last executing test programs: 3m9.859420934s ago: executing program 3 (id=208): r0 = socket(0x2, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) socket(0x10, 0x2, 0xc) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r3}, 0x18) r4 = syz_clone(0x11, 0x0, 0xf4, 0x0, 0x0, 0x0) r5 = getpgid(0x0) r6 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0x200, @inferred=r6, 0x2, 0x1, 0x100000000}, &(0x7f0000000140)=0x1, 0x8000000000000000, 0x6) kcmp$auto(r5, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 3m9.419588873s ago: executing program 3 (id=213): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0xe983, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_PPPIOCGUNIT(r0, 0x80047456, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r2 = io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) readv$auto(r1, &(0x7f00000002c0)={0x0, 0x7}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0}, 0x2) close_range$auto(0x2, r1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x4821c0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/029/001\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) faccessat2$auto(r2, &(0x7f0000001080)=':,\x00', 0x0, 0x7) read$auto(r3, 0x0, 0x20) mmap$auto(0x4, 0x20009, 0xe2, 0xeb1, 0x405, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x2d2802, 0x48) faccessat$auto(r4, 0x0, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r2, 0x7ffffffffffffffc) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/fail-nth\x00', 0x2a0883, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x1, 0x5, 0x12) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xc080, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x3ff) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000001040), 0x4000, 0x0) 3m8.832847511s ago: executing program 3 (id=216): r0 = getpid() prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x2, 0x1, r0, 0x2, 0x4) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33a218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 3m8.28078844s ago: executing program 3 (id=218): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xc811}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xffffffffffffff31, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000031aaa3e3c6baa2762946077e1ccd2a63ef6a822d4356074989e3a5c66e7794f098822776184f59bf4e7087bf7259fd5dc5303d9d38bb4f38a416c5084b98f691b320e950e870a6b65f13b328258c1754700afb16b486e385e63f0ef29e506c5a75c0", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xf) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = socket(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r6, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0x2, 0x9}, 0x6f4) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r1, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r7, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 3m7.185227973s ago: executing program 3 (id=224): unshare$auto(0x40000080) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r3], 0x1c}}, 0x4008000) read$auto(0x3, 0x0, 0x7) 3m5.662843126s ago: executing program 3 (id=230): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0x14, 0x1272, 0x1000) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x9, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000]}, 0x1fe, 0x82) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x8010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x801) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/4096, 0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3d7}, 0x7}, 0x803, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000000006, 0xeb1, r2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) read$auto(r2, 0x0, 0x8) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000001340)='\xbb\xbb\xbb\xbb\xbb\xbb', 0xe, 0xff) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000280)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) 2m50.51790251s ago: executing program 32 (id=230): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0x14, 0x1272, 0x1000) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x9, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000]}, 0x1fe, 0x82) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x8010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x801) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/4096, 0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3d7}, 0x7}, 0x803, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000000006, 0xeb1, r2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) read$auto(r2, 0x0, 0x8) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000001340)='\xbb\xbb\xbb\xbb\xbb\xbb', 0xe, 0xff) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000280)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) 6.136443201s ago: executing program 1 (id=994): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x200901, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x400800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x10001, 0x830) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x800) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000140)='0[.[\x00', 0xcd04) sysfs$auto(0x2, 0x101000000000007, 0x0) bpf$auto(0x2000002, &(0x7f0000000780)=@bpf_attr_0={0x0, 0x10200, 0x2, 0x6b, 0x2, r6, 0xb7, "bfb395b9fa9066317c944c15b23d1293", r5, 0xffffffffffffffff, 0x5, 0x7, 0x9, 0x7ffff80000000000, r6, r6}, 0xa3) 4.896685589s ago: executing program 4 (id=998): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) madvise$auto(0x1, 0x9, 0xa) r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x8000000000000001, 0x20009, 0xe3, 0x100000eb1, r0, 0x100000000008000) clone$auto(0x6, 0x1, 0x0, 0x0, 0xa2) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000140), 0x107}, 0x8) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r1) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd538f11aedf2504000009040005000800040009000000"], 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) fcntl$auto(0x3, 0x400, 0x2) 4.418559023s ago: executing program 1 (id=999): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 4.3623187s ago: executing program 4 (id=1000): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x1, 0x2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x5, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x8, 0xdf, 0xeb3, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r1, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), r1) sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ebeefe9f", @ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d000800030003000000060014007d2900000400140005001000030000001400020076657468305f766972745f7769666900080003000600000008000e0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_DETACH_FILTER(r0, 0x101, 0x1b, &(0x7f0000000240)='veth0_virt_wifi\x00', 0x8006) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.4950556s ago: executing program 0 (id=1002): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000d8b0000000012000100898771f1c19f17790485908286dd0000040002"], 0x3c}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) 3.442760251s ago: executing program 1 (id=1003): socket(0x11, 0x80003, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x4a040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) select$auto(0xc, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) 3.292627785s ago: executing program 0 (id=1004): socket(0x11, 0x80003, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x4a040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) select$auto(0xc, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) (fail_nth: 1) 2.972695216s ago: executing program 0 (id=1005): socket(0x27, 0x4, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/pci/00/02.0\x00', 0x2e2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) select$auto(0xc, 0x0, 0x0, 0x0, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x301800, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001100), 0x400200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x129, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5a88314c8e109829}, 0x14) r4 = gettid() process_vm_readv$auto(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffff8}, 0x6, &(0x7f0000000100)={0x0, 0x100000000000002}, 0x3, 0xfffffffffffffffd) clone$auto(0x6, 0x2, &(0x7f0000001180)=0x6, &(0x7f00000011c0)=0x1, 0x5) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) socket(0x2, 0x3, 0x6) socket(0xa, 0x5, 0x0) getpid() r5 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80000) wait4$auto(r4, 0x0, 0x9, 0x0) getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r5, 0x0, 0x15) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_seg6(0x0, r5) 2.823591725s ago: executing program 2 (id=1006): ioctl$auto_SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001780)="566d5678e5fbd485a0db87806dcd3d7d37e425ef0908dc9bfb4af762789677756464cf4ea18a744c11839ee5999b10a7739b7161a3091f2f645c130f887bcd73aeb0e2662bb93071a080b9c7c20b0cfebaec846682299c8003989f49") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x6) r0 = socket(0x2, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) kexec_load$auto(0x1, 0x100000001, 0x0, 0x3) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x891b, 0x24) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x12}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x14a8, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x139e, 0x2d, 0x0, 0x1, [@generic="e2046aa02470bc99fbc64d6e09cc03137b9485974d125c75e523e96974efdd021d65e600064be77550588427867fa463f26777eb165b3638c3de4c25d8fe2dc700f4d6081c57ea7d06b38f939be71fdbd8f689d982161c1fd1e2702e9f9a55638ddbf8109f43f5b185bc33611a1c598914d7aea47a37ab33215fa6420a790791a9e20b7f84762a1393276d0c2bb1805dd6d8efb8f14ad32d9f5a944cf5c5ac03c89feecf230c203162a008995aaa78ccf293", @nested={0x6c, 0x25, 0x0, 0x1, [@typed={0x57, 0x4a, 0x0, 0x0, @binary="43ca747e4ab1df4ff12f2c8b8b7befd5d62b52805f1023ef0193153c0e04c82ccfd2294f17417928e01a6353f4c920763e38d630c18d1c293bfa8f8538e68b3eec79765750684fbdbb77d011924fdc208edf45"}, @nested={0x4, 0x1b}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x80000001}]}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x42}, @generic="7952453deee7dbd56dd2a5675bb66dee07a692b9c8902a9436247be14d00730525b9343ee9317135a15e93997dd856c164749d86050ea80b9dfa9bdd6b9a3b3480d6936ae5e90ef1b85190e92562bd2f1a30819ef9333e083f285f766b1c5aaeae", @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @nested={0x146, 0x24, 0x0, 0x1, [@typed={0xc, 0x64, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x4}, @generic="a79b3ba501a7d1bd6171a4e7587f6a51f12fea8cd54d80fe844e6969bbbde399b5d517785eed842d1ab9a0683c0fb63cf611b6335fad5a8e8735aa2c9c90a33c526cf339f69d8e8d57f28019b7af908bb696cd8f5a0a92dd71ed106345658ccedac28635ed31e2b8c950c52b5dcb0ac4f8a0c897767bac75d4667487f2aa89ab9bb5d548cd6bda2272e6a3b054ee2b74925c0e2a00f61b004e6cff3622545bae8af3bf6b250dd722725a530258857ebd5c9709d381fdf1ad1ba9cc37770738d566", @generic="e252c33269ae0f42c4d396d00a1d0f87c3567e6be4d14ff69c914ef9b173b51c61dfc5241618a3f6425534d0aa75d594089389fccbb3", @generic="687df3de", @typed={0x8, 0xf7, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0xc2}, @generic="cddf0fa83e6bfdd1f9f29d7d01e74a883c9c6f94e18183a062ab061688f56c35dd1c1ca35ee526"]}, @generic="dfb26cf5dff5a7b03b9087c023db92b65c6ea018105e55f469b999b08f351d25c58b8cbfc69ff24643e83d6eaaad497216d3d94f2fcecaf006769e400ffc809217cae4c0e1d5c969028ffda057a2fd475c23e2a1baa2a8e661af759a989d71ce94d8f7b23e7e29c8410afe183886edc29d09a679d3fb1c1cd25c303c76bf981c5ed740e65db04204d0a639711cd619c61b24bdf15cd77e0d84777224b9de9b82a6d4b26faf4978d5d31173", @generic="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"]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x40}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xcf, 0x19, 0x0, 0x1, [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x7}, @generic="c2fd80b6b8f2e8ba6684ddea3a426d384f5be133e3d9de29a31786a97eeb22d4af1105926bc96e2352746862b9aefb32eb0543c9ffc01c16b3cd36086c731135128a3151b1b28dbe2215128d8f6f24ec710d5910dfed7c748930aa156f888c13ac9e8f5d0e896d0a3b02972710a03b144883c8afd8a6932adea9bba718e898ddb40f38a358dda56b0142f6967d5a0e78987d58105e94f582b0ba7f55db158d968dbcf3954e9bf36bb7742734cb33371bc1f5e9df205a9738434dfb355961d3"]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x4004801}, 0x20004040) 2.458089095s ago: executing program 1 (id=1007): socket(0xa, 0x2, 0x0) socket(0x2c, 0x3, 0x0) accept$auto(0x3, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8000, 0x0) 2.261810997s ago: executing program 1 (id=1008): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x200901, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x400800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x10001, 0x830) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x800) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x1, 0x0, 0x5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000140)='0[.[\x00', 0xcd04) sysfs$auto(0x2, 0x101000000000007, 0x0) bpf$auto(0x2000002, &(0x7f0000000780)=@bpf_attr_0={0x0, 0x10200, 0x2, 0x6b, 0x2, r6, 0xb7, "bfb395b9fa9066317c944c15b23d1293", r5, 0xffffffffffffffff, 0x5, 0x7, 0x9, 0x7ffff80000000000, r6, r6}, 0xa3) 2.209524839s ago: executing program 4 (id=1009): socket(0xa, 0x2, 0x0) socket(0x2c, 0x3, 0x0) accept$auto(0x3, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8000, 0x0) (fail_nth: 1) 2.019668273s ago: executing program 0 (id=1010): socket(0xa, 0x2, 0x0) socket(0x6, 0x3, 0x0) accept$auto(0x3, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') socket(0x18, 0xa, 0x1) r1 = socket(0x11, 0x2, 0x6) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8000, 0x0) 1.790655549s ago: executing program 4 (id=1011): r0 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000040)=0xe) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8c4dbb98f47e6cf}, 0xc, &(0x7f00000003c0)={&(0x7f0000003000)={0x12d8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x10000}, @NL80211_ATTR_TID_CONFIG={0x1130, 0x11d, 0x0, 0x1, [{0x10d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10bc, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, "e8e4d9c10e69fc2acbec97a2f1"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x65, 0x5, "8fdac810ab8be78c519d97bf07442107413ef521b40d85db0b16f4550e6e977374ca99ec4e24d342801a6723aa1e999901af4a5a27aa5fdb6132cf0a3c212a2b362fbff406ca0e0e5ce63a73972032ac381517b260d692a11524c032809fa635e5"}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "282fd7623cfac913b3411003ed74675d23b7a348f71a7a4def6e3b"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9}, @NL80211_TXRATE_VHT={0x1004, 0x3, "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"}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, "8bbb4580b7bc7b42c1e1955a288e1738e2ec9344c30e"}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x69}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x40}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x45}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xb2, 0x125, "515578bc2d7c39b19713929f389966f92f2e2c0c8677008995629f936a20a16670aab0e5eb145d2b848bbb2918bbd2b3c838d11925637ce0316fefe0eba64463ee0adfacd78b6dcc555ef43daa3f446c6275574ccc7f2ed38d7d096dcd3f22b1bedacc0cda17cc7c73164b6c057553f26e3ad74e4ca66c579e4ce76fd3770af588c20a1b1d499ba49bc8566daf12db3f03b005168a3e9eebd810320b9f59d22fdb9bc2cbb0355a59ca2aa6663025"}, @NL80211_ATTR_S1G_CAPABILITY={0xcd, 0x128, "407e88183cf5509ef5e4a39280a2aa3c4f426ecc9466331c75d7006d390e02f31c67857e832b92fbbf0ea40fb1df8552b067c9268bcac4ff41a15f09a68086777ef0422fc35e754d41b7abc3579b68dec9579d5fc82d19b7bf297c374414fd1fb9a9b98a84a8adff8663dbf3be622bd3132e1253abdecf14bbe7d5eed02f0384458ee3629a86ceaa6afdbef79dd2e523e7ed514becf97d1c943a0712eeffb7931b0d6930a86c6a5a6af46d0898d2911b9c1895966c4de4d037304cc28b068f931a2187f796d4c8490e"}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sethostname$auto(0xfffffffffffffffe, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="250025bd00000045cddf6026e6b4d437e6aa9c6694106e02092e5620f354c66ff4d22da1b315060a1b8b607e12c9a9e969f82af562fc6a6291ea03a49b97535ff985cdeaa24be31fe99d3564145117019d44bc8ca533035e12a111313ed4e1540c66bbab155d438394a15c06b9dae64c49fbd47aad7d793d9ec70fdee30e966155d62c702c13f47a2feeea94543f6017aafbe073ee750f4ae6c1a5dc809e5911a02bda84094eef8309bfca9fd77ab53bf8e6f996668c54bbe783736b6393d33db0e58fdd"], 0x14}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r6 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="752f5131a9e1a2b75eab2855411513d42377136788050924a7c8121e09c8189bde886956ae56aa698532c6471441b16f4ef780dbef1c04bd4df9b36fd6480864ffb740b898f7fad508b33cfbc57fb1f11f2dd92898da9acbe668737e8113ccd7ed171bec3e58b8e27b97cd10de63c30000000158f450beace025ad51a875a2e0423c9807057f822d1841ee"], 0x1ac}}, 0x40111) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) ptrace$auto(0x10, r5, 0x6, 0x801) wait4$auto(r5, 0x0, 0x0, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x10, 0x3, 0xa5a5, 0x6, 0x1, 0x1, 0x2, 0x3ff, 0x7, 0x1, 0x0, 0x5, 0x8000000000000001}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="810b27bd7000ffdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB="939e4393b1fae1a28f7ebedb0cb18c9f4b091008419e280b77f6ce7cc299fc753c5c113fbe0925388eba7b96d09b6c300427f9ff441b0c598563c9fa62477cafb64fd565d387b25f702730120905f3e36564e93ad4aa9b9519e766736119be2bdbd6e1d2c1f0774d65cf4a7c5f1f90529c98f90a325baf461bab860b518a9d43"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x25c6}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "98eb3f6b8b7328a2d4d2e8a40b66c778ccb6c6f406f4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_STA_FLAGS2={0x85, 0x43, "f642fa9ae653e2b441f2d9e27622729f0f69d86e7e3047257f7e0ffbb87f5a39a0f91f261a5219da438512b075cc027e36a247ed5582125abf2dfd43b1661604001bf9f097c074e3049e8291884f6c928ae7226c4ea16a5d9e3c2f9869077c85b2c858343e56b8b6adb41cf31c19b3f3221d8e82911c88659b59b2541f3085bf48"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x101}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8084}, 0x20000845) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r8) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x224, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x221}, @IOAM6_ATTR_SC_DATA={0x1f6, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xd}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x80000000}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x8000) pread64$auto(r7, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) setsockopt$auto_SO_DETACH_FILTER(r3, 0x8, 0x1b, &(0x7f0000000240)='$+-{\'\x00', 0x1) 1.744686781s ago: executing program 2 (id=1012): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1.442834895s ago: executing program 0 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8014"], 0x40}}, 0x4000000) 1.321338114s ago: executing program 2 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8014"], 0x40}}, 0x4000000) (fail_nth: 1) 1.168298053s ago: executing program 2 (id=1015): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mmap$auto(0x3, 0x3, 0xff, 0x15, r0, 0xa34c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x20d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x800, 0x0, 0x80000001, 0x7, 0x6d42, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = open(0x0, 0xeee00, 0x31) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x2c, 0x2, 0xff) r6 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) msgctl$auto(0x8000, 0x6, &(0x7f0000000180)={{0x442, 0xffffffffffffffff, 0xee01, 0x0, 0x1, 0x7, 0x83}, &(0x7f0000000100)=0xf8, &(0x7f0000000140)=0x2, 0x4, 0xfffffffffffffffe, 0xc869be, 0x1, 0x12c, 0xa, 0x4, 0x3, @raw=0x313, @inferred=0x0}) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004e8}, 