last executing test programs: 6m32.73934444s ago: executing program 1 (id=994): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x400, 0x0) read$auto_fops_u32_(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_BULK32(r4, 0xc0105502, 0x0) socket(0x2, 0x5, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0xd6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x2c050811}, 0x54) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) shmctl$auto_SHM_STAT(0x8, 0xd, &(0x7f00000001c0)={{0x2, 0xee00, 0xee00, 0x8, 0x2, 0x2, 0xf1f}, 0x6, 0x5, 0xa83, 0x2, @inferred, @inferred, 0x2b67, 0x0, &(0x7f0000000080)="c3c0374c9145b539a41d58f8e08e7676ad950d9dd82878341ada09cf30c231dec93261763231cdd1635a67e4a15b14dc582c286e69097d568bb285c24506c357108e84ab5a71d9dba1ad74f20ef2968b", &(0x7f0000000100)="c0189f6719b20d575aa7767ccc3d0dc81e877acf6a8849ec5809c229647d7f10e675f16f787b949c5f0b0c4164a89af3d16d959892f1ab66547ca625b471462deaf3fbda68ed572a76aa6d3596bc93f9d61675fb1d39c313ab49244f837a64"}) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000fc0), r1) shmctl$auto_SHM_UNLOCK(0x5ff, 0xc, &(0x7f00000003c0)={{0x80, 0xee00, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x9}, 0x2, 0x100000001, 0x66c4, 0x2, @raw=0xd, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f00000002c0)="cfb27e35d2864eaa853f7d17738fc749a98f54b46215086c613d91a964803b136909e2a14020a0b78d65eca2f4097c7ff39125a3ccb9e6964ceb5c1080b6190bc4711e43da15f7163bc44a66d9c064255222", &(0x7f0000000340)="82db68c5f56da9bdad2c386398ad1398b575eec47bea924db5a759825240b97e0354ef03a705da9c39bd76074caa2c9cd4a094efed86234efc9a04866696f4b9f6bbfba9f45f6aec46dcd3c4c06895ecb80ebd785f75b52a"}) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000480)={"0444695d30ef6b14a62fa7b403335e53ab80947c2360530e89312b083222bd3a", 0x3, 0x1, 0x51e, 0xeb, 0xa, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa68, r6, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x5cc, 0x80, "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"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffff9}, @NL80211_ATTR_FILS_NONCES={0xde, 0xf3, "a9721d997bad13bf06727532c7f0074ea86e72e135fb5e95f58d9685016930a89c8504c6064a627febc9957419f390d53a82bfe2c41dbdd9cb520b87f3c9274293d81796234053c98b33e99dca2dbeddb2daa5ec354041d91e0381b02f28d0fde9cc01fab8367f4b54b2b4a7679b2ca5ef6ed1a7532afd2b8373ee4946ac87c34d0eaa415ce5e0f5b4d513a509278ccb4bbf4b86c48a77cfef1f038a27011611e91eae7e58f7ed4dd9d135b4a0b2402d588283387108f8df26ec57233fd6836143388c47d907d9e35d41da43002ed17cfd8738d87d34ca190ae0"}, @NL80211_ATTR_SAE_PASSWORD={0x12, 0x115, "9cba6f9fbf2012738656dd192a20"}, @NL80211_ATTR_EHT_CAPABILITY={0xb2, 0x136, "8d2d76e20790771bbfd16ff65ad83ad9b05bb808d4b7eeaf73d16d09441114aeb5d83a49cae25d5f5e66fcc708293e8666cda1c95c28a21e0fdc2f5a0d877a170abdc4b250a85857b04e3feab1557542b07f6992cf5bb41e751a4d19b21697a27a9eabe2c6199d6f2805269bbba22d1a9f254c724a2f5901352dad5daf2ce66b527891d270886784061daa698ca4ebbf7cbf5f7a3b513d9b157db56c143630861116798b5444c5d8ad86851a2b6a"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x242, 0x145, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x5}, @generic="2b39b2b2fcf69040d79cfd27a6fb6e9f6d374ff01d670a7220453480aba9db28971c032fece9", @typed={0x8, 0x82, 0x0, 0x0, @uid=r7}, @nested={0x57, 0x26, 0x0, 0x1, [@nested={0x4, 0x11b}, @generic="edc9ff8d8be39f45800a98e624941f709ce112d8bbc2f43c3d1e1f9613de7307395814bb8f864d3d4256334dcd499a36d9ab3e62becaf1a117eb2735e8387c973922ba83a78c5a07d14bfa461ef082"]}, @nested={0x10e, 0x1f, 0x0, 0x1, [@generic="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", @nested={0x4, 0x113}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r1}]}, @nested={0x78, 0xbc, 0x0, 0x1, [@typed={0x6b, 0xbc, 0x0, 0x0, @binary="1d651d0f000be4d1a80f3661030eb5a31661a7a1d8ada5513492da16aa73a7402e26b776da8b73acfd322736c09eaa55c29f161ca2a59f3b0f7a1fdbb2c4b98a7a9333a36a79cea9995a8472cd8250b8f1f2b80bebdfe5994c8a377ae585d51520f6e84673eb66"}, @typed={0x4, 0x18}, @nested={0x4, 0xe7}]}, @typed={0x8, 0xf7, 0x0, 0x0, @uid=r8}, @typed={0x4, 0x99}, @typed={0x8, 0x23, 0x0, 0x0, @pid=r9}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x83, 0x1a, "0a1dd5b1238e69c4e41c3a5051db0ab30b78391d41c61c61f10f269a7fd82d370484485239472b42d892a5c0a75882c0eb90d6f514e85610e2a7e0552059432eda35fe2f72b5b688e501c4d95dc5af00ca79b5c475f9a94c93a18416ab6738f6571a25a42c9ca9f9396d765068eaae8dd853544b7a1f639a845675335aa331"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x7}]}, 0xa68}, 0x1, 0x0, 0x0, 0x84}, 0x10000410) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) 6m31.5033259s ago: executing program 1 (id=999): ioctl$auto_FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) socket(0xa, 0x3, 0xf2) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000000040)) r1 = socket(0x6, 0x3, 0x7fffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x1, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto(0x3, 0x0, 0xffd8) 6m30.254874073s ago: executing program 1 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000002e40)={0x0, 0x20, &(0x7f0000002e00)={&(0x7f00000000c0)={0x98, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x7d}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x4004094) 6m29.880753496s ago: executing program 1 (id=1007): madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd2/sched/write2_fifo_list\x00', 0x2aa00, 0x0) read$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r1 = io_uring_setup$auto(0x5a, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffe], {0x7, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x102, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0xfe38}}) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x15, r1, 0x300000000000) connect$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x4000000000000a, 0xffffffffffffffff, 0xfffffffffffffffc, 0xb) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x17, 0x3, 0x10000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) 6m28.85166927s ago: executing program 1 (id=1009): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) poll$auto(&(0x7f0000000080)={r1, 0x0, 0x5}, 0x5, 0x49) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) r3 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x1, 0x0) rt_sigqueueinfo$auto(r4, 0x101, &(0x7f00000001c0)={@_si_pad}) read$auto(r3, 0x0, 0x4) socket(0x2, 0xa, 0xe57a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0026bd7000fccbdf250300000004000300ffffffffff7fffff12000100898771f10002804ffc88542f48d3fad009d0800007f10f5b1343030fd924ca6980fe7976da54a678b74085bf90bf23b4aafddba705caeb5d8a41707f81a1437e70a1fcea3ccbc64ae3262a844359b04bf13d24abbb64c8acb1c09299b0a544a7382b07acc16b7365f20ac7511fafb8ced5f2081d0c1ce6e238bb2aef8abae194d3a471844bdb7f7ffe39d92d1d5c676b7f469563cc4dddbf7ce85aed3e00cf376c9369949ad0b2b0d2542b"], 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='5', 0x1) tkill$auto(0x1, 0x7) msgrcv$auto(0xff, 0x0, 0x2400000000, 0x6, 0x6bc2cc7d) ioctl$auto_TIOCMBIC2(0xffffffffffffffff, 0x5417, &(0x7f0000000100)) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x2f5, 0x48eafc79) pread64$auto(r0, 0x0, 0x10001, 0x830) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6m24.806504819s ago: executing program 1 (id=1016): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) read$auto(r0, &(0x7f0000000240)='nl80211\x00', 0x7) read$auto_dvb_dvr_fops_dmxdev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mq_timedreceive$auto(r1, &(0x7f0000000040)='\x00', 0x2000000000000, &(0x7f0000000080)=0x10000, &(0x7f00000000c0)={0x80000000}) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x9, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x726, 0x2020009, 0x3, 0xeb1, r2, 0x8004) mprotect$auto(0x0, 0x4, 0x4) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x100080000028, 0x6, 0x2}, 0x0, 0x227, 0x0) close_range$auto(0x2, 0x8, 0x0) 6m24.33729143s ago: executing program 32 (id=1016): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) read$auto(r0, &(0x7f0000000240)='nl80211\x00', 0x7) read$auto_dvb_dvr_fops_dmxdev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mq_timedreceive$auto(r1, &(0x7f0000000040)='\x00', 0x2000000000000, &(0x7f0000000080)=0x10000, &(0x7f00000000c0)={0x80000000}) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x9, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x726, 0x2020009, 0x3, 0xeb1, r2, 0x8004) mprotect$auto(0x0, 0x4, 0x4) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x100080000028, 0x6, 0x2}, 0x0, 0x227, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m30.524031434s ago: executing program 4 (id=1770): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r2, 0x5453, r2) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000007c0)=""/153, 0x99) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000880)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x2003f0, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m29.267843253s ago: executing program 4 (id=1774): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0xd, 0x2020009, 0x5, 0xeb1, r0, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) ustat$auto(0x20000801, &(0x7f0000000000)={0xbff, 0x2, "be5705f65205", "064885ca64ad"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xa8}}, 0xc2) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x4000e) unshare$auto(0x40000080) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x23, 0x80805, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, 0x0, 0x840) io_getevents$auto(0x1, 