.012553][ T8069] dump_stack_lvl+0x16c/0x1f0 [ 232.012600][ T8069] should_fail_ex+0x512/0x640 [ 232.012649][ T8069] should_fail_alloc_page+0xe7/0x130 [ 232.012690][ T8069] prepare_alloc_pages+0x3c2/0x610 [ 232.012741][ T8069] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 232.012784][ T8069] ? __lock_acquire+0x5ca/0x1ba0 [ 232.012834][ T8069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.012891][ T8069] ? find_held_lock+0x2b/0x80 [ 232.012921][ T8069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.012970][ T8069] ? policy_nodemask+0xea/0x4e0 [ 232.013031][ T8069] alloc_pages_mpol+0x1fb/0x550 [ 232.013071][ T8069] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.013121][ T8069] folio_alloc_mpol_noprof+0x36/0x2f0 [ 232.013169][ T8069] shmem_alloc_folio+0x135/0x160 [ 232.013224][ T8069] shmem_alloc_and_add_folio+0x499/0xc20 [ 232.013270][ T8069] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 232.013312][ T8069] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 232.013358][ T8069] shmem_get_folio_gfp+0x687/0x1530 [ 232.013405][ T8069] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 232.013448][ T8069] ? filemap_map_pages+0xf6c/0x1680 [ 232.013497][ T8069] shmem_fault+0x1fe/0xa30 [ 232.013538][ T8069] ? __pfx_shmem_fault+0x10/0x10 [ 232.013582][ T8069] ? __pfx_filemap_map_pages+0x10/0x10 [ 232.013636][ T8069] __do_fault+0x10a/0x490 [ 232.013678][ T8069] do_pte_missing+0x1031/0x3fb0 [ 232.013711][ T8069] ? do_raw_spin_unlock+0x172/0x230 [ 232.013758][ T8069] ? __pmd_alloc+0x3c2/0x870 [ 232.013809][ T8069] __handle_mm_fault+0x103d/0x2a40 [ 232.013854][ T8069] ? __pfx___handle_mm_fault+0x10/0x10 [ 232.013923][ T8069] handle_mm_fault+0x3fe/0xad0 [ 232.013969][ T8069] __get_user_pages+0x771/0x36f0 [ 232.014030][ T8069] ? __lock_acquire+0x5ca/0x1ba0 [ 232.014068][ T8069] ? look_up_lock_class+0x59/0x150 [ 232.014122][ T8069] ? __pfx___get_user_pages+0x10/0x10 [ 232.014186][ T8069] __gup_longterm_locked+0x20d/0x1850 [ 232.014248][ T8069] ? __pfx___gup_longterm_locked+0x10/0x10 [ 232.014318][ T8069] pin_user_pages_remote+0xed/0x140 [ 232.014368][ T8069] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 232.014413][ T8069] ? mm_access+0x22d/0x2e0 [ 232.014462][ T8069] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 232.014519][ T8069] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 232.014561][ T8069] ? import_ubuf+0x1b6/0x220 [ 232.014621][ T8069] ? iovec_from_user+0xbb/0x140 [ 232.014671][ T8069] process_vm_rw+0x216/0x2c0 [ 232.014711][ T8069] ? __pfx_process_vm_rw+0x10/0x10 [ 232.014759][ T8069] ? ksys_write+0x190/0x240 [ 232.014815][ T8069] ? 0xffffffffff600000 [ 232.014844][ T8069] ? ksys_write+0x1b9/0x240 [ 232.014870][ T8069] ? __pfx_ksys_write+0x10/0x10 [ 232.014903][ T8069] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 232.014950][ T8069] ? do_syscall_64+0x91/0x230 [ 232.014991][ T8069] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.015030][ T8069] do_syscall_64+0xcd/0x230 [ 232.015076][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.015107][ T8069] RIP: 0033:0x7fdc4ab8e969 [ 232.015129][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.015157][ T8069] RSP: 002b:00007fdc4bae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 232.015184][ T8069] RAX: ffffffffffffffda RBX: 00007fdc4adb5fa0 RCX: 00007fdc4ab8e969 [ 232.015204][ T8069] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000001c0 [ 232.015222][ T8069] RBP: 00007fdc4bae3090 R08: 0000000000000006 R09: 0000000000000000 [ 232.015239][ T8069] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 232.015256][ T8069] R13: 0000000000000000 R14: 00007fdc4adb5fa0 R15: 00007ffe1ad510a8 [ 232.015295][ T8069] [ 234.930012][ T8134] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 235.356276][ T8145] FAULT_INJECTION: forcing a failure. [ 235.356276][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 235.418199][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.0.475 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 235.418242][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 235.418260][ T8145] Call Trace: [ 235.418270][ T8145] [ 235.418280][ T8145] dump_stack_lvl+0x16c/0x1f0 [ 235.418327][ T8145] should_fail_ex+0x512/0x640 [ 235.418371][ T8145] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 235.418410][ T8145] should_failslab+0xc2/0x120 [ 235.418449][ T8145] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.418485][ T8145] ? getname_flags.part.0+0x4c/0x550 [ 235.418532][ T8145] getname_flags.part.0+0x4c/0x550 [ 235.418588][ T8145] getname_flags+0x93/0xf0 [ 235.418640][ T8145] do_sys_openat2+0xb8/0x1d0 [ 235.418677][ T8145] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.418718][ T8145] ? __fget_files+0x20e/0x3c0 [ 235.418773][ T8145] __x64_sys_openat+0x174/0x210 [ 235.418811][ T8145] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.418851][ T8145] ? ksys_write+0x1b9/0x240 [ 235.418880][ T8145] ? rcu_is_watching+0x12/0xc0 [ 235.418919][ T8145] do_syscall_64+0xcd/0x230 [ 235.418962][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.418993][ T8145] RIP: 0033:0x7fd42d38e969 [ 235.419016][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.419044][ T8145] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.419072][ T8145] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 235.419091][ T8145] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 235.419110][ T8145] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 235.419128][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.419145][ T8145] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 235.419184][ T8145] [ 236.548490][ T8165] nvme_fabrics: missing parameter 'transport=%s' [ 236.564760][ T8165] nvme_fabrics: missing parameter 'nqn=%s' [ 238.604378][ T8220] FAULT_INJECTION: forcing a failure. [ 238.604378][ T8220] name failslab, interval 1, probability 0, space 0, times 0 [ 238.619147][ T8220] CPU: 1 UID: 0 PID: 8220 Comm: syz.0.489 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 238.619189][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 238.619206][ T8220] Call Trace: [ 238.619215][ T8220] [ 238.619226][ T8220] dump_stack_lvl+0x16c/0x1f0 [ 238.619272][ T8220] should_fail_ex+0x512/0x640 [ 238.619319][ T8220] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 238.619356][ T8220] should_failslab+0xc2/0x120 [ 238.619393][ T8220] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 238.619428][ T8220] ? security_file_alloc+0x34/0x2b0 [ 238.619474][ T8220] security_file_alloc+0x34/0x2b0 [ 238.619514][ T8220] init_file+0x93/0x4c0 [ 238.619550][ T8220] alloc_empty_file+0x73/0x1e0 [ 238.619590][ T8220] path_openat+0xe0/0x2d40 [ 238.619615][ T8220] ? __do_sys_openat2+0x1c0/0x2d0 [ 238.619651][ T8220] ? do_syscall_64+0xcd/0x230 [ 238.619690][ T8220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.619734][ T8220] ? __pfx_path_openat+0x10/0x10 [ 238.619774][ T8220] do_filp_open+0x20b/0x470 [ 238.619802][ T8220] ? __pfx_do_filp_open+0x10/0x10 [ 238.619860][ T8220] ? alloc_fd+0x471/0x7d0 [ 238.619919][ T8220] do_sys_openat2+0x11b/0x1d0 [ 238.619959][ T8220] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.620014][ T8220] __do_sys_openat2+0x1c0/0x2d0 [ 238.620055][ T8220] ? __pfx___do_sys_openat2+0x10/0x10 [ 238.620098][ T8220] ? ksys_write+0x1b9/0x240 [ 238.620126][ T8220] ? rcu_is_watching+0x12/0xc0 [ 238.620166][ T8220] do_syscall_64+0xcd/0x230 [ 238.620211][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.620238][ T8220] RIP: 0033:0x7fd42d38e969 [ 238.620261][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.620294][ T8220] RSP: 002b:00007fd42e181038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 238.620319][ T8220] RAX: ffffffffffffffda RBX: 00007fd42d5b6160 RCX: 00007fd42d38e969 [ 238.620337][ T8220] RDX: 0000200000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 238.620355][ T8220] RBP: 00007fd42e181090 R08: 0000000000000000 R09: 0000000000000000 [ 238.620371][ T8220] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 238.620387][ T8220] R13: 0000000000000000 R14: 00007fd42d5b6160 R15: 00007ffe9effd6d8 [ 238.620424][ T8220] [ 239.201125][ T8233] FAULT_INJECTION: forcing a failure. [ 239.201125][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 239.215468][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.3.494 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 239.215509][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 239.215526][ T8233] Call Trace: [ 239.215536][ T8233] [ 239.215546][ T8233] dump_stack_lvl+0x16c/0x1f0 [ 239.215596][ T8233] should_fail_ex+0x512/0x640 [ 239.215642][ T8233] _copy_from_iter+0x2a4/0x15b0 [ 239.215692][ T8233] ? __alloc_skb+0x200/0x380 [ 239.215723][ T8233] ? __pfx__copy_from_iter+0x10/0x10 [ 239.215772][ T8233] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 239.215806][ T8233] ? __lock_acquire+0xaa4/0x1ba0 [ 239.215854][ T8233] netlink_sendmsg+0x829/0xdd0 [ 239.215896][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.215950][ T8233] ____sys_sendmsg+0xa95/0xc70 [ 239.216001][ T8233] ? copy_msghdr_from_user+0x10a/0x160 [ 239.216035][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.216097][ T8233] ___sys_sendmsg+0x134/0x1d0 [ 239.216132][ T8233] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.216215][ T8233] __sys_sendmsg+0x16d/0x220 [ 239.216250][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.216296][ T8233] ? rcu_is_watching+0x12/0xc0 [ 239.216335][ T8233] do_syscall_64+0xcd/0x230 [ 239.216377][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.216407][ T8233] RIP: 0033:0x7f850ad8e969 [ 239.216431][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.216459][ T8233] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.216487][ T8233] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 239.216506][ T8233] RDX: 0000000000048800 RSI: 00002000000165c0 RDI: 0000000000000003 [ 239.216524][ T8233] RBP: 00007f850bb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.216542][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.216559][ T8233] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 239.216596][ T8233] [ 240.148699][ T8254] kernel read not supported for file /set_event_notrace_pid (pid: 8254 comm: syz.2.499) [ 240.177820][ T30] audit: type=1800 audit(6041348029.237:11): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.499" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 241.213477][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 243.669541][ T8320] FAULT_INJECTION: forcing a failure. [ 243.669541][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 243.693138][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.1.513 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 243.693180][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 243.693197][ T8320] Call Trace: [ 243.693207][ T8320] [ 243.693223][ T8320] dump_stack_lvl+0x16c/0x1f0 [ 243.693270][ T8320] should_fail_ex+0x512/0x640 [ 243.693311][ T8320] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 243.693365][ T8320] should_failslab+0xc2/0x120 [ 243.693402][ T8320] __kmalloc_cache_noprof+0x6a/0x3e0 [ 243.693450][ T8320] ? sunrpc_cache_lookup_rcu+0x5b7/0x1480 [ 243.693484][ T8320] ? sunrpc_cache_lookup_rcu+0x615/0x1480 [ 243.693525][ T8320] sunrpc_cache_lookup_rcu+0x615/0x1480 [ 243.693570][ T8320] ? __pfx_sunrpc_cache_lookup_rcu+0x10/0x10 [ 243.693605][ T8320] ? kstrtoll+0x118/0x1f0 [ 243.693639][ T8320] ? __pfx_kstrtoll+0x10/0x10 [ 243.693675][ T8320] ? qword_get+0x5d7/0x880 [ 243.693715][ T8320] ? hashlen_string+0xb4/0x120 [ 243.693756][ T8320] nametoid_parse+0x423/0x710 [ 243.693794][ T8320] ? __pfx_nametoid_parse+0x10/0x10 [ 243.693825][ T8320] ? kasan_save_stack+0x42/0x60 [ 243.693862][ T8320] ? kasan_save_stack+0x33/0x60 [ 243.693891][ T8320] ? kasan_save_track+0x14/0x30 [ 243.693922][ T8320] ? __kvmalloc_node_noprof+0x279/0x600 [ 243.693952][ T8320] ? cache_write_procfs+0xd2/0x160 [ 243.694000][ T8320] ? proc_reg_write+0x23d/0x330 [ 243.694029][ T8320] ? ksys_write+0x12a/0x240 [ 243.694055][ T8320] ? do_syscall_64+0xcd/0x230 [ 243.694095][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.694179][ T8320] ? find_held_lock+0x2b/0x80 [ 243.694207][ T8320] ? __might_fault+0xe3/0x190 [ 243.694260][ T8320] cache_do_downcall+0xdd/0x160 [ 243.694307][ T8320] cache_write_procfs+0xf0/0x160 [ 243.694353][ T8320] ? __pfx_cache_write_procfs+0x10/0x10 [ 243.694401][ T8320] proc_reg_write+0x23d/0x330 [ 243.694436][ T8320] vfs_write+0x25c/0x1180 [ 243.694462][ T8320] ? __pfx_proc_reg_write+0x10/0x10 [ 243.694498][ T8320] ? __pfx___mutex_lock+0x10/0x10 [ 243.694540][ T8320] ? __pfx_vfs_write+0x10/0x10 [ 243.694580][ T8320] ? __fget_files+0x20e/0x3c0 [ 243.694639][ T8320] ksys_write+0x12a/0x240 [ 243.694667][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 243.694692][ T8320] ? rcu_is_watching+0x12/0xc0 [ 243.694736][ T8320] do_syscall_64+0xcd/0x230 [ 243.694826][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.694872][ T8320] RIP: 0033:0x7fdc4ab8e969 [ 243.694894][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.694921][ T8320] RSP: 002b:00007fdc4bae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.694947][ T8320] RAX: ffffffffffffffda RBX: 00007fdc4adb5fa0 RCX: 00007fdc4ab8e969 [ 243.694969][ T8320] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000003 [ 243.694985][ T8320] RBP: 00007fdc4bae3090 R08: 0000000000000000 R09: 0000000000000000 [ 243.695002][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.695018][ T8320] R13: 0000000000000000 R14: 00007fdc4adb5fa0 R15: 00007ffe1ad510a8 [ 243.695055][ T8320] [ 245.191289][ T8340] can: request_module (can-proto-0) failed. [ 245.332480][ T8348] can: request_module (can-proto-0) failed. [ 245.710491][ T8366] FAULT_INJECTION: forcing a failure. [ 245.710491][ T8366] name failslab, interval 1, probability 0, space 0, times 0 [ 245.715735][ T8332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.723733][ T8366] CPU: 1 UID: 0 PID: 8366 Comm: syz.0.524 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 245.723777][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 245.723794][ T8366] Call Trace: [ 245.723804][ T8366] [ 245.723815][ T8366] dump_stack_lvl+0x16c/0x1f0 [ 245.723865][ T8366] should_fail_ex+0x512/0x640 [ 245.723908][ T8366] ? fs_reclaim_acquire+0xae/0x150 [ 245.723959][ T8366] ? tomoyo_encode2+0x100/0x3e0 [ 245.724000][ T8366] should_failslab+0xc2/0x120 [ 245.724039][ T8366] __kmalloc_noprof+0xd2/0x510 [ 245.724083][ T8366] tomoyo_encode2+0x100/0x3e0 [ 245.724131][ T8366] tomoyo_encode+0x29/0x50 [ 245.724172][ T8366] tomoyo_realpath_from_path+0x18f/0x6e0 [ 245.724229][ T8366] tomoyo_check_open_permission+0x2ab/0x3c0 [ 245.724269][ T8366] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 245.724358][ T8366] ? do_raw_spin_lock+0x12c/0x2b0 [ 245.724418][ T8366] tomoyo_file_open+0x6b/0x90 [ 245.724468][ T8366] security_file_open+0x84/0x1e0 [ 245.724511][ T8366] do_dentry_open+0x596/0x1c10 [ 245.724556][ T8366] vfs_open+0x82/0x3f0 [ 245.724606][ T8366] path_openat+0x1e5e/0x2d40 [ 245.724652][ T8366] ? __pfx_path_openat+0x10/0x10 [ 245.724694][ T8366] do_filp_open+0x20b/0x470 [ 245.724725][ T8366] ? __pfx_do_filp_open+0x10/0x10 [ 245.724785][ T8366] ? alloc_fd+0x471/0x7d0 [ 245.724848][ T8366] do_sys_openat2+0x11b/0x1d0 [ 245.724890][ T8366] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.724936][ T8366] ? __fget_files+0x20e/0x3c0 [ 245.725000][ T8366] __x64_sys_openat+0x174/0x210 [ 245.725042][ T8366] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.725084][ T8366] ? ksys_write+0x1b9/0x240 [ 245.725128][ T8366] do_syscall_64+0xcd/0x230 [ 245.725175][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.725206][ T8366] RIP: 0033:0x7fd42d38e969 [ 245.725230][ T8366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.725260][ T8366] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.725288][ T8366] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 245.725309][ T8366] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 245.725328][ T8366] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 245.725354][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.725372][ T8366] R13: 0000000000000001 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 245.725412][ T8366] [ 245.725507][ T8366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.976108][ T8332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.183349][ T8332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.213748][ T8332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.286232][ T8332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.304526][ T8332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 246.343629][ T8332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.397542][ T8332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 247.345404][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 247.794707][ T8407] nbd1: detected capacity change from 0 to 8388607 [ 247.842134][ T6266] block nbd1: Send control failed (result -22) [ 247.900300][ T6266] block nbd1: Request send failed, requeueing [ 247.938589][ T55] block nbd1: Receive control failed (result -32) [ 247.938694][ T6266] block nbd1: Dead connection, failed to find a fallback [ 248.000017][ T6266] block nbd1: shutting down sockets [ 248.009496][ T59] blk_print_req_error: 123 callbacks suppressed [ 248.009517][ T59] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.025436][ T59] buffer_io_error: 122 callbacks suppressed [ 248.025454][ T59] Buffer I/O error on dev nbd1, logical block 0, async page read [ 248.080544][ T6266] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.186473][ T6266] Buffer I/O error on dev nbd1, logical block 1, async page read [ 248.224753][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 248.235196][ T6266] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.314689][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 248.324122][ T6266] Buffer I/O error on dev nbd1, logical block 2, async page read [ 248.383690][ T6266] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.395482][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 248.490559][ T6266] Buffer I/O error on dev nbd1, logical block 3, async page read [ 248.554909][ T6266] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.623537][ T6266] Buffer I/O error on dev nbd1, logical block 0, async page read [ 248.704928][ T6266] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.714041][ T6266] Buffer I/O error on dev nbd1, logical block 1, async page read [ 248.854589][ T6266] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.863796][ T6266] Buffer I/O error on dev nbd1, logical block 2, async page read [ 248.871942][ T6266] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.881657][ T6266] Buffer I/O error on dev nbd1, logical block 3, async page read [ 248.889641][ T6266] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.898788][ T6266] Buffer I/O error on dev nbd1, logical block 0, async page read [ 248.908102][ T6266] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.917547][ T6266] Buffer I/O error on dev nbd1, logical block 1, async page read [ 248.929624][ T6266] ldm_validate_partition_table(): Disk read failed. [ 248.956917][ T6266] Dev nbd1: unable to read RDB block 0 [ 248.994487][ T6266] nbd1: unable to read partition table [ 249.098987][ T6266] ldm_validate_partition_table(): Disk read failed. [ 249.166020][ T6266] Dev nbd1: unable to read RDB block 0 [ 249.249966][ T6266] nbd1: unable to read partition table [ 249.425375][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 250.304854][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 250.385013][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 250.465093][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 251.079264][ T8457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 251.689927][ T8458] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 251.739393][ T8479] FAULT_INJECTION: forcing a failure. [ 251.739393][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 251.785472][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.0.553 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 251.785512][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 251.785529][ T8479] Call Trace: [ 251.785538][ T8479] [ 251.785549][ T8479] dump_stack_lvl+0x16c/0x1f0 [ 251.785594][ T8479] should_fail_ex+0x512/0x640 [ 251.785637][ T8479] ? __kmalloc_noprof+0xbf/0x510 [ 251.785672][ T8479] ? kernfs_fop_write_iter+0x237/0x510 [ 251.785709][ T8479] should_failslab+0xc2/0x120 [ 251.785745][ T8479] __kmalloc_noprof+0xd2/0x510 [ 251.785785][ T8479] kernfs_fop_write_iter+0x237/0x510 [ 251.785829][ T8479] vfs_write+0x5ba/0x1180 [ 251.785859][ T8479] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 251.785900][ T8479] ? __pfx___mutex_lock+0x10/0x10 [ 251.785942][ T8479] ? __pfx_vfs_write+0x10/0x10 [ 251.785998][ T8479] ksys_write+0x12a/0x240 [ 251.786032][ T8479] ? __pfx_ksys_write+0x10/0x10 [ 251.786058][ T8479] ? rcu_is_watching+0x12/0xc0 [ 251.786096][ T8479] do_syscall_64+0xcd/0x230 [ 251.786140][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.786170][ T8479] RIP: 0033:0x7fd42d38e969 [ 251.786193][ T8479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.786220][ T8479] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.786248][ T8479] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 251.786266][ T8479] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000007 [ 251.786284][ T8479] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 251.786301][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.786318][ T8479] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 251.786358][ T8479] [ 251.976773][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.424764][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.555'. [ 252.713231][ T8491] netlink: 93 bytes leftover after parsing attributes in process `syz.1.555'. [ 253.137480][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 254.306315][ T8523] FAULT_INJECTION: forcing a failure. [ 254.306315][ T8523] name failslab, interval 1, probability 0, space 0, times 0 [ 254.421663][ T8523] CPU: 0 UID: 0 PID: 8523 Comm: syz.3.563 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 254.421711][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 254.421729][ T8523] Call Trace: [ 254.421750][ T8523] [ 254.421762][ T8523] dump_stack_lvl+0x16c/0x1f0 [ 254.421814][ T8523] should_fail_ex+0x512/0x640 [ 254.421857][ T8523] ? __kmalloc_noprof+0xbf/0x510 [ 254.421893][ T8523] ? inotify_handle_inode_event+0x1cf/0x6f0 [ 254.421925][ T8523] should_failslab+0xc2/0x120 [ 254.421963][ T8523] __kmalloc_noprof+0xd2/0x510 [ 254.421995][ T8523] ? stack_trace_save+0x8e/0xc0 [ 254.422035][ T8523] inotify_handle_inode_event+0x1cf/0x6f0 [ 254.422074][ T8523] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 254.422107][ T8523] fsnotify_handle_inode_event.isra.0+0x1df/0x3f0 [ 254.422160][ T8523] fsnotify+0x13d6/0x1dc0 [ 254.422214][ T8523] ? __pfx_fsnotify+0x10/0x10 [ 254.422276][ T8523] __fsnotify_parent+0x7c7/0xc40 [ 254.422331][ T8523] ? __pfx___fsnotify_parent+0x10/0x10 [ 254.422386][ T8523] ? __pfx___might_resched+0x10/0x10 [ 254.422428][ T8523] ? __fput+0x30d/0xb70 [ 254.422462][ T8523] __fput+0x30d/0xb70 [ 254.422508][ T8523] task_work_run+0x14d/0x240 [ 254.422558][ T8523] ? __pfx_task_work_run+0x10/0x10 [ 254.422606][ T8523] ? __pfx___do_sys_close_range+0x10/0x10 [ 254.422634][ T8523] ? rcu_is_watching+0x12/0xc0 [ 254.422671][ T8523] syscall_exit_to_user_mode+0x27b/0x2a0 [ 254.422717][ T8523] do_syscall_64+0xda/0x230 [ 254.422770][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.422801][ T8523] RIP: 0033:0x7f850ad8e969 [ 254.422826][ T8523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.422857][ T8523] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.422884][ T8523] RAX: 0000000000000000 RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 254.422903][ T8523] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 254.422922][ T8523] RBP: 00007f850ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 254.422942][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.422961][ T8523] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 254.423002][ T8523] [ 254.650171][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.485619][ T8549] random: crng reseeded on system resumption [ 258.156512][ T8604] FAULT_INJECTION: forcing a failure. [ 258.156512][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 258.218028][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.3.585 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 258.218072][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 258.218090][ T8604] Call Trace: [ 258.218099][ T8604] [ 258.218111][ T8604] dump_stack_lvl+0x16c/0x1f0 [ 258.218159][ T8604] should_fail_ex+0x512/0x640 [ 258.218201][ T8604] ? __kvmalloc_node_noprof+0x122/0x600 [ 258.218239][ T8604] should_failslab+0xc2/0x120 [ 258.218275][ T8604] __kvmalloc_node_noprof+0x135/0x600 [ 258.218310][ T8604] ? seq_read_iter+0x826/0x12c0 [ 258.218369][ T8604] ? seq_read_iter+0x826/0x12c0 [ 258.218411][ T8604] seq_read_iter+0x826/0x12c0 [ 258.218469][ T8604] ? __mutex_trylock_common+0xe9/0x250 [ 258.218523][ T8604] kernfs_fop_read_iter+0x40f/0x5a0 [ 258.218563][ T8604] ? rw_verify_area+0xcf/0x680 [ 258.218609][ T8604] vfs_read+0x8c8/0xc70 [ 258.218642][ T8604] ? __pfx___mutex_lock+0x10/0x10 [ 258.218682][ T8604] ? __pfx_vfs_read+0x10/0x10 [ 258.218734][ T8604] ksys_read+0x12a/0x240 [ 258.218761][ T8604] ? __pfx_ksys_read+0x10/0x10 [ 258.218786][ T8604] ? rcu_is_watching+0x12/0xc0 [ 258.218825][ T8604] do_syscall_64+0xcd/0x230 [ 258.218867][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.218895][ T8604] RIP: 0033:0x7f850ad8e969 [ 258.218918][ T8604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.218946][ T8604] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.218972][ T8604] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 258.218991][ T8604] RDX: 00000000000000ac RSI: 0000200000000380 RDI: 0000000000000003 [ 258.219008][ T8604] RBP: 00007f850bb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.219023][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.219037][ T8604] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 258.219072][ T8604] [ 258.548911][ T55] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 259.851481][ T8637] FAULT_INJECTION: forcing a failure. [ 259.851481][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.897168][ T8637] CPU: 0 UID: 0 PID: 8637 Comm: syz.2.593 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 259.897217][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 259.897236][ T8637] Call Trace: [ 259.897245][ T8637] [ 259.897257][ T8637] dump_stack_lvl+0x16c/0x1f0 [ 259.897307][ T8637] should_fail_ex+0x512/0x640 [ 259.897356][ T8637] _copy_to_user+0x32/0xd0 [ 259.897406][ T8637] simple_read_from_buffer+0xcb/0x170 [ 259.897456][ T8637] proc_fail_nth_read+0x197/0x270 [ 259.897500][ T8637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.897548][ T8637] ? rw_verify_area+0xcf/0x680 [ 259.897592][ T8637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.897635][ T8637] vfs_read+0x1de/0xc70 [ 259.897670][ T8637] ? __pfx___mutex_lock+0x10/0x10 [ 259.897714][ T8637] ? __pfx_vfs_read+0x10/0x10 [ 259.897754][ T8637] ? __fget_files+0x20e/0x3c0 [ 259.897816][ T8637] ksys_read+0x12a/0x240 [ 259.897844][ T8637] ? __pfx_ksys_read+0x10/0x10 [ 259.897869][ T8637] ? rcu_is_watching+0x12/0xc0 [ 259.897911][ T8637] do_syscall_64+0xcd/0x230 [ 259.897958][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.897989][ T8637] RIP: 0033:0x7fe828f8d37c [ 259.898014][ T8637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.898043][ T8637] RSP: 002b:00007fe829e7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.898071][ T8637] RAX: ffffffffffffffda RBX: 00007fe8291b6080 RCX: 00007fe828f8d37c [ 259.898091][ T8637] RDX: 000000000000000f RSI: 00007fe829e7b0a0 RDI: 0000000000000004 [ 259.898109][ T8637] RBP: 00007fe829e7b090 R08: 0000000000000000 R09: 0000000000000000 [ 259.898128][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.898145][ T8637] R13: 0000000000000000 R14: 00007fe8291b6080 R15: 00007fff3f56b668 [ 259.898187][ T8637] [ 260.797329][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.803722][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.282048][ T8663] FAULT_INJECTION: forcing a failure. [ 262.282048][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 262.313182][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.0.601 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 262.313221][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 262.313238][ T8663] Call Trace: [ 262.313247][ T8663] [ 262.313259][ T8663] dump_stack_lvl+0x16c/0x1f0 [ 262.313307][ T8663] should_fail_ex+0x512/0x640 [ 262.313349][ T8663] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.313388][ T8663] should_failslab+0xc2/0x120 [ 262.313422][ T8663] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.313455][ T8663] ? crng_make_state+0x48e/0x6d0 [ 262.313494][ T8663] ? proc_net_ns_init+0x42/0x410 [ 262.313532][ T8663] ? __pfx_proc_net_ns_init+0x10/0x10 [ 262.313568][ T8663] proc_net_ns_init+0x42/0x410 [ 262.313605][ T8663] ? __pfx_proc_net_ns_init+0x10/0x10 [ 262.313638][ T8663] ops_init+0x1df/0x5f0 [ 262.313679][ T8663] setup_net+0x21e/0x850 [ 262.313726][ T8663] ? __pfx_setup_net+0x10/0x10 [ 262.313758][ T8663] ? lockdep_init_map_type+0x5c/0x280 [ 262.313796][ T8663] ? __pfx_down_read_killable+0x10/0x10 [ 262.313848][ T8663] ? debug_mutex_init+0x37/0x70 [ 262.313897][ T8663] copy_net_ns+0x2a6/0x5f0 [ 262.313934][ T8663] create_new_namespaces+0x3ea/0xad0 [ 262.313971][ T8663] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 262.314002][ T8663] ksys_unshare+0x45b/0xa40 [ 262.314037][ T8663] ? __pfx_ksys_unshare+0x10/0x10 [ 262.314070][ T8663] ? ksys_write+0x1b9/0x240 [ 262.314094][ T8663] ? rcu_is_watching+0x12/0xc0 [ 262.314124][ T8663] __x64_sys_unshare+0x31/0x40 [ 262.314160][ T8663] do_syscall_64+0xcd/0x230 [ 262.314200][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.314225][ T8663] RIP: 0033:0x7fd42d38e969 [ 262.314245][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.314274][ T8663] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 