last executing test programs: 2m32.721802151s ago: executing program 0 (id=896): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(r1, 0x0, 0x0, &(0x7f0000000640)={0x6, 0x9}, 0x283) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 2m31.162072228s ago: executing program 0 (id=902): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x5, 0x1, 0xa9, 0x4}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_notify$auto(0xffffffffffffffff, 0x0) mmap$auto(0xfffffffffffffffe, 0xfffffffffffffff9, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socket(0x2, 0xa, 0x106) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x6}, 0x3) mmap$auto(0x0, 0x20009, 0x100000000df, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x1, 0x1004000000000df, 0xeb1, 0x401, 0x8002) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c234000, 0x1, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x200) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01002dbd7000fcdbdf25010000"], 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x20000, 0x0) readv$auto(r2, &(0x7f0000000280)={0x0, 0x17}, 0x187) 2m30.532730894s ago: executing program 0 (id=905): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/driver_override\x00', 0x20000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc6, 0x3, 0xfff, 0x0) r0 = socket(0x11, 0x3, 0x9) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) 2m30.329952932s ago: executing program 0 (id=907): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x80002, 0x6) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250a000000080003000100000008000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/hwsim0/flags\x00', 0x1c1202, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/24/effective_affinity_list\x00', 0x149002, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/211, 0xd3) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x4, @ANYBLOB="080001002f66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = socket(0xa, 0x1, 0x84) ppoll$auto(&(0x7f0000000180)={r0, 0xb65, 0x7}, 0xa4, &(0x7f00000001c0)={0x7fff, 0x8000}, &(0x7f0000001940)={0x3}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = getsockopt$auto(r1, 0x84, 0x80, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x840}, 0x40000) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000001700)={@siginfo_0_0={0xe, 0x0, 0x1, @_sigsys={&(0x7f00000016c0)="603c83a998454f2c478c72f247ac4e24801a3c8a73fff9408078c8a485fb0f695c3f81e85e03f7b46a073ccb3a3db647fba09e4af26c01bbc2f4", 0x99, 0xdf04}}}, 0x7fff, &(0x7f0000000340)={{0xdee, 0x8}, {0x80000001, 0x9}, 0x3, 0xdf, 0x7fffffff, 0x8, 0x2, 0x805b, 0xc12a, 0x500, 0x1, 0x7fff, 0x0, 0x0, 0xc09a, 0x378}) waitid$auto_P_PGID(0x2, r5, &(0x7f0000000400)={@_si_pad}, 0xed92, &(0x7f0000000480)={{0x8, 0x9}, {0x5, 0x8}, 0x0, 0x10, 0x1000, 0x8001, 0xffffffffffffffff, 0xffffffffffffff96, 0x7fffffff, 0xfffffffffffffff4, 0x4, 0x54, 0xffff, 0x6, 0x6, 0x786}) shmctl$auto_SHM_LOCK(0x7a19, 0xb, &(0x7f0000001640)={{0x400, 0xee01, 0xffffffffffffffff, 0x0, 0x3, 0x7, 0x7}, 0x6, 0x5, 0x4, 0x8de7, @raw=0x200, @raw=0x5, 0x3ff, 0x0, &(0x7f0000000540)="cd2294c9211eddbbfdb49daa148c317c479b0b241675a9a5499e8a6b52f22059ccd49285e743c2cf23b2ed50d35a6f01812371df601a7a190bf8240c8d44a23980f6d5c19ec6e120eb41e644672bfc89c39425afef4a78fad00dcbe68a58dfe477ab9e0e2486b514edd679b02f30f0c376be3a70bd423bdc89fb516a41d7b15d83908389821e05e8d1bd3d80b33ed9cec420d3956e214bb4befaf48c8b93f6d51e58ef19425fc93cda09b232a6bfa2154b364b8a1de498ea384de6d4c9a88ab6be1b90ca825acba7eb939ef099cbe3627ff4c795193f7882a9d1f500d0572060a4ea5838cedb101dd00c1dbc0f1d0cd3d2fdce", &(0x7f0000000640)="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"}) setsockopt$auto_SO_MARK(r4, 0x7, 0x24, &(0x7f0000001780)='\xa2\n\x00\x00\x80', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b00"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2m29.647949605s ago: executing program 0 (id=909): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) r1 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0xc2082, 0x0) write$auto(r3, 0x0, 0x5) write$auto_sg_fops_sg(r2, &(0x7f0000000040)="8f53a8fae2e68afd2cb88544241ea7f8ad7843063916cd51b15d06f5e6328dcd4b55228ab6b4bf78d7d77b", 0x2b) getdents$auto(r1, 0x0, 0xde) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x20000b) 2m25.268215532s ago: executing program 0 (id=919): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/uinput\x00', 0xb) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x83) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) socket(0x23, 0x2, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/uevent\x00', 0x800, 0x0) landlock_add_rule$auto(r2, 0x1, 0x0, 0x0) 2m24.573282284s ago: executing program 32 (id=919): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/uinput\x00', 0xb) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x83) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) socket(0x23, 0x2, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/uevent\x00', 0x800, 0x0) landlock_add_rule$auto(r2, 0x1, 0x0, 0x0) 8.440911995s ago: executing program 3 (id=1382): close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x800, 0x300) r0 = socket(0x10, 0x2, 0x4) socket(0x11, 0x80003, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, &(0x7f0000000180)=0xfffffffc) io_uring_setup$auto(0x86, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 7.528233492s ago: executing program 3 (id=1385): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(r1, 0x0, 0x0, &(0x7f0000000640)={0x6, 0x9}, 0x283) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 5.704418597s ago: executing program 4 (id=1388): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c00"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r4, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 5.70418207s ago: executing program 3 (id=1389): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x1, 0xfffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x2, 0x87) r2 = timerfd_create$auto(0x6, 0x0) futimesat$auto(r2, 0x0, &(0x7f0000000100)={0x40, 0xffffffffffffffff}) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = socket(0xa, 0x3, 0x2c) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x3, 0x3, 0x16, r3, 0x21) io_uring_setup$auto(0x6, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000140)={0x3, 0x0, 0x4, @raw=[0x9, 0x6, 0x81, 0x0, 0x6, 0x5b1, 0xc8f, 0x7, 0x1ff, 0x1, 0x2, 0x4b1a, 0x5, 0xff93, 0xdffffc44, 0x78ffe623]}) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r7, &(0x7f0000000080)={0x0, 0x6}, 0x3) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="be00000028fc921868b123e42a83e1beac73736f785c15c0ac7ad2512fe7ad77caa640d19a0dc0293b82e1350428b2e006a74999b6596d3450ac15a3a7006fc6d9dfb2c28b530376170cf75a3cdbe99b3bbcbadaaaecd119b8ee0060e0d6e606ab735f359adb5f7eaa54f966411f7d317ad45e47bcfe4916f995c774262269c652a5625f3a7884f8de234d6f49871170e2412a112e7c297ec83de9fe6449fcbe5f524b46e04d445824882b92e5e94f00000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf2501000000b300030058d6f423fb93aff51b4a2dafb34087abd9f1e397ce6da236f37d6949fe957226def2421550890b0bbdf08e34278ab91e58c27e070051c3d8956b5b06e375908af7c6c5a947b4479172a90eff900f4298a9966d2ea80da6f91a1b9690924eacfea3b2e9f6c654361479cb2a9be245fb5ff36dbd63c3c522c8a9a33635ec1287e06c8d9ca5210037c98eb0f4d3cd01bfc15b15a602075df17dd7c5d8fdcd8a266f7c080998667d780f50d064f1d16eb900"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4844) mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, 0xffffffffffffffff, 0x7) 5.562606983s ago: executing program 1 (id=1390): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8400) socket(0x1, 0x6, 0x100) r0 = socket(0x25, 0x1, 0x5) recvfrom$auto(r0, 0x0, 0x0, 0x40, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x4, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x10080, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 4.848411876s ago: executing program 2 (id=1391): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) unshare$auto(0x200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x14221400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.667305534s ago: executing program 2 (id=1392): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x0, 0x7, 0x2, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x9, 0x4, 0x0) r1 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000380)={&(0x7f0000000180), 0xf}, 0x2e, &(0x7f0000000380), 0x7, 0x1083}, 0x5}, 0x2, 0x100) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) clone$auto(0xfffffffffffffffb, 0x401, &(0x7f0000000040)=0x1ff, 0x0, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) r2 = io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x6d2fc1, 0x0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4094}, 0x20000811) 4.60561202s ago: executing program 1 (id=1393): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c000100ff01000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 4.511902982s ago: executing program 4 (id=1394): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c000100ff010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r4, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 4.496095386s ago: executing program 3 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (fail_nth: 1) 3.635082377s ago: executing program 3 (id=1396): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}, 0x1, 0x2000}, 0x80) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) 3.632731486s ago: executing program 1 (id=1397): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c000100ff01000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 3.530218448s ago: executing program 2 (id=1398): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8400) socket(0x1, 0x6, 0x100) r0 = socket(0x25, 0x1, 0x5) recvfrom$auto(r0, 0x0, 0x0, 0x40, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x4, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x10080, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 2.765532012s ago: executing program 4 (id=1399): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r4, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 2.7653989s ago: executing program 3 (id=1400): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x8080, 0x0) lseek$auto(r1, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/030/001\x00', 0x10000, 0x0) sendmsg$auto_NL80211_CMD_SET_REG(r2, 0x0, 0x2400c0c5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) removexattrat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f00000000c0)='$\x00') openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) 2.540240781s ago: executing program 1 (id=1401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0x14221400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.389331796s ago: executing program 2 (id=1402): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(r1, 0x0, 0x0, &(0x7f0000000640)={0x6, 0x9}, 0x283) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) 1.636482244s ago: executing program 1 (id=1403): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/driver_override\x00', 0x20000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) (fail_nth: 1) 1.259488468s ago: executing program 4 (id=1404): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x60a00, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/rp_filter\x00', 0x141241, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/speed\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) mremap$auto(0x4000, 0xffffffffffffffff, 0x3fd6, 0x4, 0x7fffffffafff) r1 = prctl$auto(0x200023, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) flistxattr$auto(r1, &(0x7f0000000080)='\x00', 0x4d4) mmap$auto(0x1, 0x6, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x4, 0x3) mbind$auto(0x8, 0x2091d0, 0x400000, 0x0, 0x5, 0x7) socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x3d5040, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000010", @ANYRES16=r3, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40900}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto_F_GETSIG(r1, 0xb, 0x5cce) write$auto(0x3, 0x0, 0xfffffdef) 943.79191ms ago: executing program 2 (id=1405): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x5, 0x3, 0x10000) r0 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptye3\x00', 0x400, 0x0) ioctl$auto_TIOCGPGRP2(r2, 0x540f, &(0x7f0000000280)) r3 = syz_clone3(&(0x7f0000000480)={0x219804280, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x15}, &(0x7f0000000300)=""/8, 0x8, &(0x7f0000000340)=""/233, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{@inferred, 0xff, 0x1a0, 0x0, "393e67ee1c6bfdf42f2937a33d7fc861e53384aa446a788a58702a9f8fd52567d42854ba191c4130c43fefa9", @inferred=r3}, 0xc, 0x9, 0x800, @raw=0xc873, @reserved="275c8552088748ccc5e23af81feb33a4adfd2022628b8385beebf955296acd1d4a21f36b8124adaed01407a7b8445a2fdff9100b74206ebc18d69956ecdfbfe1e7834ab43b336068fb59d103f9d2db96e72a6b1d1530ecb7fd008ddcfdcd6b8f595d2a122fc0e24c2123824c9b062b77c55760d81fad2cf8701e02883b2bcb34", "73348675e83f496ae431ba225b4bb263962d0f99d425d64467f7b4a9d822ae07acb93d4d4a67257f2259b033a302f6bb0e51a5b3548c0e6c37b8c5bfb2cf3d95"}) 900.805879ms ago: executing program 4 (id=1406): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c000100ff01000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) shutdown$auto(r3, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 817.131349ms ago: executing program 1 (id=1407): socket(0xb, 0x80000, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) signalfd$auto(r0, 0x0, 0x8) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0x21, &(0x7f0000000600)={@_si_pad}) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000140)={{0x2, 0x0, 0xee00, 0xea, 0xa4, 0x2a, 0x5}, 0x0, &(0x7f0000000100)=0x3, 0x5, 0x5, 0x6, 0xb, 0x401, 0x4, 0x6, 0x7, @raw=0x1}) (fail_nth: 1) 567.566137ms ago: executing program 2 (id=1408): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x1ffde, 0x7, 0x3, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) io_uring_setup$auto(0x406, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) io_uring_setup$auto(0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x2, 0x4}, 0x2, 0x5) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq$auto(0x0, 0x47fffd, 0x0, 0x6) 0s ago: executing program 4 (id=1409): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="e7696e1d1bd2098c087483dbb85091a9bccbf2a814c2b1c2da6a4642e71e423e55bbcf4c253d844306d2a1786e3bdf", 0x2f) rmdir$auto(&(0x7f0000000300)='\x00') socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getpeername$auto(0x3, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000100)="9f290e45ae69e2fb29845606c98fa9b6ea2fca6a9dba0d1755f3d41e927dd16c574bebbbc4f84197d800063db209dfc38941135837e1a7d979c8164d4195e1b191f8c984428cb7d8192c4da18e29ea2dae1e8ac55f675b8293b30213edb4b6d430d85526e5c65b41826621a7cf410f615388060924b3b273dae99066073e1a6def8844b3604cfb470d8f3d032181eaea48179418cca422944dbc4fa256d65b9fd42b782815edacd1c95ebf0283c97345296d4778b5eeee2050009bea0ccad6201c5aa72d4129e6390b8a84888d598dfe32ee98cbadf98ef718c4ca00a7dfc53431f3a93f09e08aec7dae1af7f228", 0x1, &(0x7f0000000080)={&(0x7f0000000200)="23099f822fc2ad77b10f0255921f1b942a0663a8e47343d5f5f02f85a29aee0d75a5763b5695f59c66cc98ac28accfe40bd5de428636d31e61142ea74d79914f21e7d0ba0dbaef463d3c837cf5d59826db655c8fa56982527b0c7a9169e05b14132a63131d42cfc9b4c93415d7331f76a3bec2257da8e8701592742fed40b06768d4e5c8c4d9625a4d62b043c1dbc6d483daa873376a4b13323d9f79e713dfecad3938929b1abccc190614968a2602516bba6ac3bbda6c882e6806624a4090139c0f0a954c", 0x3}, 0x89c, &(0x7f0000000340)="33e7bb100d49dee67afc2e9a9e83a7935bf53f21f8675b2ee07f73ef85f64bdfb40f9da3353275e27b67fbc57753d73e095f32f4e053a97cf53a281cab266fe85e5288985cc23070cd0131222a98123f93216feaa21eea120ea47c96bd5a9ae2fa7f5d679714d57940a8f139ecffddde6a4bfbbaaed709d6f7ebf87aff13f40736e3272ee9a21efd13eb3a0134bd970e4b11ab097e401b3688d6184a3e103cafb91ae6d2787f9ff9fe8074ed2c8ef8b1", 0x8, 0xfffffff8}, 0xb}, 0x2, 0xfff) kernel console output (not intermixed with test programs): ce not active [ 93.638818][ T5826] hsr_slave_0: entered promiscuous mode [ 93.645172][ T5826] hsr_slave_1: entered promiscuous mode [ 93.651812][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.659645][ T5826] Cannot create hsr debugfs directory [ 93.666300][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.673278][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.699589][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.732264][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.739447][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.766510][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.856769][ T5831] hsr_slave_0: entered promiscuous mode [ 93.863333][ T5831] hsr_slave_1: entered promiscuous mode [ 93.870187][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.877990][ T5831] Cannot create hsr