0x401, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000004) 3m27.299136454s ago: executing program 4 (id=1785): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.3/driver_override\x00', 0x20000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socketpair$auto(0x4, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, 0x0, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) 3m27.020260135s ago: executing program 4 (id=1788): mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140), 0x4, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 3m26.795625425s ago: executing program 4 (id=1789): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/ht_capa\x00', 0x200, 0x0) mmap$auto(0x6fc, 0x1, 0x7ff, 0x800000000000eb1, 0xffffffffffffffff, 0x80000000) clone$auto(0x347d90c, 0xf, 0x0, 0x0, 0x7) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010000", @ANYRES16=r4, @ANYRES64=r0], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x58844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYBLOB="010028bd7000f9dbdf250f00000008000300f6ce039bd03603f6138de5d256d67c1bd9403b0a5010ada6e931f3b87f0fe7fbb18640de85eb77713b1d1f56b440d9f2e7e30ff4474a585c", @ANYRES64, @ANYBLOB='\b\x009\x00\b\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x4, 0x19, 0xffffffffffffffff, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) prctl$auto(0x2, 0x0, 0x0, 0x1, 0xfff) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr8/napi_defer_hard_irqs\x00', 0x1c92c2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0xa, 0x0) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x800, 0x106) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) 3m26.278728935s ago: executing program 4 (id=1792): r0 = socket(0xa, 0x4, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100001000000032, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys1\x00', 0x501141, 0x0) r3 = ioctl$auto_TUNSETVNETHDRSZ2(r1, 0x400454d8, &(0x7f00000000c0)=0x8) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={{0x3, 0x3}, {0x7, 0x5}, 0xffffffffffff8001, 0x2000047, 0x80, 0x4, 0x161, 0x2, 0x4, 0x7, 0x100000000, 0x6, 0x6, 0x6, 0x1, 0x4}) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r5, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) open(0x0, 0x3e1060, 0x120) r6 = socket(0x2a, 0x2, 0x1) connect$auto(r6, &(0x7f0000000140)=@qipcrtr={0x2a, 0x2}, 0x57) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x7, 0x5, 0x1ff, 0x13, r3, 0x10000) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") 3m25.769023584s ago: executing program 33 (id=1792): r0 = socket(0xa, 0x4, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100001000000032, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys1\x00', 0x501141, 0x0) r3 = ioctl$auto_TUNSETVNETHDRSZ2(r1, 0x400454d8, &(0x7f00000000c0)=0x8) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={{0x3, 0x3}, {0x7, 0x5}, 0xffffffffffff8001, 0x2000047, 0x80, 0x4, 0x161, 0x2, 0x4, 0x7, 0x100000000, 0x6, 0x6, 0x6, 0x1, 0x4}) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r5, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) open(0x0, 0x3e1060, 0x120) r6 = socket(0x2a, 0x2, 0x1) connect$auto(r6, &(0x7f0000000140)=@qipcrtr={0x2a, 0x2}, 0x57) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x7, 0x5, 0x1ff, 0x13, r3, 0x10000) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") 7.195548246s ago: executing program 3 (id=2473): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x7fffffff, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x62800, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0xaf02, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00!\x00', @ANYRES16=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) mmap$auto(0x0, 0x6426, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.073004852s ago: executing program 3 (id=2478): r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r1, &(0x7f0000000140)={&(0x7f00000000c0)="bbc69f44294e96f44775c8ae2f799d5b6cd3299545567a43016b6aec10e08a4fb9dbbca984cc42f44cdd54999180d823053a2bcc3081d962d5d7782de2cd2ad59a53569f780f1c9034ccad3581883cc6b1a76687a38c9eeb864081f5aa5c16157d43f44f0da3d1f57668fd3b292a2de512328f62", 0x3}, 0x8) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7f, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000000040)={0x7, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x28, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) r6 = epoll_create$auto(0x4) close_range$auto(r6, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) mlockall$auto(0x3) mlockall$auto(0x5) socket(0xa, 0x3, 0xff) futimesat$auto(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0xbda, 0x1000000000}) 6.043715156s ago: executing program 5 (id=2479): mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1, 0x7, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffff5ee) r0 = socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000000)={0xc, @raw=0x5, 0x1, 0x658f1cee, 0x8}, &(0x7f0000000040), 0x7c3, 0x4) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x81, 0x2, 0x5, 0x2009, 0xffffffffffffffff, 0x6, 0x5850}, 0x18) lgetxattr$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) 5.763648691s ago: executing program 5 (id=2480): r0 = socket(0x2, 0x80002, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) ioperm$auto(0x3, 0xe, 0x2000000000000149) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x21c1, 0x0) r2 = socket(0x2, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1400c) inotify_init1$auto(0x7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) r5 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7088cc8100fedbdf2503000e000c00028008000100f9930c122e93", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000006c0)={0x7, 0x0, 0x0, 0x8, 0x3, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x0, {0x7, 0x10000}, 0x1, 0xe, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000005, 0x83, 0xffffffffffff628e, 0xa747, 0x5, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r6, &(0x7f0000000100)={&(0x7f0000000040), 0x3}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x1) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r8 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xa45, 0x12, r8, 0x8000) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/net/ip_vti0/power/autosuspend_delay_ms\x00', 0xa2500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f00000002c0)=""/106, 0x6a) 4.599322146s ago: executing program 5 (id=2485): lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xfffffffffffffe01, 0xaa4, 0x6cd, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1a, 0x0, 0xfd2, 0x9, 0x100, 0x0, 0x7, 0xffffffff, 0x23}) shmctl$auto_SHM_STAT(0x2a3, 0xd, &(0x7f0000001180)={{0x4, 0xee01, 0xee01, 0x5, 0x6, 0xfd22, 0x7ff}, 0x499, 0x0, 0x5, 0x5aa, @inferred=0x0, @raw=0x1, 0x9, 0x0, &(0x7f0000000100)="144d2c05e0645cb5e3a25dda53e6c16db0ba9201902d615c9add41df790bfe21c8fd3b772bd34b4ba1d46053d63205eb2c6b26548ac28d53e7c0cdcab58f26cc9d915f4889fc5025b3e3ac1458cc0d0e27f1ad", &(0x7f0000000180)="d70ea24477f1d2a76d081ea670c4a9651c97fe33169bba11ecc7654a66fff758d488ed164c19f88a4c5a7c59c7c3bb8b9ec36b50a8d41c6aa546297616c7524701416292710dd162396f2190febe720d3ed2a447cd7433302b7eb77f01741631631d68cf8fb2df6e12706aa1beb108308468dd23c27a17b5893cc0990d65ce61f3ef8d821faef39fdf13b765d802c27c58e853a70aca81b71f9735d75f34138f10939291276dd2d4ab57ed301795b43c6197271d581d41aad68d0e1a84f9d03297610be038059c3082c5b496811b9cd4da3d00cc07cb3b9cf87e28964defd016efb5b7eec16e8e6fc05e321058fd5216f92b45514ffff7743adc716092683fffa9d0e508ecf2f47691405b542662ccf0f2d6f5aaa18f17aff2b9b3ce6a4442128ed0595613be3c4d967c64f433a2d08f5d58354f60642b05cf7ac680f429f990bd7e0d56a6820a5d4550bd8cb2378b4017984679a6d0611b82f4e5c7e19b3d66c63b89e3c1d05d8a1a6e32a6717f4bfa92a7b41090adf1503f6b121d4d02e5937c9267dcd4cafd989a50c01dfe2e29d0b2eb4a96c37f7e7bca26c953941685142bf963da41e2d88f3443197921a40f4182e6a1765324318354d2f87df0bdf9b2bf6c073c4de1e1175c0d2452d778a9c7134a036411cc47ac251663079a2522e49ff50a85152fee740e04e6daa3dac948334348494a45e0f1f980374579cf92b03f6e214e58b1b773708df0be8d9849a35b5fb48765c745db37fef016e727f2f9514f71d2eb800922ae1381b10ae170165ed9722eb767946e5281a9d01b872c921cb03ff61c2a1aba2c9c1857e03cb2f6e1e232f103bbdad76a5477ae39f5b9634ebadcbd6b7977cf23a19a568b8b0159fec46fa07f7be149517fb998a569d71f827fbd002988383daabcc5d9e0098e8357e8e20fb0f134a3dfc4c7d6e450752b11157dbba394e2b8ebebb6c8110724c3e7cf41314f7413040debc21aed37d5735febb53129329344f4be73b62ef9ee7d1b9c90cab764976b541da631b7a5d99cb7a0cd2213046c27bfdc7b3c0a5ca17bccf29c145096e60d0b44db460fb66ad9dbc6d56fb71c198c49e7b04eda2d0cf448678b796c995b8d017ea875b85ecbe104673fed8d02f8c8a0eb95723284fccc36521c799d271c02a1d6a9cfa0dbf75fcc15c8349d46d755cd859202ce6d9e26be61028ef5139f54979dfdabc01f3c5cc6c6eb1fe3f7316c17c5a99d1005e5ac3944647d4d83286988d670049bcd9d8f2a581b825ebbc978c6b674ec3a75f83478b8cf1d65548e07b8703dba02da9a4b02653e8992bb4e7af39c50790e70908dc3578f248c05af64acd1b298634e6eeafe71b30201acff2d72409233993831671a13fb45df1a82d2b006dbc1b8138c6b0f82796594b5fd31bc143aa55fe1758c88013690a29180374d892f10538f71cc7430cddef728251a5124bdfdea1ef8edbf7d3d2894e89f6d5f4164a10bd4e0cb604fa3d95b4eb1b89b25d07fed6126de2c07cc51bad4ae1ddf03f2309754689bc240d731a88c9b2b0688b04da969232ba3145f12797e37d0d504ca0bd1601edd94e0b05a3fad870fe2885c8b4409c398bc7b4e50e629d2686a08db91c503ff36fbaa1650fe57a6d77d09877ae60be3fb699d87d3e9f32a1cfa70868f74670814e5b7aeec487f0fbba3d1c81df7b5d07c2e355641446d92b8cf6b4a896ec7d3df47a015