262.314297][ T8663] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 262.314313][ T8663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 262.314327][ T8663] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 262.314342][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.314356][ T8663] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 262.314387][ T8663] [ 262.982502][ T8679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 263.062440][ T8680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 264.087078][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'. [ 264.921061][ T8725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 265.089650][ T8726] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140 [ 265.232101][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 265.249378][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 265.490834][ T47] smpboot: CPU 0 is now offline [ 265.813758][ T8742] capability: warning: `syz.0.619' uses 32-bit capabilities (legacy support in use) [ 266.898737][ T8764] netlink: 326 bytes leftover after parsing attributes in process `syz.1.624'. [ 267.001451][ T8744] sp0: Synchronizing with TNC [ 268.590186][ T55] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 269.281093][ T30] audit: type=1800 audit(6041348058.337:12): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.635" name="members" dev="configfs" ino=17132 res=0 errno=0 [ 269.331481][ T8806] ACPI: Can not change Invalid GPE/Fixed Event status [ 271.020405][ T8830] FAULT_INJECTION: forcing a failure. [ 271.020405][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 271.185659][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.2.642 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 271.185692][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 271.185706][ T8830] Call Trace: [ 271.185713][ T8830] [ 271.185722][ T8830] dump_stack_lvl+0x16c/0x1f0 [ 271.185758][ T8830] should_fail_ex+0x512/0x640 [ 271.185790][ T8830] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 271.185820][ T8830] should_failslab+0xc2/0x120 [ 271.185849][ T8830] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 271.185879][ T8830] ? crng_make_state+0x48e/0x6d0 [ 271.185909][ T8830] ? proc_net_ns_init+0x42/0x410 [ 271.185938][ T8830] ? __pfx_proc_net_ns_init+0x10/0x10 [ 271.185966][ T8830] proc_net_ns_init+0x42/0x410 [ 271.185993][ T8830] ? __pfx_proc_net_ns_init+0x10/0x10 [ 271.186018][ T8830] ops_init+0x1df/0x5f0 [ 271.186050][ T8830] setup_net+0x21e/0x850 [ 271.186080][ T8830] ? __pfx_setup_net+0x10/0x10 [ 271.186106][ T8830] ? lockdep_init_map_type+0x5c/0x280 [ 271.186138][ T8830] ? __pfx_down_read_killable+0x10/0x10 [ 271.186178][ T8830] ? debug_mutex_init+0x37/0x70 [ 271.186219][ T8830] copy_net_ns+0x2a6/0x5f0 [ 271.186253][ T8830] create_new_namespaces+0x3ea/0xad0 [ 271.186286][ T8830] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 271.186315][ T8830] ksys_unshare+0x45b/0xa40 [ 271.186347][ T8830] ? __pfx_ksys_unshare+0x10/0x10 [ 271.186378][ T8830] ? ksys_write+0x1b9/0x240 [ 271.186400][ T8830] ? rcu_is_watching+0x12/0xc0 [ 271.186428][ T8830] __x64_sys_unshare+0x31/0x40 [ 271.186459][ T8830] do_syscall_64+0xcd/0x230 [ 271.186494][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.186517][ T8830] RIP: 0033:0x7fe828f8e969 [ 271.186535][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.186557][ T8830] RSP: 002b:00007fe829e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 271.186578][ T8830] RAX: ffffffffffffffda RBX: 00007fe8291b5fa0 RCX: 00007fe828f8e969 [ 271.186593][ T8830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 271.186606][ T8830] RBP: 00007fe829e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 271.186620][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.186633][ T8830] R13: 0000000000000000 R14: 00007fe8291b5fa0 R15: 00007fff3f56b668 [ 271.186662][ T8830] [ 273.181277][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 275.013367][ T30] audit: type=1800 audit(6041348064.067:13): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.656" name="members" dev="configfs" ino=17474 res=0 errno=0 [ 275.348875][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 275.957882][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 276.092786][ T8915] netlink: 354 bytes leftover after parsing attributes in process `syz.2.657'. [ 276.820556][ T8930] FAULT_INJECTION: forcing a failure. [ 276.820556][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.086866][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.0.662 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 277.086897][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 277.086911][ T8930] Call Trace: [ 277.086918][ T8930] [ 277.086926][ T8930] dump_stack_lvl+0x16c/0x1f0 [ 277.086962][ T8930] should_fail_ex+0x512/0x640 [ 277.086997][ T8930] _copy_from_iter+0x2a4/0x15b0 [ 277.087035][ T8930] ? __alloc_skb+0x200/0x380 [ 277.087059][ T8930] ? __pfx__copy_from_iter+0x10/0x10 [ 277.087094][ T8930] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 277.087121][ T8930] ? __lock_acquire+0xaa4/0x1ba0 [ 277.087157][ T8930] netlink_sendmsg+0x829/0xdd0 [ 277.087188][ T8930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.087226][ T8930] ____sys_sendmsg+0xa95/0xc70 [ 277.087290][ T8930] ? copy_msghdr_from_user+0x10a/0x160 [ 277.087316][ T8930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.087362][ T8930] ___sys_sendmsg+0x134/0x1d0 [ 277.087389][ T8930] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.087449][ T8930] __sys_sendmsg+0x16d/0x220 [ 277.087475][ T8930] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.087509][ T8930] ? rcu_is_watching+0x12/0xc0 [ 277.087538][ T8930] do_syscall_64+0xcd/0x230 [ 277.087573][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.087596][ T8930] RIP: 0033:0x7fd42d38e969 [ 277.087614][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.087635][ T8930] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.087656][ T8930] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 277.087671][ T8930] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000003 [ 277.087685][ T8930] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.087699][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.087712][ T8930] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 277.087740][ T8930] [ 277.880565][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 278.886443][ T8959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 279.171575][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 279.742037][ T8961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 279.792506][ T8985] random: crng reseeded on system resumption [ 282.742515][ T9019] CIFS mount error: No usable UNC path provided in device string! [ 282.742515][ T9019] [ 282.784447][ T9021] FAULT_INJECTION: forcing a failure. [ 282.784447][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.809092][ T9019] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 282.854238][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.1.683 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 282.854270][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 282.854283][ T9021] Call Trace: [ 282.854290][ T9021] [ 282.854298][ T9021] dump_stack_lvl+0x16c/0x1f0 [ 282.854334][ T9021] should_fail_ex+0x512/0x640 [ 282.854368][ T9021] _copy_to_iter+0x2a4/0x15a0 [ 282.854406][ T9021] ? __pfx__copy_to_iter+0x10/0x10 [ 282.854442][ T9021] ? __up_read+0x1f8/0x750 [ 282.854471][ T9021] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 282.854505][ T9021] ? mm_access+0x22d/0x2e0 [ 282.854529][ T9021] ? __pfx___up_read+0x10/0x10 [ 282.854562][ T9021] copy_page_to_iter+0xf1/0x180 [ 282.854603][ T9021] process_vm_rw_core.constprop.0+0x5ad/0x9a0 [ 282.854644][ T9021] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 282.854675][ T9021] ? import_ubuf+0x1b6/0x220 [ 282.854738][ T9021] ? iovec_from_user+0xbb/0x140 [ 282.854775][ T9021] process_vm_rw+0x216/0x2c0 [ 282.854804][ T9021] ? __pfx_process_vm_rw+0x10/0x10 [ 282.854838][ T9021] ? ksys_write+0x190/0x240 [ 282.854878][ T9021] ? 