debugfs directory [ 93.967317][ T5830] hsr_slave_0: entered promiscuous mode [ 93.973686][ T5830] hsr_slave_1: entered promiscuous mode [ 93.980499][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.988135][ T5830] Cannot create hsr debugfs directory [ 94.324983][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.345289][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.394615][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.415657][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.508352][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.543140][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.570292][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.592464][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.645563][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.689332][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.719518][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.733166][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.781778][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.808996][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.822565][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.834202][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.851702][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.907438][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.950322][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.957602][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.991899][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.999044][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.142119][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.161926][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.230257][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.254278][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.277853][ T56] Bluetooth: hci0: command tx timeout [ 95.293910][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.301706][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.329551][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.354219][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.361404][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.365723][ T56] Bluetooth: hci3: command tx timeout [ 95.384153][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.391327][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.446756][ T56] Bluetooth: hci2: command tx timeout [ 95.452248][ T56] Bluetooth: hci1: command tx timeout [ 95.463661][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.493092][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.500337][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.570550][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.628790][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.636032][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.654237][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.694434][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.701729][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.783701][ T5834] veth0_vlan: entered promiscuous mode [ 95.823790][ T5834] veth1_vlan: entered promiscuous mode [ 95.940650][ T5834] veth0_macvtap: entered promiscuous mode [ 95.981117][ T5834] veth1_macvtap: entered promiscuous mode [ 96.050449][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.099834][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.122811][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131879][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.144224][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.153737][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194559][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.224966][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.381255][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.383673][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.402527][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.469835][ T5830] veth0_vlan: entered promiscuous mode [ 96.499598][ T4838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.502316][ T5826] veth0_vlan: entered promiscuous mode [ 96.513098][ T4838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.538388][ T5830] veth1_vlan: entered promiscuous mode [ 96.574383][ T5826] veth1_vlan: entered promiscuous mode [ 96.617945][ T5831] veth0_vlan: entered promiscuous mode [ 96.651472][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.683917][ T5831] veth1_vlan: entered promiscuous mode [ 96.696693][ T5830] veth0_macvtap: entered promiscuous mode [ 96.718564][ T5830] veth1_macvtap: entered promiscuous mode [ 96.790715][ T5826] veth0_macvtap: entered promiscuous mode [ 96.840376][ T5826] veth1_macvtap: entered promiscuous mode [ 96.850378][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.863985][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.877362][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.920233][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.933232][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.933270][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.933292][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.935035][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.968493][ T24] cfg80211: failed to load regulatory.db [ 97.006747][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.037182][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.050676][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.068815][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.095845][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.106911][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.118406][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.130138][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.168661][ T5831] veth0_macvtap: entered promiscuous mode [ 97.190444][ T5831] veth1_macvtap: entered promiscuous mode [ 97.213559][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227745][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.247610][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.259437][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.299202][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.311174][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.330649][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.348209][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357678][ T56] Bluetooth: hci0: command tx timeout [ 97.437435][ T56] Bluetooth: hci3: command tx timeout [ 97.516330][ T56] Bluetooth: hci1: command tx timeout [ 97.521792][ T5837] Bluetooth: hci2: command tx timeout [ 97.585247][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.641314][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.652230][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.671896][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.682040][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.702006][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.713097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.722332][ T5895] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[5895] [ 97.759821][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.774935][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.793372][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.805860][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.826056][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.836788][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.852954][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.869723][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.949153][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.960031][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.978641][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.013885][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166919][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.174834][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.375128][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.390750][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.437907][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.452016][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.553440][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.578528][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.609560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.656369][ T4838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.664965][ T4838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.708985][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.733044][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.373621][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.437622][ T56] Bluetooth: hci0: command tx timeout [ 99.464725][ T5910] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.517107][ T56] Bluetooth: hci3: command tx timeout [ 99.585903][ T5912] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.596089][ T56] Bluetooth: hci1: command tx timeout [ 99.601523][ T5837] Bluetooth: hci2: command tx timeout [ 99.948820][ T5917] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(8) [ 100.206028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.214910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.806012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.814913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.063038][ T5925] kexec: Could not allocate control_code_buffer [ 102.939605][ T5965] netlink: 338 bytes leftover after parsing attributes in process `syz.3.18'. [ 102.950888][ T5965] netlink: 338 bytes leftover after parsing attributes in process `syz.3.18'. [ 103.754091][ T5950] kexec: Could not allocate control_code_buffer [ 103.987896][ T5976] netlink: 338 bytes leftover after parsing attributes in process `syz.3.20'. [ 104.064790][ T5976] netlink: 338 bytes leftover after parsing attributes in process `syz.3.20'. [ 104.218918][ T5976] netlink: 210 bytes leftover after parsing attributes in process `syz.3.20'. [ 104.303426][ T5976] veth0_macvtap: left promiscuous mode [ 106.036625][ T5996] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[5996] [ 106.898120][ T6004] netlink: 338 bytes leftover after parsing attributes in process `syz.3.26'. [ 106.909264][ T6004] netlink: 338 bytes leftover after parsing attributes in process `syz.3.26'. [ 106.927998][ T6004] netlink: 210 bytes leftover after parsing attributes in process `syz.3.26'. [ 107.305996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.278162][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'. [ 108.719437][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.309350][ T6042] netlink: 'syz.0.37': attribute type 3 has an invalid length. [ 109.594148][ T6044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 109.597139][ T6044] mmap: syz.3.36 (6044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.826236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.186014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.233706][ T6051] Zero length message leads to an empty skb [ 110.251822][ T6031] kexec: Could not allocate control_code_buffer [ 112.455884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.752834][ T6066] kexec: Could not allocate control_code_buffer [ 113.001731][ T6077] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6077] [ 114.299530][ T6106] ptrace attach of "./syz-executor exec"[5831] was attempted by "a/7֠{vQO\x0bW~)|uVϑc?\x22)S+T{}qq?\x0b|D!|1,I챤6;@vF)7|&\x0b73茻d,E\x0c$# R$ VLC]kP!pW0l\x0d'\x0b]TD2T_v,2O3BlfpRÿ!4Nii}mj S52|I=T)|'eD3$\x09j5Q>v`uPBթlzJ/*\x0bP3JeZMB~7JJLj\x09XQTl+ק-CkAhe;21\x5c>?<\x5cheNȅ%\x09\x22Ɛ [ 115.781685][ T6126] FAULT_INJECTION: forcing a failure. [ 115.781685][ T6126] name failslab, interval 1, probability 0, space 0, times 1 [ 115.899044][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.2.55 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 115.899088][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 115.899111][ T6126] Call Trace: [ 115.899121][ T6126] [ 115.899136][ T6126] dump_stack_lvl+0x16c/0x1f0 [ 115.899188][ T6126] should_fail_ex+0x512/0x640 [ 115.899232][ T6126] ? fs_reclaim_acquire+0xae/0x150 [ 115.899285][ T6126] should_failslab+0xc2/0x120 [ 115.899323][ T6126] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.899360][ T6126] ? security_inode_alloc+0x3b/0x2b0 [ 115.899401][ T6126] security_inode_alloc+0x3b/0x2b0 [ 115.899438][ T6126] inode_init_always_gfp+0xce4/0x1030 [ 115.899498][ T6126] alloc_inode+0x86/0x240 [ 115.899539][ T6126] iget_locked+0x2e4/0x830 [ 115.899582][ T6126] ? __pfx_iget_locked+0x10/0x10 [ 115.899623][ T6126] ? find_held_lock+0x2b/0x80 [ 115.899655][ T6126] ? kernfs_root+0xee/0x2a0 [ 115.899693][ T6126] kernfs_get_inode+0x48/0x460 [ 115.899745][ T6126] kernfs_iop_lookup+0x1a7/0x2d0 [ 115.899781][ T6126] __lookup_slow+0x24e/0x460 [ 115.899824][ T6126] ? __pfx___lookup_slow+0x10/0x10 [ 115.899902][ T6126] ? lookup_fast+0x156/0x610 [ 115.899947][ T6126] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 115.900004][ T6126] walk_component+0x353/0x5b0 [ 115.900056][ T6126] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 115.900120][ T6126] path_openat+0x227/0x2d40 [ 115.900147][ T6126] ? __x64_sys_openat+0x174/0x210 [ 115.900208][ T6126] ? __pfx_path_openat+0x10/0x10 [ 115.900251][ T6126] do_filp_open+0x20b/0x470 [ 115.900283][ T6126] ? __pfx_do_filp_open+0x10/0x10 [ 115.900346][ T6126] ? alloc_fd+0x471/0x7d0 [ 115.900409][ T6126] do_sys_openat2+0x11b/0x1d0 [ 115.900452][ T6126] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.900513][ T6126] __x64_sys_openat+0x174/0x210 [ 115.900557][ T6126] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.900600][ T6126] ? ksys_write+0x1b9/0x240 [ 115.900646][ T6126] do_syscall_64+0xcd/0x230 [ 115.900696][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.900730][ T6126] RIP: 0033:0x7f839838e969 [ 115.900755][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.900785][ T6126] RSP: 002b:00007f83991ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.900816][ T6126] RAX: ffffffffffffffda RBX: 00007f83985b5fa0 RCX: 00007f839838e969 [ 115.900837][ T6126] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 115.900857][ T6126] RBP: 00007f8398410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 115.900882][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.900901][ T6126] R13: 0000000000000000 R14: 00007f83985b5fa0 R15: 00007fffd82c3788 [ 115.900944][ T6126] [ 116.553518][ T6133] FAULT_INJECTION: forcing a failure. [ 116.553518][ T6133] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.568711][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.0.58 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 116.568741][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 116.568755][ T6133] Call Trace: [ 116.568762][ T6133] [ 116.568770][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 116.568815][ T6133] should_fail_ex+0x512/0x640 [ 116.568852][ T6133] get_futex_key+0x1c2/0x1000 [ 116.568880][ T6133] ? __pfx_get_futex_key+0x10/0x10 [ 116.568906][ T6133] ? kasan_save_track+0x14/0x30 [ 116.568929][ T6133] ? __kasan_kmalloc+0xaa/0xb0 [ 116.568955][ T6133] futex_lock_pi+0x27c/0x7b0 [ 116.568988][ T6133] ? __pfx_futex_lock_pi+0x10/0x10 [ 116.569017][ T6133] ? __pfx___futex_wait+0x10/0x10 [ 116.569067][ T6133] ? futex_wait+0x120/0x380 [ 116.569099][ T6133] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.569133][ T6133] ? lock_acquire+0x179/0x350 [ 116.569164][ T6133] ? find_held_lock+0x2b/0x80 [ 116.569187][ T6133] do_futex+0x11a/0x350 [ 116.569212][ T6133] ? __pfx_do_futex+0x10/0x10 [ 116.569236][ T6133] ? ktime_get+0x1a7/0x310 [ 116.569266][ T6133] __x64_sys_futex+0x1e0/0x4c0 [ 116.569295][ T6133] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.569321][ T6133] ? rcu_is_watching+0x12/0xc0 [ 116.569350][ T6133] do_syscall_64+0xcd/0x230 [ 116.569384][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.569407][ T6133] RIP: 0033:0x7f92f8d8e969 [ 116.569424][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.569446][ T6133] RSP: 002b:00007f92f9b70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.569467][ T6133] RAX: ffffffffffffffda RBX: 00007f92f8fb5fa0 RCX: 00007f92f8d8e969 [ 116.569482][ T6133] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000000 [ 116.569495][ T6133] RBP: 00007f92f8e10ab1 R08: 0000000000000000 R09: 0000000000000006 [ 116.569509][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.569522][ T6133] R13: 0000000000000000 R14: 00007f92f8fb5fa0 R15: 00007ffed4b1b608 [ 116.569549][ T6133] [ 117.282653][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 119.128211][ T6164] FAULT_INJECTION: forcing a failure. [ 119.128211][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 