fa9d04d4d30647273e2364a86caf6d11327ee3f650ac2cd8379d7158b4e7d81425ce17582d8f76e0bccb4697e453f2922956c958dcf584eb1ff6d50d87a106bdda25844a6c22045141177752589bb5621c530a2c3306133faa34bf9257d875af665b272d942cd3f7929afa51fb68f0195b3ef2b905d541578824c7fedd7ff92adf5626fb6efa5a40fd8c38cf358d5f5527c78f9aa76fe2cebf031443fff17884162e920a80b88552a539dd546644205a1cf49b3a888d8afe15e90febc8fffc68db52def17254007b0e15c1d035881824b4771b5947ae26d82856de6baf1131d22419c048f7a18d7254fd138dc776e846a400e7d4a759a17c893c3312974219543a3975d9aa7e79095b8f54740c23ac1e627ec66e5da9764bc30cc1f4d3c4cbf070ee475cbc06201913ad95a6d06db7f579795c1f119ecc30e39765929949917c25e4a4434b7846fdfa8f8662d0de302a4ae0d5e9f63dd59db590856251c94eb764c952389f739847d9e36627ac6bd3ba8f80defade9a0894b0a62765617ee155ae103b24761a10e7b7699a5386dfb589cd71d65d49f82a6b938cfd0544655b3d4c4fedaaebcc2cdfb8defc01037d2ea118ffce006ac11c275e7a1aa9b4b6e8f9b56aa553d6ae5d09eb760fee17d0cc4d22b001fcd076473012627e5c92766049cc4013465fcf5f73829279090fc470444ba251911dfb6c9843b51bf021a82742865187f6b62fb52cc19300ccce1391693b630bde43b35a0ace5e8e8a70b73afc1cb9249eeb6630f031cfefbc5d714c9eda641863562c8daf8e7bb6aa8c881ba33ef98918c3e267e9289868e1c1ce9fd3c092775d13b6c3cf6cc26266aa71f42bc84eb5a8ef3d6514c11939f211bfdb813647bfa2e4cb4cd0e44b3b1a0f857ff888a6d90b89547ac45ff73d0bb854100bab7768181afa062fdd8c7721f58c9c90af52bb42804e4a6b830adf56a0fac87790577c20b0fe0bd614787053d9782d95fc402c622c3db9aec158cb1611a5cf4337a824ab291706e52eb375ed6d10fbaca349ac70f62bb644bc4b32b3eaf1cb87115bdabbb5429d1f7796d579fb87488672deadd149a34d11d22109823542024336228b1083402dcb15d07ec8cbcb7b6dbc1a557d32432e681f8f2fc41388dbef7437136b4c123f59470f3b9fcd8f4370b79aac0f05e49ee2aca1087e2074cebfa325cd3071645ff0265cabff24da23da0c366b22db8cbf1e5fc0366f8a568f57a98fbd125166892820820e0cb7dcb04b6f7da47ba905e5607e79f10c88c67bf872e5c6eaa955855d5cc589d75449d035ef50bbb49060f801bf64ef470025b7e770843cb28056ecfffc086c3020efb22c41e28f1b934946e5ba7aa01dbfac33bc16db3a0afd34d16955e9be2d94f3fa7d5373cc9bc539febe4fc907fbcc239ac81d7aa6f66821974ad0ba507719452e18d7fe06c587e12156fe7497d9f62928608541de179365caac8cedcabe381d3bb8aedc7562bfe14a194225bf959998189e1ebd1626f47a7441cb9eecc13b73d1a82f887d733bac86c1ebc0194a633ed48e12082cca0b717de297c8912a2648b754112b1b83602791208326287913b6445f3e1715afd535968e7ded4ba627c553ab10cd2ea9798257bbf7103f6c7e037a8aaf87e1faa836b573db35247e94a36ab9f1fbfd89cc103eadf6c4a74aa6f41d91c867adce6b543064c321ca99b9f4507f36252c2cf0e56aae1935fa7ef0fc71e874008474e7e01a2a30f595afa23ea5bc63efe6c35f77f9316092f47681a5fea6f5bc8be695cc68dc4ac6ebfc8869b3491bd9bd2745b28c1a55b011f171e2bdbf6f531eb6c493b836ce6ec7715224bf25a0b2a40a544c148c055703db6307617360d3879f79c6c779cdb7122da69444bce7ca2d0d52aabe308cfd52d6b307fbe2040a4333b5d9cbfe58c13a14d1acc4466dbfda756d59834f03a04ac76c298bed769d3c9fc48df2a7f102eff4458e230079939548f3049eb61dacb15f2e02b4c7e324397abbb8dc9ecb32b00dfbc17332245c97e6de47186214e3b344f262630ddebf2c6eee2c016509a1c4cc25c9ce29c83389895b2a738f25f99055ef484bf90ff3387e92790d8a312742b25aa048e066187c2e79cd4098a421011d761e3717a129d99019e4d556f7ea6949c052dbeef7b0701b468ecd2840390eec223f5024cd578b3d7d31b28822c2e132e1230efea1ff6fb2000b7872b06e8c871e85e0d500dbbda13f26b66975c38597cf5e85b5e62d6e4dd878841742d5b3df50405d62378ec1962ee9f58febdd746c1ce21fd2e00ad0ca15d72fc972f09a313efa0c4a884bd76ddb38050f3ccd5e83e5a8e13acaecfffb810fa734ccb197888c5e2d42be90ba89c2674569540a6eedd300abe44f61977527427ac75fe47c144bcf50863a5126a3585c29af2aa60eda8daab77539fa438c957f4d848b311bd78269280d41dde25ebef2b8f07c70a0b71b42f45cc73d9cb201e935059a7093c0b5d52af868471325642e401bcdc8a096c1e1d729139eb3a6a15791cc1a9e350f3ddde4a355a47fdc7076f290490ad2c7e072bf864afa837c22e7e0cbbd1d40d12e520c82ff267357921a35a868451e2fc6c34143c4e79e1c19395816fc6a39073dcd057a71711304194154cedd2dd13b48048a783bf4b60649bb034a3ffccee64ed9a18f26ffc1955dcd0dfe383a61ec55fd20adfd2c562bbaf0c50a6740a9c28a461b420e518b79c1488875ebdfde3e1dd11a150cec9e0c348097d266a7e022f4cee2b0ee93944c4ef240d38899f94ec00f16bd4614c694fcdbab2c50756e7a0319982e12759a081a88263e877b256066a66aa2a0d625d5625da8d69d2ecfcfbacf0ad78001b8586add8700374a7e8f8129074f54002ef26c7d9155fe810d93f925efb6e9400da1d3a3bc9a6ddf6a5ad90c07acd6de2dda06e305188ada60c2102c6cce7a837916f6307111f300d09b717632729b7c54ec24d2b3daca6a63954dfddbe36d9e78b801ee8f4f0066b3fa5918bcfc2be28d5a92e7699508ec19f37a982958d0c7313338fb44260c202fb00a5dd8428e95b1c2a0d540bd6cc4c17f7236d22088bace9552705a3acdecd8782010fb016f7c9f64f2465fca4a9fbe2e7f7a3351a4ce82cdf6291083afdb13fd0413a1c3babf5da9237ebcb2c323cb3748cd5a9f091d82a2cd02ebe8faaff85323e553621b11711b17c2bcf2f01e04b2bf93e829325b60e73ca8c6fde00c1ba2cf66b45a381876df9be5a5e6e4b45ec95ed2af41a07ba3864e962cbbfc0d5b9a3db09a28b02ccca320202748cb89b6edc30219488ab93deccdbfd382882b927b050489340c16357aff2b350c8286c085719c6e9bb9aea1b91b65ee81a36a0024762427ef8120451a0f92baa9ee3575f0d83dbc11a1abbefdd18578b29fdbb4fa663a1f74525343541a18c702444df25d0216dfd76801ed44dcd57ea9038bf48743b47a970827d7e7cfaa8656a407f31546268b6d738381b8a546153df81bda073309f36e465ad4cb88fa74507f7ec262d6a5a3c7c37c54bb77307cf4ec24102035687a57cc5f493c92920c5228a37183993e2761b3a78a33649f37a8d2ce5d2183daa9f515d0689468d47a2da4c12e0f71b216a2edcd64c5d2dbb82e80de021fd97590f5566710a062fac27d316a885fb3d5dfac9d4b34e72b465fafc4f1e91c932ea4ba1faf8fa049759671b058fb4c4b0fdc0a35c46fa058872b6d57001642ae78ecc39be7a00e36adbaed02b0fdf94965da102f8fc118bdcc2d288858904ffddfea93f0cf86c5e0d69d038d009ec427d30999f7cb693a848c2aba0214e964d435887a54bdee111790b04813662041851f97e73580dfd8d65ef987bc57014d2d0222b65000dd13a00fdc1d2a120f559f5d62c336778d0dc7cc218170ae2eccbfafe8315d743ef491b7eee9b9aea48257088903129af59baceccdda3f001c9293954097de520b7c79c36a814791fddc9cb62c4dc3989d5ebe79572a09b8be32231276d1624a7688438e8e7b514b164bec33159913d809dea24de2bd2c29bdab44"}) shmctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000001340)={{0x6, 0x0, 0xee00, 0x8001, 0x9, 0x2b, 0x2}, 0x8, 0x4, 0x6, 0x6, @inferred=0x0, @raw=0x7, 0x6, 0x0, &(0x7f0000001200)="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", &(0x7f0000001300)}) keyctl$auto(0x6, r0, r2, r5, 0x6) io_setup$auto(0x1, &(0x7f00000013c0)=0x8) io_setup$auto(0x7fffffff, &(0x7f0000001400)=0x5) setpgid$auto(r6, r4) io_setup$auto(0x0, &(0x7f0000001440)=0x12) io_setup$auto(0x4, &(0x7f0000001480)=0xfffffffffffffe01) r7 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f00000014c0), 0x480000, 0x0) readv$auto(r7, &(0x7f0000001600)={&(0x7f0000001500)="df85361c4f7c97a334499857c88080b450355049d17ab8c7e0666c19db0e225cd0ab7a57745894efbb06ceb8d6130bc358223fbbffc9e37f4466dbd653b4f773acc09fac2b75ad77388e48525bea35a52bf37ab53a86d798d944c0f738ae8caa97a5a7a83c2944e5c3543e6a9e7beff8c1883d8adf0c7e3140ec2a03473daec4bb8e5662d99d1b0787dcaea7350545ddd379f9ed46d0f7dfff80f49b04a2590fb40574b97e3a0570c2d6ff3e67e9fe2d821dcb240cc3df2d020647854d3a3dbe8c4762e762a28d440d55dacce8c6bca816153b92a4", 0x401}, 0x2) io_setup$auto(0x9, &(0x7f0000001640)=0xffffffff) r8 = io_uring_setup$auto(0x100, &(0x7f0000001680)={0x7, 0x3ff, 0x9, 0xff, 0xd, 0x5, r7, [0x5, 0x10], {0x6, 0x3, 0x5a8a, 0x4, 0x3, 0xbbf, 0xd, 0x8, 0x6}, {0x3, 0x10001, 0x80000000, 0x162, 0x9, 0xed, 0x5, 0x10000, 0xfffffffffffffff9}}) r10 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001740), r9) sendmsg$auto_SMC_PNETID_DEL(r9, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_NAME={0x5, 0x1, '\x00'}, @SMC_PNETID_NAME={0x5, 0x1, '\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '@\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_NAME={0xb, 0x1, ':.@&%-\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000080) io_setup$auto(0x4a68, &(0x7f0000001880)=0x61af) r11 = setfsgid$auto(r3) setresgid$auto(r1, r3, r11) syz_clone3(&(0x7f0000001bc0)={0x8200100, &(0x7f00000018c0)=0xffffffffffffffff, &(0x7f0000001900), &(0x7f0000001940), {0x1c}, &(0x7f0000001980)=""/223, 0xdf, &(0x7f0000001a80)=""/239, &(0x7f0000001b80)=[r6, r6, r4, r6], 0x4, {r9}}, 0x58) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/sequencer2\x00', 0x101200, 0x0) kill$auto_SIGCONT(r4, 0x12) io_setup$auto(0x2, &(0x7f0000001c80)=0x9) getpid() accept4$auto(r12, &(0x7f0000001cc0)=@nl=@unspec, &(0x7f0000001d00)=0x2, 0xfffeffff) getpid() io_setup$auto(0x200, &(0x7f0000001d40)=0xa) kexec_load$auto(0x38a9c1be, 0xfffffffffffffff2, &(0x7f0000001e00)={@kbuf=&(0x7f0000001d80)="33fc7ee99c335543c796f0e12aaa81374c334e094a39b5fe9419efcb4e166a3f095ec0566afa880ad07d7408521404394b7a6622b0b205722d6f5072c47c3f05edb44521a64e70b2641f8e6b38b14389570d8bef6986b6586b75b2805a93250aa02c4091771a9abc4e571c46", 0x200, 0x2, 0xffffffff80000001}, 0x4) io_setup$auto(0x9, &(0x7f0000001e40)=0x7) io_setup$auto(0x9, &(0x7f0000001e80)=0x1000) ioctl$auto_TIOCNXCL(r8, 0x540d, &(0x7f0000001ec0)="633e50228f3f1aeb76263e9c89e916431edae6f3093ab078cae2ff9a342a895adbfab6ee8b28ae06e5c6101322905fba36e08226bacfad416d822a93975fc9b6257ab579135eab0f4ee779c2946e29be403d818375a4292ee6026853983527860562424543b8a8ee1fb4a2c575ef2c6dead41859a552c0dbbd11a17c460880ca8998f0bd93d4ae733edce4f27d6fe2cdfd63a4cd87dbe7e33c677101109b05dcdb648b2fbff7237670a190b968098caca50e161535d213b8508d4fe7807a1bb2d5") 4.165728243s ago: executing program 3 (id=2487): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x7fffffff, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x62800, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0xaf02, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00!