last executing test programs: 10.568098239s ago: executing program 3 (id=767): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef30714"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r4, 0x0, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) getpid() writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) 9.111013713s ago: executing program 2 (id=773): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) (fail_nth: 1) 8.193181291s ago: executing program 1 (id=776): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, 0x0, 0x0) 8.079165506s ago: executing program 3 (id=778): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x2, 0x200000) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0x51) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 8.008949782s ago: executing program 2 (id=779): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r4, 0x50009405, &(0x7f00000017c0)={@raw=0x6, "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"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1000000003, 0x9, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010329bd700002dcdf2524"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 6.67544227s ago: executing program 0 (id=780): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x10001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x26d032fc, 0x200000000002, 0x3, 0xffffffff, 0xffffffffffffffff, 0xffffffff) r1 = socket(0x1f, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000380)="127abfa2d01bdcd1842ed314cc706f8077ef100b2e2a011dafd09d43901e3529fe22a370a5073620d2469d71a0df4744b91d8d8ad4ea0efcdd179cb8c94a01e7a8b22f8485202f982fb2f31034e454bf6af5c7d1afd69e7a1a1f44876371ba17c23287415f375f4a89473fbf60b67677236f0ac8e59c7397d887e4d221dc4d11d7aaf9946ebcebf51da6b1ef407fd3509a800bbcaa6599ba70bbf4b73a69dbd88f17c5ed5e5d60d49dae3dc9b079e10a0750a2cbef9a8ff4d3e10ad75fe2da3fbb330de43f431cf1", 0x34) close_range$auto(r0, 0x8, 0xa6) socket(0x2, 0x1, 0x106) r2 = socket(0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) r3 = getsockopt$auto(r2, 0x2, 0x7f, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000040)) cachestat$auto(r3, &(0x7f0000000240)={0x8, 0x4}, &(0x7f0000000280)={0x2, 0x7, 0x1ff, 0x5, 0x5}, 0x7ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x7, 0xfbfffffe, 0xffffffff, 0x7fb, 0x7, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) close_range$auto(0x2, 0x8000, 0x0) fsetxattr$auto(r0, &(0x7f00000002c0)='/dev/vhost-vsock\x00', &(0x7f0000000300)="0110c152f6aab0e45da9c08d993197d875a487674dfa89860db07856d0ce4a1915e68023432118257bc7540c41ca4a52005f940db291fd68c06831ec46afe9a84e01cfeb82525002816686ef6d24e4af510969ceb224d0eca327bf44c059f88f37bff9dc18f0542b65519822", 0x8, 0x400) 6.675235095s ago: executing program 1 (id=781): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) clone$auto(0x5, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) r2 = socket(0x2a, 0x2, 0x1) sendto$auto(r2, 0x0, 0xffff, 0x10000, &(0x7f0000000480)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x6) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)) read$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x4) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xfffffffffffffffc, 0x8000, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r4, 0x7439) setreuid$auto(0x4, 0x8) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xfef) ioctl$auto(r1, 0x4004550c, r1) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) readv$auto(r3, &(0x7f0000000100)={0x0, 0x9}, 0x1) 6.367806407s ago: executing program 3 (id=782): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef30714"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r4, 0x0, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) getpid() writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) 5.639335625s ago: executing program 0 (id=783): lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x13, 0x102000000010001, 0x7f, 0x200, 0x3) madvise$auto(0x0, 0xd0, 0x2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) faccessat$auto(0xffffffffffffffff, 0x0, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x7, 0x136a, "8f42b1077e737d"}, 0x7d) syz_genetlink_get_family_id$auto_nfc(0x0, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0xaa, 0x9, 0x1, 0x10000005, "e7227115127a1e8f00"}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x3, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.458985062s ago: executing program 1 (id=784): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x26d032fc, 0x200000000002, 0x3, 0xffffffff, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) r4 = getpid() sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c002d50", @ANYRES16=r3, @ANYBLOB="050a2bbd7000fadbdf250100000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) mmap$auto(0x0, 0x20564234, 0xdf, 0x9b72, 0x2, 0x8000) 5.259331201s ago: executing program 2 (id=785): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) (async, rerun: 64) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) (async, rerun: 64) socket(0xa, 0x2, 0x3a) (async, rerun: 64) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) pipe$auto(0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) (async) mincore$auto(0xffffffbffffffffa, 0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) (async, rerun: 32) epoll_create$auto(0x7) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/smaps_rollup\x00', 0x101000, 0x0) (rerun: 32) close_range$auto(r0, r1, 0x7) (async, rerun: 32) socket(0x11, 0x3, 0x2) (async, rerun: 32) mmap$auto(0xfffffffffffffffc, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x18600, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000100)="4ceac02070916ed1dc1f91", 0xb) (async) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.577161141s ago: executing program 0 (id=786): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) 3.894681848s ago: executing program 0 (id=787): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef30714"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r4, 0x0, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) getpid() writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) 3.316508282s ago: executing program 3 (id=788): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r4, 0x50009405, &(0x7f00000017c0)={@raw=0x6, "dd47fa33c4143a4d6bbed121766ae2d5144323072e85d1e412f01b0995f26476d643939c6cff8aaad9be516829bf45c0a1e67493a281b0204804c080581db030535694029bd83feb751d2375979650696327cd96e302d583b9e0349274ca07d1be7fd7ed8bce1a59849575c43378807060b0f6495abf8ec6ccebe49d3a29907f3dc0388025e853c7a2a97fda5a4799fc30d78327636104c993f6ab45ea394dd5ec25a162003ce5878efbe8f4fd8e6638eb4faa3995005f3a96c7a41ce301aace5cd9952814e1f24ee7584489100e533d8218e9d427da91b83b6851a6a63cd8bdf53cccc72162e9ff89a6b31069a702c46b306c6db0d40ed905fcb11c171999ce3bac3800a4999546861f782b13a1dd16041890bfc1602fae701bec86c4771d7394543a7137f36036985ce91ebd57ce3396290a9f8ff16288849f0456f46881c52439c8710344cee008c0c54da6f0548944c4dab6518a5922d92b2a8483149350830033a0575dc07760edd070bef710f85d1a3a4569154cef284649c0d340bf2029a0512d6be39008ecdda4070eb09a386980ca41c3ea588793643353e9628f64ed17d7b58956d142f758eb2e10b7ce1ced1ef3739b3a34b467295a89533ee8cc57f8d1384c7f535143fddffa4be00c9540d8f342538ec31b54f588c726839023ad3eafa82897199c49ae6ece89bcc6231e52f05f4547b4e66d1928ce81817ce4c2c0cd12604c973fb18f57112edd6b3ee789540c25acaa05dbc1f85ac38b8d9e583d9ec1753af219bc8855b778320a8f11fc0d6c6aae39e1b4fffebd526448af171ecb7129dabb11eec2c96f826457ff90a4b2efc856841f21293cd2157c5231d13ef89ecb8cd8c4e0ab4da1ef66eaa794a60862252941d2677cf66662226de73bf0b6a745f3bf25ad79af727f190060069d33f3af1b03d80dac5dfd24bfe1ee8efe82661903d6cda4b6d9cbea39cbf38cbbaebbb75fd98b222cea60f817888c9cc50c7e42b593b94adcee8d02d4ae497d4d412bf7da46203d279a1923dc5f4a567858182aa65566c5d4cfe30fbf80c0fa3066120a2c61ac92f5f35908d691b349c0b4f19b2ace42e1560d265ce8b967336cfa6313bf862d0655ab3b12d9acc8187cb268ee18fa915e204a086917c810b64112c69c06f22d820e2efcf451f0ffcbdec32ecf53adc387671067645528b4e0838b7c4537b4c10ea0dee1891c3392acc9a456895d9d0a3f9a554f73f292574a62feb9fffa3b48e0cd3112180cd97ffccf184055855fda2e519ab3bd3156041146904598a87c44c5b2cfa3da01df2599ce0f36377dfb0c99d3fa03ed794925b268b4d4f07225aff9cf3b5de07d8a4ff4bf5b061878d63a78f39ca857090fe5a7d60b75948ea4bcff939dc2cec1f4d7e9ce7bac0f88e332fde12ea9cabe14c9ca20b91b03822de9caf827b8459f246dd8d1e5ef69dc6e58047e230311d6f37fd23c334f2cd0de366c3cdf616445b5106005a446e36611ca2ae650f61b1f6feca00bbe05f7b1334e87e6e7718bfa3a754f66ea3a5db5a33cdcf0dcb7b8ba740f52bc3d097683391bdcaf3692e8e139ea75ae96ebc8dc77655066b10dbff45a1b1c00d5ca02336378cc37f519da0090eb94e82474f4f114f7d13685a944239ceb7b0a3c82ee8e6614d92d0eed1806e16d22dcb7ba2054b96a068e215208320070ca4cbdd88dbc9d1d36d5a50f7f3faa1a64aa078060c937055b46712ac3ca251ff5fc22812f594a3eb66f59ffcbc5f14bd65d7e506953b35235ae061ddbcf22fb751cc22ac81261f1df5ade5368abaca2c74d87d31ed950d29fa4c412f21092b029868c9d4e43679185efdf1c1a99638f45debb7605bf8929135ac9e236138e325ea1319c2129874ef2c4ff73d27b69c565f824e9ac4c18f82256c9f6300bba35a6b579f467be613631cf4ae48e4a6dbecf07aed93345c61b71ead6927aa2496d576f11a9ab4f0a7ebafca1c3e76bbd7297ce69c4e2fdc5c198173f5e31a311472ca6aec07be61f9605003279fb352368ca3f390bd59b51ed7bea94734240bac1f1ae58fdf1d415c80ae570ab6e3cc4ad396ea346362ac6dcb78c2518011296f47c6364077a9c1118d38c598a379c4922ee0e3c77078f33798f5123173021c9029167a316f8e59878040551e11ebbf5bbc98553faa8c41ffac4d95ecbccb1d15f0b7c217846448949a2db01a48f7d5f8670848da516257de085219836252a7f0a6650544f04aa7b88bdb01c98a32beb7800d94e4024055c8430216dca32e64534e61e14276cd936e2f14a0f0e96557992068ca5e2d0d51666b554d35bbb81c93ffa0356daaa127b3257504c3ad82fb2a972fcb6f510bc1a34640bf2bde356585d7e56d46076154b4ca88088cb596c1960ad17e10b751e23fb87e2b8eb34704575250748af8e0fb62e9db17c7d547c2b2f6f889a21da6939662ebcf32fa0c857e1ad0f39a57a9aa39314ada6001992fd2adca1d759f98f94e34e58369eadd388c52c2b902a066ea30da69e3f3b1d118febde4821c36ab2509e0726575a131f2bbf07875de0b646e155d06ae9de0b77cc350a12fc82417e49e4901306c46fb59c55829206bdfe60633350de2163fc17755568e4a0bda3b8fcb137c3cdf867c5266094c304165286f63bde0f75d675de890d816df23301bcacd586b55c021f2805a219932af42538679b569471eef51f110e1eb67a5c9a333b8e8d2133824e6662114aa398d81e970b0cf9647fc5394c1bbd56a24080ad8e0e6ea37177b9d613a1c016270b48c9d75554cad1c74635a22e147cd3e17cf4552b28197444f61f9eea839f81314571e4e7f462d080da9b5d3aefb017d31ba2405c3baa530cd7a42ad92ad18b61534018259ae381d131d3d03b5205653666c6575c1ff83a11817cd8d3809937451397807a5b8378d1c596d8cc642eaace930b7c2399e1f683ebf0a16b49996e1a771e53961c71e99d3d61b9d78a64be090d4c32d9f38574f65285c51906bd0bfa98a33b3101b689a5ecb35c81f0e5e7bdaddb7180bb153dda4288463e9489a2e538778a054eb1885aec7f7fae7627a7394019a218ecbdeecb96187429775e72057e0615bcf83faab9d6ad39de63eb99e3bddd7b1b3b2d672eb1ac7f8001dc6acaac5ae37000b8b3800d0e50a6a84cbb0adc1ee03e0aa99e2d82c8ffe12918d3ae8b8e6f87837965af1d26d2475c7f567642028b194bff558e6330f3bbb84584784931ee8c04bc331e6543bd8b8741b396d6716313ac7c9b6c05a11846615a4d14c5767d86f9d174b866fea80743093358207cd1e7a81776a7728deeba7a736750492eae10374687f69c7deecc48ea71c71306b336e475a7874b11e97f03b5f5e90f7cf0408091c4af136414b1f84fdece654af4d938270de3b90bde1c897843c873f3bcc75126ff1be6b9557c48a7862526b6c06f9661b74dcaa11bd531082e6437a07dd669cbde52c7ad8eca915cfe30a83603c6f3bc0da2219cd4997326f0b03643d4b7fa4ba33da390358c026fce9dcb6806b9f7b614b5a03514f2c03c76af2f14867c949e1a8c22a1da0d00df923048bfcafe15a4ace8fd8488e39200182e95d90d9812af7e1bc7b04cb1115b850526d8405c307633edf578e57da1ae4dfb60aec7b7de7e43e2a2a7d02dc3343bca081aa1a59f6e166bd704e82ba7c43a79ca0464c54979985042d0c8dd6a914782f3898aeaba8b525f9ac757199ed34bc4072c2c4d196646d95b1c4d3b8469ec5bb067d81038bba3462ceb37954a2f95f266e6c54f5db0f9d37992d7424a3446d7d3f01756a847a9eb0b87249e15b7c1fd447a4cdde17ffff4ae8379a639f0123cb16a7a715cddc130d88dc795879d5797d4e368047d7c62f9567e1ec47f5be39d8ba8c490cc3725e5c5e9ceca15a5550715566e546a801001341fe48b1a6775b6c8d22d7239836ab1a596cb526c72e511375e7bc33dbf5e82963663ebce2be4d50c10f549c679de2fc746314e8d7c25325f0a494015e3f641fc451f8dca5cb8291a40ecd1617dacc6aaa189f94697e2c75978a2251e051d3392a94b45aafd3a7d7b551dafc59e07fb81358b8123ef0a91b4e2168ea6eea9b8a35853df5a516a22366b40d8cab4d24c7b7362ae96d27db1d22deed2e1ad730944d4f37a9e7e88b56f37cd6e67d4586c60684c52b6b185900582004e9d303d4668fa546d89867fd504f7b0315389074a0698027d5c2ed922b8a1aafa03208dd594ed3ebfe4666bbde2c8bda02c8a601c04349aa73cc3235791486f15b7cc530b9e1a6516719cca7cbdd6c605b621cddba24ff5159348ccad5746a9963e18d6325f33605dae6ba38d483a246f804a627f1f6ad0d611bedc1a19e1c7f09469b681c0fdd233bd5c1af09b65c340f62a9897761038dfca400ce83da0bc80707c0ace6885ae89d8d9c72a862376b7c9caee1ab71b8ddd45c22bd05788ed305f43baceabcde79ddca8f43069f43f4605dadb9f3188d6f48ea74ccad0fd231f570e9675f44ba126e2d29c86cc74d28d40f7194a0d2dff9a3fd9f752bad3fc17e700249a3c2945b6e4fe347819906dbbd9f090d80ec013f240d44b86013044c9979962626653d487e6488a898990b1e3b5a666b9c1cc8289ee7959d1a3a7181a51265ddaaedc77e4db839af747a89e175c60b75f93c3b97bcd339a0ff60ab3a784b5167b5e1cf52e05a6847d17d1b70573ff49aebf26c8e8fa05027871b03fa2ece344b8fe3d2e5031f55c68c2dd729428ba4e7c6b8ec8e8d812632f460aba2ec1072bccb65a9b53473ff7d4bb6a13f603db2daf6533d71bfcbeeafe8802e7b477284d84511a065b09299838e04dd1b4a93d738115dc1b751a01db533ab2355429fc1bd7e55016a05147d1670bbdcf849c03d441167d44e7bdc599f5ff6f99f1935d2babf45872aa98795672a7d783c1b6eefba6d0c8aa68a6ee8fe95b2f1f13a983a83331619f6e43abf782f141090e7e6ae6ddd6c8016a5964fa5cb67762939128afab8db5472107762fc808711580eea993be42fa2f2e966113a07948f73c489aa72059e73142014c089e06a63b07308cff1d136199515ddec83d1fc2cbba2601d5de9bfde5ad4f65c3e5412e516c2c4cff49ec98e56b13554cedb031f329607bc6ed97d0a53985a38f21050d0f70508ee2ce1cab702f9b13ec4e1b6401510eda0d8de3c6908586a04c3239ad7268ffd9a86cef21f1181ae644b119a83d661d60bf337fe810d9d134f276b9fef32b7ec29392e81e30e0e05d2f0e08c73d4001a6d23dc6c5071dc085f02019762663bb8277e3c68136b86cc34aadfb9507e20570bda774b76586119a1ff9dd9a7624ee8423d9bc07562d169075c87f1461611d15dfda2977efe43cf6ebc6d18905a28baa73bdd88d4f86faffc8e99b0589fd811344cfe787b1132ccad92d30e703d12cd873b5e06dd971174dd30acf4b70d3a193ee6570e8e97f9ae86852cdd1a681618dba96aa1e86d426a837668c5949a2938a27ad26647dc0eeae4c94964f494f8917da59b1504b736c1fb2852bb9b49426670a41ea12da75d52091041fd36a75515888ccb3acae8a8b8818bde3794f5f4b4491a6aa1e72230e764e078f8b3c66206cdc2ac247d1e8ec35643980732db432aa8f49ed83717720d832eb791bbe411b2e5637719de004dbaa847923012a9e8b0906c9fdcddd40e204fc2afacd4ab12079f2d384902d7f88ecee5aac12ef9f200a5c082ad3a7a874e7f780854f99fd65f157f6586d5eadaad6ecea366a7a99ff"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1000000003, 0x9, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010329bd700002dcdf2524"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 3.135678189s ago: executing program 1 (id=789): mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x1, 0x0) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20) 2.377033763s ago: executing program 2 (id=790): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/17, 0x11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) socketpair$auto(0x800, 0x9, 0x8000000000000000, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) (async) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) (async) socket(0x1d, 0x2, 0x6) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC0D0c\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) 2.154491678s ago: executing program 1 (id=791): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="120087"], 0x1ac}}, 0x810) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0x800}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x3d, 0xdeb1, 0x803}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mouse0\x00', 0x8000, 0x0) write$auto_mousedev_fops_mousedev(r4, &(0x7f0000000100)="9cad540234c2eb08de0d3de25c689bba2590955bd54323ef2fb02594bced4e73a9192728abd38d0ba039791192d7d88829267e2305882a25ebfab7434e66a77f5cc46997cce84328667e6960b52440606b12226e6374b62d665686cccbce02c2ebdf85e93f48689dc1a65335c0", 0x6d) open(&(0x7f00000003c0)='./file0\x00', 0x14d443, 0x100) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000440)={{0xffffff1b, 0x0, 0xee01, 0x5, 0x9, 0xca82857c, 0x99f8}, 0x84, 0x5, 0x8, 0x3, @inferred, @raw=0x53b, 0x2, 0x0, &(0x7f0000000280)="261061700e33c3342b7606b4a93e9e955c8d790c5b20b4a28af4e4a7f260b4d0ef32deaa08eae5b45677c68ff021acf329731f3fd7a08ff3d1bd762abb50c975f42c1ab6c6ef2e01c078af108ace089b8a8f66e49c35f2aded658dc2d02bd7451553cebe7d9780", &(0x7f00000005c0)="dae536d504bd88537506478a3326857c9d83be26e035ad1d4146ed9a5f5d01f4b322e67d724c6eea280a31ecaa0cc7344f7b08e44ec28742ecd95d73bbb1867d3347cfed11df57d53b998c4df251080e60f59d2f4bbaef735201366bb8a16fc32adf0640af92af5cc225199b6451ac4533e80bd22dc543eedb1134a03816b42628cde091"}) rt_sigqueueinfo$auto(0x0, 0x1, &(0x7f0000000680)={@siginfo_0_0={0xfffffff7, 0x5, 0x9, @_sigchld={0x0, r5, 0x4, 0xcad, 0x5}}}) 1.787037214s ago: executing program 0 (id=792): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) write$auto(0x3, 0x0, 0xfdef) 1.424998157s ago: executing program 2 (id=793): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", "213ea76652ad28e8b96ec5ed5243aea3", "25222c3aac25ccff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799448a9576c948fc3fb995daec2f1fc9170a70b4b71b44f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f17a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d615979b05547405d7e633a060cdb0fc80f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{@inferred, 0xfffffffe, 0x6, 0x7ffffffd, "a2b8e85fc56865ba529faa0000000000000000000000692a240000008000", @raw=0x6}, 0x6, 0x5, 0x7, @inferred=r1, @integer64={0x20f3, 0x9, 0x7f7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x6, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000003600)=""/4110, 0x100e) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x3, 0xd, 0x3, 0x6, 0x7, 0x8, r0, [], {0x86, 0x6, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x200100, 0x1, 0x53, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) setsockopt$auto_SO_BSDCOMPAT(r0, 0x7f, 0xe, &(0x7f00000018c0)='\x00', 0x4) mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0xe7ff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe984, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x1) setresuid$auto(0x8, 0x8, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(0x0, 0x1) r5 = epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) epoll_ctl$auto(r5, 0x40008, r4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_ctl$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.250435995s ago: executing program 3 (id=794): sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014) (async) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) landlock_restrict_self$auto(r0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = socket(0x27, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8953, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) 520.123003ms ago: executing program 3 (id=795): r0 = socket(0x2, 0x801, 0x100) r1 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) msync$auto(0x6, 0x7, 0x7) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) setsockopt$auto(r1, 0x0, 0x13, 0x0, 0x8009) getsockopt$auto(r0, 0x0, 0xd550, &(0x7f0000000040)='#/^\x00', &(0x7f00000000c0)=0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, r2, 0x0, 0x7fffe000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="9bff29bd7000fbdbdf2501"], 0x14}}, 0x0) connect$auto(r3, &(0x7f0000000200)=@isdn={0x22, 0x4, 0x5, 0x48, 0x4}, 0x55) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 230.426525ms ago: executing program 2 (id=796): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2020c0, 0x0) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x2, 0x100000001, 0x1, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x1, 0x7fffffff, 0x5, 0x8000000000007, 0x7, 0x7d6, 0x40000103}) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r1, 0x0, 0x0) socket(0x10, 0x800, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) ioctl$auto(r0, 0x8924, r0) 197.370435ms ago: executing program 0 (id=797): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x26d032fc, 0x200000000002, 0x3, 0xffffffff, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) r4 = getpid() sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c002d50", @ANYRES16=r3, @ANYBLOB="050a2bbd7000fadbdf250100000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) mmap$auto(0x0, 0x20564234, 0xdf, 0x9b72, 0x2, 0x8000) 0s ago: executing program 1 (id=798): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = memfd_create$auto(&(0x7f00000000c0)='..