0xc, &(0x7f0000000200)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="c0180000", @ANYBLOB="000126bd7000fbdbdf251f000000050008000700000008002c00000001009b182d802214828008004100", @ANYRES32=r7, @ANYBLOB="d2025680218f0011e83a9036fd3eec03a2bea14e7194afa6af28af74d07b61bdf03ca633875e7385565e1100133c84d37452c166a7167ecc3f4fcef7b1da0bec10b47f2ce8f18e3e2bfbec9e71c9e6c71a0611ad238a2615ec673d228c14c6717a566d72c6a83fb608fdf63acd3f25dab401f640ad3d52db7c8a2036d3e81b7be10ce161952a188f4328037654ce7432b747f69192b776529eda1451b14bf65e6e273f2aa0beb3c63bc30800e400", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000000000ffffac1414bb08004200", @ANYRES32=r5, @ANYBLOB="d901698015016680f86ff722bf8ef75289ff47067d020c6afbcf120ac9af4550f358783fa6c85f0c492fafce1b74fa7e79595131b7bf1374276eb34efedb014b466c98b2cf02a567508356fe6a59abbd5bb4cae160a2ee2398d6de5f1ee6386dcb025c50901811c9e77ce7ab0afe6d120ae191b5a3f055d48c10a8b608ca574fb29c52dff834bb7666cdee2e7ff9dbff410400038008004c00", @ANYRES32=0x0, @ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="2fead8d39fc1a16a34761a8f19bc7cc45b700b28d8d1dff9d6e462077c6b65e34c07ebe7ddb6a1adbe85212921891c1c495c5c006d2948b8a3a4d69e1209b8a57076235af706c7bbc68d13724452573ca27980151ffd0cdca92e194530608fb4d96b84ff05a3b1c98cec1afecdec1e9248596aeb82104b11e7ce19dc36a7a375b0b68b3c9a8b39db2509578baaaf7fa8ec4fc5c39e7cf680db324f0d814fa3bbe755e80775ca817b1566ac963b3c25f4841f970ba6dfee342346903ee2aef5be5222bfcab332b24e379ab7cf429fd448bb66c6b1dc92e05d1a2013372bcc059aa0bab1015150665409a904027761f5dd95faba7d567db35a39520e332fa439dc90f23e85171a3ee21e2622daaf4c2a46323eb25b0905720bd794c426552161c2f7ac7fd6faff91106797291d5849def9e38494a7113c42a1dd4e581400f06c46347958cd7a8784c73159d5e18374dfd6d27d93e5c1093371d5d298ed54f5dc6788f60387022263dadedbd1efe1c5240af044ce470e8be5cfcc536f37822896581fe179c27bb8fbfa291209095ff9a28f04bbde16d945015644d61a035d4f9e4710f9a0570f4b1ef34a462e6180ca92f987a5ee6536407b1fe4b44aa45dbbbd56e0bed75226391829f18b63ff52debdccc411d069e083d17af8a143fa50ba6e0c45ec55b2c5cb7c7716b800f8df8bdd1db04ff4d47d045fac70c28e2b2f1b009d380711ac0d30a0fbcf7968a3f3df1ae3109de368b231615e4f8e95d548b2c1c84dbdbbee2e5e71820b36b5167124d6d636bdd09a91980fb97557f0d9637136b00edbf8253f5703e9cd027c43862a05c4336946ac5211ff5b9e6bfed5879ba00ec0aa5033a7627468e8ef61b1a9d1ba37d8941fdc58e21c39be41e24e5b47a97012dc2cabfeb039a355ed7c90c09e45e0b57ce1e6ecc4719e9f00b01b12179f12052715d61da100c7e357485f56b58c41c1900fc0551c27c722648b5fc2107e6b650ba4f308e709080bfeb218907c4e05af4aa95a63714a00f70b6799a6f6536d824f4e6af41a5ef6834f2dedaad0625a5c0ab0f42ebb4b58a965c581488247c5729956699fff8075121c59ca67541084bccf12b88cfb64c34260b84a52e89d6d05cf67969a647f98f9065ed7751cfb7d2e136e77be7791e8bf21ebf8ec18637a59683a584eccabc8594fa3f2b13d3cdb35abe7bf0696b772ef5dc791f41e82c046ae21b1e2d24d73065a38196e4bfcac15b7d30b93b1e4576a19dbeaf283d0e85e3b9839408cf5a7833ee8415116f2ad017d812de479590e4a5c6e718ca3f875e13490f1ee7190980dd7df5112d6997c459d54321d1437c51711e3b8f605a2f3546c24e61a6eb03353b27eeeb7d65b7b35344127d46ee7290d25125e6c73130114c69348855829616628b0f671a3cc9d538a3c49177254fd62c03f4caf969ed7c7464bda7bce6a60fe8caa1a1e64295cc1b68525abf043932238f1a525564ea55f0a290fb4627ed638471a6bde783a3c01af91e329406a84c53464fd86d143a2174d6cc1946ec685bc3d264aa45cdaf1a589843af587d3bd75667f43ee81b7a47f288b02a217339adaa18f28f044ad17958f61e3792f8f096134b8aa9c7981b2c387dbaae1ca6fb4f2fcb2eaa368dac1c1c1adcee94e68eecdc295ec2b1e186ef188a787f118e3a0ba9d6d6ecd2a0ef74a68d03000af1ce1cbb43a53b9fac5fb2eef6e0f6af5a957a170f3fff2b4468542afb3cd562d4adcdf5162b7920cc4d70bf6d386088aebc810f9ea83fd0b74c31c27de325b8a803f3783c9b1bd55fb14fda940c88ad90363bdb7dc6714d1fb29368956ca45e1da0e530674b4222a63dc755132d42a5b3beded85aa3ba51d62b63f05007d7c37b2cc412d62796162c76729ab7ff43e854a1a79f4efb056303709245fcfb48607081def5b3ca6bfb67933bb0dde94beb157e5750162e40630e16fefd111296fa8e69a3174050ec1e94a0cef0bac5c60a742fea2e24374363e99ef93a6fe9a2172b22ed5ddf49e0306e2342afb19fc9a9517c13d70b5472967fa4e1ad947ae1da88ad2fd822e628d4feb55a66c1ab2034d22223b04cea89fb6a7dbb202fa01c04e4d13707d5ae582c39ca5c0dae8f45a4cd4ce1bc892b4ce84bac6558d23b800619835247f6b7726f58156f8ad18cca4eb238d1617d4dc8757d141b152dc5dddc29f1a74a070d26cb7c54f965b6f7139f5142dc1d2f52b8a7ea59911b67907421185481300e316afb91e767dd24e86d5a59818f4f123d31d2d001bf266f497679282acdbb8419f47f408fe5070394b83f16806aa99765a0be9133bea413289840245791e67a6883b55d6407a18e0c68bed7e1fe24be0e487fc264bbb81eed59cca2c083206e0ca4679e1b03dff679208e7f76e6cfb2899fbdef888bdaf350f846d528c28bdb3a3c8e10b7977a5dbeac5504264748daa1fa63a6780e4074f93e293578457f4ae6a2221696a628eacdccc30023f102268fd4d5d845d666ea9d242c23aa191b0b4bed2e6f2ab4efc1414d0e40252d292ee38a235edcbbec9de197cc1cdee41506b8ed74d520030206147538619408b689f6387b33c07fe4a28c69f83d2f47e238a87374f55b18fe43d81912dda9542fd84e022247d3b9d5b05a91055e5d09bbea3e1281842fdc5332e7f706af63f64b7205671421e3f87a63a7f2c5dffbb0d1e4d98846ec5898d1d155de5c0ef32ffc8a34ca59d0c16467b955dfd3dbac04c44c541464f6350f73a762d5ae6e5a5fd22b736fa7d8305100db4ee991105e6c9a8a2e84f7511b3969b44f4c0db53c88e8ba1bad4a950fb4b88ce4a92aceb73d97a9c6b09f046578b9063af3b2591f9679b68e4a9bb11fc106028cd4f7e5fd81d04c16b043091af59806a43675a84781146f7de25cd350c8496ab32bd5bb700d501f47b888d8b9337d87be1679ee309f30ff90b457e2805022b222195a09a8abee54e22262458fde2e73e82127352edbd11d7580bf115ab3eb39d3ee32a63ff15ad75abd6a37a75e8b628aa9533e2fbe7709a2b38fa59f44fa2910c410f856ae0d58a8d0d3692b59af7187375418ac08e024ad8162907d63f0625586f6a080232e2de5305c31489e895016a039656afb27018e26f476a56b6ecd1ddc0dc93c05e3ec1ff2b037bd3764a5837df0217af803f03add163b0fcf5c825c9f6055571303413dc10abeacb142b4f5a3811cbcebfb95e23672f3c02d97a65007a672dc4004765ae5e8a6c4efb78f331b546eccbd3459dbc49fdb94f5e8f8feeb1bae6ad35c5eac0c03147acb15f807183ffc02b8d7f219bb6ef0e6f9a866c5e75be233bfda27a1b2caee88b94af07ee5198e0aaad26e39c80ab81bf6c8bb981459c64a753c76e22e57d369103e617e0c36f393fc6d0a46b6322244b53fe72788bfa8a14b0e9e4935a5010d37f3812404a3e91ffc2bdb7f7483609e4188a81276cda96bb7d87b68649004b00b7c3007782feb1e4ee3f12c0e866f16d555140fab244308ae46b4148b61cf8787e9432414a42037ab0ca8594dfbd25cecdd8871b96ec3d190a260b89e638553ad381b87a1cc13146aa894d98f2d1171384fba572cb80343c4fa8c0e6600c2be6b77e602ce2907d5baf668d42ba2db673762ded325bb14feaa28450ca05837438d77fbf6a102c923580a9131d6e739aa529eb2a8cfd479a00fe36a78306b78ad6668723d73daaf9ebbd7c566cb170fdaf6e92e8cc115adb40d6ce21dbcac627299650f578740a20fa538584c9d9e55238867f6ea46c57a712baa837434f6c1633445e43f1a191fdb637d27f852de40ef521a25e36994820783d44d02b4935f31bbc7196723d17194958bb6be1e94816f975629aa4f1f8e7680d98d545a2e34e620880893a54a694d21bf1ad51cd20fccd030ba269d4ffddfb922440c71f9f4c2818a5efb1226d2c433e63957691e86b371827867c8ea6aac648158ce3eea183872b666aeddc2236200d2d689d7a216a69a7b6a963a8b506c7b4e7468f5a69aef67723fe50e257a618106b7a562076b3a94cb4906a54dc41be84dae124e83d3254044c535ac8ff201466feb10eb0cab8d13c15e5ad438ba671dfef319d597c44424d2bdce58660b96ad0c580dcc277fcec14561026bf20bc807bc408848a0572d15921365eb2dcf22d7e181df5668a6ab8ae608af2da2c25acbe25241865d89135d8bd2209b759b4ab32bf8a1e402cd465eb66b0940fa2bf6c11c6dd505e1fda1adf8d425e132a37ae38b1033868c62fa1607af91535dfbb44bc008407a2def47c06154ceca765fe9fb94a1c88fe298465b299cd5c8cb928a9cbf5e9de77dde922fb199e087b408a98055ad57449e00ed9d96b611c310cad1b8c4f751eb9729ae8fedaf8f4a6ab2fb7923a7c254d7f377bcfff3e953d2071b13e1bf5618e75b0872a042eac2c8623eb48d172d4f60050b64faabe1fdafd3c70bc27e5111bdbb16f509c42c73ec0e756d86c31ebcb0ff0ba6f3a5d3796d54b5cee2190855f37b0d36cd3c0215252563d2a8ee177f724ab9cbd84ad34a54cdcf064259c24adf061d13fd137c89cd318e3291592d589628700c7c08a346493998b7a549a54e567566ab6e0df259f309d13f29690b736b05860994d31aeb5ba3cf2576ff552a47efa7400a46b9aa63295f2163c85b2ecb1d3151e644be535c8dd3ce4897565bef14540d6480c0b74a603816536d6d2278dd65e8496bd900162a89831daa078579842175963a5b5c3c6dfc80c39a1433fb5409df4a143ccf383a7c2dcd2019bc499a74f21beb061026964af14d391864afaadc9aeb181bc52d64c6b00d4b5617579887b1dba979b42111d499d25c4603385455826f900ea7d45889b3d1efc8c55790667de6e8b408f3cee5bc86977b0fc13e0fd88fc3e15fe9411da170cb2c9b42978afe810de7634c56143ef16344cef65c29de6247f7b544245f7d25ab3eb51cda4d42ba3a610951efd6a50fb305ccce1546ac0c7079e465cb018d7fa1b1abca982b182d0abe48ba7e8bb0b74655bdd0e36a8d48b9746c6ccdf53183b54ea8a7de6acd3416e033ee97410fc6ea8b592925731a787dd1cad33121447428734f201a7b5ecc7f4d1bb3810e14a3413083e8639a3925378da947f0a9bc991414321333246b3408deb32f223600cf85a00c549ff5ae9ef1a3d1a2b1330a4fdb20863331ca9e24dbafcfcdd6f52c6d548ff41845361e77ed7c9a8ef2caa9813437dd3cd6e44331feea696acfc1bd6b943490c8cf5d5661c04c86000ed2c77bdca0625ad9a0b01b6a96a9b217f59ac8ae0a8ca05e0c85aa72fb97370361e6ad5275028a0d5123a28ecbd3c3b981e6404467efb4188140f89db3ce6e07aec8be18190947db5c13d81e95af19c99daa6b872123e67453f353004503167984de1a799134c3edf757a0c533319dfaf0869aa10dd4c127dae6d5d75d396d874ef6496c38d1de8fc0e1286ad7c4c4a4604abd7fabee44a6241021d76aa8bf72a67513f87b78639fb3a48feed1f0d2a7121d84e432df4f54950abfe25c2b30f2f07ea815d19f10a89d5a3f6fa8ee31dac78677bd0d9963a92a13fa0ddbb5ea576a12d664e9f97849cadc48d349a8f87b839e439568233136b63e576ece1293d6fd8edd85508e3b3dc1793177d0631c5af020008441400d27749bc8272fc41e88d7f2d62eb56225281fd82f14272cb91b9d3432e355bd66ef9fc0c3a136902c5d7d53c60909bf801a966829ac96a79d43c435503917ea300000000000000000000000004003a0014a7391693ab886315f489790fdcc69af987a7765fd781631c9661abf1e6a952136e0af19443c5ea94f38f6f7253bdd51925f3d8fd621effc6f2b66766fce512ae02015174b235dcb69b64c6bde2d0c5ebed7e8a5c2c39cdabdba11c921a0264ac281f2b769237f0ab493b315d8012a8c2f632f4bbeeafc3db3eef7e68347199f36f86c0d5406f8d26d1282e003c68c81a9a2381ca257d77b6655a1ea373621ed34c9d7bd148d81a51e20ec607ae55983244f55400b311a8481d7c5a96767f6fdab13b535576612ddb75b3687b5abbea61f73b52e687ac082845b32c1cfae0a916ffe0ad8f80aa9c28eed60f8386622a6a6701b3002009b72b3d807bf367e631086d5d244c2cc9014380661d2a4f2116ef87b7c3e20f7d3b85a99b91a33305f5322d5055eb6c80cea66b24870c2433903ebe73179072d709d772d8311dada6321517ff3469eac193dd76cae8a3a6335cdc18135e939bf5e7356d0986e0298a0f7a07ee983d201783c13a2055d9a8574eb70afd5ff209fbddccb5ad940e3d7ff29cdfdefd901ed7d7005df8f5c6220b702ced5b75f30400de8004002f800c005a000800000000000000a7e2dabfbbfa7432dd14505269baa316f8b2772277f5aff54a7219311f8c3d09df1c93a898a308dc0ae685d8ce85e4898d5005066927018d94ef1a6902bc45350a89a2873cfe6664271a96ed8b86271d249ead1a026318f299ac6320f54493e63c8b234b2e5002f0ba88bae5ba9c164494924c9a8890fb98c92927b0d6d238e9c7fc8661f00cd5a6621a0722be15e834dcf646bd5016c7157324a9d1ff43f77f6dcd5664c08abd6a1c5803cbcfb577c6d2dc22e912e02d80e60118b5c98fc72c662d67ddfed65c5528fba3be6b15fb0b2392a09fe030714354b48e9bc2bfb3a9f2d05070a247637116182809dbfe4d0e1b48211f2ee23e4d2dcb1a351f0d13610c1532ceaaff30e9d3784b7f9568e6d15927ef6b0d254d9a1128aa29303dc9daa523b45e780f0000001a0087800400e580187c99c0d9e46f6ab5cded7d280504006e800000080060000400000007b96967743b46b26d82685c1d0ff22503302bdab1f6dcef15057c025558f307afcf772c5e8564a7c53268a6b17615d8f962792bd0af0fee2a9219955c550d28a3993ba6a2029e5d72e87dbc040a723efd4dad4f8d6d3d3dd6b4fabca5ecdbf48e48345eff6d7cf089c3a13d38a9a0d34a1a32d7312b58846565e605cfe964ce35e258584c85328fbb27d81d95500fb86b0355d1ef053a8af8b66bafc420302e9c092bc69f2df814a3a666c4699e4425721185a21ff75fd54bd21010d46c9ba0916a0a987b21bffb7dce15421b55b2ab0bfed8782723b62810881055b6509f96403f3b4275d058e7c1f792e55bea8f2bbea4e717e00770bdc90c465168756cc208414387d0b8a229d7f370053b928c9237ec58c4d4027289d2841e9d87151e9a2d97f62be679b88cb901bcbc1b2145bd02b285a28945734d6a09ca68af855c836f6f63964b7a4dde48e55f46c7b15d7ef643b84732efbf82064c00a23c6725fd8321c55705395d16ebc97a923d0e966bf2c0590692d8be9f9800"], 0x18c0}, 0x1, 0x0, 0x0, 0x2000c814}, 0x40000) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) tkill$auto(0x0, 0x7) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1.08654525s ago: executing program 0 (id=1016): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x3, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r0, 0x0, 0xfffffde9) shutdown$auto(r0, 0x10002) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, 0x0, 0x1ff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x8680, 0x0) ioctl$auto_UI_SET_SWBIT(r2, 0x4004556d, &(0x7f00000000c0)=0xfffffff9) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x80000007, 0xdf, 0x9b75, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) r3 = socket(0x1f, 0x800, 0xffffff01) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x14}}, 0x4000000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x6482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0xdf, 0x8000000000000eb1, r3, 0x0) socket(0xa, 0x801, 0x84) socket(0x15, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f60f00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) io_uring_setup$auto(0x4, 0x0) 1.025553285s ago: executing program 4 (id=1017): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x20000, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xff, 0x9b72, 0xffffffffffffffff, 0x8000) munlock$auto(0x9, 0x29b9) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (fail_nth: 1) 408.87514ms ago: executing program 1 (id=1018): r0 = memfd_create$auto(0x0, 0x9) unshare$auto(0x40000080) setregid$auto(0x5, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) mmap$auto(0x1, 0x7ff, 0x100000000, 0x11, 0xfffffffffffffff1, 0x8000) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x62081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000033c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x8, 0x5, 0xfffffffffffffffd, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x8080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40280, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x4040020) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/188, 0xbc) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948b, 0x3, 0x8001, 0x3, 0x3, 0x61, 0x8000001f, 0x7, 0x6d3e, 0xabf6, 0x2, 0x6]}, 0x0) fallocate$auto(r0, 0x3, 0x2, 0x4) ioctl$auto_VHOST_SET_FEATURES2(r0, 0x4008af00, &(0x7f00000000c0)=0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 227.932131ms ago: executing program 2 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4) (fail_nth: 1) 28.441054ms ago: executing program 2 (id=1020): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001780)="566d5678e5fbd485a0db87806dcd3d7d37e425ef0908dc9bfb4af762789677756464cf4ea18a744c11839ee5999b10a7739b7161a3091f2f645c130f887bcd73aeb0e2662bb93071a080b9c7c20b0cfebaec846682299c8003989f49") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x6) r1 = socket(0x2, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) kexec_load$auto(0x1, 0x100000001, 0x0, 0x3) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x891b, 0x24) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x12}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x14a8, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x139e, 0x2d, 0x0, 0x1, [@generic="e2046aa02470bc99fbc64d6e09cc03137b9485974d125c75e523e96974efdd021d65e600064be77550588427867fa463f26777eb165b3638c3de4c25d8fe2dc700f4d6081c57ea7d06b38f939be71fdbd8f689d982161c1fd1e2702e9f9a55638ddbf8109f43f5b185bc33611a1c598914d7aea47a37ab33215fa6420a790791a9e20b7f84762a1393276d0c2bb1805dd6d8efb8f14ad32d9f5a944cf5c5ac03c89feecf230c203162a008995aaa78ccf293", @nested={0x6c, 0x25, 0x0, 0x1, [@typed={0x57, 0x4a, 0x0, 0x0, @binary="43ca747e4ab1df4ff12f2c8b8b7befd5d62b52805f1023ef0193153c0e04c82ccfd2294f17417928e01a6353f4c920763e38d630c18d1c293bfa8f8538e68b3eec79765750684fbdbb77d011924fdc208edf45"}, @nested={0x4, 0x1b}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x80000001}]}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x42}, @generic="7952453deee7dbd56dd2a5675bb66dee07a692b9c8902a9436247be14d00730525b9343ee9317135a15e93997dd856c164749d86050ea80b9dfa9bdd6b9a3b3480d6936ae5e90ef1b85190e92562bd2f1a30819ef9333e083f285f766b1c5aaeae", @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @nested={0x146, 0x24, 0x0, 0x1, [@typed={0xc, 0x64, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x4}, @generic="a79b3ba501a7d1bd6171a4e7587f6a51f12fea8cd54d80fe844e6969bbbde399b5d517785eed842d1ab9a0683c0fb63cf611b6335fad5a8e8735aa2c9c90a33c526cf339f69d8e8d57f28019b7af908bb696cd8f5a0a92dd71ed106345658ccedac28635ed31e2b8c950c52b5dcb0ac4f8a0c897767bac75d4667487f2aa89ab9bb5d548cd6bda2272e6a3b054ee2b74925c0e2a00f61b004e6cff3622545bae8af3bf6b250dd722725a530258857ebd5c9709d381fdf1ad1ba9cc37770738d566", @generic="e252c33269ae0f42c4d396d00a1d0f87c3567e6be4d14ff69c914ef9b173b51c61dfc5241618a3f6425534d0aa75d594089389fccbb3", @generic="687df3de", @typed={0x8, 0xf7, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0xc2}, @generic="cddf0fa83e6bfdd1f9f29d7d01e74a883c9c6f94e18183a062ab061688f56c35dd1c1ca35ee526"]}, @generic="dfb26cf5dff5a7b03b9087c023db92b65c6ea018105e55f469b999b08f351d25c58b8cbfc69ff24643e83d6eaaad497216d3d94f2fcecaf006769e400ffc809217cae4c0e1d5c969028ffda057a2fd475c23e2a1baa2a8e661af759a989d71ce94d8f7b23e7e29c8410afe183886edc29d09a679d3fb1c1cd25c303c76bf981c5ed740e65db04204d0a639711cd619c61b24bdf15cd77e0d84777224b9de9b82a6d4b26faf4978d5d31173", @generic="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"]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x40}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xcf, 0x19, 0x0, 0x1, [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x7}, @generic="c2fd80b6b8f2e8ba6684ddea3a426d384f5be133e3d9de29a31786a97eeb22d4af1105926bc96e2352746862b9aefb32eb0543c9ffc01c16b3cd36086c731135128a3151b1b28dbe2215128d8f6f24ec710d5910dfed7c748930aa156f888c13ac9e8f5d0e896d0a3b02972710a03b144883c8afd8a6932adea9bba718e898ddb40f38a358dda56b0142f6967d5a0e78987d58105e94f582b0ba7f55db158d968dbcf3954e9bf36bb7742734cb33371bc1f5e9df205a9738434dfb355961d3"]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x4004801}, 0x20004040) 0s ago: executing program 4 (id=1021): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x7ff, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x1e, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000340), r0) sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_RESPONSE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) listen$auto(r2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) r4 = accept$auto(r2, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x15, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r4, 0x8000, 0x5f22) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0x4004ae99, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) kernel console output (not intermixed with test programs): 07f00053a5fa0 RCX: 00007f000518d169 [ 186.784587][ T7328] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 186.784605][ T7328] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 186.784623][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.784640][ T7328] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 186.784679][ T7328] [ 187.159874][ T7334] FAULT_INJECTION: forcing a failure. [ 187.159874][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 187.175654][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.0.365 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 187.175709][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.175728][ T7334] Call Trace: [ 187.175738][ T7334] [ 187.175750][ T7334] dump_stack_lvl+0x16c/0x1f0 [ 187.175803][ T7334] should_fail_ex+0x512/0x640 [ 187.175847][ T7334] should_failslab+0xc2/0x120 [ 187.175878][ T7334] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.175928][ T7334] ? skb_clone+0x190/0x3f0 [ 187.175975][ T7334] skb_clone+0x190/0x3f0 [ 187.176017][ T7334] netlink_deliver_tap+0xabd/0xd30 [ 187.176070][ T7334] netlink_unicast+0x5df/0x7f0 [ 187.176120][ T7334] ? __pfx_netlink_unicast+0x10/0x10 [ 187.176164][ T7334] ? __lock_acquire+0xaa4/0x1ba0 [ 187.176224][ T7334] netlink_sendmsg+0x8d1/0xdd0 [ 187.176277][ T7334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.176337][ T7334] ____sys_sendmsg+0xa95/0xc70 [ 187.176389][ T7334] ? copy_msghdr_from_user+0x10a/0x160 [ 187.176430][ T7334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.176499][ T7334] ___sys_sendmsg+0x134/0x1d0 [ 187.176544][ T7334] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.176646][ T7334] __sys_sendmsg+0x16d/0x220 [ 187.176833][ T7334] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.176889][ T7334] ? rcu_is_watching+0x12/0xc0 [ 187.176942][ T7334] do_syscall_64+0xcd/0x260 [ 187.176995][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.177029][ T7334] RIP: 0033:0x7f000518d169 [ 187.177055][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.177085][ T7334] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.177114][ T7334] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 187.177134][ T7334] RDX: 0000000020004010 RSI: 0000200000000300 RDI: 0000000000000003 [ 187.177153][ T7334] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.177172][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.177189][ T7334] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 187.177230][ T7334] [ 187.410804][ T7337] vivid-003: ================= START STATUS ================= [ 187.418617][ T7337] vivid-003: Radio HW Seek Mode: Bounded [ 187.424415][ T7337] vivid-003: Radio Programmable HW Seek: false [ 187.430652][ T7337] vivid-003: RDS Rx I/O Mode: Block I/O [ 187.436367][ T7337] vivid-003: Generate RBDS Instead of RDS: false [ 187.442870][ T7337] vivid-003: RDS Reception: true [ 187.448025][ T7337] vivid-003: RDS Program Type: 0 inactive [ 187.453953][ T7337] vivid-003: RDS PS Name: inactive [ 187.459248][ T7337] vivid-003: RDS Radio Text: inactive [ 187.464988][ T7337] vivid-003: RDS Traffic Announcement: false inactive [ 187.471854][ T7337] vivid-003: RDS Traffic Program: false inactive [ 187.478357][ T7337] vivid-003: RDS Music: false inactive [ 187.484522][ T7337] vivid-003: ================== END STATUS ================== [ 187.586512][ T7341] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 187.594638][ T7341] netlink: 230 bytes leftover after parsing attributes in process `syz.1.362'. [ 187.624595][ T7341] bond0: (slave bond_slave_1): Releasing backup interface [ 187.666561][ T7342] netlink: set zone limit has 4 unknown bytes [ 187.888681][ T7347] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 187.903826][ T7347] netlink: 230 bytes leftover after parsing attributes in process `syz.2.367'. [ 187.969954][ T5854] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 188.173209][ T7358] FAULT_INJECTION: forcing a failure. [ 188.173209][ T7358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.205789][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.2.370 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 188.205834][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.205852][ T7358] Call Trace: [ 188.205862][ T7358] [ 188.205874][ T7358] dump_stack_lvl+0x16c/0x1f0 [ 188.205924][ T7358] should_fail_ex+0x512/0x640 [ 188.205968][ T7358] should_fail_alloc_page+0xe7/0x130 [ 188.206002][ T7358] prepare_alloc_pages+0x3c2/0x610 [ 188.206050][ T7358] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 188.206124][ T7358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 188.206175][ T7358] ? do_raw_spin_lock+0x12c/0x2b0 [ 188.206213][ T7358] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.206247][ T7358] ? cgroup_rstat_updated+0x2a/0xb20 [ 188.206286][ T7358] ? find_held_lock+0x2b/0x80 [ 188.206337][ T7358] ? __lock_acquire+0xaa4/0x1ba0 [ 188.206398][ T7358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.206435][ T7358] ? policy_nodemask+0xea/0x4e0 [ 188.206490][ T7358] alloc_pages_mpol+0x1fb/0x550 [ 188.206522][ T7358] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 188.206566][ T7358] folio_alloc_mpol_noprof+0x36/0x2f0 [ 188.206605][ T7358] shmem_alloc_folio+0x135/0x160 [ 188.206650][ T7358] shmem_alloc_and_add_folio+0x499/0xc20 [ 188.206712][ T7358] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 188.206767][ T7358] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 188.206825][ T7358] shmem_get_folio_gfp+0x687/0x1530 [ 188.206885][ T7358] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 188.206941][ T7358] ? filemap_map_pages+0xf6c/0x1680 [ 188.206977][ T7358] shmem_fault+0x1fe/0xa30 [ 188.207031][ T7358] ? __pfx_shmem_fault+0x10/0x10 [ 188.207089][ T7358] ? __pfx_filemap_map_pages+0x10/0x10 [ 188.207134][ T7358] __do_fault+0x10a/0x490 [ 188.207167][ T7358] do_pte_missing+0x1031/0x3fb0 [ 188.207218][ T7358] ? __handle_mm_fault+0x1010/0x2a40 [ 188.207274][ T7358] __handle_mm_fault+0x103d/0x2a40 [ 188.207330][ T7358] ? __pfx___handle_mm_fault+0x10/0x10 [ 188.207407][ T7358] ? find_vma+0xbf/0x140 [ 188.207440][ T7358] ? __pfx_find_vma+0x10/0x10 [ 188.207481][ T7358] handle_mm_fault+0x3fe/0xad0 [ 188.207543][ T7358] do_user_addr_fault+0x7a6/0x1370 [ 188.207587][ T7358] ? rcu_is_watching+0x12/0xc0 [ 188.207632][ T7358] exc_page_fault+0x5c/0xc0 [ 188.207676][ T7358] asm_exc_page_fault+0x26/0x30 [ 188.207707][ T7358] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 188.207745][ T7358] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 188.207776][ T7358] RSP: 0018:ffffc9000c12fb78 EFLAGS: 00050206 [ 188.207802][ T7358] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000005111 [ 188.207821][ T7358] RDX: ffffed100b62be22 RSI: 0000000000002000 RDI: ffff88805b15a000 [ 188.207842][ T7358] RBP: 0000000000007111 R08: 0000000000000001 R09: ffffed100b62be22 [ 188.207862][ T7358] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 188.207881][ T7358] R13: ffff88805b158000 R14: ffffc9000c12fc10 R15: 0000000000000000 [ 188.207925][ T7358] _copy_from_user+0x98/0xd0 [ 188.207968][ T7358] memdup_user_nul+0x6c/0x120 [ 188.208004][ T7358] bitmap_parse_user+0x24/0x90 [ 188.208049][ T7358] tracing_cpumask_write+0x11e/0x1d0 [ 188.208097][ T7358] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 188.208155][ T7358] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 188.208218][ T7358] vfs_writev+0x6c4/0xdc0 [ 188.208257][ T7358] ? __pfx___mutex_trylock_common+0x10/0x10 [ 188.208302][ T7358] ? __pfx_vfs_writev+0x10/0x10 [ 188.208342][ T7358] ? __mutex_lock+0x1ca/0xb90 [ 188.208406][ T7358] ? __pfx___mutex_lock+0x10/0x10 [ 188.208469][ T7358] ? __fget_files+0x20e/0x3c0 [ 188.208512][ T7358] ? __fget_files+0x120/0x3c0 [ 188.208565][ T7358] ? do_writev+0x132/0x330 [ 188.208603][ T7358] do_writev+0x132/0x330 [ 188.208644][ T7358] ? __pfx_do_writev+0x10/0x10 [ 188.208682][ T7358] ? rcu_is_watching+0x12/0xc0 [ 188.208733][ T7358] do_syscall_64+0xcd/0x260 [ 188.208784][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.208816][ T7358] RIP: 0033:0x7ff2f3f8d169 [ 188.208840][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.208870][ T7358] RSP: 002b:00007ff2f4e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 188.208898][ T7358] RAX: ffffffffffffffda RBX: 00007ff2f41a5fa0 RCX: 00007ff2f3f8d169 [ 188.208917][ T7358] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 188.208935][ T7358] RBP: 00007ff2f4e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 188.208954][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.208971][ T7358] R13: 0000000000000000 R14: 00007ff2f41a5fa0 R15: 00007ffcc2ffe308 [ 188.209013][ T7358] [ 189.196504][ T7372] FAULT_INJECTION: forcing a failure. [ 189.196504][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 189.293509][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.2.373 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 189.293556][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.293574][ T7372] Call Trace: [ 189.293585][ T7372] [ 189.293597][ T7372] dump_stack_lvl+0x16c/0x1f0 [ 189.293651][ T7372] should_fail_ex+0x512/0x640 [ 189.293703][ T7372] ? fs_reclaim_acquire+0xae/0x150 [ 189.293745][ T7372] ? tomoyo_encode2+0x100/0x3e0 [ 189.293787][ T7372] should_failslab+0xc2/0x120 [ 189.293813][ T7372] __kmalloc_noprof+0xd2/0x510 [ 189.293846][ T7372] ? d_absolute_path+0x136/0x1a0 [ 189.293876][ T7372] tomoyo_encode2+0x100/0x3e0 [ 189.293910][ T7372] tomoyo_encode+0x29/0x50 [ 189.293939][ T7372] tomoyo_realpath_from_path+0x18f/0x6e0 [ 189.293979][ T7372] tomoyo_path_number_perm+0x245/0x580 [ 189.294004][ T7372] ? tomoyo_path_number_perm+0x237/0x580 [ 189.294033][ T7372] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.294061][ T7372] ? find_held_lock+0x2b/0x80 [ 189.294115][ T7372] ? find_held_lock+0x2b/0x80 [ 189.294142][ T7372] ? hook_file_ioctl_common+0x145/0x410 [ 189.294173][ T7372] ? __fget_files+0x20e/0x3c0 [ 189.294210][ T7372] security_file_ioctl+0x9b/0x240 [ 189.294240][ T7372] __x64_sys_ioctl+0xb7/0x200 [ 189.294269][ T7372] do_syscall_64+0xcd/0x260 [ 189.294305][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.294328][ T7372] RIP: 0033:0x7ff2f3f8d169 [ 189.294346][ T7372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.294368][ T7372] RSP: 002b:00007ff2f4e69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.294389][ T7372] RAX: ffffffffffffffda RBX: 00007ff2f41a6080 RCX: 00007ff2f3f8d169 [ 189.294404][ T7372] RDX: 0000200000000080 RSI: 0000000080089203 RDI: 0000000000000005 [ 189.294418][ T7372] RBP: 00007ff2f4e69090 R08: 0000000000000000 R09: 0000000000000000 [ 189.294432][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.294444][ T7372] R13: 0000000000000000 R14: 00007ff2f41a6080 R15: 00007ffcc2ffe308 [ 189.294479][ T7372] [ 189.610532][ T7372] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.756332][ T7382] FAULT_INJECTION: forcing a failure. [ 189.756332][ T7382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.786388][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.1.375 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 189.786440][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.786460][ T7382] Call Trace: [ 189.786470][ T7382] [ 189.786483][ T7382] dump_stack_lvl+0x16c/0x1f0 [ 189.786534][ T7382] should_fail_ex+0x512/0x640 [ 189.786576][ T7382] _copy_from_user+0x2e/0xd0 [ 189.786617][ T7382] copy_msghdr_from_user+0x98/0x160 [ 189.786659][ T7382] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 189.786708][ T7382] ? __pfx__kstrtoull+0x10/0x10 [ 189.786763][ T7382] ___sys_sendmsg+0xfe/0x1d0 [ 189.786806][ T7382] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.786866][ T7382] ? find_held_lock+0x2b/0x80 [ 189.786928][ T7382] __sys_sendmmsg+0x200/0x420 [ 189.786974][ T7382] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.787029][ T7382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.787093][ T7382] ? fput+0x70/0xf0 [ 189.787123][ T7382] ? ksys_write+0x1b9/0x240 [ 189.787166][ T7382] ? __pfx_ksys_write+0x10/0x10 [ 189.787206][ T7382] ? rcu_is_watching+0x12/0xc0 [ 189.787252][ T7382] __x64_sys_sendmmsg+0x9c/0x100 [ 189.787292][ T7382] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.787335][ T7382] do_syscall_64+0xcd/0x260 [ 189.787387][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.787419][ T7382] RIP: 0033:0x7f0aa3f8d169 [ 189.787450][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.787481][ T7382] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.787510][ T7382] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 189.787530][ T7382] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000002 [ 189.787548][ T7382] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 189.787566][ T7382] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 189.787584][ T7382] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 189.787624][ T7382] [ 189.999381][ T7382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.913493][ T7406] FAULT_INJECTION: forcing a failure. [ 190.913493][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.991734][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: syz.0.380 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 190.991779][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.991797][ T7406] Call Trace: [ 190.991806][ T7406] [ 190.991817][ T7406] dump_stack_lvl+0x16c/0x1f0 [ 190.991865][ T7406] should_fail_ex+0x512/0x640 [ 190.991909][ T7406] _copy_to_user+0x32/0xd0 [ 190.991950][ T7406] simple_read_from_buffer+0xcb/0x170 [ 190.991998][ T7406] proc_fail_nth_read+0x197/0x270 [ 190.992043][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.992098][ T7406] ? rw_verify_area+0xcf/0x680 [ 190.992134][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.992175][ T7406] vfs_read+0x1de/0xc70 [ 190.992223][ T7406] ? __pfx___mutex_lock+0x10/0x10 [ 190.992269][ T7406] ? __pfx_vfs_read+0x10/0x10 [ 190.992330][ T7406] ? __fget_files+0x20e/0x3c0 [ 190.992385][ T7406] ksys_read+0x12a/0x240 [ 190.992428][ T7406] ? __pfx_ksys_read+0x10/0x10 [ 190.992465][ T7406] ? rcu_is_watching+0x12/0xc0 [ 190.992517][ T7406] do_syscall_64+0xcd/0x260 [ 190.992565][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.992597][ T7406] RIP: 0033:0x7f000518bb7c [ 190.992641][ T7406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.992671][ T7406] RSP: 002b:00007f00060a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.992700][ T7406] RAX: ffffffffffffffda RBX: 00007f00053a6080 RCX: 00007f000518bb7c [ 190.992718][ T7406] RDX: 000000000000000f RSI: 00007f00060a80a0 RDI: 0000000000000004 [ 190.992736][ T7406] RBP: 00007f00060a8090 R08: 0000000000000000 R09: 0000000000000000 [ 190.992754][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.992772][ T7406] R13: 0000000000000001 R14: 00007f00053a6080 R15: 00007ffd0c540b28 [ 190.992812][ T7406] [ 191.446342][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 191.625012][ T7425] mmap: syz.0.383 (7425) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.957632][ T7402] tty tty11: ldisc open failed (-12), clearing slot 10 [ 191.983427][ T7404] tty tty11: ldisc open failed (-12), clearing slot 10 [ 192.204492][ T7434] netlink: 'syz.2.387': attribute type 10 has an invalid length. [ 192.222912][ T7434] netlink: 230 bytes leftover after parsing attributes in process `syz.2.387'. [ 192.868585][ T7450] FAULT_INJECTION: forcing a failure. [ 192.868585][ T7450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.918061][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.4.392 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 192.918112][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.918131][ T7450] Call Trace: [ 192.918142][ T7450] [ 192.918153][ T7450] dump_stack_lvl+0x16c/0x1f0 [ 192.918206][ T7450] should_fail_ex+0x512/0x640 [ 192.918248][ T7450] _copy_to_user+0x32/0xd0 [ 192.918291][ T7450] simple_read_from_buffer+0xcb/0x170 [ 192.918338][ T7450] proc_fail_nth_read+0x197/0x270 [ 192.918384][ T7450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.918429][ T7450] ? rw_verify_area+0xcf/0x680 [ 192.918465][ T7450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.918509][ T7450] vfs_read+0x1de/0xc70 [ 192.918555][ T7450] ? __pfx___mutex_lock+0x10/0x10 [ 192.918602][ T7450] ? __pfx_vfs_read+0x10/0x10 [ 192.918655][ T7450] ? __fget_files+0x20e/0x3c0 [ 192.918712][ T7450] ksys_read+0x12a/0x240 [ 192.918752][ T7450] ? __pfx_ksys_read+0x10/0x10 [ 192.918807][ T7450] do_syscall_64+0xcd/0x260 [ 192.918855][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.918887][ T7450] RIP: 0033:0x7f458bf8bb7c [ 192.918911][ T7450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.918948][ T7450] RSP: 002b:00007f458ce83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.918977][ T7450] RAX: ffffffffffffffda RBX: 00007f458c1a5fa0 RCX: 00007f458bf8bb7c [ 192.918998][ T7450] RDX: 000000000000000f RSI: 00007f458ce830a0 RDI: 0000000000000003 [ 192.919016][ T7450] RBP: 00007f458ce83090 R08: 0000000000000000 R09: 0000000000000000 [ 192.919034][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.919051][ T7450] R13: 0000000000000001 R14: 00007f458c1a5fa0 R15: 00007fff26ebdb68 [ 192.919091][ T7450] [ 193.462893][ T7459] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 194.141306][ T7469] Invalid ELF header magic: != ELF [ 194.621598][ T7477] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 194.630700][ T7477] netlink: 230 bytes leftover after parsing attributes in process `syz.0.399'. [ 194.641740][ T7477] bond0: (slave bond_slave_1): Releasing backup interface [ 194.661476][ T7466] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.668608][ T7466] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.715214][ T7466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.724539][ T7466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.746773][ T7466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.773938][ T7466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.780568][ T7466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 194.830511][ T7466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.040292][ T7479] FAULT_INJECTION: forcing a failure. [ 195.040292][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.083861][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.0.400 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 195.083904][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.083922][ T7479] Call Trace: [ 195.083931][ T7479] [ 195.083943][ T7479] dump_stack_lvl+0x16c/0x1f0 [ 195.083991][ T7479] should_fail_ex+0x512/0x640 [ 195.084041][ T7479] _copy_to_user+0x32/0xd0 [ 195.084083][ T7479] simple_read_from_buffer+0xcb/0x170 [ 195.084129][ T7479] proc_fail_nth_read+0x197/0x270 [ 195.084173][ T7479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.084218][ T7479] ? rw_verify_area+0xcf/0x680 [ 195.084253][ T7479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.084296][ T7479] vfs_read+0x1de/0xc70 [ 195.084343][ T7479] ? __pfx___mutex_lock+0x10/0x10 [ 195.084388][ T7479] ? __pfx_vfs_read+0x10/0x10 [ 195.084439][ T7479] ? __fget_files+0x20e/0x3c0 [ 195.084496][ T7479] ksys_read+0x12a/0x240 [ 195.084537][ T7479] ? __pfx_ksys_read+0x10/0x10 [ 195.084595][ T7479] do_syscall_64+0xcd/0x260 [ 195.084642][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.084673][ T7479] RIP: 0033:0x7f000518bb7c [ 195.084697][ T7479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.084727][ T7479] RSP: 002b:00007f00060c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.084773][ T7479] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518bb7c [ 195.084794][ T7479] RDX: 000000000000000f RSI: 00007f00060c90a0 RDI: 0000000000000004 [ 195.084812][ T7479] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 195.084830][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.084848][ T7479] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 195.084888][ T7479] [ 195.964050][ T7487] netlink: set zone limit has 4 unknown bytes [ 196.423807][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.744608][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.751737][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.823890][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 196.830032][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.509578][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.915186][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.310945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.317612][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.235885][ T7544] Invalid ELF header magic: != ELF [ 200.983820][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.364247][ T7559] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 201.524407][ T7562] syz.4.419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.566349][ T7577] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 202.589017][ T7577] netlink: 230 bytes leftover after parsing attributes in process `syz.2.422'. [ 205.275666][ T7610] Invalid ELF header magic: != ELF [ 205.558481][ T7621] vivid-003: ================= START STATUS ================= [ 205.583870][ T7621] vivid-003: Radio HW Seek Mode: Bounded [ 205.603933][ T7621] vivid-003: Radio Programmable HW Seek: false [ 205.610322][ T7621] vivid-003: RDS Rx I/O Mode: Block I/O [ 205.662132][ T7621] vivid-003: Generate RBDS Instead of RDS: false [ 205.693299][ T7621] vivid-003: RDS Reception: true [ 205.714796][ T7621] vivid-003: RDS Program Type: 0 inactive [ 205.720657][ T7621] vivid-003: RDS PS Name: inactive [ 205.743905][ T7621] vivid-003: RDS Radio Text: inactive [ 205.792618][ T7621] vivid-003: RDS Traffic Announcement: false inactive [ 205.854093][ T7621] vivid-003: RDS Traffic Program: false inactive [ 