last executing test programs: 11.010803824s ago: executing program 0 (id=1573): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0xf00, 0x1, 0x101, 0x0, 0x0}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00'/15, @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) madvise$auto(0x8, 0x2, 0x3) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 10.412856498s ago: executing program 0 (id=1578): mprotect$auto(0xa67, 0x8000000000000000, 0xfffffffffffffffc) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x5, 0x9, 0x1, 0xee00, 0xee01, 0x0, 0x7, 0x4945, 0x4, 0x7ff, 0x6, 0x8001, 0x8000000000000001, 0x100000000, 0x13, 0x101}) statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x1ff, 0x1001, 0x5, 0x9, 0x1ffde, 0x7, 0x1000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0xc7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000], "6148db089d5ad531725e8eb442251e25123265b044189fc52efac1008071b6333e6ebccc225092c8dfb3982fd8b6400019de019e502dc6084000bf40b6c3f8a7558b7dd9c1e01ea078211c3cc72cee00e65efb569282d9eaf4079dd18940bf58a1672d8ed311d65ed65d0ed7ca4ed173e5d1fc7c887eb42513cc20d4729e44917ce37bd3507aca5edba82301129f6f128ade288a5a8cb1a9c7fdafee46b446fd8f9660aaa64b15d0c58d1f5177848ecc4775d0c1b41f6fdef21346c8df98b39618560c93c6e096a47c509eaa411a07431aef2391f75825"}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r2, 0x4b65, 0x7) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x6, 0x0, 0x0) rseq$auto(0x0, 0x47fffd, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r3, 0x7005, 0x0) readv$auto(r1, &(0x7f0000000100)={0x0, 0x3}, 0xffffffffffffff0f) setresgid$auto(0x9, r0, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vkms/graphics/fb0/virtual_size\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000000040)="e32a", 0x2) socket(0x2a, 0x7, 0x7fffffff) 7.405688667s ago: executing program 0 (id=1587): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x0, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x1094}, 0x1, 0x0, 0x0, 0x80}, 0x40040) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r1, 0x57, r0) read$auto_nst_seq_fops_netdebug(r1, &(0x7f0000000000)=""/195, 0xc3) semctl$auto(0x3, 0x5, 0x13, 0x9) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ppoll$auto(&(0x7f0000000000)={r4, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) syz_clone(0x2409b000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) ioctl$auto_FS_IOC_GETFSLABEL3(r0, 0x81009431, &(0x7f0000000180)="a000022238cab5111cc948a09016ef1acd7e95d87e103920b55ab3f31a3d6b5140502e2ed99785702e8b0501ed21627b1fc580b67822bdc5fc3c8effa761451c23ddbe1efdbee990d862eaa91bb68e960b5ebb1db4c9c6ba141451f0888478b750628265f0fe4b0b5f2d4f417c7dfaeb34df509c48ec85402fe8b60be49fde28a9fcbe92cb11a624f871979354605201dcb62ea160ff1beea7804113cba96fe063f136402d7117531a97612b4888a6990989d21c9d1c15f3e8aa4e1c4788a22dbcbd76ba58fa695749da2990714280142be48ffa44902408ffe618135b96b3552032cb897dcbb956fdc003db7cd4a928f563e65a227c339ef6258e2dcdeba420") r5 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000001600)={0x1458, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x1423, 0x30, 0x0, 0x1, [@typed={0x14, 0x149, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x1014, 0x4d, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x7e}, @generic="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", @nested={0x4, 0x140}]}, @nested={0x8, 0xe2, 0x0, 0x1, [@nested={0x4, 0x136}]}, @generic="1541018eeda55ee7f9753c9efae6297a4c25bdbe471563268169f1e3a221cafb9b8b3c12aa79c3279a85860fcc5a1abffb54989aae881e6e0043a996ca9277c646f9efed4ddc7efb692e5ef28e908c87ae7211b64a97307fadb3b27d26af7a9f7c35f0e464b09d0d2dc841f6f3b4e82b08a6e9e95663664a8be4dc8f2f6367905691dcb088d9e6c2e3af563d2d36845bdecbef842cc97b18ad9b0507adc7158aac33f957555a4b51f1ec8041b64c0bb115f194bea50a1128ddd7bb217f914af505eea5515691f334933e3ba95c19c689ffa5de857d7d5fb29bdf85c19b819a75517203f3d5d92021297164bbd85c", @nested={0x82, 0x5, 0x0, 0x1, [@nested={0x4, 0x5c}, @nested={0x4, 0xf4}, @generic="cfbcd7db0cc1595d891a51397af152d4d06515c8263c4e49aab9b71dc62cde806e09c72d6cbca747acd9d4f1ff544fcfa6243ffc31a2f48f745b01067b7d5ed38fee6d7b11e9dc065544", @generic="b1167ff10f66b8c1f01862fe82ceb36b35705e3a3a92", @generic="96bc1f777b8de0d7883b703b02d8", @nested={0x4, 0x14c}, @nested={0x4, 0xf3}]}, @typed={0x14, 0x10d, 0x0, 0x0, @ipv6=@mcast2}, @generic="25cc7930797179dc18c5264aebc5e136a81accd6eaa98d3df1bb39da65853af0fab82c644e045ab20cab5a1de8ead097f1ec9c6c112eb15e2ddbca31bdec60f11d6fbc7553578b9c9e15a04b33040748a2d23e78ad54beb5d9404546cfe2aac8986da97e8b4c3fccaecc99935b4a03e1aa81df1a9820fac676", @nested={0x1f0, 0x151, 0x0, 0x1, [@generic="f23977837b44f33ccc4dacf567bf90a0e8ec5d72e8e3e5662f8a5c3253e03c005beef591be60617c", @nested={0x4, 0x55}, @typed={0x4, 0xf6}, @nested={0x4, 0xeb}, @nested={0x4, 0x56}, @generic="3046763c672d7aeccf72f7591eae6473c5bedb1f81f5e9133af09446217dc3895f7c5b3e5e35249e1c752962a79202865295ba266d266207216c10344228478134ffa865190d", @nested={0x4, 0x70}, @generic="a17c3bdf0deb774aa215b44baf9e88a273bff5c6e8da0fc4881247ab430f5c3cb60aa3964eb3063409d90f19707faafa992de608aadf2feb9825739efd2cace428e8650555ad717819d8c76293466165dc33a2943bc7792b7055fe0d0bdcc6e1423284a8d8e13ed92df3c89228d012b062f7eaedc7775dbd1f8260dace4c2e7fb135", @generic="32db8e1c3857a08dbc68e833f689a59f8338a63953014b062d8c04c3fdbe69c58d862fb638112012a23640f5a1ddd1ea9cacd346141af6c23ac0bad23e6ea9f84ba202e5c799c04e50cc131fa3370c9a2abae2a3acd93fb3a2c27add0d12a05a0f7baf63f57ce6101d0fb531a2fa063a905cdc4c361a584a4eda9c446840966dd5b41ee77166bcb12f0a5ae7ff09c65d907b4e3135206615575fc0271ebd9506215953a6ed8c6c78bd3fd6ae2fe6bc5c74fef2faeb10b7343d5594a3266ad8c4e3b99471d2156e572991fbe9839a72b1b0cb5a62ea6fb94f30b272938e91cf7006f93617d0471c7c"]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x342}]}, 0x1458}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) close_range$auto(0x2, r1, 0x0) 6.748581039s ago: executing program 3 (id=1596): mmap$auto(0x0, 0x400008, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) (async) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) (async) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f00000010c0)={0x7, 0x3, 0x7, 0x3, 0x9, 0xffffffffffffffff}) (async) r5 = getpid() pidfd_open$auto(r5, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001100)={{@inferred=r4, 0x4, 0xe, 0x80, "ea3c35664bd819d3dc7b62811ba089c8c52fef8972a6ef8a3aacf8443c139ba8fa51c0c2f36b669d9fc3c4c2", @raw=0x6}, 0xf0a2, 0x4, 0xb, @inferred=r5, @reserved="b5e1ee249adeba19fdb7c867abae871d7344ccdba3641211bff549d3f0b635f1660a5e78cbcbce66f7e18cbc5fbe5cfcda0502734bfc2a72a49ff6c4aac237336f523c96865aeaca7f6ce4356136663b5b01a76b4b76a2eddedb61e5ca061e377cad68142f21036e6d0f8e6aca612b74b2962e1762f983da48f3d203a25a37eb", "530bd79186c015b3dab313e20c6ebbd138c30b2493db71aec111bc73025a95067eb0ba914e9046aac49c35b785b5c3b2ff5fe1f2728040c62d6719ec0fe33274"}) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x7111}, 0x8) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r6 = open(&(0x7f0000000040)='}[,&*}\x00', 0x70481, 0x0) getdents$auto(r6, 0x0, 0x5f) 5.686222652s ago: executing program 3 (id=1599): r0 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/ports/1/udp_ports_reset\x00', 0x414000, 0x0) setsockopt$auto_SO_TIMESTAMPNS_OLD(r0, 0x2, 0x23, &(0x7f0000000040)='\x00', 0x2000) ioctl$auto_SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000080)) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/pcm\x00', 0x101842, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400003, 0x48) mkdirat$auto(r2, &(0x7f0000001100)='./file0\x00', 0x9) pwritev$auto(r1, &(0x7f0000001240)={&(0x7f0000001140)="5fd2144669e07e8a35924af3c64cd6213bb50d4c4baecc0888062daef49033ec2565bf9d2b6d6485d45e534bb066ddd92e189bfc57b1855a5b157d0a9b69d18c7c4f8d30d84bdd1ef3394f1c5ab1c5bcc762bab90b6f814af0ef9a08b8c9e7a6d211dd59a8f555c2183b097542b212863dbb6cc68e541c2610e824278aaf904c829d2c5de1a795171047ffa3156408b68e1d7033ff8b1d4c9cab570c54388edf3ea0a185fb2bf463fd7159a72856fbfe8dd2d2f362162469a9061531a2f6976ebb5417", 0x5}, 0x5, 0xfffffffffffffffa, 0x5) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/fail-nth\x00', 0x4001c0, 0x0) mmap$auto(0x4, 0x6, 0xffffffffffffff7f, 0x14, 0xffffffffffffffff, 0x4) mprotect$auto(0x3, 0xb9fa, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/self/fail-nth\x00', 0x400040, 0x0) poll$auto(&(0x7f0000001300)={r1, 0xac, 0x69}, 0x8, 0x79) ioctl$auto_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04, 0x0) msgget$auto(0x80, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001340)='/sys/kernel/security/tomoyo/manager\x00', 0x1, 0x0) msgget$auto(0x1, 0x10001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000013c0), r3) sendmsg$auto_GTP_CMD_NEWPDP(r5, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x21000080}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$auto_SO_PEERSEC(r4, 0x80, 0x1f, &(0x7f00000014c0)='$\x00', &(0x7f0000001500)=0x5) io_submit$auto(0x9, 0x2, &(0x7f0000001580)=&(0x7f0000001540)={0x0, 0x800, 0x9, 0x3, 0x4000, r1, 0x5, 0xa2f3, 0x0, 0x0, 0xf, r2}) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001600), r5) sendmsg$auto_TIPC_NL_BEARER_GET(r7, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xf0, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xda, 0x9, 0x0, 0x1, [@generic="629c48ccd284e816d9ef56d5ebcf80e41b775b6b1fdded74fc9209852b9e87761c5c59fff96b9b1f0ed865c2ebc1d5d675a6ac28c473cd768fda06510d38b0bb91edb10d724a3bb02cacaf2118834f32b1e9d1b67c69f7ced1bf4f7625f2acb82d269453dd852260b868c41e57ff97eab994cff8d15fd5826f53de47f96bc2020e5064db5904e1b5d67ec60bb18f97ab588afa39294e483b7294010610fa6ce21b5b3b586a7ab609774d91a7833f2b98125655eb51afe4a713b8f857d04b99a5c340d611683a3657bb4941327f88", @nested={0x8, 0xeb, 0x0, 0x1, [@nested={0x4, 0x76}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000017c0), 0xffffffffffffffff) process_mrelease$auto(r3, 0x1) shutdown$auto(0xffffffffffffffff, 0x9) r9 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000001800), 0x220100, 0x0) r10 = ioctl$auto_TUNSETSNDBUF2(r7, 0x400454d4, &(0x7f0000001840)=0x7) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000002080)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000001d80)={0x298, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x268, 0x2, 0x0, 0x1, [@nested={0x139, 0x4a, 0x0, 0x1, [@generic="241fe2ada75ac0db88b795683452549e76123526a1b7a953e5e063e9fa060e03a3cab07094a71b476e0fd7bea61794753c91f042a11c1a2f438501e80bbd83ea1129007a5f26721e8cf08677d6d572a0", @generic="79376dacd5ac025f31eb757c55e5a635a4e1f02159dbf2f4c5e156c922d46471e0d3e03ea19d1bb7ffa54f822c29002a834226e9f95d94ed6f6b9bf63774e373d79c0d5eec22e3dd8985712b40ff958fd68f702217ae80841f3bbcb44a8c40e55e94e5f869585a079044c092edcd578da4780975c1b8379d75085604d052b26b90cffc47f534c5adb79b0227d1c637af7c56402d32c67bfe8d53ea52ef1f4c22a6e1e4324cfa4e7b717f9f67068fa53fb1f27c14595333eb9f6d6c97970151cb91cec0de0f0e3aa0661eb1bc4b6c48d1859dc6a9550c1306f73cd78b31635b32758feca6b3"]}, @typed={0x8, 0x137, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x113, 0x0, 0x0, @uid}, @nested={0x90, 0x19, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @fd=r9}, @nested={0x4, 0xfc}, @generic="6f6f1f55a870133b4bdc0a430f88466a6a83b00203f768e019e614481608f74066f8de90d7c87ba47b2be506107f88f77e7f9aef908ccea34d53aa32322ada1fb1d0b31fb5e6848294502147ec3ec25f4dafd3059e9bcd11002d9e299a4df81bb158a1985993fd0fcd886e66ab9e5cc8acef6044a8433fb929be8651d3705e48"]}, @nested={0x48, 0x56, 0x0, 0x1, [@generic="7799f155eaaef5f37cf6c43ec61c0d725e6b2dde209e1c27423d097f3605dbb8a641bdafd6e5f44cffa9fd3aab99d084f9ba0e3c39088206a6996b91", @typed={0x8, 0x45, 0x0, 0x0, @pid}]}, @generic="7ff7149d4a5d0f17530bcd0369fe1f02f51f310d5540d0bf8b855ec5be1e3c4ab7b637501463100056fa7962c66b6090", @generic, @typed={0x5, 0xb4, 0x0, 0x0, @str='\x00'}, @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x1}, 0x4880) 5.463670886s ago: executing program 3 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) socket(0x15, 0x5, 0x0) eventfd$auto(0x7) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0xffffffffffff6c28) getsockopt$auto(0x100000006, 0x0, 0x21, 0xfffffffffffffffe, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) fanotify_init$auto(0x5, 0xfffffff7) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e775f", 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x20000000000003, 0x8946, 0x2) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x4000457b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) gettid() mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x3, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x1002}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x7fffffff, 0x8, 0x8000000000000000}}) getpid() 5.140420757s ago: executing program 1 (id=1604): r0 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) mmap$auto(0x6d4d4758, 0xffffffff, 0x4, 0x10, r0, 0x100) r1 = getsockopt$auto(r0, 0xe6, 0x1, &(0x7f0000000080)='}[%##{+{]\x00', &(0x7f00000000c0)=0xfffffff9) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000100), 0x202101, 0x0) preadv$auto(r2, &(0x7f0000000240)={&(0x7f0000000140)="a5d7ad52a39f6db5b2042e77c928a1f9a454b63242c6ec42c4e112f11de1dc74db3670beef2f54ae4a0301d1a963faac60df8428f5a8a894b7fea5575f02a1ec0157ebafda36b6de6d11e73ca91b29670b3b8ae6de57b111c6c6b2339e1a8adae08cf82f82ea647df43503e47f41aabefca25a675d0bd214625d1de72c57e8a5330c919460c4841dddf0b2f297945c06c44455bf2297938b3154937c42bb91c53e401c95935f04719ccc7d5845f512334d57a4b843f901a07c36ef88dcd175fff371af4b1e43e59ae460ab4e200ee8cd5209b2399ca6a5ece14c1b720960740358ee8f9ad0d11fa011535cd6976f025ae4618434e4", 0x5}, 0x9, 0x800, 0x1) read$auto(r0, &(0x7f0000000280)='\'\'\x00', 0x9) r3 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000380)={@siginfo_0_0={0x6d68, 0x7, 0x5, @_sigsys={&(0x7f00000002c0)="4eb6c9576e028bcc82f85af487f10c6c4a5b688b6d1d652bd5a1dd29204b0640146e08d5beb1e5072afc89807084c443231503b804726af6345ba6bc6d9b8d80f84b5aee7f3b87c5eba0851364d90355d0816b39dcbdcdeea0a69b699f758a10b932a48b19ac85adcbd15f544b5ca80e4207bfdca55be9830c0a3e0948ced66585e7e2bf0a78e445b8c61d3283f6c9ca19a34a67b4c76ab5c1230c458b932929e45a0946a5a8ff39", 0xc5ee, 0x100000}}}, 0xd, &(0x7f0000000400)={{0x1, 0x5}, {0x5, 0xa7}, 0xb2, 0x1a6d, 0x5, 0x6, 0x6, 0x18, 0x61, 0x9, 0x80000000, 0x7, 0x5, 0xffffffffffffffff, 0xe, 0x5}) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0xf, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x240, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x2}, @NL80211_ATTR_EMA_RNR_ELEMS={0x21a, 0x145, 0x0, 0x1, [@generic="1866e91708b1d6f38554e1c1caf96a3e4c4b9f38a5b1eb4d7bde9373c0fbf4e0", @nested={0xd0, 0xcd, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x6c, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xb3}, @generic="60eee7721c08d05178a2bbc3f9eee358822fdf4fbe930b87db712792ea5b4b56f123b0323855f4e49ba1790b81e1abd90aee21ff6a2748a729997459483f745816493c605dcd64d34b5d1909cb9e72cf9ad4e15c3b3453b9005487dc29e8695cfd7a0bbaaa6879ccc68b104bb39c00c20c8fb09c06e9872628a43e1b21a79dc26c831903cf16dc0256eb31df880b6281ebb5e792bc0c803076074b9a490117e73cce49263edfecf2e4725c1fa21d82c2cd29cf0c", @nested={0x4, 0x6b}]}, @generic="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", @typed={0x8, 0x146, 0x0, 0x0, @pid=r3}, @nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @u32=0x2}]}, @typed={0xa, 0x63, 0x0, 0x0, @str=':/:^,\x00'}, @typed={0x4, 0x9}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@empty}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000000900)={{0x841, 0xee01, 0x0, 0x2, 0x81, 0x1, 0x335}, 0xfffffffa, 0x2000000000000, 0xb, 0x6, @inferred=r3, @raw=0xfffffff8, 0x0, 0x0, &(0x7f00000007c0)="d992eafec1cc5cabbf70480d968d5f3bbb62b5fff12ccafa73d9de3520eac0054fb533a45f35a2b0a50b0a4e40812549200f6329b2d378544014f5c7a3f5166ee666f1f6", &(0x7f0000000840)="012a68a80ff085874910cacd1f8330582c10a3ee48eb134b96a4483b423471e236a95f7df1b397ed125bd018b99b5ca23828a61fd28455e7d9a5e75f45cc9cc982618569e62bcc6a990ceb5827e9544958737db8aa4dc77f668ea889902125b872789613f9991705f9d7734e8cc588813c74d0dd3ba8ff45bcb3b927c0e2bb88f66f5b9ce54fff8dbc3fda70c211fbdeac2076a03653895ef053eb2574ee8c68604e5887121e6cfd250bc4f851b1c971b8f5569efa19dcd9552a"}) shmctl$auto_SHM_STAT(0xffff8000, 0xd, &(0x7f0000000b40)={{0x8, 0xee00, 0xffffffffffffffff, 0x7fff, 0x0, 0x1, 0xb}, 0x4, 0x1cc, 0x7, 0xffffffff, @raw=0x2, @raw=0x1, 0xe, 0x0, &(0x7f0000000980)="4e6dbbd09de155f050b0bf4b456f9566e58d8a0123519ab6ca91d7a5adc4374bb03ccf069e512dc9a62cc94a4e57e6c544d89b600ed2497ee2114a98b3686f3cfed6e9cce26d7197da96a3207d8ae003fff96b812ebf77b08ba448e3e94c157371163c8b4cd11f38ccdf056181ece358e2ec11f7a50f27c83ef99e4d9685c0d9700a11cae6b43e37e2fae0739b9f3a22324e8b142b7b6e7aefa7fbacdbca8f5ea7e6778b038cdc25bcb77b71d68eaadfd9ea881e1add97595081c3ffd20582bd39aec4b1ce62ed29252784c10f0a4946140e259907e937140dbf4c97c45a0460ad10", &(0x7f0000000a80)="d45ff77d8c5918bc47d831d233db85f59c5a9ab9aa0aeef03dd2390acbb5ce8d32784576ba14cf5684804f816faea8773253e1471c1bab332524a5b550a592dab757f5faec6c417cb1b71378ccd685f015027bdf9c1e800a5e431e89bb5a4781c700c99738e33bb241c259f5c348e7b39902f1a1ef07a7460ec676f44e969db4bd71f3e893c14ea861da00ad6183720da3066c7bdb0508ac"}) shmctl$auto_IPC_INFO(0x2, 0x3, &(0x7f0000000d00)={{0x101, r5, r8, 0x3, 0x1, 0x7, 0x7}, 0x6, 0x1, 0x3, 0x5, @raw=0x4, @raw=0x80, 0xb, 0x0, &(0x7f0000000bc0)="bdead98f5265a7f82b4c4f1136a925959e4146dbc052e147f01f9bb855814af5ee9e219074e908d247fa62455ed2a4046210bf7cd7c37c6d0da41ed679715dd21cfc912511c1ef454e6e5b41f10dab8906365e97bf596b9d780583fd7dc6f1b10824799f54178291a2ca915aebefa6ee1946434889c754a6c939c4c7f8f990d5ea840d7b4aef3f54e15054fc83948ecd0ab32d3fdc098bdfc9e560bc3a361370fa", &(0x7f0000000c80)="ee81bbd0f873f42da4a8627f188594eff24252af53ecb6a42c5b81d998c1055727be7a6a67fb6d9925b1e93089105fd1d013a8a44f5603661ab511da1da0cba06abed4db590d8d26b9ae632dd6f96a94a5782a245bebe90d48ecfb0d1a0bf3166c28377b4508dfd548d5bea02c0abcf9c81f44ac59ad39336a199536"}) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0xd, 0x7fffffff, 0x3, 0x8}) ioctl$auto_TIOCNXCL(r9, 0x540d, &(0x7f0000000dc0)="352058d45d1f886e4bcd796bb725fd0521caf834a72013f6f010da2f9c4b0b06bab774b662d68767c8793e0652b1d5daa100fecc87202f7a5d9687a03e8d94c927a50ac76ebfe405f9d7485810282985cfb67013c3a70dc8f886137ad007b79ac605ebe1fe2c4e0df3a8968a277df443ae13560bf64bd875360e5dfde278115b597d0114b44f18fb52132abce719b38111f2876e209e12dab06c3228aeae9a21f0d510595be4a19437a2a1108e9b") fsync$auto(r1) getdents64$auto(r2, &(0x7f0000000e80)={0x9, 0x41, 0x1, 0x5, "d0112975a3244d59da01aa6caad5282fe22f2d3034c0a6a44c0355e8d6cfa359e3e3f1f3499251487228869e0a29fe63b74a29c029288a0adabdd35699c216bf37afdad3f2c6a5b8063734af465f9776edfcd448d257ca4e3803608705ad62548467fc50d14c8601b4f634ad460560dc469d063eda0494455c640d3b857726c300e4f5c7e91c97c76b6a1a937b407649213ecc2164248b7f54043560b8b7f40677cba32475393855b8d8df3355"}, 0xfff) r10 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/security/tomoyo/version\x00', 0x50100, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/media12\x00', 0x10080, 0x0) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001000), r9) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_VID={0x6, 0x14, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ACTIVE={0x4}, @BATADV_ATTR_ROUTER={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x480}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0xfffffffc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ACTIVE={0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4040814) pidfd_send_signal$auto_SIGCONT(r10, 0x12, &(0x7f0000001200)={@siginfo_0_0={0x4, 0xf0, 0xd47, @_sigfault={&(0x7f0000001140)="ecd56e19cb8edf941d637c8cea2b9379e031218a9081b5f1f9c42cf3b4cc7067ae5fb0c2ab7ec7c43b33ea783436c1e5ed86b283392f17d676f7b71d02c5a930da43e643377e315438ac7e9b1678c57788e48af25aa9eb95fdfb86274ccf7c675bbc98246a73c281b8cf35516b341451fa17dafa8054e7524d6e45f6223e7e31f070d7e0d66a90ba3c8c159eb583188f39fb98e4159920ad1eeaefd958ef918108f532da1a873dccb63b7dca1474c932af0245e8bf32a5a61b1d65f8fa549b", @_addr_lsb=0x1}}}, 0x0) r12 = gettid() ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000012c0)={'dvmrp0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r9, &(0x7f0000001c80)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001300)={0x93c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x340, 0x3, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid=r6}, @typed={0x4, 0x1d}, @nested={0x13d, 0x12, 0x0, 0x1, [@generic="8673c290748fad58cab1e39e5155612dfdfca577fb383b9b83367107fa09e99137ecbb032155", @generic="d454ee58f9cc8a54db2cef0b2920b322bdce8cd9d151afa931e635d6ad1320db428e816b2af1bba9fc495e44ca8f9a6a53068c12d635367b060437f9a7aeaf269a207ef8a60d350a685a7388be3663beaefa67cd4c0479108da1492be246208dff5c557c599e89e487f56113e2c364910a553b70fb23d01436a952a4df91e4adef29aa124cc96f9b557fc8a403f6e8d4c434840394898131d831a4efe42c6463c547a94132756ddfcb953e6e1f5ac1a938fe149547654f31feed303204f5541f18d68e6f12f626076f6b8263de6520fb52189240250f3703816745c3559d1f1cd7275cb208", @nested={0x4, 