last executing test programs: 11.244019865s ago: executing program 1 (id=5413): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (fail_nth: 3) 11.208676901s ago: executing program 0 (id=5414): sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000074bf5807044fca3941249cf018d781ac03e38f1c8e1b76f2307fce9b5bb62a911109fc2e76f2a483d1431e17b91b5dcf724c9a1abda57f9b2a8d01e0e82ff95f666d2e9c6f035f13c0d94b0f6b982adac875c7951595317c4c1b1960cbfd8ac309c520e591f0fe2742cc77c824878bddac7d", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf250b000000080002000800000008000200000200000800020089000000080002000900000008000200f9760000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon38\x00', 0x400, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x600, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, &(0x7f0000000200)="ea8e") ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) syz_clone3(&(0x7f0000000100)={0x80a08680, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x801, 0x1) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose7/statistics/tx_bytes\x00', 0x20ea00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x5) sendfile$auto(r2, r0, 0x0, 0x1f8) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/binderfs/binder0\x00', 0x44840, 0x0) ioctl$auto(r3, 0x3, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r1, 0x0, 0x537f0145) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x1a, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4008804}, 0x4051) 9.006098883s ago: executing program 1 (id=5417): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) socket(0x6, 0x2, 0x80000000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) preadv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0), 0x82}, 0x8, 0x6, 0x5) fstatfs$auto(0x3, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0xc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0x19) socket(0x10, 0x2, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x18, 0x0) bpf$auto(0x7f, 0x0, 0x171) 8.851978038s ago: executing program 0 (id=5418): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x8000803, 0x5) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x800, 0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x4, 0x0) mmap$auto(0x7ff, 0x0, 0x4, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) geteuid() 7.239892269s ago: executing program 2 (id=5422): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r0 = memfd_secret$auto(0x0) socket(0x2b, 0xa, 0xf) r1 = socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x5, 0xe) madvise$auto(0x4000000000003, 0x1ff, 0x408) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) mremap$auto(0x9, 0x80, 0x5, 0x7, 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x0, 0x3, 0xeb1, r1, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40080, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) getsockopt$auto_SO_SNDTIMEO_OLD(r0, 0x7ff, 0x15, &(0x7f00000003c0)='batadv\x00', &(0x7f0000000400)=0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="350000e2", @ANYRES64=r0, @ANYBLOB="00012cbd7000fddbdf250e0000000a001d00aaaaaaaaaa32000005002e000000000008003a0005000000060028000400000008000d0008000000080023007f0000010800340000ffffff"], 0x50}, 0x1, 0x0, 0x0, 0xc8}, 0x11) sendmmsg$auto(r2, &(0x7f0000000380)={{&(0x7f0000000200)="e37bbfd0ba2a4f33a147fd5c570256d20cf7536a40436f", 0x6, &(0x7f0000000300)={&(0x7f0000000240)="a519c8da63da752a56ceb67a50b0ce4bbf0ff2303cf54716c1eed86cbe62e3f57f95e1e3c0d98866a1f96c022413a52ec44cc116bc28f12fa5c17fdce04b5c0e7dfafab264db6dc8f0012bd4642552a0b5fb150032aae3a715aed03952242b7e7cb75e5196c3bf875d66331f81e511cdfc222656cef654734a3cb4ec18e8b6b00c1f9beaa57d5c68b7dc369b5995", 0x8000000000000000}, 0x0, &(0x7f0000000340)="8a999555add736617d43fcfb74de927b17272b", 0x8, 0x7}, 0xffff8000}, 0x2, 0x4) link$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00') io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) mlockall$auto(0x100) 7.084717156s ago: executing program 3 (id=5423): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000104000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x129140, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x1ff, 0xe5, 0x200000810, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x800) (async) getdents$auto(r2, 0x0, 0xa2b0) (async, rerun: 32) io_uring_setup$auto(0x406, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xfffffffffffffe0a, 0x2, '/dev/snd/timer\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x9}, 0x1, 0x0, 0x9, 0x9}, 0x10}, 0x6, 0x0) 6.865625517s ago: executing program 1 (id=5424): mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyx3\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1000000000001, 0x948b, 0x3, 0x3ca6, 0xffffffffdfffffff, 0x3, 0x62, 0x84000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_RESET(r3, 0x5000, &(0x7f0000000180)="69cac19ab2e0453a15d03fae564c8e7c40f052a7d669d2946d4b543bc8236240269bedaf3f10a99ede9406e064fcde00e197c28e6f469322a94703581e9c20a347c8fd1afb237934d08dd743d48dc5060d20598761f502082fbebf1162f06962a634df26979c6375050b5692642723e8c608cc5fb299e924fe84d3f7452a") close_range$auto(0x2, 0x8, 0x0) process_madvise$auto_MADV_WILLNEED(r0, &(0x7f0000000080)={&(0x7f0000000200)="990baef599a6618d079b831712dad686837b6d6f33e2a0455eec76736a28a6633fa04657c2679ffa0bcf66909e104d8d8e62a5641999593d44a729838bc0d44ed7227269ff023640780e497c8dcaac6609b5e13f1a81fda0843eafee0fb592be3df4a2917aa49207ae0c43bca4a6d92368e012178fe6a8ad5a07f8edd6d066158c3682385badd1e0b4ce09079246dc0af98aee23dab2cf2097378760b16bef0a5837f9b41861d57fb814", 0x1}, 0x6, 0x3, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) setsockopt$auto_SO_DEBUG(r1, 0xe38, 0x1, &(0x7f0000000000)='/dev/audio1\x00', 0x5) msync$auto(0x0, 0xe0, 0x6) socket(0x15, 0x5, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x2, &(0x7f0000000080)) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x7956, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x8a700, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000140)={0x80000000, 0x2, 0x7, 0x9, 0xc, 0x9}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) capset$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00'}) 5.409833813s ago: executing program 3 (id=5425): pselect6$auto(0x2, &(0x7f0000000000)={[0x4, 0x10, 0xffffffffffffffff, 0x99, 0x2d, 0xfffffffffffffffb, 0x8, 0x0, 0x80000000, 0x4, 0x7, 0x4, 0x72, 0x3, 0x48f, 0x800]}, &(0x7f0000000080)={[0x7fff, 0x21166995, 0x57, 0x2, 0xc2, 0x10001, 0x1000, 0x1, 0x9, 0x2, 0x9, 0x0, 0x5, 0x5, 0xad4, 0x5]}, &(0x7f0000000100)={[0x5, 0x4, 0x4cc1, 0x200000000000000, 0xfffffffffffffffb, 0x8, 0x1, 0xfff, 0x6, 0x1, 0x9ae, 0xc, 0x9, 0x1ff, 0x8, 0xfffffffffffffffe]}, &(0x7f0000000180)={0x480000000, 0xfffffffeffffffff}, &(0x7f00000001c0)="016bc3fe954e0248ee071731d997c289fd1ef5eb064cdfa0ee92df5e56ab2562e700f64ae20ac3864e22118680d4dd5b1e1d4b64d115f34c5e8db8bd4490ae4f93fb716f66aa7ff260b23ed957e694c510489656fcd032b997c24bc0e93f76c90bc6a73316229369732b562625cce4d86c64bdab7c3e32c17089b7bdf315279051993445654de7910459e1f64ea8e241c72fde4537800536968c65c1c5f10617080bc8b4470ad1e113fc7b6c4498710fb4d960294f6d7925968728ea045241fdd937065f0818108d7cabe437acd6974a2a4678d37b682ed52169d0cdd4a66b70d57440db8852f0167da577c7") bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x9, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0xa, 0x7, 0x7, 0x6}, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x21, 0x0, 0x1) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000003c0)="daa60016112e5da6b23c0d98267e1977530df65b2a4e0037e28a6fad21395f0300930597e6fc00000000827fd265764f1d3fa3102a443c373dc01a6c93a324cb46b0b4eac409f7d995d6de0d823854a83b0f23aa51b17e3cd13be41860f7fde7c66a1ddde6167dcf9d96804913fbdef9befbb1650caa968b39b5353d7d67982d87b87cdb0962356c8a61770792475dd25a23831ed4d7fb2c0e7b14bd7c80526bd3dc14cb9502991c8fce2962c867dd75775dbd92658a9bdd55eb690f1a77ca031f3917c5277f3eff7a42425380d6cea80d9cea1a3416196603d5b5d97c89d8734731328f12335c4879fe8b5b223b", 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x10, 0x0, 0x4, 0x2}, 0x2}, 0x739618ce, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) fcntl$auto(0x3, 0xc, 0x0) 5.260557518s ago: executing program 2 (id=5426): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x10, 0x2, 0x0) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x400053, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0) read$auto_null_fops_mem(r0, &(0x7f0000000100)=""/98, 0x62) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) mmap$auto(0x0, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000001080)={{0x8, 0xee01, 0xffffffffffffffff, 0x6, 0xffffff92, 0xf, 0x5}, 0x9, 0x31f, 0x1, 0x5, @raw=0x7fffffff, @inferred=0xffffffffffffffff, 0x8, 0x0, 0x0, &(0x7f0000001040)="fd655b"}) 4.961189459s ago: executing program 3 (id=5427): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) 4.90071531s ago: executing program 0 (id=5428): mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x371, &(0x7f0000000100)={0x3b0ee6ee, 0x4, 0xb17, @raw=0x7}, 0x1) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r6) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002abd70e4956722186964dbebd32512"], 0x14}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 4.878066706s ago: executing program 1 (id=5429): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x10, 0x2, 0x0) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x400053, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (fail_nth: 3) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0) read$auto_null_fops_mem(r0, &(0x7f0000000100)=""/98, 0x62) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) mmap$auto(0x0, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000001080)={{0x8, 0xee01, 0xffffffffffffffff, 0x6, 0xffffff92, 0xf, 0x5}, 0x9, 0x31f, 0x1, 0x5, @raw=0x7fffffff, @inferred=0xffffffffffffffff, 0x8, 0x0, 0x0, &(0x7f0000001040)="fd655b"}) 4.546564547s ago: executing program 3 (id=5430): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) socket(0x2, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x5, 0x0, 0x504) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 4.106045646s ago: executing program 0 (id=5431): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x4cc041, 0x0) (async, rerun: 32) r1 = prctl$auto(0x3e, 0x7fffffffffffffff, 0x0, 0x1, 0x6) (rerun: 32) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x4800) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x3, &(0x7f0000000240)="7e7c0d7a0cead4ea25e7bcf7bb70264fa6e6e6b0ca5ad86ef2b205e876df3351e355ac7a08029d8a87ead15098122dff1ec8e6463601bab50d2da2a5c8482ff45e25123ac6b64436ee650684d34b29c93d7f0bcbf0d9b21f5f30d00041c2a6736fbd51f7726e771312d5e0e8a868c0c02527f321ff5a02598a51b852da1c8b42cb1b85dfa84ca6ed7daa6e381af2045aedaa88e3629723c34176b59832bbc50dd17764edfb0881b49a571e3aeea72475666f48730c51275bda72822709654fe3415893b0b925cce8ed9eecff8ce840ce1c1468faa9325154807e67370550a4ad08d4d2b673492d1b2a938c8d9c1c12c41b38d2659d83f97e5f26a4df3f50f72c9ea92a2352c7acb1da32a6b7192236a0f6557b199ec60b357bd43de51f9ead040d3918ff3c45ea79ad81024205e0416a012e16e33bd80b391de3df5b4095b735f63b87571e6fffbcc049516a40db65172583209f9720d7b003901b42f978d42921011209be56c5cb528bed3e2e8fc2bcb1fb4a4a2365bb7bd1ef4a801e2e500cf1381a4d59e90ca373889f3056a7a0ea87c610d21195d735f33593929294356c4fefdb2a8232402756a8a0c78199114c3ea461841e63b10bf4463a140de5ce22182f100765e45f370d17ce00e80cd9e587c641f4dba84dfdcbfa9370f4b2a72c77adbcc10a12f68839d8f2ae1d30b01ba237bb11746d136e1e9c85ea8c4d85650999987b181bc3cffce5e7a4b5b9ef651d0f50105ce675be90704e4198804d193ef25d3e1e72544646d1cc187f7b7c0f4e730e3eb79d86aa18e2c885d8a6f691113de353e11ba2d76379b12f748a557f1c18adf09b54a1c52902df84c63ff0e39333fd2c896c0afc98c088d7b220c87a0f07b1dd6396c5b87e5774631e62e0a6115e75534dc1f04265a340e3934b2e6ed5d77e504f139f19d1162e6778869cff0f9a01d78955cbc69af9b967ddbc5e73ec5bbbcb043452a05827a8e18a280c80098f9bd4f39577c3e1d42fe27ccea5f44a0b511061683dea89c56aa91d734fa5000ca6ea408295cba73a33ae62f90d94d700911e582dd537feee712469e23e81920624b61af522aec63dd77391b1c2ebd4520ca5cd3f769e417e0cf009049c31beb1bf093629cf635d7d70db2ad94f692da6ec06716fc6d4c4ae09d169232884e420298188e4b8b03da46f65a1eb6a11cae4a280d6da9a02fe0759f0806cb7f429463bffb747057bf8cfb9f9a7fde0e6390f4d9cf395a186d0d6a5a8766024d5b32807ee224d0f7339809a79445fcde1d52841b12b58fa0e2644ff80794b8125aa5c2f9dc04fd05f6322806f42dd9dc1822f3998f76006cf57b63bb2dfb1e57f74ff647a22ca00a52b4565d7714de4be7b54dabf39ae1149b22b554e11cddb972c6459aafa6e0bb17328f5c150bd5dd66b11dfb77f18b788003accc64398665d84b22b135198552ce09fb6f2bd7a2e7c26f48b431acb0116f50051e55960d3db1be55972892d7783b6107ff5fde3ea23f7ffa59ab284269a5df1ed658dd106c717e967f71967f800adb65c26021a3ecabc9f329def9b52d64dc38ffcb2275174ab6260bb9b9aaa96e7e5ac0faa70d2d403795797e62d0696ec47115279f4161ed8974e6b0e47dbe8579dee2423f2707348c267be8ba8f828560206731f3bf1df1eb97b22ccce305e87d874740bcecb9d3d584dcaf16115f96143a747ae32c131f5805cc304025d9f8fe08deed2a72cf58726dcc810e8827efd9fa9843951f3f61cf1a728802af076edf20ee99a403bb16fabb5a9bd9987dcc8a2906e47ecbc6c716de8690d4adf5282baa2a982a10b53b8407e2f48a339ad538981401bcafb380cc1c97ed9918ee2eb24e3ceb4fe551de76df6bbdac717004821b99c684c88ea309de9e51d484fcdd4909f505e9b66ddc7a808c024ee9ff6ef1edbc508409bd1d1e0554c93114a1914243721ad751226c6b8072dfb1239ec15f4d6b61446a19086c2838dc1b59063145c223c2bc85e43c4c59dbfdbd51ca096606e58484c7654947243efa3435936cdc667a75e8a4dbbc3c13a52fd66d12e66e1c9f5e0c2c3f4e478580512f7dd0dc91b3c4e448f19fb40421c4f58a6882e753588034ef77ddf1d8e14ff15205cbbff9719ede30632c91e5da3d2807b3817bbec7388351b65e50e9e4875f88ef9ebff4911d34be4ae3f9bab05e0ca131a3608be6d825a672180521dbaa1fa494864f3b960f28dff88778ce781032deadb410d4173f59b909682824018f02ae6788b293ee20a5ac523f4fb105569fed4d15008a057e2e8c5f8eb90f3bc59597a1a7f95a510994037bcc1c55c24701894273f19650a908281502e0b202a915a7295f0fc94e9d399fe6a98902b5d3611e74fee5501c2b00d328f752d2cbcb627d3d5c957f2877072861732f4c610328bf61aa7f95cc21aceb0fef81e237cd6eca7fdb81413f07365b397c76e3b103e32188eca55db6db6435badf1928eae2b97348fe0cb645aacf6be6ac6a2854da0a80e48b2be050a3928d4e65182997f6fa1b1dac0ef2f607e5700b9a33d5b693ad60d875a2ea691c0060d16a3c0f86e09e328b3a91796ac4029875da8a62fe5ca897cc745049c3d9a4381f5a468330f022d1e60c8331c2b0d35d741062d37ead689b1c3412db9ac29f717319561e47a62b4dd26540aaa4ad984f318b12b0e2204fc92286e0816e62c633c70c9838edbfd01a6761364fd34be8fd89f379c02dc05587272de11b631512022e89b367a117a7e61b5247ff451214c7410571e35ede1a5c6cac5e732b890b10e57e8134a13a343d50f2ecc307e708fe1d6c4b0255077e8269312adeac904ba06431d89f1c8d2f3c37ca2277817997ea19e72b6304e8a01b3d425413abca2f96c13fe38e574f0e30244157825ad69c37690a913bceb7cd672df40a1b82441401af59d1b95617c31b41b51766af4d64f1f0856e6dd47c7b06b5628dea09afb37a7667b37bb2efbebe538c7dd1d8a21a1764a14010c06907e65351bb5a6a460299bbc4fa576ace264839cc28a3f8df80ea657cd4067c54476ce142f12782ca541a5746acfe6b01c4d45f61b276909742cecb3fcb0059108e7dde78454d7f3cf4e255a2178b4f206ebd1fd9b1df3c08c174317e4ac8be30f4f50b1bec4d6d73ae6445fa04ada8f465bc046606af8cbf9c76dd01d4537ba2b376b142994d6c000f2e010e1e4dbb6aaea7d168fa797bd6302259fd348e727dab943b1d1a4e92825cc0e17cc9f73e7755ed67c2c18c8ab2f28109f08c5481800e7fea93d723b407c19c16eaecc9092d824d32bf354912b8af4d7e163d82cd49494c07e712ce3213831fd119be59408defb3f4c228d384d90baa26d0800855bd7093397f6cde856b3f687c8cdad817ba7415825244b1624fb61e23ffaab0fb083f0ebddcb681b009406244a17c5af70a86c29772bc6beb8562c9e4d1a9ab4b13999158bfbb764034df621901c2fbf07bf2647a61ba180e528a6902b8858628a7cb7ae122b55c91db8a349d878c826ed97ed75a4bc690faf5b2efff68baf6ddf8cd8842e4e7651242f35373753ac2135bcd1ae7f7926c8944fd89117ace3c0e00f1c5d5c2846d8e9de86eac0d64d5a62a63b6f6731c6f50a7599dc6536028c548c3c289c635fd1585c3d80f9b352d8eb5cd5f62d756ef0abcf5df0861fd41d077bffb7e5d9dd1d96e69138f46b54a1fec7571163a5e9437d9fdad06fc8cb341e0a91d0658d5c4adb46fdcda1a5ee75763fda4e48101c7a5119298630dc8a99fe521a2099c7dd6f57651656805b900c8be2370c3c53365df150b30e7b30f40d762114c25256cb60baf0fe931985d6c8b09c1ed1dd68184185a4c441369228354f85245b635bc246e00ec463dfd1fe0545eeff54709d6be3c22b5efa1619df8d6a646601a5b73496b4f001a26ac5715f8a2dd1cf9f55b780c6501be934e7583e291c9ab933d4501998e37533b39061d6c6cce01af9791c076500219dce6d62316ab1f6ec2d2c079e30f1b9f97db01191d2b04c8288075b2acb20ca0d9e3feb0d0323c7ea1fc24b2ef19db06ed26afa8bc8f2f816478c709b81980b300b3d527c7bb80a09e3078f126849aef29c0f3bb2a97de10efd7e56087904579dd667ed06755d3e838bbb4b5cf76bdb9734fd6c1d7222254514ed5809fa4c3df8b9588764a020a2b67d69375796234dc4aa60c5fdec726160e5df8f18f174926b9c1a0a31a0bacfb6c8aa506ef47b2b8d0ee314a4dd91de4a80ae72e74242f1035e8ae0af8836dadd20d9b86c77c84fa912dcc85036d68dde2d6b76ecede08f4fbc047a229923435dca56b9bacdbc72ac0664a760fd506440d4d55435423f73a1bb0cf3eb527e7bf2464e4339bf0849fa16979350c957269ba8963bb6fa5ef0b0842d1df01dab347bd0ff58805a005801614b6020cad5d24663468be07ec92fc71bb52bdb9ae54f553e8d6559790783cc075998b522b628723aaafd9987022514289e9b8f3ee6a57d715c50ae64b7845050293fd9624b536bf9f9abf72c555b61b7081b749871da0b1ef20beeef8b8432630efa862cf831055c66acb4f770f3bd8d7595e4077d43c6ee422a6a5fef4234118a8f81717a0818c7e425a2881d025c69987d12f6f7b178115e1eca4c5998715eee976b91c04217315637aabc2bd7cbd907ea3f724a99e034f8cb30dceb73a8d492cd2abeb8f520c6e2983f5f91fda83f2e9af7e622abc89c961b354407a25372ba1138da52d3ec8fb13205651e036013f525feb42f59cb52dd2cf0a7fb005b75f68da81eef7ad3d0887f1ed076ea8ce8ba89893d648f051ab45f23c4f3fde3587c8cf2a87aff48ce5b94ca5a9ba55239698a026619a3559e41482d8a41fba2c439306d408b682e84cd861bcf2fc5238f3c3643fc2a36732d45289c94dcc32dccb294e366918721988f8d8d87fbbc9070b68a753e3601150deb7815fda56290ccc8273f61e88c4045444aa36eb68c189bfe9105deaffe93d312411c0e64b5365ad5b6ef351c3dc66669671816895152cae653378b3476c08068adcdce0af0812c9f04d6b1d3ab7fc0c411bda46f560fc3dfc46de48e6fbecb17518dbb8b1e0c8c54d37788c46c2c760e7d5e77350b00de52699a6eb52ff3c5481daaceb5c7153ddc465bd5420d8637c8c919d0364abd60ef1826cc624c442a8a434cdb4322f0f1901a87d9a1a463db6feaa2623895b9f04b68df70236d4597119454d3a496bbe9cdb9535a8cb54cecdaf8438b7bf180d0e22a4d187406392ddc4ee11c2830276eef5c0019ce719ab9b826a766c4a4dee3f78e2ec8b5e6c6affee907950ac7c3e9086bad2c66a93cbf0a85001723b98b2e685866250665fe9c95f3af5bf306dd41dbd7f451321af78d7f096d7169c56c3f75494e600f285cb8715857a49bbbb460c46c7f2fbd39d2262d1da53ec1c87df7c1830c54f59999c1ea2e70ace6a4689a526036e8eca636a3f0b9daabbde887a50967ca6f3a3d7d8a95d9cab710a76aef75befb5ab1cc6049fdf3dad5a680a11c271bb8a66f22427e02f9a60544df1f502d19d7dfc2821227c3c9a3ded8eb621f8b8701a9856941faf6a42eaa058b077402844231430ffcf7c917fa72d705a9b10fcb6d82b358082919ca9f3e8cd766765d8a493d9347d7c1acfb1e5706b519e1f8799a65a8d48c4e19dcea9b64a8fc5b70e936a8c8feb42143c944a23a5c012d740bd1c6d0bc477e08380f4113c67ec55fd598f28d34eacb23b0c3de20179619781ed41f87a5483db61c9e4a3597921fd3") (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x0, 0x100000000008000) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, 0x54) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) (async) madvise$auto(0x0, 0xffffffffffff0002, 0x19) 3.797183912s ago: executing program 2 (id=5432): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x0, 0x9, 0xeb3, 0x401, 0x8010) bind$auto(r0, &(0x7f0000000480)=@in={0x2, 0x1006, @broadcast}, 0x66) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) connect$auto(r1, &(0x7f0000000400)=@nfc={0x27, r2, 0x100, 