\x007\x10t\x1a\xf9,\xe1\x8b\x02k\x8e\v\xb04\x01\x92\xa5\xb5W\xce\x93yE\x97l\xecw/\x1f\xb4\xf7\a\x7f%\x1a', 0x5) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptybe\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4000041}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) socket(0x2, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x181000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mprotect$auto(0xa67, 0x8000000000000000, 0xfffffffffffffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000240)={0x0, 0xfdef}, 0x9) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): b0 [ 224.519294][ T7389] ? sock_alloc_inode+0x25/0x1c0 [ 224.519345][ T7389] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.519387][ T7389] sock_alloc_inode+0x25/0x1c0 [ 224.519429][ T7389] alloc_inode+0x61/0x240 [ 224.519471][ T7389] sock_alloc+0x40/0x280 [ 224.519512][ T7389] __sock_create+0xc1/0x8d0 [ 224.519567][ T7389] __sys_socket+0x14d/0x260 [ 224.519614][ T7389] ? __pfx___sys_socket+0x10/0x10 [ 224.519662][ T7389] ? rcu_is_watching+0x12/0xc0 [ 224.519698][ T7389] __x64_sys_socket+0x72/0xb0 [ 224.519740][ T7389] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.519780][ T7389] do_syscall_64+0xcd/0x230 [ 224.519828][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.519859][ T7389] RIP: 0033:0x7f723378e969 [ 224.519883][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.519914][ T7389] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.519945][ T7389] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 224.519965][ T7389] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 224.519984][ T7389] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 224.520003][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.520021][ T7389] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 224.520062][ T7389] [ 224.716164][ T7389] socket: no more sockets [ 225.317962][ T7394] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 225.493896][ T7403] nla_validate_range_unsigned: 74 callbacks suppressed [ 225.493918][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.513079][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.521222][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.582138][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.633139][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.641115][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.651513][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.685859][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.725857][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 225.751937][ T7403] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 226.514187][ T7415] can: request_module (can-proto-0) failed. [ 227.301340][ T7435] FAULT_INJECTION: forcing a failure. [ 227.301340][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 227.341538][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.327 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 227.341584][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 227.341598][ T7435] Call Trace: [ 227.341606][ T7435] [ 227.341615][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 227.341656][ T7435] should_fail_ex+0x512/0x640 [ 227.341690][ T7435] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 227.341721][ T7435] should_failslab+0xc2/0x120 [ 227.341751][ T7435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 227.341778][ T7435] ? sk_prot_alloc+0x60/0x2a0 [ 227.341815][ T7435] sk_prot_alloc+0x60/0x2a0 [ 227.341849][ T7435] sk_alloc+0x36/0xc20 [ 227.341874][ T7435] inet_create+0x3a1/0x1090 [ 227.341910][ T7435] ? inet_create+0x93/0x1090 [ 227.341947][ T7435] __sock_create+0x335/0x8d0 [ 227.341988][ T7435] __sys_socket+0x14d/0x260 [ 227.342024][ T7435] ? __pfx___sys_socket+0x10/0x10 [ 227.342061][ T7435] ? rcu_is_watching+0x12/0xc0 [ 227.342088][ T7435] __x64_sys_socket+0x72/0xb0 [ 227.342130][ T7435] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.342163][ T7435] do_syscall_64+0xcd/0x230 [ 227.342200][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.342224][ T7435] RIP: 0033:0x7f03c398e969 [ 227.342243][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.342265][ T7435] RSP: 002b:00007f03c47b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 227.342288][ T7435] RAX: ffffffffffffffda RBX: 00007f03c3bb5fa0 RCX: 00007f03c398e969 [ 227.342303][ T7435] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 227.342317][ T7435] RBP: 00007f03c3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 227.342331][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.342344][ T7435] R13: 0000000000000000 R14: 00007f03c3bb5fa0 R15: 00007ffc8e685bd8 [ 227.342373][ T7435] [ 228.186119][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 228.241180][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.250421][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.267176][ T7456] FAULT_INJECTION: forcing a failure. [ 228.267176][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 228.285494][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.295565][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.300635][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.1.331 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 228.300690][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 228.300712][ T7456] Call Trace: [ 228.300722][ T7456] [ 228.300736][ T7456] dump_stack_lvl+0x16c/0x1f0 [ 228.300791][ T7456] should_fail_ex+0x512/0x640 [ 228.300840][ T7456] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 228.300892][ T7456] should_failslab+0xc2/0x120 [ 228.300937][ T7456] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 228.300976][ T7456] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.301018][ T7456] ? sock_alloc_inode+0x25/0x1c0 [ 228.301079][ T7456] ? __pfx_sock_alloc_inode+0x10/0x10 [ 228.301123][ T7456] sock_alloc_inode+0x25/0x1c0 [ 228.301169][ T7456] alloc_inode+0x61/0x240 [ 228.301212][ T7456] sock_alloc+0x40/0x280 [ 228.301258][ T7456] __sock_create+0xc1/0x8d0 [ 228.301320][ T7456] __sys_socket+0x14d/0x260 [ 228.301374][ T7456] ? __pfx___sys_socket+0x10/0x10 [ 228.301428][ T7456] ? rcu_is_watching+0x12/0xc0 [ 228.301469][ T7456] __x64_sys_socket+0x72/0xb0 [ 228.301518][ T7456] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.301564][ T7456] do_syscall_64+0xcd/0x230 [ 228.301616][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.301653][ T7456] RIP: 0033:0x7f723378e969 [ 228.301680][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.301715][ T7456] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 228.301748][ T7456] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 228.301770][ T7456] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 228.301791][ T7456] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 228.301811][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.301831][ T7456] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 228.301874][ T7456] [ 228.302009][ T7456] socket: no more sockets [ 230.865895][ T7490] FAULT_INJECTION: forcing a failure. [ 230.865895][ T7490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.930679][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.0.340 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 230.930727][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 230.930747][ T7490] Call Trace: [ 230.930757][ T7490] [ 230.930768][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 230.930822][ T7490] should_fail_ex+0x512/0x640 [ 230.930873][ T7490] get_futex_key+0x49e/0x1000 [ 230.930911][ T7490] ? __pfx_get_futex_key+0x10/0x10 [ 230.930943][ T7490] ? rcu_is_watching+0x12/0xc0 [ 230.930978][ T7490] ? __resched_curr+0x2a0/0x3a0 [ 230.931032][ T7490] futex_wait_setup+0x78/0x290 [ 230.931085][ T7490] __futex_wait+0x266/0x3c0 [ 230.931131][ T7490] ? __pfx___futex_wait+0x10/0x10 [ 230.931173][ T7490] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.931221][ T7490] ? __pfx_futex_wake_mark+0x10/0x10 [ 230.931283][ T7490] futex_wait+0xe8/0x380 [ 230.931326][ T7490] ? __pfx_futex_wait+0x10/0x10 [ 230.931376][ T7490] ? percpu_counter_add_batch+0xb8/0x1f0 [ 230.931416][ T7490] ? errseq_sample+0x53/0x70 [ 230.931463][ T7490] ? file_init_path+0x4fe/0x760 [ 230.931507][ T7490] do_futex+0x229/0x350 [ 230.931541][ T7490] ? __pfx_do_futex+0x10/0x10 [ 230.931575][ T7490] ? fd_install+0x225/0x750 [ 230.931641][ T7490] __x64_sys_futex+0x1e0/0x4c0 [ 230.931677][ T7490] ? __sys_socket+0xac/0x260 [ 230.931727][ T7490] ? __pfx___x64_sys_futex+0x10/0x10 [ 230.931758][ T7490] ? rcu_is_watching+0x12/0xc0 [ 230.931788][ T7490] do_syscall_64+0xcd/0x230 [ 230.931826][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.931853][ T7490] RIP: 0033:0x7f03c398e969 [ 230.931876][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.931902][ T7490] RSP: 002b:00007f03c47b20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.931928][ T7490] RAX: ffffffffffffffda RBX: 00007f03c3bb5fa8 RCX: 00007f03c398e969 [ 230.931946][ T7490] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03c3bb5fa8 [ 230.931960][ T7490] RBP: 00007f03c3bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.931974][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03c3bb5fac [ 230.931989][ T7490] R13: 0000000000000000 R14: 00007ffc8e685af0 R15: 00007ffc8e685bd8 [ 230.932017][ T7490] [ 232.702038][ T7509] nla_validate_range_unsigned: 46 callbacks suppressed [ 232.702065][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.728132][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.741249][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.755132][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.763996][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.839197][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.863284][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.895479][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.932295][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 232.977074][ T7509] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 234.684170][ T7535] random: crng reseeded on system resumption [ 235.256674][ T5833] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 235.837295][ T1333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.076311][ T1333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.206404][ T1333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.351565][ T1333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.881845][ T1333] bridge_slave_1: left allmulticast mode [ 236.892323][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.922719][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.936474][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.953579][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.972850][ T1333] bridge_slave_1: left promiscuous mode [ 236.979858][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.998972][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.181586][ T1333] bridge_slave_0: left allmulticast mode [ 237.189494][ T1333] bridge_slave_0: left promiscuous mode [ 237.268680][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.104725][ T5848] Bluetooth: hci4: command tx timeout [ 239.456772][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.477406][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.489957][ T1333] bond0 (unregistering): Released all slaves [ 240.225689][ T1333] hsr_slave_0: left promiscuous mode [ 240.245273][ T1333] hsr_slave_1: left promiscuous mode [ 240.265752][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.275487][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.295058][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.316001][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.392461][ T1333] veth1_macvtap: left promiscuous mode [ 240.443908][ T1333] veth0_macvtap: left promiscuous mode [ 240.449754][ T1333] veth1_vlan: left promiscuous mode [ 240.477214][ T1333] veth0_vlan: left promiscuous mode [ 241.184635][ T5848] Bluetooth: hci4: command tx timeout [ 242.008263][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 242.061021][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 243.263527][ T5848] Bluetooth: hci4: command tx timeout [ 243.729918][ T7659] FAULT_INJECTION: forcing a failure. [ 243.729918][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 243.852795][ T7659] CPU: 1 UID: 0 PID: 7659 Comm: syz.3.364 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 243.852848][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 243.852874][ T7659] Call Trace: [ 243.852886][ T7659] [ 243.852903][ T7659] dump_stack_lvl+0x16c/0x1f0 [ 243.852969][ T7659] should_fail_ex+0x512/0x640 [ 243.853015][ T7659] ? __build_skb_around+0x278/0x3b0 [ 243.853072][ T7659] should_failslab+0xc2/0x120 [ 243.853114][ T7659] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 243.853152][ T7659] ? sctp_chunkify+0x51/0x2d0 [ 243.853199][ T7659] sctp_chunkify+0x51/0x2d0 [ 243.853240][ T7659] _sctp_make_chunk+0x148/0x270 [ 243.853283][ T7659] sctp_make_control+0x2f/0x2d0 [ 243.853325][ T7659] sctp_make_shutdown+0xb6/0x1d0 [ 243.853369][ T7659] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 243.853418][ T7659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.853467][ T7659] sctp_sf_do_9_2_start_shutdown+0x27/0x490 [ 243.853515][ T7659] sctp_sf_do_9_2_prm_shutdown+0x11c/0x150 [ 243.853555][ T7659] ? __pfx_sctp_pname+0x10/0x10 [ 243.853596][ T7659] sctp_do_sm+0x17e/0x5c80 [ 243.853637][ T7659] ? __kernel_text_address+0xd/0x40 [ 243.853688][ T7659] ? unwind_get_return_address+0x59/0xa0 [ 243.853726][ T7659] ? arch_stack_walk+0xa6/0x100 [ 243.853765][ T7659] ? __pfx_sctp_do_sm+0x10/0x10 [ 243.853802][ T7659] ? register_lock_class+0x41/0x4c0 [ 243.853887][ T7659] ? mark_held_locks+0x49/0x80 [ 243.853925][ T7659] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.853994][ T7659] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.854036][ T7659] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.854083][ T7659] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 243.854128][ T7659] sctp_close+0x3ff/0x940 [ 243.854187][ T7659] ? __pfx_sctp_close+0x10/0x10 [ 243.854238][ T7659] ? __pfx___might_resched+0x10/0x10 [ 243.854284][ T7659] ? ip_mc_drop_socket+0x1f/0x280 [ 243.854321][ T7659] ? down_write+0x14d/0x200 [ 243.854376][ T7659] inet_release+0x13c/0x280 [ 243.854425][ T7659] inet6_release+0x4f/0x70 [ 243.854457][ T7659] __sock_release+0xb0/0x270 [ 243.854500][ T7659] ? __pfx_sock_close+0x10/0x10 [ 243.854536][ T7659] sock_close+0x1c/0x30 [ 243.854574][ T7659] __fput+0x3ff/0xb70 [ 243.854617][ T7659] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.854662][ T7659] task_work_run+0x14d/0x240 [ 243.854716][ T7659] ? __pfx_task_work_run+0x10/0x10 [ 243.854767][ T7659] ? __pfx___do_sys_close_range+0x10/0x10 [ 243.854799][ T7659] ? rcu_is_watching+0x12/0xc0 [ 243.854838][ T7659] syscall_exit_to_user_mode+0x27b/0x2a0 [ 243.854887][ T7659] do_syscall_64+0xda/0x230 [ 243.854949][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.854985][ T7659] RIP: 0033:0x7fbd2ef8e969 [ 243.855012][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.855046][ T7659] RSP: 002b:00007fbd2fd97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.855079][ T7659] RAX: 0000000000000000 