119.217617][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.3.65 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 119.217669][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 119.217687][ T6164] Call Trace: [ 119.217697][ T6164] [ 119.217708][ T6164] dump_stack_lvl+0x16c/0x1f0 [ 119.217757][ T6164] should_fail_ex+0x512/0x640 [ 119.217801][ T6164] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 119.217858][ T6164] should_failslab+0xc2/0x120 [ 119.217897][ T6164] __kmalloc_cache_noprof+0x6a/0x3e0 [ 119.217947][ T6164] ? __debugfs_file_get+0x2ad/0x840 [ 119.217988][ T6164] __debugfs_file_get+0x2ad/0x840 [ 119.218022][ T6164] ? __pfx___debugfs_file_get+0x10/0x10 [ 119.218058][ T6164] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.218106][ T6164] full_proxy_open_regular+0x4f/0x360 [ 119.218149][ T6164] do_dentry_open+0x741/0x1c10 [ 119.218182][ T6164] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 119.218231][ T6164] vfs_open+0x82/0x3f0 [ 119.218277][ T6164] path_openat+0x1e5e/0x2d40 [ 119.218323][ T6164] ? __pfx_path_openat+0x10/0x10 [ 119.218363][ T6164] do_filp_open+0x20b/0x470 [ 119.218394][ T6164] ? __pfx_do_filp_open+0x10/0x10 [ 119.218441][ T6164] ? alloc_fd+0x471/0x7d0 [ 119.218485][ T6164] do_sys_openat2+0x11b/0x1d0 [ 119.218516][ T6164] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.218548][ T6164] ? __pfx___might_resched+0x10/0x10 [ 119.218581][ T6164] __x64_sys_openat+0x174/0x210 [ 119.218613][ T6164] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.218672][ T6164] ? rcu_is_watching+0x12/0xc0 [ 119.218703][ T6164] do_syscall_64+0xcd/0x230 [ 119.218739][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.218763][ T6164] RIP: 0033:0x7f86f5f8e969 [ 119.218782][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.218804][ T6164] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.218826][ T6164] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 119.218841][ T6164] RDX: 0000000000143642 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 119.218857][ T6164] RBP: 00007f86f6010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 119.218871][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.218885][ T6164] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 119.218914][ T6164] [ 119.457244][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.646595][ T6142] kexec: Could not allocate control_code_buffer [ 119.764150][ T6154] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6154] [ 119.913782][ T6169] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6169] [ 122.857152][ T6179] kexec: Could not allocate control_code_buffer [ 123.615497][ T6193] TCP: TCP_TX_DELAY enabled [ 123.765982][ T6193] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967282 out of range (51000000..2150000000) [ 125.588336][ T30] audit: type=1800 audit(6041441947.801:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="file0" dev="tmpfs" ino=121 res=0 errno=0 [ 127.403857][ T6211] kexec: Could not allocate control_code_buffer [ 128.281637][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 129.852498][ T6266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.86'. [ 130.162911][ T6275] netlink: 338 bytes leftover after parsing attributes in process `syz.0.88'. [ 130.241264][ T6277] netlink: 338 bytes leftover after parsing attributes in process `syz.0.88'. [ 131.245201][ T6271] kexec: Could not allocate control_code_buffer [ 131.652757][ T6296] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'. [ 132.620448][ T6309] netlink: 338 bytes leftover after parsing attributes in process `syz.0.97'. [ 132.693596][ T6309] netlink: 338 bytes leftover after parsing attributes in process `syz.0.97'. [ 133.022043][ T6294] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6294] [ 134.397867][ T6334] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6334] [ 134.440864][ T6336] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(8) [ 135.137088][ T6311] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[6311] [ 137.493434][ T6356] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6356] [ 137.770805][ T6347] kexec: Could not allocate control_code_buffer [ 137.927367][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.933894][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.636235][ T6369] netlink: 48 bytes leftover after parsing attributes in process `syz.0.108'. [ 139.484393][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 141.874668][ T6385] kexec: Could not allocate control_code_buffer [ 141.908024][ T6406] netlink: 338 bytes leftover after parsing attributes in process `syz.1.117'. [ 141.981393][ T6406] netlink: 338 bytes leftover after parsing attributes in process `syz.1.117'. [ 142.599010][ T6389] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6389] [ 142.622512][ T6420] netlink: 330 bytes leftover after parsing attributes in process `syz.1.121'. [ 144.048841][ T6447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.126'. [ 144.928561][ T6441] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[6441] [ 146.127585][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 147.097867][ T6455] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[6455] [ 148.586904][ T6485] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 148.649645][ T6475] kexec: Could not allocate control_code_buffer [ 149.042282][ T6496] netlink: 338 bytes leftover after parsing attributes in process `syz.1.137'. [ 149.148471][ T6498] netlink: 338 bytes leftover after parsing attributes in process `syz.1.137'. [ 149.479207][ T6507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.139'. [ 151.621687][ T6519] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6519] [ 152.449703][ T6531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.144'. [ 153.816742][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 155.233015][ T6555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.150'. [ 156.616869][ T6542] kexec: Could not allocate control_code_buffer [ 159.388024][ T6605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.159'. [ 159.955982][ T6611] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6611] [ 161.975701][ T6638] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6638] [ 162.827717][ T6647] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.489504][ T6679] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[6679] [ 164.612672][ T6677] svc: failed to register nfsdv3 RPC service (errno 111). [ 164.648754][ T6677] svc: failed to register nfsaclv3 RPC service (errno 111). [ 165.127419][ T6677] syz.3.175 (6677) used greatest stack depth: 20552 bytes left [ 166.469504][ T6707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.182'. [ 166.926011][ T6713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.184'. [ 168.955915][ T6735] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6735] [ 169.198217][ T6753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.193'. [ 172.193395][ T6798] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6798] [ 173.044073][ T6810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.205'. [ 173.786947][ T6802] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6802] [ 174.517768][ T6829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.210'. [ 176.032400][ T6858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.217'. [ 176.497527][ T6862] netlink: 338 bytes leftover after parsing attributes in process `syz.0.220'. [ 176.728968][ T6867] netlink: 338 bytes leftover after parsing attributes in process `syz.0.220'. [ 177.178191][ T6844] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[6844] [ 178.549794][ T6915] netlink: 338 bytes leftover after parsing attributes in process `syz.2.233'. [ 178.575752][ T6917] netlink: 338 bytes leftover after parsing attributes in process `syz.2.233'. [ 179.492794][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.237'. [ 180.153088][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.241'. [ 180.741264][ T6925] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6925] [ 182.921388][ T6993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.250'. [ 182.972522][ T6994] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6994] [ 184.103486][ T7002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.251'. [ 185.235665][ T7024] syz.3.259 uses obsolete (PF_INET,SOCK_PACKET) [ 185.254766][ T7024] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.225895][ T7013] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7013] [ 186.599268][ T7043] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[7043] [ 186.616618][ T7044] process 'syz.3.262' launched './file0' with NULL argv: empty string added [ 189.187120][ T7082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.276'. [ 189.321648][ T7055] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[7055] [ 193.305746][ T7141] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7141] [ 193.884255][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.298'. [ 194.244410][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.301'. [ 194.825115][ T7181] netlink: 48 bytes leftover after parsing attributes in process `syz.1.305'. [ 196.034644][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 196.948601][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.312'. [ 197.595262][ T7231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.316'. [ 198.639585][ T7252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.323'. [ 199.361935][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.369105][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.706817][ T7272] FAULT_INJECTION: forcing a failure. [ 199.706817][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 199.742308][ T7272] CPU: 0 UID: 0 PID: 7272 Comm: syz.3.326 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 199.742349][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 199.742367][ T7272] Call Trace: [ 199.742377][ T7272] [ 199.742393][ T7272] dump_stack_lvl+0x16c/0x1f0 [ 199.742456][ T7272] should_fail_ex+0x512/0x640 [ 199.742505][ T7272] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 199.742546][ T7272] should_failslab+0xc2/0x120 [ 199.742584][ T7272] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 199.742620][ T7272] ? __alloc_skb+0x2b2/0x380 [ 199.742659][ T7272] __alloc_skb+0x2b2/0x380 [ 199.742692][ T7272] ? __pfx___alloc_skb+0x10/0x10 [ 199.742730][ T7272] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 199.742766][ T7272] ? __lock_acquire+0xaa4/0x1ba0 [ 199.742814][ T7272] netlink_alloc_large_skb+0x69/0x130 [ 199.742855][ T7272] netlink_sendmsg+0x6a1/0xdd0 [ 199.742901][ T7272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.742956][ T7272] ____sys_sendmsg+0xa95/0xc70 [ 199.743003][ T7272] ? copy_msghdr_from_user+0x10a/0x160 [ 199.743037][ T7272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.743102][ T7272] ___sys_sendmsg+0x134/0x1d0 [ 199.743139][ T7272] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.743225][ T7272] __sys_sendmsg+0x16d/0x220 [ 199.743261][ T7272] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.743309][ T7272] ? rcu_is_watching+0x12/0xc0 [ 199.743348][ T7272] do_syscall_64+0xcd/0x230 [ 199.743404][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.743442][ T7272] RIP: 0033:0x7f86f5f8e969 [ 199.743470][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.743497][ T7272] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.743525][ T7272] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 199.743541][ T7272] RDX: 0000000020000840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 199.743557][ T7272] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 199.743573][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.743587][ T7272] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 199.743621][ T7272] [ 199.966487][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.071926][ T7299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.336'. [ 202.180456][ T7323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.343'. [ 203.207102][ T7345] FAULT_INJECTION: forcing a failure. [ 203.207102][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.225655][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.1.350 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 203.225692][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 203.225709][ T7345] Call Trace: [ 203.225719][ T7345] [ 203.225729][ T7345] dump_stack_lvl+0x16c/0x1f0 [ 203.225777][ T7345] should_fail_ex+0x512/0x640 [ 203.225826][ T7345] _copy_from_user+0x2e/0xd0 [ 203.225873][ T7345] copy_msghdr_from_user+0x98/0x160 [ 203.225908][ T7345] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 203.225949][ T7345] ? kfree+0x252/0x4d0 [ 203.225985][ T7345] ? __lock_acquire+0x5ca/0x1ba0 [ 203.226028][ T7345] ___sys_recvmsg+0xdb/0x1a0 [ 203.226059][ T7345] ? __pfx____sys_recvmsg+0x10/0x10 [ 203.226110][ T7345] ? __pfx___might_resched+0x10/0x10 [ 203.226149][ T7345] do_recvmmsg+0x2fe/0x740 [ 203.226185][ T7345] ? __pfx_do_recvmmsg+0x10/0x10 [ 203.226225][ T7345] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 203.226278][ T7345] ? __fget_files+0x20e/0x3c0 [ 203.226333][ T7345] __x64_sys_recvmmsg+0x22a/0x280 [ 203.226369][ T7345] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 203.226401][ T7345] ? rcu_is_watching+0x12/0xc0 [ 203.226438][ T7345] do_syscall_64+0xcd/0x230 [ 203.226488][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.226517][ T7345] RIP: 0033:0x7f81fc38e969 [ 203.226539][ T7345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.226566][ T7345] RSP: 002b:00007f81fd1ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 203.226592][ T7345] RAX: ffffffffffffffda RBX: 00007f81fc5b6080 RCX: 00007f81fc38e969 [ 203.226610][ T7345] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.226626][ T7345] RBP: 00007f81fd1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 203.226642][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.226659][ T7345] R13: 0000000000000000 R14: 00007f81fc5b6080 R15: 00007ffede4d7ef8 [ 203.226695][ T7345] [ 204.001789][ T7362] random: crng reseeded on system resumption [ 204.472772][ T7375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.356'. [ 206.498400][ T7401] FAULT_INJECTION: forcing a failure. [ 206.498400][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 206.515792][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.2.362 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 206.515828][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 206.515842][ T7401] Call Trace: [ 206.515849][ T7401] [ 206.515856][ T7401] dump_stack_lvl+0x16c/0x1f0 [ 206.515888][ T7401] should_fail_ex+0x512/0x640 [ 206.515922][ T7401] should_failslab+0xc2/0x120 [ 206.515948][ T7401] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 206.515973][ T7401] ? skb_clone+0x190/0x3f0 [ 206.516007][ T7401] skb_clone+0x190/0x3f0 [ 206.516032][ T7401] netlink_deliver_tap+0xabd/0xd30 [ 206.516079][ T7401] netlink_unicast+0x5df/0x7f0 [ 206.516111][ T7401] ? __pfx_netlink_unicast+0x10/0x10 [ 206.516135][ T7401] ? __lock_acquire+0xaa4/0x1ba0 [ 206.516170][ T7401] netlink_sendmsg+0x8d1/0xdd0 [ 206.516201][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.516239][ T7401] ____sys_sendmsg+0xa95/0xc70 [ 206.516270][ T7401] ? copy_msghdr_from_user+0x10a/0x160 [ 206.516293][ T7401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.516337][ T7401] ___sys_sendmsg+0x134/0x1d0 [ 206.516373][ T7401] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.516426][ T7401] __sys_sendmsg+0x16d/0x220 [ 206.516449][ T7401] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.516470][ T7401] ? __x64_sys_futex+0x1e0/0x4c0 [ 206.516498][ T7401] ? rcu_is_watching+0x12/0xc0 [ 206.516524][ T7401] do_syscall_64+0xcd/0x230 [ 206.516554][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.516575][ T7401] RIP: 0033:0x7f839838e969 [ 206.516590][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.516609][ T7401] RSP: 002b:00007f83991ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.516628][ T7401] RAX: ffffffffffffffda RBX: 00007f83985b5fa0 RCX: 00007f839838e969 [ 206.516641][ T7401] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 206.516653][ T7401] RBP: 00007f8398410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 206.516665][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.516676][ T7401] R13: 0000000000000000 R14: 00007f83985b5fa0 R15: 00007fffd82c3788 [ 206.516701][ T7401] [ 208.054440][ T7393] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7393] [ 208.830067][ T7416] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[7416] [ 209.310701][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.365'. [ 210.841241][ T7442] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7442] [ 