0x14e}, @generic="36e111159459bda7d834cf5c5ac1ccc6e7de57aa027a9b973eb846fecfffe768382bee14e55ce1e104ee"]}, @generic="8731017154b0aef912e0fd980f794f6758b1a43fe22b6035bbc246b76c18afbdec191c79b384358b31532c4a3d12e6f5808b97286511450985babc8b0b7e77ce29099c9e7b0064cbe3b27b72f83371a67771798465dbdcb46150095ab348d36d616cfab1eba0390ce06ca7826273413a4c476153b0ef9f76c2eee6c22cb3c6050c8abc5b4c5f6f71a61faa2e783a10dcf034bb559ffd3ae4893dc0b9a38c99bae169d2fd0009e1bc0797314b576d1f0bdb08afe1578a055bddc4eb2400e43981a913dd11dabaf979814ad07d1512b0bde6f9e95f08c2e572e2c1b60e067b6f74fc7a0437eb288b1ea80cfbb25534adae8c81161b", @nested={0xfa, 0x61, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x2b}, @typed={0x8, 0xbf, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x102, 0x0, 0x0, @fd=r10}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x7}, @generic="df038dbe007a9e9b98331b76cdc420a743", @typed={0x8, 0xdd, 0x0, 0x0, @uid=r7}, @generic="24785eac26ad95bc9481120a859b49fd968b52b7c6ada98bcdb76a7b7919424b00101ca8edceca0fdffc95ddb17e08a652adc14eeb44207402806bd54aa40561202e0952c599af5984e8cd0b2b45b6437faadda6e5ad96c5bf54e33353d8b4f5473004cca46bef0c1b11b6d94cab03241c5b8f14fd2b1389e3a4bfa5b2888686cb98e3311fa3f5dbd1f0843860213f532ad73973cd1e1fe753a26c2a28a9843464a55c0fa9963224cfd80087da", @typed={0x8, 0xbd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x2b, 0x2, 0x0, 0x1, [@generic="c6d03635215c77e0b303998cdf7a214a077e34aae9f2dc9c9d3850e2f74c3c", @typed={0x8, 0x82, 0x0, 0x0, @pid=r12}]}, @MACSEC_ATTR_OFFLOAD={0x5aa, 0x9, 0x0, 0x1, [@generic="5488d6eb72dfa9b8dcf32efe1869b1b8133462ab1ca624164a62626e043339a6ddfc742fdcf5fd7e1e27b5726db1488212e34c5d02d86269a8e05f8e2ef56da793b53cccb3379d54f50096f1f73888c6631f8af457c7879116b2f151fd501425d1d69b4417eea978b22f2bba428d5e0f7ba6d5f220ab49ac0d06d9622745488381a8ef7fc85494e0118c2776a71c43a3da14539a981672fcfa4da45984444b3432971189651488b2471ad7871dc5b89dae9443d57b8c11866b85c1aa0cc9f308d4eda3c67cae19718a889c4c8ce65fe1", @generic="bec1c89c04dab40ce323a437d7a367846e8d32977deca27352549d8b174c02f6ab7dfbdc5758c9c76a31ae08dc9b89c9a4c415c746522c76046e6de87afcbf6898f65353fe0cf9615837f5e30b516b7d8283cf74a9c72173417292f23a217c970c62f76bcb423ecef96d280eaac36d8deff5ebda188c42c11a1fc1371087ff9d844e06014b796d5e4217a5cd455ae4329479f2118428a104a918aafa9ff3884116be3031f479c34bd4a811576dee", @nested={0x172, 0xd6, 0x0, 0x1, [@nested={0x4, 0xfe}, @generic, @nested={0x4, 0xa2}, @generic="2b4a3f31da11f3867b45dc3ec87df9781ea42b88b4c4b8bf4b1c21278f35a3c714d5a738dc7dec79ac48790534a03d236bcd6b2fdb3bb2aae3e61ee207f02fb1ee7fb142c41e2b46d3af9636b6cce291ff82fbebd0b0e724027d86183fd7f95ac995abe44e47d1d68561a3ed6a4a16a110baa11076e9009162734915192335421bbecf17a8e6a5de4af7a4ced6f3de720b661d0e302a8a0373e448d4f50cf93c1a37832150", @generic="b451ae068760033b0df502fa918b995dea1063f8bede3ea76b77acc95ee179bc904e3b9d095be68a1009dd5151d89c67b71d0bbcaf4f1c2e35b986f19369503ad63f8b07085cd05d49f51dbb12f973c2cec8fb67c14ef697318db2c40630bbb2b63a264d6fe2676df6289b5357ace78eca923486b77bac253260318997306b8eb26bc86bd39c3c7c293b1af0bc5e25dbf8749d0ee6452c649913eaaed3b55006457cfc90df013dd40b72c4fc76f6b63dcf39c31fe8fde6b9191c48b3887e442bfa"]}, @generic="ba04d65e9fec2334749d0110bd5ef4d2b2ed9da000f13048af4f243be61af3d742263f6307ef4c4d294cd8293b4cc29651c46003a9267c2d80aff0e0252b4ed6c1a64be68bfdeb0e84667967764cd98c7a407b63eb758d4a01f5e063", @nested={0x258, 0xa4, 0x0, 0x1, [@generic="3f131eb047d17d5acb839bcf8b725433731a157687f18dea27a3e1959b57d7de2acc2a6520959e917768b654cb9af810461dcefdb23abb55da493280096015ed47302c37d297846c160ed396f34a3428a589c3657b303ef8f9db7288f786a9a841560a7b5cd15703a376a77fad42603aa0c2e1f604e786c2ded554b74afb7832640b59c8465ba6681f4aa49e0d697c3182ac788b9ce275045d45a5fc78413d8f481ca599cd4272718fac0f3b1cd89ce1bd1607445e9b173e7f59cc7c3ca4db2c956e0742d649a5c5c2d78127251b9221d8e30ee0072e5495d3c04bd3590da12ffe35091ffc25a8a056523035d3cec193e60966d2c062", @typed={0x4, 0x13f}, @typed={0x4, 0x120}, @nested={0x4, 0xfc}, @generic="812da822abc4311a56188b30d8d2b1c524d1ab877a6347df64f7e220aa168cdbf1e227cc86129162821da53c82ce3692b9229476f360246e8fb1ec46b14572b4975e74b17fcd05f247c180e7cd5e13d72d2ea1f9c031ba7920042f029b2aa245fb7eb74f91995ae706ae2e6c8a58c8abadc89d91bb9dfb4bf5f847c4b6322f074807a8", @generic="3d2de4d0f0fb1087783509be9badaa9ccb9942b495565a25ed8a8b00b05169089f328caa20a892ffe644141eb13886d4f71ddc58615b9c02f7deeee86db21b74d4529d399bae07cca8ca58e0ad76b4f21c5807425f95f6c7c4c793146839d5e27d0a1d256fd1b0251071b16f3333c1d7aa61c4a3da6f18202eb7397608e8c492b848279724b7f8e11b595a42d4f40936c11d28da7e04984e1e8b529e1126ea66d8d52a66edc384610e57b391e2ca3915e740af795db95a3315071013ee1711c3ec96c2c225075b28cd644282861792"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x93c}, 0x1, 0x0, 0x0, 0x50}, 0x4080) r14 = getsockopt$auto(r10, 0xffffffff, 0xd0e2, &(0x7f0000001cc0)='/sys/kernel/security/integrity/ima/ascii_runtime_measurements_sha1\x00', &(0x7f0000001d40)=0x8001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/sys/net/ipv6/conf/bridge_slave_1/accept_ra_defrtr\x00', 0x4800, 0x0) r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001e00), r14) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r14, &(0x7f0000002fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f80)={&(0x7f0000001e40)={0x112c, r15, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "3e0a8fdebcc0886a6a0f8106eed3f2b2c43b4ef5d8da2cba013b3b65a7efb2864f8b61ce"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xda, 0x1a, "3b4b98d4d7a9ddbd020c89dbe1f666ac4e91eaa431dcc42fbf755556c31ec3f9a27a2046216df8f4614c5452f5635d74cebf281ddf12137425d9a230782ccf55e482c490d20b89bf1ff76c634e15fbd046bebaf28052dd0a0e855674dfa5196411782e0722440fa36b12287eef82d9962453c89c701f00085949d92c9a85ca06f309880ef899d870d759e0d29240022fe7e0fc58d5829545d1e68028913fcbd6a4aad8771af6518951a9893f5a9b8bc5b0618f23fdcaa684abcc06f34cdcbf371078c8b0b7dfac06d91f544018bf76d716457980663d"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x1004, 0x1a, "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"}]}, 0x112c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x10600}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0xa4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x70, 0xe8, "cee05339dfe56cd4c9521bb160d26109a30f2fe3cf1bc20f4b267f8dbf714bfd90de3da318ed8a4b9807a88d287aead959b1b946a6b4c624d8dab62f65bdbefd99ed91b5d321b71dbf7d9fc1bf99255a4bea1e6e4604e938ebbaca5e0480a3c1ee0483b0202ef67540186e83"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7a}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.409040186s ago: executing program 3 (id=1606): mprotect$auto(0xa67, 0x8000000000000000, 0xfffffffffffffffc) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x5, 0x9, 0x1, 0xee00, 0xee01, 0x0, 0x7, 0x4945, 0x4, 0x7ff, 0x6, 0x8001, 0x8000000000000001, 0x100000000, 0x13, 0x101}) statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x1ff, 0x1001, 0x5, 0x9, 0x1ffde, 0x7, 0x1000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0xc7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000], "6148db089d5ad531725e8eb442251e25123265b044189fc52efac1008071b6333e6ebccc225092c8dfb3982fd8b6400019de019e502dc6084000bf40b6c3f8a7558b7dd9c1e01ea078211c3cc72cee00e65efb569282d9eaf4079dd18940bf58a1672d8ed311d65ed65d0ed7ca4ed173e5d1fc7c887eb42513cc20d4729e44917ce37bd3507aca5edba82301129f6f128ade288a5a8cb1a9c7fdafee46b446fd8f9660aaa64b15d0c58d1f5177848ecc4775d0c1b41f6fdef21346c8df98b39618560c93c6e096a47c509eaa411a07431aef2391f75825"}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r2, 0x4b65, 0x7) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x6, 0x0, 0x0) rseq$auto(0x0, 0x47fffd, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r3, 0x7005, 0x0) readv$auto(r1, &(0x7f0000000100)={0x0, 0x3}, 0xffffffffffffff0f) setresgid$auto(0x9, r0, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vkms/graphics/fb0/virtual_size\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000000040)="e32a", 0x2) socket(0x2a, 0x7, 0x7fffffff) 4.407717115s ago: executing program 1 (id=1614): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') (async) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) (async) socket(0x2, 0x2, 0x1) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f0000000100)='./file1/file0\x00', 0xf4ba) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r4, &(0x7f0000006140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) r5 = socket(0x15, 0x5, 0x0) r6 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r6, 0x107, 0x5, 0x0, 0xce24) sendmsg$auto(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)=@bpf_attr_0={0x8, 0x3, 0x1ff, 0x9, 0x7, r1, 0x3, "ece0fa9772e590864143c24ba9dfe034", r7, r5, 0x2, 0x3, 0xed70, 0xc1, 0xffffffffffffffff, r4}, 0x2) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x8d, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x75}]}, @typed={0xc, 0x75, 0x0, 0x0, @u64}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4c, 0xe2, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x115}, @typed={0xc, 0x34, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xbb}, @typed={0x28, 0xd1, 0x0, 0x0, @str='/sys/bus/platform/drivers_autoprobe\x00'}]}, @typed={0x8, 0x148, 0x0, 0x0, @pid}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10000080}, 0x80) (async) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x8d, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x75}]}, @typed={0xc, 0x75, 0x0, 0x0, @u64}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4c, 0xe2, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x115}, @typed={0xc, 0x34, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xbb}, @typed={0x28, 0xd1, 0x0, 0x0, @str='/sys/bus/platform/drivers_autoprobe\x00'}]}, @typed={0x8, 0x148, 0x0, 0x0, @pid}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10000080}, 0x80) mount$auto(&(0x7f0000000000)='veth0_virt_wifi\x00', 0x0, 0x0, 0xd796, 0x0) (async) mount$auto(&(0x7f0000000000)='veth0_virt_wifi\x00', 0x0, 0x0, 0xd796, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x4080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) 3.824669214s ago: executing program 0 (id=1607): ioperm$auto(0x7, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/block/loop1/zone_wplugs\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 3.795961125s ago: executing program 2 (id=1608): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) open(0x0, 0xeee00, 0x31) (async) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x80800, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) (async) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rpc/auth.rpcsec.context/flush\x00', 0x8f3b7a51b8162d21, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rpc/auth.rpcsec.context/flush\x00', 0x8f3b7a51b8162d21, 0x0) socket(0xa, 0x2, 0x88) (async) socket(0xa, 0x2, 0x88) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x11, 0x80003, 0x300) io_pgetevents$auto(0x80000000, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)}) setsockopt$auto(r2, 0x107, 0x2, 0x0, 0x28) ioctl$auto(0x3, 0x80046f46, 0xffffffffffffffff) 3.006457834s ago: executing program 1 (id=1609): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) execve$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) 2.655674158s ago: executing program 2 (id=1610): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socket(0x2, 0x80802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0xa4) prctl$auto_PR_SET_UNALIGN(0x6, 0x7fff, 0x7, 0xa, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/ep_00/bmAttributes\x00', 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0x100006, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2c, 0x80003, 0x101) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x7ff, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000), 0xfc2}, 0x3, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x84008) setsockopt$auto(r2, 0x11b, 0x4, 0xffffffffffffffff, 0x18) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x52) 2.566240083s ago: executing program 3 (id=1611): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0xf) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0) mmap$auto(0x8, 0x40009, 0xe0, 0x9b72, r0, 0x6) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x5, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd12\x00', 0x200000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={0x0}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040841}, 0x24004040) mmap$auto(0x5, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) 2.405434183s ago: executing program 2 (id=1612): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) read$auto(0x3, 0x0, 0x80) prctl$auto(0x39, 0x8000000001, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1e, 0x7, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0xfffffffe, 0x5, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xd5000000, 0x0, 0xffffffffffffffff, 0x2d7, 0x2) ioctl$auto_EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x2, 0x6}) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x10, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a9e127bd5aae3b7068398603177f487000ffdbdf2501000000050006008a0000000800030000000000050005000300001e37000100fc00000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="00042dbd70f2fddbdf2502000000080003004c000000050005000400000063000400b3e9a1f550a1e52feb0dbad489afacc54e2fab16b0118704a77b37828ddb9e9c16be11234856ee78379130eb6afac812a1939e2e8117e4558887703e0f44b33fb21a3a19e87470eef02d3b61590b00080003000600"/128], 0x90}, 0x1, 0x0, 0x0, 0x20040884}, 0x800) r4 = bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0xff}, 0x92) getsockopt$auto_SO_BUF_LOCK(r4, 0x2, 0x48, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0xe) fdatasync$auto(r4) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={0x84a5, 0x0, @next_key=0x8e66, 0x9}, 0x80) 2.24843006s ago: executing program 2 (id=1613): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8) ioctl$auto(0x3, 0x4010ae42, r0) 2.044401537s ago: executing program 1 (id=1615): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x40, 0x0) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x40, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents$auto(r0, &(0x7f0000000140)={0xcc8, 0xffffffffffffffff, 0x9, "40d8e19de68e65c79cb883ef3f6dd6b2afa8d439bb17950dc7b4e47c6dfb530ac7a18c6a7efea8abddf86f47e73ebcea4643e86cc291a38915527c66884219b11d8170985f407aa67dfa44a178652e25147a6b5ca514e22e8fbe8a49414ec191fabe2c816cfd658a5cf18a9f0588df94edddc785330a928dfe636ae80a04d46ba2c11b641b8bdfae4f73a3c1f85eca7d01a4a55955886edc8c13ce095e0624fae823b3"}, 0x3) (async) getdents$auto(r0, &(0x7f0000000140)={0xcc8, 0xffffffffffffffff, 0x9, "40d8e19de68e65c79cb883ef3f6dd6b2afa8d439bb17950dc7b4e47c6dfb530ac7a18c6a7efea8abddf86f47e73ebcea4643e86cc291a38915527c66884219b11d8170985f407aa67dfa44a178652e25147a6b5ca514e22e8fbe8a49414ec191fabe2c816cfd658a5cf18a9f0588df94edddc785330a928dfe636ae80a04d46ba2c11b641b8bdfae4f73a3c1f85eca7d01a4a55955886edc8c13ce095e0624fae823b3"}, 0x3) vmsplice$auto(r1, 0x0, 0x3ff, 0x1) (async) vmsplice$auto(r1, 0x0, 0x3ff, 0x1) r2 = open(0x0, 0x82000, 0x26) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(r3, 0x9, r0) r4 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r4, 0x0, 0x400) ioctl$auto(0x3, 0xc0285628, r2) lseek$auto(0x3, 0x2, 0x4) (async) lseek$auto(0x3, 0x2, 0x4) 1.787902771s ago: executing program 2 (id=1616): getcpu$auto(&(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x44238f13, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"a2e88999", 0x7fff, 0x0, 0x2, 0x9, 0x10000, "7207661b123ebfab150d5b41ec06a2", "daa98e20", "930a0c1a", "310f5514", ["f1448f541c30b99a96561625", "229d96ef5eac0e1bdb7b7eda", "105d6dc99314e86c9f351da7", "77ea06a4b734ff1c8eb66fe0"]}) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0) readlink$auto(0x0, 0x0, 0x6) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x88000, 0x0) pread64$auto(r1, &(0x7f0000000140), 0x7fff, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x240000, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027619b4e0635ec3417757c36720add70ab0343"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) read$auto(r4, &(0x7f00000000c0)='\x00', 0x2) 1.644341187s ago: executing program 0 (id=1617): r0 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@link_create={@map_fd, @target_ifindex, 0x6, 0x5, @kprobe_multi={0x401, 0x10, 0x8, 0xd6, 0x4}}, 0x6) mmap$auto(0x400000000, 0x9, 0xe2, 0x13, r0, 0x8003) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x800) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) 1.506443981s ago: executing program 1 (id=1618): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ram10\x00', 0x2cac00, 0x0) mmap$auto(0x1, 0x400008, 0xffffffffffffffff, 0x11, r0, 0x1000000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r1, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0xffff, 0x2000009, 0x100000000, 0x2000000000ebe, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/E\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/15/effective_affinity\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r4, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) listen$auto(0x3, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, 0x0, 0x84) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_LEVEL={0x6c, 0x2d, 0x0, 0x1, [@generic="8e9c0f05e80049a59219cd3b8fb1c0d0def3099ea2a91920614dbfc1831d4b8f8bbb9ba5bcc79a68e34fef077f5ca74aaa8c48d197412681ec7aa3250e624c0d0e939c459668b623b1bdc304f4d460a8867cf47bd5b69ed531794fb50cf49858b4be0d87c082c7cc"]}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x811) 1.404253159s ago: executing program 0 (id=1619): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x400000000000, 0x20009, 0x2, 0xeb1, r0, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) fanotify_init$auto(0x1000, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) preadv2$auto(r1, &(0x7f0000000480)={&(0x7f0000000800), 0x2766}, 0x2, 0x6, 0xfffffffffffff371, 0x4) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x3, 0x8, 0xd, 0x3, 0x81, 0xffffffff, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x20000800001, 0xffffffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0xffffffff, 0x0) 1.367339364s ago: executing program 2 (id=1620): r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$auto(r0, 0x8, 0x101, &(0x7f0000000000)='\xf3\xc6uy\x90:\xf2\xb3}\xfb\xa9n\xbf\f\x8a\x16\x1a#\x866}\t\xcb-K\x962\xf4,;\xe4\"=\t#\xe9B\x1dq[\xe6\xf6\xd1\xf9\xdd\xfe\x1e\xc8\xa1\xea\xf9\x93\f\x95\x14\t\t\x01\x13Z0O@\xb6~8\x0ej\xf1\x8dH\x9ddK6\\|\x12\x82L\x84\x9d\x14\xd0\xa9{\xb1\xb4\xc5\xe0\xaf\x15RT\x98\xd9\x10D\xa1Y\x80\x1fe\xc1. \x9d\x84\x8b\x9a\x9a`q\x00\x8c8c:%\x97\x15\x80-\r\x94\xcb\xda\xa2\x1d\\;f\xcds\xa7q]?