last executing test programs: 26.174710466s ago: executing program 1 (id=1072): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x3a) socket(0x2, 0x3, 0x6) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) (async, rerun: 32) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async) socket(0x1, 0x5, 0x0) (async) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async, rerun: 32) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8182, 0x0) (async) open(0x0, 0x149443, 0x0) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2a00, 0x0) socketpair$auto(0x200001, 0x9, 0xd490, 0x0) semctl$auto(0x204, 0xffbffffe, 0x3, 0x4) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) (async) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_RTC_PARAM_GET(r2, 0x40187013, &(0x7f0000000040)={0x4, @svalue=0x8, 0x5}) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) (async, rerun: 64) fchdir$auto(r2) 24.904442269s ago: executing program 1 (id=1076): close_range$auto(0x2, 0x8, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x00W\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x1d, 0x2, 0x7) (async) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x2, 0x9, 0xff, r2, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0xd551) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) (async) sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44081) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.448237605s ago: executing program 1 (id=1087): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22081, 0x0) close_range$auto(0x2, r2, 0x0) socket(0x28, 0x801, 0x0) socket(0xa, 0x800, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x400001, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x100003, 0x95f4da2a, 0x10000, 0x3, 0x800000000066, 0x7, 0x7, 0x6, 0x9, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setfsuid$auto(0x0) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000080)) read$auto(r5, 0x0, 0xfff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, 0x0, 0x4800) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xe76, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x3e, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex_waitv$auto(&(0x7f0000000000)={0x3ff, 0x5dd8, 0x2, 0xfff}, 0x3, 0x0, 0x0, 0x623d) 19.123923736s ago: executing program 1 (id=1102): r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm$auto(0x6, 0x18001, 0x80001) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x7, 0x7ffffffd, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r2, 0x5420, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 11.15496319s ago: executing program 1 (id=1130): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) r0 = socket(0xa, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0x73, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000100)="4ceac02070916ed1dc1f91f3c388b5622aa1990800e1d0ae2ef23f241bb2bfd9339eef334248dc800e9b3368", 0x2c) socket(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010023bd7000fadbdf2501000000040007800c00020005000000dd00000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x40000000113, 0x3, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 7.349895567s ago: executing program 3 (id=1140): prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8000008, 0x7, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x7ff, 0x200000100103}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/caif0/accept_dad\x00', 0xc00, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/caif0/accept_dad\x00', 0xc00, 0x0) sendfile$auto(r1, r2, 0x0, 0x800048) (async) sendfile$auto(r1, r2, 0x0, 0x800048) getsid$auto(0x0) 4.771672981s ago: executing program 2 (id=1144): socket(0x2, 0x801, 0x106) (async) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r0 = waitid$auto_P_ALL(0x0, 0x2, &(0x7f0000000000)={@_si_pad}, 0xffff8001, &(0x7f0000000080)={{0x26e0000000, 0xe0cd}, {0xfffffffffffffff8, 0xa}, 0xe, 0x3, 0x4, 0x6, 0x8000, 0x0, 0x4, 0x7, 0x1, 0x2, 0x27, 0x8001, 0x1200000, 0x7}) get_robust_list$auto(r0, &(0x7f00000002c0)=&(0x7f0000000280)={{&(0x7f0000000180)={&(0x7f0000000140)}}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0)}}}, &(0x7f0000000300)=0x7ff) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) bind$auto(0x3, 0x0, 0x68) 4.512269242s ago: executing program 3 (id=1145): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='\x83fsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) execve$auto(&(0x7f0000000200)='}[,&*}\x00', 0x0, 0x0) (async) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) (async) socket(0x2, 0x1, 0x106) futex_waitv$auto(&(0x7f0000000000)={0x3ff, 0x5dd8, 0x2, 0xfff}, 0x3, 0x0, 0x0, 0x623d) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa}, 0xa3) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0x52f041, 0x0) 4.0397637s ago: executing program 2 (id=1146): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip6_tables_names\x00', 0xb00, 0x0) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xc4) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$auto_UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r1, 0x8, 0x0, 0x8000}) 3.870229369s ago: executing program 0 (id=1147): setresuid$auto(0x2, 0x7, 0x8080) socket(0xa, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x402000c, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) syz_clone3(&(0x7f0000000280)={0x130c2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x29}, &(0x7f00000000c0)=""/147, 0x93, &(0x7f0000000180)=""/136, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) kill$auto(r2, 0x9) io_uring_register$auto(r0, 0x4008009, 0x0, 0xbdd) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) 3.721740333s ago: executing program 0 (id=1148): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x6, 0xeb1, 0x405, 0x8000) execve$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=&(0x7f0000000300)='MAC802154_HWSIM\x00', &(0x7f00000003c0)=&(0x7f0000000380)='%{\x8a#,\x00') unshare$auto(0x40000080) io_uring_setup$auto(0x85, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 3.692091643s ago: executing program 2 (id=1149): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (rerun: 64) socket(0x9, 0x3, 0x101) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0x1a004}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 32) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 3.425426608s ago: executing program 2 (id=1150): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0x4) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0x7e, 0x9, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000140)="2f9143327f204f9127bd0c494be11bc8194405a0e11688c0cd430e1910af85020ee71b5282c57712be0f3c9df550b5a13213c2ff247e12b966f3058d9610d372bc796d83b5225541a3f76be41280499360c4a71d3fb896da6ff74a5251ab0ba3ab2ce912d372412785549371619c2410b2860600"/129, 0x81) r2 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen_full\x00', 0x21c0, 0x0) shutdown$auto(r2, 0x10) read$auto(0x4, 0x0, 0x80) 3.284572341s ago: executing program 0 (id=1151): set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xa, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xf, 0x8, 0x0, 0x0) 2.47018533s ago: executing program 2 (id=1152): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyra\x00', 0x481c0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0xffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x4) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r2, r2, 0x0) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r2, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x400c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000180)={0xff, 0x0, "ff09129226537b4d444a84bf6178d7ec", "06a007f3de09c1b42ef9f57c1a313455", "e1ef26319e6d95b17b78f0831516fbb254ab983549232ed5f3e8c0b3009ee091", "763fc7820fabc80d3200b2b3c8c26a594a1ccbfc4652f0eb5df47a396c56d9601223bf2689c8b05bd90166eaab79086b87a8518156b32268c707afc2526b535b02238b864f97da74dbc841b50754ba2a", "e58f7117feaa94dbee042878b38bb93f", "303fb4f118c7a8c3e216dfadb0fb08d69d335236e6263ec8890275752b618f1045a6bf8cfeb57831b30e03ffb1fc3b935a48649df3cd19757d7da3fe206a1e54f6d9f3d9841f02817e4313369dddea57", "f7e37bfdbc48a771b3754b429de5a47d17b73f57104b17b087003e65c7402304e2848fce3bd3e7c076db31139045b280aad361015067bc1f8af0fd3d22c8866cede1411e2f10b3bc65c930d4a03a8cd18df0779ba4004e02648934d6ef6a74d9752c96c6f7233777ed5f3adf37b7613f4abb759737b1eef909365536fc339c3e"}) r5 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) lseek$auto(r5, 0x5, 0x2) 2.46994792s ago: executing program 3 (id=1153): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) syz_clone3(&(0x7f0000000280)={0x201002880, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x11}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000180)=""/131, &(0x7f0000000240)=[0x0], 0x1}, 0x58) process_madvise$auto_MADV_DONTNEED_LOCKED(r0, &(0x7f0000000380)={&(0x7f0000000300)="c4d1e67549714ea9abd36f4b31ec9bfec869c20e00cc7dec381b7ed20a94585d56aae2046bd5298887f79b19e281bc65dc1c947f460730b289f4a0cb56e992b6bd9bcc09e71c8add932eceae68a1106b987b05ebe2b069d6951ec328a7ea42fe054972b9f04ba84440740aa09f4f9f33e95345fd09fe49", 0x7}, 0x8, 0x18, 0x5) socket(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f00000003c0)=0x401) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), r2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a5139e7af98c6bb1f44619006d3b2acc2193ee2099", @ANYRES16=r4, @ANYBLOB="010025bd7000f7dbdf250100003f06000200010000000500070058000000080009000800000008000a000800000014001f00000000000000000000000000000000011400200000000000000000000000ffffffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x26, 0x800, 0x52bd) socket(0x2, 0x1, 0x84) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x80003, 0x307) write$auto_console_fops_tty_io(r5, &(0x7f0000000080)="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", 0xb4b) ioctl$auto_TIOCSSERIAL(r5, 0x541e, &(0x7f0000000040)="a668d1ef3670532498292bc2ad9f5241aa3dae6fe6431c4a2134") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/quirks\x00', 0x80000, 0x0) socket(0x2, 0x3, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)=""/19, 0x13) select$auto(0xe, 0x0, 0x0, &(0x7f0000000e00)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffe, 0x9489, 0x3, 0x6, 0x3, 0x2, 0x62, 0x80000001, 0x8, 0x4, 0xc, 0x2, 0xb31600000000]}, 0x0) prctl$auto_PR_SET_MM(0x23, 0x3, 0x0, 0x4, 0xdf) 2.462968164s ago: executing program 0 (id=1160): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xf, 0x6, 0x2}, 0xfffffffd, 0xf, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x180800, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x33, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/is_otg\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCEXCL2(r3, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="11000000126584", 0x7) 1.97361581s ago: executing program 3 (id=1154): r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000080)=0xa) shutdown$auto(r0, 0x80000000) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x1, 0x0) (async) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0xfffffffffffffff7) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x18000000000000, 0x2000000008, 0xdf, 0x12, r3, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x77, 0x1d, &(0x7f0000000040)='\xf6[,,#$,(\x00', 0x7fffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) (async) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x2, 0x1, 0x0) 1.408186257s ago: executing program 3 (id=1155): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x4000000002, 0xfffffbfffffffffd) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x130, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_KEY={0xee, 0x2, 0x0, 0x1, [@generic="2bd1603b3c48d313c4a1a278cd5b9bb0a36c98a10dd1f235045e21ab40ef2831037d00e2f842aaa0ac469500298fd1cd27f480069dafdb8c7fb5d14d856016866d5d6f970955c1c3b7b4d162fc192c02b5393b40353d36114f0b2cda08a2a46259f12f0976d20eef9fc1d56793d40f5dc2cf8c2c119431cfb8738c772bf00d719c7e2dfb93620cf61fc8217e2fa713fc0a03500dae0636e90009a10fae6ebf98483cd184cbc6a77bf1f8d0296ab7bf7d9bad6aeb8a5bcb4dcd68e70147e8e5dfbe661c3af2aa00c839392f937eac054b1049fb5b6486f13eb34194bcaa474cc868103222583e2e8ff29f"]}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0xfffe}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x2}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "7f56459bb4660609078f2eb1f5f9"}]}, 0x130}}, 0x4004804) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xab1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xab1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x87) (async) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xe}, 0x1, 0x0, 0x6, 0x9}, 0x7}, 0x803, 0x0) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) (async) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) 1.028575875s ago: executing program 0 (id=1156): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000380)=""/172, 0xac) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) read$auto(r3, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r4, 0x2272, &(0x7f0000000000)) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x80000000000007, 0x4000000000000f, 0x8fd6, 0x9, 0x9, 0x15f4da08, 0x3, 0x3, 0x63, 0x80000001, 0x4, 0x1, 0x9, 0x80000000, 0xfffffffffffffffc]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000000000, 0x400006, 0xdf, 0x13, r1, 0x8008000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto_SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f00000001c0)="8535ca649dc9a98043ac4358b028ab92ac98d7920d11b123bed030f1f7e656bbf5bfcda0c9f6a1bf87c00a31b5d751aff463e88eb96078ec95429b73d45fc0d958822a47c8fa261177213428c42ed9632296213fe556abaf4c9c16981aadab04eb27ea4166694b93f5d40f9cb4741d1155d2e4f4e25314af2803064cf396fd7356041a488212c11c388d423bf3066f5b638cfb9691511e75ce7a2876fdfeb2944a9c4652bff83f2ce40c3d01c43ccb21d2") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) mmap$auto(0x0, 0xff, 0x7f, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 956.978439ms ago: executing program 1 (id=1157): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x2}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x4d69, 0xffffffffffffffff, 0x8, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r1, 0x4, 0x9, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x41ea}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1b}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8098}, 0x40000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) pwrite64$auto(r4, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 74.471176ms ago: executing program 2 (id=1158): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r1, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r1, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mmap$auto(0xb5cb, 0x1, 0x1fdc, 0xfffffffffffffffe, r0, 0x6) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendfile$auto(r0, r0, 0x0, 0x200) 73.425779ms ago: executing program 3 (id=1159): r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x401, 0x0) ioctl$auto_XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000000c0)={0x6, 0x5, 0x10001, 0x3, 0x6bbab293}) setresuid$auto(0x0, 0x7, 0x8080) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0xfb, {0xfffffffa, 0xa4c, 0x1000, 0xc, 0x1, 0x9, 0x6, 0x6, 0x80000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) close_range$auto(r1, r1, 0xb6b) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r2, 0x8400ae8e, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x100001, 0x0, 0x4) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x401, 0x8000) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) munmap$auto(0x8000, 0xffffffff) socket(0xa, 0x6, 0x0) socket(0x2b, 0x1, 0xf) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) write$auto_sg_fops_sg(r3, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0", 0x31) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338) 0s ago: executing program 0 (id=1161): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x202020009, 0x3, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) arch_prctl$auto(0x1021, 0x3) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40000002c55, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000049}, 0x4000080) socket(0xa, 0x3, 0x3b) mlockall$auto(0x80) mmap$auto(0x2, 0x6, 0xdf, 0x14, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x8) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) kernel console output (not intermixed with test programs): dump_stack_lvl+0x16c/0x1f0 [ 261.959384][ T8486] should_fail_ex+0x512/0x640 [ 261.959428][ T8486] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 261.959468][ T8486] should_failslab+0xc2/0x120 [ 261.959505][ T8486] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 261.959538][ T8486] ? __proc_create+0xc3/0x8c0 [ 261.959571][ T8486] ? __proc_create+0x2ce/0x8c0 [ 261.959610][ T8486] __proc_create+0x2ce/0x8c0 [ 261.959644][ T8486] ? __pfx___proc_create+0x10/0x10 [ 261.959676][ T8486] ? _raw_write_unlock+0x28/0x50 [ 261.959709][ T8486] ? proc_register+0x314/0x5f0 [ 261.959756][ T8486] _proc_mkdir+0xb9/0x200 [ 261.959791][ T8486] ? __pfx__proc_mkdir+0x10/0x10 [ 261.959848][ T8486] ? __pfx_netfilter_net_init+0x10/0x10 [ 261.959895][ T8486] netfilter_net_init+0x37b/0x4b0 [ 261.959939][ T8486] ? sysctl_net_init+0x27/0x30 [ 261.959979][ T8486] ops_init+0x1df/0x5f0 [ 261.960015][ T8486] setup_net+0x21e/0x850 [ 261.960052][ T8486] ? __pfx_setup_net+0x10/0x10 [ 261.960094][ T8486] ? lockdep_init_map_type+0x5c/0x280 [ 261.960135][ T8486] ? __pfx_down_read_killable+0x10/0x10 [ 261.960181][ T8486] ? debug_mutex_init+0x37/0x70 [ 261.960231][ T8486] copy_net_ns+0x2a6/0x5f0 [ 261.960269][ T8486] create_new_namespaces+0x3ea/0xad0 [ 261.960311][ T8486] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 261.960348][ T8486] ksys_unshare+0x45b/0xa40 [ 261.960389][ T8486] ? __pfx_ksys_unshare+0x10/0x10 [ 261.960427][ T8486] ? xfd_validate_state+0x5d/0x180 [ 261.960476][ T8486] ? rcu_is_watching+0x12/0xc0 [ 261.960512][ T8486] __x64_sys_unshare+0x31/0x40 [ 261.960550][ T8486] do_syscall_64+0xcd/0x230 [ 261.960587][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.960616][ T8486] RIP: 0033:0x7f7a4bd8e969 [ 261.960640][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.960670][ T8486] RSP: 002b:00007f7a4cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 261.960699][ T8486] RAX: ffffffffffffffda RBX: 00007f7a4bfb6080 RCX: 00007f7a4bd8e969 [ 261.960719][ T8486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 261.960737][ T8486] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.960755][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.960773][ T8486] R13: 0000000000000000 R14: 00007f7a4bfb6080 R15: 00007ffdb3b4c5e8 [ 261.960811][ T8486] [ 261.960830][ T8486] cannot create netfilter proc entry [ 262.232284][ T8485] FAULT_INJECTION: forcing a failure. [ 262.232284][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 262.265388][ T8481] FAULT_INJECTION: forcing a failure. [ 262.265388][ T8481] name failslab, interval 1, probability 0, space 0, times 0 [ 262.310859][ T8481] CPU: 0 UID: 0 PID: 8481 Comm: syz.1.544 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 262.310918][ T8481] Tainted: [U]=USER [ 262.310928][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.310948][ T8481] Call Trace: [ 262.310959][ T8481] [ 262.310970][ T8481] dump_stack_lvl+0x16c/0x1f0 [ 262.311015][ T8481] should_fail_ex+0x512/0x640 [ 262.311070][ T8481] ? __kmalloc_noprof+0xbf/0x510 [ 262.311111][ T8481] ? xfrm_hash_alloc+0xd1/0x100 [ 262.311151][ T8481] should_failslab+0xc2/0x120 [ 262.311189][ T8481] __kmalloc_noprof+0xd2/0x510 [ 262.311221][ T8481] ? proc_create_reg+0xe3/0x180 [ 262.311266][ T8481] ? __pfx_xfrm_net_init+0x10/0x10 [ 262.311320][ T8481] xfrm_hash_alloc+0xd1/0x100 [ 262.311358][ T8481] xfrm_state_init+0x9c/0x630 [ 262.311402][ T8481] ? __pfx_xfrm_net_init+0x10/0x10 [ 262.311441][ T8481] xfrm_net_init+0x210/0xcc0 [ 262.311489][ T8481] ? __pfx_xfrm_net_init+0x10/0x10 [ 262.311527][ T8481] ops_init+0x1df/0x5f0 [ 262.311563][ T8481] setup_net+0x21e/0x850 [ 262.311598][ T8481] ? __pfx_setup_net+0x10/0x10 [ 262.311626][ T8481] ? lockdep_init_map_type+0x5c/0x280 [ 262.311668][ T8481] ? __pfx_down_read_killable+0x10/0x10 [ 262.311735][ T8481] ? debug_mutex_init+0x37/0x70 [ 262.311791][ T8481] copy_net_ns+0x2a6/0x5f0 [ 262.311837][ T8481] create_new_namespaces+0x3ea/0xad0 [ 262.311884][ T8481] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 262.311924][ T8481] ksys_unshare+0x45b/0xa40 [ 262.311968][ T8481] ? __pfx_ksys_unshare+0x10/0x10 [ 262.312012][ T8481] ? xfd_validate_state+0x5d/0x180 [ 262.312076][ T8481] ? rcu_is_watching+0x12/0xc0 [ 262.312117][ T8481] __x64_sys_unshare+0x31/0x40 [ 262.312169][ T8481] do_syscall_64+0xcd/0x230 [ 262.312216][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.312249][ T8481] RIP: 0033:0x7f387358e969 [ 262.312274][ T8481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.312306][ T8481] RSP: 002b:00007f38743f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 262.312337][ T8481] RAX: ffffffffffffffda RBX: 00007f38737b5fa0 RCX: 00007f387358e969 [ 262.312359][ T8481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 262.312378][ T8481] RBP: 00007f3873610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 262.312398][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.312417][ T8481] R13: 0000000000000000 R14: 00007f38737b5fa0 R15: 00007fff837559b8 [ 262.312459][ T8481] [ 262.383908][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.0.551 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 262.383967][ T8485] Tainted: [U]=USER [ 262.383979][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.383999][ T8485] Call Trace: [ 262.384011][ T8485] [ 262.384023][ T8485] dump_stack_lvl+0x16c/0x1f0 [ 262.384071][ T8485] should_fail_ex+0x512/0x640 [ 262.384120][ T8485] ? __kmalloc_noprof+0xbf/0x510 [ 262.384162][ T8485] ? xfrm_hash_alloc+0xd1/0x100 [ 262.384202][ T8485] should_failslab+0xc2/0x120 [ 262.384247][ T8485] __kmalloc_noprof+0xd2/0x510 [ 262.384280][ T8485] ? proc_create_reg+0xe3/0x180 [ 262.384330][ T8485] xfrm_hash_alloc+0xd1/0x100 [ 262.384373][ T8485] xfrm_state_init+0x11e/0x630 [ 262.384421][ T8485] ? __pfx_xfrm_net_init+0x10/0x10 [ 262.384465][ T8485] xfrm_net_init+0x210/0xcc0 [ 262.384519][ T8485] ? __pfx_xfrm_net_init+0x10/0x10 [ 262.384565][ T8485] ops_init+0x1df/0x5f0 [ 262.384606][ T8485] setup_net+0x21e/0x850 [ 262.384645][ T8485] ? __pfx_setup_net+0x10/0x10 [ 262.384679][ T8485] ? lockdep_init_map_type+0x5c/0x280 [ 262.384726][ T8485] ? __pfx_down_read_killable+0x10/0x10 [ 262.384779][ T8485] ? debug_mutex_init+0x37/0x70 [ 262.384847][ T8485] copy_net_ns+0x2a6/0x5f0 [ 262.384893][ T8485] create_new_namespaces+0x3ea/0xad0 [ 262.384942][ T8485] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 262.384985][ T8485] ksys_unshare+0x45b/0xa40 [ 262.385034][ T8485] ? __pfx_ksys_unshare+0x10/0x10 [ 262.385077][ T8485] ? xfd_validate_state+0x5d/0x180 [ 262.385137][ T8485] ? rcu_is_watching+0x12/0xc0 [ 262.385179][ T8485] __x64_sys_unshare+0x31/0x40 [ 262.385226][ T8485] do_syscall_64+0xcd/0x230 [ 262.385272][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.385306][ T8485] RIP: 0033:0x7f5373b8e969 [ 262.385335][ T8485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.385369][ T8485] RSP: 002b:00007f5374971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 262.385401][ T8485] RAX: ffffffffffffffda RBX: 00007f5373db5fa0 RCX: 00007f5373b8e969 [ 262.385425][ T8485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 262.385446][ T8485] RBP: 00007f5373c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 262.385468][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.385489][ T8485] R13: 0000000000000000 R14: 00007f5373db5fa0 R15: 00007ffd5845c878 [ 262.385534][ T8485] [ 263.520845][ T8501] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 266.048125][ T8528] FAULT_INJECTION: forcing a failure. [ 266.048125][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 266.061179][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.3.554 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 266.061228][ T8528] Tainted: [U]=USER [ 266.061238][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 266.061255][ T8528] Call Trace: [ 266.061265][ T8528] [ 266.061275][ T8528] dump_stack_lvl+0x16c/0x1f0 [ 266.061317][ T8528] should_fail_ex+0x512/0x640 [ 266.061358][ T8528] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 266.061412][ T8528] should_failslab+0xc2/0x120 [ 266.061450][ T8528] __kmalloc_cache_noprof+0x6a/0x3e0 [ 266.061500][ T8528] ? copy_net_ns+0x135/0x5f0 [ 266.061542][ T8528] copy_net_ns+0x135/0x5f0 [ 266.061574][ T8528] ? copy_cgroup_ns+0xa4/0x6f0 [ 266.061606][ T8528] create_new_namespaces+0x3ea/0xad0 [ 266.061649][ T8528] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 266.061687][ T8528] ksys_unshare+0x45b/0xa40 [ 266.061736][ T8528] ? __pfx_ksys_unshare+0x10/0x10 [ 266.061777][ T8528] ? ksys_write+0x1b9/0x240 [ 266.061806][ T8528] ? rcu_is_watching+0x12/0xc0 [ 266.061853][ T8528] __x64_sys_unshare+0x31/0x40 [ 266.061891][ T8528] do_syscall_64+0xcd/0x230 [ 266.061928][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.061956][ T8528] RIP: 0033:0x7f76a718e969 [ 266.061978][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.062006][ T8528] RSP: 002b:00007f76a8033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.062033][ T8528] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718e969 [ 266.062052][ T8528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 266.062069][ T8528] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 266.062086][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.062103][ T8528] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 266.062140][ T8528] [ 268.556186][ T8569] FAULT_INJECTION: forcing a failure. [ 268.556186][ T8569] name failslab, interval 1, probability 0, space 0, times 0 [ 268.618974][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.3.564 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 268.619022][ T8569] Tainted: [U]=USER [ 268.619032][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.619050][ T8569] Call Trace: [ 268.619060][ T8569] [ 268.619071][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 268.619111][ T8569] should_fail_ex+0x512/0x640 [ 268.619151][ T8569] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 268.619202][ T8569] should_failslab+0xc2/0x120 [ 268.619237][ T8569] __kmalloc_cache_noprof+0x6a/0x3e0 [ 268.619283][ T8569] ? copy_net_ns+0x135/0x5f0 [ 268.619322][ T8569] copy_net_ns+0x135/0x5f0 [ 268.619352][ T8569] ? copy_cgroup_ns+0xa4/0x6f0 [ 268.619382][ T8569] create_new_namespaces+0x3ea/0xad0 [ 268.619423][ T8569] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 268.619459][ T8569] ksys_unshare+0x45b/0xa40 [ 268.619499][ T8569] ? __pfx_ksys_unshare+0x10/0x10 [ 268.619537][ T8569] ? ksys_write+0x1b9/0x240 [ 268.619564][ T8569] ? rcu_is_watching+0x12/0xc0 [ 268.619606][ T8569] __x64_sys_unshare+0x31/0x40 [ 268.619644][ T8569] do_syscall_64+0xcd/0x230 [ 268.619683][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.619712][ T8569] RIP: 0033:0x7f76a718e969 [ 268.619734][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.619762][ T8569] RSP: 002b:00007f76a8033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 268.619789][ T8569] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718e969 [ 268.619809][ T8569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 268.619826][ T8569] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 268.619844][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.619862][ T8569] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 268.619899][ T8569] [ 269.275375][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 269.546759][ T8582] netlink: 322 bytes leftover after parsing attributes in process `syz.1.567'. [ 269.907981][ T8590] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 270.821508][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 272.279165][ T8613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.331968][ T8613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.424141][ T8613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.430330][ T8613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.519924][ T8638] netlink: 330 bytes leftover after parsing attributes in process `syz.2.581'. [ 273.636771][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.291281][ T8662] FAULT_INJECTION: forcing a failure. [ 274.291281][ T8662] name failslab, interval 1, probability 0, space 0, times 0 [ 274.305958][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.0.588 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 274.306007][ T8662] Tainted: [U]=USER [ 274.306016][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.306033][ T8662] Call Trace: [ 274.306042][ T8662] [ 274.306053][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 274.306095][ T8662] should_fail_ex+0x512/0x640 [ 274.306133][ T8662] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 274.306172][ T8662] should_failslab+0xc2/0x120 [ 274.306208][ T8662] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 274.306241][ T8662] ? __pfx___might_resched+0x10/0x10 [ 274.306270][ T8662] ? alloc_vmap_area+0x613/0x2970 [ 274.306318][ T8662] alloc_vmap_area+0x613/0x2970 [ 274.306381][ T8662] ? __pfx_alloc_vmap_area+0x10/0x10 [ 274.306435][ T8662] __get_vm_area_node+0x1a7/0x300 [ 274.306487][ T8662] __vmalloc_node_range_noprof+0x277/0x1540 [ 274.306534][ T8662] ? n_tty_open+0x1a/0x170 [ 274.306586][ T8662] ? n_tty_open+0x1a/0x170 [ 274.306627][ T8662] ? __ldsem_down_write_nested+0x10e/0x850 [ 274.306671][ T8662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.306732][ T8662] ? n_tty_open+0x1a/0x170 [ 274.306772][ T8662] vzalloc_noprof+0x6b/0x90 [ 274.306817][ T8662] ? n_tty_open+0x1a/0x170 [ 274.306854][ T8662] ? __pfx_n_tty_open+0x10/0x10 [ 274.306898][ T8662] n_tty_open+0x1a/0x170 [ 274.306937][ T8662] ? __pfx_n_tty_open+0x10/0x10 [ 274.306975][ T8662] tty_ldisc_open+0x9c/0x120 [ 274.307004][ T8662] tty_ldisc_setup+0x40/0x100 [ 274.307035][ T8662] tty_init_dev.part.0+0x1ec/0x500 [ 274.307073][ T8662] tty_open+0xa50/0xf90 [ 274.307116][ T8662] ? __pfx_tty_open+0x10/0x10 [ 274.307151][ T8662] ? chrdev_open+0x10b/0x6a0 [ 274.307186][ T8662] ? __pfx_tty_open+0x10/0x10 [ 274.307221][ T8662] chrdev_open+0x231/0x6a0 [ 274.307249][ T8662] ? __pfx_apparmor_file_open+0x10/0x10 [ 274.307285][ T8662] ? __pfx_chrdev_open+0x10/0x10 [ 274.307319][ T8662] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 274.307371][ T8662] do_dentry_open+0x741/0x1c10 [ 274.307402][ T8662] ? __pfx_chrdev_open+0x10/0x10 [ 274.307439][ T8662] vfs_open+0x82/0x3f0 [ 274.307482][ T8662] path_openat+0x1e5e/0x2d40 [ 274.307524][ T8662] ? __pfx_path_openat+0x10/0x10 [ 274.307564][ T8662] do_filp_open+0x20b/0x470 [ 274.307591][ T8662] ? __pfx_do_filp_open+0x10/0x10 [ 274.307648][ T8662] ? alloc_fd+0x471/0x7d0 [ 274.307700][ T8662] do_sys_openat2+0x11b/0x1d0 [ 274.307737][ T8662] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.307801][ T8662] __x64_sys_openat+0x174/0x210 [ 274.307838][ T8662] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.307876][ T8662] ? rcu_is_watching+0x12/0xc0 [ 274.307921][ T8662] do_syscall_64+0xcd/0x230 [ 274.307960][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.307989][ T8662] RIP: 0033:0x7f5373b8e969 [ 274.308010][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.308037][ T8662] RSP: 002b:00007f5374950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.308064][ T8662] RAX: ffffffffffffffda RBX: 00007f5373db6080 RCX: 00007f5373b8e969 [ 274.308083][ T8662] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 274.308101][ T8662] RBP: 00007f5373c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 274.308117][ T8662] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 274.308135][ T8662] R13: 0000000000000000 R14: 00007f5373db6080 R15: 00007ffd5845c878 [ 274.308170][ T8662] [ 274.308280][ T8662] syz.0.588: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 274.347696][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.504046][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.505449][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.552322][ T8662] ,cpuset=/,mems_allowed=0-1 [ 274.730864][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.0.588 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 274.730914][ T8662] Tainted: [U]=USER [ 274.730925][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.730942][ T8662] Call Trace: [ 274.730952][ T8662] [ 274.730963][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 274.731024][ T8662] warn_alloc+0x248/0x3a0 [ 274.731062][ T8662] ? __pfx_warn_alloc+0x10/0x10 [ 274.731105][ T8662] ? kfree+0x2b6/0x4d0 [ 274.731175][ T8662] ? __get_vm_area_node+0x1e5/0x300 [ 274.731231][ T8662] __vmalloc_node_range_noprof+0xd31/0x1540 [ 274.731297][ T8662] ? n_tty_open+0x1a/0x170 [ 274.731343][ T8662] ? __ldsem_down_write_nested+0x10e/0x850 [ 274.731389][ T8662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.731452][ T8662] ? n_tty_open+0x1a/0x170 [ 274.731503][ T8662] vzalloc_noprof+0x6b/0x90 [ 274.731547][ T8662] ? n_tty_open+0x1a/0x170 [ 274.731584][ T8662] ? __pfx_n_tty_open+0x10/0x10 [ 274.731618][ T8662] n_tty_open+0x1a/0x170 [ 274.731655][ T8662] ? __pfx_n_tty_open+0x10/0x10 [ 274.731692][ T8662] tty_ldisc_open+0x9c/0x120 [ 274.731721][ T8662] tty_ldisc_setup+0x40/0x100 [ 274.731750][ T8662] tty_init_dev.part.0+0x1ec/0x500 [ 274.731789][ T8662] tty_open+0xa50/0xf90 [ 274.731832][ T8662] ? __pfx_tty_open+0x10/0x10 [ 274.731868][ T8662] ? chrdev_open+0x10b/0x6a0 [ 274.731904][ T8662] ? __pfx_tty_open+0x10/0x10 [ 274.731939][ T8662] chrdev_open+0x231/0x6a0 [ 274.731968][ T8662] ? __pfx_apparmor_file_open+0x10/0x10 [ 274.732005][ T8662] ? __pfx_chrdev_open+0x10/0x10 [ 274.732058][ T8662] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 274.732122][ T8662] do_dentry_open+0x741/0x1c10 [ 274.732155][ T8662] ? __pfx_chrdev_open+0x10/0x10 [ 274.732197][ T8662] vfs_open+0x82/0x3f0 [ 274.732249][ T8662] path_openat+0x1e5e/0x2d40 [ 274.732290][ T8662] ? __pfx_path_openat+0x10/0x10 [ 274.732329][ T8662] do_filp_open+0x20b/0x470 [ 274.732358][ T8662] ? __pfx_do_filp_open+0x10/0x10 [ 274.732414][ T8662] ? alloc_fd+0x471/0x7d0 [ 274.732471][ T8662] do_sys_openat2+0x11b/0x1d0 [ 274.732508][ T8662] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.732561][ T8662] __x64_sys_openat+0x174/0x210 [ 274.732600][ T8662] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.732641][ T8662] ? rcu_is_watching+0x12/0xc0 [ 274.732680][ T8662] do_syscall_64+0xcd/0x230 [ 274.732720][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.732749][ T8662] RIP: 0033:0x7f5373b8e969 [ 274.732772][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.732799][ T8662] RSP: 002b:00007f5374950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.732827][ T8662] RAX: ffffffffffffffda RBX: 00007f5373db6080 RCX: 00007f5373b8e969 [ 274.732846][ T8662] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 274.732866][ T8662] RBP: 00007f5373c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 274.732884][ T8662] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 274.732901][ T8662] R13: 0000000000000000 R14: 00007f5373db6080 R15: 00007ffd5845c878 [ 274.732940][ T8662] [ 274.732951][ T8662] Mem-Info: [ 275.079371][ T8662] active_anon:17946 inactive_anon:0 isolated_anon:0 [ 275.079371][ T8662] active_file:19408 inactive_file:40379 isolated_file:0 [ 275.079371][ T8662] unevictable:768 dirty:2448 writeback:0 [ 275.079371][ T8662] slab_reclaimable:10334 slab_unreclaimable:97251 [ 275.079371][ T8662] mapped:26436 shmem:2321 pagetables:857 [ 275.079371][ T8662] sec_pagetables:0 bounce:0 [ 275.079371][ T8662] kernel_misc_reclaimable:0 [ 275.079371][ T8662] free:1321482 free_pcp:4632 free_cma:0 [ 275.127202][ T8662] Node 0 active_anon:72984kB inactive_anon:0kB active_file:77632kB inactive_file:161440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106744kB dirty:9792kB writeback:0kB shmem:8748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10876kB pagetables:3428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.182787][ T8662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.239757][ T8662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.283467][ T8662] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 275.292795][ T8662] Node 0 DMA32 free:1370964kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:75740kB inactive_anon:0kB active_file:77632kB inactive_file:159608kB unevictable:1536kB writepending:9792kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:1488kB local_pcp:280kB free_cma:0kB [ 275.340436][ T8662] lowmem_reserve[]: 0 0 1 1 1 [ 275.346049][ T8662] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 275.376253][ T8662] lowmem_reserve[]: 0 0 0 0 0 [ 275.381077][ T8662] Node 1 Normal free:3896148kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15728kB local_pcp:5168kB free_cma:0kB [ 275.433599][ T8662] lowmem_reserve[]: 0 0 0 0 0 [ 275.438845][ T8662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.459282][ T8662] Node 0 DMA32: 79*4kB (UME) 2121*8kB (UME) 1528*16kB (UME) 1456*32kB (UME) 881*64kB (UME) 322*128kB (UME) 184*256kB (UME) 105*512kB (ME) 53*1024kB (UME) 9*2048kB (ME) 245*4096kB (UM) = 1363012kB [ 275.502019][ T8662] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 275.517859][ T8662] Node 1 Normal: 172*4kB (UM) 31*8kB (UM) 42*16kB (UME) 200*32kB (UME) 95*64kB (UME) 55*128kB (UME) 25*256kB (UME) 10*512kB (UM) 3*1024kB (ME) 3*2048kB (UE) 941*4096kB (UM) = 3896200kB [ 275.537044][ T8662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.547174][ T8662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.561298][ T8662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.572440][ T8662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.582161][ T8662] 62784 total pagecache pages [ 275.587232][ T8662] 26 pages in swap cache [ 275.591517][ T8662] Free swap = 124892kB [ 275.596376][ T8662] Total swap = 124996kB [ 275.600688][ T8662] 2097051 pages RAM [ 275.605108][ T8662] 0 pages HighMem/MovableOnly [ 275.609823][ T8662] 428892 pages reserved [ 275.695779][ T8662] 0 pages cma reserved [ 275.708396][ T8662] tty tty26: ldisc open failed (-12), clearing slot 25 [ 276.173360][ T8693] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 276.809473][ T8721] FAULT_INJECTION: forcing a failure. [ 276.809473][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 276.853748][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.0.600 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 276.853799][ T8721] Tainted: [U]=USER [ 276.853809][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.853827][ T8721] Call Trace: [ 276.853838][ T8721] [ 276.853850][ T8721] dump_stack_lvl+0x16c/0x1f0 [ 276.853893][ T8721] should_fail_ex+0x512/0x640 [ 276.853935][ T8721] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 276.853973][ T8721] should_failslab+0xc2/0x120 [ 276.854010][ T8721] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 276.854043][ T8721] ? __proc_create+0xc3/0x8c0 [ 276.854075][ T8721] ? __proc_create+0x2ce/0x8c0 [ 276.854114][ T8721] __proc_create+0x2ce/0x8c0 [ 276.854150][ T8721] ? __pfx___proc_create+0x10/0x10 [ 276.854182][ T8721] ? _raw_write_unlock+0x28/0x50 [ 276.854216][ T8721] ? proc_register+0x314/0x5f0 [ 276.854264][ T8721] _proc_mkdir+0xb9/0x200 [ 276.854297][ T8721] ? __pfx__proc_mkdir+0x10/0x10 [ 276.854342][ T8721] ? __pfx_netfilter_net_init+0x10/0x10 [ 276.854389][ T8721] netfilter_net_init+0x37b/0x4b0 [ 276.854431][ T8721] ? sysctl_net_init+0x27/0x30 [ 276.854469][ T8721] ops_init+0x1df/0x5f0 [ 276.854506][ T8721] setup_net+0x21e/0x850 [ 276.854544][ T8721] ? __pfx_setup_net+0x10/0x10 [ 276.854573][ T8721] ? lockdep_init_map_type+0x5c/0x280 [ 276.854633][ T8721] ? __pfx_down_read_killable+0x10/0x10 [ 276.854692][ T8721] ? debug_mutex_init+0x37/0x70 [ 276.854745][ T8721] copy_net_ns+0x2a6/0x5f0 [ 276.854785][ T8721] create_new_namespaces+0x3ea/0xad0 [ 276.854830][ T8721] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 276.854867][ T8721] ksys_unshare+0x45b/0xa40 [ 276.854910][ T8721] ? __pfx_ksys_unshare+0x10/0x10 [ 276.854950][ T8721] ? ksys_write+0x1b9/0x240 [ 276.854979][ T8721] ? rcu_is_watching+0x12/0xc0 [ 276.855016][ T8721] __x64_sys_unshare+0x31/0x40 [ 276.855057][ T8721] do_syscall_64+0xcd/0x230 [ 276.855098][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.855128][ T8721] RIP: 0033:0x7f5373b8e969 [ 276.855152][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.855182][ T8721] RSP: 002b:00007f5374971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 276.855211][ T8721] RAX: ffffffffffffffda RBX: 00007f5373db5fa0 RCX: 00007f5373b8e969 [ 276.855231][ T8721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 276.855250][ T8721] RBP: 00007f5374971090 R08: 0000000000000000 R09: 0000000000000000 [ 276.855268][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.855286][ T8721] R13: 0000000000000000 R14: 00007f5373db5fa0 R15: 00007ffd5845c878 [ 276.855326][ T8721] [ 277.175388][ T8721] cannot create netfilter proc entry [ 277.719965][ T8730] can: request_module (can-proto-0) failed. [ 278.795522][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 279.151996][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 279.407730][ T8778] FAULT_INJECTION: forcing a failure. [ 279.407730][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 279.433877][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.1.612 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 279.433927][ T8778] Tainted: [U]=USER [ 279.433937][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 279.433955][ T8778] Call Trace: [ 279.433964][ T8778] [ 279.433974][ T8778] dump_stack_lvl+0x16c/0x1f0 [ 279.434016][ T8778] should_fail_ex+0x512/0x640 [ 279.434056][ T8778] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 279.434099][ T8778] should_failslab+0xc2/0x120 [ 279.434136][ T8778] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 279.434174][ T8778] ? __pfx__proc_mkdir+0x10/0x10 [ 279.434209][ T8778] ? nf_lwtunnel_net_init+0x38/0xf0 [ 279.434243][ T8778] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 279.434276][ T8778] kmemdup_noprof+0x29/0x60 [ 279.434315][ T8778] nf_lwtunnel_net_init+0x38/0xf0 [ 279.434348][ T8778] ops_init+0x1df/0x5f0 [ 279.434385][ T8778] setup_net+0x21e/0x850 [ 279.434422][ T8778] ? __pfx_setup_net+0x10/0x10 [ 279.434453][ T8778] ? lockdep_init_map_type+0x5c/0x280 [ 279.434494][ T8778] ? __pfx_down_read_killable+0x10/0x10 [ 279.434562][ T8778] ? debug_mutex_init+0x37/0x70 [ 279.434616][ T8778] copy_net_ns+0x2a6/0x5f0 [ 279.434654][ T8778] create_new_namespaces+0x3ea/0xad0 [ 279.434697][ T8778] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 279.434734][ T8778] ksys_unshare+0x45b/0xa40 [ 279.434775][ T8778] ? __pfx_ksys_unshare+0x10/0x10 [ 279.434816][ T8778] ? ksys_write+0x1b9/0x240 [ 279.434844][ T8778] ? rcu_is_watching+0x12/0xc0 [ 279.434880][ T8778] __x64_sys_unshare+0x31/0x40 [ 279.434920][ T8778] do_syscall_64+0xcd/0x230 [ 279.434960][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.434991][ T8778] RIP: 0033:0x7f387358e969 [ 279.435015][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.435045][ T8778] RSP: 002b:00007f38743f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 279.435073][ T8778] RAX: ffffffffffffffda RBX: 00007f38737b5fa0 RCX: 00007f387358e969 [ 279.435093][ T8778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 279.435111][ T8778] RBP: 00007f38743f7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.435130][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.435148][ T8778] R13: 0000000000000000 R14: 00007f38737b5fa0 R15: 00007fff837559b8 [ 279.435189][ T8778] [ 279.700895][ T8772] Process accounting resumed [ 280.506428][ T8800] FAULT_INJECTION: forcing a failure. [ 280.506428][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 280.568841][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.1.624 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 280.568892][ T8800] Tainted: [U]=USER [ 280.568902][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 280.568919][ T8800] Call Trace: [ 280.568929][ T8800] [ 280.568939][ T8800] dump_stack_lvl+0x16c/0x1f0 [ 280.568981][ T8800] should_fail_ex+0x512/0x640 [ 280.569021][ T8800] ? __kmalloc_noprof+0xbf/0x510 [ 280.569056][ T8800] ? __register_sysctl_table+0xb3/0x1900 [ 280.569088][ T8800] should_failslab+0xc2/0x120 [ 280.569127][ T8800] __kmalloc_noprof+0xd2/0x510 [ 280.569168][ T8800] __register_sysctl_table+0xb3/0x1900 [ 280.569204][ T8800] ? is_module_address+0x5f/0xf0 [ 280.569274][ T8800] ? __pfx___register_sysctl_table+0x10/0x10 [ 280.569308][ T8800] ? is_module_address+0x69/0xf0 [ 280.569347][ T8800] ? register_net_sysctl_sz+0x228/0x3e0 [ 280.569394][ T8800] ? __asan_memcpy+0x3c/0x60 [ 280.569454][ T8800] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 280.569488][ T8800] nf_lwtunnel_net_init+0x60/0xf0 [ 280.569522][ T8800] ops_init+0x1df/0x5f0 [ 280.569559][ T8800] setup_net+0x21e/0x850 [ 280.569596][ T8800] ? __pfx_setup_net+0x10/0x10 [ 280.569627][ T8800] ? lockdep_init_map_type+0x5c/0x280 [ 280.569670][ T8800] ? __pfx_down_read_killable+0x10/0x10 [ 280.569719][ T8800] ? debug_mutex_init+0x37/0x70 [ 280.569775][ T8800] copy_net_ns+0x2a6/0x5f0 [ 280.569817][ T8800] create_new_namespaces+0x3ea/0xad0 [ 280.569866][ T8800] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 280.569907][ T8800] ksys_unshare+0x45b/0xa40 [ 280.569951][ T8800] ? __pfx_ksys_unshare+0x10/0x10 [ 280.569994][ T8800] ? ksys_write+0x1b9/0x240 [ 280.570025][ T8800] ? rcu_is_watching+0x12/0xc0 [ 280.570063][ T8800] __x64_sys_unshare+0x31/0x40 [ 280.570105][ T8800] do_syscall_64+0xcd/0x230 [ 280.570149][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.570180][ T8800] RIP: 0033:0x7f387358e969 [ 280.570204][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.570235][ T8800] RSP: 002b:00007f38743f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 280.570265][ T8800] RAX: ffffffffffffffda RBX: 00007f38737b5fa0 RCX: 00007f387358e969 [ 280.570286][ T8800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 280.570306][ T8800] RBP: 00007f38743f7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.570325][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.570345][ T8800] R13: 0000000000000000 R14: 00007f38737b5fa0 R15: 00007fff837559b8 [ 280.570387][ T8800] [ 280.832515][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.745006][ T8812] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 282.553645][ T8828] ======================================================= [ 282.553645][ T8828] WARNING: The mand mount option has been deprecated and [ 282.553645][ T8828] and is ignored by this kernel. Remove the mand [ 282.553645][ T8828] option from the mount to silence this warning. [ 282.553645][ T8828] ======================================================= [ 284.858707][ T55] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 286.650716][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 288.525513][ T8898] openvswitch: netlink: Key type 29 is not supported [ 288.846548][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 288.907361][ T8924] netlink: 326 bytes leftover after parsing attributes in process `syz.1.641'. [ 288.927886][ T8925] netlink: 326 bytes leftover after parsing attributes in process `syz.1.641'. [ 289.955016][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 291.015979][ T30] audit: type=1800 audit(6040671423.667:11): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.648" name="dummy_udc" dev="gadgetfs" ino=6581 res=0 errno=0 [ 297.566852][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 297.939585][ T9079] Process accounting resumed [ 297.992459][ T9096] Invalid ELF header magic: != ELF [ 298.628635][ T9096] netlink: 186 bytes leftover after parsing attributes in process `syz.0.671'. [ 299.458978][ T9115] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[9115] [ 300.443814][ T30] audit: type=1800 audit(6040671433.087:12): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.682" name="members" dev="configfs" ino=27165 res=0 errno=0 [ 301.004391][ T9157] FAULT_INJECTION: forcing a failure. [ 301.004391][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 301.038811][ T9157] CPU: 0 UID: 0 PID: 9157 Comm: syz.1.686 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 301.038867][ T9157] Tainted: [U]=USER [ 301.038877][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.038906][ T9157] Call Trace: [ 301.038917][ T9157] [ 301.038930][ T9157] dump_stack_lvl+0x16c/0x1f0 [ 301.038978][ T9157] should_fail_ex+0x512/0x640 [ 301.039024][ T9157] ? fs_reclaim_acquire+0xae/0x150 [ 301.039076][ T9157] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 301.039120][ T9157] should_failslab+0xc2/0x120 [ 301.039160][ T9157] __kmalloc_noprof+0xd2/0x510 [ 301.039202][ T9157] tomoyo_realpath_from_path+0xc2/0x6e0 [ 301.039249][ T9157] ? tomoyo_profile+0x47/0x60 [ 301.039307][ T9157] tomoyo_path_number_perm+0x245/0x580 [ 301.039340][ T9157] ? tomoyo_path_number_perm+0x237/0x580 [ 301.039377][ T9157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.039453][ T9157] ? hook_file_ioctl_common+0x145/0x410 [ 301.039487][ T9157] ? __x64_sys_futex+0x1e0/0x4c0 [ 301.039528][ T9157] ? __x64_sys_futex+0x1e9/0x4c0 [ 301.039561][ T9157] ? xfd_validate_state+0x5d/0x180 [ 301.039609][ T9157] security_file_ioctl+0x9b/0x240 [ 301.039644][ T9157] __x64_sys_ioctl+0xb7/0x200 [ 301.039685][ T9157] do_syscall_64+0xcd/0x230 [ 301.039740][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.039769][ T9157] RIP: 0033:0x7f387358e969 [ 301.039793][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.039821][ T9157] RSP: 002b:00007f38743f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.039849][ T9157] RAX: ffffffffffffffda RBX: 00007f38737b5fa0 RCX: 00007f387358e969 [ 301.039868][ T9157] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 301.039895][ T9157] RBP: 