211.854373][ T7453] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7453] [ 215.848988][ T7521] netlink: 48 bytes leftover after parsing attributes in process `syz.1.388'. [ 216.797575][ T7502] Bluetooth: hci3: command 0x0406 tx timeout [ 216.800037][ T7501] Bluetooth: hci0: command 0x0406 tx timeout [ 216.803611][ T7502] Bluetooth: hci1: command 0x0406 tx timeout [ 216.813051][ T7501] Bluetooth: hci2: command 0x0406 tx timeout [ 216.857705][ T7538] netlink: 48 bytes leftover after parsing attributes in process `syz.1.391'. [ 219.379711][ T7574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.397'. [ 219.558380][ T7575] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7575] [ 220.975218][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 221.305315][ T7598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.402'. [ 224.047050][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 224.287703][ T7602] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7602] [ 225.578739][ T7635] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7635] [ 225.982762][ T30] audit: type=1800 audit(6041442048.251:3): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.416" name="lu_gp_id" dev="configfs" ino=14811 res=0 errno=0 [ 226.236170][ T7670] FAULT_INJECTION: forcing a failure. [ 226.236170][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.268184][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.0.418 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 226.268219][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 226.268234][ T7670] Call Trace: [ 226.268242][ T7670] [ 226.268252][ T7670] dump_stack_lvl+0x16c/0x1f0 [ 226.268294][ T7670] should_fail_ex+0x512/0x640 [ 226.268337][ T7670] _copy_to_user+0x32/0xd0 [ 226.268381][ T7670] simple_read_from_buffer+0xcb/0x170 [ 226.268422][ T7670] proc_fail_nth_read+0x197/0x270 [ 226.268461][ T7670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.268501][ T7670] ? rw_verify_area+0xcf/0x680 [ 226.268545][ T7670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.268603][ T7670] vfs_read+0x1de/0xc70 [ 226.268637][ T7670] ? __pfx___mutex_lock+0x10/0x10 [ 226.268677][ T7670] ? __pfx_vfs_read+0x10/0x10 [ 226.268716][ T7670] ? __fget_files+0x20e/0x3c0 [ 226.268781][ T7670] ksys_read+0x12a/0x240 [ 226.268807][ T7670] ? __pfx_ksys_read+0x10/0x10 [ 226.268848][ T7670] do_syscall_64+0xcd/0x230 [ 226.268891][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.268921][ T7670] RIP: 0033:0x7f92f8d8d37c [ 226.268945][ T7670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.268973][ T7670] RSP: 002b:00007f92f9b70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.269001][ T7670] RAX: ffffffffffffffda RBX: 00007f92f8fb5fa0 RCX: 00007f92f8d8d37c [ 226.269020][ T7670] RDX: 000000000000000f RSI: 00007f92f9b700a0 RDI: 0000000000000004 [ 226.269038][ T7670] RBP: 00007f92f9b70090 R08: 0000000000000000 R09: 0000000000000000 [ 226.269056][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.269080][ T7670] R13: 0000000000000000 R14: 00007f92f8fb5fa0 R15: 00007ffed4b1b608 [ 226.269119][ T7670] [ 226.455369][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.481744][ T7675] FAULT_INJECTION: forcing a failure. [ 226.481744][ T7675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.559012][ T7675] CPU: 0 UID: 0 PID: 7675 Comm: syz.1.419 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 226.559071][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 226.559089][ T7675] Call Trace: [ 226.559099][ T7675] [ 226.559110][ T7675] dump_stack_lvl+0x16c/0x1f0 [ 226.559158][ T7675] should_fail_ex+0x512/0x640 [ 226.559207][ T7675] _copy_from_iter+0x2a4/0x15b0 [ 226.559262][ T7675] ? alloc_pages_mpol+0x25a/0x550 [ 226.559299][ T7675] ? __pfx__copy_from_iter+0x10/0x10 [ 226.559343][ T7675] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 226.559397][ T7675] copy_page_from_iter+0xa5/0x120 [ 226.559450][ T7675] tun_build_skb.constprop.0+0x292/0x1480 [ 226.559494][ T7675] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 226.559540][ T7675] ? __lock_acquire+0x5ca/0x1ba0 [ 226.559600][ T7675] ? find_held_lock+0x2b/0x80 [ 226.559636][ T7675] tun_get_user+0x165f/0x3b10 [ 226.559695][ T7675] ? __pfx_tun_get_user+0x10/0x10 [ 226.559723][ T7675] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 226.559798][ T7675] ? find_held_lock+0x2b/0x80 [ 226.559825][ T7675] ? tun_get+0x191/0x370 [ 226.559874][ T7675] tun_chr_write_iter+0xdc/0x210 [ 226.559903][ T7675] vfs_write+0x5ba/0x1180 [ 226.559928][ T7675] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 226.559959][ T7675] ? __pfx_vfs_write+0x10/0x10 [ 226.559981][ T7675] ? find_held_lock+0x2b/0x80 [ 226.560045][ T7675] __x64_sys_pwrite64+0x1f4/0x250 [ 226.560076][ T7675] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 226.560115][ T7675] do_syscall_64+0xcd/0x230 [ 226.560158][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.560185][ T7675] RIP: 0033:0x7f81fc38e969 [ 226.560207][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.560233][ T7675] RSP: 002b:00007f81fd20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 226.560258][ T7675] RAX: ffffffffffffffda RBX: 00007f81fc5b5fa0 RCX: 00007f81fc38e969 [ 226.560276][ T7675] RDX: 000000000000004e RSI: 0000200000000000 RDI: 00000000000000c8 [ 226.560293][ T7675] RBP: 00007f81fd20b090 R08: 0000000000000000 R09: 0000000000000000 [ 226.560310][ T7675] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 226.560326][ T7675] R13: 0000000000000001 R14: 00007f81fc5b5fa0 R15: 00007ffede4d7ef8 [ 226.560362][ T7675] [ 226.809246][ T7673] WARNING! power/level is deprecated; use power/control instead [ 227.537456][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 227.935007][ T7696] netlink: 334 bytes leftover after parsing attributes in process `syz.1.428'. [ 228.847243][ T7708] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[7708] [ 229.474693][ T7732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.438'. [ 231.497758][ T7760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.445'. [ 232.588093][ T7778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.450'. [ 234.713732][ T7801] program syz.0.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.859337][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 235.107687][ T7813] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[7813] [ 235.453869][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 235.710115][ T7818] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7818] [ 236.325479][ T7827] FAULT_INJECTION: forcing a failure. [ 236.325479][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 236.384732][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.0.461 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 236.384766][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 236.384779][ T7827] Call Trace: [ 236.384786][ T7827] [ 236.384795][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 236.384830][ T7827] should_fail_ex+0x512/0x640 [ 236.384862][ T7827] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 236.384891][ T7827] should_failslab+0xc2/0x120 [ 236.384919][ T7827] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 236.384944][ T7827] ? __alloc_skb+0x2b2/0x380 [ 236.384971][ T7827] __alloc_skb+0x2b2/0x380 [ 236.384993][ T7827] ? __pfx___alloc_skb+0x10/0x10 [ 236.385019][ T7827] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 236.385045][ T7827] ? __lock_acquire+0xaa4/0x1ba0 [ 236.385078][ T7827] netlink_alloc_large_skb+0x69/0x130 [ 236.385113][ T7827] netlink_sendmsg+0x6a1/0xdd0 [ 236.385145][ T7827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.385183][ T7827] ____sys_sendmsg+0xa95/0xc70 [ 236.385216][ T7827] ? copy_msghdr_from_user+0x10a/0x160 [ 236.385240][ T7827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.385287][ T7827] ? __pfx__kstrtoull+0x10/0x10 [ 236.385316][ T7827] ___sys_sendmsg+0x134/0x1d0 [ 236.385340][ T7827] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.385375][ T7827] ? find_held_lock+0x2b/0x80 [ 236.385410][ T7827] __sys_sendmmsg+0x200/0x420 [ 236.385437][ T7827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.385468][ T7827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.385509][ T7827] ? fput+0x70/0xf0 [ 236.385541][ T7827] ? ksys_write+0x1b9/0x240 [ 236.385566][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 236.385590][ T7827] ? rcu_is_watching+0x12/0xc0 [ 236.385617][ T7827] __x64_sys_sendmmsg+0x9c/0x100 [ 236.385640][ T7827] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.385667][ T7827] do_syscall_64+0xcd/0x230 [ 236.385698][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.385720][ T7827] RIP: 0033:0x7f92f8d8e969 [ 236.385735][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.385755][ T7827] RSP: 002b:00007f92f9b70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.385774][ T7827] RAX: ffffffffffffffda RBX: 00007f92f8fb5fa0 RCX: 00007f92f8d8e969 [ 236.385788][ T7827] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 236.385800][ T7827] RBP: 00007f92f9b70090 R08: 0000000000000000 R09: 0000000000000000 [ 236.385812][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.385824][ T7827] R13: 0000000000000000 R14: 00007f92f8fb5fa0 R15: 00007ffed4b1b608 [ 236.385849][ T7827] [ 237.734896][ T7853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.467'. [ 238.938647][ T7865] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7865] [ 240.136695][ T7879] nbd: must specify a size in bytes for the device [ 240.704477][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.477'. [ 242.385384][ T7916] nbd: must specify a size in bytes for the device [ 243.107965][ T7933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 244.462277][ T7946] nbd: must specify a size in bytes for the device [ 245.369729][ T7960] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7960] [ 247.107857][ T7992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.504'. [ 247.488962][ T7984] vivid-007: ================= START STATUS ================= [ 247.529504][ T7984] vivid-007: Generate PTS: true [ 247.534562][ T7984] vivid-007: Generate SCR: true [ 247.573850][ T7984] tpg source WxH: 640x360 (Y'CbCr) [ 247.643865][ T7984] tpg field: 1 [ 247.651786][ T7997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 247.766384][ T7984] tpg crop: (0,0)/640x360 [ 247.773116][ T7984] tpg compose: (0,0)/640x360 [ 247.795987][ T7984] tpg colorspace: 8 [ 247.808692][ T7984] tpg transfer function: 0/0 [ 248.015692][ T7984] tpg Y'CbCr encoding: 0/0 [ 248.126380][ T7984] tpg quantization: 0/0 [ 248.161106][ T7984] tpg RGB range: 0/2 [ 248.165027][ T7984] vivid-007: ================== END STATUS ================== [ 249.941852][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 249.978123][ T8032] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8032] [ 250.794861][ T8039] FAULT_INJECTION: forcing a failure. [ 250.794861][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 250.810672][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.3.515 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 250.810710][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 250.810760][ T8039] Call Trace: [ 250.810771][ T8039] [ 250.810783][ T8039] dump_stack_lvl+0x16c/0x1f0 [ 250.810832][ T8039] should_fail_ex+0x512/0x640 [ 250.810877][ T8039] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 250.810916][ T8039] should_failslab+0xc2/0x120 [ 250.810955][ T8039] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 250.810990][ T8039] ? getname_flags.part.0+0x4c/0x550 [ 250.811038][ T8039] getname_flags.part.0+0x4c/0x550 [ 250.811084][ T8039] getname_flags+0x93/0xf0 [ 250.811133][ T8039] do_sys_openat2+0xb8/0x1d0 [ 250.811174][ T8039] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.811232][ T8039] __x64_sys_openat+0x174/0x210 [ 250.811275][ T8039] ? __pfx___x64_sys_openat+0x10/0x10 [ 250.811320][ T8039] ? do_user_addr_fault+0x843/0x1370 [ 250.811360][ T8039] do_syscall_64+0xcd/0x230 [ 250.811408][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.811440][ T8039] RIP: 0033:0x7f86f5f8d2d0 [ 250.811465][ T8039] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 250.811495][ T8039] RSP: 002b:00007f86f6e83f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 250.811524][ T8039] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f86f5f8d2d0 [ 250.811544][ T8039] RDX: 0000000000000002 RSI: 00007f86f6e83fa0 RDI: 00000000ffffff9c [ 250.811564][ T8039] RBP: 00007f86f6e83fa0 R08: 0000000000000000 R09: 0000000000000000 [ 250.811583][ T8039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.811601][ T8039] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 250.811641][ T8039] [ 254.417008][ T8097] nbd: must specify at least one socket [ 255.087805][ T8110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.534'. [ 256.004638][ T8128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.538'. [ 259.380251][ T8136] Invalid ELF header magic: != ELF [ 260.642721][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.556'. [ 260.800037][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.806727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.794379][ T7500] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 263.507411][ T8234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.569'. [ 264.233866][ T8241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.568'. [ 267.283010][ T8290] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8290] [ 267.350713][ T8275] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8275] [ 272.238375][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.594'. [ 273.106103][ T8359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.597'. [ 274.581871][ T8344] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8344] [ 275.141665][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.603'. [ 276.341781][ T8399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.605'. [ 276.544889][ T8366] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8366] [ 277.516831][ T8377] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[8377] [ 277.890863][ T8408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.606'. [ 278.574016][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.609'. [ 278.830043][ T8422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.610'. [ 279.578820][ T8432] netlink: 48 bytes leftover after parsing attributes in process `syz.0.611'. [ 281.437777][ T8456] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'. [ 282.020627][ T8461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.618'. [ 283.233010][ T8472] netlink: 48 bytes leftover after parsing attributes in process `syz.1.619'. [ 283.526874][ T8449] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[8449] [ 284.392739][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.622'. [ 284.789581][ T8486] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'. [ 285.324065][ T8497] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8497] [ 285.773640][ T8505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.626'. [ 286.757955][ T8517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.628'. [ 287.106490][ T8523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.629'. [ 287.788982][ T8528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.630'. [ 289.105971][ T8541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.633'. [ 290.134604][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.637'. [ 291.051602][ T8571] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 291.065572][ T8571] nbd: error processing sock list [ 293.193975][ T8581] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[8581] [ 293.485338][ T8601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.647'. [ 294.032646][ T8609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.649'. [ 295.583484][ T8636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'. [ 297.114193][ T8656] netlink: 48 bytes leftover after parsing attributes in process `syz.3.659'. [ 298.106529][ T8664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.662'. [ 299.974766][ T8696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.669'. [ 302.091682][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 303.669285][ T8756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.686'. [ 304.955150][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.694'. [ 306.581816][ T8805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.699'. [ 306.945589][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 307.430610][ T8830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.706'. [ 308.238095][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.709'. [ 308.276999][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 314.224181][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 314.523106][ T8950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.735'. [ 317.718909][ T9005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.749'. [ 318.255266][ T9010] netlink: 338 bytes leftover after parsing attributes in process `syz.2.751'. [ 318.360941][ T9017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.754'. [ 318.605412][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 318.785740][ T9034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.758'. [ 320.410912][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.761'. [ 320.906701][ T9058] netlink: 48 bytes leftover after parsing attributes in process `syz.3.762'. [ 321.083344][ T30] audit: type=1800 audit(6041442143.361:4): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.763" name="file0" dev="tmpfs" ino=944 res=0 errno=0 [ 321.681325][ T9082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.769'. [ 322.169245][ T9091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.771'. [ 322.277083][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.283465][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.585984][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 322.691782][ T9100] FAULT_INJECTION: forcing a failure. [ 322.691782][ T9100] name failslab, interval 1, probability 0, space 0, times 0 [ 322.704654][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.0.773 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 322.704689][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 322.704713][ T9100] Call Trace: [ 322.704723][ T9100] [ 322.704734][ T9100] dump_stack_lvl+0x16c/0x1f0 [ 322.704780][ T9100] should_fail_ex+0x512/0x640 [ 322.704819][ T9100] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 322.704870][ T9100] should_failslab+0xc2/0x120 [ 322.704906][ T9100] __kmalloc_cache_noprof+0x6a/0x3e0 [ 322.704952][ T9100] ? do_kimage_alloc_init+0x40/0x350 [ 322.704999][ T9100] do_kimage_alloc_init+0x40/0x350 [ 322.705039][ T9100] do_kexec_load+0x1fd/0x8d0 [ 322.705086][ T9100] ? __pfx_do_kexec_load+0x10/0x10 [ 322.705133][ T9100] ? _copy_from_user+0x59/0xd0 [ 322.705181][ T9100] __x64_sys_kexec_load+0x1bf/0x230 [ 322.705228][ T9100] do_syscall_64+0xcd/0x230 [ 322.705274][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.705304][ T9100] RIP: 0033:0x7f92f8d8e969 [ 322.705328][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.705355][ T9100] RSP: 002b:00007f92f9b70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 322.705381][ T9100] RAX: ffffffffffffffda RBX: 00007f92f8fb5fa0 RCX: 00007f92f8d8e969 [ 322.705400][ T9100] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 322.705417][ T9100] RBP: 00007f92f9b70090 R08: 0000000000000000 R09: 0000000000000000 [ 322.705434][ T9100] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 322.705451][ T9100] R13: 0000000000000001 R14: 00007f92f8fb5fa0 R15: 00007ffed4b1b608 [ 322.705491][ T9100] [ 324.579795][ T9134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.783'. [ 325.171286][ T9142] netlink: 48 bytes leftover after parsing attributes in process `syz.0.784'. [ 326.124340][ T9160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.788'. [ 328.662191][ T9199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.797'. [ 329.484276][ T9209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 331.327596][ T9252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.812'. [ 333.399623][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.823'. [ 334.174527][ T9304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.826'. [ 334.367897][ T9307] FAULT_INJECTION: forcing a failure. [ 334.367897][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 334.412489][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.2.827 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 334.412530][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 334.412547][ T9307] Call Trace: [ 334.412556][ T9307] [ 334.412568][ T9307] dump_stack_lvl+0x16c/0x1f0 [ 334.412615][ T9307] should_fail_ex+0x512/0x640 [ 334.412658][ T9307] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 334.412696][ T9307] should_failslab+0xc2/0x120 [ 334.412732][ T9307] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 334.412763][ T9307] ? __alloc_skb+0x2b2/0x380 [ 334.412797][ T9307] __alloc_skb+0x2b2/0x380 [ 334.412825][ T9307] ? __pfx___alloc_skb+0x10/0x10 [ 334.412861][ T9307] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 334.412891][ T9307] ? __lock_acquire+0xaa4/0x1ba0 [ 334.412928][ T9307] netlink_alloc_large_skb+0x69/0x130 [ 334.412962][ T9307] netlink_sendmsg+0x6a1/0xdd0 [ 334.412998][ T9307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.413042][ T9307] ____sys_sendmsg+0xa95/0xc70 [ 334.413079][ T9307] ? copy_msghdr_from_user+0x10a/0x160 [ 334.413107][ T9307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.413158][ T9307] ___sys_sendmsg+0x134/0x1d0 [ 334.413188][ T9307] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.413256][ T9307] __sys_sendmsg+0x16d/0x220 [ 334.413285][ T9307] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.413323][ T9307] ? rcu_is_watching+0x12/0xc0 [ 334.413355][ T9307] do_syscall_64+0xcd/0x230 [ 334.413393][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.413430][ T9307] RIP: 0033:0x7f839838e969 [ 334.413453][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.413491][ T9307] RSP: 002b:00007f83991ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.413516][ T9307] RAX: ffffffffffffffda RBX: 00007f83985b5fa0 RCX: 00007f839838e969 [ 334.413534][ T9307] RDX: 0000000004008004 RSI: 0000200000000140 RDI: 0000000000000003 [ 334.413551][ T9307] RBP: 00007f83991ee090 R08: 0000000000000000 R09: 0000000000000000 [ 334.413567][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.413584][ T9307] R13: 0000000000000000 R14: 00007f83985b5fa0 R15: 00007fffd82c3788 [ 334.413619][ T9307] [ 334.853675][ T9317] FAULT_INJECTION: forcing a failure. [ 334.853675][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.868174][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.1.831 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 334.868206][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 334.868221][ T9317] Call Trace: [ 334.868229][ T9317] [ 334.868239][ T9317] dump_stack_lvl+0x16c/0x1f0 [ 334.868277][ T9317] should_fail_ex+0x512/0x640 [ 334.868319][ T9317] _copy_from_user+0x2e/0xd0 [ 334.868359][ T9317] copy_msghdr_from_user+0x98/0x160 [ 334.868391][ T9317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 334.868436][ T9317] ___sys_sendmsg+0xfe/0x1d0 [ 334.868466][ T9317] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.868539][ T9317] __sys_sendmsg+0x16d/0x220 [ 334.868568][ T9317] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.868606][ T9317] ? rcu_is_watching+0x12/0xc0 [ 334.868641][ T9317] do_syscall_64+0xcd/0x230 [ 334.868679][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.868705][ T9317] RIP: 0033:0x7f81fc38e969 [ 334.868725][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.868748][ T9317] RSP: 002b:00007f81fd20b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.868772][ T9317] RAX: ffffffffffffffda RBX: 00007f81fc5b5fa0 RCX: 00007f81fc38e969 [ 334.868789][ T9317] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 334.868816][ T9317] RBP: 00007f81fd20b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.868831][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.868847][ T9317] R13: 0000000000000000 R14: 00007f81fc5b5fa0 R15: 00007ffede4d7ef8 [ 334.868881][ T9317] [ 336.374760][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.836'. [ 336.574598][ T9342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.838'. [ 337.011102][ T9361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.842'. [ 339.413657][ T9401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.850'. [ 339.931716][ T9419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.856'. [ 342.987692][ T9472] netlink: 48 bytes leftover after parsing attributes in process `syz.1.869'. [ 343.121393][ T9475] netlink: 48 bytes leftover after parsing attributes in process `syz.2.870'. [ 343.826838][ T9445] kexec: Could not allocate control_code_buffer [ 345.374832][ T9507] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[9507] [ 345.440502][ T9506] FAULT_INJECTION: forcing a failure. [ 345.440502][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 345.693037][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.2.877 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 345.693082][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 345.693101][ T9506] Call Trace: [ 345.693112][ T9506] [ 345.693125][ T9506] dump_stack_lvl+0x16c/0x1f0 [ 345.693178][ T9506] should_fail_ex+0x512/0x640 [ 345.693224][ T9506] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 345.693282][ T9506] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 345.693320][ T9506] should_failslab+0xc2/0x120 [ 345.693360][ T9506] __kmalloc_cache_noprof+0x6a/0x3e0 [ 345.693416][ T9506] ? single_open+0x4d/0x1f0 [ 345.693460][ T9506] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 345.693495][ T9506] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 345.693526][ T9506] single_open+0x4d/0x1f0 [ 345.693569][ T9506] blk_mq_debugfs_open+0x14a/0x250 [ 345.693608][ T9506] full_proxy_open_regular+0x1b6/0x360 [ 345.693653][ T9506] do_dentry_open+0x741/0x1c10 [ 345.693687][ T9506] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 345.693737][ T9506] vfs_open+0x82/0x3f0 [ 345.693785][ T9506] path_openat+0x1e5e/0x2d40 [ 345.693834][ T9506] ? __pfx_path_openat+0x10/0x10 [ 345.693879][ T9506] do_filp_open+0x20b/0x470 [ 345.693911][ T9506] ? __pfx_do_filp_open+0x10/0x10 [ 345.693973][ T9506] ? alloc_fd+0x471/0x7d0 [ 345.694056][ T9506] do_sys_openat2+0x11b/0x1d0 [ 345.694098][ T9506] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.694143][ T9506] ? __pfx___might_resched+0x10/0x10 [ 345.694189][ T9506] __x64_sys_openat+0x174/0x210 [ 345.694233][ T9506] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.694279][ T9506] ? rcu_is_watching+0x12/0xc0 [ 345.694320][ T9506] do_syscall_64+0xcd/0x230 [ 345.694368][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.694400][ T9506] RIP: 0033:0x7f839838e969 [ 345.694425][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.694454][ T9506] RSP: 002b:00007f83991ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.694494][ T9506] RAX: ffffffffffffffda RBX: 00007f83985b5fa0 RCX: 00007f839838e969 [ 345.694513][ T9506] RDX: 0000000000143642 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 345.694534][ T9506] RBP: 00007f8398410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 345.694553][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.694571][ T9506] R13: 0000000000000000 R14: 00007f83985b5fa0 R15: 00007fffd82c3788 [ 345.694613][ T9506] [ 346.560718][ T9517] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(8) [ 347.338156][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.881'. [ 348.530901][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.882'. [ 349.239215][ T9541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.884'. [ 349.321819][ T9514] kexec: Could not allocate control_code_buffer [ 349.830492][ T9551] bridge0: port 3(team0) entered blocking state [ 349.855436][ T9551] bridge0: port 3(team0) entered disabled state [ 349.895760][ T9551] team0: entered allmulticast mode [ 349.900926][ T9551] team_slave_0: entered allmulticast mode [ 349.955708][ T9551] team_slave_1: entered allmulticast mode [ 349.998939][ T9557] FAULT_INJECTION: forcing a failure. [ 349.998939][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 350.012953][ T9551] team0: entered promiscuous mode [ 350.038478][ T9551] team_slave_0: entered promiscuous mode [ 350.046202][ T9557] CPU: 1 UID: 0 PID: 9557 Comm: syz.0.888 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 350.046236][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 350.046251][ T9557] Call Trace: [ 350.046259][ T9557] [ 350.046268][ T9557] dump_stack_lvl+0x16c/0x1f0 [ 350.046323][ T9557] should_fail_ex+0x512/0x640 [ 350.046366][ T9557] should_failslab+0xc2/0x120 [ 350.046398][ T9557] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 350.046429][ T9557] ? skb_clone+0x190/0x3f0 [ 350.046463][ T9557] skb_clone+0x190/0x3f0 [ 350.046495][ T9557] netlink_deliver_tap+0xabd/0xd30 [ 350.046535][ T9557] netlink_unicast+0x5df/0x7f0 [ 350.046574][ T9557] ? __pfx_netlink_unicast+0x10/0x10 [ 350.046605][ T9557] ? __lock_acquire+0xaa4/0x1ba0 [ 350.046652][ T9557] netlink_sendmsg+0x8d1/0xdd0 [ 350.046700][ T9557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.046759][ T9557] ____sys_sendmsg+0xa95/0xc70 [ 350.046797][ T9557] ? copy_msghdr_from_user+0x10a/0x160 [ 350.046825][ T9557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.046875][ T9557] ___sys_sendmsg+0x134/0x1d0 [ 350.046905][ T9557] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.046975][ T9557] __sys_sendmsg+0x16d/0x220 [ 350.047005][ T9557] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.047044][ T9557] ? rcu_is_watching+0x12/0xc0 [ 350.047077][ T9557] do_syscall_64+0xcd/0x230 [ 350.047116][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.047141][ T9557] RIP: 0033:0x7f92f8d8e969 [ 350.047165][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.047205][ T9557] RSP: 002b:00007f92f9b70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.047232][ T9557] RAX: ffffffffffffffda RBX: 00007f92f8fb5fa0 RCX: 00007f92f8d8e969 [ 350.047249][ T9557] RDX: 0000000000008080 RSI: 00002000000083c0 RDI: 0000000000000003 [ 350.047266][ T9557] RBP: 00007f92f9b70090 R08: 0000000000000000 R09: 0000000000000000 [ 350.047282][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.047298][ T9557] R13: 0000000000000000 R14: 00007f92f8fb5fa0 R15: 00007ffed4b1b608 [ 350.047335][ T9557] [ 350.289135][ T9551] team_slave_1: entered promiscuous mode [ 350.295929][ T9551] bridge0: port 3(team0) entered blocking state [ 350.302611][ T9551] bridge0: port 3(team0) entered forwarding state [ 351.121006][ T9571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.892'. [ 352.873507][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.899'. [ 354.944106][ T9628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.906'. [ 357.266051][ T9654] netlink: 48 bytes leftover after parsing attributes in process `syz.1.912'. [ 357.960029][ T9661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.914'. [ 359.725760][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 361.171914][ T7376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.181262][ T7376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.194733][ T7376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.216875][ T7376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.224617][ T7376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.972103][ T9702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.923'. [ 361.985786][ T9704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.924'. [ 362.304646][ T9695] chnl_net:caif_netlink_parms(): no params data found [ 362.847783][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.862461][ T9695] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.870824][ T9695] bridge_slave_0: entered allmulticast mode [ 362.921932][ T9695] bridge_slave_0: entered promiscuous mode [ 362.947568][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.954720][ T9695] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.024742][ T9695] bridge_slave_1: entered allmulticast mode [ 363.033763][ T9695] bridge_slave_1: entered promiscuous mode [ 363.173232][ T9695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.193713][ T9695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.275809][ T7376] Bluetooth: hci3: command tx timeout [ 363.321157][ T9695] team0: Port device team_slave_0 added [ 363.353511][ T9695] team0: Port device team_slave_1 added [ 363.551089][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.571563][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.665948][ T9695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.684987][ T9695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.695625][ T9695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.724283][ T9695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.628661][ T9695] hsr_slave_0: entered promiscuous mode [ 364.635405][ T9695] hsr_slave_1: entered promiscuous mode [ 364.656886][ T9695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.676135][ T9695] Cannot create hsr debugfs directory [ 365.251547][ T9747] ======================================================= [ 365.251547][ T9747] WARNING: The mand mount option has been deprecated and [ 365.251547][ T9747] and is ignored by this kernel. Remove the mand [ 365.251547][ T9747] option from the mount to silence