\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d000800030003000000060014"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) mmap$auto(0x0, 0x6426, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.848466633s ago: executing program 2 (id=2489): setresuid$auto(0x2, 0x7, 0x8080) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x20000, 0x0) ioctl$auto_MEMREADOOB(r0, 0xc0104d04, &(0x7f0000000200)={0xffff1514, 0x8000, 0x0}) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) 3.696668001s ago: executing program 2 (id=2491): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') symlink$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x4000, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ccc5dd0c5667161d668"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc095f", 0x19) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000100)=@bpf_attr_4={0x401, r2, 0xfffffffd, r0}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6800007cf154d4192000b63effcf47bee2a876659d8779922dada646a1909e46be7d0c55148b07372c3a40001c070f18a8e38d36cd9efea4e3512496b0519f00cde5fddead2488f0a4e77500513bc7503e016962dbd78f0f17fe0d0209b588e112911668fb4038d0", @ANYRES16, @ANYBLOB="080029bd7000fbdbdf2506000000080002004f01000008000800050000000800160002000000080003000600000014001200687372300000000000000000000000000800090006000000080007000100000008001000001000000800100005000000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x3, 0x73) ioctl$auto(r3, 0x4000000b, r4) 3.308454283s ago: executing program 5 (id=2493): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3f, 0x0, 0x0, 0x1, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create$auto(0x2004) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d2032abd7000fbdbdf25020000000c001700fbffffffffffffff14000c00fe8000000000000000000000000000aa080005000c00fc00000000000000000000000000000108000400"/90], 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) setrlimit$auto(0xf80, &(0x7f00000001c0)={0xe, 0x5}) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, r1, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x7, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram12/integrity/protection_interval_bytes\x00', 0x542, 0x0) socket(0x0, 0x6, 0x86) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/controlC2\x00', 0x599580, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x119002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) 2.97559247s ago: executing program 3 (id=2495): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x109482, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(0x0, 0x12ba7e, 0x45) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x3, 0x0, 0x5) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x149102, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r2, 0x0, 0x3) 2.878744623s ago: executing program 0 (id=2496): close_range$auto(0x2, 0x8, 0x0) r0 = fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = memfd_secret$auto(0x7) ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)={0x4, 0x7, [{r1, 0x0, 0x81, 0x5}, {r2, 0x0, 0x1, 0x6}, {r1, 0x0, 0x6, 0x6}, {r1, 0x0, 0x9, 0x400}, {r1, 0x0, 0xfff, 0x4}, {r0, 0x0, 0x80, 0x2218}, {r0, 0x0, 0x2, 0x3}, {r1, 0x0, 0x6a, 0x37}, {r0, 0x0, 0x80, 0x3}]}) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0x100018) 2.42661061s ago: executing program 0 (id=2497): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/media4/model\x00', 0xa8000, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mounts\x00', 0x100, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x9, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) ioperm$auto(0x7, 0x6, 0x2) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x82400004, 0x4b, 0x0, 0xd) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb-serial/drivers/kaufmann/uevent\x00', 0x531800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/56, 0x38) setsockopt$auto(r1, 0x1, 0x10, 0x0, 0xba) shmctl$auto_SHM_LOCK(0x1, 0xb, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4000080) 2.35401259s ago: executing program 3 (id=2498): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0/mldv1_unsolicited_report_interval\x00', 0x101c41, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x503b42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x400000000000005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000080000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, 0x0, &(0x7f0000000200)=0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r1, &(0x7f0000001d40)={0x0, 0x2}, 0x6) msgctl$auto(0x4000009, 0xffffffbb, &(0x7f0000000180)={{0x80000001, 0xffffffffffffffff, 0x0, 0xfffffa9b, 0x2, 0x100003e9, 0x4}, 0x0, 0x0, 0x8000, 0x3, 0x4, 0x2acb, 0x1, 0x4, 0xa, 0x4, @raw=0xfffffff8}) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 2.308107769s ago: executing program 2 (id=2499): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000040)=';\x00', 0x5e) socket(0x15, 0x5, 0x84) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x31, 0x0, 0x2) r3 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYBLOB="3ac578639dd4fab3f3b85f32c08e54b0eee408556e6e2dd85cfa6a6432d0a5c635bf9c534f17af40609ff0c883a225050c49a912abaca3dd3ee86d7a5e5af36e74dac183371805ba53bf8eea746292cfe18e6b0f75dd68a1eef131b1d991dbfb2d9002291961af648083a9de5979aedd73c0a7d9517df27286380d0a973b81ed3340d3d355df542d6cc8ad5a152883e4f3cb91b94c079d944eb4bb6a9569aab548332da5a8eaaef00d5c05", @ANYBLOB="13042dbd7000fbdbdf250b00000008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x4040094) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x800009}, 0x5, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/devspec\x00', 0x181300, 0x0) read$auto(0x3, 0x0, 0x6) semget$auto(0xfffffffe, 0x13c, 0x0) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x8) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f00000002c0)=""/119, 0x77) semctl$auto(0x0, 0x9, 0x0, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x1, 0x104) mmap$auto(0x5, 0x8001, 0x3, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x2, 0x84) 1.505690274s ago: executing program 5 (id=2500): r0 = socket(0x2, 0x2, 0x1) r1 = socket(0xa, 0x3, 0x5) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r3, 0x2275, 0x38) r4 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r4, 0x0, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000240)="4c9c08c388274610e12c861bb2dbd9800e9b394ba4b0fe079541c18557372665b72e36790d", 0x25) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000e80)=""/215, 0xd7) recvfrom$auto(r2, 0x0, 0x8, 0x8f, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x101000, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE(r5, 0x6, &(0x7f0000000180)='/dev/sequencer\x00', &(0x7f00000001c0)="ca308777e85156867f863bcbf2f4ee6d001f9262285c95d014b2e523", 0xffffff7f) mq_timedreceive$auto(r2, &(0x7f0000000000)='\x00', 0xffffffff, &(0x7f0000000040)=0x6, &(0x7f0000000080)={0x5, 0x100000001}) bind$auto(0x3, 0x0, 0x68) 1.237541452s ago: executing program 0 (id=2501): mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) r0 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140), 0x4, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 1.214909138s ago: executing program 2 (id=2502): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) ioctl$auto_SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0e80, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.014500627s ago: executing program 3 (id=2503): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x12, 0x3, 0x0) r0 = memfd_create$auto(0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(r0, 0x0, 0xa) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0, 0xe}, 0xf, 0x7, 0x7) r2 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) io_uring_register$auto_IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)="f3d9042a770dd27a0095f29da34dd11f84210fbb", 0x2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r2, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2) sendmsg$auto_NFC_CMD_STOP_POLL(r2, 0x0, 0x44084) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x5) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2712, 0xfffffffffffffffc, 0x0) 822.136438ms ago: executing program 0 (id=2504): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x3, 0x4008) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) 408.542793ms ago: executing program 0 (id=2505): r0 = socket(0x10, 0x3, 0x6) socket(0xa, 0x1, 0x84) mmap$auto(0x4, 0x401, 0xdf, 0x9b72, r0, 0x10000000006) mincore$auto(0x1000, 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0xa001, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/dynamic_events\x00', 0x42, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000480)="0a451f44a544", 0x6) write$auto(r1, &(0x7f0000000500)='%[.