205.860545][ T7621] vivid-003: RDS Music: false inactive [ 205.950554][ T7621] vivid-003: ================== END STATUS ================== [ 206.294256][ T7622] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe0fa80 pfn:0x7fe0c [ 206.353972][ T7622] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 206.383809][ T7622] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 206.423219][ T7622] raw: ffff88807fe0fa80 0000000000000000 00000001ffffffff 0000000000000000 [ 206.448852][ T7622] page dumped because: unmovable page [ 206.503765][ T7622] page_owner tracks the page as allocated [ 206.527030][ T7622] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92800(GFP_NOWAIT|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 6089, tgid 6089 (syz.0.34), ts 108203902480, free_ts 108161228467 [ 206.589152][ T7622] register_dummy_stack+0x89/0xd0 [ 206.594716][ T7622] init_page_owner+0x48/0xc30 [ 206.607165][ T7622] page_ext_init+0x6b8/0xab0 [ 206.611953][ T7622] mm_core_init+0x13c/0x220 [ 206.633846][ T7622] page last free pid 6090 tgid 6090 stack trace: [ 206.685177][ T7622] __free_frozen_pages+0x69d/0xff0 [ 206.690401][ T7622] __put_partials+0x16d/0x1c0 [ 206.743799][ T7622] qlist_free_all+0x4e/0x120 [ 206.748510][ T7622] kasan_quarantine_reduce+0x195/0x1e0 [ 206.783923][ T7629] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 206.791856][ T7629] netlink: 230 bytes leftover after parsing attributes in process `syz.2.435'. [ 206.792478][ T7622] __kasan_slab_alloc+0x69/0x90 [ 206.836659][ T7622] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 206.863769][ T7622] snd_seq_port_connect+0x61/0x550 [ 206.893698][ T7622] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 206.899845][ T7622] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 206.913729][ T7622] snd_seq_oss_midi_open+0x564/0x660 [ 206.919229][ T7622] snd_seq_oss_synth_reset+0x437/0x880 [ 206.933787][ T7622] snd_seq_oss_reset+0x73/0x290 [ 206.939587][ T7622] snd_seq_oss_release+0x7c/0x180 [ 206.953797][ T7622] odev_release+0x4c/0x70 [ 206.973711][ T7622] __fput+0x3ff/0xb70 [ 206.977784][ T7622] task_work_run+0x14d/0x240 [ 208.133046][ T7655] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 208.311201][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.391623][ T30] audit: type=1800 audit(6039318742.505:4): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.439" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 208.727495][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.870873][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.078868][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.032277][ T36] bridge_slave_1: left allmulticast mode [ 210.048607][ T36] bridge_slave_1: left promiscuous mode [ 210.056397][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.110667][ T36] bridge_slave_0: left allmulticast mode [ 210.139054][ T36] bridge_slave_0: left promiscuous mode [ 210.156493][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.464441][ T7690] vivid-003: ================= START STATUS ================= [ 210.477296][ T7690] vivid-003: Radio HW Seek Mode: Bounded [ 210.483049][ T7690] vivid-003: Radio Programmable HW Seek: false [ 210.516652][ T7692] netlink: 'syz.4.448': attribute type 10 has an invalid length. [ 210.533854][ T7690] vivid-003: RDS Rx I/O Mode: Block I/O [ 210.544367][ T7692] netlink: 230 bytes leftover after parsing attributes in process `syz.4.448'. [ 210.590175][ T7690] vivid-003: Generate RBDS Instead of RDS: false [ 210.603849][ T7690] vivid-003: RDS Reception: true [ 210.619132][ T7690] vivid-003: RDS Program Type: 0 inactive [ 210.640544][ T7690] vivid-003: RDS PS Name: inactive [ 210.667375][ T7690] vivid-003: RDS Radio Text: inactive [ 210.701796][ T7690] vivid-003: RDS Traffic Announcement: false inactive [ 210.721569][ T7690] vivid-003: RDS Traffic Program: false inactive [ 210.744605][ T7690] vivid-003: RDS Music: false inactive [ 210.777577][ T7690] vivid-003: ================== END STATUS ================== [ 211.142253][ T7696] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 211.186474][ T7696] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 211.234034][ T7696] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 211.252188][ T7696] page_type: f5(slab) [ 211.268204][ T7696] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 211.289394][ T7696] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 211.355031][ T7696] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 211.384175][ T7696] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 211.392978][ T7696] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 211.438328][ T7696] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 211.455423][ T7696] page dumped because: unmovable page [ 211.474001][ T7696] page_owner tracks the page as allocated [ 211.486308][ T7696] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 156365534282, free_ts 155670507077 [ 211.513772][ T7696] post_alloc_hook+0x181/0x1b0 [ 211.518847][ T7696] get_page_from_freelist+0x1193/0x39b0 [ 211.525342][ T7696] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 211.531438][ T7696] alloc_pages_mpol+0x1fb/0x550 [ 211.537114][ T7696] new_slab+0x23c/0x330 [ 211.541439][ T7696] ___slab_alloc+0xd9c/0x1940 [ 211.547043][ T7696] __slab_alloc.constprop.0+0x56/0xb0 [ 211.552638][ T7696] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 211.559849][ T7696] kmalloc_reserve+0xef/0x2c0 [ 211.566779][ T7696] __alloc_skb+0x166/0x380 [ 211.574025][ T7696] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 211.588122][ T7696] process_one_work+0x9cc/0x1b70 [ 211.593162][ T7696] worker_thread+0x6c8/0xf10 [ 211.598994][ T7696] kthread+0x3c2/0x780 [ 211.603147][ T7696] ret_from_fork+0x45/0x80 [ 211.608422][ T7696] ret_from_fork_asm+0x1a/0x30 [ 211.613272][ T7696] page last free pid 5856 tgid 5856 stack trace: [ 211.620324][ T7696] __free_frozen_pages+0x69d/0xff0 [ 211.626082][ T7696] __put_partials+0x16d/0x1c0 [ 211.631003][ T7696] qlist_free_all+0x4e/0x120 [ 211.636180][ T7696] kasan_quarantine_reduce+0x195/0x1e0 [ 211.641898][ T7696] __kasan_slab_alloc+0x69/0x90 [ 211.647361][ T7696] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 211.653080][ T7696] getname_flags.part.0+0x48/0x540 [ 211.658811][ T7696] getname_flags+0x93/0xf0 [ 211.663485][ T7696] do_sys_openat2+0xb8/0x1d0 [ 211.670283][ T7696] __x64_sys_openat+0x174/0x210 [ 211.675946][ T7696] do_syscall_64+0xcd/0x260 [ 211.681021][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.725449][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.753328][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.791583][ T36] bond0 (unregistering): Released all slaves [ 211.854521][ T7692] bond0: (slave bond_slave_1): Releasing backup interface [ 212.843798][ T36] hsr_slave_0: left promiscuous mode [ 212.903818][ T36] hsr_slave_1: left promiscuous mode [ 212.937681][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.984066][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.013461][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.033886][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.138426][ T36] veth1_macvtap: left promiscuous mode [ 213.164537][ T36] veth0_macvtap: left promiscuous mode [ 213.170365][ T36] veth1_vlan: left promiscuous mode [ 213.195012][ T36] veth0_vlan: left promiscuous mode [ 215.298232][ T36] team0 (unregistering): Port device team_slave_1 removed [ 215.427835][ T36] team0 (unregistering): Port device team_slave_0 removed [ 216.346523][ T7765] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 216.354538][ T7765] netlink: 230 bytes leftover after parsing attributes in process `syz.0.462'. [ 217.740953][ T7798] Invalid ELF header magic: != ELF [ 217.868434][ T7768] FAULT_INJECTION: forcing a failure. [ 217.868434][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 218.039737][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.1.461 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 218.039776][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.039791][ T7768] Call Trace: [ 218.039799][ T7768] [ 218.039808][ T7768] dump_stack_lvl+0x16c/0x1f0 [ 218.039848][ T7768] should_fail_ex+0x512/0x640 [ 218.039880][ T7768] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 218.039915][ T7768] should_failslab+0xc2/0x120 [ 218.039939][ T7768] __kmalloc_cache_noprof+0x6a/0x3e0 [ 218.039972][ T7768] ? cgroup_file_open+0x93/0x360 [ 218.040005][ T7768] cgroup_file_open+0x93/0x360 [ 218.040030][ T7768] ? __pfx_cgroup_file_open+0x10/0x10 [ 218.040060][ T7768] kernfs_fop_open+0x8c6/0xda0 [ 218.040092][ T7768] ? file_set_fsnotify_mode_from_watchers+0xf1/0x640 [ 218.040132][ T7768] do_dentry_open+0x741/0x1c10 [ 218.040167][ T7768] ? __pfx_kernfs_fop_open+0x10/0x10 [ 218.040203][ T7768] vfs_open+0x82/0x3f0 [ 218.040231][ T7768] path_openat+0x1e5e/0x2d40 [ 218.040277][ T7768] ? __pfx_path_openat+0x10/0x10 [ 218.040320][ T7768] do_filp_open+0x20b/0x470 [ 218.040355][ T7768] ? __pfx_do_filp_open+0x10/0x10 [ 218.040412][ T7768] ? _raw_spin_unlock+0x28/0x50 [ 218.040440][ T7768] ? alloc_fd+0x471/0x7d0 [ 218.040482][ T7768] do_sys_openat2+0x11b/0x1d0 [ 218.040510][ T7768] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.040561][ T7768] __x64_sys_open+0x153/0x1e0 [ 218.040597][ T7768] ? __pfx___x64_sys_open+0x10/0x10 [ 218.040650][ T7768] ? rcu_is_watching+0x12/0xc0 [ 218.040696][ T7768] do_syscall_64+0xcd/0x260 [ 218.040749][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.040783][ T7768] RIP: 0033:0x7f0aa3f8d169 [ 218.040810][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.040844][ T7768] RSP: 002b:00007f0aa4e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 218.040875][ T7768] RAX: ffffffffffffffda RBX: 00007f0aa41a6080 RCX: 00007f0aa3f8d169 [ 218.040897][ T7768] RDX: 0000000000000007 RSI: 0000000000101800 RDI: 0000200000000000 [ 218.040918][ T7768] RBP: 00007f0aa400e990 R08: 0000000000000000 R09: 0000000000000000 [ 218.040937][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.040957][ T7768] R13: 0000000000000000 R14: 00007f0aa41a6080 R15: 00007ffc11437ba8 [ 218.041002][ T7768] [ 218.421760][ T7816] FAULT_INJECTION: forcing a failure. [ 218.421760][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 218.555068][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.2.468 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 218.555115][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.555134][ T7816] Call Trace: [ 218.555145][ T7816] [ 218.555157][ T7816] dump_stack_lvl+0x16c/0x1f0 [ 218.555209][ T7816] should_fail_ex+0x512/0x640 [ 218.555246][ T7816] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 218.555300][ T7816] should_failslab+0xc2/0x120 [ 218.555330][ T7816] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 218.555381][ T7816] ? ioctx_alloc+0x1a4/0x2060 [ 218.555425][ T7816] ? __lock_acquire+0xaa4/0x1ba0 [ 218.555480][ T7816] ioctx_alloc+0x1a4/0x2060 [ 218.555523][ T7816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.555585][ T7816] ? find_held_lock+0x2b/0x80 [ 218.555626][ T7816] ? __pfx_ioctx_alloc+0x10/0x10 [ 218.555668][ T7816] ? __might_fault+0x13b/0x190 [ 218.555727][ T7816] __x64_sys_io_setup+0xc9/0x210 [ 218.555787][ T7816] do_syscall_64+0xcd/0x260 [ 218.555839][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.555872][ T7816] RIP: 0033:0x7ff2f3f8d169 [ 218.555895][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.555927][ T7816] RSP: 002b:00007ff2f4e8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 218.555955][ T7816] RAX: ffffffffffffffda RBX: 00007ff2f41a5fa0 RCX: 00007ff2f3f8d169 [ 218.555974][ T7816] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 218.555992][ T7816] RBP: 00007ff2f4e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 218.556009][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.556026][ T7816] R13: 0000000000000000 R14: 00007ff2f41a5fa0 R15: 00007ffcc2ffe308 [ 218.556065][ T7816] [ 220.047826][ T7841] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 220.142721][ T7841] netlink: 230 bytes leftover after parsing attributes in process `syz.0.473'. [ 220.553851][ T7857] vivid-003: ================= START STATUS ================= [ 220.593707][ T7857] vivid-003: Radio HW Seek Mode: Bounded [ 220.599463][ T7857] vivid-003: Radio Programmable HW Seek: false [ 220.651867][ T7857] vivid-003: RDS Rx I/O Mode: Block I/O [ 220.667859][ T7857] vivid-003: Generate RBDS Instead of RDS: false [ 220.695246][ T7857] vivid-003: RDS Reception: true [ 220.700338][ T7857] vivid-003: RDS Program Type: 0 inactive [ 220.713777][ T7857] vivid-003: RDS PS Name: inactive [ 220.729360][ T7857] vivid-003: RDS Radio Text: inactive [ 220.744985][ T7857] vivid-003: RDS Traffic Announcement: false inactive [ 220.782515][ T7857] vivid-003: RDS Traffic Program: false inactive [ 220.838061][ T7857] vivid-003: RDS Music: false inactive [ 220.893703][ T7857] vivid-003: ================== END STATUS ================== [ 221.264860][ T7862] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 221.311424][ T7862] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.324871][ T30] audit: type=1800 audit(6039318755.445:5): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.480" name="discovery_nqn" dev="configfs" ino=17645 res=0 errno=0 [ 221.342716][ T7862] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 221.439614][ T7862] page_type: f5(slab) [ 221.456732][ T7862] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 221.513901][ T7862] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 221.603018][ T7862] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 221.620800][ T7862] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 221.659643][ T7862] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 221.685228][ T7862] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.703749][ T7862] page dumped because: unmovable page [ 221.709306][ T7862] page_owner tracks the page as allocated [ 221.735492][ T7862] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 156365534282, free_ts 155670507077 [ 221.780179][ T7862] post_alloc_hook+0x181/0x1b0 [ 221.786094][ T7862] get_page_from_freelist+0x1193/0x39b0 [ 221.791850][ T7862] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 221.799707][ T7860] FAULT_INJECTION: forcing a failure. [ 221.799707][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 221.802898][ T7862] alloc_pages_mpol+0x1fb/0x550 [ 221.829288][ T7862] new_slab+0x23c/0x330 [ 221.833991][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.2.479 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 221.834038][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.834057][ T7860] Call Trace: [ 221.834068][ T7860] [ 221.834081][ T7860] dump_stack_lvl+0x16c/0x1f0 [ 221.834135][ T7860] should_fail_ex+0x512/0x640 [ 221.834174][ T7860] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 221.834240][ T7860] should_failslab+0xc2/0x120 [ 221.834272][ T7860] __kmalloc_cache_noprof+0x6a/0x3e0 [ 221.834316][ T7860] ? cgroup_file_open+0x93/0x360 [ 221.834381][ T7860] cgroup_file_open+0x93/0x360 [ 221.834419][ T7860] ? __pfx_cgroup_file_open+0x10/0x10 [ 221.834461][ T7860] kernfs_fop_open+0x8c6/0xda0 [ 221.834504][ T7860] ? file_set_fsnotify_mode_from_watchers+0xf1/0x640 [ 221.834560][ T7860] do_dentry_open+0x741/0x1c10 [ 221.834611][ T7860] ? __pfx_kernfs_fop_open+0x10/0x10 [ 221.834664][ T7860] vfs_open+0x82/0x3f0 [ 221.834705][ T7860] path_openat+0x1e5e/0x2d40 [ 221.834771][ T7860] ? __pfx_path_openat+0x10/0x10 [ 221.834833][ T7860] do_filp_open+0x20b/0x470 [ 221.834885][ T7860] ? __pfx_do_filp_open+0x10/0x10 [ 221.834966][ T7860] ? _raw_spin_unlock+0x28/0x50 [ 221.835007][ T7860] ? alloc_fd+0x471/0x7d0 [ 221.835069][ T7860] do_sys_openat2+0x11b/0x1d0 [ 221.835111][ T7860] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.835166][ T7860] __x64_sys_open+0x153/0x1e0 [ 221.835212][ T7860] ? __pfx___x64_sys_open+0x10/0x10 [ 221.835261][ T7860] ? rcu_is_watching+0x12/0xc0 [ 221.835311][ T7860] do_syscall_64+0xcd/0x260 [ 221.835366][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.835401][ T7860] RIP: 0033:0x7ff2f3f8d169 [ 221.835429][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.835463][ T7860] RSP: 002b:00007ff2f4e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 221.835493][ T7860] RAX: ffffffffffffffda RBX: 00007ff2f41a5fa0 RCX: 00007ff2f3f8d169 [ 221.835513][ T7860] RDX: 0000000000000007 RSI: 0000000000101800 RDI: 0000200000000000 [ 221.835533][ T7860] RBP: 00007ff2f400e990 R08: 0000000000000000 R09: 0000000000000000 [ 221.835552][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.835571][ T7860] R13: 0000000000000000 R14: 00007ff2f41a5fa0 R15: 00007ffcc2ffe308 [ 221.835613][ T7860] [ 221.867155][ T7862] ___slab_alloc+0xd9c/0x1940 [ 222.047955][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 222.090220][ T7862] __slab_alloc.constprop.0+0x56/0xb0 [ 222.148105][ T7862] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 222.155798][ T7862] kmalloc_reserve+0xef/0x2c0 [ 222.162365][ T7862] __alloc_skb+0x166/0x380 [ 222.211813][ T7862] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 222.229376][ T7862] process_one_work+0x9cc/0x1b70 [ 222.251562][ T7862] worker_thread+0x6c8/0xf10 [ 222.273197][ T7862] kthread+0x3c2/0x780 [ 222.290069][ T7862] ret_from_fork+0x45/0x80 [ 222.304013][ T7862] ret_from_fork_asm+0x1a/0x30 [ 222.308984][ T7862] page last free pid 5856 tgid 5856 stack trace: [ 222.329994][ T7862] __free_frozen_pages+0x69d/0xff0 [ 222.343443][ T7862] __put_partials+0x16d/0x1c0 [ 222.349605][ T7862] qlist_free_all+0x4e/0x120 [ 222.355884][ T7862] kasan_quarantine_reduce+0x195/0x1e0 [ 222.361510][ T7862] __kasan_slab_alloc+0x69/0x90 [ 222.367044][ T7862] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 222.372619][ T7862] getname_flags.part.0+0x48/0x540 [ 222.378422][ T7862] getname_flags+0x93/0xf0 [ 222.382930][ T7862] do_sys_openat2+0xb8/0x1d0 [ 222.388149][ T7862] __x64_sys_openat+0x174/0x210 [ 222.393205][ T7862] do_syscall_64+0xcd/0x260 [ 222.399894][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.607984][ T7898] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 224.428698][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 224.493871][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.728906][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.412378][ T7967] kAFS: Invalid Command on /proc/fs/afs/cells file [ 227.668168][ T7996] netlink: set zone limit has 8 unknown bytes [ 228.830508][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 229.835979][ T8043] FAULT_INJECTION: forcing a failure. [ 229.835979][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 229.867691][ T8043] CPU: 0 UID: 0 PID: 8043 Comm: syz.2.502 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 229.867732][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.867750][ T8043] Call Trace: [ 229.867759][ T8043] [ 229.867770][ T8043] dump_stack_lvl+0x16c/0x1f0 [ 229.867819][ T8043] should_fail_ex+0x512/0x640 [ 229.867853][ T8043] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 229.867904][ T8043] should_failslab+0xc2/0x120 [ 229.867932][ T8043] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 229.867976][ T8043] ? trace_cap_capable+0x18d/0x200 [ 229.868005][ T8043] ? create_new_namespaces+0x30/0xad0 [ 229.868055][ T8043] create_new_namespaces+0x30/0xad0 [ 229.868097][ T8043] ? bpf_lsm_capable+0x9/0x10 [ 229.868141][ T8043] ? security_capable+0x7e/0x260 [ 229.868174][ T8043] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 229.868222][ T8043] ksys_unshare+0x45b/0xa40 [ 229.868269][ T8043] ? __pfx_ksys_unshare+0x10/0x10 [ 229.868315][ T8043] ? ksys_write+0x1b9/0x240 [ 229.868370][ T8043] __x64_sys_unshare+0x31/0x40 [ 229.868415][ T8043] do_syscall_64+0xcd/0x260 [ 229.868468][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.868500][ T8043] RIP: 0033:0x7ff2f3f8d169 [ 229.868524][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.868552][ T8043] RSP: 002b:00007ff2f4e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 229.868580][ T8043] RAX: ffffffffffffffda RBX: 00007ff2f41a5fa0 RCX: 00007ff2f3f8d169 [ 229.868598][ T8043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 229.868615][ T8043] RBP: 00007ff2f4e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.868631][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.868648][ T8043] R13: 0000000000000001 R14: 00007ff2f41a5fa0 R15: 00007ffcc2ffe308 [ 229.868684][ T8043] [ 230.062350][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.094578][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 230.141074][ T8045] vivid-003: ================= START STATUS ================= [ 230.213319][ T8045] vivid-003: Radio HW Seek Mode: Bounded [ 230.244696][ T8045] vivid-003: Radio Programmable HW Seek: false [ 230.321842][ T8045] vivid-003: RDS Rx I/O Mode: Block I/O [ 230.342785][ T8045] vivid-003: Generate RBDS Instead of RDS: false [ 230.377324][ T8045] vivid-003: RDS Reception: true [ 230.393129][ T8045] vivid-003: RDS Program Type: 0 inactive [ 230.430113][ T8045] vivid-003: RDS PS Name: inactive [ 230.443719][ T8045] vivid-003: RDS Radio Text: inactive [ 230.453696][ T8045] vivid-003: RDS Traffic Announcement: false inactive [ 230.483933][ T8045] vivid-003: RDS Traffic Program: false inactive [ 230.490386][ T8045] vivid-003: RDS Music: false inactive [ 230.533777][ T8045] vivid-003: ================== END STATUS ================== [ 234.917235][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'. [ 235.537965][ T8155] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 235.821054][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.535'. [ 236.649149][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 237.409308][ T8211] FAULT_INJECTION: forcing a failure. [ 237.409308][ T8211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.433842][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.0.549 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 237.433891][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.433911][ T8211] Call Trace: [ 237.433921][ T8211] [ 237.433933][ T8211] dump_stack_lvl+0x16c/0x1f0 [ 237.433989][ T8211] should_fail_ex+0x512/0x640 [ 237.434034][ T8211] _copy_from_user+0x2e/0xd0 [ 237.434089][ T8211] copy_msghdr_from_user+0x98/0x160 [ 237.434135][ T8211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.434201][ T8211] ___sys_sendmsg+0xfe/0x1d0 [ 237.434248][ T8211] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.434345][ T8211] __sys_sendmsg+0x16d/0x220 [ 237.434391][ T8211] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.434449][ T8211] ? rcu_is_watching+0x12/0xc0 [ 237.434503][ T8211] do_syscall_64+0xcd/0x260 [ 237.434556][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.434590][ T8211] RIP: 0033:0x7f000518d169 [ 237.434617][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.434649][ T8211] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.434680][ T8211] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 237.434702][ T8211] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 237.434722][ T8211] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 237.434742][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.434761][ T8211] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 237.434804][ T8211] [ 237.722419][ T8207] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe0fa80 pfn:0x7fe0c [ 237.733565][ T8207] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 237.741682][ T8207] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 237.752520][ T8207] raw: ffff88807fe0fa80 0000000000000000 00000001ffffffff 0000000000000000 [ 237.763418][ T8207] page dumped because: unmovable page [ 237.769622][ T8207] page_owner tracks the page as allocated [ 237.775857][ T8207] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92800(GFP_NOWAIT|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 6089, tgid 6089 (syz.0.34), ts 108203902480, free_ts 108161228467 [ 237.796339][ T8207] register_dummy_stack+0x89/0xd0 [ 237.801449][ T8207] init_page_owner+0x48/0xc30 [ 237.806476][ T8207] page_ext_init+0x6b8/0xab0 [ 237.811181][ T8207] mm_core_init+0x13c/0x220 [ 237.817179][ T8207] page last free pid 6090 tgid 6090 stack trace: [ 237.823549][ T8207] __free_frozen_pages+0x69d/0xff0 [ 237.833049][ T8207] __put_partials+0x16d/0x1c0 [ 237.838127][ T8207] qlist_free_all+0x4e/0x120 [ 237.842828][ T8207] kasan_quarantine_reduce+0x195/0x1e0 [ 237.850584][ T8207] __kasan_slab_alloc+0x69/0x90 [ 237.855599][ T8207] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 237.861057][ T8207] snd_seq_port_connect+0x61/0x550 [ 237.866672][ T8207] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 237.872683][ T8207] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 237.878497][ T8207] snd_seq_oss_midi_open+0x564/0x660 [ 237.884648][ T8207] snd_seq_oss_synth_reset+0x437/0x880 [ 237.890217][ T8207] snd_seq_oss_reset+0x73/0x290 [ 237.895930][ T8207] snd_seq_oss_release+0x7c/0x180 [ 237.901111][ T8207] odev_release+0x4c/0x70 [ 237.908833][ T8207] __fput+0x3ff/0xb70 [ 237.912920][ T8207] task_work_run+0x14d/0x240 [ 238.234782][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.551'. [ 238.301779][ T8230] ipvlan1: entered allmulticast mode [ 238.323799][ T8230] veth0_vlan: entered allmulticast mode [ 238.336647][ T8233] netlink: 330 bytes leftover after parsing attributes in process `syz.4.551'. [ 238.455761][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 239.236685][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.553'. [ 240.366391][ T8274] capability: warning: `syz.4.561' uses 32-bit capabilities (legacy support in use) [ 240.827466][ T8290] HfR: entered promiscuous mode [ 241.087836][ T30] audit: type=1800 audit(6039318781.210:6): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.563" name="discovery_nqn" dev="configfs" ino=18314 res=0 errno=0 [ 241.487301][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 243.001203][ T8337] FAULT_INJECTION: forcing a failure. [ 243.001203][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 243.057686][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: syz.1.573 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 243.057734][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.057763][ T8337] Call Trace: [ 243.057774][ T8337] [ 243.057787][ T8337] dump_stack_lvl+0x16c/0x1f0 [ 243.057841][ T8337] should_fail_ex+0x512/0x640 [ 243.057878][ T8337] ? fs_reclaim_acquire+0xae/0x150 [ 243.057920][ T8337] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 243.057965][ T8337] should_failslab+0xc2/0x120 [ 243.057996][ T8337] __kmalloc_noprof+0xd2/0x510 [ 243.058057][ T8337] tomoyo_realpath_from_path+0xc2/0x6e0 [ 243.058115][ T8337] tomoyo_check_open_permission+0x2ab/0x3c0 [ 243.058157][ T8337] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 243.058240][ T8337] ? do_raw_spin_lock+0x12c/0x2b0 [ 243.058290][ T8337] tomoyo_file_open+0x6b/0x90 [ 243.058343][ T8337] security_file_open+0x84/0x1e0 [ 243.058388][ T8337] do_dentry_open+0x596/0x1c10 [ 243.058448][ T8337] vfs_open+0x82/0x3f0 [ 243.058486][ T8337] path_openat+0x1e5e/0x2d40 [ 243.058548][ T8337] ? __pfx_path_openat+0x10/0x10 [ 243.058616][ T8337] do_filp_open+0x20b/0x470 [ 243.058665][ T8337] ? __pfx_do_filp_open+0x10/0x10 [ 243.058744][ T8337] ? alloc_fd+0x471/0x7d0 [ 243.058801][ T8337] do_sys_openat2+0x11b/0x1d0 [ 243.058835][ T8337] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.058874][ T8337] ? __fget_files+0x20e/0x3c0 [ 243.058928][ T8337] __x64_sys_openat+0x174/0x210 [ 243.058962][ T8337] ? __pfx___x64_sys_openat+0x10/0x10 [ 243.058996][ T8337] ? ksys_write+0x1b9/0x240 [ 243.059041][ T8337] ? rcu_is_watching+0x12/0xc0 [ 243.059094][ T8337] do_syscall_64+0xcd/0x260 [ 243.059146][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.059178][ T8337] RIP: 0033:0x7f0aa3f8d169 [ 243.059203][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.059235][ T8337] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.059266][ T8337] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 243.059288][ T8337] RDX: 0000000000008100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 243.059308][ T8337] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 243.059327][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.059345][ T8337] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 243.059388][ T8337] [ 243.059400][ T8337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.891758][ T30] audit: type=1800 audit(6039318784.000:7): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.572" name="discovery_nqn" dev="configfs" ino=18352 res=0 errno=0 [ 244.041683][ T8363] device-mapper: ioctl: Unable to rename non-existent device, to [ 244.117755][ T8363] block2mtd: error: cannot open device  [ 245.861193][ T8392] FAULT_INJECTION: forcing a failure. [ 245.861193][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.000463][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.2.582 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 246.000509][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.000528][ T8392] Call Trace: [ 246.000539][ T8392] [ 246.000550][ T8392] dump_stack_lvl+0x16c/0x1f0 [ 246.000603][ T8392] should_fail_ex+0x512/0x640 [ 246.000651][ T8392] _copy_from_user+0x2e/0xd0 [ 246.000697][ T8392] copy_msghdr_from_user+0x98/0x160 [ 246.000744][ T8392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 246.000797][ T8392] ? __pfx__kstrtoull+0x10/0x10 [ 246.000856][ T8392] ___sys_sendmsg+0xfe/0x1d0 [ 246.000902][ T8392] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.000966][ T8392] ? find_held_lock+0x2b/0x80 [ 246.001036][ T8392] __sys_sendmmsg+0x200/0x420 [ 246.001086][ T8392] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.001144][ T8392] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.001222][ T8392] ? fput+0x70/0xf0 [ 246.001256][ T8392] ? ksys_write+0x1b9/0x240 [ 246.001302][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 246.001346][ T8392] ? rcu_is_watching+0x12/0xc0 [ 246.001393][ T8392] __x64_sys_sendmmsg+0x9c/0x100 [ 246.001437][ T8392] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.001482][ T8392] do_syscall_64+0xcd/0x260 [ 246.001536][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.001571][ T8392] RIP: 0033:0x7ff2f3f8d169 [ 246.001597][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.001630][ T8392] RSP: 002b:00007ff2f4e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.001662][ T8392] RAX: ffffffffffffffda RBX: 00007ff2f41a5fa0 RCX: 00007ff2f3f8d169 [ 246.001684][ T8392] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 246.001704][ T8392] RBP: 00007ff2f4e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.001725][ T8392] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 246.001744][ T8392] R13: 0000000000000000 R14: 00007ff2f41a5fa0 R15: 00007ffcc2ffe308 [ 246.001786][ T8392] [ 249.516840][ T8454] HfR: entered promiscuous mode [ 249.928592][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 250.051023][ T8464] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 252.483032][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 253.037476][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 258.595787][ T8605] netlink: set zone limit has 4 unknown bytes [ 259.074376][ T30] audit: type=1800 audit(4294967300.860:8): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.634" name="discovery_nqn" dev="configfs" ino=19825 res=0 errno=0 [ 259.135221][ T8620] FAULT_INJECTION: forcing a failure. [ 259.135221][ T8620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.183685][ T8620] CPU: 1 UID: 0 PID: 8620 Comm: syz.0.636 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 259.183739][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.183760][ T8620] Call Trace: [ 259.183773][ T8620] [ 259.183785][ T8620] dump_stack_lvl+0x16c/0x1f0 [ 259.183844][ T8620] should_fail_ex+0x512/0x640 [ 259.183893][ T8620] _copy_from_iter+0x2a4/0x15b0 [ 259.183946][ T8620] ? __alloc_skb+0x200/0x380 [ 259.184005][ T8620] ? __pfx__copy_from_iter+0x10/0x10 [ 259.184057][ T8620] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 259.184112][ T8620] ? __lock_acquire+0xaa4/0x1ba0 [ 259.184187][ T8620] netlink_sendmsg+0x829/0xdd0 [ 259.184253][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.184329][ T8620] ____sys_sendmsg+0xa95/0xc70 [ 259.184394][ T8620] ? copy_msghdr_from_user+0x10a/0x160 [ 259.184441][ T8620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.184528][ T8620] ___sys_sendmsg+0x134/0x1d0 [ 259.184582][ T8620] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.184695][ T8620] __sys_sendmsg+0x16d/0x220 [ 259.184746][ T8620] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.184812][ T8620] ? rcu_is_watching+0x12/0xc0 [ 259.184873][ T8620] do_syscall_64+0xcd/0x260 [ 259.184934][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.184974][ T8620] RIP: 0033:0x7f000518d169 [ 259.185012][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.185050][ T8620] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.185087][ T8620] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 259.185111][ T8620] RDX: 0000000020004000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 259.185134][ T8620] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 259.185157][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.185179][ T8620] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 259.185227][ T8620] [ 260.205826][ T8623] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 260.750099][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.756571][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.416732][ T8655] netlink: set zone limit has 4 unknown bytes [ 262.829042][ T8668] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 262.918692][ T5854] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 263.554293][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. syzkaller syzkaller login: [ 264.582619][ T8706] FAULT_INJECTION: forcing a failure. [ 264.582619][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.659324][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.1.658 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 264.659375][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.659394][ T8706] Call Trace: [ 264.659403][ T8706] [ 264.659415][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 264.659465][ T8706] should_fail_ex+0x512/0x640 [ 264.659507][ T8706] _copy_to_user+0x32/0xd0 [ 264.659551][ T8706] simple_read_from_buffer+0xcb/0x170 [ 264.659598][ T8706] proc_fail_nth_read+0x197/0x270 [ 264.659642][ T8706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.659689][ T8706] ? rw_verify_area+0xcf/0x680 [ 264.659725][ T8706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.659768][ T8706] vfs_read+0x1de/0xc70 [ 264.659817][ T8706] ? __pfx___mutex_lock+0x10/0x10 [ 264.659862][ T8706] ? __pfx_vfs_read+0x10/0x10 [ 264.659915][ T8706] ? __fget_files+0x20e/0x3c0 [ 264.659974][ T8706] ksys_read+0x12a/0x240 [ 264.660016][ T8706] ? __pfx_ksys_read+0x10/0x10 [ 264.660057][ T8706] ? rcu_is_watching+0x12/0xc0 [ 264.660108][ T8706] do_syscall_64+0xcd/0x260 [ 264.660156][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.660187][ T8706] RIP: 0033:0x7f0aa3f8bb7c [ 264.660212][ T8706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.660243][ T8706] RSP: 002b:00007f0aa4e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.660277][ T8706] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8bb7c [ 264.660298][ T8706] RDX: 000000000000000f RSI: 00007f0aa4e770a0 RDI: 0000000000000004 [ 264.660316][ T8706] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 264.660336][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.660362][ T8706] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 264.660404][ T8706] [ 265.503750][ T30] audit: type=1800 audit(4294967307.280:9): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.660" name="discovery_nqn" dev="configfs" ino=20077 res=0 errno=0 [ 265.882548][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 266.752046][ T30] audit: type=1800 audit(4294967308.530:10): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.669" name="dummy_udc" dev="gadgetfs" ino=6027 res=0 errno=0 [ 267.109214][ T8758] netlink: 86 bytes leftover after parsing attributes in process `syz.2.673'. [ 267.584014][ T8768] ======================================================= [ 267.584014][ T8768] WARNING: The mand mount option has been deprecated and [ 267.584014][ T8768] and is ignored by this kernel. Remove the mand [ 267.584014][ T8768] option from the mount to silence this warning. [ 267.584014][ T8768] ======================================================= [ 268.446419][ T8781] FAULT_INJECTION: forcing a failure. [ 268.446419][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 268.471784][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.0.688 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 268.471832][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.471853][ T8781] Call Trace: [ 268.471863][ T8781] [ 268.471876][ T8781] dump_stack_lvl+0x16c/0x1f0 [ 268.471942][ T8781] should_fail_ex+0x512/0x640 [ 268.471981][ T8781] ? fs_reclaim_acquire+0xae/0x150 [ 268.472027][ T8781] should_failslab+0xc2/0x120 [ 268.472059][ T8781] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 268.472112][ T8781] ? security_inode_alloc+0x3b/0x2b0 [ 268.472156][ T8781] security_inode_alloc+0x3b/0x2b0 [ 268.472196][ T8781] inode_init_always_gfp+0xce4/0x1030 [ 268.472255][ T8781] alloc_inode+0x86/0x240 [ 268.472294][ T8781] sock_alloc+0x40/0x280 [ 268.472345][ T8781] __sock_create+0xc1/0x8d0 [ 268.472386][ T8781] __sys_socket+0x14d/0x260 [ 268.472415][ T8781] ? fput+0x70/0xf0 [ 268.472446][ T8781] ? __pfx___sys_socket+0x10/0x10 [ 268.472477][ T8781] ? ksys_write+0x1b9/0x240 [ 268.472523][ T8781] ? __pfx_ksys_write+0x10/0x10 [ 268.472580][ T8781] __x64_sys_socket+0x72/0xb0 [ 268.472612][ T8781] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.472659][ T8781] do_syscall_64+0xcd/0x260 [ 268.472712][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.472746][ T8781] RIP: 0033:0x7f000518d169 [ 268.472772][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.472806][ T8781] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 268.472837][ T8781] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 268.472860][ T8781] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 268.472880][ T8781] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 268.472906][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.472927][ T8781] R13: 0000000000000001 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 268.472970][ T8781] [ 268.473012][ T8781] socket: no more sockets [ 268.704875][ T8783] Invalid input. Must be >= 4608 [ 271.162875][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 271.194581][ T8786] usbip-vudc usbip-vudc.0: gadget not bound [ 272.956104][ T8814] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 274.138253][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 277.784128][ T8872] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 279.504842][ T8902] vivid-003: ================= START STATUS ================= [ 279.554031][ T8902] vivid-003: Radio HW Seek Mode: Bounded [ 279.570888][ T8902] vivid-003: Radio Programmable HW Seek: false [ 279.610573][ T8902] vivid-003: RDS Rx I/O Mode: Block I/O [ 279.658461][ T8902] vivid-003: Generate RBDS Instead of RDS: false [ 279.710375][ T8902] vivid-003: RDS Reception: true [ 279.792966][ T8908] FAULT_INJECTION: forcing a failure. [ 279.792966][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 279.810127][ T8902] vivid-003: RDS Program Type: 0 inactive [ 279.864903][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.1.714 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 279.864946][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.864963][ T8908] Call Trace: [ 279.864973][ T8908] [ 279.864985][ T8908] dump_stack_lvl+0x16c/0x1f0 [ 279.865034][ T8908] should_fail_ex+0x512/0x640 [ 279.865070][ T8908] ? fs_reclaim_acquire+0xae/0x150 [ 279.865108][ T8908] ? tomoyo_encode2+0x100/0x3e0 [ 279.865147][ T8908] should_failslab+0xc2/0x120 [ 279.865174][ T8908] __kmalloc_noprof+0xd2/0x510 [ 279.865228][ T8908] tomoyo_encode2+0x100/0x3e0 [ 279.865274][ T8908] tomoyo_encode+0x29/0x50 [ 279.865314][ T8908] tomoyo_realpath_from_path+0x18f/0x6e0 [ 279.865362][ T8908] ? tomoyo_profile+0x47/0x60 [ 279.865412][ T8908] tomoyo_path_number_perm+0x245/0x580 [ 279.865448][ T8908] ? tomoyo_path_number_perm+0x237/0x580 [ 279.865487][ T8908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.865524][ T8908] ? find_held_lock+0x2b/0x80 [ 279.865599][ T8908] ? find_held_lock+0x2b/0x80 [ 279.865635][ T8908] ? hook_file_ioctl_common+0x145/0x410 [ 279.865677][ T8908] ? __fget_files+0x20e/0x3c0 [ 279.865728][ T8908] security_file_ioctl+0x9b/0x240 [ 279.865768][ T8908] __x64_sys_ioctl+0xb7/0x200 [ 279.865808][ T8908] do_syscall_64+0xcd/0x260 [ 279.865857][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.865906][ T8908] RIP: 0033:0x7f0aa3f8d169 [ 279.865930][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.865960][ T8908] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.865988][ T8908] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 279.866007][ T8908] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 279.866025][ T8908] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 279.866042][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.866059][ T8908] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 279.866103][ T8908] [ 279.866600][ T8908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.883978][ T8902] vivid-003: RDS PS Name: inactive [ 280.090507][ T8902] vivid-003: RDS Radio Text: inactive [ 280.096144][ T8902] vivid-003: RDS Traffic Announcement: false inactive [ 280.102996][ T8902] vivid-003: RDS Traffic Program: false inactive [ 280.109495][ T8902] vivid-003: RDS Music: false inactive [ 280.115077][ T8902] vivid-003: ================== END STATUS ================== [ 281.515969][ T8905] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 281.569120][ T8905] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.652322][ T8905] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 281.744730][ T8933] FAULT_INJECTION: forcing a failure. [ 281.744730][ T8933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.763875][ T8905] page_type: f5(slab) [ 281.767976][ T8905] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 281.803799][ T8933] CPU: 1 UID: 0 PID: 8933 Comm: syz.1.721 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 281.803847][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.803866][ T8933] Call Trace: [ 281.803877][ T8933] [ 281.803890][ T8933] dump_stack_lvl+0x16c/0x1f0 [ 281.803945][ T8933] should_fail_ex+0x512/0x640 [ 281.803999][ T8933] strncpy_from_user+0x3b/0x2e0 [ 281.804037][ T8933] getname_flags.part.0+0x8b/0x540 [ 281.804080][ T8933] getname_flags+0x93/0xf0 [ 281.804124][ T8933] do_sys_openat2+0xb8/0x1d0 [ 281.804161][ T8933] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.804203][ T8933] ? __fget_files+0x20e/0x3c0 [ 281.804261][ T8933] __x64_sys_openat+0x174/0x210 [ 281.804299][ T8933] ? __pfx___x64_sys_openat+0x10/0x10 [ 281.804334][ T8933] ? ksys_write+0x1b9/0x240 [ 281.804397][ T8933] do_syscall_64+0xcd/0x260 [ 281.804450][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.804485][ T8933] RIP: 0033:0x7f0aa3f8d169 [ 281.804512][ T8933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.804546][ T8933] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.804577][ T8933] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 281.804598][ T8933] RDX: 0000000000048140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 281.804619][ T8933] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 281.804639][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.804658][ T8933] R13: 0000000000000001 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 281.804701][ T8933] [ 281.883955][ T8905] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 281.992259][ T8905] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 282.002813][ T8905] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 282.012500][ T8905] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 282.022752][ T8905] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 282.032081][ T8905] page dumped because: unmovable page [ 282.037610][ T8905] page_owner tracks the page as allocated [ 282.043382][ T8905] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 62, tgid 62 (kworker/u8:4), ts 264034432397, free_ts 263778840404 [ 282.064180][ T8905] post_alloc_hook+0x181/0x1b0 [ 282.069041][ T8905] get_page_from_freelist+0x1193/0x39b0 [ 282.074753][ T8905] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 282.080735][ T8905] alloc_pages_mpol+0x1fb/0x550 [ 282.085757][ T8905] new_slab+0x23c/0x330 [ 282.089997][ T8905] ___slab_alloc+0xd9c/0x1940 [ 282.094979][ T8905] __slab_alloc.constprop.0+0x56/0xb0 [ 282.100432][ T8905] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 282.107151][ T8905] kmalloc_reserve+0xef/0x2c0 [ 282.111924][ T8905] __alloc_skb+0x166/0x380 [ 282.117318][ T8905] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 282.123043][ T8905] process_one_work+0x9cc/0x1b70 [ 282.128500][ T8905] worker_thread+0x6c8/0xf10 [ 282.199737][ T8905] kthread+0x3c2/0x780 [ 282.293794][ T8905] ret_from_fork+0x45/0x80 [ 282.298411][ T8905] ret_from_fork_asm+0x1a/0x30 [ 282.303273][ T8905] page last free pid 5839 tgid 5839 stack trace: [ 282.342506][ T8905] __free_frozen_pages+0x69d/0xff0 [ 282.349318][ T8905] qlist_free_all+0x4e/0x120 [ 282.381968][ T8905] kasan_quarantine_reduce+0x195/0x1e0 [ 282.468417][ T8905] __kasan_slab_alloc+0x69/0x90 [ 282.473403][ T8905] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 282.557844][ T8905] ptlock_alloc+0x1f/0x70 [ 282.603904][ T8905] pte_alloc_one+0x6d/0x380 [ 282.608527][ T8905] __pte_alloc+0x6d/0x3c0 [ 282.640459][ T8905] copy_page_range+0x39a7/0x5ec0 [ 282.657499][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 282.686268][ T8905] copy_process+0x862b/0x91a0 [ 282.703666][ T8905] kernel_clone+0xfc/0x960 [ 282.759254][ T8905] __do_sys_clone+0xce/0x120 [ 282.791890][ T8905] do_syscall_64+0xcd/0x260 [ 282.807188][ T8942] ima: policy update failed [ 282.815266][ T30] audit: type=1802 audit(4294967312.600:11): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.725" res=0 errno=0 [ 282.863984][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.962494][ T8955] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 284.748462][ T8969] netlink: 330 bytes leftover after parsing attributes in process `syz.1.739'. [ 286.426749][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 287.435771][ T9002] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 287.455134][ T9002] netlink: 230 bytes leftover after parsing attributes in process `syz.1.743'. [ 290.906113][ T9082] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 292.060143][ T9107] FAULT_INJECTION: forcing a failure. [ 292.060143][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 292.060509][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 292.101558][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.0.762 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 292.101621][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.101641][ T9107] Call Trace: [ 292.101652][ T9107] [ 292.101664][ T9107] dump_stack_lvl+0x16c/0x1f0 [ 292.101720][ T9107] should_fail_ex+0x512/0x640 [ 292.101766][ T9107] ? fs_reclaim_acquire+0xae/0x150 [ 292.101811][ T9107] ? tomoyo_encode2+0x100/0x3e0 [ 292.101855][ T9107] should_failslab+0xc2/0x120 [ 292.101888][ T9107] __kmalloc_noprof+0xd2/0x510 [ 292.101939][ T9107] ? d_absolute_path+0x136/0x1a0 [ 292.101984][ T9107] tomoyo_encode2+0x100/0x3e0 [ 292.102038][ T9107] tomoyo_encode+0x29/0x50 [ 292.102103][ T9107] tomoyo_realpath_from_path+0x18f/0x6e0 [ 292.102158][ T9107] ? tomoyo_profile+0x47/0x60 [ 292.102218][ T9107] tomoyo_path_number_perm+0x245/0x580 [ 292.102258][ T9107] ? tomoyo_path_number_perm+0x237/0x580 [ 292.102305][ T9107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.102350][ T9107] ? find_held_lock+0x2b/0x80 [ 292.102438][ T9107] ? find_held_lock+0x2b/0x80 [ 292.102481][ T9107] ? hook_file_ioctl_common+0x145/0x410 [ 292.102530][ T9107] ? __fget_files+0x20e/0x3c0 [ 292.102590][ T9107] security_file_ioctl+0x9b/0x240 [ 292.102637][ T9107] __x64_sys_ioctl+0xb7/0x200 [ 292.102683][ T9107] do_syscall_64+0xcd/0x260 [ 292.102740][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.102783][ T9107] RIP: 0033:0x7f000518d169 [ 292.102811][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.102846][ T9107] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.102879][ T9107] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 292.102901][ T9107] RDX: ffffffffffffffff RSI: ffffffff800454dd RDI: 00000000000000c8 [ 292.102923][ T9107] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 292.102943][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.102963][ T9107] R13: 0000000000000001 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 292.103009][ T9107] [ 292.103039][ T9107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.238409][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 296.520768][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 298.128999][ T9223] FAULT_INJECTION: forcing a failure. [ 298.128999][ T9223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.173352][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.1.792 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 298.173403][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.173423][ T9223] Call Trace: [ 298.173433][ T9223] [ 298.173444][ T9223] dump_stack_lvl+0x16c/0x1f0 [ 298.173496][ T9223] should_fail_ex+0x512/0x640 [ 298.173539][ T9223] _copy_from_user+0x2e/0xd0 [ 298.173585][ T9223] xfrm_user_policy+0x4f5/0xb50 [ 298.173631][ T9223] ? trace_cap_capable+0x18d/0x200 [ 298.173664][ T9223] ? __pfx_xfrm_user_policy+0x10/0x10 [ 298.173711][ T9223] ? apparmor_capable+0x114/0x1d0 [ 298.173746][ T9223] ? bpf_lsm_capable+0x9/0x10 [ 298.173796][ T9223] ? ns_capable+0xd7/0x110 [ 298.173840][ T9223] do_ip_setsockopt+0x2a57/0x3240 [ 298.173878][ T9223] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 298.173922][ T9223] ? __pfx___might_resched+0x10/0x10 [ 298.173976][ T9223] ip_setsockopt+0x59/0xf0 [ 298.174011][ T9223] dccp_setsockopt+0xfa/0x970 [ 298.174057][ T9223] ? __pfx_dccp_setsockopt+0x10/0x10 [ 298.174103][ T9223] ? sock_common_setsockopt+0x2e/0xf0 [ 298.174153][ T9223] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.174202][ T9223] do_sock_setsockopt+0x221/0x470 [ 298.174251][ T9223] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.174334][ T9223] __sys_setsockopt+0x1a0/0x230 [ 298.174385][ T9223] __x64_sys_setsockopt+0xbd/0x160 [ 298.174442][ T9223] ? do_syscall_64+0x91/0x260 [ 298.174487][ T9223] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.174531][ T9223] do_syscall_64+0xcd/0x260 [ 298.174580][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.174613][ T9223] RIP: 0033:0x7f0aa3f8d169 [ 298.174638][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.174670][ T9223] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.174699][ T9223] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 298.174720][ T9223] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.174738][ T9223] RBP: 00007f0aa4e77090 R08: 0000000000000017 R09: 0000000000000000 [ 298.174757][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.174775][ T9223] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 298.174814][ T9223] [ 298.823694][ T30] audit: type=1800 audit(4294967302.540:12): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.791" name="discovery_nqn" dev="configfs" ino=21768 res=0 errno=0 [ 299.127256][ T9239] FAULT_INJECTION: forcing a failure. [ 299.127256][ T9239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.160817][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.1.797 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 299.160864][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.160884][ T9239] Call Trace: [ 299.160894][ T9239] [ 299.160906][ T9239] dump_stack_lvl+0x16c/0x1f0 [ 299.160959][ T9239] should_fail_ex+0x512/0x640 [ 299.161003][ T9239] should_fail_alloc_page+0xe7/0x130 [ 299.161038][ T9239] prepare_alloc_pages+0x3c2/0x610 [ 299.161099][ T9239] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 299.161168][ T9239] ? find_held_lock+0x2b/0x80 [ 299.161211][ T9239] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.161261][ T9239] ? is_bpf_text_address+0x8a/0x1a0 [ 299.161291][ T9239] ? bpf_ksym_find+0x124/0x1c0 [ 299.161334][ T9239] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.161381][ T9239] ? is_bpf_text_address+0x94/0x1a0 [ 299.161415][ T9239] ? __kernel_text_address+0xd/0x40 [ 299.161454][ T9239] ? unwind_get_return_address+0x59/0xa0 [ 299.161498][ T9239] ? arch_stack_walk+0xa6/0x100 [ 299.161546][ T9239] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 299.161585][ T9239] ? policy_nodemask+0xea/0x4e0 [ 299.161642][ T9239] alloc_pages_mpol+0x1fb/0x550 [ 299.161675][ T9239] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 299.161707][ T9239] ? __lock_acquire+0x5ca/0x1ba0 [ 299.161767][ T9239] folio_alloc_mpol_noprof+0x36/0x2f0 [ 299.161808][ T9239] vma_alloc_folio_noprof+0xed/0x1e0 [ 299.161844][ T9239] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 299.161897][ T9239] do_pte_missing+0x223d/0x3fb0 [ 299.161958][ T9239] __handle_mm_fault+0x103d/0x2a40 [ 299.162018][ T9239] ? __pfx___handle_mm_fault+0x10/0x10 [ 299.162067][ T9239] ? lock_vma_under_rcu+0x47d/0x970 [ 299.162108][ T9239] ? lock_vma_under_rcu+0x47d/0x970 [ 299.162179][ T9239] handle_mm_fault+0x3fe/0xad0 [ 299.162233][ T9239] do_user_addr_fault+0x60c/0x1370 [ 299.162284][ T9239] exc_page_fault+0x5c/0xc0 [ 299.162330][ T9239] asm_exc_page_fault+0x26/0x30 [ 299.162361][ T9239] RIP: 0033:0x7f0aa3f3a78b [ 299.162386][ T9239] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 299.162418][ T9239] RSP: 002b:00007f0aa4e74e10 EFLAGS: 00010246 [ 299.162444][ T9239] RAX: 00007f0aa4e76f30 RBX: 00007f0aa417d620 RCX: 0000000000000000 [ 299.162465][ T9239] RDX: 00007f0aa4e76f78 RSI: 00007f0aa3fecbd8 RDI: 00007f0aa4e74e30 [ 299.162485][ T9239] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 299.162503][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.162522][ T9239] R13: 0000000000000001 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 299.162564][ T9239] [ 299.162799][ T9239] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 300.414049][ T9263] FAULT_INJECTION: forcing a failure. [ 300.414049][ T9263] name failslab, interval 1, probability 0, space 0, times 0 [ 300.453751][ T9263] CPU: 0 UID: 0 PID: 9263 Comm: syz.0.804 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 300.453801][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.453821][ T9263] Call Trace: [ 300.453832][ T9263] [ 300.453843][ T9263] dump_stack_lvl+0x16c/0x1f0 [ 300.453900][ T9263] should_fail_ex+0x512/0x640 [ 300.453939][ T9263] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 300.453999][ T9263] should_failslab+0xc2/0x120 [ 300.454031][ T9263] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 300.454085][ T9263] ? mas_alloc_nodes+0x18b/0x8b0 [ 300.454137][ T9263] mas_alloc_nodes+0x18b/0x8b0 [ 300.454206][ T9263] mas_node_count_gfp+0x105/0x130 [ 300.454255][ T9263] mas_preallocate+0x53e/0xcd0 [ 300.454290][ T9263] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 300.454332][ T9263] ? __pfx_mas_preallocate+0x10/0x10 [ 300.454394][ T9263] ? anon_vma_name+0x75/0x100 [ 300.454437][ T9263] __split_vma+0x33b/0x1030 [ 300.454492][ T9263] ? __pfx___split_vma+0x10/0x10 [ 300.454549][ T9263] ? __lock_acquire+0x5ca/0x1ba0 [ 300.454612][ T9263] vms_gather_munmap_vmas+0x1c2/0x1310 [ 300.454672][ T9263] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 300.454723][ T9263] ? find_held_lock+0x2b/0x80 [ 300.454767][ T9263] ? is_bpf_text_address+0x8a/0x1a0 [ 300.454798][ T9263] ? bpf_ksym_find+0x124/0x1c0 [ 300.454842][ T9263] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.454890][ T9263] ? is_bpf_text_address+0x94/0x1a0 [ 300.454929][ T9263] do_vmi_align_munmap+0x27c/0x7d0 [ 300.454986][ T9263] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 300.455035][ T9263] ? __lock_acquire+0x5ca/0x1ba0 [ 300.455146][ T9263] do_vmi_munmap+0x208/0x3e0 [ 300.455212][ T9263] shrink_vma+0x1cc/0x380 [ 300.455265][ T9263] ? __pfx_shrink_vma+0x10/0x10 [ 300.455312][ T9263] ? __pfx_do_munmap+0x10/0x10 [ 300.455364][ T9263] ? __pfx_down_write_killable+0x10/0x10 [ 300.455410][ T9263] __do_sys_mremap+0x106a/0x15d0 [ 300.455468][ T9263] ? __pfx___do_sys_mremap+0x10/0x10 [ 300.455523][ T9263] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 300.455580][ T9263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.455637][ T9263] ? __fget_files+0x20e/0x3c0 [ 300.455704][ T9263] ? rcu_is_watching+0x12/0xc0 [ 300.455759][ T9263] do_syscall_64+0xcd/0x260 [ 300.455811][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.455846][ T9263] RIP: 0033:0x7f000518d169 [ 300.455873][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.455906][ T9263] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 300.455938][ T9263] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 300.455960][ T9263] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 300.455980][ T9263] RBP: 00007f00060c9090 R08: 00000000fffff000 R09: 0000000000000000 [ 300.456000][ T9263] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 300.456020][ T9263] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 300.456063][ T9263] [ 301.256929][ T9286] FAULT_INJECTION: forcing a failure. [ 301.256929][ T9286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.356782][ T9286] CPU: 1 UID: 0 PID: 9286 Comm: syz.0.809 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 301.356830][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.356851][ T9286] Call Trace: [ 301.356862][ T9286] [ 301.356875][ T9286] dump_stack_lvl+0x16c/0x1f0 [ 301.356937][ T9286] should_fail_ex+0x512/0x640 [ 301.356983][ T9286] strncpy_from_user+0x3b/0x2e0 [ 301.357026][ T9286] getname_flags.part.0+0x8b/0x540 [ 301.357071][ T9286] getname_flags+0x93/0xf0 [ 301.357118][ T9286] do_sys_openat2+0xb8/0x1d0 [ 301.357155][ T9286] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.357201][ T9286] ? __fget_files+0x20e/0x3c0 [ 301.357260][ T9286] __x64_sys_openat+0x174/0x210 [ 301.357298][ T9286] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.357334][ T9286] ? ksys_write+0x1b9/0x240 [ 301.357381][ T9286] ? rcu_is_watching+0x12/0xc0 [ 301.357435][ T9286] do_syscall_64+0xcd/0x260 [ 301.357489][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.357522][ T9286] RIP: 0033:0x7f000518d169 [ 301.357549][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.357582][ T9286] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.357614][ T9286] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 301.357635][ T9286] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 301.357656][ T9286] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 301.357676][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.357725][ T9286] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 301.357769][ T9286] [ 301.569407][ T9288] vivid-003: ================= START STATUS ================= [ 301.616262][ T9288] vivid-003: Radio HW Seek Mode: Bounded [ 301.629946][ T9288] vivid-003: Radio Programmable HW Seek: false [ 301.643744][ T9288] vivid-003: RDS Rx I/O Mode: Block I/O [ 301.658091][ T9288] vivid-003: Generate RBDS Instead of RDS: false [ 301.695671][ T9288] vivid-003: RDS Reception: true [ 301.700832][ T9288] vivid-003: RDS Program Type: 0 inactive [ 301.708752][ T9288] vivid-003: RDS PS Name: inactive [ 301.714733][ T9288] vivid-003: RDS Radio Text: inactive [ 301.720308][ T9288] vivid-003: RDS Traffic Announcement: false inactive [ 301.731549][ T9288] vivid-003: RDS Traffic Program: false inactive [ 301.738900][ T9288] vivid-003: RDS Music: false inactive [ 301.744860][ T9288] vivid-003: ================== END STATUS ================== [ 302.058624][ T9288] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 302.122338][ T9288] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 302.183942][ T9288] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 302.216150][ T9288] page_type: f5(slab) [ 302.223707][ T9288] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 302.232491][ T9288] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 302.292549][ T9288] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 302.327480][ T9288] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 302.374641][ T9288] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 302.403953][ T9288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 302.438097][ T9288] page dumped because: unmovable page [ 302.449619][ T9288] page_owner tracks the page as allocated [ 302.478153][ T9288] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1084, tgid 1084 (kworker/u8:5), ts 286478483983, free_ts 285018199944 [ 302.551912][ T9288] post_alloc_hook+0x181/0x1b0 [ 302.584110][ T9288] get_page_from_freelist+0x1193/0x39b0 [ 302.593730][ T9288] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 302.623897][ T9288] alloc_pages_mpol+0x1fb/0x550 [ 302.628884][ T9288] new_slab+0x23c/0x330 [ 302.633123][ T9288] ___slab_alloc+0xd9c/0x1940 [ 302.697443][ T9288] __slab_alloc.constprop.0+0x56/0xb0 [ 302.714738][ T9288] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 302.721312][ T9288] kmalloc_reserve+0xef/0x2c0 [ 302.733433][ T9288] __alloc_skb+0x166/0x380 [ 302.744983][ T9288] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 302.757254][ T9288] process_one_work+0x9cc/0x1b70 [ 302.762411][ T9288] worker_thread+0x6c8/0xf10 [ 302.772548][ T9288] kthread+0x3c2/0x780 [ 302.782677][ T9288] ret_from_fork+0x45/0x80 [ 302.792824][ T9288] ret_from_fork_asm+0x1a/0x30 [ 302.807871][ T9288] page last free pid 8865 tgid 8865 stack trace: [ 302.821803][ T9288] __free_frozen_pages+0x69d/0xff0 [ 302.849919][ T9288] __put_partials+0x16d/0x1c0 [ 302.867978][ T9288] qlist_free_all+0x4e/0x120 [ 302.872853][ T9288] kasan_quarantine_reduce+0x195/0x1e0 [ 302.879483][ T9288] __kasan_slab_alloc+0x69/0x90 [ 302.894564][ T9288] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 302.905115][ T9288] ptlock_alloc+0x1f/0x70 [ 302.909570][ T9288] pte_alloc_one+0x6d/0x380 [ 302.943720][ T9288] do_pte_missing+0x1c0b/0x3fb0 [ 302.948725][ T9288] __handle_mm_fault+0x103d/0x2a40 [ 302.968611][ T9288] handle_mm_fault+0x3fe/0xad0 [ 302.973506][ T9288] __get_user_pages+0x771/0x36f0 [ 302.983780][ T9288] get_dump_page+0x257/0x3d0 [ 302.988482][ T9288] dump_user_range+0x1c3/0xb30 [ 302.993323][ T9288] elf_core_dump+0x288a/0x3a90 [ 303.022896][ T9288] do_coredump+0x3183/0x4480 [ 303.532080][ T9323] FAULT_INJECTION: forcing a failure. [ 303.532080][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 303.604040][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.0.818 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 303.604088][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.604108][ T9323] Call Trace: [ 303.604119][ T9323] [ 303.604132][ T9323] dump_stack_lvl+0x16c/0x1f0 [ 303.604186][ T9323] should_fail_ex+0x512/0x640 [ 303.604225][ T9323] ? __kmalloc_noprof+0xbf/0x510 [ 303.604279][ T9323] ? net_alloc_generic+0x1e/0x70 [ 303.604330][ T9323] should_failslab+0xc2/0x120 [ 303.604362][ T9323] __kmalloc_noprof+0xd2/0x510 [ 303.604411][ T9323] ? inc_ucount+0x240/0x2f0 [ 303.604470][ T9323] net_alloc_generic+0x1e/0x70 [ 303.604518][ T9323] copy_net_ns+0xc6/0x5f0 [ 303.604566][ T9323] ? copy_cgroup_ns+0xa4/0x6f0 [ 303.604615][ T9323] create_new_namespaces+0x3ea/0xad0 [ 303.604684][ T9323] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 303.604738][ T9323] ksys_unshare+0x45b/0xa40 [ 303.604792][ T9323] ? __pfx_ksys_unshare+0x10/0x10 [ 303.604845][ T9323] ? ksys_write+0x1b9/0x240 [ 303.604892][ T9323] ? rcu_is_watching+0x12/0xc0 [ 303.604946][ T9323] __x64_sys_unshare+0x31/0x40 [ 303.604999][ T9323] do_syscall_64+0xcd/0x260 [ 303.605053][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.605087][ T9323] RIP: 0033:0x7f000518d169 [ 303.605113][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.605146][ T9323] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.605177][ T9323] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 303.605199][ T9323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 303.605219][ T9323] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 303.605238][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.605258][ T9323] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 303.605301][ T9323] [ 305.061877][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 306.477971][ T30] audit: type=1800 audit(4294967297.410:13): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.838" name="discovery_nqn" dev="configfs" ino=22993 res=0 errno=0 [ 307.533815][ T9391] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 308.011935][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 310.949917][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. syzkaller syzkaller login: [ 311.252333][ T30] audit: type=1800 audit(4294967297.980:14): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.861" name="discovery_nqn" dev="configfs" ino=22202 res=0 errno=0 [ 312.559093][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 313.250701][ T9510] usb usb15: usbfs: process 9510 (syz.1.877) did not claim interface 0 before use [ 313.899691][ T5849] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 314.088198][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 315.876451][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 316.469797][ T9590] kAFS: Invalid Command on /proc/fs/afs/cells file [ 316.794641][ T9604] netlink: 330 bytes leftover after parsing attributes in process `syz.1.908'. [ 316.831072][ T9604] : renamed from hsr0 (while UP) [ 317.779179][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 318.675082][ T9650] FAULT_INJECTION: forcing a failure. [ 318.675082][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.763661][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.1.922 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 318.763709][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.763729][ T9650] Call Trace: [ 318.763739][ T9650] [ 318.763751][ T9650] dump_stack_lvl+0x16c/0x1f0 [ 318.763803][ T9650] should_fail_ex+0x512/0x640 [ 318.763845][ T9650] _copy_from_user+0x2e/0xd0 [ 318.763888][ T9650] __do_sys_clock_adjtime+0x96/0x290 [ 318.763942][ T9650] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 318.764024][ T9650] ? __pfx_ksys_write+0x10/0x10 [ 318.764067][ T9650] ? rcu_is_watching+0x12/0xc0 [ 318.764112][ T9650] ? rcu_is_watching+0x12/0xc0 [ 318.764156][ T9650] do_syscall_64+0xcd/0x260 [ 318.764207][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.764241][ T9650] RIP: 0033:0x7f0aa3f8d169 [ 318.764268][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.764300][ T9650] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 318.764331][ T9650] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 318.764352][ T9650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.764370][ T9650] RBP: 00007f0aa4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 318.764389][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.764407][ T9650] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 318.764448][ T9650] [ 318.956953][ T9652] netlink: 330 bytes leftover after parsing attributes in process `syz.2.923'. [ 318.973718][ T9652] : renamed from hsr0 (while UP) [ 319.580905][ T9668] can: request_module (can-proto-0) failed. [ 319.864925][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 320.046642][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 320.058265][ T9689] netlink: 25 bytes leftover after parsing attributes in process `syz.0.934'. [ 320.325994][ T9701] FAULT_INJECTION: forcing a failure. [ 320.325994][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 320.380569][ T9702] netlink: 330 bytes leftover after parsing attributes in process `syz.1.936'. [ 320.440192][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.0.938 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 320.440244][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.440264][ T9701] Call Trace: [ 320.440276][ T9701] [ 320.440289][ T9701] dump_stack_lvl+0x16c/0x1f0 [ 320.440353][ T9701] should_fail_ex+0x512/0x640 [ 320.440394][ T9701] ? __kvmalloc_node_noprof+0x122/0x600 [ 320.440452][ T9701] should_failslab+0xc2/0x120 [ 320.440486][ T9701] __kvmalloc_node_noprof+0x135/0x600 [ 320.440540][ T9701] ? seq_read_iter+0x826/0x12c0 [ 320.440596][ T9701] ? seq_read_iter+0x826/0x12c0 [ 320.440640][ T9701] seq_read_iter+0x826/0x12c0 [ 320.440691][ T9701] ? aa_file_perm+0x4d6/0xfb0 [ 320.440751][ T9701] seq_read+0x39e/0x4e0 [ 320.440799][ T9701] ? __pfx_seq_read+0x10/0x10 [ 320.440854][ T9701] ? get_pid_task+0xfc/0x250 [ 320.440907][ T9701] ? __pfx_seq_read+0x10/0x10 [ 320.440952][ T9701] proc_reg_read+0x23d/0x330 [ 320.440987][ T9701] ? __pfx_proc_reg_read+0x10/0x10 [ 320.441025][ T9701] vfs_read+0x1de/0xc70 [ 320.441090][ T9701] ? __pfx___mutex_lock+0x10/0x10 [ 320.441144][ T9701] ? __pfx_vfs_read+0x10/0x10 [ 320.441208][ T9701] ? __fget_files+0x20e/0x3c0 [ 320.441273][ T9701] ksys_read+0x12a/0x240 [ 320.441320][ T9701] ? __pfx_ksys_read+0x10/0x10 [ 320.441373][ T9701] ? rcu_is_watching+0x12/0xc0 [ 320.441431][ T9701] do_syscall_64+0xcd/0x260 [ 320.441485][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.441520][ T9701] RIP: 0033:0x7f000518d169 [ 320.441546][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.441578][ T9701] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.441610][ T9701] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 320.441633][ T9701] RDX: 0000000000805644 RSI: 0000200000000300 RDI: 0000000000000003 [ 320.441654][ T9701] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 320.441675][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.441695][ T9701] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 320.441740][ T9701] [ 320.868870][ T9709] vivid-003: ================= START STATUS ================= [ 320.909880][ T9709] vivid-003: Radio HW Seek Mode: Bounded [ 320.915814][ T9709] vivid-003: Radio Programmable HW Seek: false [ 320.922080][ T9709] vivid-003: RDS Rx I/O Mode: Block I/O [ 320.928656][ T9709] vivid-003: Generate RBDS Instead of RDS: false [ 320.935313][ T9709] vivid-003: RDS Reception: true [ 320.941426][ T9709] vivid-003: RDS Program Type: 0 inactive [ 320.947339][ T9709] vivid-003: RDS PS Name: inactive [ 320.952650][ T9709] vivid-003: RDS Radio Text: inactive [ 320.958229][ T9709] vivid-003: RDS Traffic Announcement: false inactive [ 320.965137][ T9709] vivid-003: RDS Traffic Program: false inactive [ 320.971571][ T9709] vivid-003: RDS Music: false inactive [ 321.028945][ T9709] vivid-003: ================== END STATUS ================== [ 321.233069][ T30] audit: type=1800 audit(4294967298.505:15): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.942" name="discovery_nqn" dev="configfs" ino=24640 res=0 errno=0 [ 321.475125][ T9710] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 321.485709][ T9710] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 321.494629][ T9710] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 321.502889][ T9710] page_type: f8(unknown) [ 321.507557][ T9710] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 321.523721][ T9710] raw: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 321.541991][ T9710] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 321.573964][ T9710] head: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 321.593760][ T9710] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 321.602640][ T9710] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 321.614990][ T9710] page dumped because: unmovable page [ 321.633696][ T9710] page_owner tracks the page as allocated [ 321.639515][ T9710] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9371, tgid 9370 (syz.2.835), ts 306645836732, free_ts 306643408148 [ 321.663807][ T9710] post_alloc_hook+0x181/0x1b0 [ 321.668808][ T9710] get_page_from_freelist+0x1193/0x39b0 [ 321.702069][ T9710] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 321.733657][ T9710] __alloc_pages_noprof+0xb/0x1b0 [ 321.757032][ T9710] ___kmalloc_large_node+0x82/0x1e0 [ 321.790243][ T9710] __kmalloc_large_noprof+0x1c/0x70 [ 321.814539][ T9710] can_pernet_init+0x4b/0x370 [ 321.819343][ T9710] ops_init+0x1df/0x5f0 [ 321.848904][ T9710] setup_net+0x21e/0x850 [ 321.853278][ T9710] copy_net_ns+0x2a6/0x5f0 [ 321.871111][ T9710] create_new_namespaces+0x3ea/0xad0 [ 321.883600][ T9710] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 321.891370][ T9710] ksys_unshare+0x45b/0xa40 [ 321.904274][ T9710] __x64_sys_unshare+0x31/0x40 [ 321.909474][ T9710] do_syscall_64+0xcd/0x260 [ 321.923652][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.931135][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 321.940207][ T9710] page last free pid 9371 tgid 9370 stack trace: [ 321.965851][ T9710] __free_frozen_pages+0x69d/0xff0 [ 321.972921][ T9710] __put_partials+0x16d/0x1c0 [ 322.007904][ T9710] qlist_free_all+0x4e/0x120 [ 322.012639][ T9710] kasan_quarantine_reduce+0x195/0x1e0 [ 322.032170][ T9710] __kasan_slab_alloc+0x69/0x90 [ 322.041532][ T9710] __kmalloc_noprof+0x1d4/0x510 [ 322.046662][ T9710] __register_sysctl_table+0xea2/0x1900 [ 322.052406][ T9710] xfrm6_net_init+0xf0/0x1c0 [ 322.057843][ T9710] ops_init+0x1df/0x5f0 [ 322.062110][ T9710] setup_net+0x21e/0x850 [ 322.067197][ T9710] copy_net_ns+0x2a6/0x5f0 [ 322.071717][ T9710] create_new_namespaces+0x3ea/0xad0 [ 322.077389][ T9710] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 322.083138][ T9710] ksys_unshare+0x45b/0xa40 [ 322.087941][ T9710] __x64_sys_unshare+0x31/0x40 [ 322.092822][ T9710] do_syscall_64+0xcd/0x260 [ 322.199639][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.206367][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.758217][ T9749] netlink: 330 bytes leftover after parsing attributes in process `syz.2.951'. [ 324.979663][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 325.855122][ T9781] netlink: 330 bytes leftover after parsing attributes in process `syz.0.961'. [ 325.903866][ T9781] : renamed from hsr0 (while UP) [ 326.035373][ T9783] FAULT_INJECTION: forcing a failure. [ 326.035373][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 326.110801][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.962 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 326.110852][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.110873][ T9783] Call Trace: [ 326.110884][ T9783] [ 326.110898][ T9783] dump_stack_lvl+0x16c/0x1f0 [ 326.110953][ T9783] should_fail_ex+0x512/0x640 [ 326.110992][ T9783] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 326.111049][ T9783] should_failslab+0xc2/0x120 [ 326.111081][ T9783] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 326.111132][ T9783] ? vma_merge_new_range+0x3f8/0xc10 [ 326.111182][ T9783] ? vm_area_alloc+0x1f/0x160 [ 326.111234][ T9783] vm_area_alloc+0x1f/0x160 [ 326.111280][ T9783] __mmap_region+0xfd0/0x27c0 [ 326.111337][ T9783] ? __pfx___mmap_region+0x10/0x10 [ 326.111387][ T9783] ? bpf_ksym_find+0x124/0x1c0 [ 326.111441][ T9783] ? __kernel_text_address+0xd/0x40 [ 326.111481][ T9783] ? unwind_get_return_address+0x59/0xa0 [ 326.111595][ T9783] ? trace_cap_capable+0x18d/0x200 [ 326.111633][ T9783] ? cap_capable+0xb3/0x250 [ 326.111673][ T9783] mmap_region+0x32b/0x3f0 [ 326.111733][ T9783] do_mmap+0xd8e/0x11b0 [ 326.111788][ T9783] ? __pfx_do_mmap+0x10/0x10 [ 326.111831][ T9783] ? __pfx_down_write_killable+0x10/0x10 [ 326.111873][ T9783] vm_mmap_pgoff+0x281/0x450 [ 326.111921][ T9783] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 326.111969][ T9783] ? __fget_files+0x20e/0x3c0 [ 326.112022][ T9783] ksys_mmap_pgoff+0x32c/0x5c0 [ 326.112057][ T9783] ? __pfx_ksys_write+0x10/0x10 [ 326.112098][ T9783] ? rcu_is_watching+0x12/0xc0 [ 326.112142][ T9783] __x64_sys_mmap+0x125/0x190 [ 326.112184][ T9783] do_syscall_64+0xcd/0x260 [ 326.112235][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.112270][ T9783] RIP: 0033:0x7f0aa3f8d169 [ 326.112298][ T9783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.112332][ T9783] RSP: 002b:00007f0aa4e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 326.112362][ T9783] RAX: ffffffffffffffda RBX: 00007f0aa41a5fa0 RCX: 00007f0aa3f8d169 [ 326.112384][ T9783] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 326.112404][ T9783] RBP: 00007f0aa4e77090 R08: 0000000000000003 R09: 0000000000008000 [ 326.112423][ T9783] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 326.112443][ T9783] R13: 0000000000000000 R14: 00007f0aa41a5fa0 R15: 00007ffc11437ba8 [ 326.112484][ T9783] [ 326.628857][ T9788] input: f as /devices/virtual/input/input23 [ 327.041657][ T30] audit: type=1800 audit(4294967298.340:16): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.966" name="discovery_nqn" dev="configfs" ino=23956 res=0 errno=0 [ 327.729540][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 327.949129][ T9806] FAULT_INJECTION: forcing a failure. [ 327.949129][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.058610][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.0.968 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 328.058656][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.058676][ T9806] Call Trace: [ 328.058686][ T9806] [ 328.058698][ T9806] dump_stack_lvl+0x16c/0x1f0 [ 328.058751][ T9806] should_fail_ex+0x512/0x640 [ 328.058796][ T9806] _copy_from_user+0x2e/0xd0 [ 328.058839][ T9806] __sys_bpf+0x21d/0x4d80 [ 328.058882][ T9806] ? __pfx___sys_bpf+0x10/0x10 [ 328.058921][ T9806] ? ksys_write+0x190/0x240 [ 328.058973][ T9806] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 328.059047][ T9806] ? fput+0x70/0xf0 [ 328.059078][ T9806] ? ksys_write+0x1b9/0x240 [ 328.059122][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 328.059175][ T9806] __x64_sys_bpf+0x78/0xc0 [ 328.059212][ T9806] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.059257][ T9806] do_syscall_64+0xcd/0x260 [ 328.059309][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.059342][ T9806] RIP: 0033:0x7f000518d169 [ 328.059368][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.059407][ T9806] RSP: 002b:00007f00060c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.059438][ T9806] RAX: ffffffffffffffda RBX: 00007f00053a5fa0 RCX: 00007f000518d169 [ 328.059460][ T9806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 328.059480][ T9806] RBP: 00007f00060c9090 R08: 0000000000000000 R09: 0000000000000000 [ 328.059500][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.059519][ T9806] R13: 0000000000000000 R14: 00007f00053a5fa0 R15: 00007ffd0c540b28 [ 328.059561][ T9806] [ 328.234001][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.473281][ T9818] vivid-003: ================= START STATUS ================= [ 328.558546][ T9818] vivid-003: Radio HW Seek Mode: Bounded [ 328.584248][ T9825] FAULT_INJECTION: forcing a failure. [ 328.584248][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 328.657622][ T9818] vivid-003: Radio Programmable HW Seek: false [ 328.665191][ T9818] vivid-003: RDS Rx I/O Mode: Block I/O [ 328.693410][ T9818] vivid-003: Generate RBDS Instead of RDS: false [ 328.724236][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.1.974 