\'\xf5\x9eA\x841f\x1e\xce\xc0\x1d{tEc\xa3\fp\x1b\xd2\'\xcd1\x8d\x87\xf1\x02\xc4Q\x8e\xab\xf9L\xbf\xa4_\x85\xf1\xb6\xe0\xca\x9e3\x9b\xf7\n\xe7\xdf\x12\xef_ \x9dC\x1f\xb8k\xfbu\x8f\xd9\xaa>\xe3\xda\x1f\'\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r1 = getpgid(0xffffffffffffffff) socket(0x2a, 0x3, 0xfffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) kcmp$auto(r1, 0x0, 0x9, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x5, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) bpf$auto(0x8, &(0x7f0000000400)=@bpf_attr_4={0x8777, 0xffffffffffffffff, 0x1000c102}, 0x11) ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/queue/scheduler\x00', 0x189002, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x32, 0x10000, 0x1ffe0, 0x7, 0x3, 0x20000002, 0x9, 0x83, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x7d, 0x400000000000004, 0x1cd7, 0x1002, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d3e, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x10001]}, 0x1ee, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) open(&(0x7f00000000c0)='./file0\x00', 0x591002, 0x408) socket(0x10, 0x2, 0x0) 995.555358ms ago: executing program 3 (id=1621): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) execveat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000040)='/sys/kerneh/deync\x00'/31, &(0x7f0000000180)=&(0x7f0000000100)='\x00', 0x7cc9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r2, 0x28000) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x579802, 0x0) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r4, 0x0, 0x40) ioctl$auto(0x3, 0xc0383e04, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x40045109, 0x3) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) ioctl$auto_MEMERASE64(r6, 0x40104d14, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) 0s ago: executing program 1 (id=1622): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x4000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x515681, 0x84) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)=@raw_tracepoint={0x4, r1, 0x0, 0x5}, 0x80000000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000100)="6044bb67f5459d8e4e1e504b25452ef3e83b0b52c8f49e50044485180830a1ed51282827b917476d5ad380335434bdb1c564508879b5e5d57f2e26b641f809355a93e70dbfaf2f0b63d20cbc16247dc38b5b9a471f4ae0e2e7ba7d1b81eb247c8f12d9dc892059ba5533480195d2cf6ae62b01db81c6a987ae4049f3c8a3792bfa2ffd7fe02e4488d3f8cb44073a7975173dbeb67b1bbce6f6dbdd6b06f4236720ac", 0x4}, 0x3) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "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"}) socket(0x2a, 0x2, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x27111}, 0x8) kernel console output (not intermixed with test programs): 12112] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 478.347840][T12112] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 478.347857][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.347873][T12112] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 478.347911][T12112] [ 480.813576][T12147] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1205'. [ 480.974236][T12143] FAULT_INJECTION: forcing a failure. [ 480.974236][T12143] name failslab, interval 1, probability 0, space 0, times 0 [ 481.088425][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.0.1202 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 481.088476][T12143] Tainted: [U]=USER [ 481.088486][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.088501][T12143] Call Trace: [ 481.088511][T12143] [ 481.088521][T12143] dump_stack_lvl+0x16c/0x1f0 [ 481.088566][T12143] should_fail_ex+0x512/0x640 [ 481.088604][T12143] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 481.088637][T12143] should_failslab+0xc2/0x120 [ 481.088683][T12143] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 481.088714][T12143] ? do_raw_read_unlock+0x44/0xe0 [ 481.088751][T12143] ? ima_d_path+0xbd/0x2a0 [ 481.088783][T12143] ima_d_path+0xbd/0x2a0 [ 481.088807][T12143] ? vfs_getxattr_alloc+0xec/0x340 [ 481.088835][T12143] ? __pfx_ima_d_path+0x10/0x10 [ 481.088870][T12143] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 481.088915][T12143] process_measurement+0x1d86/0x23e0 [ 481.088967][T12143] ? __pfx_process_measurement+0x10/0x10 [ 481.089003][T12143] ? __lock_acquire+0x5ca/0x1ba0 [ 481.089089][T12143] ? mtree_load+0x325/0xa40 [ 481.089133][T12143] ima_file_mmap+0x1b1/0x1d0 [ 481.089169][T12143] ? __pfx_ima_file_mmap+0x10/0x10 [ 481.089233][T12143] security_mmap_file+0x88c/0x990 [ 481.089269][T12143] __do_sys_remap_file_pages+0x2e2/0xac0 [ 481.089321][T12143] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 481.089358][T12143] ? __x64_sys_futex+0x1e0/0x4c0 [ 481.089391][T12143] ? xfd_validate_state+0x5d/0x180 [ 481.089419][T12143] ? rcu_is_watching+0x12/0xc0 [ 481.089455][T12143] do_syscall_64+0xcd/0x230 [ 481.089500][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.089530][T12143] RIP: 0033:0x7f5a86d8e969 [ 481.089551][T12143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.089576][T12143] RSP: 002b:00007f5a87b1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 481.089606][T12143] RAX: ffffffffffffffda RBX: 00007f5a86fb6160 RCX: 00007f5a86d8e969 [ 481.089624][T12143] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a2b [ 481.089640][T12143] RBP: 00007f5a86e10ab1 R08: 0000000000010000 R09: 0000000000000000 [ 481.089667][T12143] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 481.089684][T12143] R13: 0000000000000000 R14: 00007f5a86fb6160 R15: 00007ffde0aacd78 [ 481.089722][T12143] [ 481.777708][T12166] FAULT_INJECTION: forcing a failure. [ 481.777708][T12166] name failslab, interval 1, probability 0, space 0, times 0 [ 481.790673][T12166] CPU: 1 UID: 0 PID: 12166 Comm: syz.3.1210 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 481.790702][T12166] Tainted: [U]=USER [ 481.790708][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.790717][T12166] Call Trace: [ 481.790723][T12166] [ 481.790729][T12166] dump_stack_lvl+0x16c/0x1f0 [ 481.790762][T12166] should_fail_ex+0x512/0x640 [ 481.790784][T12166] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 481.790804][T12166] should_failslab+0xc2/0x120 [ 481.790824][T12166] __kmalloc_cache_noprof+0x6a/0x3e0 [ 481.790839][T12166] ? __asan_memcpy+0x3c/0x60 [ 481.790852][T12166] ? create_filter_start.constprop.0+0x103/0x300 [ 481.790900][T12166] create_filter_start.constprop.0+0x103/0x300 [ 481.790920][T12166] apply_subsystem_event_filter+0x185/0x1450 [ 481.790942][T12166] ? __might_fault+0xe3/0x190 [ 481.790962][T12166] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 481.790985][T12166] ? _copy_from_user+0x59/0xd0 [ 481.791001][T12166] subsystem_filter_write+0x95/0x120 [ 481.791020][T12166] vfs_write+0x25c/0x1180 [ 481.791033][T12166] ? __pfx_subsystem_filter_write+0x10/0x10 [ 481.791052][T12166] ? __pfx___mutex_lock+0x10/0x10 [ 481.791073][T12166] ? __pfx_vfs_write+0x10/0x10 [ 481.791093][T12166] ? __fget_files+0x20e/0x3c0 [ 481.791113][T12166] ksys_write+0x12a/0x240 [ 481.791126][T12166] ? __pfx_ksys_write+0x10/0x10 [ 481.791152][T12166] ? rcu_is_watching+0x12/0xc0 [ 481.791174][T12166] do_syscall_64+0xcd/0x230 [ 481.791203][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.791219][T12166] RIP: 0033:0x7fee2db8e969 [ 481.791232][T12166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.791247][T12166] RSP: 002b:00007fee2b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.791262][T12166] RAX: ffffffffffffffda RBX: 00007fee2ddb6080 RCX: 00007fee2db8e969 [ 481.791272][T12166] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 481.791280][T12166] RBP: 00007fee2dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 481.791288][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.791296][T12166] R13: 0000000000000000 R14: 00007fee2ddb6080 R15: 00007ffc740184a8 [ 481.791316][T12166] [ 482.022247][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.218095][T12179] kexec: Could not allocate control_code_buffer [ 483.592457][T12190] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1215'. [ 484.411718][T12213] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1220'. [ 484.452691][T12213] veth1_macvtap: left promiscuous mode [ 484.501606][T12211] FAULT_INJECTION: forcing a failure. [ 484.501606][T12211] name failslab, interval 1, probability 0, space 0, times 0 [ 484.519789][T12211] CPU: 1 UID: 0 PID: 12211 Comm: syz.3.1221 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 484.519843][T12211] Tainted: [U]=USER [ 484.519852][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.519868][T12211] Call Trace: [ 484.519878][T12211] [ 484.519891][T12211] dump_stack_lvl+0x16c/0x1f0 [ 484.519946][T12211] should_fail_ex+0x512/0x640 [ 484.519991][T12211] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 484.520033][T12211] should_failslab+0xc2/0x120 [ 484.520070][T12211] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 484.520106][T12211] ? create_filter_start.constprop.0+0x16a/0x300 [ 484.520145][T12211] kstrdup+0x53/0x100 [ 484.520182][T12211] create_filter_start.constprop.0+0x16a/0x300 [ 484.520218][T12211] apply_subsystem_event_filter+0x185/0x1450 [ 484.520259][T12211] ? __might_fault+0xe3/0x190 [ 484.520289][T12211] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 484.520324][T12211] ? _copy_from_user+0x59/0xd0 [ 484.520349][T12211] subsystem_filter_write+0x95/0x120 [ 484.520378][T12211] vfs_write+0x25c/0x1180 [ 484.520400][T12211] ? __pfx_subsystem_filter_write+0x10/0x10 [ 484.520434][T12211] ? __pfx___mutex_lock+0x10/0x10 [ 484.520469][T12211] ? __pfx_vfs_write+0x10/0x10 [ 484.520499][T12211] ? __fget_files+0x20e/0x3c0 [ 484.520531][T12211] ksys_write+0x12a/0x240 [ 484.520554][T12211] ? __pfx_ksys_write+0x10/0x10 [ 484.520573][T12211] ? rcu_is_watching+0x12/0xc0 [ 484.520619][T12211] do_syscall_64+0xcd/0x230 [ 484.520658][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.520682][T12211] RIP: 0033:0x7fee2db8e969 [ 484.520720][T12211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.520745][T12211] RSP: 002b:00007fee2b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 484.520771][T12211] RAX: ffffffffffffffda RBX: 00007fee2ddb6080 RCX: 00007fee2db8e969 [ 484.520789][T12211] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 484.520803][T12211] RBP: 00007fee2dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 484.520818][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.520833][T12211] R13: 0000000000000000 R14: 00007fee2ddb6080 R15: 00007ffc740184a8 [ 484.520870][T12211] [ 484.751538][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.224276][T12224] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe0c [ 485.274060][T12224] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 485.295642][T12224] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 485.327381][T12224] page_type: f5(slab) [ 485.331495][T12224] raw: 00fff00000000040 ffff88801b441c80 0000000000000000 dead000000000001 [ 485.376028][T12224] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 485.417863][T12224] head: 00fff00000000040 ffff88801b441c80 0000000000000000 dead000000000001 [ 485.436276][T12224] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 485.448848][T12224] head: 00fff00000000002 ffffea0001ff8301 00000000ffffffff 00000000ffffffff [ 485.469016][T12224] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 485.469383][T12226] could not allocate digest TFM handle binfmt_misc [ 485.523044][T12235] FAULT_INJECTION: forcing a failure. [ 485.523044][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 485.540283][T12224] page dumped because: unmovable page [ 485.560487][T12235] CPU: 1 UID: 0 PID: 12235 Comm: syz.2.1232 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 485.560539][T12235] Tainted: [U]=USER [ 485.560548][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.560562][T12235] Call Trace: [ 485.560571][T12235] [ 485.560582][T12235] dump_stack_lvl+0x16c/0x1f0 [ 485.560633][T12235] should_fail_ex+0x512/0x640 [ 485.560677][T12235] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 485.560709][T12235] should_failslab+0xc2/0x120 [ 485.560746][T12235] __kmalloc_cache_noprof+0x6a/0x3e0 [ 485.560774][T12235] ? create_filter_start.constprop.0+0xa5/0x300 [ 485.560812][T12235] create_filter_start.constprop.0+0xa5/0x300 [ 485.560847][T12235] apply_subsystem_event_filter+0x185/0x1450 [ 485.560886][T12235] ? __might_fault+0xe3/0x190 [ 485.560921][T12235] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 485.560964][T12235] ? _copy_from_user+0x59/0xd0 [ 485.560993][T12235] subsystem_filter_write+0x95/0x120 [ 485.561027][T12235] vfs_write+0x25c/0x1180 [ 485.561050][T12235] ? __pfx_subsystem_filter_write+0x10/0x10 [ 485.561083][T12235] ? __pfx___mutex_lock+0x10/0x10 [ 485.561120][T12235] ? __pfx_vfs_write+0x10/0x10 [ 485.561157][T12235] ? __fget_files+0x20e/0x3c0 [ 485.561195][T12235] ksys_write+0x12a/0x240 [ 485.561222][T12235] ? __pfx_ksys_write+0x10/0x10 [ 485.561265][T12235] ? rcu_is_watching+0x12/0xc0 [ 485.561306][T12235] do_syscall_64+0xcd/0x230 [ 485.561353][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.561380][T12235] RIP: 0033:0x7fa4f398e969 [ 485.561403][T12235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.561432][T12235] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.561468][T12235] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 485.561496][T12235] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 485.561512][T12235] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 485.561530][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.561549][T12235] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 485.561585][T12235] [ 485.787465][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.833991][T12224] page_owner tracks the page as allocated [ 485.839815][T12224] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5201, tgid 5201 (udevadm), ts 40969679047, free_ts 36519483587 [ 485.914891][T12224] post_alloc_hook+0x181/0x1b0 [ 485.929289][T12224] get_page_from_freelist+0x135c/0x3920 [ 485.938592][T12224] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 485.945408][T12224] alloc_pages_mpol+0x1fb/0x550 [ 485.951383][T12224] new_slab+0x244/0x340 [ 485.955931][T12224] ___slab_alloc+0xd9c/0x1940 [ 485.960701][T12224] __slab_alloc.constprop.0+0x56/0xb0 [ 485.966276][T12224] __kmalloc_cache_noprof+0xfb/0x3e0 [ 485.971724][T12224] kernfs_fop_open+0x244/0xda0 [ 485.976787][T12224] do_dentry_open+0x741/0x1c10 [ 485.981614][T12224] vfs_open+0x82/0x3f0 [ 485.985826][T12224] path_openat+0x1e5e/0x2d40 [ 485.990594][T12224] do_filp_open+0x20b/0x470 [ 485.995251][T12224] do_sys_openat2+0x11b/0x1d0 [ 486.000085][T12224] __x64_sys_openat+0x174/0x210 [ 486.005146][T12224] do_syscall_64+0xcd/0x230 [ 486.009755][T12224] page last free pid 1 tgid 1 stack trace: [ 486.015744][T12224] __free_frozen_pages+0x69d/0xff0 [ 486.018450][T12248] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1227'. [ 486.020900][T12224] free_contig_range+0x135/0x3f0 [ 486.035526][T12224] destroy_args+0x66f/0x830 [ 486.040161][T12224] debug_vm_pgtable+0x130e/0x2d50 [ 486.045479][T12224] do_one_initcall+0x120/0x6e0 [ 486.050404][T12224] kernel_init_freeable+0x5c2/0x900 [ 486.055803][T12224] kernel_init+0x1c/0x2b0 [ 486.060286][T12224] ret_from_fork+0x48/0x80 [ 486.064864][T12224] ret_from_fork_asm+0x1a/0x30 [ 487.543552][T12282] tipc: Started in network mode [ 487.548803][T12282] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 487.556306][T12282] tipc: Node number set to 2387504917 [ 489.038012][T12316] FAULT_INJECTION: forcing a failure. [ 489.038012][T12316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.061991][T12316] CPU: 1 UID: 0 PID: 12316 Comm: syz.0.1241 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 489.062057][T12316] Tainted: [U]=USER [ 489.062067][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.062083][T12316] Call Trace: [ 489.062093][T12316] [ 489.062104][T12316] dump_stack_lvl+0x16c/0x1f0 [ 489.062166][T12316] should_fail_ex+0x512/0x640 [ 489.062215][T12316] should_fail_alloc_page+0xe7/0x130 [ 489.062254][T12316] prepare_alloc_pages+0x3c2/0x610 [ 489.062305][T12316] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 489.062341][T12316] ? kasan_save_track+0x14/0x30 [ 489.062371][T12316] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 489.062404][T12316] ? kstrdup+0x53/0x100 [ 489.062438][T12316] ? apply_subsystem_event_filter+0x3df/0x1450 [ 489.062469][T12316] ? subsystem_filter_write+0x95/0x120 [ 489.062497][T12316] ? vfs_write+0x25c/0x1180 [ 489.062521][T12316] ? ksys_write+0x12a/0x240 [ 489.062545][T12316] ? do_syscall_64+0xcd/0x230 [ 489.062584][T12316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.062622][T12316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 489.062694][T12316] __alloc_pages_noprof+0xb/0x1b0 [ 489.062726][T12316] ___kmalloc_large_node+0x82/0x1e0 [ 489.062771][T12316] __kmalloc_large_noprof+0x1c/0x70 [ 489.062814][T12316] append_filter_err+0x8f/0x5e0 [ 489.062932][T12316] apply_subsystem_event_filter+0x678/0x1450 [ 489.062978][T12316] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 489.063026][T12316] ? _copy_from_user+0x59/0xd0 [ 489.063059][T12316] subsystem_filter_write+0x95/0x120 [ 489.063094][T12316] vfs_write+0x25c/0x1180 [ 489.063128][T12316] ? __pfx_subsystem_filter_write+0x10/0x10 [ 489.063170][T12316] ? __pfx___mutex_lock+0x10/0x10 [ 489.063215][T12316] ? __pfx_vfs_write+0x10/0x10 [ 489.063256][T12316] ? __fget_files+0x20e/0x3c0 [ 489.063294][T12316] ksys_write+0x12a/0x240 [ 489.063321][T12316] ? __pfx_ksys_write+0x10/0x10 [ 489.063346][T12316] ? rcu_is_watching+0x12/0xc0 [ 489.063386][T12316] do_syscall_64+0xcd/0x230 [ 489.063428][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.063456][T12316] RIP: 0033:0x7f5a86d8e969 [ 489.063489][T12316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.063519][T12316] RSP: 002b:00007f5a87b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.063547][T12316] RAX: ffffffffffffffda RBX: 00007f5a86fb6080 RCX: 00007f5a86d8e969 [ 489.063567][T12316] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 489.063584][T12316] RBP: 00007f5a86e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 489.063601][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.063617][T12316] R13: 0000000000000000 R14: 00007f5a86fb6080 R15: 00007ffde0aacd78 [ 489.063655][T12316] [ 493.473290][T12386] Process accounting paused [ 493.475765][T12388] kexec: Could not allocate control_code_buffer [ 494.522427][T12419] ubi0: attaching mtd0 [ 494.526588][T12419] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 495.239097][T12430] netlink: zone id is out of range [ 495.244292][T12430] netlink: del zone limit has 4 unknown bytes [ 495.525571][T12433] FAULT_INJECTION: forcing a failure. [ 495.525571][T12433] name failslab, interval 1, probability 0, space 0, times 0 [ 495.637047][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.2.1267 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 495.637100][T12433] Tainted: [U]=USER [ 495.637109][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.637127][T12433] Call Trace: [ 495.637138][T12433] [ 495.637150][T12433] dump_stack_lvl+0x16c/0x1f0 [ 495.637206][T12433] should_fail_ex+0x512/0x640 [ 495.637248][T12433] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 495.637283][T12433] should_failslab+0xc2/0x120 [ 495.637320][T12433] __kmalloc_cache_noprof+0x6a/0x3e0 [ 495.637358][T12433] ? create_filter_start.constprop.0+0xa5/0x300 [ 495.637400][T12433] create_filter_start.constprop.0+0xa5/0x300 [ 495.637439][T12433] apply_subsystem_event_filter+0x185/0x1450 [ 495.637484][T12433] ? __might_fault+0xe3/0x190 [ 495.637517][T12433] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 495.637555][T12433] ? _copy_from_user+0x59/0xd0 [ 495.637583][T12433] subsystem_filter_write+0x95/0x120 [ 495.637616][T12433] vfs_write+0x25c/0x1180 [ 495.637639][T12433] ? __pfx_subsystem_filter_write+0x10/0x10 [ 495.637674][T12433] ? __pfx___mutex_lock+0x10/0x10 [ 495.637714][T12433] ? __pfx_vfs_write+0x10/0x10 [ 495.637750][T12433] ? __fget_files+0x20e/0x3c0 [ 495.637788][T12433] ksys_write+0x12a/0x240 [ 495.637815][T12433] ? __pfx_ksys_write+0x10/0x10 [ 495.637839][T12433] ? rcu_is_watching+0x12/0xc0 [ 495.637877][T12433] do_syscall_64+0xcd/0x230 [ 495.637919][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.637947][T12433] RIP: 0033:0x7fa4f398e969 [ 495.637969][T12433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.637995][T12433] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.638025][T12433] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 495.638044][T12433] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 495.638061][T12433] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 495.638076][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.638092][T12433] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 495.638128][T12433] [ 496.681781][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 497.535512][T12463] bond0: entered promiscuous mode [ 497.541162][T12463] bond0: entered allmulticast mode [ 498.605878][T12487] FAULT_INJECTION: forcing a failure. [ 498.605878][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 498.619105][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.1.1279 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 498.619135][T12487] Tainted: [U]=USER [ 498.619141][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.619152][T12487] Call Trace: [ 498.619157][T12487] [ 498.619163][T12487] dump_stack_lvl+0x16c/0x1f0 [ 498.619196][T12487] should_fail_ex+0x512/0x640 [ 498.619220][T12487] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 498.619246][T12487] should_failslab+0xc2/0x120 [ 498.619265][T12487] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 498.619284][T12487] ? create_filter_start.constprop.0+0x16a/0x300 [ 498.619304][T12487] kstrdup+0x53/0x100 [ 498.619324][T12487] create_filter_start.constprop.0+0x16a/0x300 [ 498.619351][T12487] apply_subsystem_event_filter+0x185/0x1450 [ 498.619372][T12487] ? __might_fault+0xe3/0x190 [ 498.619389][T12487] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 498.619411][T12487] ? _copy_from_user+0x59/0xd0 [ 498.619427][T12487] subsystem_filter_write+0x95/0x120 [ 498.619446][T12487] vfs_write+0x25c/0x1180 [ 498.619460][T12487] ? __pfx_subsystem_filter_write+0x10/0x10 [ 498.619480][T12487] ? __pfx___mutex_lock+0x10/0x10 [ 498.619501][T12487] ? __pfx_vfs_write+0x10/0x10 [ 498.619521][T12487] ? __fget_files+0x20e/0x3c0 [ 498.619540][T12487] ksys_write+0x12a/0x240 [ 498.619554][T12487] ? __pfx_ksys_write+0x10/0x10 [ 498.619567][T12487] ? rcu_is_watching+0x12/0xc0 [ 498.619587][T12487] do_syscall_64+0xcd/0x230 [ 498.619611][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.619627][T12487] RIP: 0033:0x7f0fe4f8e969 [ 498.619641][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.619656][T12487] RSP: 002b:00007f0fe5e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.619670][T12487] RAX: ffffffffffffffda RBX: 00007f0fe51b6080 RCX: 00007f0fe4f8e969 [ 498.619679][T12487] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 498.619687][T12487] RBP: 00007f0fe5010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 498.619696][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.619705][T12487] R13: 0000000000000000 R14: 00007f0fe51b6080 R15: 00007ffd93af4e78 [ 498.619723][T12487] [ 499.069149][T12492] overlayfs: "check_copy_up" module option is obsolete [ 501.078722][T12523] kexec: Could not allocate control_code_buffer [ 501.252314][T12540] FAULT_INJECTION: forcing a failure. [ 501.252314][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 501.268195][T12540] CPU: 1 UID: 0 PID: 12540 Comm: syz.2.1291 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 501.268245][T12540] Tainted: [U]=USER [ 501.268255][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.268273][T12540] Call Trace: [ 501.268284][T12540] [ 501.268307][T12540] dump_stack_lvl+0x16c/0x1f0 [ 501.268361][T12540] should_fail_ex+0x512/0x640 [ 501.268404][T12540] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 501.268439][T12540] should_failslab+0xc2/0x120 [ 501.268478][T12540] __kmalloc_cache_noprof+0x6a/0x3e0 [ 501.268507][T12540] ? __asan_memcpy+0x3c/0x60 [ 501.268531][T12540] ? create_filter_start.constprop.0+0x103/0x300 [ 501.268569][T12540] create_filter_start.constprop.0+0x103/0x300 [ 501.268606][T12540] apply_subsystem_event_filter+0x185/0x1450 [ 501.268649][T12540] ? __might_fault+0xe3/0x190 [ 501.268683][T12540] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 501.268729][T12540] ? _copy_from_user+0x59/0xd0 [ 501.268772][T12540] subsystem_filter_write+0x95/0x120 [ 501.268809][T12540] vfs_write+0x25c/0x1180 [ 501.268837][T12540] ? __pfx_subsystem_filter_write+0x10/0x10 [ 501.268875][T12540] ? __pfx___mutex_lock+0x10/0x10 [ 501.268918][T12540] ? __pfx_vfs_write+0x10/0x10 [ 501.268959][T12540] ? __fget_files+0x20e/0x3c0 [ 501.268997][T12540] ksys_write+0x12a/0x240 [ 501.269025][T12540] ? __pfx_ksys_write+0x10/0x10 [ 501.269049][T12540] ? rcu_is_watching+0x12/0xc0 [ 501.269088][T12540] do_syscall_64+0xcd/0x230 [ 501.269133][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.269161][T12540] RIP: 0033:0x7fa4f398e969 [ 501.269185][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.269213][T12540] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.269241][T12540] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 501.269261][T12540] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 501.269279][T12540] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 501.269297][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.269313][T12540] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 501.269351][T12540] [ 502.060762][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 503.621991][T12590] FAULT_INJECTION: forcing a failure. [ 503.621991][T12590] name failslab, interval 1, probability 0, space 0, times 0 [ 503.661108][T12590] CPU: 1 UID: 0 PID: 12590 Comm: syz.2.1302 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 503.661163][T12590] Tainted: [U]=USER [ 503.661173][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.661191][T12590] Call Trace: [ 503.661200][T12590] [ 503.661211][T12590] dump_stack_lvl+0x16c/0x1f0 [ 503.661263][T12590] should_fail_ex+0x512/0x640 [ 503.661309][T12590] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 503.661354][T12590] should_failslab+0xc2/0x120 [ 503.661393][T12590] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 503.661440][T12590] ? create_filter_start.constprop.0+0x16a/0x300 [ 503.661480][T12590] kstrdup+0x53/0x100 [ 503.661520][T12590] create_filter_start.constprop.0+0x16a/0x300 [ 503.661569][T12590] apply_subsystem_event_filter+0x185/0x1450 [ 503.661614][T12590] ? __might_fault+0xe3/0x190 [ 503.661658][T12590] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 503.661705][T12590] ? _copy_from_user+0x59/0xd0 [ 503.661737][T12590] subsystem_filter_write+0x95/0x120 [ 503.661772][T12590] vfs_write+0x25c/0x1180 [ 503.661797][T12590] ? __pfx_subsystem_filter_write+0x10/0x10 [ 503.661834][T12590] ? __pfx___mutex_lock+0x10/0x10 [ 503.661887][T12590] ? __pfx_vfs_write+0x10/0x10 [ 503.661926][T12590] ? __fget_files+0x20e/0x3c0 [ 503.661964][T12590] ksys_write+0x12a/0x240 [ 503.661992][T12590] ? __pfx_ksys_write+0x10/0x10 [ 503.662017][T12590] ? rcu_is_watching+0x12/0xc0 [ 503.662063][T12590] do_syscall_64+0xcd/0x230 [ 503.662110][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.662140][T12590] RIP: 0033:0x7fa4f398e969 [ 503.662164][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.662193][T12590] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.662222][T12590] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 503.662242][T12590] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 503.662259][T12590] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 503.662276][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.662291][T12590] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 503.662329][T12590] [ 505.192609][T12610] Invalid ELF header magic: != ELF [ 505.941019][T12624] FAULT_INJECTION: forcing a failure. [ 505.941019][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 505.965430][T12624] CPU: 1 UID: 0 PID: 12624 Comm: syz.2.1309 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 505.965469][T12624] Tainted: [U]=USER [ 505.965474][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.965484][T12624] Call Trace: [ 505.965491][T12624] [ 505.965497][T12624] dump_stack_lvl+0x16c/0x1f0 [ 505.965531][T12624] should_fail_ex+0x512/0x640 [ 505.965556][T12624] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 505.965586][T12624] should_failslab+0xc2/0x120 [ 505.965608][T12624] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 505.965625][T12624] ? find_held_lock+0x2b/0x80 [ 505.965641][T12624] ? __d_alloc+0x31/0xaa0 [ 505.965660][T12624] __d_alloc+0x31/0xaa0 [ 505.965676][T12624] d_alloc+0x4a/0x1e0 [ 505.965693][T12624] d_alloc_parallel+0xe3/0x12e0 [ 505.965720][T12624] ? __pfx_d_alloc_parallel+0x10/0x10 [ 505.965740][T12624] ? lockdep_init_map_type+0x5c/0x280 [ 505.965760][T12624] ? lockdep_init_map_type+0x5c/0x280 [ 505.965782][T12624] __lookup_slow+0x193/0x460 [ 505.965801][T12624] ? __pfx___lookup_slow+0x10/0x10 [ 505.965835][T12624] ? __bpf_trace_mm_compaction_end+0xc0/0x1e0 [ 505.965866][T12624] ? __bpf_trace_mm_compaction_end+0xc0/0x1e0 [ 505.965890][T12624] ? d_lookup+0xe7/0x190 [ 505.965914][T12624] lookup_one_len+0x17f/0x1b0 [ 505.965934][T12624] ? __pfx_lookup_one_len+0x10/0x10 [ 505.965956][T12624] ? mntput+0x10/0x90 [ 505.965978][T12624] start_creating.part.0+0x12f/0x3a0 [ 505.966005][T12624] debugfs_create_dir+0x6c/0x5f0 [ 505.966026][T12624] ptp_open+0x307/0x520 [ 505.966052][T12624] ? __pfx_ptp_open+0x10/0x10 [ 505.966073][T12624] ? __pfx_ptp_open+0x10/0x10 [ 505.966088][T12624] posix_clock_open+0x17b/0x290 [ 505.966106][T12624] ? __pfx_posix_clock_open+0x10/0x10 [ 505.966121][T12624] chrdev_open+0x234/0x6a0 [ 505.966137][T12624] ? __pfx_apparmor_file_open+0x10/0x10 [ 505.966157][T12624] ? __pfx_chrdev_open+0x10/0x10 [ 505.966173][T12624] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 505.966200][T12624] do_dentry_open+0x741/0x1c10 [ 505.966218][T12624] ? __pfx_chrdev_open+0x10/0x10 [ 505.966237][T12624] vfs_open+0x82/0x3f0 [ 505.966258][T12624] path_openat+0x1e5e/0x2d40 [ 505.966280][T12624] ? __pfx_path_openat+0x10/0x10 [ 505.966299][T12624] do_filp_open+0x20b/0x470 [ 505.966314][T12624] ? __pfx_do_filp_open+0x10/0x10 [ 505.966346][T12624] ? alloc_fd+0x471/0x7d0 [ 505.966372][T12624] do_sys_openat2+0x11b/0x1d0 [ 505.966391][T12624] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.966417][T12624] __x64_sys_openat+0x174/0x210 [ 505.966436][T12624] ? __pfx___x64_sys_openat+0x10/0x10 [ 505.966456][T12624] ? rcu_is_watching+0x12/0xc0 [ 505.966477][T12624] do_syscall_64+0xcd/0x230 [ 505.966501][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.966518][T12624] RIP: 0033:0x7fa4f398e969 [ 505.966532][T12624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.966546][T12624] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.966562][T12624] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 505.966578][T12624] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 505.966587][T12624] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 505.966597][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.966606][T12624] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 505.966626][T12624] [ 506.481236][ T5140] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 507.465424][T12653] FAULT_INJECTION: forcing a failure. [ 507.465424][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 507.551884][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.2.1314 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 507.551934][T12653] Tainted: [U]=USER [ 507.551944][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.551974][T12653] Call Trace: [ 507.551983][T12653] [ 507.551996][T12653] dump_stack_lvl+0x16c/0x1f0 [ 507.552047][T12653] should_fail_ex+0x512/0x640 [ 507.552088][T12653] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 507.552130][T12653] should_failslab+0xc2/0x120 [ 507.552176][T12653] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 507.552206][T12653] ? create_filter_start.constprop.0+0x16a/0x300 [ 507.552243][T12653] kstrdup+0x53/0x100 [ 507.552277][T12653] create_filter_start.constprop.0+0x16a/0x300 [ 507.552313][T12653] apply_subsystem_event_filter+0x185/0x1450 [ 507.552354][T12653] ? __might_fault+0xe3/0x190 [ 507.552389][T12653] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 507.552432][T12653] ? _copy_from_user+0x59/0xd0 [ 507.552463][T12653] subsystem_filter_write+0x95/0x120 [ 507.552498][T12653] vfs_write+0x25c/0x1180 [ 507.552526][T12653] ? __pfx_subsystem_filter_write+0x10/0x10 [ 507.552566][T12653] ? __pfx___mutex_lock+0x10/0x10 [ 507.552608][T12653] ? __pfx_vfs_write+0x10/0x10 [ 507.552646][T12653] ? __fget_files+0x20e/0x3c0 [ 507.552684][T12653] ksys_write+0x12a/0x240 [ 507.552711][T12653] ? __pfx_ksys_write+0x10/0x10 [ 507.552736][T12653] ? rcu_is_watching+0x12/0xc0 [ 507.552774][T12653] do_syscall_64+0xcd/0x230 [ 507.552818][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.552848][T12653] RIP: 0033:0x7fa4f398e969 [ 507.552872][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.552899][T12653] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.552925][T12653] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 507.552943][T12653] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 507.552960][T12653] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 507.552978][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.552996][T12653] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 507.553036][T12653] [ 508.041960][T12663] FAULT_INJECTION: forcing a failure. [ 508.041960][T12663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.055305][T12663] CPU: 1 UID: 0 PID: 12663 Comm: syz.1.1318 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 508.055341][T12663] Tainted: [U]=USER [ 508.055348][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.055360][T12663] Call Trace: [ 508.055367][T12663] [ 508.055377][T12663] dump_stack_lvl+0x16c/0x1f0 [ 508.055424][T12663] should_fail_ex+0x512/0x640 [ 508.055466][T12663] _copy_from_user+0x2e/0xd0 [ 508.055491][T12663] copy_msghdr_from_user+0x98/0x160 [ 508.055522][T12663] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 508.055563][T12663] ___sys_sendmsg+0xfe/0x1d0 [ 508.055592][T12663] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.055663][T12663] __sys_sendmsg+0x16d/0x220 [ 508.055693][T12663] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.055735][T12663] ? rcu_is_watching+0x12/0xc0 [ 508.055771][T12663] do_syscall_64+0xcd/0x230 [ 508.055812][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.055834][T12663] RIP: 0033:0x7f0fe4f8e969 [ 508.055854][T12663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.055877][T12663] RSP: 002b:00007f0fe5e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.055898][T12663] RAX: ffffffffffffffda RBX: 00007f0fe51b5fa0 RCX: 00007f0fe4f8e969 [ 508.055913][T12663] RDX: 0000000004004094 RSI: 0000200000000740 RDI: 0000000000000004 [ 508.055928][T12663] RBP: 00007f0fe5e79090 R08: 0000000000000000 R09: 0000000000000000 [ 508.055942][T12663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.055957][T12663] R13: 0000000000000000 R14: 00007f0fe51b5fa0 R15: 00007ffd93af4e78 [ 508.055990][T12663] [ 508.301453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.308052][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.453692][T12685] FAULT_INJECTION: forcing a failure. [ 509.453692][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 509.471605][T12685] CPU: 1 UID: 0 PID: 12685 Comm: syz.3.1325 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 509.471657][T12685] Tainted: [U]=USER [ 509.471666][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.471681][T12685] Call Trace: [ 509.471690][T12685] [ 509.471702][T12685] dump_stack_lvl+0x16c/0x1f0 [ 509.471756][T12685] should_fail_ex+0x512/0x640 [ 509.471802][T12685] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 509.471837][T12685] should_failslab+0xc2/0x120 [ 509.471873][T12685] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 509.471900][T12685] ? d_instantiate+0x77/0x90 [ 509.471928][T12685] ? alloc_empty_file+0x55/0x1e0 [ 509.471964][T12685] alloc_empty_file+0x55/0x1e0 [ 509.471995][T12685] alloc_file_pseudo+0x13a/0x230 [ 509.472044][T12685] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 509.472091][T12685] __shmem_file_setup+0x210/0x300 [ 509.472121][T12685] shmem_zero_setup+0x93/0x1a0 [ 509.472158][T12685] __mmap_region+0x2036/0x27c0 [ 509.472191][T12685] ? __pfx___mmap_region+0x10/0x10 [ 509.472220][T12685] ? trace_sched_exit_tp+0xde/0x130 [ 509.472276][T12685] ? __pfx___schedule+0x10/0x10 [ 509.472346][T12685] ? trace_cap_capable+0x18d/0x200 [ 509.472377][T12685] ? cap_capable+0xb3/0x250 [ 509.472407][T12685] mmap_region+0x1ab/0x3f0 [ 509.472441][T12685] do_mmap+0xd8e/0x11b0 [ 509.472482][T12685] ? __pfx_do_mmap+0x10/0x10 [ 509.472514][T12685] ? __pfx_down_write_killable+0x10/0x10 [ 509.472545][T12685] vm_mmap_pgoff+0x281/0x450 [ 509.472586][T12685] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 509.472626][T12685] ? __x64_sys_futex+0x1e0/0x4c0 [ 509.472655][T12685] ? __x64_sys_futex+0x1e9/0x4c0 [ 509.472685][T12685] ksys_mmap_pgoff+0x7d/0x5c0 [ 509.472722][T12685] ? rcu_is_watching+0x12/0xc0 [ 509.472754][T12685] __x64_sys_mmap+0x125/0x190 [ 509.472785][T12685] do_syscall_64+0xcd/0x230 [ 509.472830][T12685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.472859][T12685] RIP: 0033:0x7fee2db8e969 [ 509.472885][T12685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.472911][T12685] RSP: 002b:00007fee2e929038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 509.472936][T12685] RAX: ffffffffffffffda RBX: 00007fee2ddb5fa0 RCX: 00007fee2db8e969 [ 509.472954][T12685] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 509.472971][T12685] RBP: 00007fee2dc10ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 509.472988][T12685] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 509.473005][T12685] R13: 0000000000000000 R14: 00007fee2ddb5fa0 R15: 00007ffc740184a8 [ 509.473049][T12685] [ 509.884444][T12689] FAULT_INJECTION: forcing a failure. [ 509.884444][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 509.897405][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.2.1327 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 509.897448][T12689] Tainted: [U]=USER [ 509.897457][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.897472][T12689] Call Trace: [ 509.897482][T12689] [ 509.897491][T12689] dump_stack_lvl+0x16c/0x1f0 [ 509.897539][T12689] should_fail_ex+0x512/0x640 [ 509.897578][T12689] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 509.897614][T12689] should_failslab+0xc2/0x120 [ 509.897647][T12689] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 509.897678][T12689] ? __alloc_skb+0x2b2/0x380 [ 509.897717][T12689] __alloc_skb+0x2b2/0x380 [ 509.897747][T12689] ? __pfx___alloc_skb+0x10/0x10 [ 509.897782][T12689] ? __lock_acquire+0xaa4/0x1ba0 [ 509.897823][T12689] netlink_alloc_large_skb+0x69/0x130 [ 509.897863][T12689] netlink_sendmsg+0x6a1/0xdd0 [ 509.897903][T12689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.897952][T12689] ____sys_sendmsg+0xa95/0xc70 [ 509.897993][T12689] ? copy_msghdr_from_user+0x10a/0x160 [ 509.898034][T12689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.898089][T12689] ___sys_sendmsg+0x134/0x1d0 [ 509.898123][T12689] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.898200][T12689] __sys_sendmsg+0x16d/0x220 [ 509.898237][T12689] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.898277][T12689] ? rcu_is_watching+0x12/0xc0 [ 509.898307][T12689] do_syscall_64+0xcd/0x230 [ 509.898343][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.898368][T12689] RIP: 0033:0x7fa4f398e969 [ 509.898387][T12689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.898407][T12689] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.898427][T12689] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 509.898442][T12689] RDX: 0000000004004094 RSI: 0000200000000740 RDI: 0000000000000004 [ 509.898455][T12689] RBP: 00007fa4f4819090 R08: 0000000000000000 R09: 0000000000000000 [ 509.898467][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.898479][T12689] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 509.898509][T12689] [ 510.320012][T12696] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 510.395915][T12696] CIFS mount error: No usable UNC path provided in device string! [ 510.395915][T12696] [ 510.409736][T12696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 510.494913][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 510.507527][T12706] FAULT_INJECTION: forcing a failure. [ 510.507527][T12706] name failslab, interval 1, probability 0, space 0, times 0 [ 510.520471][T12706] CPU: 0 UID: 0 PID: 12706 Comm: syz.1.1332 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 510.520520][T12706] Tainted: [U]=USER [ 510.520530][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.520546][T12706] Call Trace: [ 510.520557][T12706] [ 510.520569][T12706] dump_stack_lvl+0x16c/0x1f0 [ 510.520617][T12706] should_fail_ex+0x512/0x640 [ 510.520660][T12706] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 510.520707][T12706] should_failslab+0xc2/0x120 [ 510.520742][T12706] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 510.520778][T12706] ? create_filter_start.constprop.0+0x16a/0x300 [ 510.520814][T12706] kstrdup+0x53/0x100 [ 510.520852][T12706] create_filter_start.constprop.0+0x16a/0x300 [ 510.520888][T12706] apply_subsystem_event_filter+0x185/0x1450 [ 510.520930][T12706] ? __might_fault+0xe3/0x190 [ 510.520961][T12706] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 510.521000][T12706] ? _copy_from_user+0x59/0xd0 [ 510.521028][T12706] subsystem_filter_write+0x95/0x120 [ 510.521061][T12706] vfs_write+0x25c/0x1180 [ 510.521086][T12706] ? __pfx_subsystem_filter_write+0x10/0x10 [ 510.521117][T12706] ? __pfx___mutex_lock+0x10/0x10 [ 510.521153][T12706] ? __pfx_vfs_write+0x10/0x10 [ 510.521194][T12706] ? __fget_files+0x20e/0x3c0 [ 510.521232][T12706] ksys_write+0x12a/0x240 [ 510.521257][T12706] ? __pfx_ksys_write+0x10/0x10 [ 510.521297][T12706] ? rcu_is_watching+0x12/0xc0 [ 510.521344][T12706] do_syscall_64+0xcd/0x230 [ 510.521392][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.521429][T12706] RIP: 0033:0x7f0fe4f8e969 [ 510.521445][T12706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.521462][T12706] RSP: 002b:00007f0fe5e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.521477][T12706] RAX: ffffffffffffffda RBX: 00007f0fe51b6080 RCX: 00007f0fe4f8e969 [ 510.521486][T12706] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 