[\x00T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa3\xa7\xf2M\xd1(h\xa51T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xdc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xaf&\t\xd0E\x8b}\xa2\xb9zl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2-\xda\xbc\xd9h\x06\x9fx', 0xd4) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c00010000000002000000005c94e1797ca8442265f85c16d8a71b3b511589d295d3ed74e9f5b571283703e0f87901f5c4fec45951a4747efed16599bbe9ef934d843e712c2464438b1b8b5d2f93acc24b781109d04cccd68f71b14de3d1d6134f77a716a903f013d7a28f44a385a820665393aa904dd43567ba1d3596d842976188893f7585880b7850e05cfa9fc9bd95213943ff1fbb67f90959"], 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x401, 0x0, 0x0, 0x18) mmap$auto(0x0, 0x9, 0xe0, 0x1000000ebe, 0x401, 0x8000) mknod$auto(0x0, 0x1081, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x5412, 0x38) mmap$auto(0x0, 0x202000a, 0x3, 0x40000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) 338.068051ms ago: executing program 0 (id=2506): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(r0, r0, 0x4) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000780)={'tunl0\x00'}) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)={0xd3cc, 0x0, [{0xfffffffffffff9dd, 0x9, 0x6}, {0x10, 0x6, 0xe}]}) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) unshare$auto(0x40000080) 336.144015ms ago: executing program 5 (id=2507): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000000)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x67) r1 = epoll_create$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xf, 0x4, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r2, 0x10000}, 0x10) mmap$auto(0x7fffffffffd, 0x9, 0xe997, 0x8000000008011, r2, 0x8000) epoll_wait$auto(r1, 0x0, 0xe007, 0x1) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000040), 0x12, 0x0, 0x4009, 0x0, 0x2, 0x10000b}, 0x4800009}, 0x5, 0xfffffffd) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto(r1, &(0x7f0000000300)={&(0x7f00000001c0)="63950bf2ccedc1afd1b3382a94790ad90a2b02940db6b246dc250590362cc44c33907d67cf6945127a84b08cdaf0814d43b8218cede722f9ec4cf73887238425dd550120938630f2a8e47c1eb2e36b8aaf960c00cd10420a7de64bfdd2a41c49deb2e6eba00d8eee68723e0ad7", 0x8, &(0x7f0000000380)={&(0x7f0000000440)="ee15d388247dfee432d041ec8ad40c55fd45c7625c474a5ea2e5e7e596773010693c18b9141952aad451aa35eb45aef6b95e31f9df72efba04976389b64ba7b1b551ce80f51e132600752883aa7ad4a91e1e0070146e1e8920659436d458ecf06fe4daa393064bd8320935c8b1e02e7931db9ba971797dd29a533dc6", 0x7}, 0x6, &(0x7f0000000540)="a6e8c83c18cff1a616166d41cc6a3f52744ea09f36ec881d8cbc1709812c7f7f6a45548f6f78617b95fa4f7bf79eefebcbf52f44eb491c178bbd2b05da0cfa25b689e0601b895c2fad8d277c97e3c3bc1675ab0081742acbbc46f1cd1b24d43741959311f7bf00a420d50137c2b615cacf5f661111e77fb833675774fc88b20f247c9eb52893c7916b65bb37b3c60915d2fe4b298047674ba8c98ff96ce2f3c301b12d934068597269a9e9c05344d46bdcb145f603d0742ba13fbbb2ffdf6e6f0402a4e8f73accff5959f64a11c033bf223c", 0x8000000000000000, 0x2000000}, 0x2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) socket(0x9, 0x2, 0x1) mmap$auto(0x0, 0x2000b, 0x2, 0xeb0, 0x3fe, 0x2) sendto$auto(0x3, 0x0, 0x79, 0x0, 0x0, 0x20) syz_genetlink_get_family_id$auto_nbd(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0xfff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() setpgid$auto(r5, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 247.220061ms ago: executing program 2 (id=2508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0xa, 0xffb, 0x8000040008011, 0x3, 0xfffffffffffff000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0xb, 0x1}, 0x800009}, 0x5, 0x20000000) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x58980, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x1, 0x100) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) socket(0x2, 0x1, 0x106) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0xa, 0xffb, 0x8000040008011, 0x3, 0xfffffffffffff000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0xb, 0x1}, 0x800009}, 0x5, 0x20000000) (async) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x58980, 0x0) (async) 0s ago: executing program 2 (id=2509): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 9 [ 555.518437][T13965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.518456][T13965] RSP: 002b:00007fc2de3df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.518469][T13965] RAX: ffffffffffffffda RBX: 00007fc2dd7b5fa0 RCX: 00007fc2dd58e169 [ 555.518478][T13965] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 555.518486][T13965] RBP: 00007fc2de3df090 R08: 0000000000000000 R09: 0000000000000000 [ 555.518494][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.518502][T13965] R13: 0000000000000000 R14: 00007fc2dd7b5fa0 R15: 00007ffcea91b148 [ 555.518519][T13965] [ 557.787456][T13988] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 557.863175][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.2.1767 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 557.863223][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.863232][T13988] Call Trace: [ 557.863237][T13988] [ 557.863243][T13988] dump_stack_lvl+0x16c/0x1f0 [ 557.863268][T13988] sysfs_warn_dup+0x7f/0xa0 [ 557.863282][T13988] sysfs_create_dir_ns+0x24b/0x2b0 [ 557.863295][T13988] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 557.863307][T13988] ? find_held_lock+0x2b/0x80 [ 557.863326][T13988] ? nfs_netns_namespace+0xd/0x40 [ 557.863344][T13988] kobject_add_internal+0x2c4/0x9b0 [ 557.863368][T13988] kobject_init_and_add+0x11b/0x190 [ 557.863382][T13988] ? __pfx_kobject_init_and_add+0x10/0x10 [ 557.863404][T13988] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 557.863423][T13988] nfs_net_init+0x10a/0x300 [ 557.863443][T13988] ? __pfx_nfs_net_init+0x10/0x10 [ 557.863461][T13988] ops_init+0x1df/0x5f0 [ 557.863482][T13988] setup_net+0x21e/0x850 [ 557.863502][T13988] ? __pfx_setup_net+0x10/0x10 [ 557.863519][T13988] ? lockdep_init_map_type+0x5c/0x280 [ 557.863538][T13988] ? __pfx_down_read_killable+0x10/0x10 [ 557.863554][T13988] ? debug_mutex_init+0x37/0x70 [ 557.863570][T13988] copy_net_ns+0x2a6/0x5f0 [ 557.863591][T13988] create_new_namespaces+0x3ea/0xad0 [ 557.863615][T13988] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 557.863634][T13988] ksys_unshare+0x45b/0xa40 [ 557.863653][T13988] ? __pfx_ksys_unshare+0x10/0x10 [ 557.863670][T13988] ? xfd_validate_state+0x5d/0x180 [ 557.863686][T13988] ? syscall_user_dispatch+0x78/0x140 [ 557.863710][T13988] __x64_sys_unshare+0x31/0x40 [ 557.863729][T13988] do_syscall_64+0xcd/0x230 [ 557.863749][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.863763][T13988] RIP: 0033:0x7f007978e169 [ 557.863775][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.863789][T13988] RSP: 002b:00007f007a54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 557.863802][T13988] RAX: ffffffffffffffda RBX: 00007f00799b5fa0 RCX: 00007f007978e169 [ 557.863811][T13988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 557.863819][T13988] RBP: 00007f0079810a68 R08: 0000000000000000 R09: 0000000000000000 [ 557.863827][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.863835][T13988] R13: 0000000000000000 R14: 00007f00799b5fa0 R15: 00007fff35680038 [ 557.863853][T13988] [ 557.863871][T13988] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 559.013257][T14004] FAULT_INJECTION: forcing a failure. [ 559.013257][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.351600][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.3.1772 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 559.351623][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 559.351632][T14004] Call Trace: [ 559.351636][T14004] [ 559.351642][T14004] dump_stack_lvl+0x16c/0x1f0 [ 559.351665][T14004] should_fail_ex+0x512/0x640 [ 559.351684][T14004] _copy_from_user+0x2e/0xd0 [ 559.351701][T14004] do_mq_notify+0x3c9/0xe60 [ 559.351716][T14004] ? __might_fault+0xe3/0x190 [ 559.351733][T14004] ? __pfx_do_mq_notify+0x10/0x10 [ 559.351751][T14004] __x64_sys_mq_notify+0x100/0x170 [ 559.351766][T14004] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 559.351785][T14004] ? rcu_is_watching+0x12/0xc0 [ 559.351801][T14004] do_syscall_64+0xcd/0x230 [ 559.351821][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.351834][T14004] RIP: 0033:0x7f8466b8e169 [ 559.351846][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.351862][T14004] RSP: 002b:00007f8467a66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 559.351875][T14004] RAX: ffffffffffffffda RBX: 00007f8466db5fa0 RCX: 00007f8466b8e169 [ 559.351884][T14004] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffffff [ 559.351892][T14004] RBP: 00007f8467a66090 R08: 0000000000000000 R09: 0000000000000000 [ 559.351900][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.351908][T14004] R13: 0000000000000000 R14: 00007f8466db5fa0 R15: 00007ffdefb53698 [ 559.351925][T14004] [ 563.120847][T13586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.162806][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.169143][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.278405][T13586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.604669][T13586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.863558][T13586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.222834][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.232296][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.240923][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.251268][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.259707][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.403355][T13586] bridge_slave_1: left allmulticast mode [ 564.426975][T13586] bridge_slave_1: left promiscuous mode [ 564.468246][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.544895][T13586] bridge_slave_0: left allmulticast mode [ 564.550557][T13586] bridge_slave_0: left promiscuous mode [ 564.631857][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.229831][T14133] sd 0:0:1:0: PR command failed: 1026 [ 565.250876][T14133] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 565.277955][T14133] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 