0x3}, 0x6) socket(0x3, 0x4, 0x10000809) mmap$auto(0x7fff, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004000000008000) madvise$auto(0x20000000000, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x400053, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sg0\x00', 0x18442, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee8e9b64, 0x0) mmap$auto(0x0, 0x2020009, 0x48a0b0ac, 0xeb1, 0xfffffffffffffffa, 0x10001) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(0x3, 0x4004550d, 0x1) read$auto_null_fops_mem(r3, &(0x7f0000000100)=""/98, 0x62) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_STAT_ANY(0x401, 0xf, &(0x7f0000000380)={{0x4, 0x0, 0xffffffffffffffff, 0xcf82, 0xfff, 0x7, 0x687}, 0x10001, 0x5, 0x10, 0x1, @raw=0x3, @raw=0x1, 0x9, 0x0, &(0x7f0000000200)="af04fa63d89ff77c2f8cc11e27265029bc86176bfc6d7424c29d600c1db02fba5f04bec52a4d988a21b4cd08c0741b6720891f6da31f9e5479e893f5fac37350a95792", &(0x7f0000000280)="beced7281c8df74f4a3858e13d7e70fcb62bb8561798135644bf4dd5db394fa40c7216647635a0e66f843ec1b5625dcc1bd57679dfc607fe6f599eeb3e7c3ecf5beb3d5ae4b0aa56bcc2fd400b12b8f60c6341b19fad518a5b6d1ad12873515d5999e136e778b13b8a01736a06d5e071a225d992f17810d44f51f45ffb6f70e87b14288741fbb43c4385fcf4626a56a5477ea09c404895d70f09a879fd75d886b76f0b98cf2fa72f899261000b0dc1ce87d58fa296134ebf1021a7e38b2591923ccedcf72186e283d5eb03973ae9e2ba6d0cedb9932d95e76ba6a5d00c895c"}) fsconfig$auto(r5, 0xfffffff7, &(0x7f0000000180)='/dev/sg0\x00', &(0x7f00000001c0)="f7127a0e69c6c566648462214ed8ee6965f0ea05fd91af5187f6a1be073a6a3459641bec1c996bab3a6786049a36aa2456da3d480bc33f744379c2d537ab10", r6) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r5) mmap$auto(0x0, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3.633279511s ago: executing program 2 (id=5433): socket(0x10, 0x2, 0x0) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) clone$auto(0x4b0a, 0x8, 0x0, 0x0, 0xfffffffffffffffd) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x1, 0x8, 0xffffffffffffffff, [], {0x2, 0x1, 0xf, 0x101, 0x2, 0x83, 0x101, 0x3ff, 0x2}, {0xff, 0x1, 0x80000003, 0x4bd, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0x8}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x4, 0x0) r1 = socket(0x21, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) openat2$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x80000001, 0x101, 0x494b}, 0xb0b) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 3.319961396s ago: executing program 1 (id=5434): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x23, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff12}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x24, 0xbd, "419957d3f4b7832e12a8d655bef5cbeeb2698c4a2fbc7a18f2afe9b5af73acf1"}, @NL80211_ATTR_REG_ALPHA2={0x45, 0x21, "c9e375f33032cca4fb74758d841a57ea2cd26ce3bc8ecc6831f1c781b01e7146781f53d0e676b1bcda7c47035c10f971f1dd1ea5ba4f314bd44d0614cfd52306b5"}]}, 0x80}}, 0xc004) timer_settime$auto(0x5, 0xffffffff, &(0x7f0000000300)={{0x0, 0x4}, {0x2, 0x746}}, &(0x7f0000000340)={{0x4c0e, 0xc1b}, {0xa, 0x100000001}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd693840f03c423aa0000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.318539572s ago: executing program 3 (id=5435): getsockname$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x1, 0x7}) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000040)=@link_detach={r0}, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) msgctl$auto(0x8, 0x5, &(0x7f0000000180)={{0xd, 0x0, 0xee00, 0x3, 0x800, 0x3, 0xfff9}, &(0x7f0000000100)=0xbd, &(0x7f0000000140)=0x5, 0x2, 0x3, 0x6, 0x2, 0x1, 0x3, 0x101, 0x1, @raw=0xe2, @raw=0x7}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000200)={0x5, r2, 0x80000001, 0xb}) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x1, 0x7}) (async) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000040)=@link_detach={r0}, 0x7ff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) (async) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) (async) msgctl$auto(0x8, 0x5, &(0x7f0000000180)={{0xd, 0x0, 0xee00, 0x3, 0x800, 0x3, 0xfff9}, &(0x7f0000000100)=0xbd, &(0x7f0000000140)=0x5, 0x2, 0x3, 0x6, 0x2, 0x1, 0x3, 0x101, 0x1, @raw=0xe2, @raw=0x7}) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000200)={0x5, r2, 0x80000001, 0xb}) (async) 2.75414138s ago: executing program 3 (id=5436): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000300)={0x6, 0x1000, 0xc11, 0x2, 0xfffffffb, "970deaae44f0c20cb2add56839c53176c76b78a584591e0e0687ba02d95c76fba0d47275ad9d5328dc086dabd1cb082a47e9934ad9bd86dec148c778cd45ff31", "80b573815b9025e505c028cc42bab953f92a1fb60b6c6773650ebf5c8d7cb4d15afca89a19bcc220a253d87244073197407b88d3b758b76237b5e3652303d1387c7ec6bda4d0d1650c76038ef207acdf", "195e2c8ea133cab69a83788ada81042f27a22ffcfe3db42245aae532bed3dfc1", 0x7, 0x4, 0x0, "5750912753f1e4dfcb38d4ef2472137cdc52b74da12cccbbfe5c24c3a1a2e47a0ee981d206ded795bfd70d93b7b85cbd00319c4b91a0d70ab95d973c"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) process_vm_writev$auto(0x0, &(0x7f0000000200)={&(0x7f0000000140)="e5cce041397be3d2c6501fcc407afbc6555fadc1d558ff3dcbb1bdb1844920e6dd11c9523994db4edd077459ace522e74057b375b1a156b659f4575b4f7d1f1516c5cfbf8d26c15a707942a80765d822366fb9a367718d427b4690ce4e31973082a0c9371e8d1f45f480c72bd1db74ff76f8eb1ca511d48a221d9cce681bca83ceae74e7f3cf2010e2c3633930fab1c40649bc909647f05c502ec873902f17857c67c87f29f3fc631ced700da44719f1ab39e8643de226", 0x8}, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000440)="90103236d1efbd6f5fb6c02765ffc5deca375b7179f61fc6970ed4288bf430cc907de8d3e1200f66ccb3e40fdd18e85eaca3b941e1597e7d11518e97f89ab24ccdf7e3cd8f991cb992e3eaa6044e751c023dfe3ca6846bf1d52cffea8a011702e38532815f39d93cd78c1048c91b5c6178a349e7a1428a2a754fbbf7b43cb866879e3dbc875872c604078c3e2c044a1803b00682b7f92c2e5764330448aa429dea5cc5f65183da", 0x6}, 0x16c, 0x3) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2.545455411s ago: executing program 2 (id=5437): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000300)={0x6, 0x1000, 0xc11, 0x2, 0xfffffffb, "970deaae44f0c20cb2add56839c53176c76b78a584591e0e0687ba02d95c76fba0d47275ad9d5328dc086dabd1cb082a47e9934ad9bd86dec148c778cd45ff31", "80b573815b9025e505c028cc42bab953f92a1fb60b6c6773650ebf5c8d7cb4d15afca89a19bcc220a253d87244073197407b88d3b758b76237b5e3652303d1387c7ec6bda4d0d1650c76038ef207acdf", "195e2c8ea133cab69a83788ada81042f27a22ffcfe3db42245aae532bed3dfc1", 0x7, 0x4, 0x0, "5750912753f1e4dfcb38d4ef2472137cdc52b74da12cccbbfe5c24c3a1a2e47a0ee981d206ded795bfd70d93b7b85cbd00319c4b91a0d70ab95d973c"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (fail_nth: 3) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) process_vm_writev$auto(0x0, &(0x7f0000000200)={&(0x7f0000000140)="e5cce041397be3d2c6501fcc407afbc6555fadc1d558ff3dcbb1bdb1844920e6dd11c9523994db4edd077459ace522e74057b375b1a156b659f4575b4f7d1f1516c5cfbf8d26c15a707942a80765d822366fb9a367718d427b4690ce4e31973082a0c9371e8d1f45f480c72bd1db74ff76f8eb1ca511d48a221d9cce681bca83ceae74e7f3cf2010e2c3633930fab1c40649bc909647f05c502ec873902f17857c67c87f29f3fc631ced700da44719f1ab39e8643de226", 0x8}, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000440)="90103236d1efbd6f5fb6c02765ffc5deca375b7179f61fc6970ed4288bf430cc907de8d3e1200f66ccb3e40fdd18e85eaca3b941e1597e7d11518e97f89ab24ccdf7e3cd8f991cb992e3eaa6044e751c023dfe3ca6846bf1d52cffea8a011702e38532815f39d93cd78c1048c91b5c6178a349e7a1428a2a754fbbf7b43cb866879e3dbc875872c604078c3e2c044a1803b00682b7f92c2e5764330448aa429dea5cc5f65183da", 0x6}, 0x16c, 0x3) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2.45117508s ago: executing program 1 (id=5438): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x3, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) socket(0x3, 0x80000, 0x6) prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x8001) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, r1, 0x2) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x5, 0x2, 0x8000000000000000, 0x0) read$auto_tracing_saved_cmdlines_fops_trace(r2, 0x0, 0x0) write$auto(0xca, 0x0, 0x2b) 1.042196879s ago: executing program 2 (id=5439): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000300)={0x6, 0x1000, 0xc11, 0x2, 0xfffffffb, "970deaae44f0c20cb2add56839c53176c76b78a584591e0e0687ba02d95c76fba0d47275ad9d5328dc086dabd1cb082a47e9934ad9bd86dec148c778cd45ff31", "80b573815b9025e505c028cc42bab953f92a1fb60b6c6773650ebf5c8d7cb4d15afca89a19bcc220a253d87244073197407b88d3b758b76237b5e3652303d1387c7ec6bda4d0d1650c76038ef207acdf", "195e2c8ea133cab69a83788ada81042f27a22ffcfe3db42245aae532bed3dfc1", 0x7, 0x4, 0x0, "5750912753f1e4dfcb38d4ef2472137cdc52b74da12cccbbfe5c24c3a1a2e47a0ee981d206ded795bfd70d93b7b85cbd00319c4b91a0d70ab95d973c"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) process_vm_writev$auto(0x0, &(0x7f0000000200)={&(0x7f0000000140)="e5cce041397be3d2c6501fcc407afbc6555fadc1d558ff3dcbb1bdb1844920e6dd11c9523994db4edd077459ace522e74057b375b1a156b659f4575b4f7d1f1516c5cfbf8d26c15a707942a80765d822366fb9a367718d427b4690ce4e31973082a0c9371e8d1f45f480c72bd1db74ff76f8eb1ca511d48a221d9cce681bca83ceae74e7f3cf2010e2c3633930fab1c40649bc909647f05c502ec873902f17857c67c87f29f3fc631ced700da44719f1ab39e8643de226", 0x8}, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000440)="90103236d1efbd6f5fb6c02765ffc5deca375b7179f61fc6970ed4288bf430cc907de8d3e1200f66ccb3e40fdd18e85eaca3b941e1597e7d11518e97f89ab24ccdf7e3cd8f991cb992e3eaa6044e751c023dfe3ca6846bf1d52cffea8a011702e38532815f39d93cd78c1048c91b5c6178a349e7a1428a2a754fbbf7b43cb866879e3dbc875872c604078c3e2c044a1803b00682b7f92c2e5764330448aa429dea5cc5f65183da", 0x6}, 0x16c, 0x3) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 553.939986ms ago: executing program 0 (id=5440): socket(0xa, 0x80803, 0x6) (async) r0 = socket(0xa, 0x80803, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x55) (async) r2 = open(0x0, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) statx$auto(r2, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x29, 0x0, 0x28) recvmmsg$auto(r1, &(0x7f0000000300)={{0x0, 0x3, &(0x7f0000000000)={0x0, 0x40809}, 0xc, 0x0, 0x4, 0x28e1}, 0x2632265}, 0x11, 0xad91, 0x0) (async) recvmmsg$auto(r1, &(0x7f0000000300)={{0x0, 0x3, &(0x7f0000000000)={0x0, 0x40809}, 0xc, 0x0, 0x4, 0x28e1}, 0x2632265}, 0x11, 0xad91, 0x0) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x6a) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000240), r3) (async) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000240), r3) r5 = semctl$auto_GETPID(0x7fff, 0x6, 0xb, 0x3) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r2, 0x50009405, &(0x7f0000000840)={@inferred=r3, "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"}) r7 = fcntl$getown(r3, 0x9) getpid() (async) r8 = getpid() syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r8], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r8], 0x1}, 0x58) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="01010000", @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf25010000000400040008000200", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="060004002b23000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="320003002f7379732f646576696365732f7669727475616c2f6e65742f626f6e64302f626f6e64696e672f736c61766573000000320003002f7379732f646576696365732f7669727475616c2f6e65742f626f6e64302f626f6e64696e672f736c61766573000000320004002f7379732f646576696365732f7669727475616c2f6e65742f626f6e64302f626f6e64696e672f736c61766573000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x4005) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r9 = socket(0x2, 0x5, 0x0) getsockopt$auto(r9, 0x2, 0x10001, 0x0, 0x0) fcntl$auto(r3, 0x1, 0x1) 0s ago: executing program 0 (id=5441): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x40000) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r4 = socket(0x8, 0x80805, 0x0) (async) writev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000040)="04c7bfe99198c97c2475d59350aae9ee68f66887f080b0f846e5561e6a14d616ae82ca833d806f1ae35c252e7806fa4ba3ad37931ab4abb78be1a0c7dbf27cccbadc096fe972c56c7c64b393320c79fbef0254b9f0960f783b07dbd0b34e498a753a4519010264f330", 0x3ff}, 0x3) (async) close_range$auto(r2, r2, 0x4) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) close_range$auto(r0, r1, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) (async) connect$auto(0x3, 0x0, 0x18) (async) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) (async) socket(0x2, 0x3, 0xa) (async) getsockopt$auto(0x3, 0x1ffe, 0x20, &(0x7f0000000000)='\x00', 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0x10000000eb1, 0xffffffffffffffff, 0x48000) (async) close_range$auto(r4, r5, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) (async) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): s /devices/platform/i8042/serio0/input/input1173 [ 2253.658627][T25514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2253.699912][T25514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2253.714572][T25514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2253.770178][T25514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2253.798620][T25514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2254.223195][T26815] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1174 [ 2254.475037][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.774918][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.882312][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.998522][T26833] Invalid ELF header magic: != ELF [ 2255.360019][ T1002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.702540][T26848] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1175 [ 2255.908344][ T5842] Bluetooth: hci4: command tx timeout [ 2256.203748][T26850] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1176 [ 2256.606037][T26824] chnl_net:caif_netlink_parms(): no params data found [ 2256.701918][ T1002] bridge_slave_1: left allmulticast mode [ 2256.712022][ T1002] bridge_slave_1: left promiscuous mode [ 2256.720223][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.740656][ T1002] bridge_slave_0: left allmulticast mode [ 2256.753001][ T1002] bridge_slave_0: left promiscuous mode [ 2256.800871][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2257.005348][T26855] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4902'. [ 2257.988422][ T5842] Bluetooth: hci4: command tx timeout [ 2258.249150][T26895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1177 [ 2258.829640][T26896] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1178 [ 2259.591879][T26916] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1179 [ 2259.799291][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2259.874695][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2259.912644][ T1002] bond0 (unregistering): Released all slaves [ 2260.070288][T26917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1180 [ 2260.094742][ T5842] Bluetooth: hci4: command tx timeout [ 2260.256178][ T1002] HfR: left promiscuous mode [ 2260.774582][T26928] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1181 [ 2260.803644][T26824] bridge0: port 1(bridge_slave_0) entered blocking state [ 2260.824680][T26824] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.832259][T26824] bridge_slave_0: entered allmulticast mode [ 2260.854910][T26824] bridge_slave_0: entered promiscuous mode [ 2260.879623][T26824] bridge0: port 2(bridge_slave_1) entered blocking state [ 2260.886835][T26824] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.953315][T26824] bridge_slave_1: entered allmulticast mode [ 2260.967677][T26824] bridge_slave_1: entered promiscuous mode [ 2261.582500][T26929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1182 [ 2261.976523][T26931] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4910'. [ 2262.004499][T26824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.022490][T26824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.148396][ T5842] Bluetooth: hci4: command tx timeout [ 2262.680099][T26824] team0: Port device team_slave_0 added [ 2262.733032][T26824] team0: Port device team_slave_1 added [ 2262.935075][ T1002] hsr_slave_0: left promiscuous mode [ 2262.975318][ T1002] hsr_slave_1: left promiscuous mode [ 2263.015203][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2263.058535][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2263.121091][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2263.160968][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2263.229782][ T1002] veth1_macvtap: left promiscuous mode [ 2263.235608][ T1002] veth0_macvtap: left promiscuous mode [ 2264.112629][T26986] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1183 [ 2264.376608][T26988] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1184 [ 2264.763157][T26987] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1185 [ 2265.020438][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 2265.283754][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 2265.357147][T26989] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1186 [ 2266.792935][T26824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2266.816559][T26824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2266.878537][T26824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2266.904187][T26824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2266.919780][T26824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2267.017691][T26824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2267.625724][T26824] hsr_slave_0: entered promiscuous mode [ 2267.640616][T26824] hsr_slave_1: entered promiscuous mode [ 2268.875267][T27054] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1187 [ 2269.679521][T27056] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1188 [ 2269.991779][T27054] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4925'. [ 2271.101762][T26824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2271.152557][T26824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2271.193289][T26824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2271.210917][T26824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2271.810671][T26824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2271.907955][T26824] 8021q: adding VLAN 0 to HW filter on device team0 [ 2271.945122][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.952356][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2272.104843][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.112248][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.928059][T26824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2274.005137][T26824] veth0_vlan: entered promiscuous mode [ 2274.040362][T26824] veth1_vlan: entered promiscuous mode [ 2274.194001][T26824] veth0_macvtap: entered promiscuous mode [ 2274.374516][T26824] veth1_macvtap: entered promiscuous mode [ 2274.698388][T26824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2274.722075][T26824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2274.780843][T26824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.797827][T26824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.840830][T26824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.856686][T26824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.267164][T20707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.297859][T20707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.409846][ T7365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.617820][ T7365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2277.956270][T27246] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1189 [ 2278.392519][T27247] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1190 [ 2279.718856][T27247] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4944'. [ 2280.918421][T27312] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1191 [ 2281.501769][T27313] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1192 [ 2281.873433][T27329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1193 [ 2282.566677][T27333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1194 [ 2285.214318][T27405] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1195 [ 2286.167468][T27410] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1196 [ 2287.170719][T27410] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4961'. [ 2290.494734][T27516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1197 [ 2291.364066][T27526] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1198 [ 2291.573545][T27531] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4976'. [ 2294.393664][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2294.402884][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2294.469151][T27598] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1199 [ 2294.697083][T27601] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1200 [ 2296.574727][T27598] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4986'. [ 2299.033305][T27685] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1201 [ 2299.493653][T27690] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1202 [ 2301.589424][T25514] Bluetooth: hci2: command 0x0406 tx timeout [ 2301.806351][T27740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1203 [ 2302.395447][T27744] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1204 [ 2303.574363][T27774] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1205 [ 2304.144005][T27775] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1206 [ 2304.930863][T27785] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1207 [ 2305.436439][T27786] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1208 [ 2306.401165][T27806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1209 [ 2306.867751][T27808] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1210 [ 2308.528501][T27844] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1211 [ 2309.192218][T27846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1212 [ 2309.838857][T27850] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5020'. [ 2310.316063][T27869] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1213 [ 2311.463176][T27871] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1214 [ 2312.269348][T27909] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1215 [ 2312.724356][T27910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1216 [ 2314.768527][T27963] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1217 [ 2315.282575][T27964] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1218 [ 2315.755051][T27984] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1219 [ 2316.170968][T27985] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1220 [ 2320.712073][T28087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1221 [ 2321.445932][T28091] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1222 [ 2321.992842][T28090] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1223 [ 2322.664586][T28093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1224 [ 2324.932295][T28162] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1225 [ 2325.439432][T28164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1226 [ 2326.239865][T28165] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5064'. [ 2326.410728][T28187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1227 [ 2326.625313][T28190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1228 [ 2327.198426][T25514] Bluetooth: hci1: command 0x0406 tx timeout [ 2327.345504][T28190] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5068'. [ 2330.296262][T28261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1229 [ 2330.969843][T28266] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1230 [ 2331.079091][T28275] FAULT_INJECTION: forcing a failure. [ 2331.079091][T28275] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.118421][T28275] CPU: 0 UID: 0 PID: 28275 Comm: syz.0.5080 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2331.118472][T28275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2331.118492][T28275] Call Trace: [ 2331.118503][T28275] [ 2331.118516][T28275] dump_stack_lvl+0x16c/0x1f0 [ 2331.118565][T28275] should_fail_ex+0x512/0x640 [ 2331.118637][T28275] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2331.118676][T28275] should_failslab+0xc2/0x120 [ 2331.118719][T28275] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2331.118751][T28275] ? loopback_open+0x145/0x13a0 [ 2331.118800][T28275] loopback_open+0x145/0x13a0 [ 2331.118855][T28275] snd_pcm_open_substream+0xa5d/0x17f0 [ 2331.118895][T28275] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 2331.118934][T28275] ? lockdep_init_map_type+0x5c/0x280 [ 2331.118973][T28275] ? lockdep_init_map_type+0x5c/0x280 [ 2331.119015][T28275] snd_pcm_oss_open+0x735/0x1400 [ 2331.119080][T28275] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 2331.119130][T28275] ? __lock_acquire+0xb8a/0x1c90 [ 2331.119162][T28275] ? __pfx_default_wake_function+0x10/0x10 [ 2331.119213][T28275] ? __lock_acquire+0xb8a/0x1c90 [ 2331.119257][T28275] ? do_raw_spin_lock+0x12c/0x2b0 [ 2331.119298][T28275] ? soundcore_open+0x35a/0x580 [ 2331.119342][T28275] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 2331.119414][T28275] soundcore_open+0x409/0x580 [ 2331.119460][T28275] ? __pfx_soundcore_open+0x10/0x10 [ 2331.119503][T28275] chrdev_open+0x231/0x6a0 [ 2331.119544][T28275] ? __pfx_apparmor_file_open+0x10/0x10 [ 2331.119585][T28275] ? __pfx_chrdev_open+0x10/0x10 [ 2331.119630][T28275] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2331.119705][T28275] do_dentry_open+0x744/0x1c10 [ 2331.119744][T28275] ? __pfx_chrdev_open+0x10/0x10 [ 2331.119796][T28275] vfs_open+0x82/0x3f0 [ 2331.119856][T28275] path_openat+0x1de4/0x2cb0 [ 2331.119908][T28275] ? __pfx_path_openat+0x10/0x10 [ 2331.119948][T28275] ? __lock_acquire+0xb8a/0x1c90 [ 2331.119986][T28275] do_filp_open+0x20b/0x470 [ 2331.120025][T28275] ? __pfx_do_filp_open+0x10/0x10 [ 2331.120090][T28275] ? alloc_fd+0x471/0x7d0 [ 2331.120134][T28275] do_sys_openat2+0x11b/0x1d0 [ 2331.120182][T28275] ? __pfx_do_sys_openat2+0x10/0x10 [ 2331.120244][T28275] __x64_sys_openat+0x174/0x210 [ 2331.120290][T28275] ? __pfx___x64_sys_openat+0x10/0x10 [ 2331.120354][T28275] do_syscall_64+0xcd/0x490 [ 2331.120397][T28275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2331.120432][T28275] RIP: 0033:0x7f84e458e969 [ 2331.120460][T28275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2331.120495][T28275] RSP: 002b:00007f84e5416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2331.120529][T28275] RAX: ffffffffffffffda RBX: 00007f84e47b6080 RCX: 00007f84e458e969 [ 2331.120551][T28275] RDX: 0000000000080502 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 2331.120573][T28275] RBP: 00007f84e4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2331.120593][T28275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2331.120614][T28275] R13: 0000000000000000 R14: 00007f84e47b6080 R15: 00007ffdece1b378 [ 2331.120657][T28275] [ 2331.434913][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.630783][T28261] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5079'. [ 2332.142383][T28283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1231 [ 2332.506112][T28288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5083'. [ 2332.555431][T28284] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1232 [ 2333.231798][T28290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5084'. [ 2333.785159][T28303] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 2334.495517][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5090'. [ 2334.691554][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5091'. [ 2335.586247][T28322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1233 [ 2336.167676][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5095'. [ 2336.252180][T28326] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1234 [ 2336.964332][T28328] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5092'. [ 2337.532120][T28345] FAULT_INJECTION: forcing a failure. [ 2337.532120][T28345] name failslab, interval 1, probability 0, space 0, times 0 [ 2337.573107][T28345] CPU: 0 UID: 0 PID: 28345 Comm: syz.3.5097 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2337.573157][T28345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2337.573178][T28345] Call Trace: [ 2337.573189][T28345] [ 2337.573202][T28345] dump_stack_lvl+0x16c/0x1f0 [ 2337.573248][T28345] should_fail_ex+0x512/0x640 [ 2337.573296][T28345] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2337.573335][T28345] should_failslab+0xc2/0x120 [ 2337.573380][T28345] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2337.573416][T28345] ? loopback_open+0x145/0x13a0 [ 2337.573475][T28345] loopback_open+0x145/0x13a0 [ 2337.573533][T28345] snd_pcm_open_substream+0xa5d/0x17f0 [ 2337.573574][T28345] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 2337.573608][T28345] ? lockdep_init_map_type+0x5c/0x280 [ 2337.573649][T28345] ? lockdep_init_map_type+0x5c/0x280 [ 2337.573691][T28345] snd_pcm_oss_open+0x735/0x1400 [ 2337.573760][T28345] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 2337.573814][T28345] ? __lock_acquire+0xb8a/0x1c90 [ 2337.573847][T28345] ? __pfx_default_wake_function+0x10/0x10 [ 2337.573899][T28345] ? __lock_acquire+0xb8a/0x1c90 [ 2337.573942][T28345] ? do_raw_spin_lock+0x12c/0x2b0 [ 2337.573987][T28345] ? soundcore_open+0x35a/0x580 [ 2337.574032][T28345] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 2337.574086][T28345] soundcore_open+0x409/0x580 [ 2337.574137][T28345] ? __pfx_soundcore_open+0x10/0x10 [ 2337.574182][T28345] chrdev_open+0x231/0x6a0 [ 2337.574221][T28345] ? __pfx_apparmor_file_open+0x10/0x10 [ 2337.574263][T28345] ? __pfx_chrdev_open+0x10/0x10 [ 2337.574308][T28345] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 2337.574373][T28345] do_dentry_open+0x744/0x1c10 [ 2337.574412][T28345] ? __pfx_chrdev_open+0x10/0x10 [ 2337.574476][T28345] vfs_open+0x82/0x3f0 [ 2337.574530][T28345] path_openat+0x1de4/0x2cb0 [ 2337.574584][T28345] ? __pfx_path_openat+0x10/0x10 [ 2337.574625][T28345] ? __lock_acquire+0xb8a/0x1c90 [ 2337.574662][T28345] do_filp_open+0x20b/0x470 [ 2337.574699][T28345] ? __pfx_do_filp_open+0x10/0x10 [ 2337.574765][T28345] ? alloc_fd+0x471/0x7d0 [ 2337.574811][T28345] do_sys_openat2+0x11b/0x1d0 [ 2337.574859][T28345] ? __pfx_do_sys_openat2+0x10/0x10 [ 2337.574924][T28345] __x64_sys_openat+0x174/0x210 [ 2337.574975][T28345] ? __pfx___x64_sys_openat+0x10/0x10 [ 2337.575045][T28345] do_syscall_64+0xcd/0x490 [ 2337.575089][T28345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.575123][T28345] RIP: 0033:0x7fe44878e969 [ 2337.575149][T28345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2337.575183][T28345] RSP: 002b:00007fe44960c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2337.575215][T28345] RAX: ffffffffffffffda RBX: 00007fe4489b6080 RCX: 00007fe44878e969 [ 2337.575238][T28345] RDX: 0000000000080502 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 2337.575260][T28345] RBP: 00007fe448810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2337.575281][T28345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2337.575301][T28345] R13: 0000000000000000 R14: 00007fe4489b6080 R15: 00007ffeabd41a68 [ 2337.575346][T28345] [ 2337.887077][ C0] vkms_vblank_simulate: vblank timer overrun [ 2338.053655][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5100'. [ 2340.039078][T28373] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1235 [ 2340.502586][T28374] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1236 [ 2340.966710][T28384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1237 [ 2341.195453][T28374] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5105'. [ 2341.579249][T28391] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5107'. [ 2341.910235][T28392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1238 [ 2343.384577][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 2344.661419][T28424] Invalid ELF header magic: != ELF [ 2344.740648][T28432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1239 [ 2345.628906][T28442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5117'. [ 2345.800429][T28434] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1240 [ 2346.141940][T28440] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5116'. [ 2346.422292][T28448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5118'. [ 2346.844859][T28452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5119'. [ 2347.284412][T28455] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1241 [ 2347.722297][T28461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5121'. [ 2347.798969][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 2348.228396][T28457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1242 [ 2351.333686][T28518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5130'. [ 2351.982230][T28526] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1243 [ 2352.253648][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5134'. [ 2352.619904][T28533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1244 [ 2352.790718][T25514] Bluetooth: hci0: command 0x0406 tx timeout [ 2353.747952][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5137'. [ 2353.790874][T28549] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1245 [ 2354.020853][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 2354.286497][T28550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1246 [ 2355.833713][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2355.841500][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2363.181567][T28706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1247 [ 2363.408377][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 2363.486381][T28709] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1248 [ 2365.323742][T28754] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1249 [ 2365.467534][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5173'. [ 2366.281425][T28757] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1250 [ 2366.814428][T28773] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1251 [ 2367.064910][T28774] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1252 [ 2367.288372][T28773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5175'. [ 2367.526510][T28782] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1253 [ 2368.011743][T28790] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5176'. [ 2368.109235][T28784] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1254 [ 2378.388419][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 2380.800728][T28976] FAULT_INJECTION: forcing a failure. [ 2380.800728][T28976] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.824088][T28976] CPU: 1 UID: 0 PID: 28976 Comm: syz.3.5216 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2380.824133][T28976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2380.824151][T28976] Call Trace: [ 2380.824160][T28976] [ 2380.824171][T28976] dump_stack_lvl+0x16c/0x1f0 [ 2380.824214][T28976] should_fail_ex+0x512/0x640 [ 2380.824260][T28976] ? fs_reclaim_acquire+0xae/0x150 [ 2380.824315][T28976] should_failslab+0xc2/0x120 [ 2380.824356][T28976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2380.824396][T28976] ? do_fanotify_mark+0x270b/0x3600 [ 2380.824447][T28976] do_fanotify_mark+0x270b/0x3600 [ 2380.824509][T28976] ? __pfx_do_fanotify_mark+0x10/0x10 [ 2380.824565][T28976] ? ksys_write+0x1ac/0x250 [ 2380.824598][T28976] ? __pfx_ksys_write+0x10/0x10 [ 2380.824638][T28976] __x64_sys_fanotify_mark+0xbd/0x160 [ 2380.824683][T28976] ? do_syscall_64+0x91/0x490 [ 2380.824719][T28976] ? lockdep_hardirqs_on+0x7c/0x110 [ 2380.824754][T28976] do_syscall_64+0xcd/0x490 [ 2380.824794][T28976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.824826][T28976] RIP: 0033:0x7fe44878e969 [ 2380.824850][T28976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2380.824890][T28976] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 2380.824919][T28976] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2380.824940][T28976] RDX: 000000000000000a RSI: 0000000000000451 RDI: 0000000000000000 [ 2380.824959][T28976] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2380.824979][T28976] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 2380.824999][T28976] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2380.825041][T28976] [ 2381.423444][T28983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5217'. [ 2382.022211][T28992] syz.0.5221 uses obsolete (PF_INET,SOCK_PACKET) [ 2382.079236][T28995] nbd: socks must be embedded in a SOCK_ITEM attr [ 2382.089280][T28995] block nbd0: shutting down sockets [ 2382.360733][T29003] FAULT_INJECTION: forcing a failure. [ 2382.360733][T29003] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.440799][T29003] CPU: 1 UID: 0 PID: 29003 Comm: syz.1.5224 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2382.440843][T29003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2382.440861][T29003] Call Trace: [ 2382.440872][T29003] [ 2382.440884][T29003] dump_stack_lvl+0x16c/0x1f0 [ 2382.440928][T29003] should_fail_ex+0x512/0x640 [ 2382.440973][T29003] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2382.441017][T29003] should_failslab+0xc2/0x120 [ 2382.441076][T29003] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2382.441113][T29003] ? vma_merge_new_range+0x3f8/0xc10 [ 2382.441156][T29003] ? vm_area_alloc+0x1f/0x160 [ 2382.441210][T29003] vm_area_alloc+0x1f/0x160 [ 2382.441256][T29003] __mmap_region+0xfd0/0x27c0 [ 2382.441298][T29003] ? __pfx___mmap_region+0x10/0x10 [ 2382.441334][T29003] ? bpf_ksym_find+0x124/0x1c0 [ 2382.441392][T29003] ? __kernel_text_address+0xd/0x40 [ 2382.441433][T29003] ? unwind_get_return_address+0x59/0xa0 [ 2382.441536][T29003] ? trace_cap_capable+0x18d/0x200 [ 2382.441602][T29003] mmap_region+0x1ab/0x3f0 [ 2382.441641][T29003] ? __get_unmapped_area+0x267/0x440 [ 2382.441744][T29003] do_mmap+0xd8e/0x11b0 [ 2382.441801][T29003] ? __pfx_do_mmap+0x10/0x10 [ 2382.441851][T29003] ? __pfx_down_write_killable+0x10/0x10 [ 2382.441905][T29003] vm_mmap_pgoff+0x281/0x450 [ 2382.441960][T29003] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2382.442011][T29003] ? __fget_files+0x20e/0x3c0 [ 2382.442056][T29003] ksys_mmap_pgoff+0x7d/0x5c0 [ 2382.442103][T29003] ? __pfx_ksys_write+0x10/0x10 [ 2382.442142][T29003] __x64_sys_mmap+0x125/0x190 [ 2382.442181][T29003] do_syscall_64+0xcd/0x490 [ 2382.442223][T29003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.442255][T29003] RIP: 0033:0x7fba1e58e969 [ 2382.442281][T29003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2382.442313][T29003] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2382.442343][T29003] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2382.442365][T29003] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 2382.442386][T29003] RBP: 00007fba1f37c090 R08: 0000000000000002 R09: 0000040000008000 [ 2382.442406][T29003] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 2382.442426][T29003] R13: 0000000000000000 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2382.442469][T29003] [ 2383.290468][T29015] FAULT_INJECTION: forcing a failure. [ 2383.290468][T29015] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.305984][T29015] CPU: 0 UID: 0 PID: 29015 Comm: syz.1.5228 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2383.306030][T29015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2383.306050][T29015] Call Trace: [ 2383.306059][T29015] [ 2383.306071][T29015] dump_stack_lvl+0x16c/0x1f0 [ 2383.306112][T29015] should_fail_ex+0x512/0x640 [ 2383.306152][T29015] ? fs_reclaim_acquire+0xae/0x150 [ 2383.306205][T29015] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2383.306244][T29015] should_failslab+0xc2/0x120 [ 2383.306285][T29015] __kmalloc_noprof+0xd2/0x510 [ 2383.306332][T29015] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2383.306378][T29015] ? tomoyo_profile+0x47/0x60 [ 2383.306434][T29015] tomoyo_path_number_perm+0x245/0x580 [ 2383.306463][T29015] ? tomoyo_path_number_perm+0x237/0x580 [ 2383.306496][T29015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2383.306530][T29015] ? find_held_lock+0x2b/0x80 [ 2383.306596][T29015] ? find_held_lock+0x2b/0x80 [ 2383.306636][T29015] ? hook_file_ioctl_common+0x145/0x410 [ 2383.306673][T29015] ? __fget_files+0x20e/0x3c0 [ 2383.306709][T29015] security_file_ioctl+0x9b/0x240 [ 2383.306744][T29015] __x64_sys_ioctl+0xb7/0x210 [ 2383.306787][T29015] do_syscall_64+0xcd/0x490 [ 2383.306823][T29015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2383.306851][T29015] RIP: 0033:0x7fba1e58e969 [ 2383.306874][T29015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2383.306902][T29015] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2383.306931][T29015] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2383.306949][T29015] RDX: 000000000000000d RSI: 000000004020aeb2 RDI: 0000000000000003 [ 2383.306968][T29015] RBP: 00007fba1f37c090 R08: 0000000000000000 R09: 0000000000000000 [ 2383.306987][T29015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2383.307004][T29015] R13: 0000000000000000 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2383.307044][T29015] [ 2383.307056][T29015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2383.532113][T29017] FAULT_INJECTION: forcing a failure. [ 2383.532113][T29017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2383.566477][T29017] CPU: 0 UID: 0 PID: 29017 Comm: syz.0.5229 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2383.566520][T29017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2383.566533][T29017] Call Trace: [ 2383.566541][T29017] [ 2383.566549][T29017] dump_stack_lvl+0x16c/0x1f0 [ 2383.566580][T29017] should_fail_ex+0x512/0x640 [ 2383.566619][T29017] _copy_from_user+0x2e/0xd0 [ 2383.566657][T29017] move_addr_to_kernel+0x65/0x170 [ 2383.566696][T29017] __sys_connect+0xb1/0x160 [ 2383.566719][T29017] ? __pfx___sys_connect+0x10/0x10 [ 2383.566752][T29017] ? __pfx_ksys_write+0x10/0x10 [ 2383.566784][T29017] __x64_sys_connect+0x72/0xb0 [ 2383.566805][T29017] ? lockdep_hardirqs_on+0x7c/0x110 [ 2383.566831][T29017] do_syscall_64+0xcd/0x490 [ 2383.566861][T29017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2383.566885][T29017] RIP: 0033:0x7f84e458e969 [ 2383.566903][T29017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2383.566926][T29017] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2383.566947][T29017] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2383.566963][T29017] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 2383.566978][T29017] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2383.566992][T29017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2383.567006][T29017] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2383.567034][T29017] [ 2383.727916][ C0] vkms_vblank_simulate: vblank timer overrun [ 2384.286323][T29027] FAULT_INJECTION: forcing a failure. [ 2384.286323][T29027] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.316071][T29029] capability: warning: `syz.1.5231' uses 32-bit capabilities (legacy support in use) [ 2384.326180][T29027] CPU: 1 UID: 0 PID: 29027 Comm: syz.3.5232 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2384.326223][T29027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2384.326241][T29027] Call Trace: [ 2384.326251][T29027] [ 2384.326262][T29027] dump_stack_lvl+0x16c/0x1f0 [ 2384.326306][T29027] should_fail_ex+0x512/0x640 [ 2384.326352][T29027] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2384.326389][T29027] should_failslab+0xc2/0x120 [ 2384.326432][T29027] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2384.326465][T29027] ? madvise_collapse+0x1cb/0xb20 [ 2384.326520][T29027] madvise_collapse+0x1cb/0xb20 [ 2384.326575][T29027] ? mtree_range_walk+0x718/0xc00 [ 2384.326626][T29027] ? __pfx_madvise_collapse+0x10/0x10 [ 2384.326681][T29027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2384.326729][T29027] madvise_vma_behavior+0xca3/0x1d50 [ 2384.326783][T29027] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2384.326836][T29027] ? find_vma_prev+0xda/0x160 [ 2384.326887][T29027] ? __pfx_find_vma_prev+0x10/0x10 [ 2384.326935][T29027] ? get_pid_task+0xfc/0x250 [ 2384.326980][T29027] ? proc_fail_nth_write+0x9f/0x250 [ 2384.327040][T29027] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2384.327087][T29027] madvise_walk_vmas+0x1d1/0x2c0 [ 2384.327135][T29027] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2384.327191][T29027] madvise_do_behavior+0x12b/0x3b0 [ 2384.327236][T29027] ? __pfx___might_resched+0x10/0x10 [ 2384.327287][T29027] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2384.327348][T29027] ? fput+0x70/0xf0 [ 2384.327397][T29027] do_madvise+0x10b/0x170 [ 2384.327448][T29027] __x64_sys_madvise+0xa9/0x110 [ 2384.327495][T29027] ? lockdep_hardirqs_on+0x7c/0x110 [ 2384.327533][T29027] do_syscall_64+0xcd/0x490 [ 2384.327575][T29027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.327617][T29027] RIP: 0033:0x7fe44878e969 [ 2384.327643][T29027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2384.327674][T29027] RSP: 002b:00007fe44960c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2384.327705][T29027] RAX: ffffffffffffffda RBX: 00007fe4489b6080 RCX: 00007fe44878e969 [ 2384.327727][T29027] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 2384.327747][T29027] RBP: 00007fe44960c090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.327767][T29027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.327787][T29027] R13: 0000000000000000 R14: 00007fe4489b6080 R15: 00007ffeabd41a68 [ 2384.327830][T29027] [ 2384.663016][T29029] HfR: entered promiscuous mode [ 2384.673400][T29029] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 2386.954395][T29072] FAULT_INJECTION: forcing a failure. [ 2386.954395][T29072] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.982061][T29072] CPU: 0 UID: 0 PID: 29072 Comm: syz.3.5242 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2386.982108][T29072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2386.982127][T29072] Call Trace: [ 2386.982136][T29072] [ 2386.982149][T29072] dump_stack_lvl+0x16c/0x1f0 [ 2386.982194][T29072] should_fail_ex+0x512/0x640 [ 2386.982241][T29072] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2386.982284][T29072] should_failslab+0xc2/0x120 [ 2386.982337][T29072] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2386.982376][T29072] ? vma_merge_new_range+0x3f8/0xc10 [ 2386.982413][T29072] ? vm_area_alloc+0x1f/0x160 [ 2386.982470][T29072] vm_area_alloc+0x1f/0x160 [ 2386.982520][T29072] __mmap_region+0xfd0/0x27c0 [ 2386.982562][T29072] ? page_table_check_set+0x627/0x750 [ 2386.982604][T29072] ? __pfx___mmap_region+0x10/0x10 [ 2386.982656][T29072] ? __lock_acquire+0x622/0x1c90 [ 2386.982760][T29072] ? trace_cap_capable+0x18d/0x200 [ 2386.982831][T29072] mmap_region+0x1ab/0x3f0 [ 2386.982871][T29072] ? __get_unmapped_area+0x267/0x440 [ 2386.982926][T29072] do_mmap+0xd8e/0x11b0 [ 2386.982983][T29072] ? __pfx_do_mmap+0x10/0x10 [ 2386.983032][T29072] ? __pfx_down_write_killable+0x10/0x10 [ 2386.983086][T29072] vm_mmap_pgoff+0x281/0x450 [ 2386.983141][T29072] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2386.983190][T29072] ? __fget_files+0x20e/0x3c0 [ 2386.983233][T29072] ksys_mmap_pgoff+0x7d/0x5c0 [ 2386.983281][T29072] ? __pfx_ksys_write+0x10/0x10 [ 2386.983330][T29072] __x64_sys_mmap+0x125/0x190 [ 2386.983373][T29072] do_syscall_64+0xcd/0x490 [ 2386.983413][T29072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.983446][T29072] RIP: 0033:0x7fe44878e969 [ 2386.983473][T29072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2386.983506][T29072] RSP: 002b:00007fe44960c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2386.983538][T29072] RAX: ffffffffffffffda RBX: 00007fe4489b6080 RCX: 00007fe44878e969 [ 2386.983560][T29072] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 2386.983580][T29072] RBP: 00007fe44960c090 R08: 0000000000000002 R09: 0000000000008000 [ 2386.983601][T29072] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 2386.983621][T29072] R13: 0000000000000000 R14: 00007fe4489b6080 R15: 00007ffeabd41a68 [ 2386.983663][T29072] [ 2387.221667][ C0] vkms_vblank_simulate: vblank timer overrun [ 2387.289371][ T30] audit: type=1800 audit(6043672262.346:2): pid=29072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5242" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 2387.468256][ T30] audit: type=1800 audit(6043672262.516:3): pid=29071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5240" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 2388.048340][ T30] audit: type=1800 audit(6043672263.096:4): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5245" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 2388.431294][T29101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5248'. [ 2388.453653][T29104] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1255 [ 2388.632229][T29107] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1256 [ 2388.896969][T29101] syz.0.5248 (29101) used greatest stack depth: 19304 bytes left [ 2389.455342][T29120] netlink: 354 bytes leftover after parsing attributes in process `syz.1.5251'. [ 2390.052005][T29131] FAULT_INJECTION: forcing a failure. [ 2390.052005][T29131] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.088571][T29131] CPU: 0 UID: 0 PID: 29131 Comm: syz.0.5254 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2390.088617][T29131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2390.088636][T29131] Call Trace: [ 2390.088646][T29131] [ 2390.088658][T29131] dump_stack_lvl+0x16c/0x1f0 [ 2390.088700][T29131] should_fail_ex+0x512/0x640 [ 2390.088751][T29131] ? fs_reclaim_acquire+0xae/0x150 [ 2390.088801][T29131] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2390.088843][T29131] should_failslab+0xc2/0x120 [ 2390.088888][T29131] __kmalloc_noprof+0xd2/0x510 [ 2390.088929][T29131] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2390.088971][T29131] ? tomoyo_profile+0x47/0x60 [ 2390.089024][T29131] tomoyo_path_number_perm+0x245/0x580 [ 2390.089055][T29131] ? tomoyo_path_number_perm+0x237/0x580 [ 2390.089089][T29131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2390.089123][T29131] ? find_held_lock+0x2b/0x80 [ 2390.089193][T29131] ? find_held_lock+0x2b/0x80 [ 2390.089229][T29131] ? hook_file_ioctl_common+0x145/0x410 [ 2390.089266][T29131] ? __fget_files+0x20e/0x3c0 [ 2390.089300][T29131] security_file_ioctl+0x9b/0x240 [ 2390.089335][T29131] __x64_sys_ioctl+0xb7/0x210 [ 2390.089380][T29131] do_syscall_64+0xcd/0x490 [ 2390.089418][T29131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2390.089447][T29131] RIP: 0033:0x7f84e458e969 [ 2390.089469][T29131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2390.089498][T29131] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2390.089525][T29131] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2390.089544][T29131] RDX: 0000000000000002 RSI: 0000000000008918 RDI: 0020000000000003 [ 2390.089562][T29131] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2390.089579][T29131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2390.089596][T29131] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2390.089632][T29131] [ 2390.090115][T29131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2390.722111][T29147] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5258'. [ 2390.749016][ T30] audit: type=1804 audit(6043672265.806:5): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5259" name="/newroot/sys/kernel/tracing/tracing_cpumask" dev="tracefs" ino=1249 res=1 errno=0 [ 2390.789726][T29147] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5258'. [ 2390.848478][ T30] audit: type=1804 audit(6043672265.836:6): pid=29149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5259" name="/newroot/sys/kernel/tracing/tracing_cpumask" dev="tracefs" ino=1249 res=1 errno=0 [ 2391.140042][T29158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5261'. [ 2391.528374][T29161] FAULT_INJECTION: forcing a failure. [ 2391.528374][T29161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2391.568037][T29163] vhci_hcd: invalid port number 21 [ 2391.573413][T29161] CPU: 1 UID: 0 PID: 29161 Comm: syz.2.5262 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2391.573458][T29161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2391.573478][T29161] Call Trace: [ 2391.573489][T29161] [ 2391.573500][T29161] dump_stack_lvl+0x16c/0x1f0 [ 2391.573570][T29161] should_fail_ex+0x512/0x640 [ 2391.573624][T29161] _copy_from_user+0x2e/0xd0 [ 2391.573676][T29161] copy_msghdr_from_user+0x98/0x160 [ 2391.573725][T29161] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2391.573772][T29161] ? __pfx__kstrtoull+0x10/0x10 [ 2391.573818][T29161] ___sys_sendmsg+0xfe/0x1d0 [ 2391.573860][T29161] ? __pfx____sys_sendmsg+0x10/0x10 [ 2391.573921][T29161] ? find_held_lock+0x2b/0x80 [ 2391.573993][T29161] __sys_sendmmsg+0x200/0x420 [ 2391.574039][T29161] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2391.574094][T29161] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2391.574154][T29161] ? fput+0x70/0xf0 [ 2391.574197][T29161] ? ksys_write+0x1ac/0x250 [ 2391.574231][T29161] ? __pfx_ksys_write+0x10/0x10 [ 2391.574273][T29161] __x64_sys_sendmmsg+0x9c/0x100 [ 2391.574313][T29161] ? lockdep_hardirqs_on+0x7c/0x110 [ 2391.574350][T29161] do_syscall_64+0xcd/0x490 [ 2391.574393][T29161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.574426][T29161] RIP: 0033:0x7fa491d8e969 [ 2391.574453][T29161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2391.574485][T29161] RSP: 002b:00007fa492bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2391.574515][T29161] RAX: ffffffffffffffda RBX: 00007fa491fb5fa0 RCX: 00007fa491d8e969 [ 2391.574537][T29161] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 000000000000000e [ 2391.574558][T29161] RBP: 00007fa492bff090 R08: 0000000000000000 R09: 0000000000000000 [ 2391.574578][T29161] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 2391.574598][T29161] R13: 0000000000000000 R14: 00007fa491fb5fa0 R15: 00007ffdc1d4da28 [ 2391.574640][T29161] [ 2392.132278][T29174] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5266'. [ 2392.159743][T29174] netlink: 338 bytes leftover after parsing attributes in process `syz.1.5266'. [ 2392.534154][T29180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5267'. [ 2392.590666][T29185] FAULT_INJECTION: forcing a failure. [ 2392.590666][T29185] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.626273][T29185] CPU: 0 UID: 0 PID: 29185 Comm: syz.3.5268 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2392.626320][T29185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2392.626340][T29185] Call Trace: [ 2392.626351][T29185] [ 2392.626363][T29185] dump_stack_lvl+0x16c/0x1f0 [ 2392.626407][T29185] should_fail_ex+0x512/0x640 [ 2392.626453][T29185] ? fs_reclaim_acquire+0xae/0x150 [ 2392.626506][T29185] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2392.626550][T29185] should_failslab+0xc2/0x120 [ 2392.626592][T29185] __kmalloc_noprof+0xd2/0x510 [ 2392.626641][T29185] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2392.626688][T29185] ? tomoyo_profile+0x47/0x60 [ 2392.626740][T29185] tomoyo_path_number_perm+0x245/0x580 [ 2392.626774][T29185] ? tomoyo_path_number_perm+0x237/0x580 [ 2392.626815][T29185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2392.626854][T29185] ? find_held_lock+0x2b/0x80 [ 2392.626947][T29185] ? find_held_lock+0x2b/0x80 [ 2392.626990][T29185] ? hook_file_ioctl_common+0x145/0x410 [ 2392.627033][T29185] ? __fget_files+0x20e/0x3c0 [ 2392.627074][T29185] security_file_ioctl+0x9b/0x240 [ 2392.627114][T29185] __x64_sys_ioctl+0xb7/0x210 [ 2392.627167][T29185] do_syscall_64+0xcd/0x490 [ 2392.627208][T29185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2392.627241][T29185] RIP: 0033:0x7fe44878e969 [ 2392.627267][T29185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2392.627299][T29185] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2392.627329][T29185] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2392.627351][T29185] RDX: 0000000000000000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 2392.627370][T29185] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.627390][T29185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.627410][T29185] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2392.627453][T29185] [ 2392.627466][T29185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2393.106296][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 2393.119133][ T30] audit: type=1800 audit(6043672268.186:7): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5265" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 2393.165804][T29192] netlink: 'syz.3.5271': attribute type 2 has an invalid length. [ 2393.494548][T29199] FAULT_INJECTION: forcing a failure. [ 2393.494548][T29199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2393.508466][T29199] CPU: 1 UID: 0 PID: 29199 Comm: syz.1.5272 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2393.508510][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2393.508530][T29199] Call Trace: [ 2393.508541][T29199] [ 2393.508554][T29199] dump_stack_lvl+0x16c/0x1f0 [ 2393.508596][T29199] should_fail_ex+0x512/0x640 [ 2393.508650][T29199] _copy_from_user+0x2e/0xd0 [ 2393.508704][T29199] copy_msghdr_from_user+0x98/0x160 [ 2393.508754][T29199] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2393.508804][T29199] ? __pfx__kstrtoull+0x10/0x10 [ 2393.508851][T29199] ___sys_sendmsg+0xfe/0x1d0 [ 2393.508893][T29199] ? __pfx____sys_sendmsg+0x10/0x10 [ 2393.508954][T29199] ? find_held_lock+0x2b/0x80 [ 2393.509026][T29199] __sys_sendmmsg+0x200/0x420 [ 2393.509071][T29199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2393.509126][T29199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2393.509187][T29199] ? fput+0x70/0xf0 [ 2393.509229][T29199] ? ksys_write+0x1ac/0x250 [ 2393.509264][T29199] ? __pfx_ksys_write+0x10/0x10 [ 2393.509306][T29199] __x64_sys_sendmmsg+0x9c/0x100 [ 2393.509345][T29199] ? lockdep_hardirqs_on+0x7c/0x110 [ 2393.509382][T29199] do_syscall_64+0xcd/0x490 [ 2393.509425][T29199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.509458][T29199] RIP: 0033:0x7fba1e58e969 [ 2393.509484][T29199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2393.509516][T29199] RSP: 002b:00007fba1f33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2393.509547][T29199] RAX: ffffffffffffffda RBX: 00007fba1e7b6160 RCX: 00007fba1e58e969 [ 2393.509569][T29199] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2393.509589][T29199] RBP: 00007fba1f33a090 R08: 0000000000000000 R09: 0000000000000000 [ 2393.509609][T29199] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 2393.509630][T29199] R13: 0000000000000000 R14: 00007fba1e7b6160 R15: 00007fff2cc2dc98 [ 2393.509672][T29199] [ 2393.717174][ C1] vkms_vblank_simulate: vblank timer overrun [ 2394.248366][T29209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1257 [ 2394.344783][T29213] FAULT_INJECTION: forcing a failure. [ 2394.344783][T29213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2394.376446][T29213] CPU: 1 UID: 0 PID: 29213 Comm: syz.1.5274 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2394.376493][T29213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2394.376513][T29213] Call Trace: [ 2394.376523][T29213] [ 2394.376534][T29213] dump_stack_lvl+0x16c/0x1f0 [ 2394.376579][T29213] should_fail_ex+0x512/0x640 [ 2394.376631][T29213] _copy_from_user+0x2e/0xd0 [ 2394.376684][T29213] copy_msghdr_from_user+0x98/0x160 [ 2394.376725][T29213] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2394.376793][T29213] ___sys_sendmsg+0xfe/0x1d0 [ 2394.376835][T29213] ? __pfx____sys_sendmsg+0x10/0x10 [ 2394.376872][T29213] ? __lock_acquire+0x622/0x1c90 [ 2394.376957][T29213] __sys_sendmsg+0x16d/0x220 [ 2394.376998][T29213] ? __pfx___sys_sendmsg+0x10/0x10 [ 2394.377066][T29213] do_syscall_64+0xcd/0x490 [ 2394.377109][T29213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.377142][T29213] RIP: 0033:0x7fba1e58e969 [ 2394.377168][T29213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2394.377200][T29213] RSP: 002b:00007fba1f33a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2394.377231][T29213] RAX: ffffffffffffffda RBX: 00007fba1e7b6160 RCX: 00007fba1e58e969 [ 2394.377253][T29213] RDX: 0000000004044820 RSI: 00002000000002c0 RDI: 0000000000000004 [ 2394.377273][T29213] RBP: 00007fba1f33a090 R08: 0000000000000000 R09: 0000000000000000 [ 2394.377293][T29213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2394.377313][T29213] R13: 0000000000000000 R14: 00007fba1e7b6160 R15: 00007fff2cc2dc98 [ 2394.377356][T29213] [ 2394.543073][ C1] vkms_vblank_simulate: vblank timer overrun [ 2395.082930][T29210] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1258 [ 2396.314267][T29239] FAULT_INJECTION: forcing a failure. [ 2396.314267][T29239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2396.403755][T29239] CPU: 0 UID: 0 PID: 29239 Comm: syz.2.5279 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2396.403798][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2396.403818][T29239] Call Trace: [ 2396.403828][T29239] [ 2396.403841][T29239] dump_stack_lvl+0x16c/0x1f0 [ 2396.403885][T29239] should_fail_ex+0x512/0x640 [ 2396.403938][T29239] _copy_to_user+0x32/0xd0 [ 2396.403989][T29239] rng_dev_read+0x1ea/0x810 [ 2396.404022][T29239] ? __pfx_virtio_read+0x10/0x10 [ 2396.404055][T29239] ? __pfx_rng_dev_read+0x10/0x10 [ 2396.404092][T29239] ? bpf_lsm_file_permission+0x9/0x10 [ 2396.404139][T29239] ? security_file_permission+0x71/0x210 [ 2396.404180][T29239] ? rw_verify_area+0xcf/0x680 [ 2396.404233][T29239] ? __pfx_rng_dev_read+0x10/0x10 [ 2396.404263][T29239] vfs_readv+0x5be/0x8b0 [ 2396.404302][T29239] ? __pfx_vfs_readv+0x10/0x10 [ 2396.404332][T29239] ? __lock_acquire+0xb8a/0x1c90 [ 2396.404388][T29239] ? __fget_files+0x20e/0x3c0 [ 2396.404418][T29239] ? __pfx_sched_clock+0x10/0x10 [ 2396.404477][T29239] ? do_readv+0x132/0x340 [ 2396.404504][T29239] do_readv+0x132/0x340 [ 2396.404549][T29239] ? __pfx_do_readv+0x10/0x10 [ 2396.404590][T29239] do_syscall_64+0xcd/0x490 [ 2396.404634][T29239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.404667][T29239] RIP: 0033:0x7fa491d8e969 [ 2396.404692][T29239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2396.404725][T29239] RSP: 002b:00007fa492b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2396.404755][T29239] RAX: ffffffffffffffda RBX: 00007fa491fb6240 RCX: 00007fa491d8e969 [ 2396.404777][T29239] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 2396.404796][T29239] RBP: 00007fa492b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 2396.404815][T29239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.404835][T29239] R13: 0000000000000001 R14: 00007fa491fb6240 R15: 00007ffdc1d4da28 [ 2396.404875][T29239] [ 2397.522159][T29266] FAULT_INJECTION: forcing a failure. [ 2397.522159][T29266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2397.546057][T29266] CPU: 0 UID: 0 PID: 29266 Comm: syz.0.5289 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2397.546105][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2397.546125][T29266] Call Trace: [ 2397.546136][T29266] [ 2397.546150][T29266] dump_stack_lvl+0x16c/0x1f0 [ 2397.546194][T29266] should_fail_ex+0x512/0x640 [ 2397.546247][T29266] _copy_to_user+0x32/0xd0 [ 2397.546304][T29266] simple_read_from_buffer+0xcb/0x170 [ 2397.546361][T29266] proc_fail_nth_read+0x197/0x270 [ 2397.546413][T29266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2397.546476][T29266] ? rw_verify_area+0xcf/0x680 [ 2397.546529][T29266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2397.546582][T29266] vfs_read+0x1e1/0xc60 [ 2397.546621][T29266] ? __pfx___mutex_lock+0x10/0x10 [ 2397.546661][T29266] ? __pfx_vfs_read+0x10/0x10 [ 2397.546706][T29266] ? __fget_files+0x20e/0x3c0 [ 2397.546751][T29266] ksys_read+0x12a/0x250 [ 2397.546785][T29266] ? __pfx_ksys_read+0x10/0x10 [ 2397.546831][T29266] do_syscall_64+0xcd/0x490 [ 2397.546874][T29266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.546907][T29266] RIP: 0033:0x7f84e458d37c [ 2397.546933][T29266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2397.546964][T29266] RSP: 002b:00007f84e5437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2397.546995][T29266] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458d37c [ 2397.547017][T29266] RDX: 000000000000000f RSI: 00007f84e54370a0 RDI: 0000000000000004 [ 2397.547036][T29266] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2397.547056][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2397.547076][T29266] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2397.547117][T29266] [ 2398.571225][T29286] FAULT_INJECTION: forcing a failure. [ 2398.571225][T29286] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.680346][T29286] CPU: 1 UID: 0 PID: 29286 Comm: syz.0.5293 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2398.680401][T29286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2398.680422][T29286] Call Trace: [ 2398.680432][T29286] [ 2398.680444][T29286] dump_stack_lvl+0x16c/0x1f0 [ 2398.680488][T29286] should_fail_ex+0x512/0x640 [ 2398.680534][T29286] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2398.680578][T29286] should_failslab+0xc2/0x120 [ 2398.680629][T29286] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2398.680669][T29286] ? __alloc_skb+0x2b2/0x380 [ 2398.680712][T29286] __alloc_skb+0x2b2/0x380 [ 2398.680749][T29286] ? __pfx___alloc_skb+0x10/0x10 [ 2398.680791][T29286] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2398.680847][T29286] netlink_alloc_large_skb+0x69/0x130 [ 2398.680898][T29286] netlink_sendmsg+0x6a1/0xdd0 [ 2398.680953][T29286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2398.681018][T29286] ____sys_sendmsg+0xa95/0xc70 [ 2398.681070][T29286] ? copy_msghdr_from_user+0x10a/0x160 [ 2398.681110][T29286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2398.681181][T29286] ___sys_sendmsg+0x134/0x1d0 [ 2398.681223][T29286] ? __pfx____sys_sendmsg+0x10/0x10 [ 2398.681260][T29286] ? __lock_acquire+0x622/0x1c90 [ 2398.681348][T29286] __sys_sendmsg+0x16d/0x220 [ 2398.681389][T29286] ? __pfx___sys_sendmsg+0x10/0x10 [ 2398.681463][T29286] do_syscall_64+0xcd/0x490 [ 2398.681505][T29286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.681539][T29286] RIP: 0033:0x7f84e458e969 [ 2398.681564][T29286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2398.681596][T29286] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2398.681628][T29286] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2398.681650][T29286] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 2398.681670][T29286] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2398.681691][T29286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.681710][T29286] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2398.681752][T29286] [ 2398.904961][ C1] vkms_vblank_simulate: vblank timer overrun [ 2399.732235][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5294'. [ 2400.776371][T29332] FAULT_INJECTION: forcing a failure. [ 2400.776371][T29332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2400.808287][T29332] CPU: 1 UID: 0 PID: 29332 Comm: syz.3.5306 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2400.808334][T29332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2400.808354][T29332] Call Trace: [ 2400.808364][T29332] [ 2400.808377][T29332] dump_stack_lvl+0x16c/0x1f0 [ 2400.808420][T29332] should_fail_ex+0x512/0x640 [ 2400.808475][T29332] strncpy_from_user+0x3b/0x2e0 [ 2400.808523][T29332] getname_flags.part.0+0x8f/0x550 [ 2400.808574][T29332] getname_flags+0x93/0xf0 [ 2400.808605][T29332] do_sys_openat2+0xb8/0x1d0 [ 2400.808651][T29332] ? __pfx_do_sys_openat2+0x10/0x10 [ 2400.808702][T29332] ? __fget_files+0x20e/0x3c0 [ 2400.808742][T29332] __x64_sys_openat+0x174/0x210 [ 2400.808791][T29332] ? __pfx___x64_sys_openat+0x10/0x10 [ 2400.808835][T29332] ? ksys_write+0x1ac/0x250 [ 2400.808884][T29332] do_syscall_64+0xcd/0x490 [ 2400.808926][T29332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.808967][T29332] RIP: 0033:0x7fe44878e969 [ 2400.808993][T29332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2400.809024][T29332] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2400.809053][T29332] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2400.809075][T29332] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 2400.809096][T29332] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2400.809116][T29332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.809135][T29332] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2400.809177][T29332] [ 2400.987394][ C1] vkms_vblank_simulate: vblank timer overrun [ 2401.485475][T29347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5310'. [ 2402.720658][T29381] FAULT_INJECTION: forcing a failure. [ 2402.720658][T29381] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.767544][T29381] CPU: 1 UID: 0 PID: 29381 Comm: syz.1.5314 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2402.767591][T29381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2402.767611][T29381] Call Trace: [ 2402.767622][T29381] [ 2402.767634][T29381] dump_stack_lvl+0x16c/0x1f0 [ 2402.767680][T29381] should_fail_ex+0x512/0x640 [ 2402.767735][T29381] ? fs_reclaim_acquire+0xae/0x150 [ 2402.767791][T29381] should_failslab+0xc2/0x120 [ 2402.767835][T29381] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2402.767867][T29381] ? fsnotify_add_mark_locked+0x211/0xfd0 [ 2402.767904][T29381] ? fsnotify_add_mark_locked+0x507/0xfd0 [ 2402.767948][T29381] fsnotify_add_mark_locked+0x507/0xfd0 [ 2402.767998][T29381] do_fanotify_mark+0x2cdd/0x3600 [ 2402.768065][T29381] ? __pfx_do_fanotify_mark+0x10/0x10 [ 2402.768128][T29381] ? ksys_write+0x1ac/0x250 [ 2402.768162][T29381] ? __pfx_ksys_write+0x10/0x10 [ 2402.768205][T29381] __x64_sys_fanotify_mark+0xbd/0x160 [ 2402.768249][T29381] ? do_syscall_64+0x91/0x490 [ 2402.768287][T29381] ? lockdep_hardirqs_on+0x7c/0x110 [ 2402.768322][T29381] do_syscall_64+0xcd/0x490 [ 2402.768364][T29381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2402.768397][T29381] RIP: 0033:0x7fba1e58e969 [ 2402.768423][T29381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2402.768455][T29381] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 2402.768485][T29381] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2402.768506][T29381] RDX: 000000000000000a RSI: 0000000000000451 RDI: 0000000000000000 [ 2402.768525][T29381] RBP: 00007fba1f37c090 R08: 0000000000000000 R09: 0000000000000000 [ 2402.768545][T29381] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 2402.768563][T29381] R13: 0000000000000000 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2402.768606][T29381] [ 2402.961113][ C1] vkms_vblank_simulate: vblank timer overrun [ 2405.787235][T29439] FAULT_INJECTION: forcing a failure. [ 2405.787235][T29439] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.878295][T29439] CPU: 0 UID: 0 PID: 29439 Comm: syz.0.5326 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2405.878345][T29439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2405.878363][T29439] Call Trace: [ 2405.878373][T29439] [ 2405.878385][T29439] dump_stack_lvl+0x16c/0x1f0 [ 2405.878427][T29439] should_fail_ex+0x512/0x640 [ 2405.878473][T29439] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2405.878516][T29439] should_failslab+0xc2/0x120 [ 2405.878560][T29439] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2405.878600][T29439] ? mas_alloc_nodes+0x18b/0x8b0 [ 2405.878641][T29439] mas_alloc_nodes+0x18b/0x8b0 [ 2405.878685][T29439] mas_node_count_gfp+0x105/0x130 [ 2405.878722][T29439] mas_preallocate+0x53e/0xcd0 [ 2405.878785][T29439] ? __pfx_mas_preallocate+0x10/0x10 [ 2405.878843][T29439] ? vm_area_alloc+0x1f/0x160 [ 2405.878894][T29439] ? lockdep_init_map_type+0x5c/0x280 [ 2405.878935][T29439] __mmap_region+0x139b/0x27c0 [ 2405.878980][T29439] ? __pfx___mmap_region+0x10/0x10 [ 2405.879018][T29439] ? bpf_ksym_find+0x124/0x1c0 [ 2405.879077][T29439] ? __kernel_text_address+0xd/0x40 [ 2405.879119][T29439] ? unwind_get_return_address+0x59/0xa0 [ 2405.879228][T29439] ? trace_cap_capable+0x18d/0x200 [ 2405.879296][T29439] mmap_region+0x1ab/0x3f0 [ 2405.879335][T29439] ? __get_unmapped_area+0x267/0x440 [ 2405.879390][T29439] do_mmap+0xd8e/0x11b0 [ 2405.879448][T29439] ? __pfx_do_mmap+0x10/0x10 [ 2405.879499][T29439] ? __pfx_down_write_killable+0x10/0x10 [ 2405.879551][T29439] vm_mmap_pgoff+0x281/0x450 [ 2405.879608][T29439] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2405.879659][T29439] ? __fget_files+0x20e/0x3c0 [ 2405.879705][T29439] ksys_mmap_pgoff+0x7d/0x5c0 [ 2405.879760][T29439] ? __pfx_ksys_write+0x10/0x10 [ 2405.879801][T29439] __x64_sys_mmap+0x125/0x190 [ 2405.879841][T29439] do_syscall_64+0xcd/0x490 [ 2405.879884][T29439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.879917][T29439] RIP: 0033:0x7f84e458e969 [ 2405.879943][T29439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2405.879975][T29439] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2405.880005][T29439] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2405.880027][T29439] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 2405.880047][T29439] RBP: 00007f84e5437090 R08: 0000000000000002 R09: 0000040000008000 [ 2405.880067][T29439] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 2405.880088][T29439] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2405.880130][T29439] [ 2406.145700][ C0] vkms_vblank_simulate: vblank timer overrun [ 2406.916478][T29454] FAULT_INJECTION: forcing a failure. [ 2406.916478][T29454] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.988917][T29454] CPU: 0 UID: 0 PID: 29454 Comm: syz.0.5328 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2406.988965][T29454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2406.988983][T29454] Call Trace: [ 2406.988994][T29454] [ 2406.989006][T29454] dump_stack_lvl+0x16c/0x1f0 [ 2406.989049][T29454] should_fail_ex+0x512/0x640 [ 2406.989094][T29454] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2406.989130][T29454] should_failslab+0xc2/0x120 [ 2406.989172][T29454] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2406.989204][T29454] ? resv_map_alloc+0x7e/0x400 [ 2406.989245][T29454] resv_map_alloc+0x7e/0x400 [ 2406.989283][T29454] hugetlbfs_get_inode+0x33f/0x730 [ 2406.989319][T29454] ? __fget_files+0x20e/0x3c0 [ 2406.989350][T29454] hugetlb_file_setup+0x15b/0x620 [ 2406.989392][T29454] ksys_mmap_pgoff+0x189/0x5c0 [ 2406.989439][T29454] __x64_sys_mmap+0x125/0x190 [ 2406.989485][T29454] do_syscall_64+0xcd/0x490 [ 2406.989520][T29454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.989547][T29454] RIP: 0033:0x7f84e458e969 [ 2406.989568][T29454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2406.989596][T29454] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2406.989621][T29454] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2406.989639][T29454] RDX: 0000000000000002 RSI: 0000000000200006 RDI: 0000000000000000 [ 2406.989656][T29454] RBP: 00007f84e5437090 R08: 0000000000000602 R09: 0000300000000000 [ 2406.989673][T29454] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000001 [ 2406.989689][T29454] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2406.989724][T29454] [ 2407.170758][ C0] vkms_vblank_simulate: vblank timer overrun [ 2407.678537][T29470] FAULT_INJECTION: forcing a failure. [ 2407.678537][T29470] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.718601][T29470] CPU: 0 UID: 0 PID: 29470 Comm: syz.1.5331 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2407.718649][T29470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2407.718668][T29470] Call Trace: [ 2407.718679][T29470] [ 2407.718691][T29470] dump_stack_lvl+0x16c/0x1f0 [ 2407.718735][T29470] should_fail_ex+0x512/0x640 [ 2407.718781][T29470] ? fs_reclaim_acquire+0xae/0x150 [ 2407.718835][T29470] ? tomoyo_encode2+0x100/0x3e0 [ 2407.718874][T29470] should_failslab+0xc2/0x120 [ 2407.718916][T29470] __kmalloc_noprof+0xd2/0x510 [ 2407.718965][T29470] tomoyo_encode2+0x100/0x3e0 [ 2407.719014][T29470] tomoyo_encode+0x29/0x50 [ 2407.719054][T29470] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2407.719103][T29470] ? tomoyo_profile+0x47/0x60 [ 2407.719153][T29470] tomoyo_path_number_perm+0x245/0x580 [ 