this warning. [ 365.251547][ T9747] ======================================================= [ 365.355647][ T7376] Bluetooth: hci3: command tx timeout [ 365.859305][ T9695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.880517][ T9695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.951036][ T9695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.021834][ T9695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.731399][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.769064][ T9695] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.790274][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.797463][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.841732][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.848942][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.878181][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 367.150681][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.944'. [ 367.435973][ T7376] Bluetooth: hci3: command tx timeout [ 367.723353][ T9791] netlink: 338 bytes leftover after parsing attributes in process `syz.2.946'. [ 367.871536][ T9791] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 367.980707][ T9695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.008714][ T9794] netlink: 338 bytes leftover after parsing attributes in process `syz.2.946'. [ 368.072229][ T9791] netlink: 210 bytes leftover after parsing attributes in process `syz.2.946'. [ 368.195844][ T9791] veth0_macvtap: left promiscuous mode [ 369.062858][ T9807] netlink: 338 bytes leftover after parsing attributes in process `syz.1.949'. [ 369.101606][ T9807] netlink: 338 bytes leftover after parsing attributes in process `syz.1.949'. [ 369.475421][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.953'. [ 369.516600][ T7376] Bluetooth: hci3: command tx timeout [ 369.745508][ T9695] veth0_vlan: entered promiscuous mode [ 369.783384][ T9695] veth1_vlan: entered promiscuous mode [ 369.829109][ T9695] veth0_macvtap: entered promiscuous mode [ 370.141828][ T9695] veth1_macvtap: entered promiscuous mode [ 370.245900][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.256454][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.266883][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.277660][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.287818][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.303039][ T9826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.954'. [ 370.312078][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.325648][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.353578][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.473715][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.555034][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.566526][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.576902][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.587743][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.597633][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.608230][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.619632][ T9695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.630368][ T9695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.657116][ T9695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.670688][ T9695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.698935][ T9695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.712425][ T9695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.735808][ T9695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.305177][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.370262][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.487285][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.514461][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.059984][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.4.973'. [ 377.402946][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.981'. [ 379.331813][ T9971] FAULT_INJECTION: forcing a failure. [ 379.331813][ T9971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.459227][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.2.988 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 379.459265][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 379.459280][ T9971] Call Trace: [ 379.459289][ T9971] [ 379.459299][ T9971] dump_stack_lvl+0x16c/0x1f0 [ 379.459349][ T9971] should_fail_ex+0x512/0x640 [ 379.459395][ T9971] _copy_from_user+0x2e/0xd0 [ 379.459439][ T9971] copy_msghdr_from_user+0x98/0x160 [ 379.459471][ T9971] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 379.459509][ T9971] ? kfree+0x252/0x4d0 [ 379.459532][ T9971] ? __lock_acquire+0x5ca/0x1ba0 [ 379.459575][ T9971] ___sys_recvmsg+0xdb/0x1a0 [ 379.459607][ T9971] ? __pfx____sys_recvmsg+0x10/0x10 [ 379.459660][ T9971] ? __pfx___might_resched+0x10/0x10 [ 379.459699][ T9971] do_recvmmsg+0x2fe/0x740 [ 379.459735][ T9971] ? __pfx_do_recvmmsg+0x10/0x10 [ 379.459774][ T9971] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 379.459827][ T9971] ? __fget_files+0x20e/0x3c0 [ 379.459881][ T9971] __x64_sys_recvmmsg+0x22a/0x280 [ 379.459913][ T9971] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 379.459943][ T9971] ? rcu_is_watching+0x12/0xc0 [ 379.459977][ T9971] do_syscall_64+0xcd/0x230 [ 379.460019][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.460047][ T9971] RIP: 0033:0x7f839838e969 [ 379.460069][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.460095][ T9971] RSP: 002b:00007f83991ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 379.460121][ T9971] RAX: ffffffffffffffda RBX: 00007f83985b6160 RCX: 00007f839838e969 [ 379.460138][ T9971] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 379.460155][ T9971] RBP: 00007f83991ac090 R08: 0000000000000000 R09: 0000000000000000 [ 379.460171][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.460187][ T9971] R13: 0000000000000000 R14: 00007f83985b6160 R15: 00007fffd82c3788 [ 379.460223][ T9971] [ 383.729569][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.773299][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.064679][T10029] FAULT_INJECTION: forcing a failure. [ 385.064679][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.079102][T10029] CPU: 1 UID: 0 PID: 10029 Comm: syz.3.1002 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 385.079131][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 385.079144][T10029] Call Trace: [ 385.079151][T10029] [ 385.079159][T10029] dump_stack_lvl+0x16c/0x1f0 [ 385.079193][T10029] should_fail_ex+0x512/0x640 [ 385.079229][T10029] _copy_from_user+0x2e/0xd0 [ 385.079275][T10029] copy_msghdr_from_user+0x98/0x160 [ 385.079300][T10029] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 385.079328][T10029] ? __pfx__kstrtoull+0x10/0x10 [ 385.079356][T10029] ___sys_sendmsg+0xfe/0x1d0 [ 385.079380][T10029] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.079415][T10029] ? find_held_lock+0x2b/0x80 [ 385.079451][T10029] __sys_sendmmsg+0x200/0x420 [ 385.079477][T10029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.079509][T10029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.079550][T10029] ? fput+0x70/0xf0 [ 385.079574][T10029] ? ksys_write+0x1b9/0x240 [ 385.079593][T10029] ? __pfx_ksys_write+0x10/0x10 [ 385.079611][T10029] ? rcu_is_watching+0x12/0xc0 [ 385.079634][T10029] __x64_sys_sendmmsg+0x9c/0x100 [ 385.079657][T10029] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.079684][T10029] do_syscall_64+0xcd/0x230 [ 385.079715][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.079736][T10029] RIP: 0033:0x7f86f5f8e969 [ 385.079752][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.079772][T10029] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.079790][T10029] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 385.079804][T10029] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 385.079816][T10029] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 385.079828][T10029] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 385.079840][T10029] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 385.079871][T10029] [ 386.382642][T10046] FAULT_INJECTION: forcing a failure. [ 386.382642][T10046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.382685][T10046] CPU: 1 UID: 0 PID: 10046 Comm: syz.2.1005 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 386.382722][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 386.382739][T10046] Call Trace: [ 386.382748][T10046] [ 386.382759][T10046] dump_stack_lvl+0x16c/0x1f0 [ 386.382805][T10046] should_fail_ex+0x512/0x640 [ 386.382863][T10046] _copy_from_user+0x2e/0xd0 [ 386.382913][T10046] copy_msghdr_from_user+0x98/0x160 [ 386.382949][T10046] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.383005][T10046] ___sys_sendmsg+0xfe/0x1d0 [ 386.383042][T10046] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.383129][T10046] __sys_sendmsg+0x16d/0x220 [ 386.383165][T10046] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.383212][T10046] ? rcu_is_watching+0x12/0xc0 [ 386.383253][T10046] do_syscall_64+0xcd/0x230 [ 386.383301][T10046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.383333][T10046] RIP: 0033:0x7f839838e969 [ 386.383357][T10046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.383385][T10046] RSP: 002b:00007f83991ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.383425][T10046] RAX: ffffffffffffffda RBX: 00007f83985b5fa0 RCX: 00007f839838e969 [ 386.383445][T10046] RDX: 0000000020048090 RSI: 0000200000000100 RDI: 0000000000000003 [ 386.383463][T10046] RBP: 00007f83991ee090 R08: 0000000000000000 R09: 0000000000000000 [ 386.383493][T10046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.383509][T10046] R13: 0000000000000000 R14: 00007f83985b5fa0 R15: 00007fffd82c3788 [ 386.383545][T10046] [ 387.660822][T10052] tty tty29: ldisc open failed (-12), clearing slot 28 [ 389.173099][T10080] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1013'. [ 389.192931][T10080] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1013'. [ 389.217279][T10085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1015'. [ 389.340326][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 391.523256][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 391.676554][T10138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1029'. [ 392.660681][T10146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.906638][T10158] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[10158] [ 393.208782][T10146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.591265][T10146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.792852][T10173] ptrace attach of "./syz-executor exec"[9695] was attempted by "./syz-executor exec"[10173] [ 394.119112][T10146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.553599][T10179] FAULT_INJECTION: forcing a failure. [ 394.553599][T10179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.568057][T10179] CPU: 1 UID: 0 PID: 10179 Comm: syz.3.1038 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 394.568092][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 394.568108][T10179] Call Trace: [ 394.568116][T10179] [ 394.568126][T10179] dump_stack_lvl+0x16c/0x1f0 [ 394.568169][T10179] should_fail_ex+0x512/0x640 [ 394.568227][T10179] _copy_from_user+0x2e/0xd0 [ 394.568270][T10179] copy_msghdr_from_user+0x98/0x160 [ 394.568302][T10179] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.568352][T10179] ___sys_sendmsg+0xfe/0x1d0 [ 394.568384][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.568459][T10179] __sys_sendmsg+0x16d/0x220 [ 394.568492][T10179] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.568533][T10179] ? rcu_is_watching+0x12/0xc0 [ 394.568568][T10179] do_syscall_64+0xcd/0x230 [ 394.568612][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.568640][T10179] RIP: 0033:0x7f86f5f8e969 [ 394.568661][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.568688][T10179] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.568714][T10179] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 394.568732][T10179] RDX: 0000000000000802 RSI: 00002000000079c0 RDI: 0000000000000003 [ 394.568749][T10179] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 394.568765][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.568782][T10179] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 394.568817][T10179] [ 395.747416][T10199] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1042'. [ 396.573159][T10213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1046'. [ 396.899970][T10223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1048'. [ 398.592963][T10258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1056'. [ 400.049291][T10267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1059'. [ 400.104223][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1060'. [ 400.442116][T10274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1061'. [ 401.219381][T10291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1065'. [ 403.298017][T10322] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1073'. [ 403.488730][T10326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1074'. [ 406.736405][T10369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1082'. [ 407.710346][T10361] ptrace attach of "./syz-executor exec"[9695] was attempted by "./syz-executor exec"[10361] [ 408.448026][T10387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1086'. [ 409.917016][T10399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1088'. [ 413.344170][T10446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1098'. [ 416.867811][T10495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1108'. [ 417.371249][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1110'. [ 417.790253][T10511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1111'. [ 419.081994][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 419.512144][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1119'. [ 421.841378][T10561] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1125'. [ 424.539976][T10609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 425.099762][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1140'. [ 427.614943][T10659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1148'. [ 428.852624][T10676] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1150'. [ 429.539017][T10684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1153'. [ 431.660879][T10709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1157'. [ 433.757449][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'. [ 434.831760][T10751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1169'. [ 435.268848][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1166'. [ 436.506532][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1172'. [ 437.396136][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 437.593132][T10790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1178'. [ 437.656993][T10794] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1179'. [ 438.263544][T10804] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1181'. [ 438.675224][T10808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1189'. [ 439.508717][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1183'. [ 439.526440][T10824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1184'. [ 440.023552][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 440.916206][T10851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1192'. [ 441.679024][T10868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1197'. [ 443.986247][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1202'. [ 445.120409][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.126829][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.562921][T10926] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1208'. [ 445.773199][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1209'. [ 446.298022][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1211'. [ 447.326640][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'. [ 448.316683][T10959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1216'. [ 449.283070][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1220'. [ 450.005736][T10987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1223'. [ 451.567571][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1227'. [ 452.482025][T11011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1230'. [ 453.234876][T11019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1231'. [ 453.494979][T11025] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1233'. [ 456.269996][T11067] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1243'. [ 456.326988][T11068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1241'. [ 