RBX: 00007fbd2f1b6240 RCX: 00007fbd2ef8e969 [ 243.855101][ T7659] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 243.855121][ T7659] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 243.855141][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.855162][ T7659] R13: 0000000000000000 R14: 00007fbd2f1b6240 R15: 00007ffc86e47228 [ 243.855206][ T7659] [ 244.487090][ T7562] chnl_net:caif_netlink_parms(): no params data found [ 245.160381][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.168014][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.176964][ T7562] bridge_slave_0: entered allmulticast mode [ 245.227857][ T7562] bridge_slave_0: entered promiscuous mode [ 245.304871][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.327289][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.352370][ T7562] bridge_slave_1: entered allmulticast mode [ 245.359959][ T5848] Bluetooth: hci4: command tx timeout [ 245.396486][ T7562] bridge_slave_1: entered promiscuous mode [ 245.581707][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.625446][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.881460][ T7562] team0: Port device team_slave_0 added [ 246.037797][ T7562] team0: Port device team_slave_1 added [ 246.192040][ T7713] nla_validate_range_unsigned: 18 callbacks suppressed [ 246.192070][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.207709][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.216836][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.238421][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.264407][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.354554][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.401632][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.435947][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.489904][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.573895][ T7562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.642775][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.675827][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.747588][ T7715] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 246.753025][ T7713] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 246.797391][ T7715] CIFS mount error: No usable UNC path provided in device string! [ 246.797391][ T7715] [ 246.808216][ T7715] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.942391][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.962737][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.050328][ T7562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.844278][ T7562] hsr_slave_0: entered promiscuous mode [ 247.867198][ T7562] hsr_slave_1: entered promiscuous mode [ 248.064522][ T5848] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 251.468689][ T7562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.494142][ T7562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.556276][ T7562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.613899][ T7562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.691815][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.769095][ T7562] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.812848][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.820188][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.873838][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.881077][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.077950][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.222708][ T7562] veth0_vlan: entered promiscuous mode [ 254.312422][ T7562] veth1_vlan: entered promiscuous mode [ 254.680817][ T7831] CIFS mount error: No usable UNC path provided in device string! [ 254.680817][ T7831] [ 254.691780][ T7831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.891336][ T7562] veth0_macvtap: entered promiscuous mode [ 254.957137][ T7562] veth1_macvtap: entered promiscuous mode [ 255.298020][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.341423][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.368110][ T7838] FAULT_INJECTION: forcing a failure. [ 255.368110][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.393643][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.424277][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.2.384 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 255.424326][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 255.424346][ T7838] Call Trace: [ 255.424357][ T7838] [ 255.424369][ T7838] dump_stack_lvl+0x16c/0x1f0 [ 255.424419][ T7838] should_fail_ex+0x512/0x640 [ 255.424470][ T7838] _copy_from_user+0x2e/0xd0 [ 255.424522][ T7838] move_addr_to_kernel+0x65/0x170 [ 255.424572][ T7838] __sys_connect+0xaf/0x170 [ 255.424601][ T7838] ? __pfx___sys_connect+0x10/0x10 [ 255.424669][ T7838] ? __pfx_ksys_write+0x10/0x10 [ 255.424705][ T7838] ? rcu_is_watching+0x12/0xc0 [ 255.424743][ T7838] __x64_sys_connect+0x72/0xb0 [ 255.424798][ T7838] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.424841][ T7838] do_syscall_64+0xcd/0x230 [ 255.424889][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.424921][ T7838] RIP: 0033:0x7ff71b58e969 [ 255.424947][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.424978][ T7838] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 255.425008][ T7838] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 255.425038][ T7838] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.425059][ T7838] RBP: 00007ff71c385090 R08: 0000000000000000 R09: 0000000000000000 [ 255.425080][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.425121][ T7838] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 255.425163][ T7838] [ 255.428149][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.664238][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.707472][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.733779][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.747937][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.842684][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.926483][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.253431][ T7562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.282343][ T7562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.306327][ T7562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.322599][ T7562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.725495][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.750987][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.857318][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.898769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.168649][ T7876] FAULT_INJECTION: forcing a failure. [ 257.168649][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 257.191721][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.3.389 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 257.191768][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 257.191783][ T7876] Call Trace: [ 257.191791][ T7876] [ 257.191801][ T7876] dump_stack_lvl+0x16c/0x1f0 [ 257.191840][ T7876] should_fail_ex+0x512/0x640 [ 257.191875][ T7876] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 257.191922][ T7876] should_failslab+0xc2/0x120 [ 257.191954][ T7876] __kmalloc_cache_noprof+0x6a/0x3e0 [ 257.191996][ T7876] ? open_substream+0xec/0x9b0 [ 257.192032][ T7876] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.192065][ T7876] open_substream+0xec/0x9b0 [ 257.192106][ T7876] rawmidi_open_priv+0x543/0x6e0 [ 257.192152][ T7876] snd_rawmidi_open+0x4cc/0xbf0 [ 257.192181][ T7876] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 257.192206][ T7876] ? __pfx_default_wake_function+0x10/0x10 [ 257.192235][ T7876] ? kobject_get_unless_zero+0x156/0x1e0 [ 257.192282][ T7876] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 257.192313][ T7876] snd_open+0x1fe/0x450 [ 257.192354][ T7876] ? __pfx_snd_open+0x10/0x10 [ 257.192391][ T7876] chrdev_open+0x231/0x6a0 [ 257.192417][ T7876] ? __pfx_apparmor_file_open+0x10/0x10 [ 257.192450][ T7876] ? __pfx_chrdev_open+0x10/0x10 [ 257.192479][ T7876] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 257.192549][ T7876] do_dentry_open+0x741/0x1c10 [ 257.192583][ T7876] ? __pfx_chrdev_open+0x10/0x10 [ 257.192623][ T7876] vfs_open+0x82/0x3f0 [ 257.192678][ T7876] path_openat+0x1e5e/0x2d40 [ 257.192715][ T7876] ? __pfx_path_openat+0x10/0x10 [ 257.192746][ T7876] do_filp_open+0x20b/0x470 [ 257.192770][ T7876] ? __pfx_do_filp_open+0x10/0x10 [ 257.192815][ T7876] ? alloc_fd+0x471/0x7d0 [ 257.192861][ T7876] do_sys_openat2+0x11b/0x1d0 [ 257.192893][ T7876] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.192927][ T7876] ? __sys_sendmsg+0x199/0x220 [ 257.192960][ T7876] __x64_sys_openat+0x174/0x210 [ 257.192993][ T7876] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.193028][ T7876] ? rcu_is_watching+0x12/0xc0 [ 257.193076][ T7876] do_syscall_64+0xcd/0x230 [ 257.193113][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.193137][ T7876] RIP: 0033:0x7fbd2ef8e969 [ 257.193157][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.193181][ T7876] RSP: 002b:00007fbd2fdd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.193204][ T7876] RAX: ffffffffffffffda RBX: 00007fbd2f1b6080 RCX: 00007fbd2ef8e969 [ 257.193220][ T7876] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 257.193236][ T7876] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 257.193251][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.193265][ T7876] R13: 0000000000000000 R14: 00007fbd2f1b6080 R15: 00007ffc86e47228 [ 257.193295][ T7876] [ 257.897210][ T7892] FAULT_INJECTION: forcing a failure. [ 257.897210][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 257.929646][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.2.392 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 257.929692][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 257.929707][ T7892] Call Trace: [ 257.929714][ T7892] [ 257.929738][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 257.929775][ T7892] should_fail_ex+0x512/0x640 [ 257.929806][ T7892] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 257.929834][ T7892] should_failslab+0xc2/0x120 [ 257.929866][ T7892] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 257.929894][ T7892] ? alloc_empty_file+0x55/0x1e0 [ 257.929927][ T7892] alloc_empty_file+0x55/0x1e0 [ 257.929958][ T7892] path_openat+0xe0/0x2d40 [ 257.929978][ T7892] ? __x64_sys_openat+0x174/0x210 [ 257.930008][ T7892] ? do_syscall_64+0xcd/0x230 [ 257.930040][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.930073][ T7892] ? __pfx_path_openat+0x10/0x10 [ 257.930103][ T7892] do_filp_open+0x20b/0x470 [ 257.930126][ T7892] ? __pfx_do_filp_open+0x10/0x10 [ 257.930168][ T7892] ? alloc_fd+0x471/0x7d0 [ 257.930212][ T7892] do_sys_openat2+0x11b/0x1d0 [ 257.930242][ T7892] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.930277][ T7892] ? __fget_files+0x20e/0x3c0 [ 257.930318][ T7892] __x64_sys_openat+0x174/0x210 [ 257.930349][ T7892] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.930381][ T7892] ? ksys_write+0x1b9/0x240 [ 257.930402][ T7892] ? rcu_is_watching+0x12/0xc0 [ 257.930432][ T7892] do_syscall_64+0xcd/0x230 [ 257.930467][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.930490][ T7892] RIP: 0033:0x7ff71b58e969 [ 257.930508][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.930531][ T7892] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.930554][ T7892] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 257.930570][ T7892] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 257.930585][ T7892] RBP: 00007ff71c385090 R08: 0000000000000000 R09: 0000000000000000 [ 257.930599][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.930614][ T7892] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 257.930642][ T7892] [ 259.466391][ T7915] FAULT_INJECTION: forcing a failure. [ 259.466391][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 259.479442][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.3.394 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 259.479473][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 259.479487][ T7915] Call Trace: [ 259.479494][ T7915] [ 259.479502][ T7915] dump_stack_lvl+0x16c/0x1f0 [ 259.479540][ T7915] should_fail_ex+0x512/0x640 [ 259.479583][ T7915] should_failslab+0xc2/0x120 [ 259.479612][ T7915] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 259.479640][ T7915] ? sctp_get_port_local+0x51e/0x1610 [ 259.479680][ T7915] sctp_get_port_local+0x51e/0x1610 [ 259.479722][ T7915] ? __pfx_sctp_get_port_local+0x10/0x10 [ 259.479756][ T7915] ? sctp_bind_addr_match+0x193/0x300 [ 259.479791][ T7915] ? sctp_bind_addr_match+0x19d/0x300 [ 259.479826][ T7915] sctp_do_bind+0x223/0x700 [ 259.479855][ T7915] sctp_connect_new_asoc+0x5fd/0x790 [ 259.479882][ T7915] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 259.479911][ T7915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.479946][ T7915] ? sctp_get_af_specific+0x62/0x70 [ 259.479983][ T7915] __sctp_connect+0x3f3/0xc60 [ 259.480011][ T7915] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.480047][ T7915] ? __pfx___sctp_connect+0x10/0x10 [ 259.480074][ T7915] ? __pfx_sctp_inet_connect+0x10/0x10 [ 259.480099][ T7915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.480133][ T7915] ? __pfx_sctp_inet_connect+0x10/0x10 [ 259.480155][ T7915] sctp_inet_connect+0x15f/0x200 [ 259.480182][ T7915] __sys_connect_file+0x13e/0x1a0 [ 259.480224][ T7915] __sys_connect+0x14d/0x170 [ 259.480244][ T7915] ? __pfx___sys_connect+0x10/0x10 [ 259.480292][ T7915] ? __pfx_ksys_write+0x10/0x10 [ 259.480313][ T7915] ? rcu_is_watching+0x12/0xc0 [ 259.480340][ T7915] __x64_sys_connect+0x72/0xb0 [ 259.480360][ T7915] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.480390][ T7915] do_syscall_64+0xcd/0x230 [ 259.480426][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.480450][ T7915] RIP: 0033:0x7fbd2ef8e969 [ 259.480470][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.480492][ T7915] RSP: 002b:00007fbd2fdfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 259.480514][ T7915] RAX: ffffffffffffffda RBX: 00007fbd2f1b5fa0 RCX: 00007fbd2ef8e969 [ 259.480530][ T7915] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.480544][ T7915] RBP: 00007fbd2fdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 259.480564][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.480577][ T7915] R13: 0000000000000000 R14: 00007fbd2f1b5fa0 R15: 00007ffc86e47228 [ 259.480607][ T7915] [ 260.575481][ T7934] FAULT_INJECTION: forcing a failure. [ 260.575481][ T7934] name fail_futex, interval 1, probability 0, space 0, times 0 [ 260.589173][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.2.397 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 260.589214][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 260.589228][ T7934] Call Trace: [ 260.589236][ T7934] [ 260.589245][ T7934] dump_stack_lvl+0x16c/0x1f0 [ 260.589284][ T7934] should_fail_ex+0x512/0x640 [ 260.589322][ T7934] get_futex_key+0x49e/0x1000 [ 260.589350][ T7934] ? __pfx_get_futex_key+0x10/0x10 [ 260.589385][ T7934] futex_wake+0xe7/0x4e0 [ 260.589417][ T7934] ? __pfx_futex_wake+0x10/0x10 [ 260.589446][ T7934] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 260.589484][ T7934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.589519][ T7934] ? resize_runtime_buffer+0x3b1/0x4f0 [ 260.589554][ T7934] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.589588][ T7934] do_futex+0x1e3/0x350 [ 260.589614][ T7934] ? __pfx_do_futex+0x10/0x10 [ 260.589639][ T7934] ? snd_rawmidi_input_params+0x1a9/0x2c0 [ 260.589684][ T7934] __x64_sys_futex+0x1e0/0x4c0 [ 260.589714][ T7934] ? __pfx___x64_sys_futex+0x10/0x10 [ 260.589760][ T7934] do_syscall_64+0xcd/0x230 [ 260.589797][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.589821][ T7934] RIP: 0033:0x7ff71b58e969 [ 260.589840][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.589864][ T7934] RSP: 002b:00007ff71c3850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.589887][ T7934] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa8 RCX: 00007ff71b58e969 [ 260.589903][ T7934] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff71b7b5fac [ 260.589918][ T7934] RBP: 00007ff71b7b5fa0 R08: 00007ff71c386000 R09: 0000000000000000 [ 260.589933][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff71b7b5fac [ 260.589947][ T7934] R13: 0000000000000000 R14: 00007fffe0ce0bd0 R15: 00007fffe0ce0cb8 [ 260.589976][ T7934] [ 261.120843][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.132438][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.583247][ T7954] FAULT_INJECTION: forcing a failure. [ 261.583247][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 261.640377][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.2.400 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 261.640436][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 261.640456][ T7954] Call Trace: [ 261.640469][ T7954] [ 261.640482][ T7954] dump_stack_lvl+0x16c/0x1f0 [ 261.640534][ T7954] should_fail_ex+0x512/0x640 [ 261.640583][ T7954] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 261.640644][ T7954] should_failslab+0xc2/0x120 [ 261.640685][ T7954] __kmalloc_cache_noprof+0x6a/0x3e0 [ 261.640743][ T7954] ? snd_midi_event_new+0x6f/0x210 [ 261.640795][ T7954] snd_midi_event_new+0x6f/0x210 [ 261.640839][ T7954] snd_virmidi_input_open+0x107/0x4a0 [ 261.640892][ T7954] open_substream+0x478/0x9b0 [ 261.640947][ T7954] rawmidi_open_priv+0x513/0x6e0 [ 261.641010][ T7954] snd_rawmidi_open+0x4cc/0xbf0 [ 261.641049][ T7954] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 261.641082][ T7954] ? __pfx_default_wake_function+0x10/0x10 [ 261.641119][ T7954] ? kobject_get_unless_zero+0x156/0x1e0 [ 261.641174][ T7954] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 261.641205][ T7954] snd_open+0x1fe/0x450 [ 261.641246][ T7954] ? __pfx_snd_open+0x10/0x10 [ 261.641284][ T7954] chrdev_open+0x231/0x6a0 [ 261.641318][ T7954] ? __pfx_apparmor_file_open+0x10/0x10 [ 261.641361][ T7954] ? __pfx_chrdev_open+0x10/0x10 [ 261.641417][ T7954] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 261.641478][ T7954] do_dentry_open+0x741/0x1c10 [ 261.641513][ T7954] ? __pfx_chrdev_open+0x10/0x10 [ 261.641559][ T7954] vfs_open+0x82/0x3f0 [ 261.641607][ T7954] path_openat+0x1e5e/0x2d40 [ 261.641654][ T7954] ? __pfx_path_openat+0x10/0x10 [ 261.641697][ T7954] do_filp_open+0x20b/0x470 [ 261.641729][ T7954] ? __pfx_do_filp_open+0x10/0x10 [ 261.641791][ T7954] ? alloc_fd+0x471/0x7d0 [ 261.641853][ T7954] do_sys_openat2+0x11b/0x1d0 [ 261.641899][ T7954] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.641962][ T7954] __x64_sys_openat+0x174/0x210 [ 261.642007][ T7954] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.642056][ T7954] ? rcu_is_watching+0x12/0xc0 [ 261.642100][ T7954] do_syscall_64+0xcd/0x230 [ 261.642150][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.642184][ T7954] RIP: 0033:0x7ff71b58e969 [ 261.642209][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.642241][ T7954] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.642273][ T7954] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 261.642294][ T7954] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 261.642315][ T7954] RBP: 00007ff71b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.642335][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.642355][ T7954] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 261.642406][ T7954] [ 262.256981][ T7962] FAULT_INJECTION: forcing a failure. [ 262.256981][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 262.339489][ T7962] CPU: 0 UID: 0 PID: 7962 Comm: syz.1.402 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 262.339545][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 262.339563][ T7962] Call Trace: [ 262.339574][ T7962] [ 262.339585][ T7962] dump_stack_lvl+0x16c/0x1f0 [ 262.339633][ T7962] should_fail_ex+0x512/0x640 [ 262.339678][ T7962] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.339717][ T7962] should_failslab+0xc2/0x120 [ 262.339755][ T7962] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.339792][ T7962] ? security_file_alloc+0x34/0x2b0 [ 262.339841][ T7962] security_file_alloc+0x34/0x2b0 [ 262.339896][ T7962] init_file+0x93/0x4c0 [ 262.339936][ T7962] alloc_empty_file+0x73/0x1e0 [ 262.339979][ T7962] path_openat+0xe0/0x2d40 [ 262.340006][ T7962] ? __x64_sys_openat+0x174/0x210 [ 262.340045][ T7962] ? do_syscall_64+0xcd/0x230 [ 262.340087][ T7962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.340131][ T7962] ? __pfx_path_openat+0x10/0x10 [ 262.340168][ T7962] do_filp_open+0x20b/0x470 [ 262.340197][ T7962] ? __pfx_do_filp_open+0x10/0x10 [ 262.340254][ T7962] ? alloc_fd+0x471/0x7d0 [ 262.340311][ T7962] do_sys_openat2+0x11b/0x1d0 [ 262.340350][ T7962] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.340394][ T7962] ? __fget_files+0x20e/0x3c0 [ 262.340450][ T7962] __x64_sys_openat+0x174/0x210 [ 262.340493][ T7962] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.340546][ T7962] ? ksys_write+0x1b9/0x240 [ 262.340576][ T7962] ? rcu_is_watching+0x12/0xc0 [ 262.340616][ T7962] do_syscall_64+0xcd/0x230 [ 262.340662][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.340693][ T7962] RIP: 0033:0x7f723378e969 [ 262.340718][ T7962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.340749][ T7962] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.340777][ T7962] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 262.340799][ T7962] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 262.340820][ T7962] RBP: 00007f723467c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.340839][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.340858][ T7962] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 262.340899][ T7962] [ 262.575210][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.398943][ T8052] FAULT_INJECTION: forcing a failure. [ 266.398943][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 266.443773][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.414 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 266.443819][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 266.443835][ T8052] Call Trace: [ 266.443842][ T8052] [ 266.443851][ T8052] dump_stack_lvl+0x16c/0x1f0 [ 266.443891][ T8052] should_fail_ex+0x512/0x640 [ 266.443926][ T8052] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 266.443989][ T8052] should_failslab+0xc2/0x120 [ 266.444020][ T8052] __kmalloc_cache_noprof+0x6a/0x3e0 [ 266.444062][ T8052] ? open_substream+0xec/0x9b0 [ 266.444097][ T8052] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.444129][ T8052] open_substream+0xec/0x9b0 [ 266.444168][ T8052] rawmidi_open_priv+0x543/0x6e0 [ 266.444212][ T8052] snd_rawmidi_open+0x4cc/0xbf0 [ 266.444240][ T8052] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 266.444265][ T8052] ? __pfx_default_wake_function+0x10/0x10 [ 266.444303][ T8052] ? kobject_get_unless_zero+0x156/0x1e0 [ 266.444344][ T8052] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 266.444366][ T8052] snd_open+0x1fe/0x450 [ 266.444397][ T8052] ? __pfx_snd_open+0x10/0x10 [ 266.444426][ T8052] chrdev_open+0x231/0x6a0 [ 266.444452][ T8052] ? __pfx_apparmor_file_open+0x10/0x10 [ 266.444483][ T8052] ? __pfx_chrdev_open+0x10/0x10 [ 266.444510][ T8052] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 266.444553][ T8052] do_dentry_open+0x741/0x1c10 [ 266.444578][ T8052] ? __pfx_chrdev_open+0x10/0x10 [ 266.444609][ T8052] vfs_open+0x82/0x3f0 [ 266.444643][ T8052] path_openat+0x1e5e/0x2d40 [ 266.444677][ T8052] ? __pfx_path_openat+0x10/0x10 [ 266.444708][ T8052] do_filp_open+0x20b/0x470 [ 266.444731][ T8052] ? __pfx_do_filp_open+0x10/0x10 [ 266.444775][ T8052] ? alloc_fd+0x471/0x7d0 [ 266.444820][ T8052] do_sys_openat2+0x11b/0x1d0 [ 266.444852][ T8052] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.444896][ T8052] __x64_sys_openat+0x174/0x210 [ 266.444929][ T8052] ? __pfx___x64_sys_openat+0x10/0x10 [ 266.444964][ T8052] ? rcu_is_watching+0x12/0xc0 [ 266.444994][ T8052] do_syscall_64+0xcd/0x230 [ 266.445030][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.445055][ T8052] RIP: 0033:0x7f542f18e969 [ 266.445074][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.445098][ T8052] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.445121][ T8052] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 266.445137][ T8052] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 266.445152][ T8052] RBP: 00007f542f210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 266.445166][ T8052] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 266.445181][ T8052] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 266.445211][ T8052] [ 266.732179][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.426411][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 269.435453][ T8119] team_slave_0: entered allmulticast mode [ 270.245161][ T8136] FAULT_INJECTION: forcing a failure. [ 270.245161][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 270.292255][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.3.425 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 270.292304][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 270.292325][ T8136] Call Trace: [ 270.292337][ T8136] [ 270.292349][ T8136] dump_stack_lvl+0x16c/0x1f0 [ 270.292401][ T8136] should_fail_ex+0x512/0x640 [ 270.292444][ T8136] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 270.292503][ T8136] should_failslab+0xc2/0x120 [ 270.292544][ T8136] __kmalloc_cache_noprof+0x6a/0x3e0 [ 270.292597][ T8136] ? open_substream+0xec/0x9b0 [ 270.292644][ T8136] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.292687][ T8136] open_substream+0xec/0x9b0 [ 270.292740][ T8136] rawmidi_open_priv+0x543/0x6e0 [ 270.292812][ T8136] snd_rawmidi_open+0x4cc/0xbf0 [ 270.292854][ T8136] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 270.292887][ T8136] ? __pfx_default_wake_function+0x10/0x10 [ 270.292921][ T8136] ? kobject_get_unless_zero+0x156/0x1e0 [ 270.292972][ T8136] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 270.293003][ T8136] snd_open+0x1fe/0x450 [ 270.293043][ T8136] ? __pfx_snd_open+0x10/0x10 [ 270.293083][ T8136] chrdev_open+0x231/0x6a0 [ 270.293118][ T8136] ? __pfx_apparmor_file_open+0x10/0x10 [ 270.293160][ T8136] ? __pfx_chrdev_open+0x10/0x10 [ 270.293200][ T8136] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 270.293258][ T8136] do_dentry_open+0x741/0x1c10 [ 270.293290][ T8136] ? __pfx_chrdev_open+0x10/0x10 [ 270.293331][ T8136] vfs_open+0x82/0x3f0 [ 270.293376][ T8136] path_openat+0x1e5e/0x2d40 [ 270.293422][ T8136] ? __pfx_path_openat+0x10/0x10 [ 270.293467][ T8136] do_filp_open+0x20b/0x470 [ 270.293502][ T8136] ? __pfx_do_filp_open+0x10/0x10 [ 270.293562][ T8136] ? alloc_fd+0x471/0x7d0 [ 270.293621][ T8136] do_sys_openat2+0x11b/0x1d0 [ 270.293662][ T8136] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.293721][ T8136] __x64_sys_openat+0x174/0x210 [ 270.293775][ T8136] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.293827][ T8136] ? rcu_is_watching+0x12/0xc0 [ 270.293867][ T8136] do_syscall_64+0xcd/0x230 [ 270.293915][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.293949][ T8136] RIP: 0033:0x7fbd2ef8e969 [ 270.293975][ T8136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.294008][ T8136] RSP: 002b:00007fbd2fdfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.294039][ T8136] RAX: ffffffffffffffda RBX: 00007fbd2f1b5fa0 RCX: 00007fbd2ef8e969 [ 270.294060][ T8136] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 270.294098][ T8136] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 270.294118][ T8136] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000 [ 270.294138][ T8136] R13: 0000000000000000 R14: 00007fbd2f1b5fa0 R15: 00007ffc86e47228 [ 270.294181][ T8136] [ 270.947427][ T8144] nla_validate_range_unsigned: 18 callbacks suppressed [ 270.947456][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 270.983682][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 270.997071][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.006382][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.015994][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.024902][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.043205][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.051034][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.069141][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 271.105580][ T8144] netlink: 'syz.2.427': attribute type 11 has an invalid length. [ 273.284071][ T8183] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[8183] [ 273.990895][ T8188] can: request_module (can-proto-0) failed. [ 274.729989][ T8201] FAULT_INJECTION: forcing a failure. [ 274.729989][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 274.806220][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.1.437 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 274.806266][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 274.806285][ T8201] Call Trace: [ 274.806295][ T8201] [ 274.806307][ T8201] dump_stack_lvl+0x16c/0x1f0 [ 274.806358][ T8201] should_fail_ex+0x512/0x640 [ 274.806409][ T8201] should_failslab+0xc2/0x120 [ 274.806448][ T8201] __kmalloc_cache_noprof+0x6a/0x3e0 [ 274.806503][ T8201] ? sctp_add_bind_addr+0xae/0x3f0 [ 274.806549][ T8201] sctp_add_bind_addr+0xae/0x3f0 [ 274.806597][ T8201] sctp_copy_local_addr_list+0x39d/0x5a0 [ 274.806652][ T8201] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 274.806714][ T8201] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 274.806772][ T8201] ? sctp_bind_addr_copy+0xe0/0x530 [ 274.806813][ T8201] sctp_bind_addr_copy+0xe0/0x530 [ 274.806866][ T8201] sctp_connect_new_asoc+0x1d7/0x790 [ 274.806904][ T8201] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 274.806942][ T8201] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 274.807007][ T8201] __sctp_connect+0x3f3/0xc60 [ 274.807046][ T8201] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.807098][ T8201] ? __pfx___sctp_connect+0x10/0x10 [ 274.807134][ T8201] ? __pfx_sctp_inet_connect+0x10/0x10 [ 274.807169][ T8201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.807217][ T8201] ? __pfx_sctp_inet_connect+0x10/0x10 [ 274.807253][ T8201] sctp_inet_connect+0x15f/0x200 [ 274.807289][ T8201] __sys_connect_file+0x13e/0x1a0 [ 274.807346][ T8201] __sys_connect+0x14d/0x170 [ 274.807375][ T8201] ? __pfx___sys_connect+0x10/0x10 [ 274.807442][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 274.807471][ T8201] ? rcu_is_watching+0x12/0xc0 [ 274.807509][ T8201] __x64_sys_connect+0x72/0xb0 [ 274.807536][ T8201] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.807578][ T8201] do_syscall_64+0xcd/0x230 [ 274.807623][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.807656][ T8201] RIP: 0033:0x7f723378e969 [ 274.807681][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.807717][ T8201] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 274.807747][ T8201] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 274.807768][ T8201] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 274.807787][ T8201] RBP: 00007f723467c090 R08: 0000000000000000 R09: 0000000000000000 [ 274.807806][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.807824][ T8201] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 274.807866][ T8201] [ 276.004797][ T30] audit: type=1800 audit(6041675121.662:5): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.438" name="dbroot" dev="configfs" ino=19485 res=0 errno=0 [ 276.355573][ T8227] FAULT_INJECTION: forcing a failure. [ 276.355573][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 276.425769][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.1.440 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 276.425814][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 276.425833][ T8227] Call Trace: [ 276.425842][ T8227] [ 276.425854][ T8227] dump_stack_lvl+0x16c/0x1f0 [ 276.425902][ T8227] should_fail_ex+0x512/0x640 [ 276.425946][ T8227] ? fs_reclaim_acquire+0xae/0x150 [ 276.425995][ T8227] should_failslab+0xc2/0x120 [ 276.426035][ T8227] __kmalloc_cache_noprof+0x6a/0x3e0 [ 276.426090][ T8227] ? tomoyo_init_log+0x197/0x2140 [ 276.426140][ T8227] tomoyo_init_log+0x197/0x2140 [ 276.426187][ T8227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 276.426248][ T8227] ? __pfx_tomoyo_init_log+0x10/0x10 [ 276.426289][ T8227] ? tomoyo_profile+0x47/0x60 [ 276.426356][ T8227] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 276.426398][ T8227] tomoyo_supervisor+0x302/0x13b0 [ 276.426454][ T8227] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 276.426533][ T8227] ? tomoyo_check_path_acl+0xad/0x210 [ 276.426571][ T8227] ? tomoyo_check_acl+0x1f7/0x410 [ 276.426609][ T8227] tomoyo_path_permission+0x270/0x3b0 [ 276.426649][ T8227] tomoyo_check_open_permission+0x37b/0x3c0 [ 276.426689][ T8227] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 276.426769][ T8227] ? do_raw_spin_lock+0x12c/0x2b0 [ 276.426829][ T8227] tomoyo_file_open+0x6b/0x90 [ 276.426878][ T8227] security_file_open+0x84/0x1e0 [ 276.426920][ T8227] do_dentry_open+0x596/0x1c10 [ 276.426963][ T8227] vfs_open+0x82/0x3f0 [ 276.427011][ T8227] path_openat+0x1e5e/0x2d40 [ 276.427056][ T8227] ? __pfx_path_openat+0x10/0x10 [ 276.427097][ T8227] do_filp_open+0x20b/0x470 [ 276.427128][ T8227] ? __pfx_do_filp_open+0x10/0x10 [ 276.427189][ T8227] ? alloc_fd+0x471/0x7d0 [ 276.427249][ T8227] do_sys_openat2+0x11b/0x1d0 [ 276.427291][ T8227] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.427345][ T8227] ? __fget_files+0x20e/0x3c0 [ 276.427402][ T8227] __x64_sys_openat+0x174/0x210 [ 276.427445][ T8227] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.427486][ T8227] ? ksys_write+0x1b9/0x240 [ 276.427516][ T8227] ? rcu_is_watching+0x12/0xc0 [ 276.427557][ T8227] do_syscall_64+0xcd/0x230 [ 276.427604][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.427635][ T8227] RIP: 0033:0x7f723378e969 [ 276.427659][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.427688][ T8227] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.427718][ T8227] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 276.427738][ T8227] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 276.427757][ T8227] RBP: 00007f723467c090 R08: 0000000000000000 R09: 0000000000000000 [ 276.427776][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.427793][ T8227] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 276.427834][ T8227] [ 281.160964][ T8296] nla_validate_range_unsigned: 46 callbacks suppressed [ 281.161003][ T8296] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 281.225968][ T8296] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 281.249223][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 281.264352][ T8296] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 281.282050][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'. [ 281.328275][ T8296] netlink: 200 bytes leftover after parsing attributes in process `syz.2.453'. [ 281.759207][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.767946][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.776316][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.784811][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.793082][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.801062][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 281.809657][ T8309] netlink: 'syz.1.456': attribute type 11 has an invalid length. [ 282.204062][ T30] audit: type=1800 audit(6041675135.842:6): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.457" name="dbroot" dev="configfs" ino=20841 res=0 errno=0 [ 282.888459][ T8326] FAULT_INJECTION: forcing a failure. [ 282.888459][ T8326] name failslab, interval 1, probability 0, space 0, times 0 [ 283.014447][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: syz.1.459 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 283.014497][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 283.014516][ T8326] Call Trace: [ 283.014526][ T8326] [ 283.014538][ T8326] dump_stack_lvl+0x16c/0x1f0 [ 283.014590][ T8326] should_fail_ex+0x512/0x640 [ 283.014636][ T8326] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 283.014678][ T8326] should_failslab+0xc2/0x120 [ 283.014717][ T8326] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 283.014752][ T8326] ? d_instantiate+0x77/0x90 [ 283.014786][ T8326] ? alloc_empty_file+0x55/0x1e0 [ 283.014830][ T8326] alloc_empty_file+0x55/0x1e0 [ 283.014885][ T8326] alloc_file_pseudo+0x13a/0x230 [ 283.014930][ T8326] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 283.014971][ T8326] ? alloc_fd+0x471/0x7d0 [ 283.015025][ T8326] sock_alloc_file+0x50/0x210 [ 283.015067][ T8326] __sys_socket+0x1c0/0x260 [ 283.015112][ T8326] ? __pfx___sys_socket+0x10/0x10 [ 283.015160][ T8326] ? rcu_is_watching+0x12/0xc0 [ 283.015195][ T8326] __x64_sys_socket+0x72/0xb0 [ 283.015242][ T8326] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.015284][ T8326] do_syscall_64+0xcd/0x230 [ 283.015329][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.015361][ T8326] RIP: 0033:0x7f723378e969 [ 283.015387][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.015421][ T8326] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 283.015452][ T8326] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 283.015474][ T8326] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 283.015492][ T8326] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 283.015511][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.015529][ T8326] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 283.015571][ T8326] [ 285.007863][ T8350] nfs4: Unknown parameter 'nfsd' [ 285.437462][ T8365] loop6: detected capacity change from 0 to 8192 [ 285.658925][ T8365] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 288.743272][ T8421] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 289.274615][ T8426] can: request_module (can-proto-3) failed. [ 290.650437][ T8458] FAULT_INJECTION: forcing a failure. [ 290.650437][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 290.666049][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.3.488 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 290.666092][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 290.666111][ T8458] Call Trace: [ 290.666121][ T8458] [ 290.666133][ T8458] dump_stack_lvl+0x16c/0x1f0 [ 290.666182][ T8458] should_fail_ex+0x512/0x640 [ 290.666232][ T8458] should_failslab+0xc2/0x120 [ 290.666271][ T8458] __kmalloc_cache_noprof+0x6a/0x3e0 [ 290.666326][ T8458] ? __sctp_v6_cmp_addr+0x206/0x530 [ 290.666376][ T8458] ? sctp_add_bind_addr+0xae/0x3f0 [ 290.666423][ T8458] sctp_add_bind_addr+0xae/0x3f0 [ 290.666470][ T8458] sctp_copy_local_addr_list+0x39d/0x5a0 [ 290.666525][ T8458] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 290.666594][ T8458] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 290.666656][ T8458] ? sctp_bind_addr_copy+0xe0/0x530 [ 290.666700][ T8458] sctp_bind_addr_copy+0xe0/0x530 [ 290.666752][ T8458] sctp_connect_new_asoc+0x1d7/0x790 [ 290.666793][ T8458] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 290.666833][ T8458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.666881][ T8458] ? sctp_get_af_specific+0x62/0x70 [ 290.666951][ T8458] __sctp_connect+0x3f3/0xc60 [ 290.666991][ T8458] ? do_raw_spin_lock+0x12c/0x2b0 [ 290.667044][ T8458] ? __pfx___sctp_connect+0x10/0x10 [ 290.667081][ T8458] ? __pfx_sctp_inet_connect+0x10/0x10 [ 290.667118][ T8458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.667166][ T8458] ? __pfx_sctp_inet_connect+0x10/0x10 [ 290.667198][ T8458] sctp_inet_connect+0x15f/0x200 [ 290.667236][ T8458] __sys_connect_file+0x13e/0x1a0 [ 290.667295][ T8458] __sys_connect+0x14d/0x170 [ 290.667325][ T8458] ? __pfx___sys_connect+0x10/0x10 [ 290.667394][ T8458] ? __pfx_ksys_write+0x10/0x10 [ 290.667424][ T8458] ? rcu_is_watching+0x12/0xc0 [ 290.667463][ T8458] __x64_sys_connect+0x72/0xb0 [ 290.667491][ T8458] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.667534][ T8458] do_syscall_64+0xcd/0x230 [ 290.667592][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.667625][ T8458] RIP: 0033:0x7fbd2ef8e969 [ 290.667651][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.667684][ T8458] RSP: 002b:00007fbd2fdfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 290.667715][ T8458] RAX: ffffffffffffffda RBX: 00007fbd2f1b5fa0 RCX: 00007fbd2ef8e969 [ 290.667736][ T8458] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 290.667756][ T8458] RBP: 00007fbd2fdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 290.667776][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.667796][ T8458] R13: 0000000000000000 R14: 00007fbd2f1b5fa0 R15: 00007ffc86e47228 [ 290.667839][ T8458] [ 291.362229][ T8473] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 291.363262][ T8452] tty tty1: ldisc open failed (-12), clearing slot 0 [ 291.847218][ T8481] zram: Removed device: zram0 [ 293.499253][ T8509] FAULT_INJECTION: forcing a failure. [ 293.499253][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 293.513881][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: syz.3.497 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 293.513926][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 293.513941][ T8509] Call Trace: [ 293.513949][ T8509] [ 293.513957][ T8509] dump_stack_lvl+0x16c/0x1f0 [ 293.513996][ T8509] should_fail_ex+0x512/0x640 [ 293.514030][ T8509] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 293.514062][ T8509] should_failslab+0xc2/0x120 [ 293.514101][ T8509] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 293.514128][ T8509] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.514158][ T8509] ? sock_alloc_inode+0x25/0x1c0 [ 293.514194][ T8509] ? __pfx_sock_alloc_inode+0x10/0x10 [ 293.514225][ T8509] sock_alloc_inode+0x25/0x1c0 [ 293.514256][ T8509] alloc_inode+0x61/0x240 [ 293.514285][ T8509] sock_alloc+0x40/0x280 [ 293.514315][ T8509] __sock_create+0xc1/0x8d0 [ 293.514355][ T8509] __sys_socket+0x14d/0x260 [ 293.514391][ T8509] ? __pfx___sys_socket+0x10/0x10 [ 293.514427][ T8509] ? rcu_is_watching+0x12/0xc0 [ 293.514455][ T8509] __x64_sys_socket+0x72/0xb0 [ 293.514489][ T8509] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.514521][ T8509] do_syscall_64+0xcd/0x230 [ 293.514557][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.514581][ T8509] RIP: 0033:0x7fbd2ef8e969 [ 293.514600][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.514624][ T8509] RSP: 002b:00007fbd2fdfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 293.514647][ T8509] RAX: ffffffffffffffda RBX: 00007fbd2f1b5fa0 RCX: 00007fbd2ef8e969 [ 293.514662][ T8509] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 293.514677][ T8509] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 293.514691][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.514705][ T8509] R13: 0000000000000000 R14: 00007fbd2f1b5fa0 R15: 00007ffc86e47228 [ 293.514734][ T8509] [ 293.514746][ T8509] socket: no more sockets [ 294.110879][ T8524] nla_validate_range_unsigned: 21 callbacks suppressed [ 294.110907][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.154668][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.179341][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.204865][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.246669][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.262491][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.271068][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.282535][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.291615][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 294.304937][ T8524] netlink: 'syz.2.499': attribute type 11 has an invalid length. [ 296.231986][ T5848] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 297.659979][ T8587] openvswitch: netlink: IP tunnel dst address not specified [ 297.781413][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 298.037429][ T8601] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 298.648502][ T8598] can: request_module (can-proto-3) failed. [ 298.673526][ T8613] HfR: entered promiscuous mode [ 299.879103][ T5848] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 301.870009][ T8665] FAULT_INJECTION: forcing a failure. [ 301.870009][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 301.890548][ T8665] CPU: 0 UID: 0 PID: 8665 Comm: syz.2.529 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 301.890589][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 301.890607][ T8665] Call Trace: [ 301.890617][ T8665] [ 301.890629][ T8665] dump_stack_lvl+0x16c/0x1f0 [ 301.890677][ T8665] should_fail_ex+0x512/0x640 [ 301.890724][ T8665] should_failslab+0xc2/0x120 [ 301.890774][ T8665] __kmalloc_cache_noprof+0x6a/0x3e0 [ 301.890826][ T8665] ? sctp_add_bind_addr+0xae/0x3f0 [ 301.890874][ T8665] sctp_add_bind_addr+0xae/0x3f0 [ 301.890921][ T8665] sctp_copy_local_addr_list+0x39d/0x5a0 [ 301.890974][ T8665] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 301.891027][ T8665] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 301.891083][ T8665] ? sctp_bind_addr_copy+0xe0/0x530 [ 301.891123][ T8665] sctp_bind_addr_copy+0xe0/0x530 [ 301.891177][ T8665] sctp_connect_new_asoc+0x1d7/0x790 [ 301.891213][ T8665] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 301.891250][ T8665] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 301.891314][ T8665] __sctp_connect+0x3f3/0xc60 [ 301.891353][ T8665] ? do_raw_spin_lock+0x12c/0x2b0 [ 301.891403][ T8665] ? __pfx___sctp_connect+0x10/0x10 [ 301.891439][ T8665] ? __pfx_sctp_inet_connect+0x10/0x10 [ 301.891474][ T8665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.891523][ T8665] ? __pfx_sctp_inet_connect+0x10/0x10 [ 301.891553][ T8665] sctp_inet_connect+0x15f/0x200 [ 301.891589][ T8665] __sys_connect_file+0x13e/0x1a0 [ 301.891645][ T8665] __sys_connect+0x14d/0x170 [ 301.891673][ T8665] ? __pfx___sys_connect+0x10/0x10 [ 301.891746][ T8665] ? __pfx_ksys_write+0x10/0x10 [ 301.891774][ T8665] ? rcu_is_watching+0x12/0xc0 [ 301.891812][ T8665] __x64_sys_connect+0x72/0xb0 [ 301.891839][ T8665] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.891880][ T8665] do_syscall_64+0xcd/0x230 [ 301.891926][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.891957][ T8665] RIP: 0033:0x7ff71b58e969 [ 301.891981][ T8665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.892011][ T8665] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 301.892039][ T8665] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 301.892059][ T8665] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 301.892077][ T8665] RBP: 00007ff71c385090 R08: 0000000000000000 R09: 0000000000000000 [ 301.892096][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.892113][ T8665] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 301.892152][ T8665] [ 304.001535][ T8693] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 309.648783][ T8782] block2mtd: illegal erase size [ 309.870212][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 310.963310][ T8802] nla_validate_range_unsigned: 18 callbacks suppressed [ 310.963338][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.000395][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.024081][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.050084][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.112872][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.154311][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.186094][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.215016][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.255159][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.262990][ T8802] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 311.354068][ T8809] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 311.954916][ T8822] FAULT_INJECTION: forcing a failure. [ 311.954916][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 312.025149][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.0.563 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 312.025199][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 312.025219][ T8822] Call Trace: [ 312.025230][ T8822] [ 312.025244][ T8822] dump_stack_lvl+0x16c/0x1f0 [ 312.025299][ T8822] should_fail_ex+0x512/0x640 [ 312.025344][ T8822] ? __kvmalloc_node_noprof+0x122/0x600 [ 312.025381][ T8822] should_failslab+0xc2/0x120 [ 312.025423][ T8822] __kvmalloc_node_noprof+0x135/0x600 [ 312.025460][ T8822] ? resize_runtime_buffer+0x228/0x4f0 [ 312.025502][ T8822] ? resize_runtime_buffer+0x228/0x4f0 [ 312.025534][ T8822] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.025565][ T8822] resize_runtime_buffer+0x228/0x4f0 [ 312.025606][ T8822] snd_rawmidi_input_params+0x1ff/0x2c0 [ 312.025648][ T8822] snd_rawmidi_ioctl+0x470/0x950 [ 312.025671][ T8822] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 312.025713][ T8822] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 312.025738][ T8822] __x64_sys_ioctl+0x190/0x200 [ 312.025774][ T8822] do_syscall_64+0xcd/0x230 [ 312.025811][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.025835][ T8822] RIP: 0033:0x7f542f18e969 [ 312.025855][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.025879][ T8822] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.025901][ T8822] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 312.025917][ T8822] RDX: 0000200000000080 RSI: 00000000c0305710 RDI: 0000000000000006 [ 312.025931][ T8822] RBP: 00007f542f210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 312.025945][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.025961][ T8822] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 312.025991][ T8822] [ 317.114404][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.581'. [ 318.067514][ T8911] FAULT_INJECTION: forcing a failure. [ 318.067514][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 318.124510][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.0.580 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 318.124556][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 318.124574][ T8911] Call Trace: [ 318.124585][ T8911] [ 318.124597][ T8911] dump_stack_lvl+0x16c/0x1f0 [ 318.124647][ T8911] should_fail_ex+0x512/0x640 [ 318.124698][ T8911] should_failslab+0xc2/0x120 [ 318.124738][ T8911] __kmalloc_cache_noprof+0x6a/0x3e0 [ 318.124792][ T8911] ? sctp_add_bind_addr+0xae/0x3f0 [ 318.124839][ T8911] sctp_add_bind_addr+0xae/0x3f0 [ 318.124886][ T8911] sctp_copy_local_addr_list+0x39d/0x5a0 [ 318.124941][ T8911] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 318.124997][ T8911] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 318.125056][ T8911] ? sctp_bind_addr_copy+0xe0/0x530 [ 318.125096][ T8911] sctp_bind_addr_copy+0xe0/0x530 [ 318.125148][ T8911] sctp_connect_new_asoc+0x1d7/0x790 [ 318.125187][ T8911] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 318.125223][ T8911] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 318.125288][ T8911] __sctp_connect+0x3f3/0xc60 [ 318.125326][ T8911] ? do_raw_spin_lock+0x12c/0x2b0 [ 318.125376][ T8911] ? __pfx___sctp_connect+0x10/0x10 [ 318.125411][ T8911] ? __pfx_sctp_inet_connect+0x10/0x10 [ 318.125446][ T8911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.125503][ T8911] ? __pfx_sctp_inet_connect+0x10/0x10 [ 318.125534][ T8911] sctp_inet_connect+0x15f/0x200 [ 318.125569][ T8911] __sys_connect_file+0x13e/0x1a0 [ 318.125623][ T8911] __sys_connect+0x14d/0x170 [ 318.125651][ T8911] ? __pfx___sys_connect+0x10/0x10 [ 318.125719][ T8911] ? __pfx_ksys_write+0x10/0x10 [ 318.125747][ T8911] ? rcu_is_watching+0x12/0xc0 [ 318.125785][ T8911] __x64_sys_connect+0x72/0xb0 [ 318.125813][ T8911] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.125855][ T8911] do_syscall_64+0xcd/0x230 [ 318.125902][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.125934][ T8911] RIP: 0033:0x7f542f18e969 [ 318.125960][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.125989][ T8911] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 318.126019][ T8911] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 318.126040][ T8911] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 318.126058][ T8911] RBP: 00007f542ff7c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.126077][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.126095][ T8911] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 318.126137][ T8911] [ 319.054298][ T8930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 320.098386][ T8954] nla_validate_range_unsigned: 46 callbacks suppressed [ 320.098409][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.166755][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.227235][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.290558][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.369745][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.438553][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.487652][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.533922][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.749800][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.757582][ T8954] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 320.771832][ T8944] ptrace attach of "./syz-executor exec"[5840] was attempted by ""[8944] [ 321.274701][ T8967] FAULT_INJECTION: forcing a failure. [ 321.274701][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 321.337737][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.0.596 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 321.337785][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 