2407.719188][T29470] ? tomoyo_path_number_perm+0x237/0x580 [ 2407.719228][T29470] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2407.719265][T29470] ? find_held_lock+0x2b/0x80 [ 2407.719354][T29470] ? find_held_lock+0x2b/0x80 [ 2407.719397][T29470] ? hook_file_ioctl_common+0x145/0x410 [ 2407.719440][T29470] ? __fget_files+0x20e/0x3c0 [ 2407.719480][T29470] security_file_ioctl+0x9b/0x240 [ 2407.719520][T29470] __x64_sys_ioctl+0xb7/0x210 [ 2407.719573][T29470] do_syscall_64+0xcd/0x490 [ 2407.719616][T29470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.719649][T29470] RIP: 0033:0x7fba1e58e969 [ 2407.719674][T29470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2407.719706][T29470] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.719737][T29470] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2407.719760][T29470] RDX: 000000000000000d RSI: 000000004020aeb2 RDI: 0000000000000003 [ 2407.719779][T29470] RBP: 00007fba1f37c090 R08: 0000000000000000 R09: 0000000000000000 [ 2407.719799][T29470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2407.719819][T29470] R13: 0000000000000000 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2407.719863][T29470] [ 2407.719889][T29470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2408.170029][T29478] bcache: register_bcache() error : failed to open device [ 2408.459334][T29485] FAULT_INJECTION: forcing a failure. [ 2408.459334][T29485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2408.496977][T29485] CPU: 0 UID: 0 PID: 29485 Comm: syz.0.5335 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2408.497024][T29485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2408.497044][T29485] Call Trace: [ 2408.497055][T29485] [ 2408.497067][T29485] dump_stack_lvl+0x16c/0x1f0 [ 2408.497113][T29485] should_fail_ex+0x512/0x640 [ 2408.497166][T29485] ? __pfx_event_inject_write+0x10/0x10 [ 2408.497211][T29485] _copy_from_user+0x2e/0xd0 [ 2408.497262][T29485] memdup_user_nul+0x6c/0x120 [ 2408.497310][T29485] event_inject_write+0xc6/0x2030 [ 2408.497356][T29485] ? __pfx_aa_file_perm+0x10/0x10 [ 2408.497407][T29485] ? __lock_acquire+0xb8a/0x1c90 [ 2408.497441][T29485] ? __pfx_event_inject_write+0x10/0x10 [ 2408.497495][T29485] ? iovec_from_user+0xbb/0x140 [ 2408.497575][T29485] ? __pfx_event_inject_write+0x10/0x10 [ 2408.497618][T29485] vfs_writev+0x5df/0xde0 [ 2408.497649][T29485] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2408.497697][T29485] ? __pfx_vfs_writev+0x10/0x10 [ 2408.497728][T29485] ? __mutex_lock+0x1ca/0xb90 [ 2408.497778][T29485] ? __pfx___mutex_lock+0x10/0x10 [ 2408.497833][T29485] ? __fget_files+0x20e/0x3c0 [ 2408.497863][T29485] ? __fget_files+0x180/0x3c0 [ 2408.497906][T29485] ? do_writev+0x132/0x340 [ 2408.497934][T29485] do_writev+0x132/0x340 [ 2408.497967][T29485] ? __pfx_do_writev+0x10/0x10 [ 2408.498012][T29485] do_syscall_64+0xcd/0x490 [ 2408.498054][T29485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.498094][T29485] RIP: 0033:0x7f84e458e969 [ 2408.498121][T29485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2408.498152][T29485] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2408.498181][T29485] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2408.498201][T29485] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 2408.498220][T29485] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2408.498239][T29485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2408.498256][T29485] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2408.498296][T29485] [ 2408.716627][ C0] vkms_vblank_simulate: vblank timer overrun [ 2409.066484][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 2410.706305][T29524] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1259 [ 2411.685998][T29525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1260 [ 2412.431028][T29543] FAULT_INJECTION: forcing a failure. [ 2412.431028][T29543] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.510818][T29543] CPU: 0 UID: 0 PID: 29543 Comm: syz.3.5344 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2412.510859][T29543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2412.510876][T29543] Call Trace: [ 2412.510886][T29543] [ 2412.510896][T29543] dump_stack_lvl+0x16c/0x1f0 [ 2412.510936][T29543] should_fail_ex+0x512/0x640 [ 2412.510976][T29543] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2412.511012][T29543] should_failslab+0xc2/0x120 [ 2412.511048][T29543] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2412.511081][T29543] ? mas_alloc_nodes+0x18b/0x8b0 [ 2412.511115][T29543] mas_alloc_nodes+0x18b/0x8b0 [ 2412.511150][T29543] mas_node_count_gfp+0x105/0x130 [ 2412.511191][T29543] mas_preallocate+0x53e/0xcd0 [ 2412.511237][T29543] ? __pfx_mas_preallocate+0x10/0x10 [ 2412.511288][T29543] ? vm_area_alloc+0x1f/0x160 [ 2412.511332][T29543] ? lockdep_init_map_type+0x5c/0x280 [ 2412.511366][T29543] __mmap_region+0x139b/0x27c0 [ 2412.511401][T29543] ? page_table_check_set+0x627/0x750 [ 2412.511435][T29543] ? __pfx___mmap_region+0x10/0x10 [ 2412.511476][T29543] ? __lock_acquire+0x622/0x1c90 [ 2412.511561][T29543] ? trace_cap_capable+0x18d/0x200 [ 2412.511618][T29543] mmap_region+0x1ab/0x3f0 [ 2412.511652][T29543] ? __get_unmapped_area+0x267/0x440 [ 2412.511699][T29543] do_mmap+0xd8e/0x11b0 [ 2412.511762][T29543] ? __pfx_do_mmap+0x10/0x10 [ 2412.511806][T29543] ? __pfx_down_write_killable+0x10/0x10 [ 2412.511852][T29543] vm_mmap_pgoff+0x281/0x450 [ 2412.511900][T29543] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2412.511945][T29543] ? __fget_files+0x20e/0x3c0 [ 2412.511983][T29543] ksys_mmap_pgoff+0x7d/0x5c0 [ 2412.512024][T29543] ? __pfx_ksys_write+0x10/0x10 [ 2412.512058][T29543] __x64_sys_mmap+0x125/0x190 [ 2412.512093][T29543] do_syscall_64+0xcd/0x490 [ 2412.512130][T29543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.512165][T29543] RIP: 0033:0x7fe44878e969 [ 2412.512187][T29543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2412.512215][T29543] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2412.512241][T29543] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2412.512259][T29543] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 2412.512276][T29543] RBP: 00007fe44962d090 R08: 0000000000000002 R09: 0000000000008000 [ 2412.512293][T29543] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 2412.512310][T29543] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2412.512346][T29543] [ 2412.770817][ C0] vkms_vblank_simulate: vblank timer overrun [ 2413.749087][T29557] random: crng reseeded on system resumption [ 2414.808508][T29564] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe03c00 pfn:0x7fe00 [ 2414.850004][T29564] flags: 0xfff10000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 2414.869500][T29564] raw: 00fff10000000004 0000000000000000 dead000000000122 0000000000000000 [ 2414.889145][T29564] raw: ffff88807fe03c00 0000000000000000 00000001ffffffff 0000000000000000 [ 2414.939593][T29564] page dumped because: unmovable page [ 2415.015268][T29564] page_owner tracks the page as allocated [ 2415.039656][T29564] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 25497, tgid 25497 (syz-executor), ts 2174355175457, free_ts 2170224229332 [ 2415.099041][T29578] FAULT_INJECTION: forcing a failure. [ 2415.099041][T29578] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.115158][T29578] CPU: 0 UID: 0 PID: 29578 Comm: syz.0.5350 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2415.115204][T29578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2415.115224][T29578] Call Trace: [ 2415.115234][T29578] [ 2415.115247][T29578] dump_stack_lvl+0x16c/0x1f0 [ 2415.115292][T29578] should_fail_ex+0x512/0x640 [ 2415.115338][T29578] ? fs_reclaim_acquire+0xae/0x150 [ 2415.115393][T29578] ? tomoyo_encode2+0x100/0x3e0 [ 2415.115433][T29578] should_failslab+0xc2/0x120 [ 2415.115476][T29578] __kmalloc_noprof+0xd2/0x510 [ 2415.115526][T29578] tomoyo_encode2+0x100/0x3e0 [ 2415.115575][T29578] tomoyo_encode+0x29/0x50 [ 2415.115617][T29578] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2415.115666][T29578] ? tomoyo_profile+0x47/0x60 [ 2415.115726][T29578] tomoyo_path_number_perm+0x245/0x580 [ 2415.115762][T29578] ? tomoyo_path_number_perm+0x237/0x580 [ 2415.115803][T29578] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2415.115842][T29578] ? find_held_lock+0x2b/0x80 [ 2415.115926][T29578] ? find_held_lock+0x2b/0x80 [ 2415.115969][T29578] ? hook_file_ioctl_common+0x145/0x410 [ 2415.116012][T29578] ? __fget_files+0x20e/0x3c0 [ 2415.116053][T29578] security_file_ioctl+0x9b/0x240 [ 2415.116094][T29578] __x64_sys_ioctl+0xb7/0x210 [ 2415.116148][T29578] do_syscall_64+0xcd/0x490 [ 2415.116191][T29578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2415.116224][T29578] RIP: 0033:0x7f84e458e969 [ 2415.116249][T29578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2415.116281][T29578] RSP: 002b:00007f84e5416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2415.116312][T29578] RAX: ffffffffffffffda RBX: 00007f84e47b6080 RCX: 00007f84e458e969 [ 2415.116334][T29578] RDX: 0000000000000038 RSI: 000000000000ae41 RDI: 0000000000000003 [ 2415.116354][T29578] RBP: 00007f84e5416090 R08: 0000000000000000 R09: 0000000000000000 [ 2415.116374][T29578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2415.116393][T29578] R13: 0000000000000000 R14: 00007f84e47b6080 R15: 00007ffdece1b378 [ 2415.116436][T29578] [ 2415.116465][T29578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2415.205948][T29564] post_alloc_hook+0x1c0/0x230 [ 2415.346432][T29564] get_page_from_freelist+0x135c/0x3950 [ 2415.352179][T29564] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2415.445000][T29564] alloc_pages_mpol+0x1fb/0x550 [ 2415.470956][T29564] alloc_pages_noprof+0x131/0x390 [ 2415.564187][T29564] __vmalloc_node_range_noprof+0x732/0x1520 [ 2415.581314][T29564] vmalloc_user_noprof+0x9e/0xe0 [ 2415.586480][T29564] kcov_ioctl+0x4c/0x730 [ 2415.592161][T29564] __x64_sys_ioctl+0x18b/0x210 [ 2415.597126][T29564] do_syscall_64+0xcd/0x490 [ 2415.601847][T29564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2415.618549][T29564] page last free pid 25005 tgid 25005 stack trace: [ 2415.627821][T29564] __free_frozen_pages+0x7fe/0x1180 [ 2415.656624][T29564] __put_partials+0x16d/0x1c0 [ 2415.672879][T29564] qlist_free_all+0x4d/0x120 [ 2415.708182][T29564] kasan_quarantine_reduce+0x195/0x1e0 [ 2415.713764][T29564] __kasan_slab_alloc+0x69/0x90 [ 2415.758684][T29564] __kmalloc_noprof+0x1d4/0x510 [ 2415.763650][T29564] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2415.820206][T29564] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2415.826225][T29564] tomoyo_file_open+0x6b/0x90 [ 2415.848222][T29564] security_file_open+0x84/0x1e0 [ 2415.858164][T29564] do_dentry_open+0x596/0x1c10 [ 2415.863036][T29564] vfs_open+0x82/0x3f0 [ 2415.872107][T29564] path_openat+0x1de4/0x2cb0 [ 2415.876794][T29564] do_filp_open+0x20b/0x470 [ 2415.881916][T29564] do_sys_openat2+0x11b/0x1d0 [ 2415.886781][T29564] __x64_sys_openat+0x174/0x210 [ 2417.272371][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2417.279952][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2417.377190][T29590] FAULT_INJECTION: forcing a failure. [ 2417.377190][T29590] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.377226][T29590] CPU: 1 UID: 0 PID: 29590 Comm: syz.3.5351 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2417.377255][T29590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2417.377269][T29590] Call Trace: [ 2417.377276][T29590] [ 2417.377285][T29590] dump_stack_lvl+0x16c/0x1f0 [ 2417.377316][T29590] should_fail_ex+0x512/0x640 [ 2417.377348][T29590] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2417.377379][T29590] should_failslab+0xc2/0x120 [ 2417.377410][T29590] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2417.377437][T29590] ? alloc_empty_file+0x55/0x1e0 [ 2417.377474][T29590] alloc_empty_file+0x55/0x1e0 [ 2417.377514][T29590] alloc_file_clone+0x5f/0x110 [ 2417.377548][T29590] do_shmat+0x733/0x1330 [ 2417.377585][T29590] ? __pfx_do_shmat+0x10/0x10 [ 2417.377637][T29590] __x64_sys_shmat+0xd7/0x170 [ 2417.377680][T29590] ? __pfx_ksys_write+0x10/0x10 [ 2417.377714][T29590] ? __pfx___x64_sys_shmat+0x10/0x10 [ 2417.377759][T29590] ? rcu_is_watching+0x12/0xc0 [ 2417.377791][T29590] ? do_syscall_64+0x91/0x490 [ 2417.377821][T29590] do_syscall_64+0xcd/0x490 [ 2417.377851][T29590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2417.377874][T29590] RIP: 0033:0x7fe44878e969 [ 2417.377892][T29590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2417.377915][T29590] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 2417.377936][T29590] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2417.377952][T29590] RDX: 00000000fffffffa RSI: 0000200000000580 RDI: 0000000000000000 [ 2417.377967][T29590] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2417.377981][T29590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2417.377995][T29590] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2417.378024][T29590] [ 2417.615143][T29614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5356'. [ 2418.170943][T29630] FAULT_INJECTION: forcing a failure. [ 2418.170943][T29630] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.186115][T29630] CPU: 0 UID: 0 PID: 29630 Comm: syz.1.5360 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2418.186165][T29630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2418.186185][T29630] Call Trace: [ 2418.186196][T29630] [ 2418.186209][T29630] dump_stack_lvl+0x16c/0x1f0 [ 2418.186253][T29630] should_fail_ex+0x512/0x640 [ 2418.186300][T29630] ? fs_reclaim_acquire+0xae/0x150 [ 2418.186354][T29630] ? tomoyo_encode2+0x100/0x3e0 [ 2418.186393][T29630] should_failslab+0xc2/0x120 [ 2418.186436][T29630] __kmalloc_noprof+0xd2/0x510 [ 2418.186473][T29630] ? d_absolute_path+0x136/0x1a0 [ 2418.186525][T29630] tomoyo_encode2+0x100/0x3e0 [ 2418.186573][T29630] tomoyo_encode+0x29/0x50 [ 2418.186613][T29630] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2418.186676][T29630] tomoyo_path_number_perm+0x245/0x580 [ 2418.186711][T29630] ? tomoyo_path_number_perm+0x237/0x580 [ 2418.186751][T29630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2418.186790][T29630] ? find_held_lock+0x2b/0x80 [ 2418.186873][T29630] ? find_held_lock+0x2b/0x80 [ 2418.186916][T29630] ? hook_file_ioctl_common+0x145/0x410 [ 2418.186958][T29630] ? __fget_files+0x20e/0x3c0 [ 2418.186999][T29630] security_file_ioctl+0x9b/0x240 [ 2418.187039][T29630] __x64_sys_ioctl+0xb7/0x210 [ 2418.187092][T29630] do_syscall_64+0xcd/0x490 [ 2418.187135][T29630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2418.187167][T29630] RIP: 0033:0x7fba1e58e969 [ 2418.187193][T29630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2418.187226][T29630] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2418.187257][T29630] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2418.187278][T29630] RDX: 0000000000000000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 2418.187298][T29630] RBP: 00007fba1f37c090 R08: 0000000000000000 R09: 0000000000000000 [ 2418.187319][T29630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2418.187339][T29630] R13: 0000000000000000 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2418.187382][T29630] [ 2418.423718][T29630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2419.104890][T29643] ubi0: attaching mtd0 [ 2419.147868][T29643] ubi0: scanning is finished [ 2419.183520][T29643] ubi0: empty MTD device detected [ 2419.508423][T29643] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2419.549114][T29643] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2419.587408][T29643] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2419.652216][T29643] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 2419.787701][T29643] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2419.837205][T29643] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2419.867028][T29643] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3814248721 [ 2419.953975][T29643] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2420.102882][T29646] ubi0: background thread "ubi_bgt0d" started, PID 29646 [ 2420.245322][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5366'. [ 2420.258790][T29665] FAULT_INJECTION: forcing a failure. [ 2420.258790][T29665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2420.278360][T29665] CPU: 1 UID: 0 PID: 29665 Comm: syz.2.5366 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2420.278411][T29665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2420.278431][T29665] Call Trace: [ 2420.278442][T29665] [ 2420.278454][T29665] dump_stack_lvl+0x16c/0x1f0 [ 2420.278499][T29665] should_fail_ex+0x512/0x640 [ 2420.278553][T29665] _copy_from_user+0x2e/0xd0 [ 2420.278605][T29665] memdup_user+0x6b/0xe0 [ 2420.278648][T29665] __x64_sys_kexec_load+0x18e/0x230 [ 2420.278697][T29665] do_syscall_64+0xcd/0x490 [ 2420.278741][T29665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2420.278774][T29665] RIP: 0033:0x7fa491d8e969 [ 2420.278800][T29665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2420.278833][T29665] RSP: 002b:00007fa492bde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 2420.278864][T29665] RAX: ffffffffffffffda RBX: 00007fa491fb6080 RCX: 00007fa491d8e969 [ 2420.278887][T29665] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 2420.278907][T29665] RBP: 00007fa492bde090 R08: 0000000000000000 R09: 0000000000000000 [ 2420.278928][T29665] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 2420.278948][T29665] R13: 0000000000000000 R14: 00007fa491fb6080 R15: 00007ffdc1d4da28 [ 2420.278990][T29665] [ 2421.050204][T29657] FAULT_INJECTION: forcing a failure. [ 2421.050204][T29657] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.149526][T29657] CPU: 0 UID: 0 PID: 29657 Comm: syz.0.5364 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2421.149572][T29657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2421.149591][T29657] Call Trace: [ 2421.149601][T29657] [ 2421.149613][T29657] dump_stack_lvl+0x16c/0x1f0 [ 2421.149658][T29657] should_fail_ex+0x512/0x640 [ 2421.149705][T29657] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2421.149738][T29657] should_failslab+0xc2/0x120 [ 2421.149768][T29657] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2421.149796][T29657] ? __alloc_skb+0x2b2/0x380 [ 2421.149827][T29657] __alloc_skb+0x2b2/0x380 [ 2421.149852][T29657] ? __pfx___alloc_skb+0x10/0x10 [ 2421.149877][T29657] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2421.149925][T29657] sock_wmalloc+0xd4/0x120 [ 2421.149950][T29657] l2tp_ip_sendmsg+0x1b5/0x18d0 [ 2421.149976][T29657] ? __import_iovec+0x1dd/0x650 [ 2421.150012][T29657] ? __might_fault+0xe3/0x190 [ 2421.150040][T29657] ? __pfx_l2tp_ip_sendmsg+0x10/0x10 [ 2421.150067][T29657] inet_sendmsg+0x119/0x140 [ 2421.150094][T29657] ____sys_sendmsg+0x973/0xc70 [ 2421.150130][T29657] ? copy_msghdr_from_user+0x10a/0x160 [ 2421.150158][T29657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2421.150198][T29657] ? __pfx__kstrtoull+0x10/0x10 [ 2421.150231][T29657] ___sys_sendmsg+0x134/0x1d0 [ 2421.150267][T29657] ? __pfx____sys_sendmsg+0x10/0x10 [ 2421.150310][T29657] ? find_held_lock+0x2b/0x80 [ 2421.150360][T29657] __sys_sendmmsg+0x200/0x420 [ 2421.150392][T29657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2421.150431][T29657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2421.150473][T29657] ? fput+0x70/0xf0 [ 2421.150505][T29657] ? ksys_write+0x1ac/0x250 [ 2421.150528][T29657] ? __pfx_ksys_write+0x10/0x10 [ 2421.150558][T29657] __x64_sys_sendmmsg+0x9c/0x100 [ 2421.150586][T29657] ? lockdep_hardirqs_on+0x7c/0x110 [ 2421.150612][T29657] do_syscall_64+0xcd/0x490 [ 2421.150642][T29657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2421.150665][T29657] RIP: 0033:0x7f84e458e969 [ 2421.150683][T29657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2421.150715][T29657] RSP: 002b:00007f84e5416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2421.150745][T29657] RAX: ffffffffffffffda RBX: 00007f84e47b6080 RCX: 00007f84e458e969 [ 2421.150766][T29657] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2421.150785][T29657] RBP: 00007f84e5416090 R08: 0000000000000000 R09: 0000000000000000 [ 2421.150804][T29657] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 2421.150824][T29657] R13: 0000000000000000 R14: 00007f84e47b6080 R15: 00007ffdece1b378 [ 2421.150867][T29657] [ 2421.420975][ C0] vkms_vblank_simulate: vblank timer overrun [ 2421.633801][T29672] futex_wake_op: syz.1.5370 tries to shift op by -9; fix this program [ 2421.639577][T29675] FAULT_INJECTION: forcing a failure. [ 2421.639577][T29675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.663378][T29675] CPU: 0 UID: 0 PID: 29675 Comm: syz.3.5371 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2421.663428][T29675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2421.663458][T29675] Call Trace: [ 2421.663469][T29675] [ 2421.663481][T29675] dump_stack_lvl+0x16c/0x1f0 [ 2421.663526][T29675] should_fail_ex+0x512/0x640 [ 2421.663581][T29675] strncpy_from_user+0x3b/0x2e0 [ 2421.663631][T29675] getname_flags.part.0+0x8f/0x550 [ 2421.663686][T29675] getname_flags+0x93/0xf0 [ 2421.663719][T29675] __x64_sys_execve+0x74/0xb0 [ 2421.663754][T29675] do_syscall_64+0xcd/0x490 [ 2421.663796][T29675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2421.663829][T29675] RIP: 0033:0x7fe44878e969 [ 2421.663855][T29675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2421.663887][T29675] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2421.663918][T29675] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2421.663939][T29675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 2421.663960][T29675] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2421.663980][T29675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2421.664000][T29675] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2421.664042][T29675] [ 2421.810617][ C0] vkms_vblank_simulate: vblank timer overrun [ 2421.833391][T29673] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1261 [ 2422.376002][T29689] block nbd7: not configured, cannot reconfigure [ 2422.383443][T29692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1262 [ 2422.395381][T29688] FAULT_INJECTION: forcing a failure. [ 2422.395381][T29688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2422.430155][T29688] CPU: 0 UID: 0 PID: 29688 Comm: syz.3.5374 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2422.430190][T29688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2422.430205][T29688] Call Trace: [ 2422.430212][T29688] [ 2422.430221][T29688] dump_stack_lvl+0x16c/0x1f0 [ 2422.430252][T29688] should_fail_ex+0x512/0x640 [ 2422.430298][T29688] _copy_to_user+0x32/0xd0 [ 2422.430337][T29688] rng_dev_read+0x1ea/0x810 [ 2422.430362][T29688] ? __pfx_virtio_read+0x10/0x10 [ 2422.430386][T29688] ? __pfx_rng_dev_read+0x10/0x10 [ 2422.430413][T29688] ? bpf_lsm_file_permission+0x9/0x10 [ 2422.430449][T29688] ? security_file_permission+0x71/0x210 [ 2422.430479][T29688] ? rw_verify_area+0xcf/0x680 [ 2422.430516][T29688] ? __pfx_rng_dev_read+0x10/0x10 [ 2422.430539][T29688] vfs_read+0x1e1/0xc60 [ 2422.430568][T29688] ? __pfx_vfs_read+0x10/0x10 [ 2422.430590][T29688] ? find_held_lock+0x2b/0x80 [ 2422.430622][T29688] ? __fget_files+0x204/0x3c0 [ 2422.430649][T29688] ? __fget_files+0x20e/0x3c0 [ 2422.430680][T29688] ksys_read+0x12a/0x250 [ 2422.430704][T29688] ? __pfx_ksys_read+0x10/0x10 [ 2422.430736][T29688] do_syscall_64+0xcd/0x490 [ 2422.430766][T29688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.430790][T29688] RIP: 0033:0x7fe44878e969 [ 2422.430808][T29688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2422.430831][T29688] RSP: 002b:00007fe44962d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2422.430852][T29688] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878e969 [ 2422.430868][T29688] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000003 [ 2422.430882][T29688] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2422.430896][T29688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2422.430928][T29688] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2422.430957][T29688] [ 2422.632860][ C0] vkms_vblank_simulate: vblank timer overrun [ 2422.903378][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'. [ 2423.953322][T29728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5382'. [ 2423.971617][T29728] vlan1: entered allmulticast mode [ 2423.992035][T29728] veth0_vlan: entered allmulticast mode [ 2424.879634][T29755] FAULT_INJECTION: forcing a failure. [ 2424.879634][T29755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2424.935836][T29755] CPU: 0 UID: 0 PID: 29755 Comm: syz.0.5387 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2424.935880][T29755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2424.935899][T29755] Call Trace: [ 2424.935909][T29755] [ 2424.935921][T29755] dump_stack_lvl+0x16c/0x1f0 [ 2424.935965][T29755] should_fail_ex+0x512/0x640 [ 2424.936016][T29755] _copy_to_user+0x32/0xd0 [ 2424.936068][T29755] simple_read_from_buffer+0xcb/0x170 [ 2424.936123][T29755] proc_fail_nth_read+0x197/0x270 [ 2424.936181][T29755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2424.936234][T29755] ? rw_verify_area+0xcf/0x680 [ 2424.936284][T29755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2424.936335][T29755] vfs_read+0x1e1/0xc60 [ 2424.936373][T29755] ? __pfx___mutex_lock+0x10/0x10 [ 2424.936411][T29755] ? __pfx_vfs_read+0x10/0x10 [ 2424.936453][T29755] ? __fget_files+0x20e/0x3c0 [ 2424.936495][T29755] ksys_read+0x12a/0x250 [ 2424.936526][T29755] ? __pfx_ksys_read+0x10/0x10 [ 2424.936569][T29755] do_syscall_64+0xcd/0x490 [ 2424.936611][T29755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2424.936644][T29755] RIP: 0033:0x7f84e458d37c [ 2424.936669][T29755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2424.936700][T29755] RSP: 002b:00007f84e5437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2424.936729][T29755] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458d37c [ 2424.936750][T29755] RDX: 000000000000000f RSI: 00007f84e54370a0 RDI: 0000000000000004 [ 2424.936770][T29755] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2424.936789][T29755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2424.936808][T29755] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2424.936850][T29755] [ 2425.121873][ C0] vkms_vblank_simulate: vblank timer overrun [ 2425.303386][T29764] FAULT_INJECTION: forcing a failure. [ 2425.303386][T29764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2425.364514][T29764] CPU: 1 UID: 0 PID: 29764 Comm: syz.3.5390 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2425.364560][T29764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2425.364580][T29764] Call Trace: [ 2425.364591][T29764] [ 2425.364603][T29764] dump_stack_lvl+0x16c/0x1f0 [ 2425.364646][T29764] should_fail_ex+0x512/0x640 [ 2425.364698][T29764] _copy_to_user+0x32/0xd0 [ 2425.364750][T29764] simple_read_from_buffer+0xcb/0x170 [ 2425.364805][T29764] proc_fail_nth_read+0x197/0x270 [ 2425.364856][T29764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2425.364911][T29764] ? rw_verify_area+0xcf/0x680 [ 2425.364961][T29764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2425.365012][T29764] vfs_read+0x1e1/0xc60 [ 2425.365049][T29764] ? __pfx___mutex_lock+0x10/0x10 [ 2425.365090][T29764] ? __pfx_vfs_read+0x10/0x10 [ 2425.365142][T29764] ? __fget_files+0x20e/0x3c0 [ 2425.365187][T29764] ksys_read+0x12a/0x250 [ 2425.365220][T29764] ? __pfx_ksys_read+0x10/0x10 [ 2425.365256][T29764] ? fput+0x70/0xf0 [ 2425.365304][T29764] do_syscall_64+0xcd/0x490 [ 2425.365347][T29764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2425.365379][T29764] RIP: 0033:0x7fe44878d37c [ 2425.365405][T29764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2425.365436][T29764] RSP: 002b:00007fe44962d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2425.365467][T29764] RAX: ffffffffffffffda RBX: 00007fe4489b5fa0 RCX: 00007fe44878d37c [ 2425.365488][T29764] RDX: 000000000000000f RSI: 00007fe44962d0a0 RDI: 0000000000000004 [ 2425.365509][T29764] RBP: 00007fe44962d090 R08: 0000000000000000 R09: 0000000000000000 [ 2425.365529][T29764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2425.365553][T29764] R13: 0000000000000000 R14: 00007fe4489b5fa0 R15: 00007ffeabd41a68 [ 2425.365596][T29764] [ 2426.595651][T29782] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1263 [ 2426.825660][T29795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 2426.958630][T29803] FAULT_INJECTION: forcing a failure. [ 2426.958630][T29803] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2427.016968][T29803] CPU: 1 UID: 0 PID: 29803 Comm: syz.0.5396 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2427.017015][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2427.017033][T29803] Call Trace: [ 2427.017044][T29803] [ 2427.017056][T29803] dump_stack_lvl+0x16c/0x1f0 [ 2427.017100][T29803] should_fail_ex+0x512/0x640 [ 2427.017154][T29803] should_fail_alloc_page+0xe7/0x130 [ 2427.017200][T29803] prepare_alloc_pages+0x3c2/0x610 [ 2427.017249][T29803] ? __kernel_text_address+0xd/0x40 [ 2427.017297][T29803] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2427.017347][T29803] ? __lock_acquire+0x622/0x1c90 [ 2427.017386][T29803] ? __pfx_stack_trace_save+0x10/0x10 [ 2427.017434][T29803] ? stack_depot_save_flags+0x28/0xa40 [ 2427.017483][T29803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2427.017527][T29803] ? look_up_lock_class+0x59/0x150 [ 2427.017566][T29803] ? register_lock_class+0x41/0x4c0 [ 2427.017597][T29803] ? find_held_lock+0x2b/0x80 [ 2427.017650][T29803] ? __lock_acquire+0xb8a/0x1c90 [ 2427.017685][T29803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2427.017727][T29803] ? policy_nodemask+0xea/0x4e0 [ 2427.017774][T29803] alloc_pages_mpol+0x1fb/0x550 [ 2427.017820][T29803] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2427.017876][T29803] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2427.017936][T29803] vma_alloc_folio_noprof+0xed/0x1e0 [ 2427.017989][T29803] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2427.018037][T29803] ? find_held_lock+0x2b/0x80 [ 2427.018081][T29803] ? __handle_mm_fault+0x1092/0x5450 [ 2427.018119][T29803] __handle_mm_fault+0x2fac/0x5450 [ 2427.018163][T29803] ? __pfx___handle_mm_fault+0x10/0x10 [ 2427.018218][T29803] ? find_vma+0xbf/0x140 [ 2427.018261][T29803] ? __pfx_find_vma+0x10/0x10 [ 2427.018312][T29803] handle_mm_fault+0x3fe/0xad0 [ 2427.018354][T29803] do_user_addr_fault+0x7a6/0x1370 [ 2427.018395][T29803] ? rcu_is_watching+0x12/0xc0 [ 2427.018447][T29803] exc_page_fault+0x5c/0xb0 [ 2427.018484][T29803] asm_exc_page_fault+0x26/0x30 [ 2427.018515][T29803] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 2427.018566][T29803] Code: e9 14 11 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 2427.018598][T29803] RSP: 0018:ffffc9000399faf0 EFLAGS: 00050202 [ 2427.018624][T29803] RAX: 0000000000000033 RBX: 0000000000000002 RCX: 0000000000000002 [ 2427.018644][T29803] RDX: ffffed100b62ac01 RSI: ffff88805b156000 RDI: 0000200000003800 [ 2427.018665][T29803] RBP: 0000200000003800 R08: 0000000000000000 R09: ffffed100b62ac00 [ 2427.018687][T29803] R10: ffff88805b156001 R11: 0000000000000001 R12: ffffc9000399fda0 [ 2427.018708][T29803] R13: 0000200000003802 R14: ffff88805b156000 R15: 00007ffffffff000 [ 2427.018753][T29803] _copy_to_iter+0x383/0x16f0 [ 2427.018807][T29803] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2427.018854][T29803] ? __pfx__copy_to_iter+0x10/0x10 [ 2427.018906][T29803] ? kernfs_seq_stop+0xcd/0x120 [ 2427.018969][T29803] ? kernfs_put_active+0x86/0xe0 [ 2427.019014][T29803] seq_read_iter+0xcf8/0x12c0 [ 2427.019085][T29803] kernfs_fop_read_iter+0x40f/0x5a0 [ 2427.019132][T29803] ? rw_verify_area+0xcf/0x680 [ 2427.019189][T29803] vfs_read+0x8bc/0xc60 [ 2427.019229][T29803] ? __pfx___mutex_lock+0x10/0x10 [ 2427.019268][T29803] ? __pfx_vfs_read+0x10/0x10 [ 2427.019331][T29803] ksys_read+0x12a/0x250 [ 2427.019364][T29803] ? __pfx_ksys_read+0x10/0x10 [ 2427.019411][T29803] do_syscall_64+0xcd/0x490 [ 2427.019453][T29803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2427.019486][T29803] RIP: 0033:0x7f84e458e969 [ 2427.019511][T29803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2427.019542][T29803] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2427.019571][T29803] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2427.019593][T29803] RDX: 00000000000000a8 RSI: 0000200000003800 RDI: 0000000000000003 [ 2427.019613][T29803] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2427.019633][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2427.019652][T29803] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2427.019695][T29803] [ 2427.432930][T29789] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1264 [ 2428.317487][T29818] FAULT_INJECTION: forcing a failure. [ 2428.317487][T29818] name failslab, interval 1, probability 0, space 0, times 0 [ 2428.348440][T29818] CPU: 1 UID: 0 PID: 29818 Comm: syz.1.5400 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2428.348487][T29818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2428.348506][T29818] Call Trace: [ 2428.348517][T29818] [ 2428.348529][T29818] dump_stack_lvl+0x16c/0x1f0 [ 2428.348573][T29818] should_fail_ex+0x512/0x640 [ 2428.348620][T29818] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2428.348665][T29818] should_failslab+0xc2/0x120 [ 2428.348708][T29818] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2428.348749][T29818] ? shmem_alloc_inode+0x25/0x50 [ 2428.348802][T29818] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 2428.348849][T29818] shmem_alloc_inode+0x25/0x50 [ 2428.348903][T29818] alloc_inode+0x64/0x240 [ 2428.348950][T29818] new_inode+0x22/0x1c0 [ 2428.348990][T29818] ? trace_cap_capable+0x18d/0x200 [ 2428.349047][T29818] shmem_get_inode+0x19a/0xfb0 [ 2428.349100][T29818] ? __vm_enough_memory+0x184/0x3f0 [ 2428.349152][T29818] __shmem_file_setup+0x16f/0x300 [ 2428.349191][T29818] shmem_zero_setup+0x93/0x1a0 [ 2428.349236][T29818] __mmap_region+0x2036/0x27c0 [ 2428.349281][T29818] ? __pfx___mmap_region+0x10/0x10 [ 2428.349319][T29818] ? bpf_ksym_find+0x124/0x1c0 [ 2428.349377][T29818] ? __kernel_text_address+0xd/0x40 [ 2428.349418][T29818] ? unwind_get_return_address+0x59/0xa0 [ 2428.349527][T29818] ? trace_cap_capable+0x18d/0x200 [ 2428.349595][T29818] mmap_region+0x1ab/0x3f0 [ 2428.349636][T29818] ? __get_unmapped_area+0x267/0x440 [ 2428.349690][T29818] do_mmap+0xd8e/0x11b0 [ 2428.349746][T29818] ? __pfx_do_mmap+0x10/0x10 [ 2428.349797][T29818] ? __pfx_down_write_killable+0x10/0x10 [ 2428.349851][T29818] vm_mmap_pgoff+0x281/0x450 [ 2428.349914][T29818] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2428.349967][T29818] ? __fget_files+0x20e/0x3c0 [ 2428.350011][T29818] ksys_mmap_pgoff+0x7d/0x5c0 [ 2428.350059][T29818] ? __pfx_ksys_write+0x10/0x10 [ 2428.350098][T29818] __x64_sys_mmap+0x125/0x190 [ 2428.350139][T29818] do_syscall_64+0xcd/0x490 [ 2428.350182][T29818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2428.350215][T29818] RIP: 0033:0x7fba1e58e969 [ 2428.350241][T29818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2428.350273][T29818] RSP: 002b:00007fba1f37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2428.350303][T29818] RAX: ffffffffffffffda RBX: 00007fba1e7b5fa0 RCX: 00007fba1e58e969 [ 2428.350325][T29818] RDX: 00004000000000df RSI: 000000000002000d RDI: 0000000000000000 [ 2428.350345][T29818] RBP: 00007fba1f37c090 R08: 0000000000000404 R09: 0000000000008000 [ 2428.350366][T29818] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 2428.350385][T29818] R13: 0000000000000001 R14: 00007fba1e7b5fa0 R15: 00007fff2cc2dc98 [ 2428.350458][T29818] [ 2429.749076][T29826] netlink: zone id is out of range [ 2429.763955][T29826] netlink: zone id is out of range [ 2429.792959][T29826] netlink: zone id is out of range [ 2429.848383][T29826] netlink: zone id is out of range [ 2429.860776][T29826] netlink: zone id is out of range [ 2429.879541][T29826] netlink: zone id is out of range [ 2429.908151][T29826] netlink: zone id is out of range [ 2429.998155][T29826] netlink: zone id is out of range [ 2430.056488][T29839] nvme_fabrics: missing parameter 'transport=%s' [ 2430.078281][T29826] netlink: zone id is out of range [ 2430.085334][T29826] netlink: zone id is out of range [ 2430.092157][T29839] nvme_fabrics: missing parameter 'nqn=%s' [ 2431.499569][T29863] FAULT_INJECTION: forcing a failure. [ 2431.499569][T29863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.619279][T29863] CPU: 0 UID: 0 PID: 29863 Comm: syz.0.5410 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2431.619324][T29863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2431.619344][T29863] Call Trace: [ 2431.619354][T29863] [ 2431.619374][T29863] dump_stack_lvl+0x16c/0x1f0 [ 2431.619417][T29863] should_fail_ex+0x512/0x640 [ 2431.619470][T29863] _copy_to_user+0x32/0xd0 [ 2431.619521][T29863] simple_read_from_buffer+0xcb/0x170 [ 2431.619577][T29863] proc_fail_nth_read+0x197/0x270 [ 2431.619626][T29863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2431.619679][T29863] ? rw_verify_area+0xcf/0x680 [ 2431.619729][T29863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2431.619779][T29863] vfs_read+0x1e1/0xc60 [ 2431.619814][T29863] ? do_fanotify_mark+0x56d/0x3600 [ 2431.619861][T29863] ? __pfx_vfs_read+0x10/0x10 [ 2431.619905][T29863] ? __pfx_do_fanotify_mark+0x10/0x10 [ 2431.619963][T29863] ksys_read+0x12a/0x250 [ 2431.619997][T29863] ? __pfx_ksys_read+0x10/0x10 [ 2431.620042][T29863] do_syscall_64+0xcd/0x490 [ 2431.620084][T29863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2431.620119][T29863] RIP: 0033:0x7f84e458d37c [ 2431.620144][T29863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2431.620176][T29863] RSP: 002b:00007f84e5437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2431.620207][T29863] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458d37c [ 2431.620228][T29863] RDX: 000000000000000f RSI: 00007f84e54370a0 RDI: 0000000000000002 [ 2431.620248][T29863] RBP: 00007f84e5437090 R08: 0000000000000000 R09: 0000000000000000 [ 