457.237336][T11080] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1244'. [ 457.363436][T11081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1245'. [ 458.266129][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 460.066870][T11126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1255'. [ 461.228938][T11137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1258'. [ 461.736844][T11141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1259'. [ 464.951974][T11177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1267'. [ 465.608442][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 466.691020][T11207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1276'. [ 466.982235][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1275'. [ 467.548034][T11218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1277'. [ 467.834680][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1279'. [ 468.165080][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1280'. [ 469.229736][T11241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1282'. [ 471.096679][T11273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'. [ 471.875847][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1291'. [ 473.400376][T11303] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1298'. [ 473.760696][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1299'. [ 474.430587][T11313] bridge0: port 3(team0) entered blocking state [ 474.448821][T11313] bridge0: port 3(team0) entered disabled state [ 474.464246][T11313] team0: entered allmulticast mode [ 474.470521][T11313] team_slave_0: entered allmulticast mode [ 474.490128][T11313] team_slave_1: entered allmulticast mode [ 474.508008][T11313] team0: entered promiscuous mode [ 474.528931][T11313] team_slave_0: entered promiscuous mode [ 474.550770][T11313] team_slave_1: entered promiscuous mode [ 474.567326][T11313] bridge0: port 3(team0) entered blocking state [ 474.573729][T11313] bridge0: port 3(team0) entered forwarding state [ 475.431243][T11335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1307'. [ 476.106715][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1316'. [ 476.194408][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1308'. [ 476.791976][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1310'. [ 479.168594][T11387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1319'. [ 480.636162][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1322'. [ 481.211582][T11411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1325'. [ 482.449413][T11430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 483.208315][T11437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1330'. [ 483.707683][T11443] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1331'. [ 484.551128][T11459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1335'. [ 484.630445][T11445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1332'. [ 485.241061][T11467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1337'. [ 485.990884][T11477] FAULT_INJECTION: forcing a failure. [ 485.990884][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 486.051667][T11477] CPU: 1 UID: 0 PID: 11477 Comm: syz.4.1340 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 486.051711][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 486.051727][T11477] Call Trace: [ 486.051735][T11477] [ 486.051745][T11477] dump_stack_lvl+0x16c/0x1f0 [ 486.051790][T11477] should_fail_ex+0x512/0x640 [ 486.051835][T11477] should_failslab+0xc2/0x120 [ 486.051866][T11477] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 486.051893][T11477] ? __lock_acquire+0x5ca/0x1ba0 [ 486.051924][T11477] ? dst_alloc+0x99/0x1a0 [ 486.051948][T11477] dst_alloc+0x99/0x1a0 [ 486.051972][T11477] rt_dst_alloc+0x35/0x3a0 [ 486.052013][T11477] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 486.052056][T11477] ip_route_output_key_hash+0x137/0x2e0 [ 486.052090][T11477] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 486.052132][T11477] ? find_held_lock+0x2b/0x80 [ 486.052156][T11477] ip_route_output_flow+0x27/0x150 [ 486.052191][T11477] udp_sendmsg+0x1bc3/0x29e0 [ 486.052220][T11477] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 486.052250][T11477] ? __pfx_udp_sendmsg+0x10/0x10 [ 486.052275][T11477] ? __lock_acquire+0x5ca/0x1ba0 [ 486.052331][T11477] ? __lock_acquire+0xaa4/0x1ba0 [ 486.052364][T11477] ? __pfx___might_resched+0x10/0x10 [ 486.052392][T11477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.052433][T11477] ? aa_sk_perm+0x2f4/0xb10 [ 486.052470][T11477] ? __import_iovec+0x1c8/0x660 [ 486.052509][T11477] ? __might_fault+0xe3/0x190 [ 486.052536][T11477] ? __might_fault+0x13b/0x190 [ 486.052565][T11477] ? __pfx_udp_sendmsg+0x10/0x10 [ 486.052596][T11477] inet_sendmsg+0x105/0x140 [ 486.052634][T11477] ____sys_sendmsg+0x973/0xc70 [ 486.052673][T11477] ? copy_msghdr_from_user+0x10a/0x160 [ 486.052701][T11477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.052749][T11477] ? __pfx__kstrtoull+0x10/0x10 [ 486.052785][T11477] ___sys_sendmsg+0x134/0x1d0 [ 486.052815][T11477] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.052860][T11477] ? find_held_lock+0x2b/0x80 [ 486.052905][T11477] __sys_sendmmsg+0x200/0x420 [ 486.052938][T11477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.052978][T11477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.053030][T11477] ? fput+0x70/0xf0 [ 486.053060][T11477] ? ksys_write+0x1b9/0x240 [ 486.053083][T11477] ? __pfx_ksys_write+0x10/0x10 [ 486.053105][T11477] ? rcu_is_watching+0x12/0xc0 [ 486.053135][T11477] __x64_sys_sendmmsg+0x9c/0x100 [ 486.053164][T11477] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.053198][T11477] do_syscall_64+0xcd/0x230 [ 486.053236][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.053262][T11477] RIP: 0033:0x7f2119b8e969 [ 486.053282][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.053306][T11477] RSP: 002b:00007f211aa7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.053330][T11477] RAX: ffffffffffffffda RBX: 00007f2119db5fa0 RCX: 00007f2119b8e969 [ 486.053346][T11477] RDX: 00000000000009a8 RSI: 0000000000000000 RDI: 0000000000000003 [ 486.053361][T11477] RBP: 00007f211aa7f090 R08: 0000000000000000 R09: 0000000000000000 [ 486.053376][T11477] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 486.053392][T11477] R13: 0000000000000000 R14: 00007f2119db5fa0 R15: 00007ffc037ba368 [ 486.053436][T11477] [ 486.375005][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.503896][T11491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1344'. [ 486.649474][T11484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1342'. [ 488.283938][T11510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 488.475666][ T7500] Bluetooth: hci3: command 0x0406 tx timeout [ 488.593433][T11518] FAULT_INJECTION: forcing a failure. [ 488.593433][T11518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 488.628261][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.3.1351 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 488.628305][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 488.628321][T11518] Call Trace: [ 488.628330][T11518] [ 488.628340][T11518] dump_stack_lvl+0x16c/0x1f0 [ 488.628383][T11518] should_fail_ex+0x512/0x640 [ 488.628429][T11518] should_fail_alloc_page+0xe7/0x130 [ 488.628467][T11518] prepare_alloc_pages+0x3c2/0x610 [ 488.628510][T11518] ? arch_stack_walk+0xa6/0x100 [ 488.628547][T11518] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 488.628590][T11518] ? stack_trace_save+0x8e/0xc0 [ 488.628619][T11518] ? __pfx_stack_trace_save+0x10/0x10 [ 488.628647][T11518] ? stack_depot_save_flags+0x28/0xa50 [ 488.628691][T11518] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 488.628727][T11518] ? kasan_save_stack+0x42/0x60 [ 488.628755][T11518] ? kasan_save_stack+0x33/0x60 [ 488.628782][T11518] ? kasan_save_track+0x14/0x30 [ 488.628809][T11518] ? __kasan_slab_alloc+0x89/0x90 [ 488.628838][T11518] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 488.628867][T11518] ? __pmd_alloc+0xc3/0x870 [ 488.628911][T11518] ? rep_movs_alternative+0x4a/0x90 [ 488.628939][T11518] ? _copy_to_iter+0x50c/0x15a0 [ 488.628978][T11518] ? simple_copy_to_iter+0x46/0x90 [ 488.629019][T11518] ? __skb_datagram_iter+0x125/0x8c0 [ 488.629059][T11518] ? skb_copy_datagram_iter+0x40/0x50 [ 488.629101][T11518] ? netlink_recvmsg+0x298/0xf20 [ 488.629130][T11518] ? sock_recvmsg+0x1f6/0x250 [ 488.629166][T11518] ? sock_read_iter+0x2b9/0x3b0 [ 488.629220][T11518] ? do_iter_readv_writev+0x735/0x950 [ 488.629277][T11518] ? vfs_readv+0x4c5/0x8a0 [ 488.629329][T11518] ? do_readv+0x295/0x330 [ 488.629369][T11518] ? do_syscall_64+0xcd/0x230 [ 488.629406][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.629440][T11518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.629481][T11518] ? policy_nodemask+0xea/0x4e0 [ 488.629518][T11518] alloc_pages_mpol+0x1fb/0x550 [ 488.629556][T11518] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 488.629588][T11518] ? __lock_acquire+0xaa4/0x1ba0 [ 488.629634][T11518] ? __pfx_filemap_map_pages+0x10/0x10 [ 488.629668][T11518] alloc_pages_noprof+0x131/0x390 [ 488.629704][T11518] pte_alloc_one+0x19/0x380 [ 488.629736][T11518] __do_fault+0x320/0x490 [ 488.629772][T11518] ? __pfx_filemap_map_pages+0x10/0x10 [ 488.629806][T11518] do_pte_missing+0x1a6/0x3fb0 [ 488.629835][T11518] ? do_raw_spin_unlock+0x172/0x230 [ 488.629881][T11518] ? __pmd_alloc+0x3c2/0x870 [ 488.629919][T11518] ? find_held_lock+0x2b/0x80 [ 488.629948][T11518] __handle_mm_fault+0x103d/0x2a40 [ 488.629988][T11518] ? __pfx___handle_mm_fault+0x10/0x10 [ 488.630038][T11518] ? find_vma+0xbf/0x140 [ 488.630075][T11518] ? __pfx_find_vma+0x10/0x10 [ 488.630119][T11518] handle_mm_fault+0x3fe/0xad0 [ 488.630154][T11518] do_user_addr_fault+0x7a6/0x1370 [ 488.630187][T11518] ? rcu_is_watching+0x12/0xc0 [ 488.630216][T11518] exc_page_fault+0x5c/0xc0 [ 488.630255][T11518] asm_exc_page_fault+0x26/0x30 [ 488.630287][T11518] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 488.630317][T11518] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 488.630344][T11518] RSP: 0018:ffffc90004e2f6e8 EFLAGS: 00050246 [ 488.630366][T11518] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040 [ 488.630382][T11518] RDX: ffffed100ffe0008 RSI: ffff88807ff00000 RDI: 0000000000000000 [ 488.630400][T11518] RBP: 0000000000000040 R08: 0000000000000000 R09: ffffed100ffe0007 [ 488.630417][T11518] R10: ffff88807ff0003f R11: 0000000000000000 R12: ffffc90004e2fd80 [ 488.630434][T11518] R13: 0000000000000000 R14: ffffc90004e2fd88 R15: ffff88807ff00000 [ 488.630472][T11518] _copy_to_iter+0x50c/0x15a0 [ 488.630524][T11518] ? __pfx__copy_to_iter+0x10/0x10 [ 488.630571][T11518] ? __skb_recv_datagram+0x1b2/0x220 [ 488.630621][T11518] ? __pfx___skb_recv_datagram+0x10/0x10 [ 488.630673][T11518] simple_copy_to_iter+0x46/0x90 [ 488.630717][T11518] __skb_datagram_iter+0x125/0x8c0 [ 488.630758][T11518] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 488.630804][T11518] ? skb_recv_datagram+0x88/0xc0 [ 488.630836][T11518] skb_copy_datagram_iter+0x40/0x50 [ 488.630881][T11518] netlink_recvmsg+0x298/0xf20 [ 488.630916][T11518] ? __pfx_netlink_recvmsg+0x10/0x10 [ 488.630945][T11518] ? aa_sk_perm+0x2f4/0xb10 [ 488.630979][T11518] ? __kernel_text_address+0xd/0x40 [ 488.631023][T11518] ? __pfx_aa_sk_perm+0x10/0x10 [ 488.631053][T11518] ? arch_stack_walk+0xa6/0x100 [ 488.631100][T11518] sock_recvmsg+0x1f6/0x250 [ 488.631140][T11518] sock_read_iter+0x2b9/0x3b0 [ 488.631178][T11518] ? __pfx_sock_read_iter+0x10/0x10 [ 488.631232][T11518] ? __lock_acquire+0x5ca/0x1ba0 [ 488.631287][T11518] ? copy_iovec_from_user+0x138/0x170 [ 488.631333][T11518] do_iter_readv_writev+0x735/0x950 [ 488.631380][T11518] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 488.631430][T11518] ? bpf_lsm_file_permission+0x9/0x10 [ 488.631473][T11518] ? security_file_permission+0x71/0x210 [ 488.631512][T11518] ? rw_verify_area+0xcf/0x680 [ 488.631558][T11518] vfs_readv+0x4c5/0x8a0 [ 488.631610][T11518] ? __pfx_vfs_readv+0x10/0x10 [ 488.631678][T11518] ? __fget_files+0x20e/0x3c0 [ 488.631720][T11518] ? __fget_files+0x110/0x3c0 [ 488.631771][T11518] ? do_readv+0x295/0x330 [ 488.631812][T11518] do_readv+0x295/0x330 [ 488.631854][T11518] ? __pfx_do_readv+0x10/0x10 [ 488.631893][T11518] ? rcu_is_watching+0x12/0xc0 [ 488.631928][T11518] do_syscall_64+0xcd/0x230 [ 488.631970][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.631997][T11518] RIP: 0033:0x7f86f5f8e969 [ 488.632018][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.632043][T11518] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 488.632068][T11518] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 488.632086][T11518] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 488.632102][T11518] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 488.632118][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.632134][T11518] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 488.632171][T11518] [ 489.242411][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.854379][T11537] FAULT_INJECTION: forcing a failure. [ 489.854379][T11537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.937110][T11537] CPU: 1 UID: 0 PID: 11537 Comm: syz.1.1355 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 489.937146][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 489.937161][T11537] Call Trace: [ 489.937169][T11537] [ 489.937186][T11537] dump_stack_lvl+0x16c/0x1f0 [ 489.937225][T11537] should_fail_ex+0x512/0x640 [ 489.937269][T11537] _copy_to_user+0x32/0xd0 [ 489.937311][T11537] simple_read_from_buffer+0xcb/0x170 [ 489.937354][T11537] proc_fail_nth_read+0x197/0x270 [ 489.937394][T11537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.937434][T11537] ? rw_verify_area+0xcf/0x680 [ 489.937473][T11537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.937512][T11537] vfs_read+0x1de/0xc70 [ 489.937541][T11537] ? __pfx___mutex_lock+0x10/0x10 [ 489.937579][T11537] ? __pfx_vfs_read+0x10/0x10 [ 489.937612][T11537] ? __fget_files+0x20e/0x3c0 [ 489.937664][T11537] ksys_read+0x12a/0x240 [ 489.937688][T11537] ? __pfx_ksys_read+0x10/0x10 [ 489.937724][T11537] do_syscall_64+0xcd/0x230 [ 489.937763][T11537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.937790][T11537] RIP: 0033:0x7f81fc38d37c [ 489.937810][T11537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.937835][T11537] RSP: 002b:00007f81fd1ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.937877][T11537] RAX: ffffffffffffffda RBX: 00007f81fc5b6080 RCX: 00007f81fc38d37c [ 489.937895][T11537] RDX: 000000000000000f RSI: 00007f81fd1ea0a0 RDI: 0000000000000003 [ 489.937912][T11537] RBP: 00007f81fd1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 489.937928][T11537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.937945][T11537] R13: 0000000000000001 R14: 00007f81fc5b6080 R15: 00007ffede4d7ef8 [ 489.937982][T11537] [ 490.726341][T11550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1360'. [ 491.483560][T11567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1364'. [ 493.232238][T11601] FAULT_INJECTION: forcing a failure. [ 493.232238][T11601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.299993][T11601] CPU: 1 UID: 0 PID: 11601 Comm: syz.3.1371 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 493.300030][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 493.300044][T11601] Call Trace: [ 493.300051][T11601] [ 493.300060][T11601] dump_stack_lvl+0x16c/0x1f0 [ 493.300097][T11601] should_fail_ex+0x512/0x640 [ 493.300147][T11601] _copy_from_iter+0x2a4/0x15b0 [ 493.300198][T11601] ? __pfx__copy_from_iter+0x10/0x10 [ 493.300242][T11601] ? rcu_is_watching+0x12/0xc0 [ 493.300261][T11601] ? trace_kmalloc+0x2b/0xd0 [ 493.300286][T11601] ? __kmalloc_noprof+0x242/0x510 [ 493.300314][T11601] kernfs_fop_write_iter+0x19a/0x510 [ 493.300344][T11601] vfs_write+0x5ba/0x1180 [ 493.300364][T11601] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 493.300391][T11601] ? __pfx___mutex_lock+0x10/0x10 [ 493.300418][T11601] ? __pfx_vfs_write+0x10/0x10 [ 493.300453][T11601] ksys_write+0x12a/0x240 [ 493.300471][T11601] ? __pfx_ksys_write+0x10/0x10 [ 493.300489][T11601] ? rcu_is_watching+0x12/0xc0 [ 493.300513][T11601] do_syscall_64+0xcd/0x230 [ 493.300543][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.300563][T11601] RIP: 0033:0x7f86f5f8e969 [ 493.300578][T11601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.300598][T11601] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.300616][T11601] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 493.300629][T11601] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000005 [ 493.300641][T11601] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 493.300652][T11601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.300664][T11601] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 