321.337803][ T8967] Call Trace: [ 321.337813][ T8967] [ 321.337825][ T8967] dump_stack_lvl+0x16c/0x1f0 [ 321.337875][ T8967] should_fail_ex+0x512/0x640 [ 321.337928][ T8967] should_failslab+0xc2/0x120 [ 321.337966][ T8967] __kmalloc_cache_noprof+0x6a/0x3e0 [ 321.338021][ T8967] ? sctp_add_bind_addr+0xae/0x3f0 [ 321.338076][ T8967] sctp_add_bind_addr+0xae/0x3f0 [ 321.338124][ T8967] sctp_copy_local_addr_list+0x39d/0x5a0 [ 321.338179][ T8967] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 321.338234][ T8967] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 321.338292][ T8967] ? sctp_bind_addr_copy+0xe0/0x530 [ 321.338333][ T8967] sctp_bind_addr_copy+0xe0/0x530 [ 321.338386][ T8967] sctp_connect_new_asoc+0x1d7/0x790 [ 321.338425][ T8967] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 321.338461][ T8967] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 321.338526][ T8967] __sctp_connect+0x3f3/0xc60 [ 321.338564][ T8967] ? do_raw_spin_lock+0x12c/0x2b0 [ 321.338615][ T8967] ? __pfx___sctp_connect+0x10/0x10 [ 321.338652][ T8967] ? __pfx_sctp_inet_connect+0x10/0x10 [ 321.338688][ T8967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.338736][ T8967] ? __pfx_sctp_inet_connect+0x10/0x10 [ 321.338767][ T8967] sctp_inet_connect+0x15f/0x200 [ 321.338803][ T8967] __sys_connect_file+0x13e/0x1a0 [ 321.338866][ T8967] __sys_connect+0x14d/0x170 [ 321.338895][ T8967] ? __pfx___sys_connect+0x10/0x10 [ 321.338963][ T8967] ? __pfx_ksys_write+0x10/0x10 [ 321.338992][ T8967] ? rcu_is_watching+0x12/0xc0 [ 321.339031][ T8967] __x64_sys_connect+0x72/0xb0 [ 321.339064][ T8967] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.339107][ T8967] do_syscall_64+0xcd/0x230 [ 321.339157][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.339189][ T8967] RIP: 0033:0x7f542f18e969 [ 321.339214][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.339245][ T8967] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 321.339275][ T8967] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 321.339296][ T8967] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 321.339315][ T8967] RBP: 00007f542ff7c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.339335][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.339354][ T8967] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 321.339396][ T8967] [ 322.380677][ T8985] FAULT_INJECTION: forcing a failure. [ 322.380677][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 322.442082][ T8985] CPU: 0 UID: 0 PID: 8985 Comm: syz.1.597 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 322.442127][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 322.442145][ T8985] Call Trace: [ 322.442155][ T8985] [ 322.442166][ T8985] dump_stack_lvl+0x16c/0x1f0 [ 322.442215][ T8985] should_fail_ex+0x512/0x640 [ 322.442265][ T8985] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 322.442305][ T8985] should_failslab+0xc2/0x120 [ 322.442344][ T8985] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 322.442380][ T8985] ? security_file_alloc+0x34/0x2b0 [ 322.442427][ T8985] security_file_alloc+0x34/0x2b0 [ 322.442470][ T8985] init_file+0x93/0x4c0 [ 322.442508][ T8985] alloc_empty_file+0x73/0x1e0 [ 322.442550][ T8985] alloc_file_pseudo+0x13a/0x230 [ 322.442591][ T8985] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 322.442646][ T8985] __shmem_file_setup+0x210/0x300 [ 322.442676][ T8985] ? newseg+0x33a/0xe60 [ 322.442719][ T8985] newseg+0x3b2/0xe60 [ 322.442768][ T8985] ? __pfx_newseg+0x10/0x10 [ 322.442804][ T8985] ? find_held_lock+0x2b/0x80 [ 322.442835][ T8985] ? ipcget+0x500/0xda0 [ 322.442875][ T8985] ? ipcget+0x500/0xda0 [ 322.442918][ T8985] ? ipcget+0x500/0xda0 [ 322.442961][ T8985] ipcget+0x87d/0xda0 [ 322.443016][ T8985] ? __pfx___might_resched+0x10/0x10 [ 322.443049][ T8985] ? __pfx_ipcget+0x10/0x10 [ 322.443091][ T8985] ? __x64_sys_futex+0x1e0/0x4c0 [ 322.443121][ T8985] ? __x64_sys_futex+0x1e9/0x4c0 [ 322.443160][ T8985] __x64_sys_shmget+0x13b/0x1b0 [ 322.443204][ T8985] ? __pfx___x64_sys_shmget+0x10/0x10 [ 322.443260][ T8985] ? rcu_is_watching+0x12/0xc0 [ 322.443292][ T8985] do_syscall_64+0xcd/0x230 [ 322.443339][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.443370][ T8985] RIP: 0033:0x7f723378e969 [ 322.443395][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.443426][ T8985] RSP: 002b:00007f723463a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 322.443456][ T8985] RAX: ffffffffffffffda RBX: 00007f72339b6160 RCX: 00007f723378e969 [ 322.443477][ T8985] RDX: 00000000568c12f2 RSI: 0000000000010563 RDI: 0000000000000400 [ 322.443496][ T8985] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 322.443514][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.443532][ T8985] R13: 0000000000000000 R14: 00007f72339b6160 R15: 00007fff560dd318 [ 322.443574][ T8985] [ 322.736040][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.743316][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.299612][ T9012] Falling back ldisc for ttyS2. [ 324.386139][ T9006] netlink: 306 bytes leftover after parsing attributes in process `syz.3.603'. [ 328.083493][ T5848] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 328.173245][ T9066] Falling back ldisc for ttyS2. [ 328.827647][ T9095] Setting dangerous option i915.mitigations - tainting kernel [ 329.495225][ T9096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.564693][ T9096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.571972][ T9096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.600273][ T9096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.649893][ T9096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 329.785658][ T9096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.885008][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.525327][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.609920][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.609946][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 332.444720][ T9150] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 332.483574][ T9152] nla_validate_range_unsigned: 18 callbacks suppressed [ 332.483602][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.524658][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.543714][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.560345][ T9153] FAULT_INJECTION: forcing a failure. [ 332.560345][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 332.573453][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.593736][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.602114][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.2.631 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 332.602171][ T9153] Tainted: [U]=USER [ 332.602193][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 332.602212][ T9153] Call Trace: [ 332.602224][ T9153] [ 332.602237][ T9153] dump_stack_lvl+0x16c/0x1f0 [ 332.602290][ T9153] should_fail_ex+0x512/0x640 [ 332.602337][ T9153] ? fs_reclaim_acquire+0xae/0x150 [ 332.602390][ T9153] ? tomoyo_supervisor+0x45b/0x13b0 [ 332.602439][ T9153] should_failslab+0xc2/0x120 [ 332.602478][ T9153] __kmalloc_noprof+0xd2/0x510 [ 332.602512][ T9153] ? tomoyo_profile+0x47/0x60 [ 332.602573][ T9153] tomoyo_supervisor+0x45b/0x13b0 [ 332.602634][ T9153] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 332.602682][ T9153] ? __pfx_vsnprintf+0x10/0x10 [ 332.602746][ T9153] ? tomoyo_encode2+0x329/0x3e0 [ 332.602815][ T9153] tomoyo_path_number_perm+0x448/0x580 [ 332.602859][ T9153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.602944][ T9153] ? find_held_lock+0x2b/0x80 [ 332.602976][ T9153] ? hook_file_ioctl_common+0x145/0x410 [ 332.603023][ T9153] ? __fget_files+0x20e/0x3c0 [ 332.603080][ T9153] security_file_ioctl+0x9b/0x240 [ 332.603124][ T9153] __x64_sys_ioctl+0xb7/0x200 [ 332.603184][ T9153] do_syscall_64+0xcd/0x230 [ 332.603235][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.603270][ T9153] RIP: 0033:0x7ff71b58e969 [ 332.603298][ T9153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.603330][ T9153] RSP: 002b:00007ff71c364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.603362][ T9153] RAX: ffffffffffffffda RBX: 00007ff71b7b6080 RCX: 00007ff71b58e969 [ 332.603384][ T9153] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 332.603404][ T9153] RBP: 00007ff71b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 332.603424][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.603443][ T9153] R13: 0000000000000000 R14: 00007ff71b7b6080 R15: 00007fffe0ce0cb8 [ 332.603486][ T9153] [ 332.783326][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.837866][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.845741][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.853653][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 332.861795][ T9152] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 333.131458][ T5848] Bluetooth: hci2: unexpected event 0x3e length: 1020 > 260 [ 333.131499][ T5848] Bluetooth: hci2: unexpected subevent 0x01 length: 1019 > 18 [ 333.686258][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.767331][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.203347][ T9214] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 336.323854][ T9215] FAULT_INJECTION: forcing a failure. [ 336.323854][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 336.340922][ T9215] CPU: 1 UID: 0 PID: 9215 Comm: syz.3.646 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 336.340986][ T9215] Tainted: [U]=USER [ 336.340996][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 336.341016][ T9215] Call Trace: [ 336.341025][ T9215] [ 336.341037][ T9215] dump_stack_lvl+0x16c/0x1f0 [ 336.341085][ T9215] should_fail_ex+0x512/0x640 [ 336.341126][ T9215] ? fs_reclaim_acquire+0xae/0x150 [ 336.341174][ T9215] ? tomoyo_init_log+0x1385/0x2140 [ 336.341213][ T9215] should_failslab+0xc2/0x120 [ 336.341250][ T9215] __kmalloc_noprof+0xd2/0x510 [ 336.341280][ T9215] ? __pfx_from_kuid+0x10/0x10 [ 336.341328][ T9215] tomoyo_init_log+0x1385/0x2140 [ 336.341389][ T9215] ? __pfx_tomoyo_init_log+0x10/0x10 [ 336.341427][ T9215] ? tomoyo_profile+0x47/0x60 [ 336.341471][ T9215] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 336.341510][ T9215] tomoyo_supervisor+0x302/0x13b0 [ 336.341560][ T9215] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 336.341602][ T9215] ? __pfx_vsnprintf+0x10/0x10 [ 336.341655][ T9215] ? tomoyo_encode2+0x329/0x3e0 [ 336.341714][ T9215] tomoyo_path_number_perm+0x448/0x580 [ 336.341752][ T9215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 336.341823][ T9215] ? find_held_lock+0x2b/0x80 [ 336.341850][ T9215] ? hook_file_ioctl_common+0x145/0x410 [ 336.341890][ T9215] ? __fget_files+0x20e/0x3c0 [ 336.341942][ T9215] security_file_ioctl+0x9b/0x240 [ 336.341993][ T9215] __x64_sys_ioctl+0xb7/0x200 [ 336.342037][ T9215] do_syscall_64+0xcd/0x230 [ 336.342082][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.342111][ T9215] RIP: 0033:0x7fbd2ef8e969 [ 336.342135][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.342165][ T9215] RSP: 002b:00007fbd2fdd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.342193][ T9215] RAX: ffffffffffffffda RBX: 00007fbd2f1b6080 RCX: 00007fbd2ef8e969 [ 336.342213][ T9215] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 336.342231][ T9215] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 336.342248][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.342265][ T9215] R13: 0000000000000000 R14: 00007fbd2f1b6080 R15: 00007ffc86e47228 [ 336.342302][ T9215] [ 336.634003][ T5848] Bluetooth: hci1: unexpected event 0x3e length: 1020 > 260 [ 336.634053][ T5848] Bluetooth: hci1: unexpected subevent 0x01 length: 1019 > 18 [ 337.501916][ T9233] FAULT_INJECTION: forcing a failure. [ 337.501916][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 337.526746][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.1.652 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 337.526798][ T9233] Tainted: [U]=USER [ 337.526805][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 337.526820][ T9233] Call Trace: [ 337.526827][ T9233] [ 337.526836][ T9233] dump_stack_lvl+0x16c/0x1f0 [ 337.526881][ T9233] should_fail_ex+0x512/0x640 [ 337.526916][ T9233] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 337.526961][ T9233] should_failslab+0xc2/0x120 [ 337.526991][ T9233] __kmalloc_cache_noprof+0x6a/0x3e0 [ 337.527030][ T9233] ? trace_kmalloc+0x2b/0xd0 [ 337.527061][ T9233] ? snd_virmidi_output_open+0xc4/0x670 [ 337.527100][ T9233] snd_virmidi_output_open+0xc4/0x670 [ 337.527143][ T9233] open_substream+0x478/0x9b0 [ 337.527182][ T9233] rawmidi_open_priv+0x543/0x6e0 [ 337.527227][ T9233] snd_rawmidi_open+0x4cc/0xbf0 [ 337.527254][ T9233] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 337.527279][ T9233] ? __pfx_default_wake_function+0x10/0x10 [ 337.527306][ T9233] ? kobject_get_unless_zero+0x156/0x1e0 [ 337.527345][ T9233] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 337.527366][ T9233] snd_open+0x1fe/0x450 [ 337.527396][ T9233] ? __pfx_snd_open+0x10/0x10 [ 337.527424][ T9233] chrdev_open+0x231/0x6a0 [ 337.527448][ T9233] ? __pfx_apparmor_file_open+0x10/0x10 [ 337.527479][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 337.527506][ T9233] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 337.527547][ T9233] do_dentry_open+0x741/0x1c10 [ 337.527570][ T9233] ? __pfx_chrdev_open+0x10/0x10 [ 337.527601][ T9233] vfs_open+0x82/0x3f0 [ 337.527634][ T9233] path_openat+0x1e5e/0x2d40 [ 337.527667][ T9233] ? __pfx_path_openat+0x10/0x10 [ 337.527697][ T9233] do_filp_open+0x20b/0x470 [ 337.527719][ T9233] ? __pfx_do_filp_open+0x10/0x10 [ 337.527762][ T9233] ? alloc_fd+0x471/0x7d0 [ 337.527806][ T9233] do_sys_openat2+0x11b/0x1d0 [ 337.527837][ T9233] ? __pfx_do_sys_openat2+0x10/0x10 [ 337.527879][ T9233] __x64_sys_openat+0x174/0x210 [ 337.527915][ T9233] ? __pfx___x64_sys_openat+0x10/0x10 [ 337.527950][ T9233] ? rcu_is_watching+0x12/0xc0 [ 337.527981][ T9233] do_syscall_64+0xcd/0x230 [ 337.528016][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.528056][ T9233] RIP: 0033:0x7f723378e969 [ 337.528080][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.528110][ T9233] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 337.528149][ T9233] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 337.528170][ T9233] RDX: 0000000000080102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 337.528190][ T9233] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 337.528209][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.528229][ T9233] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 337.528271][ T9233] [ 339.690293][ T9232] ptrace attach of "./syz-executor exec"[7562] was attempted by "./syz-executor exec"[9232] [ 339.916714][ T9263] ima: policy update failed [ 339.959002][ T30] audit: type=1802 audit(6041677239.587:7): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.658" res=0 errno=0 [ 342.023220][ T9307] nla_validate_range_unsigned: 46 callbacks suppressed [ 342.023249][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.038588][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.046483][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.055560][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.064185][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.072261][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.080048][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.088802][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.096729][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.105214][ T9307] netlink: 'syz.3.668': attribute type 11 has an invalid length. [ 342.747073][ T9317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 342.875458][ T9317] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.925115][ T9317] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 342.968884][ T9317] page_type: f5(slab) [ 343.032507][ T9317] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 343.090000][ T9317] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 343.135600][ T9317] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 343.258217][ T9317] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 343.310014][ T9317] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 343.436019][ T9317] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 343.561234][ T9317] page dumped because: unmovable page [ 343.566709][ T9317] page_owner tracks the page as allocated [ 343.584552][ T9317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 53, tgid 53 (kworker/u8:3), ts 331151222906, free_ts 331041116840 [ 343.605704][ T9317] post_alloc_hook+0x181/0x1b0 [ 343.610567][ T9317] get_page_from_freelist+0x135c/0x3920 [ 343.616515][ T9317] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 343.713547][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 343.731589][ T9317] alloc_pages_mpol+0x1fb/0x550 [ 343.743592][ T9317] new_slab+0x244/0x340 [ 343.747885][ T9317] ___slab_alloc+0xd9c/0x1940 [ 343.933023][ T9317] __slab_alloc.constprop.0+0x56/0xb0 [ 343.975352][ T9317] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 344.068522][ T9317] kmalloc_reserve+0xef/0x2c0 [ 344.118323][ T9317] __alloc_skb+0x166/0x380 [ 344.137972][ T9317] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 344.144703][ T9317] process_one_work+0x9cc/0x1b70 [ 344.157393][ T9317] worker_thread+0x6c8/0xf10 [ 344.162630][ T9317] kthread+0x3c2/0x780 [ 344.166918][ T9317] ret_from_fork+0x45/0x80 [ 344.181560][ T9317] ret_from_fork_asm+0x1a/0x30 [ 344.186931][ T9317] page last free pid 9125 tgid 9125 stack trace: [ 344.213859][ T9317] __free_frozen_pages+0x69d/0xff0 [ 344.288437][ T9317] __put_partials+0x16d/0x1c0 [ 344.315517][ T9317] qlist_free_all+0x4e/0x120 [ 344.380317][ T9317] kasan_quarantine_reduce+0x195/0x1e0 [ 344.407520][ T9317] __kasan_slab_alloc+0x69/0x90 [ 344.481624][ T9317] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 344.530162][ T9317] vm_area_dup+0x25/0x760 [ 344.535098][ T9317] __split_vma+0x17f/0x1030 [ 344.539861][ T9317] vma_modify+0x3b4/0x510 [ 344.546001][ T9317] vma_modify_flags+0x212/0x2d0 [ 344.551021][ T9317] mprotect_fixup+0x2b3/0xb10 [ 344.555982][ T9317] do_mprotect_pkey+0x9ca/0xd50 [ 344.560987][ T9317] __x64_sys_mprotect+0x78/0xc0 [ 344.566013][ T9317] do_syscall_64+0xcd/0x230 [ 344.575463][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.051482][ T9324] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[9324] [ 346.427461][ T9365] FAULT_INJECTION: forcing a failure. [ 346.427461][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 346.482958][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.1.679 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 346.483014][ T9365] Tainted: [U]=USER [ 346.483024][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 346.483043][ T9365] Call Trace: [ 346.483053][ T9365] [ 346.483064][ T9365] dump_stack_lvl+0x16c/0x1f0 [ 346.483114][ T9365] should_fail_ex+0x512/0x640 [ 346.483158][ T9365] ? __kmalloc_noprof+0xbf/0x510 [ 346.483194][ T9365] ? sk_prot_alloc+0x1a8/0x2a0 [ 346.483237][ T9365] should_failslab+0xc2/0x120 [ 346.483292][ T9365] __kmalloc_noprof+0xd2/0x510 [ 346.483331][ T9365] sk_prot_alloc+0x1a8/0x2a0 [ 346.483382][ T9365] sk_alloc+0x36/0xc20 [ 346.483418][ T9365] __netlink_create+0x5e/0x2c0 [ 346.483446][ T9365] ? __wake_up+0x3f/0x60 [ 346.483483][ T9365] netlink_create+0x39e/0x620 [ 346.483516][ T9365] ? __pfx_genl_bind+0x10/0x10 [ 346.483557][ T9365] ? __pfx_genl_unbind+0x10/0x10 [ 346.483593][ T9365] ? __pfx_genl_release+0x10/0x10 [ 346.483642][ T9365] __sock_create+0x335/0x8d0 [ 346.483697][ T9365] __sys_socket+0x14d/0x260 [ 346.483745][ T9365] ? __pfx___sys_socket+0x10/0x10 [ 346.483795][ T9365] ? rcu_is_watching+0x12/0xc0 [ 346.483832][ T9365] __x64_sys_socket+0x72/0xb0 [ 346.483878][ T9365] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.483921][ T9365] do_syscall_64+0xcd/0x230 [ 346.483969][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.484002][ T9365] RIP: 0033:0x7f723378e969 [ 346.484027][ T9365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.484058][ T9365] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 346.484089][ T9365] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 346.484110][ T9365] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 346.484129][ T9365] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 346.484149][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.484167][ T9365] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 346.484203][ T9365] [ 347.311515][ T9374] FAULT_INJECTION: forcing a failure. [ 347.311515][ T9374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.332328][ T9374] CPU: 1 UID: 0 PID: 9374 Comm: syz.1.681 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 347.332378][ T9374] Tainted: [U]=USER [ 347.332387][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 347.332405][ T9374] Call Trace: [ 347.332414][ T9374] [ 347.332425][ T9374] dump_stack_lvl+0x16c/0x1f0 [ 347.332481][ T9374] should_fail_ex+0x512/0x640 [ 347.332532][ T9374] _copy_to_user+0x32/0xd0 [ 347.332579][ T9374] simple_read_from_buffer+0xcb/0x170 [ 347.332628][ T9374] proc_fail_nth_read+0x197/0x270 [ 347.332673][ T9374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.332719][ T9374] ? rw_verify_area+0xcf/0x680 [ 347.332763][ T9374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.332808][ T9374] vfs_read+0x1de/0xc70 [ 347.332844][ T9374] ? __pfx___mutex_lock+0x10/0x10 [ 347.332888][ T9374] ? __pfx_vfs_read+0x10/0x10 [ 347.332932][ T9374] ? __fget_files+0x20e/0x3c0 [ 347.332991][ T9374] ksys_read+0x12a/0x240 [ 347.333020][ T9374] ? __pfx_ksys_read+0x10/0x10 [ 347.333046][ T9374] ? rcu_is_watching+0x12/0xc0 [ 347.333088][ T9374] do_syscall_64+0xcd/0x230 [ 347.333137][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.333168][ T9374] RIP: 0033:0x7f723378d37c [ 347.333194][ T9374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.333224][ T9374] RSP: 002b:00007f723467c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.333254][ T9374] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378d37c [ 347.333274][ T9374] RDX: 000000000000000f RSI: 00007f723467c0a0 RDI: 0000000000000004 [ 347.333292][ T9374] RBP: 00007f723467c090 R08: 0000000000000000 R09: 0000000000000000 [ 347.333310][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.333328][ T9374] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 347.333369][ T9374] [ 347.920709][ T9384] nla_validate_range_unsigned: 18 callbacks suppressed [ 347.920736][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 347.945782][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 347.957388][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 347.967153][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 347.978264][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 347.986484][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 348.029184][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 348.050626][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 348.062534][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 348.071060][ T9384] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 350.212444][ T9430] ovs_ÿÃ: entered promiscuous mode [ 351.295659][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 351.533217][ T9450] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 351.588907][ T9450] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 351.623692][ T9450] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 351.643754][ T9450] page_type: f5(slab) [ 351.650413][ T9450] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 351.661072][ T9450] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 351.685718][ T9450] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 351.694505][ T9450] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 351.721386][ T9450] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 351.732614][ T9450] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 351.751740][ T9450] page dumped because: unmovable page [ 351.758386][ T9450] page_owner tracks the page as allocated [ 351.764492][ T9450] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (udevd), ts 347322233524, free_ts 347289860592 [ 351.795354][ T9450] post_alloc_hook+0x181/0x1b0 [ 351.800865][ T9450] get_page_from_freelist+0x135c/0x3920 [ 351.831277][ T9450] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 351.838260][ T9450] alloc_pages_mpol+0x1fb/0x550 [ 351.843211][ T9450] new_slab+0x244/0x340 [ 351.847605][ T9450] ___slab_alloc+0xd9c/0x1940 [ 351.852574][ T9450] __slab_alloc.constprop.0+0x56/0xb0 [ 351.858373][ T9450] __kmalloc_noprof+0x2f2/0x510 [ 351.863409][ T9450] tomoyo_realpath_from_path+0xc2/0x6e0 [ 351.869426][ T9450] tomoyo_path_perm+0x274/0x460 [ 351.874466][ T9450] security_inode_getattr+0x116/0x290 [ 351.880082][ T9450] vfs_fstat+0x4b/0xd0 [ 351.890518][ T9450] __do_sys_newfstat+0x91/0x110 [ 351.897545][ T9450] do_syscall_64+0xcd/0x230 [ 351.911512][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.922900][ T9450] page last free pid 5200 tgid 5200 stack trace: [ 351.941814][ T9450] __free_frozen_pages+0x69d/0xff0 [ 351.955294][ T9450] __put_partials+0x16d/0x1c0 [ 351.973153][ T9450] qlist_free_all+0x4e/0x120 [ 351.981607][ T9458] netlink: 334 bytes leftover after parsing attributes in process `syz.0.698'. [ 351.991130][ T9450] kasan_quarantine_reduce+0x195/0x1e0 [ 351.998887][ T9450] __kasan_slab_alloc+0x69/0x90 [ 352.014225][ T9450] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 352.037415][ T9450] getname_flags.part.0+0x4c/0x550 [ 352.042662][ T9450] getname_flags+0x93/0xf0 [ 352.071683][ T9450] do_sys_openat2+0xb8/0x1d0 [ 352.087048][ T9450] __x64_sys_openat+0x174/0x210 [ 352.098635][ T9450] do_syscall_64+0xcd/0x230 [ 352.113655][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.757557][ T55] Bluetooth: hci3: ACL packet for unknown connection handle 3 [ 354.677253][ T9490] could not allocate digest TFM handle binfmt_misc [ 354.929072][ T9502] nla_validate_range_unsigned: 46 callbacks suppressed [ 354.929102][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 354.946922][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 354.949784][ T9500] FAULT_INJECTION: forcing a failure. [ 354.949784][ T9500] name failslab, interval 1, probability 0, space 0, times 0 [ 354.955637][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 354.976546][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 354.997794][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.3.707 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 354.997847][ T9500] Tainted: [U]=USER [ 354.997858][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 354.997877][ T9500] Call Trace: [ 354.997888][ T9500] [ 354.997910][ T9500] dump_stack_lvl+0x16c/0x1f0 [ 354.997961][ T9500] should_fail_ex+0x512/0x640 [ 354.998006][ T9500] ? fs_reclaim_acquire+0xae/0x150 [ 354.998059][ T9500] ? tomoyo_supervisor+0x45b/0x13b0 [ 354.998108][ T9500] should_failslab+0xc2/0x120 [ 354.998150][ T9500] __kmalloc_noprof+0xd2/0x510 [ 354.998183][ T9500] ? tomoyo_profile+0x47/0x60 [ 354.998243][ T9500] tomoyo_supervisor+0x45b/0x13b0 [ 354.998304][ T9500] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 354.998352][ T9500] ? __pfx_vsnprintf+0x10/0x10 [ 354.998415][ T9500] ? tomoyo_encode2+0x329/0x3e0 [ 354.998480][ T9500] tomoyo_path_number_perm+0x448/0x580 [ 354.998523][ T9500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.998600][ T9500] ? find_held_lock+0x2b/0x80 [ 354.998629][ T9500] ? hook_file_ioctl_common+0x145/0x410 [ 354.998675][ T9500] ? __fget_files+0x20e/0x3c0 [ 354.998734][ T9500] security_file_ioctl+0x9b/0x240 [ 354.998777][ T9500] __x64_sys_ioctl+0xb7/0x200 [ 354.998825][ T9500] do_syscall_64+0xcd/0x230 [ 354.998880][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.998919][ T9500] RIP: 0033:0x7fbd2ef8e969 [ 354.998944][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.998974][ T9500] RSP: 002b:00007fbd2fdfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.999005][ T9500] RAX: ffffffffffffffda RBX: 00007fbd2f1b5fa0 RCX: 00007fbd2ef8e969 [ 354.999025][ T9500] RDX: 0000200000000080 RSI: 00000000c0305710 RDI: 0000000000000006 [ 354.999047][ T9500] RBP: 00007fbd2f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 354.999066][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.999086][ T9500] R13: 0000000000000000 R14: 00007fbd2f1b5fa0 R15: 00007ffc86e47228 [ 354.999126][ T9500] [ 355.220690][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.263789][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.271729][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.279621][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.287450][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.295285][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.304042][ T9502] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 355.848178][ T9519] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 355.881398][ T9519] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.976248][ T9519] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 356.021202][ T9519] page_type: f5(slab) [ 356.038830][ T9519] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 356.076915][ T9519] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 356.174329][ T9519] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 356.226230][ T9519] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 356.235688][ T9519] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 356.281071][ T9519] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 356.309602][ T9519] page dumped because: unmovable page [ 356.327040][ T9519] page_owner tracks the page as allocated [ 356.377551][ T9519] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (udevd), ts 347322233524, free_ts 347289860592 [ 356.540590][ T9519] post_alloc_hook+0x181/0x1b0 [ 356.566207][ T9519] get_page_from_freelist+0x135c/0x3920 [ 356.617892][ T9519] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 356.623921][ T9519] alloc_pages_mpol+0x1fb/0x550 [ 356.681129][ T9519] new_slab+0x244/0x340 [ 356.687002][ T9519] ___slab_alloc+0xd9c/0x1940 [ 356.692039][ T9519] __slab_alloc.constprop.0+0x56/0xb0 [ 356.698328][ T9519] __kmalloc_noprof+0x2f2/0x510 [ 356.807076][ T9519] tomoyo_realpath_from_path+0xc2/0x6e0 [ 356.899394][ T9519] tomoyo_path_perm+0x274/0x460 [ 356.912314][ T9519] security_inode_getattr+0x116/0x290 [ 356.947921][ T9519] vfs_fstat+0x4b/0xd0 [ 356.952118][ T9519] __do_sys_newfstat+0x91/0x110 [ 356.957061][ T9519] do_syscall_64+0xcd/0x230 [ 357.057853][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.063872][ T9519] page last free pid 5200 tgid 5200 stack trace: [ 357.127038][ T9519] __free_frozen_pages+0x69d/0xff0 [ 357.153252][ T9519] __put_partials+0x16d/0x1c0 [ 357.173579][ T9519] qlist_free_all+0x4e/0x120 [ 357.198067][ T9519] kasan_quarantine_reduce+0x195/0x1e0 [ 357.221495][ T9519] __kasan_slab_alloc+0x69/0x90 [ 357.251931][ T9519] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 357.270914][ T9519] getname_flags.part.0+0x4c/0x550 [ 357.277250][ T9519] getname_flags+0x93/0xf0 [ 357.282050][ T9519] do_sys_openat2+0xb8/0x1d0 [ 357.286739][ T9519] __x64_sys_openat+0x174/0x210 [ 357.309301][ T9519] do_syscall_64+0xcd/0x230 [ 357.316579][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.627372][ T9583] FAULT_INJECTION: forcing a failure. [ 358.627372][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 358.664916][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.0.719 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 358.664970][ T9583] Tainted: [U]=USER [ 358.664979][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 358.664993][ T9583] Call Trace: [ 358.665001][ T9583] [ 358.665010][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 358.665051][ T9583] should_fail_ex+0x512/0x640 [ 358.665087][ T9583] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.665117][ T9583] should_failslab+0xc2/0x120 [ 358.665148][ T9583] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.665176][ T9583] ? security_file_alloc+0x34/0x2b0 [ 358.665221][ T9583] security_file_alloc+0x34/0x2b0 [ 358.665264][ T9583] init_file+0x93/0x4c0 [ 358.665306][ T9583] alloc_empty_file+0x73/0x1e0 [ 358.665351][ T9583] alloc_file_pseudo+0x13a/0x230 [ 358.665396][ T9583] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 358.665438][ T9583] ? alloc_fd+0x471/0x7d0 [ 358.665497][ T9583] sock_alloc_file+0x50/0x210 [ 358.665541][ T9583] __sys_socket+0x1c0/0x260 [ 358.665590][ T9583] ? __pfx___sys_socket+0x10/0x10 [ 358.665639][ T9583] ? rcu_is_watching+0x12/0xc0 [ 358.665678][ T9583] __x64_sys_socket+0x72/0xb0 [ 358.665724][ T9583] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.665779][ T9583] do_syscall_64+0xcd/0x230 [ 358.665831][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.665865][ T9583] RIP: 0033:0x7f542f18e969 [ 358.665893][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.665923][ T9583] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 358.665955][ T9583] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 358.665977][ T9583] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 358.665997][ T9583] RBP: 00007f542f210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 358.666018][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.666037][ T9583] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 358.666078][ T9583] [ 358.908972][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 360.220303][ T9612] nla_validate_range_unsigned: 18 callbacks suppressed [ 360.220324][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.259615][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.299590][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.380325][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.407648][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.551902][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.599725][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.609939][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.633100][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.654256][ T9612] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 360.879995][ T9622] FAULT_INJECTION: forcing a failure. [ 360.879995][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 360.892926][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.1.730 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 360.892972][ T9622] Tainted: [U]=USER [ 360.892979][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 360.892994][ T9622] Call Trace: [ 360.893002][ T9622] [ 360.893011][ T9622] dump_stack_lvl+0x16c/0x1f0 [ 360.893051][ T9622] should_fail_ex+0x512/0x640 [ 360.893087][ T9622] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 360.893119][ T9622] should_failslab+0xc2/0x120 [ 360.893150][ T9622] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 360.893177][ T9622] ? lockdep_init_map_type+0x5c/0x280 [ 360.893210][ T9622] ? __d_alloc+0x31/0xaa0 [ 360.893245][ T9622] __d_alloc+0x31/0xaa0 [ 360.893273][ T9622] d_alloc_pseudo+0x1c/0xc0 [ 360.893304][ T9622] alloc_file_pseudo+0xcf/0x230 [ 360.893339][ T9622] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 360.893374][ T9622] ? alloc_fd+0x471/0x7d0 [ 360.893417][ T9622] sock_alloc_file+0x50/0x210 [ 360.893450][ T9622] __sys_socket+0x1c0/0x260 [ 360.893486][ T9622] ? __pfx___sys_socket+0x10/0x10 [ 360.893525][ T9622] ? rcu_is_watching+0x12/0xc0 [ 360.893553][ T9622] __x64_sys_socket+0x72/0xb0 [ 360.893587][ T9622] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.893619][ T9622] do_syscall_64+0xcd/0x230 [ 360.893656][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.893681][ T9622] RIP: 0033:0x7f723378e969 [ 360.893700][ T9622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.893723][ T9622] RSP: 002b:00007f723467c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 360.893745][ T9622] RAX: ffffffffffffffda RBX: 00007f72339b5fa0 RCX: 00007f723378e969 [ 360.893761][ T9622] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 360.893775][ T9622] RBP: 00007f7233810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 360.893790][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.893804][ T9622] R13: 0000000000000000 R14: 00007f72339b5fa0 R15: 00007fff560dd318 [ 360.893832][ T9622] [ 364.464815][ T9669] can: request_module (can-proto-4) failed. [ 365.115616][ T9702] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[9702] [ 366.420716][ T9720] random: crng reseeded on system resumption [ 367.331838][ T9728] could not allocate digest TFM handle binfmt_misc [ 367.934874][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 368.085952][ T9746] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 371.508671][ T9800] FAULT_INJECTION: forcing a failure. [ 371.508671][ T9800] name failslab, interval 1, probability 0, space 0, times 0 [ 371.531194][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.0.769 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 371.531244][ T9800] Tainted: [U]=USER [ 371.531254][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 371.531271][ T9800] Call Trace: [ 371.531281][ T9800] [ 371.531293][ T9800] dump_stack_lvl+0x16c/0x1f0 [ 371.531339][ T9800] should_fail_ex+0x512/0x640 [ 371.531390][ T9800] should_failslab+0xc2/0x120 [ 371.531429][ T9800] __kmalloc_cache_noprof+0x6a/0x3e0 [ 371.531481][ T9800] ? sctp_add_bind_addr+0xae/0x3f0 [ 371.531527][ T9800] sctp_add_bind_addr+0xae/0x3f0 [ 371.531573][ T9800] sctp_copy_local_addr_list+0x39d/0x5a0 [ 371.531627][ T9800] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 371.531690][ T9800] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 371.531749][ T9800] ? sctp_bind_addr_copy+0xe0/0x530 [ 371.531790][ T9800] sctp_bind_addr_copy+0xe0/0x530 [ 371.531846][ T9800] sctp_connect_new_asoc+0x1d7/0x790 [ 371.531883][ T9800] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 371.531918][ T9800] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 371.531982][ T9800] __sctp_connect+0x3f3/0xc60 [ 371.532021][ T9800] ? do_raw_spin_lock+0x12c/0x2b0 [ 371.532071][ T9800] ? __pfx___sctp_connect+0x10/0x10 [ 371.532107][ T9800] ? __pfx_sctp_inet_connect+0x10/0x10 [ 371.532142][ T9800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.532189][ T9800] ? __pfx_sctp_inet_connect+0x10/0x10 [ 371.532220][ T9800] sctp_inet_connect+0x15f/0x200 [ 371.532256][ T9800] __sys_connect_file+0x13e/0x1a0 [ 371.532311][ T9800] __sys_connect+0x14d/0x170 [ 371.532339][ T9800] ? __pfx___sys_connect+0x10/0x10 [ 371.532405][ T9800] ? __pfx_ksys_write+0x10/0x10 [ 371.532433][ T9800] ? rcu_is_watching+0x12/0xc0 [ 371.532470][ T9800] __x64_sys_connect+0x72/0xb0 [ 371.532497][ T9800] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.532537][ T9800] do_syscall_64+0xcd/0x230 [ 371.532584][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.532615][ T9800] RIP: 0033:0x7f542f18e969 [ 371.532640][ T9800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.532670][ T9800] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 371.532707][ T9800] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 371.532728][ T9800] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 371.532747][ T9800] RBP: 00007f542ff7c090 R08: 0000000000000000 R09: 0000000000000000 [ 371.532765][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.532784][ T9800] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 371.532826][ T9800] [ 372.843983][ T9819] FAULT_INJECTION: forcing a failure. [ 372.843983][ T9819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.858187][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.2.773 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 372.858239][ T9819] Tainted: [U]=USER [ 372.858249][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 372.858268][ T9819] Call Trace: [ 372.858279][ T9819] [ 372.858290][ T9819] dump_stack_lvl+0x16c/0x1f0 [ 372.858343][ T9819] should_fail_ex+0x512/0x640 [ 372.858393][ T9819] _copy_to_user+0x32/0xd0 [ 372.858526][ T9819] simple_read_from_buffer+0xcb/0x170 [ 372.858576][ T9819] proc_fail_nth_read+0x197/0x270 [ 372.858620][ T9819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.858667][ T9819] ? rw_verify_area+0xcf/0x680 [ 372.858712][ T9819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.858759][ T9819] vfs_read+0x1de/0xc70 [ 372.858794][ T9819] ? __pfx___mutex_lock+0x10/0x10 [ 372.858839][ T9819] ? __pfx_vfs_read+0x10/0x10 [ 372.858881][ T9819] ? __fget_files+0x20e/0x3c0 [ 372.858944][ T9819] ksys_read+0x12a/0x240 [ 372.858972][ T9819] ? __pfx_ksys_read+0x10/0x10 [ 372.858998][ T9819] ? rcu_is_watching+0x12/0xc0 [ 372.859038][ T9819] do_syscall_64+0xcd/0x230 [ 372.859087][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.859118][ T9819] RIP: 0033:0x7ff71b58d37c [ 372.859145][ T9819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.859176][ T9819] RSP: 002b:00007ff71c385030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.859204][ T9819] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58d37c [ 372.859225][ T9819] RDX: 000000000000000f RSI: 00007ff71c3850a0 RDI: 0000000000000006 [ 372.859245][ T9819] RBP: 00007ff71c385090 R08: 0000000000000000 R09: 0000000000000000 [ 372.859263][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.859282][ T9819] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 372.859324][ T9819] [ 373.058276][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.845478][ T9831] can: request_module (can-proto-4) failed. [ 376.307533][ T9859] FAULT_INJECTION: forcing a failure. [ 376.307533][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 376.367299][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.0.783 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 376.367358][ T9859] Tainted: [U]=USER [ 376.367374][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 376.367393][ T9859] Call Trace: [ 376.367404][ T9859] [ 376.367417][ T9859] dump_stack_lvl+0x16c/0x1f0 [ 376.367474][ T9859] should_fail_ex+0x512/0x640 [ 376.367525][ T9859] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 376.367568][ T9859] should_failslab+0xc2/0x120 [ 376.367610][ T9859] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 376.367652][ T9859] ? lockdep_init_map_type+0x5c/0x280 [ 376.367695][ T9859] ? __d_alloc+0x31/0xaa0 [ 376.367740][ T9859] __d_alloc+0x31/0xaa0 [ 376.367778][ T9859] d_alloc_pseudo+0x1c/0xc0 [ 376.367826][ T9859] alloc_file_pseudo+0xcf/0x230 [ 376.367871][ T9859] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 376.367919][ T9859] ? alloc_fd+0x471/0x7d0 [ 376.367976][ T9859] sock_alloc_file+0x50/0x210 [ 376.368018][ T9859] __sys_socket+0x1c0/0x260 [ 376.368070][ T9859] ? __pfx___sys_socket+0x10/0x10 [ 376.368124][ T9859] ? rcu_is_watching+0x12/0xc0 [ 376.368175][ T9859] __x64_sys_socket+0x72/0xb0 [ 376.368223][ T9859] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.368272][ T9859] do_syscall_64+0xcd/0x230 [ 376.368324][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.368357][ T9859] RIP: 0033:0x7f542f18e969 [ 376.368383][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.368421][ T9859] RSP: 002b:00007f542ff7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 376.368452][ T9859] RAX: ffffffffffffffda RBX: 00007f542f3b5fa0 RCX: 00007f542f18e969 [ 376.368473][ T9859] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 376.368496][ T9859] RBP: 00007f542f210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 376.368516][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.368536][ T9859] R13: 0000000000000000 R14: 00007f542f3b5fa0 R15: 00007ffc792a0fd8 [ 376.368581][ T9859] [ 379.692213][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 380.537377][ T9903] : Can't lookup blockdev [ 381.564548][ T9927] ================================================================== [ 381.572707][ T9927] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 381.580699][ T9927] Read of size 8 at addr ffff8880269e8800 by task syz.2.796/9927 [ 381.588484][ T9927] [ 381.590855][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.2.796 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 381.590906][ T9927] Tainted: [U]=USER [ 381.590917][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 381.590938][ T9927] Call Trace: [ 381.590948][ T9927] [ 381.590959][ T9927] dump_stack_lvl+0x116/0x1f0 [ 381.591019][ T9927] print_report+0xc3/0x670 [ 381.591056][ T9927] ? __virt_addr_valid+0x5e/0x590 [ 381.591098][ T9927] ? __phys_addr+0xc6/0x150 [ 381.591142][ T9927] ? force_devcd_write+0x312/0x340 [ 381.591184][ T9927] kasan_report+0xe0/0x110 [ 381.591221][ T9927] ? force_devcd_write+0x312/0x340 [ 381.591267][ T9927] force_devcd_write+0x312/0x340 [ 381.591309][ T9927] ? __pfx_force_devcd_write+0x10/0x10 [ 381.591352][ T9927] ? __debugfs_file_get+0x1fe/0x840 [ 381.591388][ T9927] ? __pfx___debugfs_file_get+0x10/0x10 [ 381.591429][ T9927] full_proxy_write+0x13c/0x200 [ 381.591468][ T9927] vfs_write+0x25c/0x1180 [ 381.591496][ T9927] ? __pfx_full_proxy_write+0x10/0x10 [ 381.591535][ T9927] ? __pfx___mutex_lock+0x10/0x10 [ 381.591580][ T9927] ? __pfx_vfs_write+0x10/0x10 [ 381.591612][ T9927] ? __fget_files+0x20e/0x3c0 [ 381.591668][ T9927] ksys_write+0x12a/0x240 [ 381.591697][ T9927] ? __pfx_ksys_write+0x10/0x10 [ 381.591724][ T9927] ? rcu_is_watching+0x12/0xc0 [ 381.591760][ T9927] do_syscall_64+0xcd/0x230 [ 381.591804][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.591837][ T9927] RIP: 0033:0x7ff71b58e969 [ 381.591863][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.591896][ T9927] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.591928][ T9927] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 381.591949][ T9927] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007 [ 381.591969][ T9927] RBP: 00007ff71b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 381.592000][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.592019][ T9927] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 381.592050][ T9927] [ 381.592061][ T9927] [ 381.811901][ T9927] Allocated by task 1326: [ 381.816243][ T9927] kasan_save_stack+0x33/0x60 [ 381.820952][ T9927] kasan_save_track+0x14/0x30 [ 381.825657][ T9927] __kasan_kmalloc+0xaa/0xb0 [ 381.830274][ T9927] __kmalloc_noprof+0x223/0x510 [ 381.835153][ T9927] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 381.841086][ T9927] ieee80211_inform_bss+0x10b/0x1140 [ 381.846406][ T9927] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 381.852777][ T9927] cfg80211_inform_bss_data+0x224/0x3bd0 [ 381.858451][ T9927] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 381.864561][ T9927] ieee80211_bss_info_update+0x310/0xab0 [ 381.870225][ T9927] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 381.876405][ T9927] ieee80211_iface_work+0xbf4/0x1020 [ 381.881724][ T9927] cfg80211_wiphy_work+0x3dc/0x550 [ 381.886902][ T9927] process_one_work+0x9cc/0x1b70 [ 381.891900][ T9927] worker_thread+0x6c8/0xf10 [ 381.896550][ T9927] kthread+0x3c2/0x780 [ 381.900764][ T9927] ret_from_fork+0x45/0x80 [ 381.905235][ T9927] ret_from_fork_asm+0x1a/0x30 [ 381.910044][ T9927] [ 381.912408][ T9927] Freed by task 1326: [ 381.916429][ T9927] kasan_save_stack+0x33/0x60 [ 381.921164][ T9927] kasan_save_track+0x14/0x30 [ 381.925878][ T9927] kasan_save_free_info+0x3b/0x60 [ 381.931054][ T9927] __kasan_slab_free+0x51/0x70 [ 381.935892][ T9927] kfree+0x2b6/0x4d0 [ 381.939846][ T9927] ieee80211_inform_bss+0x77c/0x1140 [ 381.945177][ T9927] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 381.951467][ T9927] cfg80211_inform_bss_data+0x224/0x3bd0 [ 381.957161][ T9927] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 381.963286][ T9927] ieee80211_bss_info_update+0x310/0xab0 [ 381.968958][ T9927] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 381.975407][ T9927] ieee80211_iface_work+0xbf4/0x1020 [ 381.980728][ T9927] cfg80211_wiphy_work+0x3dc/0x550 [ 381.985939][ T9927] process_one_work+0x9cc/0x1b70 [ 381.990918][ T9927] worker_thread+0x6c8/0xf10 [ 381.995546][ T9927] kthread+0x3c2/0x780 [ 381.999688][ T9927] ret_from_fork+0x45/0x80 [ 382.004142][ T9927] ret_from_fork_asm+0x1a/0x30 [ 382.008975][ T9927] [ 382.011315][ T9927] The buggy address belongs to the object at ffff8880269e8800 [ 382.011315][ T9927] which belongs to the cache kmalloc-1k of size 1024 [ 382.025405][ T9927] The buggy address is located 0 bytes inside of [ 382.025405][ T9927] freed 1024-byte region [ffff8880269e8800, ffff8880269e8c00) [ 382.039330][ T9927] [ 382.041676][ T9927] The buggy address belongs to the physical page: [ 382.048122][ T9927] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x269e8 [ 382.056951][ T9927] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 382.065486][ T9927] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 382.073060][ T9927] page_type: f5(slab) [ 382.077070][ T9927] raw: 00fff00000000040 ffff88801b441dc0 ffffea000168a400 dead000000000002 [ 382.085710][ T9927] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 382.094322][ T9927] head: 00fff00000000040 ffff88801b441dc0 ffffea000168a400 dead000000000002 [ 382.103022][ T9927] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 382.111725][ T9927] head: 00fff00000000003 ffffea00009a7a01 00000000ffffffff 00000000ffffffff [ 382.120425][ T9927] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 382.129115][ T9927] page dumped because: kasan: bad access detected [ 382.135542][ T9927] page_owner tracks the page as allocated [ 382.141284][ T9927] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 62, tgid 62 (kworker/u8:4), ts 15301410998, free_ts 0 [ 382.159676][ T9927] post_alloc_hook+0x181/0x1b0 [ 382.164481][ T9927] get_page_from_freelist+0x135c/0x3920 [ 382.170087][ T9927] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 382.176041][ T9927] new_slab+0x94/0x340 [ 382.180152][ T9927] ___slab_alloc+0xd9c/0x1940 [ 382.184870][ T9927] __slab_alloc.constprop.0+0x56/0xb0 [ 382.190377][ T9927] __kmalloc_cache_node_noprof+0x100/0x420 [ 382.196211][ T9927] blk_mq_alloc_and_init_hctx+0x639/0x11c0 [ 382.202046][ T9927] __blk_mq_realloc_hw_ctxs+0x495/0x610 [ 382.207621][ T9927] blk_mq_realloc_hw_ctxs+0x583/0x670 [ 382.213036][ T9927] blk_mq_init_allocated_queue+0x3b1/0x1230 [ 382.218966][ T9927] blk_mq_alloc_queue+0x1c2/0x290 [ 382.224115][ T9927] scsi_alloc_sdev+0x88f/0xd80 [ 382.228916][ T9927] scsi_probe_and_add_lun+0x76b/0xd80 [ 382.234326][ T9927] __scsi_scan_target+0x1e8/0x580 [ 382.239392][ T9927] scsi_scan_channel+0x149/0x1e0 [ 382.244375][ T9927] page_owner free stack trace missing [ 382.249759][ T9927] [ 382.252097][ T9927] Memory state around the buggy address: [ 382.257763][ T9927] ffff8880269e8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.265946][ T9927] ffff8880269e8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.274032][ T9927] >ffff8880269e8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.282207][ T9927] ^ [ 382.286292][ T9927] ffff8880269e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.294416][ T9927] ffff8880269e8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 382.302518][ T9927] ================================================================== [ 382.332570][ T9927] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 382.339864][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.2.796 Tainted: G U 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 382.353473][ T9927] Tainted: [U]=USER [ 382.357292][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 382.367541][ T9927] Call Trace: [ 382.370839][ T9927] [ 382.373875][ T9927] dump_stack_lvl+0x3d/0x1f0 [ 382.378509][ T9927] panic+0x71c/0x800 [ 382.382444][ T9927] ? __pfx_panic+0x10/0x10 [ 382.386901][ T9927] ? mark_held_locks+0x49/0x80 [ 382.391794][ T9927] ? preempt_schedule_thunk+0x16/0x30 [ 382.397213][ T9927] ? force_devcd_write+0x312/0x340 [ 382.402364][ T9927] ? preempt_schedule_common+0x44/0xc0 [ 382.407868][ T9927] ? force_devcd_write+0x312/0x340 [ 382.413056][ T9927] check_panic_on_warn+0xab/0xb0 [ 382.418034][ T9927] end_report+0x107/0x170 [ 382.422395][ T9927] kasan_report+0xee/0x110 [ 382.426849][ T9927] ? force_devcd_write+0x312/0x340 [ 382.432094][ T9927] force_devcd_write+0x312/0x340 [ 382.437099][ T9927] ? __pfx_force_devcd_write+0x10/0x10 [ 382.442603][ T9927] ? __debugfs_file_get+0x1fe/0x840 [ 382.447834][ T9927] ? __pfx___debugfs_file_get+0x10/0x10 [ 382.453477][ T9927] full_proxy_write+0x13c/0x200 [ 382.458993][ T9927] vfs_write+0x25c/0x1180 [ 382.463469][ T9927] ? __pfx_full_proxy_write+0x10/0x10 [ 382.468898][ T9927] ? __pfx___mutex_lock+0x10/0x10 [ 382.473986][ T9927] ? __pfx_vfs_write+0x10/0x10 [ 382.478823][ T9927] ? __fget_files+0x20e/0x3c0 [ 382.483589][ T9927] ksys_write+0x12a/0x240 [ 382.487984][ T9927] ? __pfx_ksys_write+0x10/0x10 [ 382.492874][ T9927] ? rcu_is_watching+0x12/0xc0 [ 382.497685][ T9927] do_syscall_64+0xcd/0x230 [ 382.502236][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.508187][ T9927] RIP: 0033:0x7ff71b58e969 [ 382.512641][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.532303][ T9927] RSP: 002b:00007ff71c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.540756][ T9927] RAX: ffffffffffffffda RBX: 00007ff71b7b5fa0 RCX: 00007ff71b58e969 [ 382.548784][ T9927] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007 [ 382.556787][ T9927] RBP: 00007ff71b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 382.565332][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.573360][ T9927] R13: 0000000000000000 R14: 00007ff71b7b5fa0 R15: 00007fffe0ce0cb8 [ 382.581392][ T9927] [ 382.584768][ T9927] Kernel Offset: disabled [ 382.589124][ T9927] Rebooting in 86400 seconds..