2431.620268][T29863] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 2431.620287][T29863] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2431.620329][T29863] [ 2431.812714][ C0] vkms_vblank_simulate: vblank timer overrun [ 2432.517168][T29879] FAULT_INJECTION: forcing a failure. [ 2432.517168][T29879] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.548234][T29879] CPU: 0 UID: 0 PID: 29879 Comm: syz.1.5413 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2432.548289][T29879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2432.548309][T29879] Call Trace: [ 2432.548319][T29879] [ 2432.548331][T29879] dump_stack_lvl+0x16c/0x1f0 [ 2432.548375][T29879] should_fail_ex+0x512/0x640 [ 2432.548418][T29879] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2432.548463][T29879] should_failslab+0xc2/0x120 [ 2432.548506][T29879] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2432.548546][T29879] ? mas_alloc_nodes+0x18b/0x8b0 [ 2432.548585][T29879] mas_alloc_nodes+0x18b/0x8b0 [ 2432.548627][T29879] mas_node_count_gfp+0x105/0x130 [ 2432.548661][T29879] mas_preallocate+0x53e/0xcd0 [ 2432.548706][T29879] ? __memcg_slab_post_alloc_hook+0x500/0x9c0 [ 2432.548754][T29879] ? __pfx_mas_preallocate+0x10/0x10 [ 2432.548813][T29879] ? anon_vma_name+0x75/0x100 [ 2432.548864][T29879] __split_vma+0x33b/0x1030 [ 2432.548908][T29879] ? __pfx___split_vma+0x10/0x10 [ 2432.548965][T29879] vms_gather_munmap_vmas+0x392/0x1310 [ 2432.549015][T29879] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2432.549058][T29879] ? mas_walk+0x6a6/0x910 [ 2432.549108][T29879] __mmap_region+0x314/0x27c0 [ 2432.549152][T29879] ? __pfx___mmap_region+0x10/0x10 [ 2432.549190][T29879] ? bpf_ksym_find+0x124/0x1c0 [ 2432.549248][T29879] ? __kernel_text_address+0xd/0x40 [ 2432.549297][T29879] ? unwind_get_return_address+0x59/0xa0 [ 2432.549339][T29879] ? arch_stack_walk+0xa6/0x100 [ 2432.549389][T29879] ? __lock_acquire+0x622/0x1c90 [ 2432.549476][T29879] ? trace_cap_capable+0x18d/0x200 [ 2432.549540][T29879] mmap_region+0x1ab/0x3f0 [ 2432.549579][T29879] ? __get_unmapped_area+0x267/0x440 [ 2432.549631][T29879] do_mmap+0xd8e/0x11b0 [ 2432.549686][T29879] ? __pfx_do_mmap+0x10/0x10 [ 2432.549736][T29879] ? __pfx_down_write_killable+0x10/0x10 [ 2432.549790][T29879] vm_mmap_pgoff+0x281/0x450 [ 2432.549844][T29879] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2432.549896][T29879] ? __fget_files+0x20e/0x3c0 [ 2432.549941][T29879] ksys_mmap_pgoff+0x7d/0x5c0 [ 2432.549989][T29879] ? __pfx_ksys_write+0x10/0x10 [ 2432.550028][T29879] __x64_sys_mmap+0x125/0x190 [ 2432.550099][T29879] do_syscall_64+0xcd/0x490 [ 2432.550142][T29879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2432.550175][T29879] RIP: 0033:0x7fba1e58e969 [ 2432.550200][T29879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2432.550232][T29879] RSP: 002b:00007fba1f35b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2432.550261][T29879] RAX: ffffffffffffffda RBX: 00007fba1e7b6080 RCX: 00007fba1e58e969 [ 2432.550295][T29879] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 2432.550314][T29879] RBP: 00007fba1f35b090 R08: 0000000000000007 R09: 0000000000028000 [ 2432.550334][T29879] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 2432.550353][T29879] R13: 0000000000000000 R14: 00007fba1e7b6080 R15: 00007fff2cc2dc98 [ 2432.550395][T29879] [ 2432.851686][ C0] vkms_vblank_simulate: vblank timer overrun [ 2433.592791][T29888] FAULT_INJECTION: forcing a failure. [ 2433.592791][T29888] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.688449][T29888] CPU: 0 UID: 0 PID: 29888 Comm: syz.2.5416 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2433.688496][T29888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2433.688516][T29888] Call Trace: [ 2433.688526][T29888] [ 2433.688538][T29888] dump_stack_lvl+0x16c/0x1f0 [ 2433.688582][T29888] should_fail_ex+0x512/0x640 [ 2433.688628][T29888] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2433.688673][T29888] should_failslab+0xc2/0x120 [ 2433.688715][T29888] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2433.688754][T29888] ? mas_alloc_nodes+0x18b/0x8b0 [ 2433.688795][T29888] mas_alloc_nodes+0x18b/0x8b0 [ 2433.688838][T29888] mas_node_count_gfp+0x105/0x130 [ 2433.688877][T29888] mas_preallocate+0x53e/0xcd0 [ 2433.688929][T29888] ? __pfx_mas_preallocate+0x10/0x10 [ 2433.688999][T29888] vma_link+0x135/0x6a0 [ 2433.689044][T29888] ? __pfx_vma_link+0x10/0x10 [ 2433.689082][T29888] ? lockdep_hardirqs_on+0x7c/0x110 [ 2433.689131][T29888] ? __init_rwsem+0x12d/0x1b0 [ 2433.689172][T29888] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 2433.689210][T29888] copy_vma+0x68a/0xa50 [ 2433.689255][T29888] ? __pfx_copy_vma+0x10/0x10 [ 2433.689292][T29888] ? __schedule+0x1181/0x5de0 [ 2433.689361][T29888] copy_vma_and_data+0x1cf/0x7b0 [ 2433.689413][T29888] ? __pfx_copy_vma_and_data+0x10/0x10 [ 2433.689451][T29888] ? irqentry_exit+0x3b/0x90 [ 2433.689486][T29888] ? lockdep_hardirqs_on+0x7c/0x110 [ 2433.689529][T29888] ? __vma_enter_locked+0x163/0x3f0 [ 2433.689574][T29888] ? find_held_lock+0x2b/0x80 [ 2433.689619][T29888] ? move_vma+0x536/0x1740 [ 2433.689667][T29888] move_vma+0x548/0x1740 [ 2433.689713][T29888] ? __pfx_move_vma+0x10/0x10 [ 2433.689749][T29888] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 2433.689805][T29888] ? hugetlb_get_unmapped_area+0x1ae/0x2a0 [ 2433.689853][T29888] ? hugetlb_get_unmapped_area+0x1b7/0x2a0 [ 2433.689902][T29888] ? cap_mmap_addr+0x4b/0x120 [ 2433.689951][T29888] ? bpf_lsm_mmap_addr+0x9/0x10 [ 2433.690014][T29888] ? security_mmap_addr+0x6c/0x1e0 [ 2433.690055][T29888] ? __get_unmapped_area+0x267/0x440 [ 2433.690110][T29888] ? vrm_set_new_addr+0x208/0x290 [ 2433.690146][T29888] __do_sys_mremap+0xe07/0x1590 [ 2433.690184][T29888] ? __pfx___do_sys_mremap+0x10/0x10 [ 2433.690224][T29888] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2433.690271][T29888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2433.690318][T29888] ? __fget_files+0x20e/0x3c0 [ 2433.690387][T29888] do_syscall_64+0xcd/0x490 [ 2433.690431][T29888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2433.690465][T29888] RIP: 0033:0x7fa491d8e969 [ 2433.690490][T29888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2433.690523][T29888] RSP: 002b:00007fa492bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2433.690553][T29888] RAX: ffffffffffffffda RBX: 00007fa491fb6080 RCX: 00007fa491d8e969 [ 2433.690575][T29888] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 2433.690595][T29888] RBP: 00007fa492bde090 R08: 0000000020000000 R09: 0000000000000000 [ 2433.690615][T29888] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2433.690634][T29888] R13: 0000000000000000 R14: 00007fa491fb6080 R15: 00007ffdc1d4da28 [ 2433.690677][T29888] [ 2434.014135][ C0] vkms_vblank_simulate: vblank timer overrun [ 2438.859490][T29952] FAULT_INJECTION: forcing a failure. [ 2438.859490][T29952] name failslab, interval 1, probability 0, space 0, times 0 [ 2438.872915][T29952] CPU: 1 UID: 0 PID: 29952 Comm: syz.1.5429 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2438.872957][T29952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2438.872976][T29952] Call Trace: [ 2438.872985][T29952] [ 2438.872996][T29952] dump_stack_lvl+0x16c/0x1f0 [ 2438.873037][T29952] should_fail_ex+0x512/0x640 [ 2438.873083][T29952] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2438.873126][T29952] should_failslab+0xc2/0x120 [ 2438.873168][T29952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2438.873205][T29952] ? alloc_empty_file+0x55/0x1e0 [ 2438.873254][T29952] alloc_empty_file+0x55/0x1e0 [ 2438.873301][T29952] path_openat+0xda/0x2cb0 [ 2438.873333][T29952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2438.873381][T29952] ? __pfx_path_openat+0x10/0x10 [ 2438.873418][T29952] ? __lock_acquire+0xb8a/0x1c90 [ 2438.873454][T29952] do_filp_open+0x20b/0x470 [ 2438.873490][T29952] ? __pfx_do_filp_open+0x10/0x10 [ 2438.873555][T29952] ? alloc_fd+0x471/0x7d0 [ 2438.873598][T29952] do_sys_openat2+0x11b/0x1d0 [ 2438.873645][T29952] ? __pfx_do_sys_openat2+0x10/0x10 [ 2438.873720][T29952] __x64_sys_openat+0x174/0x210 [ 2438.873769][T29952] ? __pfx___x64_sys_openat+0x10/0x10 [ 2438.873823][T29952] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2438.873869][T29952] do_syscall_64+0xcd/0x490 [ 2438.873911][T29952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2438.873943][T29952] RIP: 0033:0x7fba1e58e969 [ 2438.873967][T29952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2438.873998][T29952] RSP: 002b:00007fba1f35b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2438.874025][T29952] RAX: ffffffffffffffda RBX: 00007fba1e7b6080 RCX: 00007fba1e58e969 [ 2438.874040][T29952] RDX: 0000000000008402 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2438.874055][T29952] RBP: 00007fba1f35b090 R08: 0000000000000000 R09: 0000000000000000 [ 2438.874069][T29952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2438.874082][T29952] R13: 0000000000000000 R14: 00007fba1e7b6080 R15: 00007fff2cc2dc98 [ 2438.874111][T29952] [ 2439.451927][T29959] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5430' sets config #0 [ 2439.517363][T29967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.599721][T29967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.213738][T29979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5434'. [ 2442.648706][T25514] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 2443.613524][T30019] FAULT_INJECTION: forcing a failure. [ 2443.613524][T30019] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.698409][T30019] CPU: 1 UID: 0 PID: 30019 Comm: syz.0.5441 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2443.698454][T30019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2443.698474][T30019] Call Trace: [ 2443.698484][T30019] [ 2443.698496][T30019] dump_stack_lvl+0x16c/0x1f0 [ 2443.698549][T30019] should_fail_ex+0x512/0x640 [ 2443.698594][T30019] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2443.698638][T30019] should_failslab+0xc2/0x120 [ 2443.698679][T30019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2443.698716][T30019] ? __proc_create+0xc3/0x8c0 [ 2443.698756][T30019] ? __proc_create+0x2ce/0x8c0 [ 2443.698804][T30019] __proc_create+0x2ce/0x8c0 [ 2443.698845][T30019] ? __pfx___proc_create+0x10/0x10 [ 2443.698904][T30019] _proc_mkdir+0xb9/0x200 [ 2443.698946][T30019] ? __pfx__proc_mkdir+0x10/0x10 [ 2443.698999][T30019] nfs_fs_proc_net_init+0x9b/0x1e0 [ 2443.699055][T30019] nfs_net_init+0x130/0x300 [ 2443.699105][T30019] ? __pfx_nfs_net_init+0x10/0x10 [ 2443.699153][T30019] ops_init+0x1e2/0x5f0 [ 2443.699200][T30019] setup_net+0x1ff/0x510 [ 2443.699244][T30019] ? lockdep_init_map_type+0x5c/0x280 [ 2443.699278][T30019] ? __pfx_setup_net+0x10/0x10 [ 2443.699323][T30019] ? debug_mutex_init+0x37/0x70 [ 2443.699369][T30019] copy_net_ns+0x2a6/0x5f0 [ 2443.699420][T30019] create_new_namespaces+0x3ea/0xa90 [ 2443.699478][T30019] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2443.699543][T30019] ksys_unshare+0x45b/0xa40 [ 2443.699578][T30019] ? __pfx_ksys_unshare+0x10/0x10 [ 2443.699614][T30019] ? xfd_validate_state+0x61/0x180 [ 2443.699661][T30019] __x64_sys_unshare+0x31/0x40 [ 2443.699693][T30019] do_syscall_64+0xcd/0x490 [ 2443.699736][T30019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.699768][T30019] RIP: 0033:0x7f84e458e969 [ 2443.699793][T30019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2443.699823][T30019] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2443.699853][T30019] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2443.699875][T30019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2443.699893][T30019] RBP: 00007f84e4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2443.699911][T30019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2443.699931][T30019] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2443.699974][T30019] [ 2444.178688][T30019] ------------[ cut here ]------------ [ 2444.184290][T30019] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 2444.194301][T30019] WARNING: CPU: 1 PID: 30019 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 2444.203843][T30019] Modules linked in: [ 2444.208159][T30019] CPU: 1 UID: 0 PID: 30019 Comm: syz.0.5441 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2444.220768][T30019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2444.231785][T30019] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 2444.237875][T30019] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 a3 a2 8b 48 c7 c7 e0 a2 a2 8b e8 13 f1 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 84 90 5e ff 90 48 b8 00 00 00 00 00 [ 2444.257667][T30019] RSP: 0018:ffffc90004e6fb08 EFLAGS: 00010282 [ 2444.263922][T30019] RAX: 0000000000000000 RBX: ffff888029649500 RCX: ffffffff817aba48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2444.271999][T30019] RDX: ffff888028ba9e00 RSI: ffffffff817aba55 RDI: 0000000000000001 [ 2444.280068][T30019] RBP: ffff888025434700 R08: 0000000000000001 R09: 0000000000000000 [ 2444.288150][T30019] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888025434640 [ 2444.296222][T30019] R13: ffff888025434724 R14: ffff888025bd1364 R15: dffffc0000000000 [ 2444.304396][T30019] FS: 00007f84e54376c0(0000) GS:ffff888124a7b000(0000) knlGS:0000000000000000 [ 2444.313590][T30019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2444.322643][T30019] CR2: 0000001b2e17d000 CR3: 0000000030c42000 CR4: 00000000003526f0 [ 2444.330731][T30019] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2444.338829][T30019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2444.347027][T30019] Call Trace: [ 2444.350408][T30019] [ 2444.353390][T30019] ? __pfx_remove_proc_entry+0x10/0x10 [ 2444.359012][T30019] ? cache_destroy_net+0x31/0x50 [ 2444.364017][T30019] ? sunrpc_exit_net+0x37/0x90 [ 2444.368895][T30019] sunrpc_exit_net+0x46/0x90 [ 2444.373542][T30019] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 2444.378926][T30019] ops_undo_list+0x2eb/0xab0 [ 2444.383590][T30019] ? __pfx_ops_undo_list+0x10/0x10 [ 2444.388830][T30019] ? ops_init+0x2fa/0x5f0 [ 2444.393225][T30019] setup_net+0x2e1/0x510 [ 2444.397532][T30019] ? __pfx_setup_net+0x10/0x10 [ 2444.402407][T30019] ? debug_mutex_init+0x37/0x70 [ 2444.407332][T30019] copy_net_ns+0x2a6/0x5f0 [ 2444.411941][T30019] create_new_namespaces+0x3ea/0xa90 [ 2444.418420][T30019] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2444.424141][T30019] ksys_unshare+0x45b/0xa40 [ 2444.429725][T30019] ? __pfx_ksys_unshare+0x10/0x10 [ 2444.434818][T30019] ? xfd_validate_state+0x61/0x180 [ 2444.440061][T30019] __x64_sys_unshare+0x31/0x40 [ 2444.444893][T30019] do_syscall_64+0xcd/0x490 [ 2444.449500][T30019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2444.455455][T30019] RIP: 0033:0x7f84e458e969 [ 2444.459961][T30019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2444.479705][T30019] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2444.488214][T30019] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2444.496236][T30019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2444.504450][T30019] RBP: 00007f84e4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2444.512531][T30019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2444.521683][T30019] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2444.530705][T30019] [ 2444.533778][T30019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2444.541101][T30019] CPU: 1 UID: 0 PID: 30019 Comm: syz.0.5441 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 2444.552872][T30019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2444.562980][T30019] Call Trace: [ 2444.566299][T30019] [ 2444.569267][T30019] dump_stack_lvl+0x3d/0x1f0 [ 2444.573914][T30019] panic+0x71c/0x800 [ 2444.577868][T30019] ? __pfx_panic+0x10/0x10 [ 2444.582347][T30019] ? show_trace_log_lvl+0x29b/0x3e0 [ 2444.587702][T30019] ? check_panic_on_warn+0x1f/0xb0 [ 2444.592879][T30019] ? remove_proc_entry+0x45e/0x530 [ 2444.598053][T30019] check_panic_on_warn+0xab/0xb0 [ 2444.603061][T30019] __warn+0xf6/0x3c0 [ 2444.607098][T30019] ? remove_proc_entry+0x45e/0x530 [ 2444.612547][T30019] report_bug+0x3c3/0x580 [ 2444.617017][T30019] ? remove_proc_entry+0x45e/0x530 [ 2444.622194][T30019] handle_bug+0x184/0x210 [ 2444.626565][T30019] exc_invalid_op+0x17/0x50 [ 2444.631116][T30019] asm_exc_invalid_op+0x1a/0x20 [ 2444.636145][T30019] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 2444.641924][T30019] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 a3 a2 8b 48 c7 c7 e0 a2 a2 8b e8 13 f1 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 84 90 5e ff 90 48 b8 00 00 00 00 00 [ 2444.661570][T30019] RSP: 0018:ffffc90004e6fb08 EFLAGS: 00010282 [ 2444.667669][T30019] RAX: 0000000000000000 RBX: ffff888029649500 RCX: ffffffff817aba48 [ 2444.675668][T30019] RDX: ffff888028ba9e00 RSI: ffffffff817aba55 RDI: 0000000000000001 [ 2444.683693][T30019] RBP: ffff888025434700 R08: 0000000000000001 R09: 0000000000000000 [ 2444.691690][T30019] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888025434640 [ 2444.699691][T30019] R13: ffff888025434724 R14: ffff888025bd1364 R15: dffffc0000000000 [ 2444.707789][T30019] ? __warn_printk+0x198/0x350 [ 2444.712673][T30019] ? __warn_printk+0x1a5/0x350 [ 2444.717487][T30019] ? remove_proc_entry+0x45d/0x530 [ 2444.722657][T30019] ? __pfx_remove_proc_entry+0x10/0x10 [ 2444.728180][T30019] ? cache_destroy_net+0x31/0x50 [ 2444.733173][T30019] ? sunrpc_exit_net+0x37/0x90 [ 2444.737992][T30019] sunrpc_exit_net+0x46/0x90 [ 2444.742627][T30019] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 2444.747959][T30019] ops_undo_list+0x2eb/0xab0 [ 2444.752605][T30019] ? __pfx_ops_undo_list+0x10/0x10 [ 2444.757776][T30019] ? ops_init+0x2fa/0x5f0 [ 2444.762157][T30019] setup_net+0x2e1/0x510 [ 2444.766472][T30019] ? __pfx_setup_net+0x10/0x10 [ 2444.771293][T30019] ? debug_mutex_init+0x37/0x70 [ 2444.776193][T30019] copy_net_ns+0x2a6/0x5f0 [ 2444.780663][T30019] create_new_namespaces+0x3ea/0xa90 [ 2444.786003][T30019] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2444.791687][T30019] ksys_unshare+0x45b/0xa40 [ 2444.796220][T30019] ? __pfx_ksys_unshare+0x10/0x10 [ 2444.801274][T30019] ? xfd_validate_state+0x61/0x180 [ 2444.806427][T30019] __x64_sys_unshare+0x31/0x40 [ 2444.811242][T30019] do_syscall_64+0xcd/0x490 [ 2444.815784][T30019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2444.821704][T30019] RIP: 0033:0x7f84e458e969 [ 2444.826151][T30019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2444.845806][T30019] RSP: 002b:00007f84e5437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2444.854251][T30019] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e969 [ 2444.862250][T30019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2444.870244][T30019] RBP: 00007f84e4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2444.878240][T30019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2444.886326][T30019] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdece1b378 [ 2444.894337][T30019] [ 2444.897661][T30019] Kernel Offset: disabled [ 2444.902011][T30019] Rebooting in 86400 seconds..