510.521495][T12706] RBP: 00007f0fe5010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 510.521503][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.521511][T12706] R13: 0000000000000000 R14: 00007f0fe51b6080 R15: 00007ffd93af4e78 [ 510.521531][T12706] [ 511.502406][T12735] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1335'. [ 512.431926][T12716] kexec: Could not allocate control_code_buffer [ 514.091138][T12775] FAULT_INJECTION: forcing a failure. [ 514.091138][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 514.166302][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.2.1344 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 514.166355][T12775] Tainted: [U]=USER [ 514.166365][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.166379][T12775] Call Trace: [ 514.166388][T12775] [ 514.166399][T12775] dump_stack_lvl+0x16c/0x1f0 [ 514.166450][T12775] should_fail_ex+0x512/0x640 [ 514.166493][T12775] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 514.166528][T12775] should_failslab+0xc2/0x120 [ 514.166564][T12775] __kmalloc_cache_noprof+0x6a/0x3e0 [ 514.166603][T12775] ? __asan_memcpy+0x3c/0x60 [ 514.166627][T12775] ? create_filter_start.constprop.0+0x103/0x300 [ 514.166667][T12775] create_filter_start.constprop.0+0x103/0x300 [ 514.166704][T12775] apply_subsystem_event_filter+0x185/0x1450 [ 514.166749][T12775] ? __might_fault+0xe3/0x190 [ 514.166782][T12775] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 514.166822][T12775] ? _copy_from_user+0x59/0xd0 [ 514.166850][T12775] subsystem_filter_write+0x95/0x120 [ 514.166884][T12775] vfs_write+0x25c/0x1180 [ 514.166906][T12775] ? __pfx_subsystem_filter_write+0x10/0x10 [ 514.166938][T12775] ? __pfx___mutex_lock+0x10/0x10 [ 514.166979][T12775] ? __pfx_vfs_write+0x10/0x10 [ 514.167018][T12775] ? __fget_files+0x20e/0x3c0 [ 514.167057][T12775] ksys_write+0x12a/0x240 [ 514.167084][T12775] ? __pfx_ksys_write+0x10/0x10 [ 514.167109][T12775] ? rcu_is_watching+0x12/0xc0 [ 514.167147][T12775] do_syscall_64+0xcd/0x230 [ 514.167192][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.167221][T12775] RIP: 0033:0x7fa4f398e969 [ 514.167245][T12775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.167272][T12775] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.167299][T12775] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 514.167319][T12775] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 514.167335][T12775] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 514.167352][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.167369][T12775] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 514.167407][T12775] [ 514.843113][ T9] smpboot: CPU 1 is now offline [ 515.756137][T12811] FAULT_INJECTION: forcing a failure. [ 515.756137][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.839161][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.2.1351 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 515.839191][T12811] Tainted: [U]=USER [ 515.839196][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.839205][T12811] Call Trace: [ 515.839211][T12811] [ 515.839219][T12811] dump_stack_lvl+0x16c/0x1f0 [ 515.839248][T12811] should_fail_ex+0x512/0x640 [ 515.839275][T12811] _copy_from_iter+0x2a4/0x15b0 [ 515.839301][T12811] ? __alloc_skb+0x200/0x380 [ 515.839321][T12811] ? __pfx__copy_from_iter+0x10/0x10 [ 515.839345][T12811] ? __lock_acquire+0xaa4/0x1ba0 [ 515.839370][T12811] netlink_sendmsg+0x829/0xdd0 [ 515.839395][T12811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.839421][T12811] ____sys_sendmsg+0xa95/0xc70 [ 515.839444][T12811] ? copy_msghdr_from_user+0x10a/0x160 [ 515.839462][T12811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.839492][T12811] ___sys_sendmsg+0x134/0x1d0 [ 515.839511][T12811] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.839550][T12811] __sys_sendmsg+0x16d/0x220 [ 515.839568][T12811] ? __pfx___sys_sendmsg+0x10/0x10 [ 515.839590][T12811] ? rcu_is_watching+0x12/0xc0 [ 515.839611][T12811] do_syscall_64+0xcd/0x230 [ 515.839635][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.839659][T12811] RIP: 0033:0x7fa4f398e969 [ 515.839672][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.839687][T12811] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.839701][T12811] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 515.839711][T12811] RDX: 0000000004004094 RSI: 0000200000000740 RDI: 0000000000000004 [ 515.839720][T12811] RBP: 00007fa4f4819090 R08: 0000000000000000 R09: 0000000000000000 [ 515.839729][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.839737][T12811] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 515.839755][T12811] [ 516.441090][T12802] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_cmd_wq": -EINTR [ 517.173148][T12845] tty tty12: ldisc open failed (-12), clearing slot 11 [ 517.784088][T12871] FAULT_INJECTION: forcing a failure. [ 517.784088][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 517.800334][T12858] Invalid ELF header magic: != ELF [ 517.909398][T12871] CPU: 0 UID: 0 PID: 12871 Comm: syz.0.1356 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 517.909426][T12871] Tainted: [U]=USER [ 517.909432][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.909441][T12871] Call Trace: [ 517.909448][T12871] [ 517.909454][T12871] dump_stack_lvl+0x16c/0x1f0 [ 517.909485][T12871] should_fail_ex+0x512/0x640 [ 517.909509][T12871] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 517.909529][T12871] should_failslab+0xc2/0x120 [ 517.909549][T12871] __kmalloc_cache_noprof+0x6a/0x3e0 [ 517.909565][T12871] ? create_filter_start.constprop.0+0xa5/0x300 [ 517.909586][T12871] create_filter_start.constprop.0+0xa5/0x300 [ 517.909604][T12871] apply_subsystem_event_filter+0x185/0x1450 [ 517.909624][T12871] ? __might_fault+0xe3/0x190 [ 517.909642][T12871] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 517.909664][T12871] ? _copy_from_user+0x59/0xd0 [ 517.909681][T12871] subsystem_filter_write+0x95/0x120 [ 517.909700][T12871] vfs_write+0x25c/0x1180 [ 517.909714][T12871] ? __pfx_subsystem_filter_write+0x10/0x10 [ 517.909733][T12871] ? __pfx___mutex_lock+0x10/0x10 [ 517.909755][T12871] ? __pfx_vfs_write+0x10/0x10 [ 517.909774][T12871] ? __fget_files+0x20e/0x3c0 [ 517.909795][T12871] ksys_write+0x12a/0x240 [ 517.909808][T12871] ? __pfx_ksys_write+0x10/0x10 [ 517.909822][T12871] ? rcu_is_watching+0x12/0xc0 [ 517.909843][T12871] do_syscall_64+0xcd/0x230 [ 517.909866][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.909882][T12871] RIP: 0033:0x7f5a86d8e969 [ 517.909894][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.909909][T12871] RSP: 002b:00007f5a87b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.909923][T12871] RAX: ffffffffffffffda RBX: 00007f5a86fb6080 RCX: 00007f5a86d8e969 [ 517.909932][T12871] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 517.909941][T12871] RBP: 00007f5a86e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 517.909949][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.909957][T12871] R13: 0000000000000000 R14: 00007f5a86fb6080 R15: 00007ffde0aacd78 [ 517.909976][T12871] [ 522.224284][T12925] FAULT_INJECTION: forcing a failure. [ 522.224284][T12925] name fail_futex, interval 1, probability 0, space 0, times 0 [ 522.353680][T12925] CPU: 0 UID: 0 PID: 12925 Comm: syz.3.1369 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 522.353717][T12925] Tainted: [U]=USER [ 522.353723][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.353732][T12925] Call Trace: [ 522.353740][T12925] [ 522.353747][T12925] dump_stack_lvl+0x16c/0x1f0 [ 522.353776][T12925] should_fail_ex+0x512/0x640 [ 522.353803][T12925] get_futex_key+0x49e/0x1000 [ 522.353823][T12925] ? __pfx_get_futex_key+0x10/0x10 [ 522.353838][T12925] ? pick_eevdf+0x3be/0x5b0 [ 522.353859][T12925] ? update_curr_se+0x8b/0x270 [ 522.353878][T12925] ? update_curr+0x74/0x800 [ 522.353901][T12925] futex_wait_setup+0x78/0x290 [ 522.353925][T12925] __futex_wait+0x266/0x3c0 [ 522.353945][T12925] ? __pfx___futex_wait+0x10/0x10 [ 522.353963][T12925] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 522.353987][T12925] ? __pfx_futex_wake_mark+0x10/0x10 [ 522.354014][T12925] futex_wait+0xe8/0x380 [ 522.354032][T12925] ? __pfx_futex_wait+0x10/0x10 [ 522.354060][T12925] do_futex+0x229/0x350 [ 522.354076][T12925] ? __pfx_do_futex+0x10/0x10 [ 522.354097][T12925] __x64_sys_futex+0x1e0/0x4c0 [ 522.354115][T12925] ? __pfx___x64_sys_futex+0x10/0x10 [ 522.354139][T12925] do_syscall_64+0xcd/0x230 [ 522.354161][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.354177][T12925] RIP: 0033:0x7fee2db8e969 [ 522.354190][T12925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.354206][T12925] RSP: 002b:00007fee2b9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 522.354222][T12925] RAX: ffffffffffffffda RBX: 00007fee2ddb6088 RCX: 00007fee2db8e969 [ 522.354231][T12925] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee2ddb6088 [ 522.354240][T12925] RBP: 00007fee2ddb6080 R08: 0000000000000000 R09: 0000000000000000 [ 522.354249][T12925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee2ddb608c [ 522.354259][T12925] R13: 0000000000000000 R14: 00007ffc740183c0 R15: 00007ffc740184a8 [ 522.354279][T12925] [ 522.998153][T12931] binder: 12930:12931 ioctl c0306201 2000000003c0 returned -14 [ 523.543586][T12880] Process accounting resumed [ 524.123351][T12963] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1376'. [ 525.209436][T12986] FAULT_INJECTION: forcing a failure. [ 525.209436][T12986] name failslab, interval 1, probability 0, space 0, times 0 [ 525.273729][T12986] CPU: 0 UID: 0 PID: 12986 Comm: syz.0.1381 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 525.273758][T12986] Tainted: [U]=USER [ 525.273763][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.273772][T12986] Call Trace: [ 525.273779][T12986] [ 525.273786][T12986] dump_stack_lvl+0x16c/0x1f0 [ 525.273816][T12986] should_fail_ex+0x512/0x640 [ 525.273840][T12986] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 525.273861][T12986] should_failslab+0xc2/0x120 [ 525.273881][T12986] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 525.273898][T12986] ? __alloc_skb+0x2b2/0x380 [ 525.273917][T12986] ? bpf_lsm_capable+0x9/0x10 [ 525.273937][T12986] __alloc_skb+0x2b2/0x380 [ 525.273953][T12986] ? __pfx___alloc_skb+0x10/0x10 [ 525.273969][T12986] ? genl_rcv_msg+0x4f0/0x800 [ 525.273990][T12986] ? genl_rcv_msg+0x4bb/0x800 [ 525.274015][T12986] netlink_ack+0x15d/0xb80 [ 525.274034][T12986] ? __lock_acquire+0xaa4/0x1ba0 [ 525.274058][T12986] netlink_rcv_skb+0x347/0x440 [ 525.274077][T12986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.274099][T12986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.274127][T12986] ? __pfx_down_read+0x10/0x10 [ 525.274143][T12986] ? netlink_deliver_tap+0x1ae/0xd30 [ 525.274163][T12986] genl_rcv+0x28/0x40 [ 525.274182][T12986] netlink_unicast+0x53d/0x7f0 [ 525.274203][T12986] ? __pfx_netlink_unicast+0x10/0x10 [ 525.274220][T12986] ? __lock_acquire+0xaa4/0x1ba0 [ 525.274243][T12986] netlink_sendmsg+0x8d1/0xdd0 [ 525.274264][T12986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.274290][T12986] ____sys_sendmsg+0xa95/0xc70 [ 525.274312][T12986] ? copy_msghdr_from_user+0x10a/0x160 [ 525.274330][T12986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.274360][T12986] ___sys_sendmsg+0x134/0x1d0 [ 525.274379][T12986] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.274420][T12986] __sys_sendmsg+0x16d/0x220 [ 525.274437][T12986] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.274460][T12986] ? rcu_is_watching+0x12/0xc0 [ 525.274480][T12986] do_syscall_64+0xcd/0x230 [ 525.274503][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.274519][T12986] RIP: 0033:0x7f5a86d8e969 [ 525.274532][T12986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.274546][T12986] RSP: 002b:00007f5a87b3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.274566][T12986] RAX: ffffffffffffffda RBX: 00007f5a86fb6080 RCX: 00007f5a86d8e969 [ 525.274576][T12986] RDX: 0000000004004094 RSI: 0000200000000740 RDI: 0000000000000004 [ 525.274585][T12986] RBP: 00007f5a87b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 525.274594][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.274602][T12986] R13: 0000000000000000 R14: 00007f5a86fb6080 R15: 00007ffde0aacd78 [ 525.274621][T12986] [ 525.792906][T12982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.799209][T12982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 525.805219][T12982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.811202][T12982] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 525.832736][T12982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.168066][T12988] binder: 12987:12988 ioctl c0306201 2000000003c0 returned -14 [ 527.218337][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.936293][T11267] Bluetooth: hci3: command 0x0c1a tx timeout [ 527.942397][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 527.948609][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 528.414102][T13053] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1395'. [ 528.474379][T13054] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 528.939018][T13066] binder: 13065:13066 ioctl c0306201 2000000003c0 returned -14 [ 529.628526][T13083] FAULT_INJECTION: forcing a failure. [ 529.628526][T13083] name failslab, interval 1, probability 0, space 0, times 0 [ 529.677495][T13083] CPU: 0 UID: 0 PID: 13083 Comm: syz.3.1402 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 529.677522][T13083] Tainted: [U]=USER [ 529.677527][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.677536][T13083] Call Trace: [ 529.677543][T13083] [ 529.677549][T13083] dump_stack_lvl+0x16c/0x1f0 [ 529.677578][T13083] should_fail_ex+0x512/0x640 [ 529.677606][T13083] should_failslab+0xc2/0x120 [ 529.677627][T13083] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 529.677646][T13083] ? skb_clone+0x190/0x3f0 [ 529.677670][T13083] skb_clone+0x190/0x3f0 [ 529.677689][T13083] netlink_deliver_tap+0xabd/0xd30 [ 529.677714][T13083] netlink_unicast+0x6b2/0x7f0 [ 529.677736][T13083] ? __pfx_netlink_unicast+0x10/0x10 [ 529.677757][T13083] ? genl_rcv_msg+0x4bb/0x800 [ 529.677782][T13083] netlink_ack+0x696/0xb80 [ 529.677806][T13083] netlink_rcv_skb+0x347/0x440 [ 529.677824][T13083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.677847][T13083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.677875][T13083] ? __pfx_down_read+0x10/0x10 [ 529.677891][T13083] ? netlink_deliver_tap+0x1ae/0xd30 [ 529.677911][T13083] genl_rcv+0x28/0x40 [ 529.677930][T13083] netlink_unicast+0x53d/0x7f0 [ 529.677951][T13083] ? __pfx_netlink_unicast+0x10/0x10 [ 529.677968][T13083] ? __lock_acquire+0xaa4/0x1ba0 [ 529.678001][T13083] netlink_sendmsg+0x8d1/0xdd0 [ 529.678023][T13083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.678049][T13083] ____sys_sendmsg+0xa95/0xc70 [ 529.678072][T13083] ? copy_msghdr_from_user+0x10a/0x160 [ 529.678090][T13083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.678120][T13083] ___sys_sendmsg+0x134/0x1d0 [ 529.678139][T13083] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.678180][T13083] __sys_sendmsg+0x16d/0x220 [ 529.678198][T13083] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.678221][T13083] ? rcu_is_watching+0x12/0xc0 [ 529.678243][T13083] do_syscall_64+0xcd/0x230 [ 529.678266][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.678283][T13083] RIP: 0033:0x7fee2db8e969 [ 529.678295][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.678309][T13083] RSP: 002b:00007fee2e929038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.678323][T13083] RAX: ffffffffffffffda RBX: 00007fee2ddb5fa0 RCX: 00007fee2db8e969 [ 529.678333][T13083] RDX: 0000000004004094 RSI: 0000200000000740 RDI: 0000000000000004 [ 529.678342][T13083] RBP: 00007fee2e929090 R08: 0000000000000000 R09: 0000000000000000 [ 529.678351][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.678360][T13083] R13: 0000000000000000 R14: 00007fee2ddb5fa0 R15: 00007ffc740184a8 [ 529.678379][T13083] [ 530.056946][T13086] FAULT_INJECTION: forcing a failure. [ 530.056946][T13086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.070972][T13086] CPU: 0 UID: 0 PID: 13086 Comm: syz.3.1403 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 530.070997][T13086] Tainted: [U]=USER [ 530.071003][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.071012][T13086] Call Trace: [ 530.071021][T13086] [ 530.071028][T13086] dump_stack_lvl+0x16c/0x1f0 [ 530.071057][T13086] should_fail_ex+0x512/0x640 [ 530.071082][T13086] _copy_to_user+0x32/0xd0 [ 530.071099][T13086] simple_read_from_buffer+0xcb/0x170 [ 530.071124][T13086] proc_fail_nth_read+0x197/0x270 [ 530.071147][T13086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.071169][T13086] ? rw_verify_area+0xcf/0x680 [ 530.071191][T13086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.071214][T13086] vfs_read+0x1de/0xc70 [ 530.071235][T13086] ? __pfx___mutex_lock+0x10/0x10 [ 530.071257][T13086] ? __pfx_vfs_read+0x10/0x10 [ 530.071276][T13086] ? __fget_files+0x20e/0x3c0 [ 530.071296][T13086] ksys_read+0x12a/0x240 [ 530.071309][T13086] ? __pfx_ksys_read+0x10/0x10 [ 530.071322][T13086] ? rcu_is_watching+0x12/0xc0 [ 530.071342][T13086] do_syscall_64+0xcd/0x230 [ 530.071365][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.071381][T13086] RIP: 0033:0x7fee2db8d37c [ 530.071395][T13086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 530.071408][T13086] RSP: 002b:00007fee2e929030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.071427][T13086] RAX: ffffffffffffffda RBX: 00007fee2ddb5fa0 RCX: 00007fee2db8d37c [ 530.071436][T13086] RDX: 000000000000000f RSI: 00007fee2e9290a0 RDI: 0000000000000004 [ 530.071445][T13086] RBP: 00007fee2e929090 R08: 0000000000000000 R09: 0000000000000000 [ 530.071455][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.071463][T13086] R13: 0000000000000000 R14: 00007fee2ddb5fa0 R15: 00007ffc740184a8 [ 530.071482][T13086] [ 530.323001][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 531.101328][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 533.933831][ T5846] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 534.647091][T13197] zero sized request [ 534.843782][T13195] FAULT_INJECTION: forcing a failure. [ 534.843782][T13195] name failslab, interval 1, probability 0, space 0, times 0 [ 534.882635][T13183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.893927][T13183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 534.930500][T13183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.941977][T13195] CPU: 0 UID: 0 PID: 13195 Comm: syz.1.1430 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 534.942009][T13195] Tainted: [U]=USER [ 534.942015][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.942025][T13195] Call Trace: [ 534.942032][T13195] [ 534.942040][T13195] dump_stack_lvl+0x16c/0x1f0 [ 534.942072][T13195] should_fail_ex+0x512/0x640 [ 534.942095][T13195] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 534.942119][T13195] should_failslab+0xc2/0x120 [ 534.942139][T13195] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 534.942156][T13195] ? idr_get_next_ul+0x196/0x2e0 [ 534.942178][T13195] ? __alloc_skb+0x2b2/0x380 [ 534.942200][T13195] __alloc_skb+0x2b2/0x380 [ 534.942216][T13195] ? __pfx___alloc_skb+0x10/0x10 [ 534.942235][T13195] ? idr_get_next+0xec/0x150 [ 534.942256][T13195] ? __pfx_idr_get_next+0x10/0x10 [ 534.942281][T13195] ctrl_build_family_msg+0x36/0xa0 [ 534.942307][T13195] ctrl_getfamily+0x354/0x540 [ 534.942328][T13195] ? __pfx_ctrl_getfamily+0x10/0x10 [ 534.942350][T13195] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 534.942372][T13195] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 534.942398][T13195] genl_family_rcv_msg_doit+0x206/0x2f0 [ 534.942421][T13195] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 534.942442][T13195] ? __pfx___mutex_lock+0x10/0x10 [ 534.942461][T13195] ? genl_get_cmd+0x194/0x580 [ 534.942487][T13195] ? __kasan_slab_alloc+0x89/0x90 [ 534.942502][T13195] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 534.942517][T13195] ? __radix_tree_lookup+0x21f/0x2c0 [ 534.942540][T13195] genl_rcv_msg+0x55c/0x800 [ 534.942563][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.942585][T13195] ? __pfx_ctrl_getfamily+0x10/0x10 [ 534.942607][T13195] ? __lock_acquire+0xaa4/0x1ba0 [ 534.942631][T13195] netlink_rcv_skb+0x16a/0x440 [ 534.942649][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.942671][T13195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.942699][T13195] ? __pfx_down_read+0x10/0x10 [ 534.942713][T13195] ? netlink_deliver_tap+0x1ae/0xd30 [ 534.942733][T13195] genl_rcv+0x28/0x40 [ 534.942752][T13195] netlink_unicast+0x53d/0x7f0 [ 534.942790][T13195] ? __pfx_netlink_unicast+0x10/0x10 [ 534.942824][T13195] netlink_sendmsg+0x8d1/0xdd0 [ 534.942847][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.942881][T13195] __sys_sendto+0x498/0x510 [ 534.942900][T13195] ? __pfx___sys_sendto+0x10/0x10 [ 534.942922][T13195] ? fd_install+0x225/0x750 [ 534.942951][T13195] ? __pfx___sys_socket+0x10/0x10 [ 534.942967][T13195] ? rcu_is_watching+0x12/0xc0 [ 534.942986][T13195] __x64_sys_sendto+0xe0/0x1c0 [ 534.943001][T13195] ? do_syscall_64+0x91/0x230 [ 534.943022][T13195] ? lockdep_hardirqs_on+0x7c/0x110 [ 534.943042][T13195] do_syscall_64+0xcd/0x230 [ 534.943064][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.943080][T13195] RIP: 0033:0x7f0fe4f907fc [ 534.943094][T13195] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 534.943108][T13195] RSP: 002b:00007f0fe5e56ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 534.943124][T13195] RAX: ffffffffffffffda RBX: 00007f0fe5e56fc0 RCX: 00007f0fe4f907fc [ 534.943134][T13195] RDX: 0000000000000020 RSI: 00007f0fe5e57010 RDI: 0000000000000008 [ 534.943144][T13195] RBP: 0000000000000000 R08: 00007f0fe5e56f14 R09: 000000000000000c [ 534.943154][T13195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 534.943163][T13195] R13: 00007f0fe5e56f68 R14: 00007f0fe5e57010 R15: 0000000000000000 [ 534.943182][T13195] [ 535.656818][T13183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.674265][T13183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 536.137354][T13214] FAULT_INJECTION: forcing a failure. [ 536.137354][T13214] name fail_futex, interval 1, probability 0, space 0, times 0 [ 536.185795][ T5140] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 536.185827][ T5140] Bluetooth: hci3: unexpected subevent 0x0c length: 727 > 5 [ 536.201335][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 536.222060][T13214] CPU: 0 UID: 0 PID: 13214 Comm: syz.2.1435 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 536.222087][T13214] Tainted: [U]=USER [ 536.222093][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.222103][T13214] Call Trace: [ 536.222110][T13214] [ 536.222116][T13214] dump_stack_lvl+0x16c/0x1f0 [ 536.222150][T13214] should_fail_ex+0x512/0x640 [ 536.222174][T13214] ? putname+0x154/0x1a0 [ 536.222195][T13214] get_futex_key+0x49e/0x1000 [ 536.222213][T13214] ? __pfx_get_futex_key+0x10/0x10 [ 536.222230][T13214] ? __lock_acquire+0xaa4/0x1ba0 [ 536.222255][T13214] futex_wake+0xe7/0x4e0 [ 536.222275][T13214] ? __pfx_futex_wake+0x10/0x10 [ 536.222296][T13214] ? rcu_is_watching+0x12/0xc0 [ 536.222311][T13214] ? kasan_quarantine_put+0x10a/0x240 [ 536.222327][T13214] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.222350][T13214] do_futex+0x1e3/0x350 [ 536.222366][T13214] ? __pfx_do_futex+0x10/0x10 [ 536.222386][T13214] __x64_sys_futex+0x1e0/0x4c0 [ 536.222418][T13214] ? __pfx___x64_sys_futex+0x10/0x10 [ 536.222437][T13214] ? getname_flags.part.0+0x1c5/0x550 [ 536.222458][T13214] ? rcu_is_watching+0x12/0xc0 [ 536.222479][T13214] do_syscall_64+0xcd/0x230 [ 536.222505][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.222521][T13214] RIP: 0033:0x7fa4f398e969 [ 536.222533][T13214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.222550][T13214] RSP: 002b:00007fa4f48190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 536.222564][T13214] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa8 RCX: 00007fa4f398e969 [ 536.222575][T13214] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa4f3bb5fac [ 536.222584][T13214] RBP: 00007fa4f3bb5fa0 R08: 00007fa4f481a000 R09: 0000000000000000 [ 536.222594][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa4f3bb5fac [ 536.222604][T13214] R13: 0000000000000000 R14: 00007ffc84730f40 R15: 00007ffc84731028 [ 536.222625][T13214] [ 536.837980][T13195] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 536.974659][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.389850][T13237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1440'. [ 537.803372][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 537.809463][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 538.201354][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 538.911698][T13273] FAULT_INJECTION: forcing a failure. [ 538.911698][T13273] name failslab, interval 1, probability 0, space 0, times 0 [ 539.040871][T13273] CPU: 0 UID: 0 PID: 13273 Comm: syz.0.1456 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 539.040905][T13273] Tainted: [U]=USER [ 539.040912][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.040923][T13273] Call Trace: [ 539.040930][T13273] [ 539.040937][T13273] dump_stack_lvl+0x16c/0x1f0 [ 539.040971][T13273] should_fail_ex+0x512/0x640 [ 539.040996][T13273] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 539.041019][T13273] should_failslab+0xc2/0x120 [ 539.041038][T13273] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 539.041058][T13273] ? create_filter_start.constprop.0+0x16a/0x300 [ 539.041079][T13273] kstrdup+0x53/0x100 [ 539.041099][T13273] create_filter_start.constprop.0+0x16a/0x300 [ 539.041118][T13273] apply_subsystem_event_filter+0x185/0x1450 [ 539.041141][T13273] ? __might_fault+0xe3/0x190 [ 539.041159][T13273] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 539.041182][T13273] ? _copy_from_user+0x59/0xd0 [ 539.041198][T13273] subsystem_filter_write+0x95/0x120 [ 539.041217][T13273] vfs_write+0x25c/0x1180 [ 539.041231][T13273] ? __pfx_subsystem_filter_write+0x10/0x10 [ 539.041250][T13273] ? __pfx___mutex_lock+0x10/0x10 [ 539.041272][T13273] ? __pfx_vfs_write+0x10/0x10 [ 539.041292][T13273] ? __fget_files+0x20e/0x3c0 [ 539.041323][T13273] ksys_write+0x12a/0x240 [ 539.041339][T13273] ? __pfx_ksys_write+0x10/0x10 [ 539.041354][T13273] ? rcu_is_watching+0x12/0xc0 [ 539.041377][T13273] do_syscall_64+0xcd/0x230 [ 539.041402][T13273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.041421][T13273] RIP: 0033:0x7f5a86d8e969 [ 539.041436][T13273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.041450][T13273] RSP: 002b:00007f5a87b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.041465][T13273] RAX: ffffffffffffffda RBX: 00007f5a86fb6080 RCX: 00007f5a86d8e969 [ 539.041476][T13273] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 539.041487][T13273] RBP: 00007f5a86e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 539.041497][T13273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.041507][T13273] R13: 0000000000000000 R14: 00007f5a86fb6080 R15: 00007ffde0aacd78 [ 539.041527][T13273] [ 541.500096][T13313] Invalid ELF header magic: != ELF [ 541.991158][T13336] FAULT_INJECTION: forcing a failure. [ 541.991158][T13336] name failslab, interval 1, probability 0, space 0, times 0 [ 542.041990][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.2.1461 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 542.042018][T13336] Tainted: [U]=USER [ 542.042024][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.042034][T13336] Call Trace: [ 542.042041][T13336] [ 542.042047][T13336] dump_stack_lvl+0x16c/0x1f0 [ 542.042078][T13336] should_fail_ex+0x512/0x640 [ 542.042103][T13336] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 542.042122][T13336] should_failslab+0xc2/0x120 [ 542.042142][T13336] __kmalloc_cache_noprof+0x6a/0x3e0 [ 542.042157][T13336] ? __asan_memcpy+0x3c/0x60 [ 542.042171][T13336] ? create_filter_start.constprop.0+0x103/0x300 [ 542.042193][T13336] create_filter_start.constprop.0+0x103/0x300 [ 542.042212][T13336] apply_subsystem_event_filter+0x185/0x1450 [ 542.042234][T13336] ? __might_fault+0xe3/0x190 [ 542.042255][T13336] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 542.042278][T13336] ? _copy_from_user+0x59/0xd0 [ 542.042296][T13336] subsystem_filter_write+0x95/0x120 [ 542.042316][T13336] vfs_write+0x25c/0x1180 [ 542.042331][T13336] ? __pfx_subsystem_filter_write+0x10/0x10 [ 542.042351][T13336] ? __pfx___mutex_lock+0x10/0x10 [ 542.042373][T13336] ? __pfx_vfs_write+0x10/0x10 [ 542.042393][T13336] ? __fget_files+0x20e/0x3c0 [ 542.042414][T13336] ksys_write+0x12a/0x240 [ 542.042430][T13336] ? __pfx_ksys_write+0x10/0x10 [ 542.042445][T13336] ? rcu_is_watching+0x12/0xc0 [ 542.042466][T13336] do_syscall_64+0xcd/0x230 [ 542.042489][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.042507][T13336] RIP: 0033:0x7fa4f398e969 [ 542.042520][T13336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.042534][T13336] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.042551][T13336] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 542.042562][T13336] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 542.042572][T13336] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 542.042582][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.042593][T13336] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 542.042614][T13336] [ 542.898435][ T30] audit: type=1804 audit(6043077233.611:20): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1465" name="/newroot/302/file0" dev="tmpfs" ino=1595 res=1 errno=0 [ 543.026169][ T30] audit: type=1800 audit(6043077233.641:21): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1465" name="file0" dev="tmpfs" ino=1595 res=0 errno=0 [ 543.145594][ T30] audit: type=1804 audit(6043077233.641:22): pid=13356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1465" name="/newroot/302/file0" dev="tmpfs" ino=1595 res=1 errno=0 [ 544.552365][T13384] FAULT_INJECTION: forcing a failure. [ 544.552365][T13384] name failslab, interval 1, probability 0, space 0, times 0 [ 544.602243][T13384] CPU: 0 UID: 0 PID: 13384 Comm: syz.1.1472 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 544.602271][T13384] Tainted: [U]=USER [ 544.602276][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.602286][T13384] Call Trace: [ 544.602291][T13384] [ 544.602298][T13384] dump_stack_lvl+0x16c/0x1f0 [ 544.602328][T13384] should_fail_ex+0x512/0x640 [ 544.602352][T13384] ? fs_reclaim_acquire+0xae/0x150 [ 544.602377][T13384] should_failslab+0xc2/0x120 [ 544.602396][T13384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 544.602414][T13384] ? security_inode_alloc+0x3b/0x2b0 [ 544.602436][T13384] security_inode_alloc+0x3b/0x2b0 [ 544.602454][T13384] inode_init_always_gfp+0xce4/0x1030 [ 544.602473][T13384] alloc_inode+0x86/0x240 [ 544.602491][T13384] sock_alloc+0x40/0x280 [ 544.602513][T13384] do_accept+0xf7/0x530 [ 544.602528][T13384] ? do_raw_spin_lock+0x12c/0x2b0 [ 544.602551][T13384] ? __pfx_do_accept+0x10/0x10 [ 544.602577][T13384] __sys_accept4+0x100/0x1b0 [ 544.602592][T13384] ? __pfx___sys_accept4+0x10/0x10 [ 544.602605][T13384] ? ksys_write+0x1b9/0x240 [ 544.602619][T13384] ? __pfx_ksys_write+0x10/0x10 [ 544.602632][T13384] ? rcu_is_watching+0x12/0xc0 [ 544.602651][T13384] __x64_sys_accept+0x74/0xb0 [ 544.602664][T13384] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.602689][T13384] do_syscall_64+0xcd/0x230 [ 544.602712][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.602728][T13384] RIP: 0033:0x7f0fe4f8e969 [ 544.602741][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.602754][T13384] RSP: 002b:00007f0fe5e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 544.602770][T13384] RAX: ffffffffffffffda RBX: 00007f0fe51b5fa0 RCX: 00007f0fe4f8e969 [ 544.602780][T13384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 544.602788][T13384] RBP: 00007f0fe5e79090 R08: 0000000000000000 R09: 0000000000000000 [ 544.602797][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.602805][T13384] R13: 0000000000000000 R14: 00007f0fe51b5fa0 R15: 00007ffd93af4e78 [ 544.602824][T13384] [ 547.597103][T13432] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 548.022811][T13442] FAULT_INJECTION: forcing a failure. [ 548.022811][T13442] name failslab, interval 1, probability 0, space 0, times 0 [ 548.079932][T13442] CPU: 0 UID: 0 PID: 13442 Comm: syz.3.1486 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 548.079962][T13442] Tainted: [U]=USER [ 548.079968][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.079977][T13442] Call Trace: [ 548.079983][T13442] [ 548.079990][T13442] dump_stack_lvl+0x16c/0x1f0 [ 548.080021][T13442] should_fail_ex+0x512/0x640 [ 548.080045][T13442] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 548.080066][T13442] should_failslab+0xc2/0x120 [ 548.080086][T13442] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 548.080104][T13442] ? __d_alloc+0x31/0xaa0 [ 548.080123][T13442] __d_alloc+0x31/0xaa0 [ 548.080137][T13442] ? trace_kmem_cache_alloc+0x28/0xc0 [ 548.080157][T13442] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 548.080174][T13442] d_alloc_pseudo+0x1c/0xc0 [ 548.080193][T13442] alloc_file_pseudo+0xcf/0x230 [ 548.080213][T13442] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 548.080237][T13442] sock_alloc_file+0x50/0x210 [ 548.080260][T13442] do_accept+0x240/0x530 [ 548.080275][T13442] ? do_raw_spin_lock+0x12c/0x2b0 [ 548.080298][T13442] ? __pfx_do_accept+0x10/0x10 [ 548.080324][T13442] __sys_accept4+0x100/0x1b0 [ 548.080339][T13442] ? __pfx___sys_accept4+0x10/0x10 [ 548.080352][T13442] ? ksys_write+0x1b9/0x240 [ 548.080366][T13442] ? __pfx_ksys_write+0x10/0x10 [ 548.080380][T13442] ? rcu_is_watching+0x12/0xc0 [ 548.080398][T13442] __x64_sys_accept+0x74/0xb0 [ 548.080420][T13442] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.080442][T13442] do_syscall_64+0xcd/0x230 [ 548.080465][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.080482][T13442] RIP: 0033:0x7fee2db8e969 [ 548.080494][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.080508][T13442] RSP: 002b:00007fee2e929038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 548.080523][T13442] RAX: ffffffffffffffda RBX: 00007fee2ddb5fa0 RCX: 00007fee2db8e969 [ 548.080533][T13442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 548.080542][T13442] RBP: 00007fee2e929090 R08: 0000000000000000 R09: 0000000000000000 [ 548.080550][T13442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.080559][T13442] R13: 0000000000000000 R14: 00007fee2ddb5fa0 R15: 00007ffc740184a8 [ 548.080577][T13442] [ 549.031999][T13466] pty pty111: ldisc open failed (-12), clearing slot 111 [ 549.303552][ T30] audit: type=1800 audit(6043077240.044:23): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1493" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 550.088410][T13499] FAULT_INJECTION: forcing a failure. [ 550.088410][T13499] name failslab, interval 1, probability 0, space 0, times 0 [ 550.133030][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.3.1499 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 550.133058][T13499] Tainted: [U]=USER [ 550.133063][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.133071][T13499] Call Trace: [ 550.133077][T13499] [ 550.133084][T13499] dump_stack_lvl+0x16c/0x1f0 [ 550.133124][T13499] should_fail_ex+0x512/0x640 [ 550.133148][T13499] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 550.133169][T13499] should_failslab+0xc2/0x120 [ 550.133190][T13499] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 550.133205][T13499] ? d_instantiate+0x77/0x90 [ 550.133223][T13499] ? alloc_empty_file+0x55/0x1e0 [ 550.133245][T13499] alloc_empty_file+0x55/0x1e0 [ 550.133264][T13499] alloc_file_pseudo+0x13a/0x230 [ 550.133283][T13499] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 550.133306][T13499] sock_alloc_file+0x50/0x210 [ 550.133329][T13499] do_accept+0x240/0x530 [ 550.133345][T13499] ? do_raw_spin_lock+0x12c/0x2b0 [ 550.133369][T13499] ? __pfx_do_accept+0x10/0x10 [ 550.133395][T13499] __sys_accept4+0x100/0x1b0 [ 550.133410][T13499] ? __pfx___sys_accept4+0x10/0x10 [ 550.133423][T13499] ? ksys_write+0x1b9/0x240 [ 550.133437][T13499] ? __pfx_ksys_write+0x10/0x10 [ 550.133451][T13499] ? rcu_is_watching+0x12/0xc0 [ 550.133470][T13499] __x64_sys_accept+0x74/0xb0 [ 550.133484][T13499] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.133506][T13499] do_syscall_64+0xcd/0x230 [ 550.133529][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.133544][T13499] RIP: 0033:0x7fee2db8e969 [ 550.133557][T13499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.133572][T13499] RSP: 002b:00007fee2e929038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 550.133587][T13499] RAX: ffffffffffffffda RBX: 00007fee2ddb5fa0 RCX: 00007fee2db8e969 [ 550.133597][T13499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 550.133606][T13499] RBP: 00007fee2e929090 R08: 0000000000000000 R09: 0000000000000000 [ 550.133615][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.133623][T13499] R13: 0000000000000000 R14: 00007fee2ddb5fa0 R15: 00007ffc740184a8 [ 550.133642][T13499] [ 551.246044][T13530] FAULT_INJECTION: forcing a failure. [ 551.246044][T13530] name failslab, interval 1, probability 0, space 0, times 0 [ 551.344598][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.3.1505 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 551.344630][T13530] Tainted: [U]=USER [ 551.344635][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.344645][T13530] Call Trace: [ 551.344651][T13530] [ 551.344659][T13530] dump_stack_lvl+0x16c/0x1f0 [ 551.344691][T13530] should_fail_ex+0x512/0x640 [ 551.344715][T13530] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 551.344734][T13530] should_failslab+0xc2/0x120 [ 551.344754][T13530] __kmalloc_cache_noprof+0x6a/0x3e0 [ 551.344770][T13530] ? fqdir_init+0x4f/0x1f0 [ 551.344794][T13530] fqdir_init+0x4f/0x1f0 [ 551.344813][T13530] lowpan_frags_init_net+0x2d/0x3a0 [ 551.344839][T13530] ? __pfx_lowpan_frags_init_net+0x10/0x10 [ 551.344860][T13530] ops_init+0x1e2/0x5f0 [ 551.344883][T13530] setup_net+0x21e/0x850 [ 551.344903][T13530] ? __pfx_setup_net+0x10/0x10 [ 551.344920][T13530] ? lockdep_init_map_type+0x5c/0x280 [ 551.344941][T13530] ? __pfx_down_read_killable+0x10/0x10 [ 551.344958][T13530] ? debug_mutex_init+0x37/0x70 [ 551.344974][T13530] copy_net_ns+0x2a6/0x5f0 [ 551.344996][T13530] create_new_namespaces+0x3ea/0xad0 [ 551.345019][T13530] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 551.345037][T13530] ksys_unshare+0x45b/0xa40 [ 551.345058][T13530] ? __pfx_ksys_unshare+0x10/0x10 [ 551.345077][T13530] ? xfd_validate_state+0x5d/0x180 [ 551.345092][T13530] ? rcu_is_watching+0x12/0xc0 [ 551.345120][T13530] __x64_sys_unshare+0x31/0x40 [ 551.345142][T13530] do_syscall_64+0xcd/0x230 [ 551.345168][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.345184][T13530] RIP: 0033:0x7fee2db8e969 [ 551.345198][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.345213][T13530] RSP: 002b:00007fee2b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 551.345229][T13530] RAX: ffffffffffffffda RBX: 00007fee2ddb6080 RCX: 00007fee2db8e969 [ 551.345240][T13530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 551.345250][T13530] RBP: 00007fee2dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 551.345261][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.345271][T13530] R13: 0000000000000000 R14: 00007fee2ddb6080 R15: 00007ffc740184a8 [ 551.345291][T13530] [ 551.585095][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.284489][T13554] FAULT_INJECTION: forcing a failure. [ 552.284489][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 552.328805][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.2.1510 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 552.328834][T13554] Tainted: [U]=USER [ 552.328840][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.328850][T13554] Call Trace: [ 552.328856][T13554] [ 552.328863][T13554] dump_stack_lvl+0x16c/0x1f0 [ 552.328892][T13554] should_fail_ex+0x512/0x640 [ 552.328961][T13554] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 552.328984][T13554] should_failslab+0xc2/0x120 [ 552.329004][T13554] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 552.329021][T13554] ? security_file_alloc+0x34/0x2b0 [ 552.329047][T13554] security_file_alloc+0x34/0x2b0 [ 552.329067][T13554] init_file+0x93/0x4c0 [ 552.329086][T13554] alloc_empty_file+0x73/0x1e0 [ 552.329105][T13554] alloc_file_pseudo+0x13a/0x230 [ 552.329125][T13554] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 552.329149][T13554] sock_alloc_file+0x50/0x210 [ 552.329172][T13554] do_accept+0x240/0x530 [ 552.329187][T13554] ? do_raw_spin_lock+0x12c/0x2b0 [ 552.329211][T13554] ? __pfx_do_accept+0x10/0x10 [ 552.329237][T13554] __sys_accept4+0x100/0x1b0 [ 552.329252][T13554] ? __pfx___sys_accept4+0x10/0x10 [ 552.329266][T13554] ? ksys_write+0x1b9/0x240 [ 552.329280][T13554] ? __pfx_ksys_write+0x10/0x10 [ 552.329293][T13554] ? rcu_is_watching+0x12/0xc0 [ 