00007f3873610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.039913][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.039932][ T9157] R13: 0000000000000000 R14: 00007f38737b5fa0 R15: 00007fff837559b8 [ 301.039970][ T9157] [ 301.039982][ T9157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.490938][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 301.890324][ T9142] Process accounting resumed [ 303.095544][ T9211] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 303.756430][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 306.865756][ T9281] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 307.435797][ T9296] ubi0: attaching mtd0 [ 307.454917][ T9296] ubi0: scanning is finished [ 307.467161][ T9296] ubi0: empty MTD device detected [ 307.489562][ T9296] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 307.546249][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 307.611749][ T9298] Invalid ELF header magic: != ELF [ 307.815109][ T9296] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 308.126639][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 308.571003][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 310.319205][ T9336] Process accounting paused [ 312.106098][ T9404] could not allocate digest TFM handle [ 312.303737][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 312.606713][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 314.901579][ T9457] netlink: 'syz.1.741': attribute type 8 has an invalid length. [ 314.930785][ T9457] netlink: 'syz.1.741': attribute type 8 has an invalid length. [ 318.704084][ T9535] netlink: 186 bytes leftover after parsing attributes in process `syz.2.757'. [ 319.288805][ T9548] netlink: 342 bytes leftover after parsing attributes in process `syz.3.759'. [ 319.696429][ T9549] FAULT_INJECTION: forcing a failure. [ 319.696429][ T9549] name failslab, interval 1, probability 0, space 0, times 0 [ 319.715674][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.2.760 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 319.715727][ T9549] Tainted: [U]=USER [ 319.715738][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 319.715757][ T9549] Call Trace: [ 319.715767][ T9549] [ 319.715780][ T9549] dump_stack_lvl+0x16c/0x1f0 [ 319.715833][ T9549] should_fail_ex+0x512/0x640 [ 319.715877][ T9549] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 319.715934][ T9549] should_failslab+0xc2/0x120 [ 319.715971][ T9549] __kmalloc_cache_noprof+0x6a/0x3e0 [ 319.716021][ T9549] ? vhost_net_open+0x28/0x8a0 [ 319.716053][ T9549] ? vhost_net_open+0x6e/0x8a0 [ 319.716089][ T9549] ? __pfx_vhost_net_open+0x10/0x10 [ 319.716119][ T9549] vhost_net_open+0x6e/0x8a0 [ 319.716149][ T9549] ? __pfx_vhost_net_open+0x10/0x10 [ 319.716181][ T9549] misc_open+0x35a/0x420 [ 319.716230][ T9549] ? __pfx_misc_open+0x10/0x10 [ 319.716277][ T9549] chrdev_open+0x231/0x6a0 [ 319.716308][ T9549] ? __pfx_apparmor_file_open+0x10/0x10 [ 319.716347][ T9549] ? __pfx_chrdev_open+0x10/0x10 [ 319.716384][ T9549] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 319.716440][ T9549] do_dentry_open+0x741/0x1c10 [ 319.716473][ T9549] ? __pfx_chrdev_open+0x10/0x10 [ 319.716514][ T9549] vfs_open+0x82/0x3f0 [ 319.716559][ T9549] path_openat+0x1e5e/0x2d40 [ 319.716604][ T9549] ? __pfx_path_openat+0x10/0x10 [ 319.716645][ T9549] do_filp_open+0x20b/0x470 [ 319.716675][ T9549] ? __pfx_do_filp_open+0x10/0x10 [ 319.716736][ T9549] ? alloc_fd+0x471/0x7d0 [ 319.716795][ T9549] do_sys_openat2+0x11b/0x1d0 [ 319.716843][ T9549] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.716888][ T9549] ? do_fcntl+0x1eb/0x1590 [ 319.716933][ T9549] __x64_sys_openat+0x174/0x210 [ 319.716976][ T9549] ? __pfx___x64_sys_openat+0x10/0x10 [ 319.717022][ T9549] ? rcu_is_watching+0x12/0xc0 [ 319.717064][ T9549] do_syscall_64+0xcd/0x230 [ 319.717107][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.717139][ T9549] RIP: 0033:0x7f7a4bd8e969 [ 319.717164][ T9549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.717196][ T9549] RSP: 002b:00007f7a4cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.717226][ T9549] RAX: ffffffffffffffda RBX: 00007f7a4bfb6080 RCX: 00007f7a4bd8e969 [ 319.717247][ T9549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 319.717268][ T9549] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 319.717287][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.717307][ T9549] R13: 0000000000000000 R14: 00007f7a4bfb6080 R15: 00007ffdb3b4c5e8 [ 319.717367][ T9549] [ 321.530885][ T9583] netlink: 186 bytes leftover after parsing attributes in process `syz.3.769'. [ 321.565674][ T9585] syz.2.770: vmalloc error: size 24576, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 321.621083][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.2.770 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 321.621137][ T9585] Tainted: [U]=USER [ 321.621149][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 321.621168][ T9585] Call Trace: [ 321.621178][ T9585] [ 321.621190][ T9585] dump_stack_lvl+0x16c/0x1f0 [ 321.621251][ T9585] warn_alloc+0x248/0x3a0 [ 321.621307][ T9585] ? __pfx_warn_alloc+0x10/0x10 [ 321.621345][ T9585] ? alloc_pages_mpol+0x25a/0x550 [ 321.621394][ T9585] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 321.621436][ T9585] ? trace_kmalloc+0x2b/0xd0 [ 321.621491][ T9585] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 321.621558][ T9585] ? kernel_clone+0xfc/0x960 [ 321.621607][ T9585] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 321.621658][ T9585] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 321.621710][ T9585] ? rcu_is_watching+0x12/0xc0 [ 321.621742][ T9585] ? kernel_clone+0xfc/0x960 [ 321.621780][ T9585] __vmalloc_node_noprof+0x74/0xa0 [ 321.621832][ T9585] ? kernel_clone+0xfc/0x960 [ 321.621874][ T9585] copy_process+0x2ead/0x91a0 [ 321.621912][ T9585] ? find_held_lock+0x2b/0x80 [ 321.621942][ T9585] ? schedule+0x2d7/0x3a0 [ 321.621977][ T9585] ? futex_wait_queue+0x24/0x220 [ 321.622016][ T9585] ? schedule+0xf1/0x3a0 [ 321.622047][ T9585] ? futex_wait_queue+0x14c/0x220 [ 321.622096][ T9585] ? __pfx_copy_process+0x10/0x10 [ 321.622134][ T9585] ? __pfx___futex_wait+0x10/0x10 [ 321.622184][ T9585] ? __pfx_futex_wake_mark+0x10/0x10 [ 321.622246][ T9585] kernel_clone+0xfc/0x960 [ 321.622288][ T9585] ? __pfx_kernel_clone+0x10/0x10 [ 321.622351][ T9585] __do_sys_clone+0xce/0x120 [ 321.622408][ T9585] ? __pfx___do_sys_clone+0x10/0x10 [ 321.622479][ T9585] ? rcu_is_watching+0x12/0xc0 [ 321.622514][ T9585] do_syscall_64+0xcd/0x230 [ 321.622554][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.622582][ T9585] RIP: 0033:0x7f7a4bd8e969 [ 321.622605][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.622634][ T9585] RSP: 002b:00007f7a4ccc8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.622663][ T9585] RAX: ffffffffffffffda RBX: 00007f7a4bfb5fa0 RCX: 00007f7a4bd8e969 [ 321.622683][ T9585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000003000000 [ 321.622701][ T9585] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 321.622719][ T9585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.622737][ T9585] R13: 0000000000000000 R14: 00007f7a4bfb5fa0 R15: 00007ffdb3b4c5e8 [ 321.622773][ T9585] [ 321.622783][ T9585] Mem-Info: [ 321.906885][ T9585] active_anon:48470 inactive_anon:0 isolated_anon:0 [ 321.906885][ T9585] active_file:20750 inactive_file:39193 isolated_file:0 [ 321.906885][ T9585] unevictable:768 dirty:913 writeback:0 [ 321.906885][ T9585] slab_reclaimable:10509 slab_unreclaimable:96678 [ 321.906885][ T9585] mapped:42949 shmem:28207 pagetables:948 [ 321.906885][ T9585] sec_pagetables:0 bounce:0 [ 321.906885][ T9585] kernel_misc_reclaimable:0 [ 321.906885][ T9585] free:1289954 free_pcp:4883 free_cma:0 [ 321.956627][ T9585] Node 0 active_anon:194580kB inactive_anon:0kB active_file:83000kB inactive_file:156696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171796kB dirty:3652kB writeback:0kB shmem:111496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11344kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.022226][ T9576] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[9576] [ 322.120564][ T9585] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.277826][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.280869][ T9585] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.311890][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.350887][ T9585] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 322.356745][ T9585] Node 0 DMA32 free:1235500kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:209936kB inactive_anon:0kB active_file:83000kB inactive_file:154864kB unevictable:1536kB writepending:3652kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:3040kB local_pcp:1016kB free_cma:0kB [ 322.458189][ T9585] lowmem_reserve[]: 0 0 1 1 1 [ 322.480793][ T9596] netlink: 342 bytes leftover after parsing attributes in process `syz.1.772'. [ 322.495815][ T9585] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 322.530855][ T9585] lowmem_reserve[]: 0 0 0 0 0 [ 322.558211][ T9585] Node 1 Normal free:3891704kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18084kB local_pcp:7940kB free_cma:0kB [ 322.600128][ T9585] lowmem_reserve[]: 0 0 0 0 0 [ 322.606991][ T9585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 322.658817][ T9585] Node 0 DMA32: 1016*4kB (UE) 471*8kB (UME) 88*16kB (UE) 112*32kB (UE) 34*64kB (UE) 291*128kB (UME) 192*256kB (UME) 111*512kB (UME) 52*1024kB (UM) 7*2048kB (UM) 244*4096kB (M) = 1225240kB [ 322.701083][ T9585] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 322.757498][ T9585] Node 1 Normal: 231*4kB (UM) 40*8kB (UM) 49*16kB (UME) 206*32kB (UME) 102*64kB (UME) 58*128kB (UME) 20*256kB (UME) 9*512kB (UM) 1*1024kB (E) 6*2048kB (UME) 939*4096kB (UM) = 3891756kB [ 322.858585][ T9585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.894529][ T9585] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 322.905519][ T9585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.915658][ T9585] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 322.971247][ T9585] 95995 total pagecache pages [ 322.976099][ T9585] 0 pages in swap cache [ 322.980400][ T9585] Free swap = 124004kB [ 322.990025][ T9585] Total swap = 124996kB [ 322.994796][ T9585] 2097051 pages RAM [ 322.998769][ T9585] 0 pages HighMem/MovableOnly [ 323.006211][ T9585] 428892 pages reserved [ 323.010652][ T9585] 0 pages cma reserved [ 323.866058][ T9617] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 326.294475][ T9630] netlink: 186 bytes leftover after parsing attributes in process `syz.0.781'. [ 327.563591][ T9629] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[9629] [ 328.111657][ T9670] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 328.750535][ T9682] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 330.202483][ T9708] Invalid ELF header magic: != ELF [ 331.051373][ T9720] Invalid ELF header magic: != ELF [ 331.096294][ T9728] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 331.258384][ T9732] netlink: 330 bytes leftover after parsing attributes in process `syz.3.806'. [ 331.284199][ T9736] netlink: 330 bytes leftover after parsing attributes in process `syz.2.807'. [ 331.703918][ T9738] netlink: 342 bytes leftover after parsing attributes in process `syz.2.807'. [ 331.994378][ T9748] Process accounting paused [ 338.892725][ T30] audit: type=1800 audit(6040672503.535:13): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.836" name="discovery_nqn" dev="configfs" ino=30910 res=0 errno=0 [ 340.756848][ T9915] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 344.198412][ T9946] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f2675fee pfn:0x78000 [ 344.290143][ T9946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 344.371069][ T9946] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 344.371163][ T9946] raw: 00000007f2675fee 0000000000000000 00000001ffffffff 0000000000000000 [ 344.371187][ T9946] page dumped because: unmovable page [ 344.371217][ T9946] page_owner tracks the page as allocated [ 344.371256][ T9946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5825, tgid 5825 (syz-executor), ts 92084773407, free_ts 91837510136 [ 344.371308][ T9946] post_alloc_hook+0x181/0x1b0 [ 344.371343][ T9946] get_page_from_freelist+0x135c/0x3920 [ 344.371377][ T9946] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 344.371415][ T9946] alloc_pages_mpol+0x1fb/0x550 [ 344.371454][ T9946] alloc_pages_noprof+0x131/0x390 [ 344.371491][ T9946] get_free_pages_noprof+0xc/0x40 [ 344.371534][ T9946] kasan_populate_vmalloc_pte+0x2d/0x160 [ 344.371566][ T9946] __apply_to_page_range+0x617/0xd60 [ 344.371615][ T9946] alloc_vmap_area+0x919/0x2970 [ 344.371659][ T9946] __get_vm_area_node+0x1a7/0x300 [ 344.371714][ T9946] __vmalloc_node_range_noprof+0x277/0x1540 [ 344.371777][ T9946] vmalloc_user_noprof+0x6b/0x90 [ 344.413343][ T9946] kcov_ioctl+0x4c/0x730 [ 344.413404][ T9946] __x64_sys_ioctl+0x190/0x200 [ 344.413452][ T9946] do_syscall_64+0xcd/0x230 [ 344.413494][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.413529][ T9946] page last free pid 5819 tgid 5819 stack trace: [ 344.413550][ T9946] free_unref_folios+0x999/0x1630 [ 344.413583][ T9946] folios_put_refs+0x56f/0x740 [ 344.413625][ T9946] free_pages_and_swap_cache+0x245/0x4a0 [ 344.413678][ T9946] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 344.413710][ T9946] tlb_finish_mmu+0x168/0x7b0 [ 344.413748][ T9946] vms_clear_ptes+0x55e/0x770 [ 344.413779][ T9946] vms_complete_munmap_vmas+0x1ca/0x970 [ 344.413813][ T9946] do_vmi_align_munmap+0x43b/0x7d0 [ 344.413847][ T9946] do_vmi_munmap+0x208/0x3e0 [ 344.413880][ T9946] __vm_munmap+0x19a/0x390 [ 344.413916][ T9946] __x64_sys_munmap+0x59/0x80 [ 344.413965][ T9946] do_syscall_64+0xcd/0x230 [ 344.414003][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.770956][ T9962] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 345.357079][ T9972] ubi0: attaching mtd0 [ 345.366906][ T9972] ubi0: scanning is finished [ 345.371568][ T9972] ubi0: empty MTD device detected [ 345.413408][ T9972] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 345.453857][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 345.615504][ T9977] Invalid ELF header magic: != ELF [ 345.716396][ T9972] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 347.958112][ T9990] FAULT_INJECTION: forcing a failure. [ 347.958112][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 348.015149][ T9990] CPU: 0 UID: 0 PID: 9990 Comm: syz.2.866 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 348.015240][ T9990] Tainted: [U]=USER [ 348.015258][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 348.015278][ T9990] Call Trace: [ 348.015289][ T9990] [ 348.015301][ T9990] dump_stack_lvl+0x16c/0x1f0 [ 348.015345][ T9990] should_fail_ex+0x512/0x640 [ 348.015389][ T9990] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 348.015430][ T9990] should_failslab+0xc2/0x120 [ 348.015468][ T9990] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 348.015504][ T9990] ? mas_alloc_nodes+0x18b/0x8b0 [ 348.015543][ T9990] mas_alloc_nodes+0x18b/0x8b0 [ 348.015585][ T9990] mas_node_count_gfp+0x105/0x130 [ 348.015622][ T9990] mas_preallocate+0x53e/0xcd0 [ 348.015674][ T9990] ? __pfx_mas_preallocate+0x10/0x10 [ 348.015741][ T9990] ? anon_vma_name+0x75/0x100 [ 348.015789][ T9990] __split_vma+0x33b/0x1030 [ 348.015828][ T9990] ? __pfx___split_vma+0x10/0x10 [ 348.015880][ T9990] vms_gather_munmap_vmas+0x392/0x1310 [ 348.015923][ T9990] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 348.015961][ T9990] ? mas_walk+0x6a6/0x910 [ 348.016059][ T9990] __mmap_region+0x314/0x27c0 [ 348.016100][ T9990] ? finish_task_switch.isra.0+0x221/0xc10 [ 348.016137][ T9990] ? __pfx___mmap_region+0x10/0x10 [ 348.016173][ T9990] ? trace_sched_exit_tp+0xde/0x130 [ 348.016229][ T9990] ? __lock_acquire+0x5ca/0x1ba0 [ 348.016281][ T9990] ? __pfx___schedule+0x10/0x10 [ 348.016364][ T9990] ? trace_cap_capable+0x18d/0x200 [ 348.016398][ T9990] ? cap_capable+0xb3/0x250 [ 348.016436][ T9990] mmap_region+0x1ab/0x3f0 [ 348.016480][ T9990] do_mmap+0xd8e/0x11b0 [ 348.016537][ T9990] ? __pfx_do_mmap+0x10/0x10 [ 348.016586][ T9990] ? __pfx_down_write_killable+0x10/0x10 [ 348.016639][ T9990] vm_mmap_pgoff+0x281/0x450 [ 348.016694][ T9990] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.016758][ T9990] ? __x64_sys_futex+0x1e0/0x4c0 [ 348.016791][ T9990] ? __x64_sys_futex+0x1e9/0x4c0 [ 348.016832][ T9990] ksys_mmap_pgoff+0x7d/0x5c0 [ 348.016879][ T9990] ? rcu_is_watching+0x12/0xc0 [ 348.016914][ T9990] __x64_sys_mmap+0x125/0x190 [ 348.016950][ T9990] do_syscall_64+0xcd/0x230 [ 348.016995][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.017029][ T9990] RIP: 0033:0x7f7a4bd8e969 [ 348.017055][ T9990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.017087][ T9990] RSP: 002b:00007f7a4ccc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.017119][ T9990] RAX: ffffffffffffffda RBX: 00007f7a4bfb5fa0 RCX: 00007f7a4bd8e969 [ 348.017141][ T9990] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 348.017160][ T9990] RBP: 00007f7a4be10ab1 R08: 0000000000000002 R09: 0000000000008000 [ 348.017181][ T9990] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 348.017201][ T9990] R13: 0000000000000000 R14: 00007f7a4bfb5fa0 R15: 00007ffdb3b4c5e8 [ 348.017244][ T9990] [ 348.315449][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.483562][T10009] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 348.780469][T10013] zero sized request [ 348.826880][T10013] netlink: 326 bytes leftover after parsing attributes in process `syz.1.879'. [ 348.858181][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.866805][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.199044][T10030] ubi0: attaching mtd0 [ 349.265690][T10030] ubi0: scanning is finished [ 349.270344][T10030] ubi0: empty MTD device detected [ 349.318070][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 349.341591][T10030] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 349.453354][T10035] Invalid ELF header magic: != ELF [ 349.573849][T10030] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 350.930583][T10059] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 352.783136][T10097] FAULT_INJECTION: forcing a failure. [ 352.783136][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 352.870943][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.2.890 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 352.870981][T10097] Tainted: [U]=USER [ 352.870988][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 352.871002][T10097] Call Trace: [ 352.871009][T10097] [ 352.871017][T10097] dump_stack_lvl+0x16c/0x1f0 [ 352.871049][T10097] should_fail_ex+0x512/0x640 [ 352.871080][T10097] ? __kmalloc_noprof+0xbf/0x510 [ 352.871106][T10097] ? xfrm_hash_alloc+0xd1/0x100 [ 352.871145][T10097] should_failslab+0xc2/0x120 [ 352.871172][T10097] __kmalloc_noprof+0xd2/0x510 [ 352.871196][T10097] ? xfrm_state_init+0x371/0x630 [ 352.871228][T10097] xfrm_hash_alloc+0xd1/0x100 [ 352.871256][T10097] xfrm_net_init+0x35f/0xcc0 [ 352.871290][T10097] ? __pfx_xfrm_net_init+0x10/0x10 [ 352.871319][T10097] ops_init+0x1df/0x5f0 [ 352.871345][T10097] setup_net+0x21e/0x850 [ 352.871373][T10097] ? __pfx_setup_net+0x10/0x10 [ 352.871394][T10097] ? lockdep_init_map_type+0x5c/0x280 [ 352.871424][T10097] ? __pfx_down_read_killable+0x10/0x10 [ 352.871458][T10097] ? debug_mutex_init+0x37/0x70 [ 352.871497][T10097] copy_net_ns+0x2a6/0x5f0 [ 352.871537][T10097] create_new_namespaces+0x3ea/0xad0 [ 352.871567][T10097] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 352.871592][T10097] ksys_unshare+0x45b/0xa40 [ 352.871621][T10097] ? __pfx_ksys_unshare+0x10/0x10 [ 352.871648][T10097] ? xfd_validate_state+0x5d/0x180 [ 352.871682][T10097] ? rcu_is_watching+0x12/0xc0 [ 352.871707][T10097] __x64_sys_unshare+0x31/0x40 [ 352.871734][T10097] do_syscall_64+0xcd/0x230 [ 352.871761][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.871782][T10097] RIP: 0033:0x7f7a4bd8e969 [ 352.871798][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.871818][T10097] RSP: 002b:00007f7a4cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 352.871838][T10097] RAX: ffffffffffffffda RBX: 00007f7a4bfb6080 RCX: 00007f7a4bd8e969 [ 352.871852][T10097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 352.871864][T10097] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 352.871877][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.871889][T10097] R13: 0000000000000000 R14: 00007f7a4bfb6080 R15: 00007ffdb3b4c5e8 [ 352.871915][T10097] [ 353.684680][T10116] Invalid ELF header magic: != ELF [ 355.882633][ T30] audit: type=1800 audit(6040672520.506:14): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.900" name="discovery_nqn" dev="configfs" ino=31435 res=0 errno=0 [ 356.464829][T10161] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 356.971019][T10166] FAULT_INJECTION: forcing a failure. [ 356.971019][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 356.994137][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.2.906 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 356.994195][T10166] Tainted: [U]=USER [ 356.994206][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 356.994226][T10166] Call Trace: [ 356.994236][T10166] [ 356.994248][T10166] dump_stack_lvl+0x16c/0x1f0 [ 356.994295][T10166] should_fail_ex+0x512/0x640 [ 356.994341][T10166] ? __kmalloc_noprof+0xbf/0x510 [ 356.994380][T10166] ? xfrm_hash_alloc+0xd1/0x100 [ 356.994420][T10166] should_failslab+0xc2/0x120 [ 356.994459][T10166] __kmalloc_noprof+0xd2/0x510 [ 356.994495][T10166] ? xfrm_state_init+0x371/0x630 [ 356.994542][T10166] xfrm_hash_alloc+0xd1/0x100 [ 356.994582][T10166] xfrm_net_init+0x35f/0xcc0 [ 356.994646][T10166] ? __pfx_xfrm_net_init+0x10/0x10 [ 356.994687][T10166] ops_init+0x1df/0x5f0 [ 356.994725][T10166] setup_net+0x21e/0x850 [ 356.994762][T10166] ? __pfx_setup_net+0x10/0x10 [ 356.994791][T10166] ? lockdep_init_map_type+0x5c/0x280 [ 356.994834][T10166] ? __pfx_down_read_killable+0x10/0x10 [ 356.994884][T10166] ? debug_mutex_init+0x37/0x70 [ 356.994939][T10166] copy_net_ns+0x2a6/0x5f0 [ 356.994979][T10166] create_new_namespaces+0x3ea/0xad0 [ 356.995024][T10166] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 356.995062][T10166] ksys_unshare+0x45b/0xa40 [ 356.995115][T10166] ? __pfx_ksys_unshare+0x10/0x10 [ 356.995174][T10166] ? xfd_validate_state+0x5d/0x180 [ 356.995230][T10166] ? rcu_is_watching+0x12/0xc0 [ 356.995270][T10166] __x64_sys_unshare+0x31/0x40 [ 356.995313][T10166] do_syscall_64+0xcd/0x230 [ 356.995357][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.995401][T10166] RIP: 0033:0x7f7a4bd8e969 [ 356.995426][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.995457][T10166] RSP: 002b:00007f7a4ccc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.995489][T10166] RAX: ffffffffffffffda RBX: 00007f7a4bfb5fa0 RCX: 00007f7a4bd8e969 [ 356.995510][T10166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 356.995530][T10166] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 356.995550][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.995569][T10166] R13: 0000000000000000 R14: 00007f7a4bfb5fa0 R15: 00007ffdb3b4c5e8 [ 356.995610][T10166] [ 357.234241][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.885434][ T30] audit: type=1800 audit(6040672523.515:15): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.914" name="discovery_nqn" dev="configfs" ino=31516 res=0 errno=0 [ 359.284126][T10201] FAULT_INJECTION: forcing a failure. [ 359.284126][T10201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.349367][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.3.915 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 359.349414][T10201] Tainted: [U]=USER [ 359.349422][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 359.349438][T10201] Call Trace: [ 359.349447][T10201] [ 359.349458][T10201] dump_stack_lvl+0x16c/0x1f0 [ 359.349495][T10201] should_fail_ex+0x512/0x640 [ 359.349539][T10201] _copy_to_user+0x32/0xd0 [ 359.349603][T10201] simple_read_from_buffer+0xcb/0x170 [ 359.349650][T10201] proc_fail_nth_read+0x197/0x270 [ 359.349690][T10201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.349727][T10201] ? rw_verify_area+0xcf/0x680 [ 359.349763][T10201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.349799][T10201] vfs_read+0x1de/0xc70 [ 359.349825][T10201] ? __pfx___mutex_lock+0x10/0x10 [ 359.349856][T10201] ? __pfx_vfs_read+0x10/0x10 [ 359.349894][T10201] ? __fget_files+0x20e/0x3c0 [ 359.349943][T10201] ksys_read+0x12a/0x240 [ 359.349964][T10201] ? __pfx_ksys_read+0x10/0x10 [ 359.349996][T10201] do_syscall_64+0xcd/0x230 [ 359.350030][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.350056][T10201] RIP: 0033:0x7f76a718d37c [ 359.350076][T10201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.350100][T10201] RSP: 002b:00007f76a8033030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.350124][T10201] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718d37c [ 359.350141][T10201] RDX: 000000000000000f RSI: 00007f76a80330a0 RDI: 0000000000000005 [ 359.350156][T10201] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 359.350171][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.350186][T10201] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 359.350217][T10201] [ 360.763772][T10211] FAULT_INJECTION: forcing a failure. [ 360.763772][T10211] name failslab, interval 1, probability 0, space 0, times 0 [ 360.942678][T10211] CPU: 0 UID: 0 PID: 10211 Comm: syz.0.918 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 360.942731][T10211] Tainted: [U]=USER [ 360.942741][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 360.942759][T10211] Call Trace: [ 360.942769][T10211] [ 360.942780][T10211] dump_stack_lvl+0x16c/0x1f0 [ 360.942820][T10211] should_fail_ex+0x512/0x640 [ 360.942860][T10211] ? __kmalloc_noprof+0xbf/0x510 [ 360.942895][T10211] ? fib_default_rule_add+0x4f/0x420 [ 360.942924][T10211] should_failslab+0xc2/0x120 [ 360.942960][T10211] __kmalloc_noprof+0xd2/0x510 [ 360.943002][T10211] fib_default_rule_add+0x4f/0x420 [ 360.943034][T10211] fib4_rules_init+0x52/0x1c0 [ 360.943074][T10211] fib_net_init+0x1dc/0x3f0 [ 360.943102][T10211] ? __pfx___register_sysctl_table+0x10/0x10 [ 360.943136][T10211] ? __pfx_fib_net_init+0x10/0x10 [ 360.943163][T10211] ? lockdep_init_map_type+0x5c/0x280 [ 360.943204][T10211] ? do_init_timer+0xc9/0x110 [ 360.943237][T10211] ? devinet_init_net+0x5c2/0x910 [ 360.943274][T10211] ? __pfx_fib_net_init+0x10/0x10 [ 360.943300][T10211] ops_init+0x1df/0x5f0 [ 360.943339][T10211] setup_net+0x21e/0x850 [ 360.943375][T10211] ? __pfx_setup_net+0x10/0x10 [ 360.943421][T10211] ? lockdep_init_map_type+0x5c/0x280 [ 360.943481][T10211] ? __pfx_down_read_killable+0x10/0x10 [ 360.943542][T10211] ? debug_mutex_init+0x37/0x70 [ 360.943600][T10211] copy_net_ns+0x2a6/0x5f0 [ 360.943644][T10211] create_new_namespaces+0x3ea/0xad0 [ 360.943690][T10211] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 360.943731][T10211] ksys_unshare+0x45b/0xa40 [ 360.943775][T10211] ? __pfx_ksys_unshare+0x10/0x10 [ 360.943815][T10211] ? xfd_validate_state+0x5d/0x180 [ 360.943870][T10211] ? rcu_is_watching+0x12/0xc0 [ 360.943914][T10211] __x64_sys_unshare+0x31/0x40 [ 360.943958][T10211] do_syscall_64+0xcd/0x230 [ 360.944002][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.944035][T10211] RIP: 0033:0x7f5373b8e969 [ 360.944061][T10211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.944093][T10211] RSP: 002b:00007f5374971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 360.944126][T10211] RAX: ffffffffffffffda RBX: 00007f5373db5fa0 RCX: 00007f5373b8e969 [ 360.944148][T10211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 360.944168][T10211] RBP: 00007f5373c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 360.944188][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.944208][T10211] R13: 0000000000000000 R14: 00007f5373db5fa0 R15: 00007ffd5845c878 [ 360.944251][T10211] [ 361.861474][T10249] zero sized request [ 361.919854][T10249] netlink: 326 bytes leftover after parsing attributes in process `syz.2.928'. [ 362.220064][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.613951][T10249] Process accounting resumed [ 363.108912][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 363.141411][T10266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.181789][T10266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.218971][T10266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.226553][T10266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.370462][T10291] zero sized request [ 364.409128][T10291] netlink: 326 bytes leftover after parsing attributes in process `syz.3.940'. [ 364.441053][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.607275][T10298] FAULT_INJECTION: forcing a failure. [ 364.607275][T10298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.640436][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.2.941 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 364.640507][T10298] Tainted: [U]=USER [ 364.640518][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 364.640537][T10298] Call Trace: [ 364.640547][T10298] [ 364.640558][T10298] dump_stack_lvl+0x16c/0x1f0 [ 364.640603][T10298] should_fail_ex+0x512/0x640 [ 364.640651][T10298] should_fail_alloc_page+0xe7/0x130 [ 364.640693][T10298] prepare_alloc_pages+0x3c2/0x610 [ 364.640746][T10298] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 364.640785][T10298] ? stack_trace_save+0x8e/0xc0 [ 364.640816][T10298] ? __pfx_stack_trace_save+0x10/0x10 [ 364.640846][T10298] ? stack_depot_save_flags+0x28/0xa50 [ 364.640890][T10298] ? __kernel_text_address+0xd/0x40 [ 364.640945][T10298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.640979][T10298] ? kasan_save_track+0x14/0x30 [ 364.641008][T10298] ? snd_pcm_attach_substream+0x441/0xd60 [ 364.641056][T10298] ? snd_pcm_oss_open+0x735/0x1400 [ 364.641091][T10298] ? soundcore_open+0x409/0x580 [ 364.641120][T10298] ? chrdev_open+0x231/0x6a0 [ 364.641148][T10298] ? do_dentry_open+0x741/0x1c10 [ 364.641176][T10298] ? vfs_open+0x82/0x3f0 [ 364.641209][T10298] ? path_openat+0x1e5e/0x2d40 [ 364.641235][T10298] ? do_filp_open+0x20b/0x470 [ 364.641285][T10298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.641330][T10298] ? policy_nodemask+0xea/0x4e0 [ 364.641371][T10298] alloc_pages_mpol+0x1fb/0x550 [ 364.641411][T10298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 364.641459][T10298] alloc_pages_noprof+0x131/0x390 [ 364.641499][T10298] alloc_pages_exact_noprof+0x31/0x90 [ 364.641548][T10298] snd_pcm_attach_substream+0x468/0xd60 [ 364.641607][T10298] snd_pcm_open_substream+0x8d/0x17f0 [ 364.641654][T10298] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 364.641714][T10298] snd_pcm_oss_open+0x735/0x1400 [ 364.641768][T10298] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 364.641808][T10298] ? __lock_acquire+0xaa4/0x1ba0 [ 364.641848][T10298] ? __pfx_default_wake_function+0x10/0x10 [ 364.641881][T10298] ? __lock_acquire+0xaa4/0x1ba0 [ 364.641934][T10298] ? do_raw_spin_lock+0x12c/0x2b0 [ 364.641982][T10298] ? soundcore_open+0x35a/0x580 [ 364.642016][T10298] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 364.642058][T10298] soundcore_open+0x409/0x580 [ 364.642094][T10298] ? __pfx_soundcore_open+0x10/0x10 [ 364.642126][T10298] chrdev_open+0x231/0x6a0 [ 364.642157][T10298] ? __pfx_apparmor_file_open+0x10/0x10 [ 364.642195][T10298] ? __pfx_chrdev_open+0x10/0x10 [ 364.642231][T10298] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 364.642291][T10298] do_dentry_open+0x741/0x1c10 [ 364.642323][T10298] ? __pfx_chrdev_open+0x10/0x10 [ 364.642365][T10298] vfs_open+0x82/0x3f0 [ 364.642410][T10298] path_openat+0x1e5e/0x2d40 [ 364.642454][T10298] ? __pfx_path_openat+0x10/0x10 [ 364.642495][T10298] do_filp_open+0x20b/0x470 [ 364.642525][T10298] ? __pfx_do_filp_open+0x10/0x10 [ 364.642584][T10298] ? alloc_fd+0x471/0x7d0 [ 364.642643][T10298] do_sys_openat2+0x11b/0x1d0 [ 364.642683][T10298] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.642740][T10298] __x64_sys_openat+0x174/0x210 [ 364.642800][T10298] ? __pfx___x64_sys_openat+0x10/0x10 [ 364.642846][T10298] ? rcu_is_watching+0x12/0xc0 [ 364.642887][T10298] do_syscall_64+0xcd/0x230 [ 364.642929][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.642962][T10298] RIP: 0033:0x7f7a4bd8e969 [ 364.642988][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.643020][T10298] RSP: 002b:00007f7a4cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.643053][T10298] RAX: ffffffffffffffda RBX: 00007f7a4bfb6080 RCX: 00007f7a4bd8e969 [ 364.643074][T10298] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 364.643096][T10298] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 364.643116][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.643136][T10298] R13: 0000000000000000 R14: 00007f7a4bfb6080 R15: 00007ffdb3b4c5e8 [ 364.643178][T10298] [ 365.079531][T10295] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f2675fee pfn:0x78000 [ 365.091443][T10295] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 365.104628][T10295] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 365.115767][T10295] raw: 00000007f2675fee 0000000000000000 00000001ffffffff 0000000000000000 [ 365.128007][T10295] page dumped because: unmovable page [ 365.133504][T10295] page_owner tracks the page as allocated [ 365.139546][T10295] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5825, tgid 