493.300689][T11601] [ 494.033033][T11610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1373'. [ 494.310734][T11614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1374'. [ 495.195280][T11624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1376'. [ 497.445355][T11638] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1380'. [ 498.906621][T11660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1387'. [ 499.703095][T11672] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1388'. [ 500.703514][T11690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1393'. [ 500.786815][T11692] FAULT_INJECTION: forcing a failure. [ 500.786815][T11692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.844626][T11692] CPU: 0 UID: 0 PID: 11692 Comm: syz.3.1395 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 500.844667][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 500.844685][T11692] Call Trace: [ 500.844701][T11692] [ 500.844713][T11692] dump_stack_lvl+0x16c/0x1f0 [ 500.844760][T11692] should_fail_ex+0x512/0x640 [ 500.844810][T11692] _copy_from_user+0x2e/0xd0 [ 500.844859][T11692] copy_msghdr_from_user+0x98/0x160 [ 500.844893][T11692] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 500.844947][T11692] ___sys_sendmsg+0xfe/0x1d0 [ 500.844984][T11692] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.845068][T11692] __sys_sendmsg+0x16d/0x220 [ 500.845103][T11692] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.845149][T11692] ? rcu_is_watching+0x12/0xc0 [ 500.845189][T11692] do_syscall_64+0xcd/0x230 [ 500.845235][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.845266][T11692] RIP: 0033:0x7f86f5f8e969 [ 500.845290][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.845319][T11692] RSP: 002b:00007f86f6e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.845348][T11692] RAX: ffffffffffffffda RBX: 00007f86f61b5fa0 RCX: 00007f86f5f8e969 [ 500.845368][T11692] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 500.845387][T11692] RBP: 00007f86f6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 500.845409][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.845426][T11692] R13: 0000000000000000 R14: 00007f86f61b5fa0 R15: 00007ffd6b5cf1c8 [ 500.845462][T11692] [ 501.479424][T11696] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1394'. syzkaller syzkaller login: [ 501.684737][T11706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1397'. [ 502.888764][T11721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1399'. [ 503.805015][T11730] FAULT_INJECTION: forcing a failure. [ 503.805015][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.889607][T11730] CPU: 0 UID: 0 PID: 11730 Comm: syz.1.1403 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 503.889645][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 503.889661][T11730] Call Trace: [ 503.889670][T11730] [ 503.889681][T11730] dump_stack_lvl+0x16c/0x1f0 [ 503.889722][T11730] should_fail_ex+0x512/0x640 [ 503.889766][T11730] _copy_from_user+0x2e/0xd0 [ 503.889812][T11730] copy_msghdr_from_user+0x98/0x160 [ 503.889845][T11730] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 503.889884][T11730] ? __pfx__kstrtoull+0x10/0x10 [ 503.889924][T11730] ___sys_sendmsg+0xfe/0x1d0 [ 503.889957][T11730] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.890008][T11730] ? find_held_lock+0x2b/0x80 [ 503.890058][T11730] __sys_sendmmsg+0x200/0x420 [ 503.890096][T11730] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.890141][T11730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.890196][T11730] ? fput+0x70/0xf0 [ 503.890230][T11730] ? ksys_write+0x1b9/0x240 [ 503.890256][T11730] ? __pfx_ksys_write+0x10/0x10 [ 503.890281][T11730] ? rcu_is_watching+0x12/0xc0 [ 503.890314][T11730] __x64_sys_sendmmsg+0x9c/0x100 [ 503.890345][T11730] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.890383][T11730] do_syscall_64+0xcd/0x230 [ 503.890426][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.890455][T11730] RIP: 0033:0x7f81fc38e969 [ 503.890483][T11730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.890511][T11730] RSP: 002b:00007f81fd20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.890538][T11730] RAX: ffffffffffffffda RBX: 00007f81fc5b5fa0 RCX: 00007f81fc38e969 [ 503.890555][T11730] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000002 [ 503.890572][T11730] RBP: 00007f81fd20b090 R08: 0000000000000000 R09: 0000000000000000 [ 503.890589][T11730] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 503.890610][T11730] R13: 0000000000000000 R14: 00007f81fc5b5fa0 R15: 00007ffede4d7ef8 [ 503.890647][T11730] [ 504.422194][T11741] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1406'. [ 505.054202][T11748] FAULT_INJECTION: forcing a failure. [ 505.054202][T11748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.100488][T11748] CPU: 1 UID: 0 PID: 11748 Comm: syz.1.1407 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 505.100524][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 505.100542][T11748] Call Trace: [ 505.100551][T11748] [ 505.100561][T11748] dump_stack_lvl+0x16c/0x1f0 [ 505.100605][T11748] should_fail_ex+0x512/0x640 [ 505.100651][T11748] _copy_to_user+0x32/0xd0 [ 505.100697][T11748] simple_read_from_buffer+0xcb/0x170 [ 505.100743][T11748] proc_fail_nth_read+0x197/0x270 [ 505.100785][T11748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.100829][T11748] ? rw_verify_area+0xcf/0x680 [ 505.100869][T11748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.100910][T11748] vfs_read+0x1de/0xc70 [ 505.100942][T11748] ? __pfx___mutex_lock+0x10/0x10 [ 505.100981][T11748] ? __pfx_vfs_read+0x10/0x10 [ 505.101027][T11748] ? __fget_files+0x20e/0x3c0 [ 505.101086][T11748] ksys_read+0x12a/0x240 [ 505.101110][T11748] ? __pfx_ksys_read+0x10/0x10 [ 505.101132][T11748] ? rcu_is_watching+0x12/0xc0 [ 505.101168][T11748] do_syscall_64+0xcd/0x230 [ 505.101207][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.101235][T11748] RIP: 0033:0x7f81fc38d37c [ 505.101255][T11748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 505.101280][T11748] RSP: 002b:00007f81fd1c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.101304][T11748] RAX: ffffffffffffffda RBX: 00007f81fc5b6160 RCX: 00007f81fc38d37c [ 505.101322][T11748] RDX: 000000000000000f RSI: 00007f81fd1c90a0 RDI: 0000000000000003 [ 505.101338][T11748] RBP: 00007f81fd1c9090 R08: 0000000000000000 R09: 0000000000000000 [ 505.101354][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.101370][T11748] R13: 0000000000000000 R14: 00007f81fc5b6160 R15: 00007ffede4d7ef8 [ 505.101405][T11748] [ 505.379767][T11752] [ 505.382156][T11752] ====================================================== [ 505.389191][T11752] WARNING: possible circular locking dependency detected [ 505.396240][T11752] 6.15.0-rc5-syzkaller #0 Not tainted [ 505.401631][T11752] ------------------------------------------------------ [ 505.408675][T11752] syz.4.1409/11752 is trying to acquire lock: [ 505.414765][T11752] ffff88805b14b8a0 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 505.424764][T11752] [ 505.424764][T11752] but task is already holding lock: [ 505.432149][T11752] ffffffff8e27e948 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 505.440984][T11752] [ 505.440984][T11752] which lock already depends on the new lock. [ 505.440984][T11752] [ 505.451390][T11752] [ 505.451390][T11752] the existing dependency chain (in reverse order) is: [ 505.460407][T11752] [ 505.460407][T11752] -> #3 (param_lock){+.+.}-{4:4}: [ 505.467643][T11752] __mutex_lock+0x199/0xb90 [ 505.472696][T11752] ieee80211_init_rate_ctrl_alg+0x18d/0x6b0 [ 505.479161][T11752] ieee80211_register_hw+0x20aa/0x4020 [ 505.485178][T11752] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 505.491447][T11752] init_mac80211_hwsim+0x44e/0x900 [ 505.497205][T11752] do_one_initcall+0x120/0x6e0 [ 505.502512][T11752] kernel_init_freeable+0x5c2/0x900 [ 505.508256][T11752] kernel_init+0x1c/0x2b0 [ 505.513117][T11752] ret_from_fork+0x45/0x80 [ 505.518113][T11752] ret_from_fork_asm+0x1a/0x30 [ 505.523441][T11752] [ 505.523441][T11752] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 505.530694][T11752] __mutex_lock+0x199/0xb90 [ 505.535746][T11752] cgrp_css_online+0xa2/0x1f0 [ 505.540972][T11752] online_css+0xaf/0x350 [ 505.545756][T11752] cgroup_apply_control_enable+0x6cd/0xc70 [ 505.552101][T11752] cgroup_mkdir+0x39a/0x1160 [ 505.557242][T11752] kernfs_iop_mkdir+0x108/0x190 [ 505.563072][T11752] vfs_mkdir+0x590/0x8c0 [ 505.567866][T11752] do_mkdirat+0x304/0x3e0 [ 505.572731][T11752] __x64_sys_mkdirat+0x83/0xb0 [ 505.578043][T11752] do_syscall_64+0xcd/0x230 [ 505.583148][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.589580][T11752] [ 505.589580][T11752] -> #1 (cgroup_mutex){+.+.}-{4:4}: [ 505.596979][T11752] __mutex_lock+0x199/0xb90 [ 505.602015][T11752] cgroup_kn_lock_live+0x116/0x520 [ 505.607670][T11752] cgroup_rmdir+0x20/0x2b0 [ 505.612627][T11752] kernfs_iop_rmdir+0xfd/0x170 [ 505.617935][T11752] vfs_rmdir+0x203/0x690 [ 505.622720][T11752] do_rmdir+0x2e8/0x3c0 [ 505.627411][T11752] __x64_sys_rmdir+0xc5/0x110 [ 505.632621][T11752] do_syscall_64+0xcd/0x230 [ 505.637670][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.644100][T11752] [ 505.644100][T11752] -> #0 (&type->i_mutex_dir_key#6){++++}-{4:4}: [ 505.652571][T11752] __lock_acquire+0x1173/0x1ba0 [ 505.657970][T11752] lock_acquire+0x179/0x350 [ 505.663019][T11752] down_read+0x9b/0x480 [ 505.667750][T11752] walk_component+0x345/0x5b0 [ 505.672970][T11752] path_lookupat+0x17e/0x780 [ 505.678123][T11752] filename_lookup+0x224/0x5f0 [ 505.683441][T11752] kern_path+0x35/0x50 [ 505.688069][T11752] lookup_bdev+0xd8/0x280 [ 505.692951][T11752] bdev_file_open_by_path+0x82/0x330 [ 505.698786][T11752] block2mtd_setup2+0x317/0xe10 [ 505.704193][T11752] block2mtd_setup+0xbd/0x110 [ 505.709460][T11752] param_attr_store+0x196/0x300 [ 505.714857][T11752] module_attr_store+0x55/0x80 [ 505.720168][T11752] sysfs_kf_write+0xef/0x150 [ 505.725306][T11752] kernfs_fop_write_iter+0x351/0x510 [ 505.731141][T11752] vfs_write+0x5ba/0x1180 [ 505.736005][T11752] ksys_write+0x12a/0x240 [ 505.740872][T11752] do_syscall_64+0xcd/0x230 [ 505.745917][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.752346][T11752] [ 505.752346][T11752] other info that might help us debug this: [ 505.752346][T11752] [ 505.762582][T11752] Chain exists of: [ 505.762582][T11752] &type->i_mutex_dir_key#6 --> rtnl_mutex --> param_lock [ 505.762582][T11752] [ 505.775571][T11752] Possible unsafe locking scenario: [ 505.775571][T11752] [ 505.783022][T11752] CPU0 CPU1 [ 505.788391][T11752] ---- ---- [ 505.793754][T11752] lock(param_lock); [ 505.797752][T11752] lock(rtnl_mutex); [ 505.804277][T11752] lock(param_lock); [ 505.810788][T11752] rlock(&type->i_mutex_dir_key#6); [ 505.816109][T11752] [ 505.816109][T11752] *** DEADLOCK *** [ 505.816109][T11752] [ 505.824258][T11752] 5 locks held by syz.4.1409/11752: [ 505.829457][T11752] #0: ffff88802ab767f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 505.838563][T11752] #1: ffff888035fca420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 505.847573][T11752] #2: ffff888032240888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 505.857361][T11752] #3: ffff8881477edf08 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 505.867347][T11752] #4: ffffffff8e27e948 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 505.876604][T11752] [ 505.876604][T11752] stack backtrace: [ 505.882495][T11752] CPU: 0 UID: 0 PID: 11752 Comm: syz.4.1409 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 505.882528][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 505.882544][T11752] Call Trace: [ 505.882552][T11752] [ 505.882561][T11752] dump_stack_lvl+0x116/0x1f0 [ 505.882598][T11752] print_circular_bug+0x275/0x350 [ 505.882632][T11752] check_noncircular+0x14c/0x170 [ 505.882669][T11752] __lock_acquire+0x1173/0x1ba0 [ 505.882708][T11752] lock_acquire+0x179/0x350 [ 505.882740][T11752] ? walk_component+0x345/0x5b0 [ 505.882780][T11752] ? __pfx___might_resched+0x10/0x10 [ 505.882809][T11752] ? __d_lookup+0x25c/0x4a0 [ 505.882844][T11752] down_read+0x9b/0x480 [ 505.882882][T11752] ? walk_component+0x345/0x5b0 [ 505.882920][T11752] ? __d_lookup+0x266/0x4a0 [ 505.882952][T11752] ? __pfx_down_read+0x10/0x10 [ 505.882992][T11752] ? lookup_fast+0x156/0x610 [ 505.883030][T11752] walk_component+0x345/0x5b0 [ 505.883069][T11752] path_lookupat+0x17e/0x780 [ 505.883117][T11752] filename_lookup+0x224/0x5f0 [ 505.883160][T11752] ? __pfx_filename_lookup+0x10/0x10 [ 505.883214][T11752] ? getname_kernel+0x52/0x370 [ 505.883244][T11752] ? __asan_memcpy+0x3c/0x60 [ 505.883268][T11752] kern_path+0x35/0x50 [ 505.883308][T11752] lookup_bdev+0xd8/0x280 [ 505.883339][T11752] ? __pfx_lookup_bdev+0x10/0x10 [ 505.883375][T11752] bdev_file_open_by_path+0x82/0x330 [ 505.883412][T11752] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 505.883453][T11752] block2mtd_setup2+0x317/0xe10 [ 505.883497][T11752] ? __pfx_block2mtd_setup2+0x10/0x10 [ 505.883549][T11752] ? __pfx___mutex_trylock_common+0x10/0x10 [ 505.883596][T11752] ? __pfx___might_resched+0x10/0x10 [ 505.883622][T11752] ? rcu_is_watching+0x12/0xc0 [ 505.883643][T11752] ? trace_contention_end+0xdd/0x130 [ 505.883688][T11752] block2mtd_setup+0xbd/0x110 [ 505.883725][T11752] param_attr_store+0x196/0x300 [ 505.883751][T11752] ? __pfx_param_attr_store+0x10/0x10 [ 505.883776][T11752] module_attr_store+0x55/0x80 [ 505.883814][T11752] ? __pfx_module_attr_store+0x10/0x10 [ 505.883852][T11752] sysfs_kf_write+0xef/0x150 [ 505.883886][T11752] kernfs_fop_write_iter+0x351/0x510 [ 505.883915][T11752] ? __pfx_sysfs_kf_write+0x10/0x10 [ 505.883950][T11752] vfs_write+0x5ba/0x1180 [ 505.883971][T11752] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 505.884002][T11752] ? __pfx___mutex_lock+0x10/0x10 [ 505.884053][T11752] ? __pfx_vfs_write+0x10/0x10 [ 505.884085][T11752] ksys_write+0x12a/0x240 [ 505.884120][T11752] ? __pfx_ksys_write+0x10/0x10 [ 505.884154][T11752] ? rcu_is_watching+0x12/0xc0 [ 505.884178][T11752] do_syscall_64+0xcd/0x230 [ 505.884213][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.884237][T11752] RIP: 0033:0x7f2119b8e969 [ 505.884256][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.884279][T11752] RSP: 002b:00007f211aa7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.884300][T11752] RAX: ffffffffffffffda RBX: 00007f2119db5fa0 RCX: 00007f2119b8e969 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 505.884316][T11752] RDX: 000000000000002f RSI: 0000200000000040 RDI: 0000000000000004 [ 505.884330][T11752] RBP: 00007f2119c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 505.884346][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.884360][T11752] R13: 0000000000000000 R14: 00007f2119db5fa0 R15: 00007ffc037ba368 [ 505.884381][T11752] [ 506.269776][T11752] block2mtd: error: cannot open device in t۸P±jFBB>UL%=Cҡxn; [ 506.379721][T11756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1410'. [ 506.559335][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.565682][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.914381][ T82] team0: left allmulticast mode [ 506.925813][ T82] team_slave_0: left allmulticast mode [ 506.931306][ T82] team_slave_1: left allmulticast mode [ 506.955560][ T82] team0: left promiscuous mode [ 506.960382][ T82] team_slave_0: left promiscuous mode [ 506.967657][ T82] team_slave_1: left promiscuous mode [ 506.973417][ T82] bridge0: port 3(team0) entered disabled state [ 506.992928][ T82] bridge_slave_1: left allmulticast mode [ 507.006419][ T82] bridge_slave_1: left promiscuous mode [ 507.012108][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.021922][ T82] bridge_slave_0: left allmulticast mode [ 507.028252][ T82] bridge_slave_0: left promiscuous mode [ 507.033946][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.170757][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.180719][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.190828][ T82] bond0 (unregistering): Released all slaves [ 507.463658][ T82] hsr_slave_0: left promiscuous mode [ 507.469667][ T82] hsr_slave_1: left promiscuous mode [ 507.475302][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.482896][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.491249][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.498788][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.508926][ T82] veth1_macvtap: left promiscuous mode [ 507.514500][ T82] veth0_macvtap: left promiscuous mode [ 507.521175][ T82] veth1_vlan: left promiscuous mode [ 507.526566][ T82] veth0_vlan: left promiscuous mode [ 507.661143][ T82] team0 (unregistering): Port device team_slave_1 removed [ 507.680209][ T82] team0 (unregistering): Port device team_slave_0 removed