565.631978][T13586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.647713][T13586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.659346][T13586] bond0 (unregistering): Released all slaves [ 566.204429][T13586] hsr_slave_0: left promiscuous mode [ 566.228492][T13586] hsr_slave_1: left promiscuous mode [ 566.255603][T13586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.263022][T13586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.272830][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1803'. [ 566.308479][T13586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.327576][T13586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.355185][ T5837] Bluetooth: hci0: command tx timeout [ 566.373246][T13586] veth1_macvtap: left promiscuous mode [ 566.390469][T13586] veth1_vlan: left promiscuous mode [ 566.404030][T13586] veth0_vlan: left promiscuous mode [ 567.049981][T13586] team0 (unregistering): Port device team_slave_1 removed [ 567.089294][T13586] team0 (unregistering): Port device team_slave_0 removed [ 567.990701][T14096] chnl_net:caif_netlink_parms(): no params data found [ 568.440532][ T5837] Bluetooth: hci0: command tx timeout [ 568.492935][T14185] FAULT_INJECTION: forcing a failure. [ 568.492935][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 568.587707][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.0.1808 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 568.587730][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.587739][T14185] Call Trace: [ 568.587744][T14185] [ 568.587751][T14185] dump_stack_lvl+0x16c/0x1f0 [ 568.587776][T14185] should_fail_ex+0x512/0x640 [ 568.587793][T14185] ? __kvmalloc_node_noprof+0x122/0x600 [ 568.587810][T14185] should_failslab+0xc2/0x120 [ 568.587829][T14185] __kvmalloc_node_noprof+0x135/0x600 [ 568.587844][T14185] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 568.587862][T14185] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 568.587874][T14185] file_tty_write.constprop.0+0x6ed/0x9b0 [ 568.587892][T14185] redirected_tty_write+0xd4/0x150 [ 568.587905][T14185] vfs_write+0x5ba/0x1180 [ 568.587921][T14185] ? __pfx_redirected_tty_write+0x10/0x10 [ 568.587936][T14185] ? __pfx_vfs_write+0x10/0x10 [ 568.587948][T14185] ? find_held_lock+0x2b/0x80 [ 568.587974][T14185] ksys_write+0x12a/0x240 [ 568.587987][T14185] ? __pfx_ksys_write+0x10/0x10 [ 568.588000][T14185] ? rcu_is_watching+0x12/0xc0 [ 568.588019][T14185] do_syscall_64+0xcd/0x230 [ 568.588039][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.588053][T14185] RIP: 0033:0x7fbe4538e169 [ 568.588066][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.588079][T14185] RSP: 002b:00007fbe46212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.588093][T14185] RAX: ffffffffffffffda RBX: 00007fbe455b5fa0 RCX: 00007fbe4538e169 [ 568.588102][T14185] RDX: 0000000000000013 RSI: 0000200000000000 RDI: 0000000000000003 [ 568.588110][T14185] RBP: 00007fbe46212090 R08: 0000000000000000 R09: 0000000000000000 [ 568.588117][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.588125][T14185] R13: 0000000000000000 R14: 00007fbe455b5fa0 R15: 00007ffc43dad2b8 [ 568.588142][T14185] [ 569.022778][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.022843][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.022970][T14096] bridge_slave_0: entered allmulticast mode [ 569.023944][T14096] bridge_slave_0: entered promiscuous mode [ 569.025336][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.025393][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.025476][T14096] bridge_slave_1: entered allmulticast mode [ 569.031399][T14096] bridge_slave_1: entered promiscuous mode [ 569.163265][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.174218][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.421891][T14096] team0: Port device team_slave_0 added [ 569.463700][T14096] team0: Port device team_slave_1 added [ 569.566051][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.566066][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.566092][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.567937][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.567948][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.567965][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.740824][T14096] hsr_slave_0: entered promiscuous mode [ 569.755839][T14096] hsr_slave_1: entered promiscuous mode [ 569.756271][T14096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.756318][T14096] Cannot create hsr debugfs directory [ 570.540862][ T5837] Bluetooth: hci0: command tx timeout [ 570.640140][T14096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 570.661393][T14096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 570.781833][T14096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 570.812797][T14096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 571.184922][T14096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.341485][T14096] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.461246][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.468400][T13585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.696572][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.703769][T13584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.599499][ T5837] Bluetooth: hci0: command tx timeout [ 572.896666][T14096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.943314][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 572.982699][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 573.117086][T14278] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.173554][T14278] bridge_slave_1 (unregistering): left allmulticast mode [ 573.190956][T14278] bridge_slave_1 (unregistering): left promiscuous mode [ 573.207932][T14278] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.814672][T14297] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 573.856350][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.3.1821 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 573.856375][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.856385][T14297] Call Trace: [ 573.856390][T14297] [ 573.856396][T14297] dump_stack_lvl+0x16c/0x1f0 [ 573.856422][T14297] sysfs_warn_dup+0x7f/0xa0 [ 573.856436][T14297] sysfs_create_dir_ns+0x24b/0x2b0 [ 573.856449][T14297] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 573.856461][T14297] ? find_held_lock+0x2b/0x80 [ 573.856481][T14297] ? nfs_netns_namespace+0xd/0x40 [ 573.856501][T14297] kobject_add_internal+0x2c4/0x9b0 [ 573.856524][T14297] kobject_init_and_add+0x11b/0x190 [ 573.856538][T14297] ? __pfx_kobject_init_and_add+0x10/0x10 [ 573.856561][T14297] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 573.856580][T14297] nfs_net_init+0x10a/0x300 [ 573.856600][T14297] ? __pfx_nfs_net_init+0x10/0x10 [ 573.856617][T14297] ops_init+0x1df/0x5f0 [ 573.856639][T14297] setup_net+0x21e/0x850 [ 573.856662][T14297] ? __pfx_setup_net+0x10/0x10 [ 573.856679][T14297] ? lockdep_init_map_type+0x5c/0x280 [ 573.856698][T14297] ? __pfx_down_read_killable+0x10/0x10 [ 573.856719][T14297] ? debug_mutex_init+0x37/0x70 [ 573.856737][T14297] copy_net_ns+0x2a6/0x5f0 [ 573.856759][T14297] create_new_namespaces+0x3ea/0xad0 [ 573.856781][T14297] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 573.856799][T14297] ksys_unshare+0x45b/0xa40 [ 573.856819][T14297] ? __pfx_ksys_unshare+0x10/0x10 [ 573.856837][T14297] ? xfd_validate_state+0x5d/0x180 [ 573.856852][T14297] ? syscall_user_dispatch+0x78/0x140 [ 573.856877][T14297] __x64_sys_unshare+0x31/0x40 [ 573.856895][T14297] do_syscall_64+0xcd/0x230 [ 573.856916][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.856929][T14297] RIP: 0033:0x7f8466b8e169 [ 573.856941][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.856954][T14297] RSP: 002b:00007f8467a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.856968][T14297] RAX: ffffffffffffffda RBX: 00007f8466db5fa0 RCX: 00007f8466b8e169 [ 573.856977][T14297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 573.856986][T14297] RBP: 00007f8466c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 573.856994][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.857002][T14297] R13: 0000000000000000 R14: 00007f8466db5fa0 R15: 00007ffdefb53698 [ 573.857021][T14297] [ 573.857042][T14297] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 574.134903][T14096] veth0_vlan: entered promiscuous mode [ 574.161849][T14096] veth1_vlan: entered promiscuous mode [ 574.213667][T14096] veth0_macvtap: entered promiscuous mode [ 574.250385][T14096] veth1_macvtap: entered promiscuous mode [ 574.343379][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.378484][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.410257][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.442556][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.484239][T14096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.521914][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.571173][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.618339][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.650907][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.689265][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.720674][T14308] random: crng reseeded on system resumption [ 