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 328.724285][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.724319][ T9825] Call Trace: [ 328.724329][ T9825] [ 328.724341][ T9825] dump_stack_lvl+0x16c/0x1f0 [ 328.724395][ T9825] should_fail_ex+0x512/0x640 [ 328.724433][ T9825] ? fs_reclaim_acquire+0xae/0x150 [ 328.724475][ T9825] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 328.724522][ T9825] should_failslab+0xc2/0x120 [ 328.724553][ T9825] __kmalloc_noprof+0xd2/0x510 [ 328.724611][ T9825] tomoyo_realpath_from_path+0xc2/0x6e0 [ 328.724662][ T9825] ? tomoyo_profile+0x47/0x60 [ 328.724715][ T9825] tomoyo_path_number_perm+0x245/0x580 [ 328.724750][ T9825] ? tomoyo_path_number_perm+0x237/0x580 [ 328.724790][ T9825] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.724830][ T9825] ? find_held_lock+0x2b/0x80 [ 328.724911][ T9825] ? find_held_lock+0x2b/0x80 [ 328.724951][ T9825] ? hook_file_ioctl_common+0x145/0x410 [ 328.724996][ T9825] ? __fget_files+0x20e/0x3c0 [ 328.725051][ T9825] security_file_ioctl+0x9b/0x240 [ 328.725105][ T9825] __x64_sys_ioctl+0xb7/0x200 [ 328.725147][ T9825] do_syscall_64+0xcd/0x260 [ 328.725194][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.725226][ T9825] RIP: 0033:0x7f0aa3f8d169 [ 328.725251][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.725281][ T9825] RSP: 002b:00007f0aa4e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.725318][ T9825] RAX: ffffffffffffffda RBX: 00007f0aa41a6080 RCX: 00007f0aa3f8d169 [ 328.725337][ T9825] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000009 [ 328.725355][ T9825] RBP: 00007f0aa4e56090 R08: 0000000000000000 R09: 0000000000000000 [ 328.725373][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.725390][ T9825] R13: 0000000000000000 R14: 00007f0aa41a6080 R15: 00007ffc11437ba8 [ 328.725430][ T9825] [ 328.725450][ T9825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.795388][ T9818] vivid-003: RDS Reception: [ 328.981907][ T9825] sp0: Synchronizing with TNC [ 329.170449][ T9818] true [ 329.202110][ T9818] vivid-003: RDS Program Type: 0 inactive [ 329.238408][ T9818] vivid-003: RDS PS Name: inactive [ 329.245124][ T9818] vivid-003: RDS Radio Text: inactive [ 329.250862][ T9818] vivid-003: RDS Traffic Announcement: false inactive [ 329.257859][ T9818] vivid-003: RDS Traffic Program: false inactive [ 329.264934][ T9818] vivid-003: RDS Music: false inactive [ 329.270633][ T9818] vivid-003: ================== END STATUS ================== [ 329.614201][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 329.659525][ T9833] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 329.707544][ T9833] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 329.750876][ T9833] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 329.767887][ T9833] page_type: f8(unknown) [ 329.777968][ T9833] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 329.809010][ T9833] raw: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 329.848474][ T9833] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 329.865945][ T9833] head: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 329.877097][ T9833] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 329.916851][ T9833] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 329.926026][ T9833] page dumped because: unmovable page [ 329.931478][ T9833] page_owner tracks the page as allocated [ 329.937801][ T9833] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9371, tgid 9370 (syz.2.835), ts 306645836732, free_ts 306643408148 [ 329.957905][ T9833] post_alloc_hook+0x181/0x1b0 [ 329.963067][ T9833] get_page_from_freelist+0x1193/0x39b0 [ 329.968712][ T9833] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 329.978444][ T9833] __alloc_pages_noprof+0xb/0x1b0 [ 330.001926][ T9833] ___kmalloc_large_node+0x82/0x1e0 [ 330.090965][ T9833] __kmalloc_large_noprof+0x1c/0x70 [ 330.118728][ T9833] can_pernet_init+0x4b/0x370 [ 330.134951][ T9833] ops_init+0x1df/0x5f0 [ 330.139926][ T9833] setup_net+0x21e/0x850 [ 330.146107][ T9833] copy_net_ns+0x2a6/0x5f0 [ 330.151008][ T9833] create_new_namespaces+0x3ea/0xad0 [ 330.158177][ T9833] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 330.164638][ T9833] ksys_unshare+0x45b/0xa40 [ 330.169510][ T9833] __x64_sys_unshare+0x31/0x40 [ 330.175291][ T9833] do_syscall_64+0xcd/0x260 [ 330.180217][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.187331][ T9833] page last free pid 9371 tgid 9370 stack trace: [ 330.194504][ T9833] __free_frozen_pages+0x69d/0xff0 [ 330.200006][ T9833] __put_partials+0x16d/0x1c0 [ 330.211740][ T9833] qlist_free_all+0x4e/0x120 [ 330.224600][ T9833] kasan_quarantine_reduce+0x195/0x1e0 [ 330.245833][ T9833] __kasan_slab_alloc+0x69/0x90 [ 330.267524][ T9833] __kmalloc_noprof+0x1d4/0x510 [ 330.280838][ T9833] __register_sysctl_table+0xea2/0x1900 [ 330.298509][ T9833] xfrm6_net_init+0xf0/0x1c0 [ 330.314793][ T9833] ops_init+0x1df/0x5f0 [ 330.329202][ T9833] setup_net+0x21e/0x850 [ 330.341387][ T9833] copy_net_ns+0x2a6/0x5f0 [ 330.361604][ T9833] create_new_namespaces+0x3ea/0xad0 [ 330.407287][ T9833] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 330.491070][ T9833] ksys_unshare+0x45b/0xa40 [ 330.559766][ T9833] __x64_sys_unshare+0x31/0x40 [ 330.608393][ T9833] do_syscall_64+0xcd/0x260 [ 331.083254][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 332.698480][ T9909] vivid-003: ================= START STATUS ================= [ 332.718928][ T9909] vivid-003: Radio HW Seek Mode: Bounded [ 332.749411][ T9909] vivid-003: Radio Programmable HW Seek: false [ 332.755929][ T9909] vivid-003: RDS Rx I/O Mode: Block I/O [ 332.761707][ T9909] vivid-003: Generate RBDS Instead of RDS: false [ 332.768129][ T9909] vivid-003: RDS Reception: true [ 332.773327][ T9909] vivid-003: RDS Program Type: 0 inactive [ 332.779132][ T9909] vivid-003: RDS PS Name: inactive [ 332.785996][ T9909] vivid-003: RDS Radio Text: inactive [ 332.791817][ T9909] vivid-003: RDS Traffic Announcement: false inactive [ 332.799047][ T9909] vivid-003: RDS Traffic Program: false inactive [ 332.805920][ T9909] vivid-003: RDS Music: false inactive [ 332.811579][ T9909] vivid-003: ================== END STATUS ================== [ 333.228466][ T9912] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 333.322363][ T9912] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.389129][ T9912] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 333.429763][ T9912] page_type: f8(unknown) [ 333.439893][ T9912] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 333.467902][ T9912] raw: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 333.499597][ T9912] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 333.559150][ T9912] head: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 333.631017][ T9912] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 333.683074][ T9912] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 333.758948][ T9912] page dumped because: unmovable page [ 333.781256][ T9912] page_owner tracks the page as allocated [ 333.787050][ T9912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9371, tgid 9370 (syz.2.835), ts 306645836732, free_ts 306643408148 [ 333.841430][ T9912] post_alloc_hook+0x181/0x1b0 [ 333.846300][ T9912] get_page_from_freelist+0x1193/0x39b0 [ 333.870940][ T9912] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 333.887760][ T9912] __alloc_pages_noprof+0xb/0x1b0 [ 333.916576][ T9912] ___kmalloc_large_node+0x82/0x1e0 [ 333.945053][ T9912] __kmalloc_large_noprof+0x1c/0x70 [ 333.950360][ T9912] can_pernet_init+0x4b/0x370 [ 333.961858][ T9912] ops_init+0x1df/0x5f0 [ 333.966114][ T9912] setup_net+0x21e/0x850 [ 333.970444][ T9912] copy_net_ns+0x2a6/0x5f0 [ 333.976438][ T9912] create_new_namespaces+0x3ea/0xad0 [ 333.981871][ T9912] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 333.987676][ T9912] ksys_unshare+0x45b/0xa40 [ 333.992345][ T9912] __x64_sys_unshare+0x31/0x40 [ 333.997181][ T9912] do_syscall_64+0xcd/0x260 [ 334.001878][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.007839][ T9912] page last free pid 9371 tgid 9370 stack trace: [ 334.014359][ T9912] __free_frozen_pages+0x69d/0xff0 [ 334.019551][ T9912] __put_partials+0x16d/0x1c0 [ 334.024495][ T9912] qlist_free_all+0x4e/0x120 [ 334.029164][ T9912] kasan_quarantine_reduce+0x195/0x1e0 [ 334.035218][ T9912] __kasan_slab_alloc+0x69/0x90 [ 334.040157][ T9912] __kmalloc_noprof+0x1d4/0x510 [ 334.045756][ T9912] __register_sysctl_table+0xea2/0x1900 [ 334.060714][ T9912] xfrm6_net_init+0xf0/0x1c0 [ 334.080748][ T9912] ops_init+0x1df/0x5f0 [ 334.085002][ T9912] setup_net+0x21e/0x850 [ 334.089318][ T9912] copy_net_ns+0x2a6/0x5f0 [ 334.111477][ T9912] create_new_namespaces+0x3ea/0xad0 [ 334.116883][ T9912] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 334.140745][ T9912] ksys_unshare+0x45b/0xa40 [ 334.145365][ T9912] __x64_sys_unshare+0x31/0x40 [ 334.170727][ T9912] do_syscall_64+0xcd/0x260 [ 334.582161][ T9933] netlink: 330 bytes leftover after parsing attributes in process `syz.1.999'. [ 336.176057][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 336.614415][ T9966] vivid-003: ================= START STATUS ================= [ 336.641255][ T9966] vivid-003: Radio HW Seek Mode: Bounded [ 336.653921][ T9966] vivid-003: Radio Programmable HW Seek: false [ 336.671038][ T9966] vivid-003: RDS Rx I/O Mode: Block I/O [ 336.684745][ T9966] vivid-003: Generate RBDS Instead of RDS: false [ 336.709855][ T9966] vivid-003: RDS Reception: true [ 336.723792][ T9966] vivid-003: RDS Program Type: 0 inactive [ 336.740591][ T9966] vivid-003: RDS PS Name: inactive [ 336.749246][ T9966] vivid-003: RDS Radio Text: inactive [ 336.784138][ T9966] vivid-003: RDS Traffic Announcement: false inactive [ 336.808081][ T9966] vivid-003: RDS Traffic Program: false inactive [ 336.831694][ T9966] vivid-003: RDS Music: false inactive [ 336.846068][ T9966] vivid-003: ================== END STATUS ================== [ 337.263952][ T9979] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1012'. [ 337.310454][ T9968] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 337.322772][ T9968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.339205][ T9968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 337.352520][ T9968] page_type: f8(unknown) [ 337.367989][ T9968] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 337.419186][ T9968] raw: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 337.449034][ T9968] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 337.461639][ T9968] head: ffff88807fe06000 0000000000000000 00000001f8000000 0000000000000000 [ 337.509356][ T9968] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 337.518557][ T9968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 337.602911][ T9968] page dumped because: unmovable page [ 337.608377][ T9968] page_owner tracks the page as allocated [ 337.676348][ T9968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 9371, tgid 9370 (syz.2.835), ts 306645836732, free_ts 306643408148 [ 337.738900][ T9968] post_alloc_hook+0x181/0x1b0 [ 337.743810][ T9968] get_page_from_freelist+0x1193/0x39b0 [ 337.759222][ T9968] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 337.765219][ T9968] __alloc_pages_noprof+0xb/0x1b0 [ 337.789572][ T9968] ___kmalloc_large_node+0x82/0x1e0 [ 337.794877][ T9968] __kmalloc_large_noprof+0x1c/0x70 [ 337.828183][ T9968] can_pernet_init+0x4b/0x370 [ 337.848797][ T9968] ops_init+0x1df/0x5f0 [ 337.853045][ T9968] setup_net+0x21e/0x850 [ 337.857361][ T9968] copy_net_ns+0x2a6/0x5f0 [ 337.878785][ T9968] create_new_namespaces+0x3ea/0xad0 [ 337.884187][ T9968] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 337.925150][ T9968] ksys_unshare+0x45b/0xa40 [ 337.938747][ T9968] __x64_sys_unshare+0x31/0x40 [ 337.943614][ T9968] do_syscall_64+0xcd/0x260 [ 337.948192][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.978847][ T9968] page last free pid 9371 tgid 9370 stack trace: [ 337.985253][ T9968] __free_frozen_pages+0x69d/0xff0 [ 338.009140][ T9968] __put_partials+0x16d/0x1c0 [ 338.014263][ T9968] qlist_free_all+0x4e/0x120 [ 338.032182][ T9968] kasan_quarantine_reduce+0x195/0x1e0 [ 338.058297][ T9968] __kasan_slab_alloc+0x69/0x90 [ 338.078521][ T9968] __kmalloc_noprof+0x1d4/0x510 [ 338.086231][ T9968] __register_sysctl_table+0xea2/0x1900 [ 338.100082][ T9968] xfrm6_net_init+0xf0/0x1c0 [ 338.128748][ T9968] ops_init+0x1df/0x5f0 [ 338.133013][ T9968] setup_net+0x21e/0x850 [ 338.147930][ T9968] copy_net_ns+0x2a6/0x5f0 [ 338.158018][ T9968] create_new_namespaces+0x3ea/0xad0 [ 338.178347][ T9968] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 338.184155][ T9968] ksys_unshare+0x45b/0xa40 [ 338.200317][ T9968] __x64_sys_unshare+0x31/0x40 [ 338.205172][ T9968] do_syscall_64+0xcd/0x260 [ 338.958551][ T5849] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 339.046524][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 339.837432][T10008] [ 339.839828][T10008] ====================================================== [ 339.846870][T10008] WARNING: possible circular locking dependency detected [ 339.853910][T10008] 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 Not tainted [ 339.861049][T10008] ------------------------------------------------------ [ 339.868094][T10008] syz.4.1021/10008 is trying to acquire lock: [ 339.874288][T10008] ffffffff9012dae8 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 339.883620][T10008] [ 339.883620][T10008] but task is already holding lock: [ 339.891012][T10008] ffff88807c5e8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 339.901179][T10008] [ 339.901179][T10008] which lock already depends on the new lock. [ 339.901179][T10008] [ 339.911615][T10008] [ 339.911615][T10008] the existing dependency chain (in reverse order) is: [ 339.920660][T10008] [ 339.920660][T10008] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 339.929326][T10008] __mutex_lock+0x199/0xb90 [ 339.934410][T10008] smc_switch_to_fallback+0x2d/0x9f0 [ 339.940262][T10008] smc_sendmsg+0x13d/0x520 [ 339.945244][T10008] ____sys_sendmsg+0xa95/0xc70 [ 339.950590][T10008] ___sys_sendmsg+0x134/0x1d0 [ 339.955837][T10008] __sys_sendmsg+0x16d/0x220 [ 339.960999][T10008] do_syscall_64+0xcd/0x260 [ 339.966079][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.972544][T10008] [ 339.972544][T10008] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 339.980275][T10008] lock_sock_nested+0x41/0xf0 [ 339.985523][T10008] sockopt_lock_sock+0x54/0x70 [ 339.990863][T10008] do_ip_getsockopt+0x13e4/0x2220 [ 339.996448][T10008] ip_getsockopt+0x9b/0x1e0 [ 340.001514][T10008] raw_getsockopt+0x4d/0x1f0 [ 340.006672][T10008] do_sock_getsockopt+0x3fc/0x800 [ 340.012278][T10008] __sys_getsockopt+0x12f/0x260 [ 340.017694][T10008] __x64_sys_getsockopt+0xbd/0x160 [ 340.023372][T10008] do_syscall_64+0xcd/0x260 [ 340.028452][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.034904][T10008] [ 340.034904][T10008] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 340.042178][T10008] __lock_acquire+0x1173/0x1ba0 [ 340.047612][T10008] lock_acquire+0x179/0x350 [ 340.052670][T10008] __mutex_lock+0x199/0xb90 [ 340.057732][T10008] do_ipv6_setsockopt+0x2042/0x4420 [ 340.063479][T10008] ipv6_setsockopt+0xcb/0x170 [ 340.068709][T10008] tcp_setsockopt+0xa4/0x100 [ 340.073841][T10008] smc_setsockopt+0x1b3/0xa00 [ 340.079061][T10008] do_sock_setsockopt+0x221/0x470 [ 340.084642][T10008] __sys_setsockopt+0x1a0/0x230 [ 340.090037][T10008] __x64_sys_setsockopt+0xbd/0x160 [ 340.095693][T10008] do_syscall_64+0xcd/0x260 [ 340.100747][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.107180][T10008] [ 340.107180][T10008] other info that might help us debug this: [ 340.107180][T10008] [ 340.117415][T10008] Chain exists of: [ 340.117415][T10008] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 340.117415][T10008] [ 340.131017][T10008] Possible unsafe locking scenario: [ 340.131017][T10008] [ 340.138476][T10008] CPU0 CPU1 [ 340.143866][T10008] ---- ---- [ 340.149234][T10008] lock(&smc->clcsock_release_lock); [ 340.154627][T10008] lock(sk_lock-AF_INET); [ 340.161581][T10008] lock(&smc->clcsock_release_lock); [ 340.169490][T10008] lock(rtnl_mutex); [ 340.173497][T10008] [ 340.173497][T10008] *** DEADLOCK *** [ 340.173497][T10008] [ 340.181651][T10008] 1 lock held by syz.4.1021/10008: [ 340.186785][T10008] #0: ffff88807c5e8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 340.197387][T10008] [ 340.197387][T10008] stack backtrace: [ 340.203287][T10008] CPU: 1 UID: 0 PID: 10008 Comm: syz.4.1021 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 340.203322][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.203339][T10008] Call Trace: [ 340.203348][T10008] [ 340.203358][T10008] dump_stack_lvl+0x116/0x1f0 [ 340.203399][T10008] print_circular_bug+0x275/0x350 [ 340.203442][T10008] check_noncircular+0x14c/0x170 [ 340.203486][T10008] __lock_acquire+0x1173/0x1ba0 [ 340.203543][T10008] lock_acquire+0x179/0x350 [ 340.203566][T10008] ? do_ipv6_setsockopt+0x2042/0x4420 [ 340.203616][T10008] ? __pfx___might_resched+0x10/0x10 [ 340.203651][T10008] ? find_held_lock+0x2b/0x80 [ 340.203684][T10008] __mutex_lock+0x199/0xb90 [ 340.203720][T10008] ? do_ipv6_setsockopt+0x2042/0x4420 [ 340.203756][T10008] ? lock_acquire+0x179/0x350 [ 340.203777][T10008] ? do_ipv6_setsockopt+0x2042/0x4420 [ 340.203814][T10008] ? __pfx___mutex_lock+0x10/0x10 [ 340.203851][T10008] ? finish_task_switch.isra.0+0x221/0xc10 [ 340.203887][T10008] ? rcu_is_watching+0x12/0xc0 [ 340.203918][T10008] ? trace_sched_exit_tp+0xde/0x130 [ 340.203958][T10008] ? do_ipv6_setsockopt+0x2042/0x4420 [ 340.203993][T10008] ? rtnl_lock+0x9/0x20 [ 340.204014][T10008] do_ipv6_setsockopt+0x2042/0x4420 [ 340.204054][T10008] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 340.204092][T10008] ? __lock_acquire+0xf7f/0x1ba0 [ 340.204137][T10008] ? __mutex_trylock_common+0xe9/0x250 [ 340.204161][T10008] ? __pfx___mutex_trylock_common+0x10/0x10 [ 340.204186][T10008] ? __pfx___might_resched+0x10/0x10 [ 340.204222][T10008] ? rcu_is_watching+0x12/0xc0 [ 340.204252][T10008] ? trace_contention_end+0xdd/0x130 [ 340.204275][T10008] ? __mutex_lock+0x1ca/0xb90 [ 340.204314][T10008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 340.204347][T10008] ? smc_setsockopt+0x100/0xa00 [ 340.204374][T10008] ? __pfx___mutex_lock+0x10/0x10 [ 340.204413][T10008] ? ipv6_setsockopt+0xcb/0x170 [ 340.204446][T10008] ipv6_setsockopt+0xcb/0x170 [ 340.204483][T10008] tcp_setsockopt+0xa4/0x100 [ 340.204514][T10008] smc_setsockopt+0x1b3/0xa00 [ 340.204542][T10008] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 340.204584][T10008] ? __pfx_smc_setsockopt+0x10/0x10 [ 340.204610][T10008] ? errseq_sample+0x53/0x70 [ 340.204643][T10008] ? __pfx_smc_setsockopt+0x10/0x10 [ 340.204669][T10008] do_sock_setsockopt+0x221/0x470 [ 340.204707][T10008] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 340.204754][T10008] __sys_setsockopt+0x1a0/0x230 [ 340.204787][T10008] __x64_sys_setsockopt+0xbd/0x160 [ 340.204816][T10008] ? do_syscall_64+0x91/0x260 [ 340.204852][T10008] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.204886][T10008] do_syscall_64+0xcd/0x260 [ 340.204924][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.204950][T10008] RIP: 0033:0x7f458bf8d169 [ 340.204970][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.204994][T10008] RSP: 002b:00007f458ce83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.205017][T10008] RAX: ffffffffffffffda RBX: 00007f458c1a5fa0 RCX: 00007f458bf8d169 [ 340.205034][T10008] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0400000000000003 [ 340.205050][T10008] RBP: 00007f458c00e990 R08: 000000000000056b R09: 0000000000000000 [ 340.205065][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.205080][T10008] R13: 0000000000000000 R14: 00007f458c1a5fa0 R15: 00007fff26ebdb68 [ 340.205103][T10008] [ 340.559097][ T9958] caif:caif_disconnect_client(): nothing to disconnect