0xffffffffff600000 [ 282.854898][ T9021] ? ksys_write+0x1b9/0x240 [ 282.854918][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 282.854941][ T9021] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 282.854970][ T9021] ? do_syscall_64+0x91/0x230 [ 282.855001][ T9021] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.855030][ T9021] do_syscall_64+0xcd/0x230 [ 282.855063][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.855086][ T9021] RIP: 0033:0x7fdc4ab8e969 [ 282.855102][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.855123][ T9021] RSP: 002b:00007fdc4bae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 282.855143][ T9021] RAX: ffffffffffffffda RBX: 00007fdc4adb5fa0 RCX: 00007fdc4ab8e969 [ 282.855157][ T9021] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000002a4 [ 282.855170][ T9021] RBP: 00007fdc4bae3090 R08: 0000000000000006 R09: 0000000000000000 [ 282.855183][ T9021] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 282.855197][ T9021] R13: 0000000000000000 R14: 00007fdc4adb5fa0 R15: 00007ffe1ad510a8 [ 282.855223][ T9021] [ 283.254523][ T9028] netlink: 146 bytes leftover after parsing attributes in process `syz.3.685'. [ 283.718482][ T9035] FAULT_INJECTION: forcing a failure. [ 283.718482][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 283.785450][ T9035] CPU: 1 UID: 0 PID: 9035 Comm: syz.0.688 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 283.785483][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 283.785496][ T9035] Call Trace: [ 283.785503][ T9035] [ 283.785511][ T9035] dump_stack_lvl+0x16c/0x1f0 [ 283.785548][ T9035] should_fail_ex+0x512/0x640 [ 283.785578][ T9035] ? __kvmalloc_node_noprof+0x122/0x600 [ 283.785604][ T9035] should_failslab+0xc2/0x120 [ 283.785640][ T9035] __kvmalloc_node_noprof+0x135/0x600 [ 283.785664][ T9035] ? seq_read_iter+0x826/0x12c0 [ 283.785694][ T9035] ? aa_file_perm+0x4d6/0xfb0 [ 283.785729][ T9035] ? seq_read_iter+0x826/0x12c0 [ 283.785758][ T9035] seq_read_iter+0x826/0x12c0 [ 283.785790][ T9035] ? __pfx_aa_file_perm+0x10/0x10 [ 283.785823][ T9035] ? look_up_lock_class+0x59/0x150 [ 283.785859][ T9035] do_iter_readv_writev+0x735/0x950 [ 283.785896][ T9035] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 283.785942][ T9035] ? rw_verify_area+0xcf/0x680 [ 283.785977][ T9035] vfs_readv+0x4c5/0x8a0 [ 283.786010][ T9035] ? __pfx___mutex_trylock_common+0x10/0x10 [ 283.786043][ T9035] ? __pfx___might_resched+0x10/0x10 [ 283.786072][ T9035] ? __pfx_vfs_readv+0x10/0x10 [ 283.786106][ T9035] ? __mutex_lock+0x1ca/0xb90 [ 283.786143][ T9035] ? __pfx___mutex_lock+0x10/0x10 [ 283.786184][ T9035] ? __fget_files+0x20e/0x3c0 [ 283.786217][ T9035] ? __fget_files+0x190/0x3c0 [ 283.786258][ T9035] ? do_readv+0x132/0x330 [ 283.786290][ T9035] do_readv+0x132/0x330 [ 283.786324][ T9035] ? __pfx_do_readv+0x10/0x10 [ 283.786356][ T9035] ? rcu_is_watching+0x12/0xc0 [ 283.786384][ T9035] do_syscall_64+0xcd/0x230 [ 283.786418][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.786440][ T9035] RIP: 0033:0x7fd42d38e969 [ 283.786457][ T9035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.786478][ T9035] RSP: 002b:00007fd42e1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 283.786499][ T9035] RAX: ffffffffffffffda RBX: 00007fd42d5b5fa0 RCX: 00007fd42d38e969 [ 283.786513][ T9035] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 283.786526][ T9035] RBP: 00007fd42e1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 283.786539][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.786552][ T9035] R13: 0000000000000000 R14: 00007fd42d5b5fa0 R15: 00007ffe9effd6d8 [ 283.786580][ T9035] [ 285.089092][ T9061] kernel read not supported for file /set_event_notrace_pid (pid: 9061 comm: syz.0.694) [ 285.165808][ T30] audit: type=1800 audit(6041348074.207:14): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.694" name="set_event_notrace_pid" dev="tracefs" ino=22 res=0 errno=0 [ 285.617101][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 287.246094][ T30] audit: type=1800 audit(6041348076.307:15): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="members" dev="configfs" ino=18378 res=0 errno=0 [ 290.870348][ T9136] sp0: Synchronizing with TNC [ 291.734706][ T9153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.720'. [ 292.108915][ T9152] netlink: 93 bytes leftover after parsing attributes in process `syz.3.720'. [ 298.676210][ T9229] FAULT_INJECTION: forcing a failure. [ 298.676210][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 298.752797][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.3.738 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 298.752831][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 298.752845][ T9229] Call Trace: [ 298.752852][ T9229] [ 298.752860][ T9229] dump_stack_lvl+0x16c/0x1f0 [ 298.752897][ T9229] should_fail_ex+0x512/0x640 [ 298.752930][ T9229] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 298.752971][ T9229] should_failslab+0xc2/0x120 [ 298.752999][ T9229] __kmalloc_cache_noprof+0x6a/0x3e0 [ 298.753038][ T9229] ? __do_sys_memfd_create+0x17b/0x8a0 [ 298.753074][ T9229] __do_sys_memfd_create+0x17b/0x8a0 [ 298.753108][ T9229] do_syscall_64+0xcd/0x230 [ 298.753168][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.753192][ T9229] RIP: 0033:0x7f850ad8e969 [ 298.753210][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.753232][ T9229] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.753253][ T9229] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 298.753268][ T9229] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 298.753281][ T9229] RBP: 00007f850ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 298.753313][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.753327][ T9229] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 298.753355][ T9229] [ 298.903699][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.034461][ T9229] FAULT_INJECTION: forcing a failure. [ 299.034461][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 299.047352][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.3.738 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 299.047384][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 299.047398][ T9229] Call Trace: [ 299.047405][ T9229] [ 299.047414][ T9229] dump_stack_lvl+0x16c/0x1f0 [ 299.047452][ T9229] should_fail_ex+0x512/0x640 [ 299.047486][ T9229] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 299.047516][ T9229] should_failslab+0xc2/0x120 [ 299.047545][ T9229] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 299.047572][ T9229] ? security_file_alloc+0x34/0x2b0 [ 299.047613][ T9229] security_file_alloc+0x34/0x2b0 [ 299.047644][ T9229] init_file+0x93/0x4c0 [ 299.047673][ T9229] alloc_empty_file+0x73/0x1e0 [ 299.047705][ T9229] alloc_file_pseudo+0x13a/0x230 [ 299.047737][ T9229] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 299.047769][ T9229] ? alloc_fd+0x471/0x7d0 [ 299.047810][ T9229] sock_alloc_file+0x50/0x210 [ 299.047840][ T9229] __sys_socket+0x1c0/0x260 [ 299.047876][ T9229] ? __pfx___sys_socket+0x10/0x10 [ 299.047912][ T9229] ? rcu_is_watching+0x12/0xc0 [ 299.047940][ T9229] __x64_sys_socket+0x72/0xb0 [ 299.047974][ T9229] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.048010][ T9229] do_syscall_64+0xcd/0x230 [ 299.048047][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.048071][ T9229] RIP: 0033:0x7f850ad8e969 [ 299.048090][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.048118][ T9229] RSP: 002b:00007f850bb2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 299.048139][ T9229] RAX: ffffffffffffffda RBX: 00007f850afb5fa0 RCX: 00007f850ad8e969 [ 299.048155][ T9229] RDX: 0000000000000014 RSI: 0000000000000002 RDI: 0000000000000010 [ 299.048169][ T9229] RBP: 00007f850ae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 299.048183][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.048196][ T9229] R13: 0000000000000000 R14: 00007f850afb5fa0 R15: 00007ffedda9f358 [ 299.048225][ T9229] [ 299.255747][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.281740][ T9234] can: request_module (can-proto-3) failed. [ 301.727873][ T9278] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143 [ 302.261617][ T9282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 302.896692][ T9296] can: request_module (can-proto-3) failed. [ 304.700170][ T9316] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 305.459859][ T9315] Console: switching to colour VGA+ 80x25 [ 305.678894][ T9312] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 305.707899][ T9311] FAULT_INJECTION: forcing a failure. [ 305.707899][ T9311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.783918][ T9311] CPU: 1 UID: 0 PID: 9311 Comm: syz.1.755 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 305.783953][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 305.783978][ T9311] Call Trace: [ 305.783985][ T9311] [ 305.783994][ T9311] dump_stack_lvl+0x16c/0x1f0 [ 305.784032][ T9311] should_fail_ex+0x512/0x640 [ 305.784071][ T9311] should_fail_alloc_page+0xe7/0x130 [ 305.784104][ T9311] prepare_alloc_pages+0x3c2/0x610 [ 305.784141][ T9311] ? rcu_is_watching+0x12/0xc0 [ 305.784166][ T9311] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 305.784200][ T9311] ? __lock_acquire+0x5ca/0x1ba0 [ 305.784234][ T9311] ? xas_create+0x1d7/0x1460 [ 305.784271][ T9311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.784300][ T9311] ? cgroup_rstat_updated+0x2a/0xb20 [ 305.784352][ T9311] ? __lock_acquire+0x5ca/0x1ba0 [ 305.784382][ T9311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.784417][ T9311] ? policy_nodemask+0xea/0x4e0 [ 305.784448][ T9311] alloc_pages_mpol+0x1fb/0x550 [ 305.784483][ T9311] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.784515][ T9311] ? filemap_get_entry+0x1a7/0x3b0 [ 305.784552][ T9311] folio_alloc_noprof+0x20/0x2d0 [ 305.784591][ T9311] filemap_alloc_folio_noprof+0x3a1/0x470 [ 305.784619][ T9311] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 305.784645][ T9311] ? rcu_is_watching+0x12/0xc0 [ 305.784672][ T9311] __filemap_get_folio+0x5e9/0xc10 [ 305.784713][ T9311] ioctx_alloc+0x761/0x2060 [ 305.784762][ T9311] ? __pfx_ioctx_alloc+0x10/0x10 [ 305.784795][ T9311] ? __might_fault+0x13b/0x190 [ 305.784830][ T9311] __x64_sys_io_setup+0xc9/0x210 [ 305.784867][ T9311] do_syscall_64+0xcd/0x230 [ 305.784904][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.784928][ T9311] RIP: 0033:0x7fdc4ab8e969 [ 305.784946][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.784969][ T9311] RSP: 002b:00007fdc4bae3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 305.784991][ T9311] RAX: ffffffffffffffda RBX: 00007fdc4adb5fa0 RCX: 00007fdc4ab8e969 [ 305.785006][ T9311] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 305.785021][ T9311] RBP: 00007fdc4ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 305.785035][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.785048][ T9311] R13: 0000000000000000 R14: 00007fdc4adb5fa0 R15: 00007ffe1ad510a8 [ 305.785077][ T9311] [ 307.140721][ T9315] ================================================================== [ 307.140738][ T9315] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 307.140775][ T9315] Read of size 6 at addr ffff88807c2fd736 by task syz.1.755/9315 [ 307.140794][ T9315] [ 307.140805][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.755 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 307.140835][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 307.140849][ T9315] Call Trace: [ 307.140856][ T9315] [ 307.140865][ T9315] dump_stack_lvl+0x116/0x1f0 [ 307.140899][ T9315] print_report+0xc3/0x670 [ 307.140926][ T9315] ? __virt_addr_valid+0x5e/0x590 [ 307.140957][ T9315] ? __phys_addr+0xc6/0x150 [ 307.140988][ T9315] ? fbcon_prepare_logo+0xa03/0xc70 [ 307.141016][ T9315] kasan_report+0xe0/0x110 [ 307.141044][ T9315] ? fbcon_prepare_logo+0xa03/0xc70 [ 307.141079][ T9315] kasan_check_range+0xef/0x1a0 [ 307.141113][ T9315] __asan_memcpy+0x23/0x60 [ 307.141150][ T9315] fbcon_prepare_logo+0xa03/0xc70 [ 307.141184][ T9315] fbcon_init+0xd77/0x1900 [ 307.141213][ T9315] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 307.141240][ T9315] visual_init+0x31d/0x620 [ 307.141279][ T9315] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 307.141309][ T9315] store_bind+0x61d/0x760 [ 307.141335][ T9315] ? sysfs_file_kobj+0xe4/0x290 [ 307.141369][ T9315] ? __pfx_store_bind+0x10/0x10 [ 307.141400][ T9315] dev_attr_store+0x55/0x80 [ 307.141429][ T9315] ? __pfx_dev_attr_store+0x10/0x10 [ 307.141458][ T9315] sysfs_kf_write+0xef/0x150 [ 307.141492][ T9315] kernfs_fop_write_iter+0x351/0x510 [ 307.141522][ T9315] ? __pfx_sysfs_kf_write+0x10/0x10 [ 307.141558][ T9315] vfs_write+0x5ba/0x1180 [ 307.141580][ T9315] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 307.141611][ T9315] ? __pfx___mutex_lock+0x10/0x10 [ 307.141645][ T9315] ? __pfx_vfs_write+0x10/0x10 [ 307.141675][ T9315] ksys_write+0x12a/0x240 [ 307.141697][ T9315] ? __pfx_ksys_write+0x10/0x10 [ 307.141718][ T9315] ? rcu_is_watching+0x12/0xc0 [ 307.141743][ T9315] do_syscall_64+0xcd/0x230 [ 307.141778][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.141802][ T9315] RIP: 0033:0x7fdc4ab8e969 [ 307.141821][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.141844][ T9315] RSP: 002b:00007fdc4bac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.141866][ T9315] RAX: ffffffffffffffda RBX: 00007fdc4adb6080 RCX: 00007fdc4ab8e969 [ 307.141881][ T9315] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 307.141896][ T9315] RBP: 00007fdc4ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 307.141910][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.141924][ T9315] R13: 0000000000000000 R14: 00007fdc4adb6080 R15: 00007ffe1ad510a8 [ 307.141946][ T9315] [ 307.141954][ T9315] [ 307.141959][ T9315] Allocated by task 9343: [ 307.141970][ T9315] kasan_save_stack+0x33/0x60 [ 307.141993][ T9315] kasan_save_track+0x14/0x30 [ 307.142015][ T9315] __kasan_kmalloc+0xaa/0xb0 [ 307.142036][ T9315] kmem_cache_free+0x148/0x4d0 [ 307.142058][ T9315] __fput+0x68d/0xb70 [ 307.142083][ T9315] task_work_run+0x14d/0x240 [ 307.142117][ T9315] syscall_exit_to_user_mode+0x27b/0x2a0 [ 307.142149][ T9315] do_syscall_64+0xda/0x230 [ 307.142180][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.142202][ T9315] [ 307.142207][ T9315] Freed by task 9342: [ 307.142218][ T9315] kasan_save_stack+0x33/0x60 [ 307.142240][ T9315] kasan_save_track+0x14/0x30 [ 307.142262][ T9315] kasan_save_free_info+0x3b/0x60 [ 307.142296][ T9315] __kasan_slab_free+0x51/0x70 [ 307.142320][ T9315] kfree+0x2b6/0x4d0 [ 307.142354][ T9315] slab_free_after_rcu_debug+0x69/0x350 [ 307.142386][ T9315] rcu_core+0x799/0x14e0 [ 307.142419][ T9315] handle_softirqs+0x216/0x8e0 [ 307.142444][ T9315] do_softirq+0xb2/0xf0 [ 307.142468][ T9315] __local_bh_enable_ip+0x100/0x120 [ 307.142493][ T9315] ipt_do_table+0xd55/0x1ac0 [ 307.142523][ T9315] iptable_mangle_hook+0x1c9/0x4b0 [ 307.142557][ T9315] nf_hook_slow+0xbb/0x200 [ 307.142592][ T9315] nf_hook+0x370/0x680 [ 307.142616][ T9315] __ip_local_out+0x339/0x7c0 [ 307.142642][ T9315] ip_send_skb+0x4a/0x560 [ 307.142668][ T9315] udp_send_skb+0x71d/0x15b0 [ 307.142690][ T9315] udp_sendmsg+0x18d6/0x29e0 [ 307.142714][ T9315] inet_sendmsg+0x105/0x140 [ 307.142745][ T9315] ____sys_sendmsg+0x973/0xc70 [ 307.142777][ T9315] ___sys_sendmsg+0x134/0x1d0 [ 307.142800][ T9315] __sys_sendmmsg+0x200/0x420 [ 307.142824][ T9315] __x64_sys_sendmmsg+0x9c/0x100 [ 307.142848][ T9315] do_syscall_64+0xcd/0x230 [ 307.142880][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.142902][ T9315] [ 307.142908][ T9315] Last potentially related work creation: [ 307.142915][ T9315] kasan_save_stack+0x33/0x60 [ 307.142937][ T9315] kasan_record_aux_stack+0xb8/0xd0 [ 307.142971][ T9315] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 307.143005][ T9315] kmem_cache_free+0x173/0x4d0 [ 307.143027][ T9315] __fput+0x68d/0xb70 [ 307.143052][ T9315] task_work_run+0x14d/0x240 [ 307.143086][ T9315] syscall_exit_to_user_mode+0x27b/0x2a0 [ 307.143118][ T9315] do_syscall_64+0xda/0x230 [ 307.143150][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.143172][ T9315] [ 307.143177][ T9315] The buggy address belongs to the object at ffff88807c2fd700 [ 307.143177][ T9315] which belongs to the cache kmalloc-32 of size 32 [ 307.143196][ T9315] The buggy address is located 22 bytes to the right of [ 307.143196][ T9315] allocated 32-byte region [ffff88807c2fd700, ffff88807c2fd720) [ 307.143220][ T9315] [ 307.143226][ T9315] The buggy address belongs to the physical page: [ 307.143240][ T9315] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c2fd [ 307.143262][ T9315] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 307.143280][ T9315] page_type: f5(slab) [ 307.143300][ T9315] raw: 00fff00000000000 ffff88801b441780 ffffea0000c987c0 dead000000000002 [ 307.143322][ T9315] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 307.143337][ T9315] page dumped because: kasan: bad access detected [ 307.143348][ T9315] page_owner tracks the page as allocated [ 307.143356][ T9315] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5593, tgid 5593 (dhcpcd-run-hook), ts 66190205359, free_ts 66189390705 [ 307.143399][ T9315] post_alloc_hook+0x181/0x1b0 [ 307.143420][ T9315] get_page_from_freelist+0x135c/0x3920 [ 307.143445][ T9315] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 307.143470][ T9315] alloc_pages_mpol+0x1fb/0x550 [ 307.143496][ T9315] new_slab+0x244/0x340 [ 307.143531][ T9315] ___slab_alloc+0xd9c/0x1940 [ 307.143566][ T9315] __slab_alloc.constprop.0+0x56/0xb0 [ 307.143603][ T9315] __kmalloc_cache_noprof+0xfb/0x3e0 [ 307.143641][ T9315] kmem_cache_free+0x148/0x4d0 [ 307.143663][ T9315] exit_mmap+0x511/0xb90 [ 307.143697][ T9315] __mmput+0x12a/0x410 [ 307.143722][ T9315] mmput+0x62/0x70 [ 307.143745][ T9315] do_exit+0x9d1/0x2c30 [ 307.143775][ T9315] do_group_exit+0xd3/0x2a0 [ 307.143807][ T9315] __x64_sys_exit_group+0x3e/0x50 [ 307.143839][ T9315] x64_sys_call+0x1530/0x1730 [ 307.143873][ T9315] page last free pid 5593 tgid 5593 stack trace: [ 307.143885][ T9315] __free_frozen_pages+0x69d/0xff0 [ 307.143922][ T9315] tlb_finish_mmu+0x237/0x7b0 [ 307.143943][ T9315] exit_mmap+0x403/0xb90 [ 307.143976][ T9315] __mmput+0x12a/0x410 [ 307.144001][ T9315] mmput+0x62/0x70 [ 307.144024][ T9315] do_exit+0x9d1/0x2c30 [ 307.144054][ T9315] do_group_exit+0xd3/0x2a0 [ 307.144085][ T9315] __x64_sys_exit_group+0x3e/0x50 [ 307.144117][ T9315] x64_sys_call+0x1530/0x1730 [ 307.144150][ T9315] do_syscall_64+0xcd/0x230 [ 307.144181][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.144204][ T9315] [ 307.144209][ T9315] Memory state around the buggy address: [ 307.144220][ T9315] ffff88807c2fd600: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 307.144237][ T9315] ffff88807c2fd680: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 307.144254][ T9315] >ffff88807c2fd700: fa fb fb fb fc fc fc fc 00 00 00 06 fc fc fc fc [ 307.144267][ T9315] ^ [ 307.144280][ T9315] ffff88807c2fd780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 307.144296][ T9315] ffff88807c2fd800: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 307.144309][ T9315] ================================================================== [ 307.190997][ T9315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 307.191020][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.755 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 307.191051][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 307.191065][ T9315] Call Trace: [ 307.191073][ T9315] [ 307.191082][ T9315] dump_stack_lvl+0x3d/0x1f0 [ 307.191118][ T9315] panic+0x71c/0x800 [ 307.191152][ T9315] ? __pfx_panic+0x10/0x10 [ 307.191184][ T9315] ? irqentry_exit+0x3b/0x90 [ 307.191215][ T9315] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.191246][ T9315] ? preempt_schedule_thunk+0x16/0x30 [ 307.191285][ T9315] ? fbcon_prepare_logo+0xa03/0xc70 [ 307.191313][ T9315] ? preempt_schedule_common+0x44/0xc0 [ 307.191346][ T9315] ? fbcon_prepare_logo+0xa03/0xc70 [ 307.191381][ T9315] check_panic_on_warn+0xab/0xb0 [ 307.191416][ T9315] end_report+0x107/0x170 [ 307.191444][ T9315] kasan_report+0xee/0x110 [ 307.191472][ T9315] ? fbcon_prepare_logo+0xa03/0xc70 [ 307.191503][ T9315] kasan_check_range+0xef/0x1a0 [ 307.191536][ T9315] __asan_memcpy+0x23/0x60 [ 307.191575][ T9315] fbcon_prepare_logo+0xa03/0xc70 [ 307.191609][ T9315] fbcon_init+0xd77/0x1900 [ 307.191636][ T9315] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 307.191664][ T9315] visual_init+0x31d/0x620 [ 307.191701][ T9315] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 307.191731][ T9315] store_bind+0x61d/0x760 [ 307.191757][ T9315] ? sysfs_file_kobj+0xe4/0x290 [ 307.191790][ T9315] ? __pfx_store_bind+0x10/0x10 [ 307.191813][ T9315] dev_attr_store+0x55/0x80 [ 307.191841][ T9315] ? __pfx_dev_attr_store+0x10/0x10 [ 307.191869][ T9315] sysfs_kf_write+0xef/0x150 [ 307.191902][ T9315] kernfs_fop_write_iter+0x351/0x510 [ 307.191932][ T9315] ? __pfx_sysfs_kf_write+0x10/0x10 [ 307.191966][ T9315] vfs_write+0x5ba/0x1180 [ 307.191987][ T9315] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 307.192018][ T9315] ? __pfx___mutex_lock+0x10/0x10 [ 307.192050][ T9315] ? __pfx_vfs_write+0x10/0x10 [ 307.192080][ T9315] ksys_write+0x12a/0x240 [ 307.192101][ T9315] ? __pfx_ksys_write+0x10/0x10 [ 307.192121][ T9315] ? rcu_is_watching+0x12/0xc0 [ 307.192146][ T9315] do_syscall_64+0xcd/0x230 [ 307.192180][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.192204][ T9315] RIP: 0033:0x7fdc4ab8e969 [ 307.192222][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.192245][ T9315] RSP: 002b:00007fdc4bac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.192267][ T9315] RAX: ffffffffffffffda RBX: 00007fdc4adb6080 RCX: 00007fdc4ab8e969 [ 307.192283][ T9315] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 307.192298][ T9315] RBP: 00007fdc4ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 307.192328][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.192342][ T9315] R13: 0000000000000000 R14: 00007fdc4adb6080 R15: 00007ffe1ad510a8 [ 307.192373][ T9315] [ 307.192445][ T9315] Kernel Offset: disabled