574.733047][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.786601][T14096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.949922][T14096] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.971279][T14096] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.020850][T14096] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.063332][T14096] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.589756][T13584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.639265][T13584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.778053][T14322] FAULT_INJECTION: forcing a failure. [ 575.778053][T14322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.843388][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.3.1824 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 575.843411][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 575.843420][T14322] Call Trace: [ 575.843425][T14322] [ 575.843430][T14322] dump_stack_lvl+0x16c/0x1f0 [ 575.843453][T14322] should_fail_ex+0x512/0x640 [ 575.843479][T14322] _copy_from_user+0x2e/0xd0 [ 575.843497][T14322] copy_msghdr_from_user+0x98/0x160 [ 575.843516][T14322] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 575.843536][T14322] ? kfree+0x252/0x4d0 [ 575.843549][T14322] ? __lock_acquire+0x5ca/0x1ba0 [ 575.843570][T14322] ___sys_recvmsg+0xdb/0x1a0 [ 575.843587][T14322] ? __pfx____sys_recvmsg+0x10/0x10 [ 575.843616][T14322] ? __pfx___might_resched+0x10/0x10 [ 575.843636][T14322] do_recvmmsg+0x2fe/0x740 [ 575.843656][T14322] ? __pfx_do_recvmmsg+0x10/0x10 [ 575.843677][T14322] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 575.843701][T14322] ? __fget_files+0x20e/0x3c0 [ 575.843718][T14322] __x64_sys_recvmmsg+0x22a/0x280 [ 575.843737][T14322] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 575.843754][T14322] ? rcu_is_watching+0x12/0xc0 [ 575.843773][T14322] do_syscall_64+0xcd/0x230 [ 575.843793][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.843806][T14322] RIP: 0033:0x7f8466b8e169 [ 575.843817][T14322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.843830][T14322] RSP: 002b:00007f8467a66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 575.843844][T14322] RAX: ffffffffffffffda RBX: 00007f8466db5fa0 RCX: 00007f8466b8e169 [ 575.843853][T14322] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 575.843861][T14322] RBP: 00007f8467a66090 R08: 0000000000000000 R09: 0000000000000000 [ 575.843868][T14322] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 575.843876][T14322] R13: 0000000000000000 R14: 00007f8466db5fa0 R15: 00007ffdefb53698 [ 575.843893][T14322] [ 576.506438][T13574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.558173][T13574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.453584][T14385] FAULT_INJECTION: forcing a failure. [ 578.453584][T14385] name failslab, interval 1, probability 0, space 0, times 0 [ 578.553136][T14385] CPU: 0 UID: 0 PID: 14385 Comm: syz.0.1832 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 578.553159][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 578.553168][T14385] Call Trace: [ 578.553173][T14385] [ 578.553178][T14385] dump_stack_lvl+0x16c/0x1f0 [ 578.553212][T14385] should_fail_ex+0x512/0x640 [ 578.553228][T14385] ? fs_reclaim_acquire+0xae/0x150 [ 578.553249][T14385] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 578.553268][T14385] should_failslab+0xc2/0x120 [ 578.553286][T14385] __kmalloc_noprof+0xd2/0x510 [ 578.553306][T14385] tomoyo_realpath_from_path+0xc2/0x6e0 [ 578.553326][T14385] ? tomoyo_profile+0x47/0x60 [ 578.553349][T14385] tomoyo_path_number_perm+0x245/0x580 [ 578.553364][T14385] ? tomoyo_path_number_perm+0x237/0x580 [ 578.553381][T14385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.553398][T14385] ? find_held_lock+0x2b/0x80 [ 578.553428][T14385] ? find_held_lock+0x2b/0x80 [ 578.553441][T14385] ? hook_file_ioctl_common+0x145/0x410 [ 578.553460][T14385] ? __fget_files+0x20e/0x3c0 [ 578.553475][T14385] security_file_ioctl+0x9b/0x240 [ 578.553493][T14385] __x64_sys_ioctl+0xb7/0x200 [ 578.553513][T14385] do_syscall_64+0xcd/0x230 [ 578.553533][T14385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.553547][T14385] RIP: 0033:0x7fbe4538e169 [ 578.553558][T14385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.553572][T14385] RSP: 002b:00007fbe461f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.553585][T14385] RAX: ffffffffffffffda RBX: 00007fbe455b6080 RCX: 00007fbe4538e169 [ 578.553594][T14385] RDX: 0000200000000000 RSI: 00000000c0145401 RDI: 0000000000000003 [ 578.553602][T14385] RBP: 00007fbe461f1090 R08: 0000000000000000 R09: 0000000000000000 [ 578.553614][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.553621][T14385] R13: 0000000000000001 R14: 00007fbe455b6080 R15: 00007ffc43dad2b8 [ 578.553638][T14385] [ 578.553644][T14385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.163817][T14415] can: request_module (can-proto-0) failed. [ 580.685906][T14418] FAULT_INJECTION: forcing a failure. [ 580.685906][T14418] name failslab, interval 1, probability 0, space 0, times 0 [ 580.837931][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.2.1837 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 580.837955][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.837964][T14418] Call Trace: [ 580.837975][T14418] [ 580.837980][T14418] dump_stack_lvl+0x16c/0x1f0 [ 580.838004][T14418] should_fail_ex+0x512/0x640 [ 580.838020][T14418] ? __kmalloc_noprof+0xbf/0x510 [ 580.838038][T14418] ? constrain_params_by_rules+0x175/0xca0 [ 580.838052][T14418] should_failslab+0xc2/0x120 [ 580.838069][T14418] __kmalloc_noprof+0xd2/0x510 [ 580.838084][T14418] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.838104][T14418] constrain_params_by_rules+0x175/0xca0 [ 580.838117][T14418] ? arch_stack_walk+0xa6/0x100 [ 580.838140][T14418] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 580.838154][T14418] ? stack_trace_save+0x8e/0xc0 [ 580.838168][T14418] ? __pfx_stack_trace_save+0x10/0x10 [ 580.838184][T14418] ? stack_trace_save+0x8e/0xc0 [ 580.838202][T14418] ? snd_pcm_oss_change_params_locked+0x9cd/0x3b40 [ 580.838216][T14418] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 580.838228][T14418] ? snd_pcm_oss_sync+0x1de/0x840 [ 580.838239][T14418] ? snd_pcm_oss_release+0x28b/0x310 [ 580.838251][T14418] ? __fput+0x3ff/0xb70 [ 580.838266][T14418] ? task_work_run+0x14d/0x240 [ 580.838278][T14418] ? snd_interval_refine+0x2fa/0x580 [ 580.838297][T14418] snd_pcm_hw_refine+0x7de/0xad0 [ 580.838314][T14418] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 580.838339][T14418] snd_pcm_hw_param_first+0x334/0x6f0 [ 580.838363][T14418] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 580.838388][T14418] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 580.838411][T14418] ? snd_pcm_oss_change_params_locked+0x958/0x3b40 [ 580.838427][T14418] snd_pcm_oss_change_params_locked+0x9cd/0x3b40 [ 580.838443][T14418] ? rcu_watching_snap_stopped_since+0xe7/0x110 [ 580.838463][T14418] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 580.838478][T14418] ? __pfx___mutex_lock+0x10/0x10 [ 580.838508][T14418] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 580.838522][T14418] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 580.838534][T14418] snd_pcm_oss_sync+0x1de/0x840 [ 580.838549][T14418] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 580.838562][T14418] snd_pcm_oss_release+0x28b/0x310 [ 580.838579][T14418] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 580.838592][T14418] __fput+0x3ff/0xb70 [ 580.838612][T14418] task_work_run+0x14d/0x240 [ 580.838625][T14418] ? __pfx_task_work_run+0x10/0x10 [ 580.838638][T14418] ? do_raw_spin_unlock+0x172/0x230 [ 580.838654][T14418] do_exit+0xafb/0x2c30 [ 580.838672][T14418] ? __pfx_futex_wake_mark+0x10/0x10 [ 580.838694][T14418] ? __pfx_do_exit+0x10/0x10 [ 580.838712][T14418] ? do_raw_spin_lock+0x12c/0x2b0 [ 580.838723][T14418] ? find_held_lock+0x2b/0x80 [ 580.838740][T14418] do_group_exit+0xd3/0x2a0 [ 580.838760][T14418] get_signal+0x2673/0x26d0 [ 580.838778][T14418] ? kmem_cache_free+0x2d4/0x4d0 [ 580.838792][T14418] ? fd_install+0x225/0x750 [ 580.838807][T14418] ? __pfx_get_signal+0x10/0x10 [ 580.838823][T14418] ? do_futex+0x122/0x350 [ 580.838837][T14418] ? __pfx_do_futex+0x10/0x10 [ 580.838854][T14418] arch_do_signal_or_restart+0x8f/0x7a0 [ 580.838875][T14418] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 580.838899][T14418] ? __pfx_do_writev+0x10/0x10 [ 580.838911][T14418] ? rcu_is_watching+0x12/0xc0 [ 580.838927][T14418] syscall_exit_to_user_mode+0x150/0x2a0 [ 580.838947][T14418] do_syscall_64+0xda/0x230 [ 580.838967][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.838985][T14418] RIP: 0033:0x7f007978e169 [ 580.838996][T14418] Code: Unable to access opcode bytes at 0x7f007978e13f. [ 580.839002][T14418] RSP: 002b:00007f00775f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 580.839015][T14418] RAX: fffffffffffffe00 RBX: 00007f00799b6168 RCX: 00007f007978e169 [ 580.839024][T14418] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f00799b6168 [ 580.839032][T14418] RBP: 00007f00799b6160 R08: 0000000000000000 R09: 0000000000000000 [ 580.839041][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00799b616c [ 580.839049][T14418] R13: 0000000000000000 R14: 00007fff3567ff50 R15: 00007fff35680038 [ 580.839066][T14418] [ 581.238920][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.366629][T14412] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 585.252995][T14508] netlink: set zone limit has 4 unknown bytes [ 585.283179][T14506] FAULT_INJECTION: forcing a failure. [ 585.283179][T14506] name failslab, interval 1, probability 0, space 