5825 (syz-executor), ts 92084773407, free_ts 91837510136 [ 365.155633][T10295] post_alloc_hook+0x181/0x1b0 [ 365.160448][T10295] get_page_from_freelist+0x135c/0x3920 [ 365.166120][T10295] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 365.172089][T10295] alloc_pages_mpol+0x1fb/0x550 [ 365.177056][T10295] alloc_pages_noprof+0x131/0x390 [ 365.182152][T10295] get_free_pages_noprof+0xc/0x40 [ 365.187720][T10295] kasan_populate_vmalloc_pte+0x2d/0x160 [ 365.193522][T10295] __apply_to_page_range+0x617/0xd60 [ 365.200129][T10295] alloc_vmap_area+0x919/0x2970 [ 365.205168][T10295] __get_vm_area_node+0x1a7/0x300 [ 365.210364][T10295] __vmalloc_node_range_noprof+0x277/0x1540 [ 365.216425][T10295] vmalloc_user_noprof+0x6b/0x90 [ 365.221453][T10295] kcov_ioctl+0x4c/0x730 [ 365.225837][T10295] __x64_sys_ioctl+0x190/0x200 [ 365.230680][T10295] do_syscall_64+0xcd/0x230 [ 365.235335][T10295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.241287][T10295] page last free pid 5819 tgid 5819 stack trace: [ 365.247733][T10295] free_unref_folios+0x999/0x1630 [ 365.252985][T10295] folios_put_refs+0x56f/0x740 [ 365.257900][T10295] free_pages_and_swap_cache+0x245/0x4a0 [ 365.263671][T10295] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 365.269717][T10295] tlb_finish_mmu+0x168/0x7b0 [ 365.274546][T10295] vms_clear_ptes+0x55e/0x770 [ 365.279285][T10295] vms_complete_munmap_vmas+0x1ca/0x970 [ 365.284980][T10295] do_vmi_align_munmap+0x43b/0x7d0 [ 365.290153][T10295] do_vmi_munmap+0x208/0x3e0 [ 365.294889][T10295] __vm_munmap+0x19a/0x390 [ 365.300490][T10295] __x64_sys_munmap+0x59/0x80 [ 365.305317][T10295] do_syscall_64+0xcd/0x230 [ 365.309891][T10295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.511253][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 367.416162][T10347] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 368.666281][T10370] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f2675fee pfn:0x78000 [ 368.723906][T10370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 368.731256][T10370] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 368.739963][T10370] raw: 00000007f2675fee 0000000000000000 00000001ffffffff 0000000000000000 [ 368.748703][T10370] page dumped because: unmovable page [ 368.754178][T10370] page_owner tracks the page as allocated [ 368.760025][T10370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5825, tgid 5825 (syz-executor), ts 92084773407, free_ts 91837510136 [ 368.776083][T10370] post_alloc_hook+0x181/0x1b0 [ 368.780912][T10370] get_page_from_freelist+0x135c/0x3920 [ 368.787189][T10370] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 368.794939][T10370] alloc_pages_mpol+0x1fb/0x550 [ 368.799967][T10370] alloc_pages_noprof+0x131/0x390 [ 368.805114][T10370] get_free_pages_noprof+0xc/0x40 [ 368.810224][T10370] kasan_populate_vmalloc_pte+0x2d/0x160 [ 368.816073][T10370] __apply_to_page_range+0x617/0xd60 [ 368.821422][T10370] alloc_vmap_area+0x919/0x2970 [ 368.826722][T10370] __get_vm_area_node+0x1a7/0x300 [ 368.831824][T10370] __vmalloc_node_range_noprof+0x277/0x1540 [ 368.837866][T10370] vmalloc_user_noprof+0x6b/0x90 [ 368.842876][T10370] kcov_ioctl+0x4c/0x730 [ 368.865860][T10370] __x64_sys_ioctl+0x190/0x200 [ 368.870751][T10370] do_syscall_64+0xcd/0x230 [ 368.914143][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.920139][T10370] page last free pid 5819 tgid 5819 stack trace: [ 368.965357][T10370] free_unref_folios+0x999/0x1630 [ 368.970797][T10370] folios_put_refs+0x56f/0x740 [ 369.017080][T10370] free_pages_and_swap_cache+0x245/0x4a0 [ 369.028502][T10370] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 369.049364][T10370] tlb_finish_mmu+0x168/0x7b0 [ 369.099397][T10370] vms_clear_ptes+0x55e/0x770 [ 369.175930][T10370] vms_complete_munmap_vmas+0x1ca/0x970 [ 369.256230][T10370] do_vmi_align_munmap+0x43b/0x7d0 [ 369.284679][T10370] do_vmi_munmap+0x208/0x3e0 [ 369.315793][T10370] __vm_munmap+0x19a/0x390 [ 369.352344][T10370] __x64_sys_munmap+0x59/0x80 [ 369.374085][T10370] do_syscall_64+0xcd/0x230 [ 369.408756][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.193526][T10401] FAULT_INJECTION: forcing a failure. [ 371.193526][T10401] name failslab, interval 1, probability 0, space 0, times 0 [ 371.273440][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.3.964 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 371.273491][T10401] Tainted: [U]=USER [ 371.273502][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 371.273521][T10401] Call Trace: [ 371.273531][T10401] [ 371.273544][T10401] dump_stack_lvl+0x16c/0x1f0 [ 371.273588][T10401] should_fail_ex+0x512/0x640 [ 371.273631][T10401] ? fs_reclaim_acquire+0xae/0x150 [ 371.273681][T10401] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 371.273737][T10401] should_failslab+0xc2/0x120 [ 371.273776][T10401] __kmalloc_noprof+0xd2/0x510 [ 371.273820][T10401] tomoyo_realpath_from_path+0xc2/0x6e0 [ 371.273868][T10401] ? tomoyo_profile+0x47/0x60 [ 371.273920][T10401] tomoyo_path_number_perm+0x245/0x580 [ 371.273954][T10401] ? tomoyo_path_number_perm+0x237/0x580 [ 371.273994][T10401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 371.274035][T10401] ? find_held_lock+0x2b/0x80 [ 371.274103][T10401] ? find_held_lock+0x2b/0x80 [ 371.274130][T10401] ? hook_file_ioctl_common+0x145/0x410 [ 371.274173][T10401] ? __fget_files+0x20e/0x3c0 [ 371.274228][T10401] security_file_ioctl+0x9b/0x240 [ 371.274270][T10401] __x64_sys_ioctl+0xb7/0x200 [ 371.274315][T10401] do_syscall_64+0xcd/0x230 [ 371.274358][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.274388][T10401] RIP: 0033:0x7f76a718e969 [ 371.274411][T10401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.274442][T10401] RSP: 002b:00007f76a8033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.274475][T10401] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718e969 [ 371.274495][T10401] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 371.274514][T10401] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 371.274533][T10401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.274565][T10401] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 371.274605][T10401] [ 371.274688][T10401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 372.348080][T10418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 372.365961][T10418] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 372.778041][T10434] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 373.650847][T10448] FAULT_INJECTION: forcing a failure. [ 373.650847][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 373.684935][T10448] CPU: 1 UID: 0 PID: 10448 Comm: syz.3.980 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 373.684987][T10448] Tainted: [U]=USER [ 373.684997][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 373.685014][T10448] Call Trace: [ 373.685025][T10448] [ 373.685036][T10448] dump_stack_lvl+0x16c/0x1f0 [ 373.685078][T10448] should_fail_ex+0x512/0x640 [ 373.685120][T10448] ? fs_reclaim_acquire+0xae/0x150 [ 373.685168][T10448] ? tomoyo_encode2+0x100/0x3e0 [ 373.685207][T10448] should_failslab+0xc2/0x120 [ 373.685244][T10448] __kmalloc_noprof+0xd2/0x510 [ 373.685275][T10448] ? d_absolute_path+0x136/0x1a0 [ 373.685318][T10448] tomoyo_encode2+0x100/0x3e0 [ 373.685364][T10448] tomoyo_encode+0x29/0x50 [ 373.685403][T10448] tomoyo_realpath_from_path+0x18f/0x6e0 [ 373.685458][T10448] tomoyo_path_number_perm+0x245/0x580 [ 373.685492][T10448] ? tomoyo_path_number_perm+0x237/0x580 [ 373.685531][T10448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.685569][T10448] ? find_held_lock+0x2b/0x80 [ 373.685638][T10448] ? find_held_lock+0x2b/0x80 [ 373.685665][T10448] ? hook_file_ioctl_common+0x145/0x410 [ 373.685706][T10448] ? __fget_files+0x20e/0x3c0 [ 373.685758][T10448] security_file_ioctl+0x9b/0x240 [ 373.685797][T10448] __x64_sys_ioctl+0xb7/0x200 [ 373.685841][T10448] do_syscall_64+0xcd/0x230 [ 373.685882][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.685913][T10448] RIP: 0033:0x7f76a718e969 [ 373.685937][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.685967][T10448] RSP: 002b:00007f76a8033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.685994][T10448] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718e969 [ 373.686014][T10448] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 373.686032][T10448] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 373.686050][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.686068][T10448] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 373.686108][T10448] [ 373.686136][T10448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 376.625210][T10476] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f2675fee pfn:0x78000 [ 376.648259][T10476] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.655516][T10476] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 376.707676][T10476] raw: 00000007f2675fee 0000000000000000 00000001ffffffff 0000000000000000 [ 376.748608][T10476] page dumped because: unmovable page [ 376.754063][T10476] page_owner tracks the page as allocated [ 376.805837][T10476] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5825, tgid 5825 (syz-executor), ts 92084773407, free_ts 91837510136 [ 376.850203][T10476] post_alloc_hook+0x181/0x1b0 [ 376.865910][T10476] get_page_from_freelist+0x135c/0x3920 [ 376.881815][T10476] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 376.891933][T10476] alloc_pages_mpol+0x1fb/0x550 [ 376.896875][T10476] alloc_pages_noprof+0x131/0x390 [ 376.999848][T10476] get_free_pages_noprof+0xc/0x40 [ 377.037519][T10476] kasan_populate_vmalloc_pte+0x2d/0x160 [ 377.068660][T10476] __apply_to_page_range+0x617/0xd60 [ 377.076264][T10476] alloc_vmap_area+0x919/0x2970 [ 377.082538][T10476] __get_vm_area_node+0x1a7/0x300 [ 377.087750][T10476] __vmalloc_node_range_noprof+0x277/0x1540 [ 377.153166][T10476] vmalloc_user_noprof+0x6b/0x90 [ 377.168307][T10476] kcov_ioctl+0x4c/0x730 [ 377.177786][T10476] __x64_sys_ioctl+0x190/0x200 [ 377.183218][T10476] do_syscall_64+0xcd/0x230 [ 377.188974][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.194952][T10476] page last free pid 5819 tgid 5819 stack trace: [ 377.206614][T10476] free_unref_folios+0x999/0x1630 [ 377.212068][T10476] folios_put_refs+0x56f/0x740 [ 377.216907][T10476] free_pages_and_swap_cache+0x245/0x4a0 [ 377.223239][T10476] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 377.229640][T10476] tlb_finish_mmu+0x168/0x7b0 [ 377.234348][T10476] vms_clear_ptes+0x55e/0x770 [ 377.239677][T10476] vms_complete_munmap_vmas+0x1ca/0x970 [ 377.245282][T10476] do_vmi_align_munmap+0x43b/0x7d0 [ 377.250933][T10476] do_vmi_munmap+0x208/0x3e0 [ 377.255572][T10476] __vm_munmap+0x19a/0x390 [ 377.260623][T10476] __x64_sys_munmap+0x59/0x80 [ 377.265388][T10476] do_syscall_64+0xcd/0x230 [ 377.320374][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.705300][T10577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 382.712439][T10577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.720099][T10577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.730715][T10577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.740648][T10577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 382.810780][T10577] Process accounting resumed [ 382.815757][T10577] kernel write not supported for file /status (pid: 10577 comm: syz.2.1020) [ 382.822414][T10586] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[10586] [ 383.254464][T10601] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 383.273024][T10601] FAULT_INJECTION: forcing a failure. [ 383.273024][T10601] name failslab, interval 1, probability 0, space 0, times 0 [ 383.374080][T10601] CPU: 0 UID: 0 PID: 10601 Comm: syz.1.1027 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 383.374136][T10601] Tainted: [U]=USER [ 383.374147][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 383.374167][T10601] Call Trace: [ 383.374177][T10601] [ 383.374189][T10601] dump_stack_lvl+0x16c/0x1f0 [ 383.374233][T10601] should_fail_ex+0x512/0x640 [ 383.374277][T10601] ? fs_reclaim_acquire+0xae/0x150 [ 383.374329][T10601] should_failslab+0xc2/0x120 [ 383.374369][T10601] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 383.374406][T10601] ? security_inode_alloc+0x3b/0x2b0 [ 383.374447][T10601] security_inode_alloc+0x3b/0x2b0 [ 383.374487][T10601] inode_init_always_gfp+0xce4/0x1030 [ 383.374557][T10601] alloc_inode+0x86/0x240 [ 383.374594][T10601] sock_alloc+0x40/0x280 [ 383.374630][T10601] sock_create_lite+0x82/0x120 [ 383.374668][T10601] __netlink_kernel_create+0xbd/0x750 [ 383.374705][T10601] ? __pfx___netlink_kernel_create+0x10/0x10 [ 383.374736][T10601] ? find_held_lock+0x2b/0x80 [ 383.374766][T10601] ? audit_net_init+0x190/0x440 [ 383.374805][T10601] audit_net_init+0x1ae/0x440 [ 383.374837][T10601] ? __pfx_audit_net_init+0x10/0x10 [ 383.374871][T10601] ? __pfx_audit_receive+0x10/0x10 [ 383.374908][T10601] ? __pfx_audit_multicast_bind+0x10/0x10 [ 383.374953][T10601] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 383.374990][T10601] ? trace_kmalloc+0x2b/0xd0 [ 383.375040][T10601] ? __pfx_audit_net_init+0x10/0x10 [ 383.375071][T10601] ops_init+0x1df/0x5f0 [ 383.375107][T10601] setup_net+0x21e/0x850 [ 383.375144][T10601] ? __pfx_setup_net+0x10/0x10 [ 383.375173][T10601] ? lockdep_init_map_type+0x5c/0x280 [ 383.375213][T10601] ? __pfx_down_read_killable+0x10/0x10 [ 383.375262][T10601] ? debug_mutex_init+0x37/0x70 [ 383.375317][T10601] copy_net_ns+0x2a6/0x5f0 [ 383.375357][T10601] create_new_namespaces+0x3ea/0xad0 [ 383.375401][T10601] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 383.375440][T10601] ksys_unshare+0x45b/0xa40 [ 383.375483][T10601] ? __pfx_ksys_unshare+0x10/0x10 [ 383.375523][T10601] ? xfd_validate_state+0x5d/0x180 [ 383.375574][T10601] ? rcu_is_watching+0x12/0xc0 [ 383.375612][T10601] __x64_sys_unshare+0x31/0x40 [ 383.375654][T10601] do_syscall_64+0xcd/0x230 [ 383.375696][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.375728][T10601] RIP: 0033:0x7f387358e969 [ 383.375752][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.375785][T10601] RSP: 002b:00007f38743f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 383.375815][T10601] RAX: ffffffffffffffda RBX: 00007f38737b5fa0 RCX: 00007f387358e969 [ 383.375837][T10601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 383.375856][T10601] RBP: 00007f3873610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 383.375876][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.375895][T10601] R13: 0000000000000000 R14: 00007f38737b5fa0 R15: 00007fff837559b8 [ 383.375951][T10601] [ 383.376023][T10601] audit: cannot initialize netlink socket in namespace [ 383.746660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.753233][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.462059][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 384.787593][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.787613][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.787666][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 384.977546][T10615] FAULT_INJECTION: forcing a failure. [ 384.977546][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 385.025721][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.3.1028 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 385.025774][T10615] Tainted: [U]=USER [ 385.025784][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 385.025802][T10615] Call Trace: [ 385.025812][T10615] [ 385.025823][T10615] dump_stack_lvl+0x16c/0x1f0 [ 385.025866][T10615] should_fail_ex+0x512/0x640 [ 385.025909][T10615] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 385.025965][T10615] should_failslab+0xc2/0x120 [ 385.026003][T10615] __kmalloc_cache_noprof+0x6a/0x3e0 [ 385.026053][T10615] ? find_held_lock+0x2b/0x80 [ 385.026089][T10615] ? udmabuf_create+0xbf/0x11a0 [ 385.026125][T10615] udmabuf_create+0xbf/0x11a0 [ 385.026156][T10615] ? __lock_acquire+0xaa4/0x1ba0 [ 385.026200][T10615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.026248][T10615] ? __pfx_udmabuf_create+0x10/0x10 [ 385.026278][T10615] ? find_held_lock+0x2b/0x80 [ 385.026306][T10615] ? __might_fault+0xe3/0x190 [ 385.026340][T10615] ? __might_fault+0xe3/0x190 [ 385.026371][T10615] ? __might_fault+0x13b/0x190 [ 385.026423][T10615] udmabuf_ioctl+0x192/0x310 [ 385.026453][T10615] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 385.026481][T10615] ? find_held_lock+0x2b/0x80 [ 385.026524][T10615] ? __fget_files+0x20e/0x3c0 [ 385.026576][T10615] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 385.026608][T10615] __x64_sys_ioctl+0x190/0x200 [ 385.026653][T10615] do_syscall_64+0xcd/0x230 [ 385.026695][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.026727][T10615] RIP: 