552.329313][T13554] __x64_sys_accept+0x74/0xb0 [ 552.329327][T13554] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.329348][T13554] do_syscall_64+0xcd/0x230 [ 552.329371][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.329387][T13554] RIP: 0033:0x7fa4f398e969 [ 552.329399][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.329413][T13554] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 552.329428][T13554] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 552.329438][T13554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 552.329447][T13554] RBP: 00007fa4f4819090 R08: 0000000000000000 R09: 0000000000000000 [ 552.329456][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.329465][T13554] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 552.329483][T13554] [ 552.563818][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.585071][T13577] Process accounting paused [ 553.762367][T13592] FAULT_INJECTION: forcing a failure. [ 553.762367][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 553.847657][T13592] CPU: 0 UID: 0 PID: 13592 Comm: syz.1.1521 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 553.847684][T13592] Tainted: [U]=USER [ 553.847690][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.847699][T13592] Call Trace: [ 553.847704][T13592] [ 553.847711][T13592] dump_stack_lvl+0x16c/0x1f0 [ 553.847738][T13592] should_fail_ex+0x512/0x640 [ 553.847761][T13592] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 553.847787][T13592] should_failslab+0xc2/0x120 [ 553.847806][T13592] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 553.847822][T13592] ? sk_prot_alloc+0x60/0x2a0 [ 553.847847][T13592] sk_prot_alloc+0x60/0x2a0 [ 553.847868][T13592] sk_alloc+0x36/0xc20 [ 553.847886][T13592] sctp_v6_create_accept_sk+0x12e/0x730 [ 553.847908][T13592] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.847931][T13592] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 553.847947][T13592] sctp_accept+0x66f/0x7f0 [ 553.847966][T13592] ? __pfx_sctp_accept+0x10/0x10 [ 553.847979][T13592] ? aa_sk_perm+0x2f4/0xb10 [ 553.847999][T13592] ? __pfx_autoremove_wake_function+0x10/0x10 [ 553.848020][T13592] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.848041][T13592] inet_accept+0xc7/0x180 [ 553.848059][T13592] do_accept+0x33b/0x530 [ 553.848075][T13592] ? __pfx_do_accept+0x10/0x10 [ 553.848102][T13592] __sys_accept4+0x100/0x1b0 [ 553.848116][T13592] ? __pfx___sys_accept4+0x10/0x10 [ 553.848129][T13592] ? ksys_write+0x1b9/0x240 [ 553.848144][T13592] ? __pfx_ksys_write+0x10/0x10 [ 553.848156][T13592] ? rcu_is_watching+0x12/0xc0 [ 553.848174][T13592] __x64_sys_accept+0x74/0xb0 [ 553.848187][T13592] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.848207][T13592] do_syscall_64+0xcd/0x230 [ 553.848229][T13592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.848244][T13592] RIP: 0033:0x7f0fe4f8e969 [ 553.848256][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.848270][T13592] RSP: 002b:00007f0fe5e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 553.848284][T13592] RAX: ffffffffffffffda RBX: 00007f0fe51b5fa0 RCX: 00007f0fe4f8e969 [ 553.848294][T13592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 553.848302][T13592] RBP: 00007f0fe5e79090 R08: 0000000000000000 R09: 0000000000000000 [ 553.848311][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.848320][T13592] R13: 0000000000000000 R14: 00007f0fe51b5fa0 R15: 00007ffd93af4e78 [ 553.848339][T13592] [ 554.096342][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.376005][ T5846] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 554.386158][ T30] audit: type=1800 audit(6043077252.996:24): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1523" name="dbroot" dev="configfs" ino=46633 res=0 errno=0 [ 554.406389][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.646458][T13632] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 555.733656][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.2.1531 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 555.733684][T13632] Tainted: [U]=USER [ 555.733689][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.733697][T13632] Call Trace: [ 555.733703][T13632] [ 555.733709][T13632] dump_stack_lvl+0x16c/0x1f0 [ 555.733737][T13632] sysfs_warn_dup+0x7f/0xa0 [ 555.733765][T13632] sysfs_do_create_link_sd+0x124/0x140 [ 555.733789][T13632] sysfs_create_link+0x61/0xc0 [ 555.733810][T13632] device_add+0x62c/0x1a70 [ 555.733837][T13632] ? __pfx_device_add+0x10/0x10 [ 555.733855][T13632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.733878][T13632] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 555.733906][T13632] wiphy_register+0x1c9c/0x2850 [ 555.733922][T13632] ? netdev_run_todo+0x864/0x1320 [ 555.733951][T13632] ? __pfx_wiphy_register+0x10/0x10 [ 555.733973][T13632] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 555.733993][T13632] ieee80211_register_hw+0x24ac/0x4140 [ 555.734017][T13632] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 555.734035][T13632] ? find_held_lock+0x2b/0x80 [ 555.734052][T13632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.734071][T13632] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 555.734091][T13632] ? __hrtimer_setup+0x176/0x280 [ 555.734116][T13632] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 555.734149][T13632] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 555.734169][T13632] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 555.734192][T13632] ? __asan_memcpy+0x3c/0x60 [ 555.734210][T13632] hwsim_new_radio_nl+0xb51/0x12c0 [ 555.734237][T13632] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 555.734265][T13632] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 555.734290][T13632] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 555.734316][T13632] genl_family_rcv_msg_doit+0x206/0x2f0 [ 555.734339][T13632] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 555.734360][T13632] ? trace_cap_capable+0x18d/0x200 [ 555.734386][T13632] ? bpf_lsm_capable+0x9/0x10 [ 555.734403][T13632] ? security_capable+0x7e/0x260 [ 555.734420][T13632] ? ns_capable+0xd7/0x110 [ 555.734439][T13632] genl_rcv_msg+0x55c/0x800 [ 555.734462][T13632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.734481][T13632] ? __pfx___dev_queue_xmit+0x10/0x10 [ 555.734498][T13632] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 555.734520][T13632] ? __lock_acquire+0xaa4/0x1ba0 [ 555.734542][T13632] netlink_rcv_skb+0x16a/0x440 [ 555.734561][T13632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.734591][T13632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.734619][T13632] ? __pfx_down_read+0x10/0x10 [ 555.734636][T13632] ? netlink_deliver_tap+0x1ae/0xd30 [ 555.734658][T13632] genl_rcv+0x28/0x40 [ 555.734677][T13632] netlink_unicast+0x53d/0x7f0 [ 555.734698][T13632] ? __pfx_netlink_unicast+0x10/0x10 [ 555.734715][T13632] ? __lock_acquire+0xaa4/0x1ba0 [ 555.734738][T13632] netlink_sendmsg+0x8d1/0xdd0 [ 555.734761][T13632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.734788][T13632] ____sys_sendmsg+0xa95/0xc70 [ 555.734810][T13632] ? copy_msghdr_from_user+0x10a/0x160 [ 555.734828][T13632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.734858][T13632] ___sys_sendmsg+0x134/0x1d0 [ 555.734877][T13632] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.734919][T13632] __sys_sendmsg+0x16d/0x220 [ 555.734937][T13632] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.734954][T13632] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 555.734977][T13632] ? rcu_is_watching+0x12/0xc0 [ 555.734997][T13632] do_syscall_64+0xcd/0x230 [ 555.735019][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.735034][T13632] RIP: 0033:0x7fa4f398e969 [ 555.735046][T13632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.735060][T13632] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.735075][T13632] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 555.735085][T13632] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 000000000000000a [ 555.735094][T13632] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 555.735102][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.735111][T13632] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 555.735130][T13632] [ 556.157472][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.173157][T13641] FAULT_INJECTION: forcing a failure. [ 556.173157][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 556.186037][T13641] CPU: 0 UID: 0 PID: 13641 Comm: syz.1.1532 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 556.186062][T13641] Tainted: [U]=USER [ 556.186067][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.186076][T13641] Call Trace: [ 556.186082][T13641] [ 556.186088][T13641] dump_stack_lvl+0x16c/0x1f0 [ 556.186115][T13641] should_fail_ex+0x512/0x640 [ 556.186137][T13641] ? __kmalloc_noprof+0xbf/0x510 [ 556.186156][T13641] ? lsm_blob_alloc+0x68/0x90 [ 556.186169][T13641] should_failslab+0xc2/0x120 [ 556.186187][T13641] __kmalloc_noprof+0xd2/0x510 [ 556.186207][T13641] lsm_blob_alloc+0x68/0x90 [ 556.186221][T13641] security_sk_alloc+0x30/0x270 [ 556.186240][T13641] sk_prot_alloc+0xfb/0x2a0 [ 556.186263][T13641] sk_alloc+0x36/0xc20 [ 556.186280][T13641] sctp_v6_create_accept_sk+0x12e/0x730 [ 556.186297][T13641] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 556.186319][T13641] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 556.186335][T13641] sctp_accept+0x66f/0x7f0 [ 556.186353][T13641] ? __pfx_sctp_accept+0x10/0x10 [ 556.186366][T13641] ? aa_sk_perm+0x2f4/0xb10 [ 556.186384][T13641] ? __pfx_autoremove_wake_function+0x10/0x10 [ 556.186403][T13641] ? __pfx_aa_sk_perm+0x10/0x10 [ 556.186428][T13641] inet_accept+0xc7/0x180 [ 556.186444][T13641] do_accept+0x33b/0x530 [ 556.186461][T13641] ? __pfx_do_accept+0x10/0x10 [ 556.186487][T13641] __sys_accept4+0x100/0x1b0 [ 556.186502][T13641] ? __pfx___sys_accept4+0x10/0x10 [ 556.186515][T13641] ? ksys_write+0x1b9/0x240 [ 556.186530][T13641] ? __pfx_ksys_write+0x10/0x10 [ 556.186543][T13641] ? rcu_is_watching+0x12/0xc0 [ 556.186561][T13641] __x64_sys_accept+0x74/0xb0 [ 556.186575][T13641] ? lockdep_hardirqs_on+0x7c/0x110 [ 556.186595][T13641] do_syscall_64+0xcd/0x230 [ 556.186617][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.186632][T13641] RIP: 0033:0x7f0fe4f8e969 [ 556.186645][T13641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.186659][T13641] RSP: 002b:00007f0fe5e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 556.186674][T13641] RAX: ffffffffffffffda RBX: 00007f0fe51b5fa0 RCX: 00007f0fe4f8e969 [ 556.186684][T13641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 556.186693][T13641] RBP: 00007f0fe5e79090 R08: 0000000000000000 R09: 0000000000000000 [ 556.186702][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.186710][T13641] R13: 0000000000000000 R14: 00007f0fe51b5fa0 R15: 00007ffd93af4e78 [ 556.186729][T13641] [ 556.442356][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.001228][ T30] audit: type=1800 audit(6043077255.720:25): pid=13651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1536" name="dbroot" dev="configfs" ino=46943 res=0 errno=0 [ 557.384796][T13663] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1538'. [ 557.422227][T13655] could not allocate digest TFM handle  [ 557.461365][T13663] macsec0: entered promiscuous mode [ 557.488198][T13663] macsec0: entered allmulticast mode [ 557.511159][T13663] veth1_macvtap: entered allmulticast mode [ 557.613943][T13668] FAULT_INJECTION: forcing a failure. [ 557.613943][T13668] name failslab, interval 1, probability 0, space 0, times 0 [ 557.663446][T13668] CPU: 0 UID: 0 PID: 13668 Comm: syz.1.1542 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 557.663473][T13668] Tainted: [U]=USER [ 557.663478][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.663487][T13668] Call Trace: [ 557.663492][T13668] [ 557.663500][T13668] dump_stack_lvl+0x16c/0x1f0 [ 557.663527][T13668] should_fail_ex+0x512/0x640 [ 557.663549][T13668] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 557.663567][T13668] should_failslab+0xc2/0x120 [ 557.663586][T13668] __kmalloc_cache_noprof+0x6a/0x3e0 [ 557.663601][T13668] ? sctp_endpoint_new+0x7c/0xcd0 [ 557.663621][T13668] sctp_endpoint_new+0x7c/0xcd0 [ 557.663638][T13668] sctp_init_sock+0xe2d/0x1330 [ 557.663668][T13668] sctp_v6_init_sock+0x16/0x70 [ 557.663689][T13668] sctp_v6_create_accept_sk+0x4e0/0x730 [ 557.663709][T13668] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 557.663725][T13668] sctp_accept+0x66f/0x7f0 [ 557.663742][T13668] ? __pfx_sctp_accept+0x10/0x10 [ 557.663755][T13668] ? aa_sk_perm+0x2f4/0xb10 [ 557.663773][T13668] ? __pfx_autoremove_wake_function+0x10/0x10 [ 557.663793][T13668] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.663814][T13668] inet_accept+0xc7/0x180 [ 557.663831][T13668] do_accept+0x33b/0x530 [ 557.663849][T13668] ? __pfx_do_accept+0x10/0x10 [ 557.663875][T13668] __sys_accept4+0x100/0x1b0 [ 557.663890][T13668] ? __pfx___sys_accept4+0x10/0x10 [ 557.663903][T13668] ? ksys_write+0x1b9/0x240 [ 557.663917][T13668] ? __pfx_ksys_write+0x10/0x10 [ 557.663930][T13668] ? rcu_is_watching+0x12/0xc0 [ 557.663948][T13668] __x64_sys_accept+0x74/0xb0 [ 557.663962][T13668] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.663981][T13668] do_syscall_64+0xcd/0x230 [ 557.664003][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.664019][T13668] RIP: 0033:0x7f0fe4f8e969 [ 557.664032][T13668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.664046][T13668] RSP: 002b:00007f0fe5e79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 557.664061][T13668] RAX: ffffffffffffffda RBX: 00007f0fe51b5fa0 RCX: 00007f0fe4f8e969 [ 557.664071][T13668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 557.664079][T13668] RBP: 00007f0fe5e79090 R08: 0000000000000000 R09: 0000000000000000 [ 557.664088][T13668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.664097][T13668] R13: 0000000000000000 R14: 00007f0fe51b5fa0 R15: 00007ffd93af4e78 [ 557.664115][T13668] [ 558.632278][ T30] audit: type=1800 audit(6043077257.428:26): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1546" name="dbroot" dev="configfs" ino=47089 res=0 errno=0 [ 558.798665][T13679] netlink: 'syz.3.1546': attribute type 3 has an invalid length. [ 559.149400][T13700] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 559.564776][T13708] ovs_: entered promiscuous mode [ 559.601329][T13712] netlink: 'syz.1.1555': attribute type 3 has an invalid length. [ 559.711287][T13714] FAULT_INJECTION: forcing a failure. [ 559.711287][T13714] name failslab, interval 1, probability 0, space 0, times 0 [ 559.801670][T13714] CPU: 0 UID: 0 PID: 13714 Comm: syz.2.1556 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 559.801701][T13714] Tainted: [U]=USER [ 559.801706][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.801715][T13714] Call Trace: [ 559.801722][T13714] [ 559.801729][T13714] dump_stack_lvl+0x16c/0x1f0 [ 559.801760][T13714] should_fail_ex+0x512/0x640 [ 559.801785][T13714] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 559.801804][T13714] should_failslab+0xc2/0x120 [ 559.801824][T13714] __kmalloc_cache_noprof+0x6a/0x3e0 [ 559.801838][T13714] ? sctp_endpoint_new+0x11f/0xcd0 [ 559.801855][T13714] ? kasan_save_track+0x14/0x30 [ 559.801874][T13714] sctp_endpoint_new+0x11f/0xcd0 [ 559.801891][T13714] sctp_init_sock+0xe2d/0x1330 [ 559.801916][T13714] sctp_v6_init_sock+0x16/0x70 [ 559.801937][T13714] sctp_v6_create_accept_sk+0x4e0/0x730 [ 559.801958][T13714] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 559.801973][T13714] sctp_accept+0x66f/0x7f0 [ 559.801992][T13714] ? __pfx_sctp_accept+0x10/0x10 [ 559.802004][T13714] ? aa_sk_perm+0x2f4/0xb10 [ 559.802024][T13714] ? __pfx_autoremove_wake_function+0x10/0x10 [ 559.802046][T13714] ? __pfx_aa_sk_perm+0x10/0x10 [ 559.802067][T13714] inet_accept+0xc7/0x180 [ 559.802084][T13714] do_accept+0x33b/0x530 [ 559.802104][T13714] ? __pfx_do_accept+0x10/0x10 [ 559.802130][T13714] __sys_accept4+0x100/0x1b0 [ 559.802144][T13714] ? __pfx___sys_accept4+0x10/0x10 [ 559.802158][T13714] ? ksys_write+0x1b9/0x240 [ 559.802173][T13714] ? __pfx_ksys_write+0x10/0x10 [ 559.802185][T13714] ? rcu_is_watching+0x12/0xc0 [ 559.802204][T13714] __x64_sys_accept+0x74/0xb0 [ 559.802218][T13714] ? lockdep_hardirqs_on+0x7c/0x110 [ 559.802238][T13714] do_syscall_64+0xcd/0x230 [ 559.802261][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.802278][T13714] RIP: 0033:0x7fa4f398e969 [ 559.802291][T13714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.802306][T13714] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 559.802322][T13714] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 559.802332][T13714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 559.802340][T13714] RBP: 00007fa4f4819090 R08: 0000000000000000 R09: 0000000000000000 [ 559.802349][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.802358][T13714] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 559.802382][T13714] [ 560.061207][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.842566][T13772] FAULT_INJECTION: forcing a failure. [ 561.842566][T13772] name failslab, interval 1, probability 0, space 0, times 0 [ 561.926449][T13772] CPU: 0 UID: 0 PID: 13772 Comm: syz.0.1567 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 561.926476][T13772] Tainted: [U]=USER [ 561.926481][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.926490][T13772] Call Trace: [ 561.926497][T13772] [ 561.926503][T13772] dump_stack_lvl+0x16c/0x1f0 [ 561.926531][T13772] should_fail_ex+0x512/0x640 [ 561.926556][T13772] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 561.926576][T13772] should_failslab+0xc2/0x120 [ 561.926596][T13772] __kmalloc_cache_noprof+0x6a/0x3e0 [ 561.926611][T13772] ? sctp_auth_shkey_create+0x9e/0x210 [ 561.926632][T13772] sctp_auth_shkey_create+0x9e/0x210 [ 561.926648][T13772] sctp_endpoint_new+0x562/0xcd0 [ 561.926667][T13772] sctp_init_sock+0xe2d/0x1330 [ 561.926691][T13772] sctp_v6_init_sock+0x16/0x70 [ 561.926712][T13772] sctp_v6_create_accept_sk+0x4e0/0x730 [ 561.926733][T13772] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 561.926748][T13772] sctp_accept+0x66f/0x7f0 [ 561.926766][T13772] ? __pfx_sctp_accept+0x10/0x10 [ 561.926779][T13772] ? aa_sk_perm+0x2f4/0xb10 [ 561.926799][T13772] ? __pfx_autoremove_wake_function+0x10/0x10 [ 561.926820][T13772] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.926841][T13772] inet_accept+0xc7/0x180 [ 561.926858][T13772] do_accept+0x33b/0x530 [ 561.926879][T13772] ? __pfx_do_accept+0x10/0x10 [ 561.926905][T13772] __sys_accept4+0x100/0x1b0 [ 561.926920][T13772] ? __pfx___sys_accept4+0x10/0x10 [ 561.926934][T13772] ? ksys_write+0x1b9/0x240 [ 561.926950][T13772] ? __pfx_ksys_write+0x10/0x10 [ 561.926963][T13772] ? rcu_is_watching+0x12/0xc0 [ 561.926983][T13772] __x64_sys_accept+0x74/0xb0 [ 561.927004][T13772] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.927025][T13772] do_syscall_64+0xcd/0x230 [ 561.927051][T13772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.927067][T13772] RIP: 0033:0x7f5a86d8e969 [ 561.927080][T13772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.927095][T13772] RSP: 002b:00007f5a87b5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 561.927110][T13772] RAX: ffffffffffffffda RBX: 00007f5a86fb5fa0 RCX: 00007f5a86d8e969 [ 561.927120][T13772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 561.927129][T13772] RBP: 00007f5a87b5c090 R08: 0000000000000000 R09: 0000000000000000 [ 561.927138][T13772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.927147][T13772] R13: 0000000000000000 R14: 00007f5a86fb5fa0 R15: 00007ffde0aacd78 [ 561.927165][T13772] [ 562.180111][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.187758][T13775] Falling back ldisc for ttyS2. [ 562.367606][T13781] Invalid ELF header magic: != ELF [ 563.239846][T13786] FAULT_INJECTION: forcing a failure. [ 563.239846][T13786] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.280827][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.3.1570 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 563.280860][T13786] Tainted: [U]=USER [ 563.280866][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.280875][T13786] Call Trace: [ 563.280881][T13786] [ 563.280887][T13786] dump_stack_lvl+0x16c/0x1f0 [ 563.280916][T13786] should_fail_ex+0x512/0x640 [ 563.280942][T13786] get_futex_key+0x49e/0x1000 [ 563.280964][T13786] ? __pfx_get_futex_key+0x10/0x10 [ 563.280982][T13786] ? stack_trace_save+0x8e/0xc0 [ 563.281001][T13786] ? __pfx_stack_trace_save+0x10/0x10 [ 563.281017][T13786] ? stack_depot_save_flags+0x28/0xa50 [ 563.281043][T13786] ? __lock_acquire+0xaa4/0x1ba0 [ 563.281067][T13786] futex_wait_setup+0x78/0x290 [ 563.281086][T13786] ? kasan_save_free_info+0x3b/0x60 [ 563.281109][T13786] ? __x64_sys_openat+0x174/0x210 [ 563.281139][T13786] __futex_wait+0x266/0x3c0 [ 563.281159][T13786] ? __pfx___futex_wait+0x10/0x10 [ 563.281184][T13786] ? __pfx_futex_wake_mark+0x10/0x10 [ 563.281215][T13786] futex_wait+0xe8/0x380 [ 563.281235][T13786] ? __pfx_futex_wait+0x10/0x10 [ 563.281257][T13786] ? kmem_cache_free+0x2d4/0x4d0 [ 563.281272][T13786] ? fd_install+0x225/0x750 [ 563.281284][T13786] ? putname+0x154/0x1a0 [ 563.281304][T13786] do_futex+0x229/0x350 [ 563.281320][T13786] ? __pfx_do_futex+0x10/0x10 [ 563.281341][T13786] __x64_sys_futex+0x1e0/0x4c0 [ 563.281358][T13786] ? __x64_sys_openat+0x174/0x210 [ 563.281377][T13786] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.281394][T13786] ? rcu_is_watching+0x12/0xc0 [ 563.281413][T13786] do_syscall_64+0xcd/0x230 [ 563.281439][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.281454][T13786] RIP: 0033:0x7fee2db8e969 [ 563.281468][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.281484][T13786] RSP: 002b:00007fee2b9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.281499][T13786] RAX: ffffffffffffffda RBX: 00007fee2ddb6088 RCX: 00007fee2db8e969 [ 563.281510][T13786] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee2ddb6088 [ 563.281521][T13786] RBP: 00007fee2ddb6080 R08: 0000000000000000 R09: 0000000000000000 [ 563.281532][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee2ddb608c [ 563.281543][T13786] R13: 0000000000000000 R14: 00007ffc740183c0 R15: 00007ffc740184a8 [ 563.281563][T13786] [ 563.534319][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.541712][T13786] binder: 13784:13786 ioctl 400c620e 2000000001c0 returned -22 [ 564.429572][T13809] ubi0: attaching mtd0 [ 564.456315][T13809] ubi0: scanning is finished [ 564.460971][T13809] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 564.620647][T13814] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 564.956535][T13809] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 565.548507][T13823] FAULT_INJECTION: forcing a failure. [ 565.548507][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 565.613041][T13823] CPU: 0 UID: 0 PID: 13823 Comm: syz.2.1581 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 565.613070][T13823] Tainted: [U]=USER [ 565.613075][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.613084][T13823] Call Trace: [ 565.613091][T13823] [ 565.613097][T13823] dump_stack_lvl+0x16c/0x1f0 [ 565.613127][T13823] should_fail_ex+0x512/0x640 [ 565.613151][T13823] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 565.613170][T13823] should_failslab+0xc2/0x120 [ 565.613189][T13823] __kmalloc_cache_noprof+0x6a/0x3e0 [ 565.613204][T13823] ? sctp_add_bind_addr+0xae/0x3f0 [ 565.613229][T13823] sctp_add_bind_addr+0xae/0x3f0 [ 565.613251][T13823] sctp_bind_addr_dup+0xd4/0x130 [ 565.613272][T13823] sctp_sock_migrate+0x47a/0x12c0 [ 565.613289][T13823] ? sctp_v6_create_accept_sk+0x4fd/0x730 [ 565.613309][T13823] sctp_accept+0x692/0x7f0 [ 565.613327][T13823] ? __pfx_sctp_accept+0x10/0x10 [ 565.613340][T13823] ? aa_sk_perm+0x2f4/0xb10 [ 565.613359][T13823] ? __pfx_autoremove_wake_function+0x10/0x10 [ 565.613379][T13823] ? __pfx_aa_sk_perm+0x10/0x10 [ 565.613400][T13823] inet_accept+0xc7/0x180 [ 565.613417][T13823] do_accept+0x33b/0x530 [ 565.613437][T13823] ? __pfx_do_accept+0x10/0x10 [ 565.613464][T13823] __sys_accept4+0x100/0x1b0 [ 565.613479][T13823] ? __pfx___sys_accept4+0x10/0x10 [ 565.613492][T13823] ? ksys_write+0x1b9/0x240 [ 565.613507][T13823] ? __pfx_ksys_write+0x10/0x10 [ 565.613519][T13823] ? rcu_is_watching+0x12/0xc0 [ 565.613538][T13823] __x64_sys_accept+0x74/0xb0 [ 565.613551][T13823] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.613573][T13823] do_syscall_64+0xcd/0x230 [ 565.613596][T13823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.613612][T13823] RIP: 0033:0x7fa4f398e969 [ 565.613624][T13823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.613638][T13823] RSP: 002b:00007fa4f4819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 565.613653][T13823] RAX: ffffffffffffffda RBX: 00007fa4f3bb5fa0 RCX: 00007fa4f398e969 [ 565.613663][T13823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 565.613672][T13823] RBP: 00007fa4f4819090 R08: 0000000000000000 R09: 0000000000000000 [ 565.613680][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.613689][T13823] R13: 0000000000000000 R14: 00007fa4f3bb5fa0 R15: 00007ffc84731028 [ 565.613708][T13823] [ 565.878528][T13824] Invalid ELF header magic: != ELF [ 568.155045][T13872] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 568.167200][T13873] FAULT_INJECTION: forcing a failure. [ 568.167200][T13873] name failslab, interval 1, probability 0, space 0, times 0 [ 568.227116][T13873] CPU: 0 UID: 0 PID: 13873 Comm: syz.2.1593 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 568.227147][T13873] Tainted: [U]=USER [ 568.227153][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.227164][T13873] Call Trace: [ 568.227171][T13873] [ 568.227178][T13873] dump_stack_lvl+0x16c/0x1f0 [ 568.227212][T13873] should_fail_ex+0x512/0x640 [ 568.227238][T13873] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 568.227259][T13873] should_failslab+0xc2/0x120 [ 568.227279][T13873] __kmalloc_cache_noprof+0x6a/0x3e0 [ 568.227295][T13873] ? fib_notifier_ops_register+0x123/0x270 [ 568.227316][T13873] ? fib_net_init+0x1a4/0x3f0 [ 568.227340][T13873] fib_net_init+0x1a4/0x3f0 [ 568.227359][T13873] ? __pfx___register_sysctl_table+0x10/0x10 [ 568.227380][T13873] ? __pfx_fib_net_init+0x10/0x10 [ 568.227397][T13873] ? lockdep_init_map_type+0x5c/0x280 [ 568.227421][T13873] ? do_init_timer+0xc9/0x110 [ 568.227439][T13873] ? devinet_init_net+0x5c2/0x910 [ 568.227462][T13873] ? __pfx_fib_net_init+0x10/0x10 [ 568.227478][T13873] ops_init+0x1e2/0x5f0 [ 568.227500][T13873] setup_net+0x21e/0x850 [ 568.227520][T13873] ? __pfx_setup_net+0x10/0x10 [ 568.227538][T13873] ? lockdep_init_map_type+0x5c/0x280 [ 568.227557][T13873] ? __pfx_down_read_killable+0x10/0x10 [ 568.227575][T13873] ? debug_mutex_init+0x37/0x70 [ 568.227594][T13873] copy_net_ns+0x2a6/0x5f0 [ 568.227618][T13873] create_new_namespaces+0x3ea/0xad0 [ 568.227642][T13873] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 568.227660][T13873] ksys_unshare+0x45b/0xa40 [ 568.227690][T13873] ? __pfx_ksys_unshare+0x10/0x10 [ 568.227711][T13873] ? xfd_validate_state+0x5d/0x180 [ 568.227731][T13873] ? rcu_is_watching+0x12/0xc0 [ 568.227760][T13873] __x64_sys_unshare+0x31/0x40 [ 568.227784][T13873] do_syscall_64+0xcd/0x230 [ 568.227811][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.227828][T13873] RIP: 0033:0x7fa4f398e969 [ 568.227841][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.227857][T13873] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 568.227873][T13873] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 568.227885][T13873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 568.227895][T13873] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 568.227906][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.227916][T13873] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 568.227937][T13873] [ 568.493871][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.418664][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.425967][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.599828][T13928] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 571.188581][T13942] FAULT_INJECTION: forcing a failure. [ 571.188581][T13942] name fail_futex, interval 1, probability 0, space 0, times 0 [ 571.328063][T13942] CPU: 0 UID: 0 PID: 13942 Comm: syz.0.1607 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 571.328093][T13942] Tainted: [U]=USER [ 571.328099][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.328108][T13942] Call Trace: [ 571.328120][T13942] [ 571.328127][T13942] dump_stack_lvl+0x16c/0x1f0 [ 571.328157][T13942] should_fail_ex+0x512/0x640 [ 571.328182][T13942] get_futex_key+0x49e/0x1000 [ 571.328203][T13942] ? __pfx_get_futex_key+0x10/0x10 [ 571.328226][T13942] futex_wake+0xe7/0x4e0 [ 571.328248][T13942] ? __pfx_futex_wake+0x10/0x10 [ 571.328271][T13942] ? kmem_cache_free+0x2d4/0x4d0 [ 571.328289][T13942] ? fd_install+0x225/0x750 [ 571.328302][T13942] ? putname+0x154/0x1a0 [ 571.328321][T13942] do_futex+0x1e3/0x350 [ 571.328338][T13942] ? __pfx_do_futex+0x10/0x10 [ 571.328358][T13942] __x64_sys_futex+0x1e0/0x4c0 [ 571.328374][T13942] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 571.328389][T13942] ? __x64_sys_openat+0x174/0x210 [ 571.328409][T13942] ? __pfx___x64_sys_futex+0x10/0x10 [ 571.328425][T13942] ? rcu_is_watching+0x12/0xc0 [ 571.328445][T13942] do_syscall_64+0xcd/0x230 [ 571.328467][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.328483][T13942] RIP: 0033:0x7f5a86d8e969 [ 571.328495][T13942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.328510][T13942] RSP: 002b:00007f5a87b5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 571.328524][T13942] RAX: ffffffffffffffda RBX: 00007f5a86fb5fa8 RCX: 00007f5a86d8e969 [ 571.328533][T13942] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a86fb5fac [ 571.328542][T13942] RBP: 00007f5a86fb5fa0 R08: 00007f5a87b5d000 R09: 0000000000000000 [ 571.328551][T13942] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f5a86fb5fac [ 571.328560][T13942] R13: 0000000000000000 R14: 00007ffde0aacc90 R15: 00007ffde0aacd78 [ 571.328579][T13942] [ 571.524840][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.667137][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'. [ 573.746393][T13981] bridge_slave_1: left allmulticast mode [ 573.792628][T13981] bridge_slave_1: left promiscuous mode [ 573.850742][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.000261][T13981] bridge_slave_0: left allmulticast mode [ 574.028303][T13981] bridge_slave_0: left promiscuous mode [ 574.055745][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.078818][T13989] FAULT_INJECTION: forcing a failure. [ 574.078818][T13989] name failslab, interval 1, probability 0, space 0, times 0 [ 574.135859][T13989] CPU: 0 UID: 0 PID: 13989 Comm: syz.3.1621 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 574.135893][T13989] Tainted: [U]=USER [ 574.135898][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.135909][T13989] Call Trace: [ 574.135915][T13989] [ 574.135922][T13989] dump_stack_lvl+0x16c/0x1f0 [ 574.135955][T13989] should_fail_ex+0x512/0x640 [ 574.135988][T13989] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 574.136014][T13989] should_failslab+0xc2/0x120 [ 574.136037][T13989] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 574.136059][T13989] ? apply_subsystem_event_filter+0x3df/0x1450 [ 574.136082][T13989] kstrdup+0x53/0x100 [ 574.136103][T13989] apply_subsystem_event_filter+0x3df/0x1450 [ 574.136126][T13989] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 574.136149][T13989] ? _copy_from_user+0x59/0xd0 [ 574.136166][T13989] subsystem_filter_write+0x95/0x120 [ 574.136185][T13989] vfs_write+0x25c/0x1180 [ 574.136199][T13989] ? __pfx_subsystem_filter_write+0x10/0x10 [ 574.136218][T13989] ? __pfx___mutex_lock+0x10/0x10 [ 574.136240][T13989] ? __pfx_vfs_write+0x10/0x10 [ 574.136260][T13989] ? __fget_files+0x20e/0x3c0 [ 574.136280][T13989] ksys_write+0x12a/0x240 [ 574.136294][T13989] ? __pfx_ksys_write+0x10/0x10 [ 574.136307][T13989] ? rcu_is_watching+0x12/0xc0 [ 574.136327][T13989] do_syscall_64+0xcd/0x230 [ 574.136351][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.136366][T13989] RIP: 0033:0x7fee2db8e969 [ 574.136379][T13989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.136393][T13989] RSP: 002b:00007fee2b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.136409][T13989] RAX: ffffffffffffffda RBX: 00007fee2ddb6080 RCX: 00007fee2db8e969 [ 574.136418][T13989] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 574.136427][T13989] RBP: 00007fee2dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 574.136435][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.136444][T13989] R13: 0000000000000000 R14: 00007fee2ddb6080 R15: 00007ffc740184a8 [ 574.136465][T13989] [ 574.361424][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.225173][T13983] [ 575.227621][T13983] ====================================================== [ 575.234723][T13983] WARNING: possible circular locking dependency detected [ 575.241724][T13983] 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 Tainted: G U [ 575.250376][T13983] ------------------------------------------------------ [ 575.257375][T13983] syz.2.1620/13983 is trying to acquire lock: [ 575.263416][T13983] ffff888025b64058 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 575.273089][T13983] [ 575.273089][T13983] but task is already holding lock: [ 575.280456][T13983] ffff888025b63b28 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 575.291692][T13983] [ 575.291692][T13983] which lock already depends on the new lock. [ 575.291692][T13983] [ 575.302085][T13983] [ 575.302085][T13983] the existing dependency chain (in reverse order) is: [ 575.311084][T13983] [ 575.311084][T13983] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 575.319682][T13983] blk_alloc_queue+0x619/0x760 [ 575.324969][T13983] blk_mq_alloc_queue+0x179/0x290 [ 575.330507][T13983] __blk_mq_alloc_disk+0x29/0x120 [ 575.336053][T13983] nbd_dev_add+0x49d/0xbb0 [ 575.340981][T13983] nbd_init+0x181/0x320 [ 575.345652][T13983] do_one_initcall+0x120/0x6e0 [ 575.350950][T13983] kernel_init_freeable+0x5c2/0x900 [ 575.356667][T13983] kernel_init+0x1c/0x2b0 [ 575.361504][T13983] ret_from_fork+0x48/0x80 [ 575.366423][T13983] ret_from_fork_asm+0x1a/0x30 [ 575.371701][T13983] [ 575.371701][T13983] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 575.378896][T13983] fs_reclaim_acquire+0x102/0x150 [ 575.384437][T13983] kmem_cache_alloc_noprof+0x53/0x3b0 [ 575.390317][T13983] __kernfs_new_node+0xd2/0x8a0 [ 575.395692][T13983] kernfs_new_node+0x13c/0x1e0 [ 575.400973][T13983] kernfs_create_dir_ns+0x4c/0x1a0 [ 575.406590][T13983] sysfs_create_dir_ns+0x13a/0x2b0 [ 575.412218][T13983] kobject_add_internal+0x2c4/0x9b0 [ 575.417924][T13983] kobject_add+0x16e/0x240 [ 575.422846][T13983] elv_register_queue+0xd3/0x2a0 [ 575.428295][T13983] blk_register_queue+0x3c4/0x560 [ 575.433840][T13983] add_disk_fwnode+0x911/0x13a0 [ 575.439289][T13983] nbd_dev_add+0x78e/0xbb0 [ 575.444217][T13983] nbd_init+0x181/0x320 [ 575.448883][T13983] do_one_initcall+0x120/0x6e0 [ 575.454165][T13983] kernel_init_freeable+0x5c2/0x900 [ 575.459879][T13983] kernel_init+0x1c/0x2b0 [ 575.464714][T13983] ret_from_fork+0x48/0x80 [ 575.469639][T13983] ret_from_fork_asm+0x1a/0x30 [ 575.474913][T13983] [ 575.474913][T13983] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 575.482809][T13983] __lock_acquire+0x1173/0x1ba0 [ 575.488181][T13983] lock_acquire+0x179/0x350 [ 575.493196][T13983] __mutex_lock+0x199/0xb90 [ 575.498222][T13983] elv_iosched_store+0x201/0x5f0 [ 575.503668][T13983] queue_attr_store+0x273/0x310 [ 575.509025][T13983] sysfs_kf_write+0xef/0x150 [ 575.514132][T13983] kernfs_fop_write_iter+0x351/0x510 [ 575.519930][T13983] iter_file_splice_write+0x91f/0x1150 [ 575.525996][T13983] direct_splice_actor+0x18f/0x6c0 [ 575.531623][T13983] splice_direct_to_actor+0x342/0xa30 [ 575.537505][T13983] do_splice_direct+0x174/0x240 [ 575.542873][T13983] do_sendfile+0xafd/0xe50 [ 575.547795][T13983] __x64_sys_sendfile64+0x1d8/0x220 [ 575.553499][T13983] do_syscall_64+0xcd/0x230 [ 575.558517][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.565617][T13983] [ 575.565617][T13983] other info that might help us debug this: [ 575.565617][T13983] [ 575.575829][T13983] Chain exists of: [ 575.575829][T13983] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 575.575829][T13983] [ 575.589550][T13983] Possible unsafe locking scenario: [ 575.589550][T13983] [ 575.596990][T13983] CPU0 CPU1 [ 575.602346][T13983] ---- ---- [ 575.607721][T13983] lock(&q->q_usage_counter(io)#55); [ 575.613188][T13983] lock(fs_reclaim); [ 575.619681][T13983] lock(&q->q_usage_counter(io)#55); [ 575.627564][T13983] lock(&q->elevator_lock); [ 575.632139][T13983] [ 575.632139][T13983] *** DEADLOCK *** [ 575.632139][T13983] [ 575.640351][T13983] 5 locks held by syz.2.1620/13983: [ 575.645528][T13983] #0: ffff8880356be420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 575.655537][T13983] #1: ffff88805a84a888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 575.665303][T13983] #2: ffff8881433634b8 (kn->active#238){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 575.675395][T13983] #3: ffff888025b63b28 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 575.687049][T13983] #4: ffff888025b63b60 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 575.698933][T13983] [ 575.698933][T13983] stack backtrace: [ 575.704945][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.2.1620 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 575.704970][T13983] Tainted: [U]=USER [ 575.704976][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.704985][T13983] Call Trace: [ 575.704994][T13983] [ 575.705001][T13983] dump_stack_lvl+0x116/0x1f0 [ 575.705031][T13983] print_circular_bug+0x275/0x350 [ 575.705054][T13983] check_noncircular+0x14c/0x170 [ 575.705073][T13983] __lock_acquire+0x1173/0x1ba0 [ 575.705094][T13983] lock_acquire+0x179/0x350 [ 575.705111][T13983] ? elv_iosched_store+0x201/0x5f0 [ 575.705134][T13983] ? __pfx___might_resched+0x10/0x10 [ 575.705152][T13983] ? do_raw_spin_lock+0x12c/0x2b0 [ 575.705173][T13983] __mutex_lock+0x199/0xb90 [ 575.705196][T13983] ? elv_iosched_store+0x201/0x5f0 [ 575.705214][T13983] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.705232][T13983] ? elv_iosched_store+0x201/0x5f0 [ 575.705249][T13983] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.705270][T13983] ? __pfx___mutex_lock+0x10/0x10 [ 575.705292][T13983] ? __pfx_autoremove_wake_function+0x10/0x10 [ 575.705312][T13983] ? elv_iosched_store+0x201/0x5f0 [ 575.705330][T13983] elv_iosched_store+0x201/0x5f0 [ 575.705348][T13983] ? __x64_sys_sendfile64+0x1d8/0x220 [ 575.705367][T13983] ? __pfx_elv_iosched_store+0x10/0x10 [ 575.705386][T13983] ? __mutex_trylock_common+0xe9/0x250 [ 575.705405][T13983] ? __pfx_elv_iosched_store+0x10/0x10 [ 575.705423][T13983] queue_attr_store+0x273/0x310 [ 575.705438][T13983] ? __pfx_queue_attr_store+0x10/0x10 [ 575.705456][T13983] ? find_held_lock+0x2b/0x80 [ 575.705470][T13983] ? sysfs_file_kobj+0xe4/0x290 [ 575.705492][T13983] ? __pfx_queue_attr_store+0x10/0x10 [ 575.705505][T13983] sysfs_kf_write+0xef/0x150 [ 575.705525][T13983] kernfs_fop_write_iter+0x351/0x510 [ 575.705544][T13983] ? __pfx_sysfs_kf_write+0x10/0x10 [ 575.705564][T13983] iter_file_splice_write+0x91f/0x1150 [ 575.705593][T13983] ? __pfx_iter_file_splice_write+0x10/0x10 [ 575.705616][T13983] ? __pfx_copy_splice_read+0x10/0x10 [ 575.705641][T13983] ? __pfx_iter_file_splice_write+0x10/0x10 [ 575.705662][T13983] direct_splice_actor+0x18f/0x6c0 [ 575.705683][T13983] splice_direct_to_actor+0x342/0xa30 [ 575.705704][T13983] ? __pfx_direct_splice_actor+0x10/0x10 [ 575.705726][T13983] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 575.705748][T13983] do_splice_direct+0x174/0x240 [ 575.705774][T13983] ? __pfx_do_splice_direct+0x10/0x10 [ 575.705795][T13983] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 575.705816][T13983] ? rw_verify_area+0xcf/0x680 [ 575.705838][T13983] do_sendfile+0xafd/0xe50 [ 575.705852][T13983] ? __pfx_do_sendfile+0x10/0x10 [ 575.705866][T13983] ? __x64_sys_futex+0x1e0/0x4c0 [ 575.705882][T13983] ? __x64_sys_futex+0x1e9/0x4c0 [ 575.705898][T13983] __x64_sys_sendfile64+0x1d8/0x220 [ 575.705915][T13983] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 575.705932][T13983] ? rcu_is_watching+0x12/0xc0 [ 575.705949][T13983] do_syscall_64+0xcd/0x230 [ 575.705972][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.705989][T13983] RIP: 0033:0x7fa4f398e969 [ 575.706003][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.706017][T13983] RSP: 002b:00007fa4f47f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 575.706032][T13983] RAX: ffffffffffffffda RBX: 00007fa4f3bb6080 RCX: 00007fa4f398e969 [ 575.706042][T13983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 575.706051][T13983] RBP: 00007fa4f3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 575.706060][T13983] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 575.706069][T13983] R13: 0000000000000000 R14: 00007fa4f3bb6080 R15: 00007ffc84731028 [ 575.706082][T13983] [ 576.073697][ C0] vkms_vblank_simulate: vblank timer overrun