0033:0x7f76a718e969 [ 385.026751][T10615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.026781][T10615] RSP: 002b:00007f76a8033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.026811][T10615] RAX: ffffffffffffffda RBX: 00007f76a73b5fa0 RCX: 00007f76a718e969 [ 385.026831][T10615] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 385.026851][T10615] RBP: 00007f76a8033090 R08: 0000000000000000 R09: 0000000000000000 [ 385.026870][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.026889][T10615] R13: 0000000000000000 R14: 00007f76a73b5fa0 R15: 00007ffecb07ecf8 [ 385.026930][T10615] [ 385.971399][ T55] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 385.971568][ T55] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 385.991079][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 385.991129][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x74 [ 386.000035][ T55] Bluetooth: hci2: adv larger than maximum supported [ 386.007405][ T55] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 386.014360][ T55] Bluetooth: hci2: adv larger than maximum supported [ 386.021566][ T55] Bluetooth: hci2: adv larger than maximum supported [ 386.028390][ T55] Bluetooth: hci2: Malformed LE Event: 0x0d [ 386.152499][T10596] kernel write not supported for file /status (pid: 10596 comm: syz.2.1025) [ 386.873222][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.488012][T10634] kernel write not supported for file /status (pid: 10634 comm: syz.2.1032) [ 387.610416][T10569] kernel write not supported for file /status (pid: 10569 comm: syz.2.1019) [ 387.654346][T10660] FAULT_INJECTION: forcing a failure. [ 387.654346][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 387.680188][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.0.1039 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 387.680235][T10660] Tainted: [U]=USER [ 387.680245][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 387.680263][T10660] Call Trace: [ 387.680273][T10660] [ 387.680284][T10660] dump_stack_lvl+0x16c/0x1f0 [ 387.680326][T10660] should_fail_ex+0x512/0x640 [ 387.680369][T10660] ? __kvmalloc_node_noprof+0x122/0x600 [ 387.680405][T10660] should_failslab+0xc2/0x120 [ 387.680442][T10660] __kvmalloc_node_noprof+0x135/0x600 [ 387.680475][T10660] ? udmabuf_create+0x2dd/0x11a0 [ 387.680512][T10660] ? udmabuf_create+0x2dd/0x11a0 [ 387.680539][T10660] udmabuf_create+0x2dd/0x11a0 [ 387.680572][T10660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.680620][T10660] ? __pfx_udmabuf_create+0x10/0x10 [ 387.680650][T10660] ? find_held_lock+0x2b/0x80 [ 387.680677][T10660] ? __might_fault+0xe3/0x190 [ 387.680710][T10660] ? __might_fault+0xe3/0x190 [ 387.680741][T10660] ? __might_fault+0x13b/0x190 [ 387.680797][T10660] udmabuf_ioctl+0x192/0x310 [ 387.680826][T10660] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 387.680854][T10660] ? find_held_lock+0x2b/0x80 [ 387.680893][T10660] ? __fget_files+0x20e/0x3c0 [ 387.680946][T10660] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 387.680979][T10660] __x64_sys_ioctl+0x190/0x200 [ 387.681022][T10660] do_syscall_64+0xcd/0x230 [ 387.681062][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.681092][T10660] RIP: 0033:0x7f5373b8e969 [ 387.681116][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.681146][T10660] RSP: 002b:00007f5374971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.681175][T10660] RAX: ffffffffffffffda RBX: 00007f5373db5fa0 RCX: 00007f5373b8e969 [ 387.681195][T10660] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 387.681215][T10660] RBP: 00007f5374971090 R08: 0000000000000000 R09: 0000000000000000 [ 387.681234][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.681252][T10660] R13: 0000000000000000 R14: 00007f5373db5fa0 R15: 00007ffd5845c878 [ 387.681291][T10660] [ 388.538816][T10664] kernel write not supported for file /status (pid: 10664 comm: syz.2.1040) [ 389.090192][T10673] kernel write not supported for file /status (pid: 10673 comm: syz.2.1044) [ 389.268927][T10678] kernel write not supported for file /status (pid: 10678 comm: syz.2.1045) [ 389.503891][T10685] kernel write not supported for file /status (pid: 10685 comm: syz.2.1047) [ 389.625729][T10690] kernel write not supported for file /status (pid: 10690 comm: syz.2.1048) [ 390.525187][T10709] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 390.661311][T10697] kernel write not supported for file /status (pid: 10697 comm: syz.2.1050) [ 390.877168][T10725] kAFS: Invalid Command on /proc/fs/afs/cells file [ 391.530558][T10737] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 391.530558][T10737] M' is too long [ 391.553159][T10737] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 391.553159][T10737] W ' is too long [ 392.120928][T10723] kernel write not supported for file /status (pid: 10723 comm: syz.2.1055) [ 392.620086][T10750] kernel write not supported for file /status (pid: 10750 comm: syz.2.1061) [ 392.947759][T10772] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 393.070955][T10777] snd_aloop snd_aloop.0: control 16781581:65533:4:'x?F/zF˷fC:0 is already present [ 393.840498][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 393.949343][T10795] ima: policy update failed [ 393.971867][ T30] audit: type=1802 audit(6040673581.582:16): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1062" res=0 errno=0 [ 395.042750][T10768] kernel write not supported for file /status (pid: 10768 comm: syz.2.1062) [ 395.200920][T10826] FAULT_INJECTION: forcing a failure. [ 395.200920][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 395.250337][T10826] CPU: 0 UID: 0 PID: 10826 Comm: syz.2.1073 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 395.250384][T10826] Tainted: [U]=USER [ 395.250394][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 395.250410][T10826] Call Trace: [ 395.250419][T10826] [ 395.250429][T10826] dump_stack_lvl+0x16c/0x1f0 [ 395.250468][T10826] should_fail_ex+0x512/0x640 [ 395.250506][T10826] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 395.250542][T10826] should_failslab+0xc2/0x120 [ 395.250576][T10826] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 395.250608][T10826] ? lockdep_init_map_type+0x5c/0x280 [ 395.250644][T10826] ? __d_alloc+0x31/0xaa0 [ 395.250677][T10826] __d_alloc+0x31/0xaa0 [ 395.250710][T10826] d_alloc_pseudo+0x1c/0xc0 [ 395.250747][T10826] alloc_file_pseudo+0xcf/0x230 [ 395.250785][T10826] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 395.250821][T10826] ? alloc_fd+0x471/0x7d0 [ 395.250875][T10826] sock_alloc_file+0x50/0x210 [ 395.250906][T10826] __sys_socket+0x1c0/0x260 [ 395.250944][T10826] ? __pfx___sys_socket+0x10/0x10 [ 395.250982][T10826] ? rcu_is_watching+0x12/0xc0 [ 395.251014][T10826] __x64_sys_socket+0x72/0xb0 [ 395.251056][T10826] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.251089][T10826] do_syscall_64+0xcd/0x230 [ 395.251126][T10826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.251156][T10826] RIP: 0033:0x7f7a4bd8e969 [ 395.251176][T10826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.251205][T10826] RSP: 002b:00007f7a4cc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 395.251231][T10826] RAX: ffffffffffffffda RBX: 00007f7a4bfb6160 RCX: 00007f7a4bd8e969 [ 395.251250][T10826] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 395.251267][T10826] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 395.251285][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.251303][T10826] R13: 0000000000000000 R14: 00007f7a4bfb6160 R15: 00007ffdb3b4c5e8 [ 395.251340][T10826] [ 395.567847][T10818] ima: policy update failed [ 395.572576][ T30] audit: type=1802 audit(6040673583.181:17): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1073" res=0 errno=0 [ 395.640155][T10823] kernel write not supported for file /status (pid: 10823 comm: syz.2.1073) [ 396.000208][T10815] random: crng reseeded on system resumption [ 396.079780][T10861] kernel write not supported for file /status (pid: 10861 comm: syz.2.1074) [ 396.414704][T10874] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 396.541426][T10867] kernel write not supported for file /status (pid: 10867 comm: syz.2.1075) [ 397.488202][T10881] kernel write not supported for file /status (pid: 10881 comm: syz.2.1080) [ 398.784704][T10903] kernel write not supported for file /status (pid: 10903 comm: syz.2.1081) [ 398.949819][T10927] kernel write not supported for file /status (pid: 10927 comm: syz.2.1088) [ 399.213218][T10937] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 399.414678][T10931] kernel write not supported for file /status (pid: 10931 comm: syz.2.1089) [ 399.718991][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.755000][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.681930][T10946] kernel write not supported for file /status (pid: 10946 comm: syz.2.1092) [ 400.762753][T10967] kernel write not supported for file /status (pid: 10967 comm: syz.2.1096) [ 401.315310][T10973] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1097'. [ 401.540678][T10981] kernel write not supported for file /status (pid: 10981 comm: syz.2.1097) [ 401.774899][T10986] kernel write not supported for file /status (pid: 10986 comm: syz.2.1100) [ 402.011102][T10993] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 402.182922][T10993] kernel write not supported for file /status (pid: 10993 comm: syz.2.1101) [ 402.296472][T10997] FAULT_INJECTION: forcing a failure. [ 402.296472][T10997] name failslab, interval 1, probability 0, space 0, times 0 [ 402.343122][T10997] CPU: 0 UID: 0 PID: 10997 Comm: syz.2.1103 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 402.343175][T10997] Tainted: [U]=USER [ 402.343185][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.343203][T10997] Call Trace: [ 402.343213][T10997] [ 402.343224][T10997] dump_stack_lvl+0x16c/0x1f0 [ 402.343266][T10997] should_fail_ex+0x512/0x640 [ 402.343308][T10997] ? __kvmalloc_node_noprof+0x122/0x600 [ 402.343343][T10997] should_failslab+0xc2/0x120 [ 402.343385][T10997] __kvmalloc_node_noprof+0x135/0x600 [ 402.343438][T10997] ? udmabuf_create+0x3e7/0x11a0 [ 402.343483][T10997] ? udmabuf_create+0x3e7/0x11a0 [ 402.343512][T10997] udmabuf_create+0x3e7/0x11a0 [ 402.343552][T10997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 402.343600][T10997] ? __pfx_udmabuf_create+0x10/0x10 [ 402.343632][T10997] ? find_held_lock+0x2b/0x80 [ 402.343659][T10997] ? __might_fault+0xe3/0x190 [ 402.343693][T10997] ? __might_fault+0xe3/0x190 [ 402.343725][T10997] ? __might_fault+0x13b/0x190 [ 402.343777][T10997] udmabuf_ioctl+0x192/0x310 [ 402.343807][T10997] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 402.343836][T10997] ? find_held_lock+0x2b/0x80 [ 402.343875][T10997] ? __fget_files+0x20e/0x3c0 [ 402.343930][T10997] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 402.343964][T10997] __x64_sys_ioctl+0x190/0x200 [ 402.344010][T10997] do_syscall_64+0xcd/0x230 [ 402.344053][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.344084][T10997] RIP: 0033:0x7f7a4bd8e969 [ 402.344108][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.344139][T10997] RSP: 002b:00007f7a4ccc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.344168][T10997] RAX: ffffffffffffffda RBX: 00007f7a4bfb5fa0 RCX: 00007f7a4bd8e969 [ 402.344189][T10997] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 402.344209][T10997] RBP: 00007f7a4ccc9090 R08: 0000000000000000 R09: 0000000000000000 [ 402.344229][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.344247][T10997] R13: 0000000000000000 R14: 00007f7a4bfb5fa0 R15: 00007ffdb3b4c5e8 [ 402.344288][T10997] [ 402.627443][T10997] kernel write not supported for file /status (pid: 10997 comm: syz.2.1103) [ 403.045704][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 403.578818][T11002] kernel write not supported for file /status (pid: 11002 comm: syz.2.1105) [ 403.756342][T11015] kernel write not supported for file /status (pid: 11015 comm: syz.2.1106) [ 404.120935][T11021] netlink: set zone limit has 8 unknown bytes [ 404.214785][T11020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.221436][T11020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.252427][T11020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.260961][T11020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.405760][T11025] kernel write not supported for file /status (pid: 11025 comm: syz.2.1107) [ 404.742219][T11036] kernel write not supported for file /status (pid: 11036 comm: syz.2.1111) [ 405.549857][T11043] FAULT_INJECTION: forcing a failure. [ 405.549857][T11043] name failslab, interval 1, probability 0, space 0, times 0 [ 405.589941][T11043] CPU: 1 UID: 0 PID: 11043 Comm: syz.0.1113 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 405.589992][T11043] Tainted: [U]=USER [ 405.590002][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.590020][T11043] Call Trace: [ 405.590030][T11043] [ 405.590041][T11043] dump_stack_lvl+0x16c/0x1f0 [ 405.590088][T11043] should_fail_ex+0x512/0x640 [ 405.590132][T11043] ? __kmalloc_noprof+0xbf/0x510 [ 405.590166][T11043] ? xfrm_hash_alloc+0xd1/0x100 [ 405.590202][T11043] should_failslab+0xc2/0x120 [ 405.590249][T11043] __kmalloc_noprof+0xd2/0x510 [ 405.590283][T11043] ? xfrm_state_init+0x371/0x630 [ 405.590328][T11043] xfrm_hash_alloc+0xd1/0x100 [ 405.590366][T11043] xfrm_net_init+0x35f/0xcc0 [ 405.590413][T11043] ? __pfx_xfrm_net_init+0x10/0x10 [ 405.590453][T11043] ops_init+0x1df/0x5f0 [ 405.590490][T11043] setup_net+0x21e/0x850 [ 405.590525][T11043] ? __pfx_setup_net+0x10/0x10 [ 405.590553][T11043] ? lockdep_init_map_type+0x5c/0x280 [ 405.590593][T11043] ? __pfx_down_read_killable+0x10/0x10 [ 405.590640][T11043] ? debug_mutex_init+0x37/0x70 [ 405.590694][T11043] copy_net_ns+0x2a6/0x5f0 [ 405.590734][T11043] create_new_namespaces+0x3ea/0xad0 [ 405.590779][T11043] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 405.590818][T11043] ksys_unshare+0x45b/0xa40 [ 405.590858][T11043] ? __pfx_ksys_unshare+0x10/0x10 [ 405.590898][T11043] ? xfd_validate_state+0x5d/0x180 [ 405.590951][T11043] ? rcu_is_watching+0x12/0xc0 [ 405.590988][T11043] __x64_sys_unshare+0x31/0x40 [ 405.591029][T11043] do_syscall_64+0xcd/0x230 [ 405.591071][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.591100][T11043] RIP: 0033:0x7f5373b8e969 [ 405.591125][T11043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.591155][T11043] RSP: 002b:00007f5374971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 405.591186][T11043] RAX: ffffffffffffffda RBX: 00007f5373db5fa0 RCX: 00007f5373b8e969 [ 405.591208][T11043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 405.591236][T11043] RBP: 00007f5373c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 405.591256][T11043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.591275][T11043] R13: 0000000000000000 R14: 00007f5373db5fa0 R15: 00007ffd5845c878 [ 405.591316][T11043] [ 406.233558][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 406.233587][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.313021][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.319334][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.702450][T11050] warn_unsupported: 1 callbacks suppressed [ 407.702475][T11050] kernel write not supported for file /status (pid: 11050 comm: syz.2.1115) [ 408.616272][T11076] kernel write not supported for file /status (pid: 11076 comm: syz.2.1120) [ 409.024659][T11090] kernel write not supported for file /status (pid: 11090 comm: syz.2.1123) [ 409.219927][T11100] kernel write not supported for file /status (pid: 11100 comm: syz.2.1125) [ 409.318239][T11098] ksmbd: Unknown IPC event: 14, ignore. [ 410.051010][T11113] warn_alloc: 2 callbacks suppressed [ 410.051025][T11113] syz.2.1126: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 410.072696][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.2.1126 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 410.072743][T11113] Tainted: [U]=USER [ 410.072753][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 410.072772][T11113] Call Trace: [ 410.072782][T11113] [ 410.072793][T11113] dump_stack_lvl+0x16c/0x1f0 [ 410.072838][T11113] warn_alloc+0x248/0x3a0 [ 410.072875][T11113] ? __pfx_warn_alloc+0x10/0x10 [ 410.072913][T11113] ? alloc_pages_mpol+0x25a/0x550 [ 410.072961][T11113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 410.073017][T11113] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 410.073086][T11113] ? n_tty_open+0x1a/0x170 [ 410.073134][T11113] ? __ldsem_down_write_nested+0x10e/0x850 [ 410.073173][T11113] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.073221][T11113] ? n_tty_open+0x1a/0x170 [ 410.073251][T11113] vzalloc_noprof+0x6b/0x90 [ 410.073285][T11113] ? n_tty_open+0x1a/0x170 [ 410.073313][T11113] ? __pfx_n_tty_open+0x10/0x10 [ 410.073340][T11113] n_tty_open+0x1a/0x170 [ 410.073370][T11113] ? __pfx_n_tty_open+0x10/0x10 [ 410.073416][T11113] tty_ldisc_open+0x9c/0x120 [ 410.073439][T11113] tty_ldisc_setup+0x40/0x100 [ 410.073462][T11113] tty_init_dev.part.0+0x1ec/0x500 [ 410.073509][T11113] tty_open+0xa50/0xf90 [ 410.073557][T11113] ? __pfx_tty_open+0x10/0x10 [ 410.073596][T11113] ? chrdev_open+0x10b/0x6a0 [ 410.073634][T11113] ? __pfx_tty_open+0x10/0x10 [ 410.073673][T11113] chrdev_open+0x231/0x6a0 [ 410.073704][T11113] ? __pfx_apparmor_file_open+0x10/0x10 [ 410.073744][T11113] ? __pfx_chrdev_open+0x10/0x10 [ 410.073780][T11113] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 410.073822][T11113] do_dentry_open+0x741/0x1c10 [ 410.073846][T11113] ? __pfx_chrdev_open+0x10/0x10 [ 410.073876][T11113] vfs_open+0x82/0x3f0 [ 410.073909][T11113] path_openat+0x1e5e/0x2d40 [ 410.073941][T11113] ? __pfx_path_openat+0x10/0x10 [ 410.073978][T11113] do_filp_open+0x20b/0x470 [ 410.074000][T11113] ? __pfx_do_filp_open+0x10/0x10 [ 410.074044][T11113] ? alloc_fd+0x471/0x7d0 [ 410.074088][T11113] do_sys_openat2+0x11b/0x1d0 [ 410.074117][T11113] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.074160][T11113] __x64_sys_openat+0x174/0x210 [ 410.074191][T11113] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.074225][T11113] ? rcu_is_watching+0x12/0xc0 [ 410.074255][T11113] do_syscall_64+0xcd/0x230 [ 410.074286][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.074309][T11113] RIP: 0033:0x7f7a4bd8e969 [ 410.074327][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.074350][T11113] RSP: 002b:00007f7a4cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.074371][T11113] RAX: ffffffffffffffda RBX: 00007f7a4bfb6080 RCX: 00007f7a4bd8e969 [ 410.074387][T11113] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 410.074401][T11113] RBP: 00007f7a4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 410.074416][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.074429][T11113] R13: 0000000000000000 R14: 00007f7a4bfb6080 R15: 00007ffdb3b4c5e8 [ 410.074459][T11113] [ 410.444603][T11113] Mem-Info: [ 410.448307][T11113] active_anon:38809 inactive_anon:69349 isolated_anon:0 [ 410.448307][T11113] active_file:15808 inactive_file:38391 isolated_file:0 [ 410.448307][T11113] unevictable:768 dirty:337 writeback:0 [ 410.448307][T11113] slab_reclaimable:10838 slab_unreclaimable:97781 [ 410.448307][T11113] mapped:32950 shmem:87492 pagetables:974 [ 410.448307][T11113] sec_pagetables:0 bounce:0 [ 410.448307][T11113] kernel_misc_reclaimable:0 [ 410.448307][T11113] free:1237309 free_pcp:2461 free_cma:0 [ 410.503642][T11113] Node 0 active_anon:155836kB inactive_anon:277396kB active_file:63232kB inactive_file:153560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131800kB dirty:1348kB writeback:0kB shmem:349036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.713797][T11113] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.766686][T11113] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.873980][T11113] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 410.903642][T11113] Node 0 DMA32 free:1018712kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:172652kB inactive_anon:274012kB active_file:63280kB inactive_file:151732kB unevictable:1536kB writepending:1352kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:960kB local_pcp:160kB free_cma:0kB [ 410.943646][T11113] lowmem_reserve[]: 0 0 1 1 1 [ 410.963776][T11113] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 411.049189][T11113] lowmem_reserve[]: 0 0 0 0 0 [ 411.083642][T11113] Node 1 Normal free:3906056kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:3908kB local_pcp:636kB free_cma:0kB [ 411.133710][T11113] lowmem_reserve[]: 0 0 0 0 0 [ 411.140857][T11113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 411.284275][T11113] Node 0 DMA32: 996*4kB (UME) 474*8kB (UME) 45*16kB (UME) 240*32kB (UME) 173*64kB (UME) 39*128kB (UME) 22*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 236*4096kB (M) = 1017328kB [ 411.307795][T11113] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 411.321019][T11113] Node 1 Normal: 218*4kB (UME) 60*8kB (UME) 44*16kB (UME) 208*32kB (UME) 92*64kB (UME) 44*128kB (UE) 15*256kB (UE) 8*512kB (UM) 1*1024kB (E) 5*2048kB (UME) 944*4096kB (UM) = 3906056kB [ 411.352301][T11113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.362376][T11113] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 411.371955][T11113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.381974][T11113] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 411.391725][T11113] 145593 total pagecache pages [ 411.397228][T11113] 1 pages in swap cache [ 411.401983][T11113] Free swap = 58620kB [ 411.406628][T11113] Total swap = 124996kB [ 411.410946][T11113] 2097051 pages RAM [ 411.414989][T11113] 0 pages HighMem/MovableOnly [ 411.419945][T11113] 428892 pages reserved [ 411.424285][T11113] 0 pages cma reserved [ 411.428827][T11113] tty tty12: ldisc open failed (-12), clearing slot 11 [ 411.789058][T11113] kernel write not supported for file /status (pid: 11113 comm: syz.2.1126) [ 411.982386][T11130] kernel write not supported for file /status (pid: 11130 comm: syz.2.1132) [ 412.163606][T11140] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 412.258216][T11139] kernel write not supported for file /status (pid: 11139 comm: syz.2.1133) [ 413.318902][T11155] ecryptfs_miscdev_write: Error while inspecting packet size [ 413.321798][T11150] Process accounting paused [ 417.854579][T10828] syz.1.1072 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 417.865690][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.1.1072 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 417.865740][T10828] Tainted: [U]=USER [ 417.865749][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 417.865767][T10828] Call Trace: [ 417.865777][T10828] [ 417.865789][T10828] dump_stack_lvl+0x16c/0x1f0 [ 417.865830][T10828] dump_header+0x101/0x930 [ 417.865874][T10828] oom_kill_process+0x270/0xa60 [ 417.865917][T10828] out_of_memory+0x350/0x1700 [ 417.865965][T10828] ? __pfx_out_of_memory+0x10/0x10 [ 417.866013][T10828] mem_cgroup_out_of_memory+0x205/0x270 [ 417.866058][T10828] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 417.866120][T10828] ? do_raw_spin_unlock+0x172/0x230 [ 417.866172][T10828] try_charge_memcg+0xa07/0x10c0 [ 417.866219][T10828] ? __pfx_try_charge_memcg+0x10/0x10 [ 417.866256][T10828] ? __print_lock_name+0x51/0xe0 [ 417.866286][T10828] ? rcu_read_unlock+0x17/0x60 [ 417.866342][T10828] charge_memcg+0x8a/0x230 [ 417.866380][T10828] __mem_cgroup_charge+0x2b/0x1e0 [ 417.866424][T10828] shmem_alloc_and_add_folio+0x514/0xc20 [ 417.866457][T10828] ? __rcu_read_unlock+0x2b4/0x580 [ 417.866506][T10828] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 417.866547][T10828] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 417.866594][T10828] shmem_get_folio_gfp+0x687/0x1530 [ 417.866636][T10828] ? __lock_acquire+0xaa4/0x1ba0 [ 417.866675][T10828] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 417.866721][T10828] ? __pte_offset_map_lock+0x155/0x2f0 [ 417.866770][T10828] shmem_write_begin+0x160/0x300 [ 417.866811][T10828] ? __pfx_shmem_write_begin+0x10/0x10 [ 417.866861][T10828] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 417.866906][T10828] ? __pfx_timestamp_truncate+0x10/0x10 [ 417.866940][T10828] generic_perform_write+0x3cd/0x930 [ 417.866987][T10828] ? __pfx_generic_perform_write+0x10/0x10 [ 417.867024][T10828] ? inode_needs_update_time.part.0+0x191/0x270 [ 417.867065][T10828] shmem_file_write_iter+0x10e/0x140 [ 417.867106][T10828] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 417.867145][T10828] __kernel_write_iter+0x317/0xa90 [ 417.867176][T10828] ? __pfx___kernel_write_iter+0x10/0x10 [ 417.867202][T10828] ? __up_read+0x1f8/0x750 [ 417.867247][T10828] ? dump_user_range+0x73d/0xb30 [ 417.867285][T10828] ? copy_mc_enhanced_fast_string+0x6/0xf [ 417.867344][T10828] dump_user_range+0x418/0xb30 [ 417.867393][T10828] ? __pfx_dump_user_range+0x10/0x10 [ 417.867434][T10828] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 417.867471][T10828] ? __pfx_writenote+0x10/0x10 [ 417.867523][T10828] elf_core_dump+0x288a/0x3a90 [ 417.867585][T10828] ? __pfx_elf_core_dump+0x10/0x10 [ 417.867624][T10828] ? kasan_save_stack+0x42/0x60 [ 417.867651][T10828] ? kasan_save_stack+0x33/0x60 [ 417.867678][T10828] ? kasan_save_track+0x14/0x30 [ 417.867704][T10828] ? __kasan_kmalloc+0xaa/0xb0 [ 417.867731][T10828] ? do_coredump+0x17aa/0x4480 [ 417.867765][T10828] ? get_signal+0x22e3/0x26d0 [ 417.867794][T10828] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 417.867842][T10828] ? 0xffffffffff600000 [ 417.867931][T10828] ? do_coredump+0x3183/0x4480 [ 417.867982][T10828] do_coredump+0x3183/0x4480 [ 417.868038][T10828] ? __pfx_do_coredump+0x10/0x10 [ 417.868082][T10828] ? stack_trace_save+0x8e/0xc0 [ 417.868112][T10828] ? __pfx_stack_trace_save+0x10/0x10 [ 417.868142][T10828] ? stack_depot_save_flags+0x28/0xa50 [ 417.868188][T10828] ? __lock_acquire+0xaa4/0x1ba0 [ 417.868236][T10828] ? __kasan_slab_free+0x51/0x70 [ 417.868267][T10828] ? kmem_cache_free+0x2d4/0x4d0 [ 417.868296][T10828] ? __sigqueue_free+0xba/0x2a0 [ 417.868343][T10828] ? get_signal+0xcba/0x26d0 [ 417.868374][T10828] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 417.868473][T10828] ? proc_coredump_connector+0x2d1/0x4f0 [ 417.868520][T10828] ? __pfx_proc_coredump_connector+0x10/0x10 [ 417.868577][T10828] ? rcu_is_watching+0x12/0xc0 [ 417.868611][T10828] get_signal+0x22e3/0x26d0 [ 417.868655][T10828] ? force_sig_fault+0xc4/0x100 [ 417.868690][T10828] ? __pfx_get_signal+0x10/0x10 [ 417.868738][T10828] arch_do_signal_or_restart+0x8f/0x7a0 [ 417.868780][T10828] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 417.868821][T10828] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 417.868892][T10828] irqentry_exit_to_user_mode+0x13f/0x280 [ 417.868933][T10828] asm_exc_page_fault+0x26/0x30 [ 417.868962][T10828] RIP: 0033:0x1 [ 417.868982][T10828] Code: Unable to access opcode bytes at 0xffffffffffffffd7. [ 417.868996][T10828] RSP: 002b:0000000000000002 EFLAGS: 00010217 [ 417.869020][T10828] RAX: 0000000000000000 RBX: 00007f38737b6240 RCX: 00007f387358e969 [ 417.869040][T10828] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 417.869059][T10828] RBP: 00007f3873610ab1 R08: 0000000000000003 R09: 0000000000000000 [ 417.869077][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.869096][T10828] R13: 0000000000000001 R14: 00007f38737b6240 R15: 00007fff837559b8 [ 417.869137][T10828] [ 417.869227][T10828] memory: usage 307200kB, limit 307200kB, failcnt 19318 [ 418.692197][T10828] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 418.721363][T10828] kmem: usage 3688kB, limit 9007199254740988kB, failcnt 0 [ 418.745151][T10828] Memory cgroup stats for /syz1: [ 418.745398][T10828] cache 310657024 [ 418.809413][T10828] rss 139264 [ 418.812766][T10828] rss_huge 0 [ 418.848698][T10828] shmem 310611968 [ 418.891472][T10828] mapped_file 0 [ 418.906011][T10828] dirty 0 [ 418.908994][T10828] writeback 0 [ 418.912300][T10828] workingset_refault_anon 3752 [ 418.973850][T10828] workingset_refault_file 886 [ 419.021618][T10828] swap 127995904 [ 419.087180][T10828] swapcached 0 [ 419.143726][T10828] pgpgin 595811 [ 419.147250][T10828] pgpgout 521977 [ 419.150899][T10828] pgfault 281239 [ 419.252128][T10828] pgmajfault 668 [ 419.292780][T10828] inactive_anon 28430336 [ 419.413714][T10828] active_anon 282058752 [ 419.460021][T10828] inactive_file 45056 [ 419.489060][T10828] active_file 0 [ 419.497602][T10828] unevictable 0 [ 419.505766][T10828] hierarchical_memory_limit 314572800 [ 419.543029][T10828] hierarchical_memsw_limit 9223372036854771712 [ 419.584097][T10828] total_cache 310657024 [ 419.609720][T10828] total_rss 139264 [ 419.614573][T10828] total_rss_huge 0 [ 419.653216][T10828] total_shmem 310611968 [ 419.760705][T10828] total_mapped_file 0 [ 419.780115][T10828] total_dirty 0 [ 419.803551][T10828] total_writeback 0 [ 419.807410][T10828] total_workingset_refault_anon 3752 [ 419.812720][T10828] total_workingset_refault_file 886 [ 419.900404][T10828] total_swap 127995904 [ 419.978745][T10828] total_swapcached 0 [ 419.982704][T10828] total_pgpgin 595811 [ 420.046843][T10828] total_pgpgout 521977 [ 420.050947][T10828] total_pgfault 281239 [ 420.113534][T10828] total_pgmajfault 668 [ 420.176894][T10828] total_inactive_anon 28430336 [ 420.181720][T10828] total_active_anon 282058752 [ 420.230775][T10828] total_inactive_file 45056 [ 420.235850][T10828] total_active_file 0 [ 420.239993][T10828] total_unevictable 0 [ 420.244299][T10828] anon_cost 0 [ 420.247635][T10828] file_cost 0 [ 420.251024][T10828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1072,pid=10843,uid=0 [ 420.267834][T10828] Memory cgroup out of memory: Killed process 10843 (syz.1.1072) total-vm:102732kB, anon-rss:1072kB, file-rss:29700kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 421.262683][T11274] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 421.262683][T11274] program syz.3.1159 not setting count and/or reply_len properly [ 421.391897][ T979] BUG: sleeping function called from invalid context at ./include/linux/pagemap.h:1135 [ 421.401927][ T979] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 979, name: kworker/1:2 [ 421.411082][ T979] preempt_count: 1, expected: 0 [ 421.416055][ T979] RCU nest depth: 0, expected: 0 [ 421.421020][ T979] 3 locks held by kworker/1:2/979: [ 421.426167][ T979] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 421.436716][ T979] #1: ffffc90003a37d18 ((work_completion)(&sfp->ew.work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 421.448141][ T979] #2: ffff888079a0c080 (&sfp->rq_list_lock){..-.}-{3:3}, at: sg_remove_sfp_usercontext+0x81/0x590 [ 421.458941][ T979] irq event stamp: 967664 [ 421.463311][ T979] hardirqs last enabled at (967663): [] _raw_spin_unlock_irq+0x23/0x50 [ 421.473286][ T979] hardirqs last disabled at (967664): [] _raw_write_lock_irqsave+0x52/0x60 [ 421.483511][ T979] softirqs last enabled at (967564): [] wg_packet_tx_worker+0x535/0x810 [ 421.493549][ T979] softirqs last disabled at (967560): [] wg_packet_tx_worker+0x237/0x810 [ 421.503582][ T979] Preemption disabled at: [ 421.503595][ T979] [<0000000000000000>] 0x0 [ 421.512462][ T979] CPU: 1 UID: 0 PID: 979 Comm: kworker/1:2 Tainted: G U 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 421.512499][ T979] Tainted: [U]=USER [ 421.512506][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 421.512522][ T979] Workqueue: events sg_remove_sfp_usercontext [ 421.512557][ T979] Call Trace: [ 421.512566][ T979] [ 421.512574][ T979] dump_stack_lvl+0x116/0x1f0 [ 421.512604][ T979] __might_resched+0x3c0/0x5e0 [ 421.512632][ T979] ? __pfx___might_resched+0x10/0x10 [ 421.512657][ T979] ? bio_first_folio+0x3de/0x640 [ 421.512698][ T979] __bio_release_pages+0x312/0x3b0 [ 421.512738][ T979] ? __pfx___bio_release_pages+0x10/0x10 [ 421.512775][ T979] ? __lock_acquire+0xaa4/0x1ba0 [ 421.512817][ T979] blk_rq_unmap_user+0x3be/0x980 [ 421.512846][ T979] ? __lock_acquire+0xaa4/0x1ba0 [ 421.512880][ T979] ? __pfx_blk_rq_unmap_user+0x10/0x10 [ 421.512913][ T979] ? do_raw_write_lock+0x11c/0x3a0 [ 421.512949][ T979] ? __pfx_do_raw_write_lock+0x10/0x10 [ 421.512989][ T979] sg_finish_rem_req+0xde/0x590 [ 421.513023][ T979] sg_remove_sfp_usercontext+0x103/0x590 [ 421.513064][ T979] process_one_work+0x9cc/0x1b70 [ 421.513113][ T979] ? __pfx_process_one_work+0x10/0x10 [ 421.513158][ T979] ? assign_work+0x1a0/0x250 [ 421.513194][ T979] worker_thread+0x6c8/0xf10 [ 421.513240][ T979] ? __kthread_parkme+0x19e/0x250 [ 421.513269][ T979] ? __pfx_worker_thread+0x10/0x10 [ 421.513305][ T979] kthread+0x3c2/0x780 [ 421.513338][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513380][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513412][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513462][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513500][ T979] ? rcu_is_watching+0x12/0xc0 [ 421.513529][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513572][ T979] ret_from_fork+0x45/0x80 [ 421.513619][ T979] ? __pfx_kthread+0x10/0x10 [ 421.513663][ T979] ret_from_fork_asm+0x1a/0x30 [ 421.513728][ T979] [ 422.166585][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 422.190607][T10843] syz.1.1072 (10843) used greatest stack depth: 20264 bytes left [ 423.471071][T10839] syz.1.1072 (10839) used greatest stack depth: 20200 bytes left [ 423.774333][T10834] syz.1.1072 (10834) used greatest stack depth: 19032 bytes left [ 423.981777][T10835] syz.1.1072 (10835) used greatest stack depth: 17880 bytes left