0, times 0 [ 585.376724][T14506] CPU: 0 UID: 0 PID: 14506 Comm: syz.3.1858 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 585.376748][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 585.376758][T14506] Call Trace: [ 585.376764][T14506] [ 585.376769][T14506] dump_stack_lvl+0x16c/0x1f0 [ 585.376794][T14506] should_fail_ex+0x512/0x640 [ 585.376812][T14506] ? __kmalloc_noprof+0xbf/0x510 [ 585.376830][T14506] ? sk_prot_alloc+0x1a8/0x2a0 [ 585.376850][T14506] should_failslab+0xc2/0x120 [ 585.376868][T14506] __kmalloc_noprof+0xd2/0x510 [ 585.376883][T14506] ? evm_inode_alloc_security+0x49/0xc0 [ 585.376908][T14506] sk_prot_alloc+0x1a8/0x2a0 [ 585.376929][T14506] sk_alloc+0x36/0xc20 [ 585.376946][T14506] __netlink_create+0x5e/0x2c0 [ 585.376963][T14506] __netlink_kernel_create+0xed/0x750 [ 585.376983][T14506] ? __pfx___netlink_kernel_create+0x10/0x10 [ 585.377000][T14506] ? find_held_lock+0x2b/0x80 [ 585.377015][T14506] ? audit_net_init+0x190/0x440 [ 585.377033][T14506] audit_net_init+0x1ae/0x440 [ 585.377048][T14506] ? __pfx_audit_net_init+0x10/0x10 [ 585.377064][T14506] ? __pfx_audit_receive+0x10/0x10 [ 585.377079][T14506] ? __pfx_audit_multicast_bind+0x10/0x10 [ 585.377095][T14506] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 585.377112][T14506] ? trace_kmalloc+0x2b/0xd0 [ 585.377134][T14506] ? __pfx_audit_net_init+0x10/0x10 [ 585.377148][T14506] ops_init+0x1df/0x5f0 [ 585.377169][T14506] setup_net+0x21e/0x850 [ 585.377189][T14506] ? __pfx_setup_net+0x10/0x10 [ 585.377206][T14506] ? lockdep_init_map_type+0x5c/0x280 [ 585.377224][T14506] ? __pfx_down_read_killable+0x10/0x10 [ 585.377239][T14506] ? debug_mutex_init+0x37/0x70 [ 585.377255][T14506] copy_net_ns+0x2a6/0x5f0 [ 585.377276][T14506] create_new_namespaces+0x3ea/0xad0 [ 585.377297][T14506] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 585.377315][T14506] ksys_unshare+0x45b/0xa40 [ 585.377334][T14506] ? __pfx_ksys_unshare+0x10/0x10 [ 585.377352][T14506] ? xfd_validate_state+0x5d/0x180 [ 585.377367][T14506] ? rcu_is_watching+0x12/0xc0 [ 585.377385][T14506] __x64_sys_unshare+0x31/0x40 [ 585.377404][T14506] do_syscall_64+0xcd/0x230 [ 585.377424][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.377438][T14506] RIP: 0033:0x7f8466b8e169 [ 585.377450][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.377462][T14506] RSP: 002b:00007f8467a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 585.377476][T14506] RAX: ffffffffffffffda RBX: 00007f8466db5fa0 RCX: 00007f8466b8e169 [ 585.377486][T14506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 585.377495][T14506] RBP: 00007f8466c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 585.377503][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.377512][T14506] R13: 0000000000000000 R14: 00007f8466db5fa0 R15: 00007ffdefb53698 [ 585.377530][T14506] [ 585.377963][T14506] audit: cannot initialize netlink socket in namespace [ 585.764000][T14510] sctp: [Deprecated]: syz.0.1860 (pid 14510) Use of int in max_burst socket option. [ 585.764000][T14510] Use struct sctp_assoc_value instead [ 585.816757][T14510] ubi0: attaching mtd0 [ 585.832007][T14510] ubi0: scanning is finished [ 585.841038][T14510] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 586.310873][T14510] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 586.351039][T14517] FAULT_INJECTION: forcing a failure. [ 586.351039][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 586.411659][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.5.1862 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 586.411683][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.411693][T14517] Call Trace: [ 586.411698][T14517] [ 586.411704][T14517] dump_stack_lvl+0x16c/0x1f0 [ 586.411729][T14517] should_fail_ex+0x512/0x640 [ 586.411750][T14517] should_failslab+0xc2/0x120 [ 586.411770][T14517] __kmalloc_cache_noprof+0x6a/0x3e0 [ 586.411786][T14517] ? proc_self_get_link+0x1a9/0x230 [ 586.411803][T14517] proc_self_get_link+0x1a9/0x230 [ 586.411817][T14517] ? __pfx_proc_self_get_link+0x10/0x10 [ 586.411830][T14517] step_into+0x19e4/0x2270 [ 586.411854][T14517] ? __pfx_step_into+0x10/0x10 [ 586.411878][T14517] ? lookup_fast+0x156/0x610 [ 586.411900][T14517] walk_component+0xfc/0x5b0 [ 586.411922][T14517] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 586.411950][T14517] path_openat+0x227/0x2d40 [ 586.411962][T14517] ? __x64_sys_openat+0x174/0x210 [ 586.411988][T14517] ? __pfx_path_openat+0x10/0x10 [ 586.412006][T14517] do_filp_open+0x20b/0x470 [ 586.412020][T14517] ? __pfx_do_filp_open+0x10/0x10 [ 586.412047][T14517] ? alloc_fd+0x471/0x7d0 [ 586.412065][T14517] do_sys_openat2+0x11b/0x1d0 [ 586.412083][T14517] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.412108][T14517] __x64_sys_openat+0x174/0x210 [ 586.412126][T14517] ? __pfx___x64_sys_openat+0x10/0x10 [ 586.412146][T14517] ? rcu_is_watching+0x12/0xc0 [ 586.412165][T14517] do_syscall_64+0xcd/0x230 [ 586.412186][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.412201][T14517] RIP: 0033:0x7f93c6f8cad0 [ 586.412212][T14517] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 586.412225][T14517] RSP: 002b:00007f93c7da3f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 586.412239][T14517] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f93c6f8cad0 [ 586.412247][T14517] RDX: 0000000000000002 RSI: 00007f93c7da3fa0 RDI: 00000000ffffff9c [ 586.412256][T14517] RBP: 00007f93c7da3fa0 R08: 0000000000000000 R09: 00007f93c7da3cd6 [ 586.412264][T14517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 586.412272][T14517] R13: 0000000000000000 R14: 00007f93c71b5fa0 R15: 00007ffe44a79598 [ 586.412289][T14517] [ 586.640938][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.039420][T14526] random: crng reseeded on system resumption [ 589.056414][T14565] can0: slcan on pty233. [ 589.118401][T14572] Invalid ELF header magic: != ELF [ 589.417892][T14562] can0 (unregistered): slcan off pty233. [ 589.869573][T14597] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[14597] [ 593.716338][T14676] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 593.832937][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.0.1891 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 593.832961][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 593.832969][T14676] Call Trace: [ 593.832974][T14676] [ 593.832980][T14676] dump_stack_lvl+0x16c/0x1f0 [ 593.833004][T14676] sysfs_warn_dup+0x7f/0xa0 [ 593.833018][T14676] sysfs_create_dir_ns+0x24b/0x2b0 [ 593.833031][T14676] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.833042][T14676] ? find_held_lock+0x2b/0x80 [ 593.833060][T14676] ? nfs_netns_namespace+0xd/0x40 [ 593.833078][T14676] kobject_add_internal+0x2c4/0x9b0 [ 593.833102][T14676] kobject_init_and_add+0x11b/0x190 [ 593.833115][T14676] ? __pfx_kobject_init_and_add+0x10/0x10 [ 593.833138][T14676] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 593.833157][T14676] nfs_net_init+0x10a/0x300 [ 593.833177][T14676] ? __pfx_nfs_net_init+0x10/0x10 [ 593.833194][T14676] ops_init+0x1df/0x5f0 [ 593.833215][T14676] setup_net+0x21e/0x850 [ 593.833235][T14676] ? __pfx_setup_net+0x10/0x10 [ 593.833251][T14676] ? lockdep_init_map_type+0x5c/0x280 [ 593.833269][T14676] ? __pfx_down_read_killable+0x10/0x10 [ 593.833284][T14676] ? debug_mutex_init+0x37/0x70 [ 593.833299][T14676] copy_net_ns+0x2a6/0x5f0 [ 593.833321][T14676] create_new_namespaces+0x3ea/0xad0 [ 593.833341][T14676] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 593.833359][T14676] ksys_unshare+0x45b/0xa40 [ 593.833378][T14676] ? __pfx_ksys_unshare+0x10/0x10 [ 593.833398][T14676] ? do_user_addr_fault+0x843/0x1370 [ 593.833417][T14676] __x64_sys_unshare+0x31/0x40 [ 593.833435][T14676] do_syscall_64+0xcd/0x230 [ 593.833455][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.833469][T14676] RIP: 0033:0x7fbe4538e169 [ 593.833480][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.833494][T14676] RSP: 002b:00007fbe461d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 593.833507][T14676] RAX: ffffffffffffffda RBX: 00007fbe455b6160 RCX: 00007fbe4538e169 [ 593.833516][T14676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 593.833524][T14676] RBP: 00007fbe45410a68 R08: 0000000000000000 R09: 0000000000000000 [ 593.833532][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.833540][T14676] R13: 0000000000000001 R14: 00007fbe455b6160 R15: 00007ffc43dad2b8 [ 593.833557][T14676] [ 593.833574][T14676] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 594.025120][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.596960][T14671] kexec: Could not allocate control_code_buffer [ 594.827231][T14685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 594.914902][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 595.064280][T14694] FAULT_INJECTION: forcing a failure. [ 595.064280][T14694] name failslab, interval 1, probability 0, space 0, times 0 [ 595.154883][T14694] CPU: 0 UID: 0 PID: 14694 Comm: syz.2.1892 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 595.154909][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 595.154918][T14694] Call Trace: [ 595.154923][T14694] [ 595.154929][T14694] dump_stack_lvl+0x16c/0x1f0 [ 595.154954][T14694] should_fail_ex+0x512/0x640 [ 595.154972][T14694] ? __kmalloc_noprof+0xbf/0x510 [ 595.154990][T14694] ? __netlink_kernel_create+0x17f/0x750 [ 595.155010][T14694] should_failslab+0xc2/0x120 [ 595.155028][T14694] __kmalloc_noprof+0xd2/0x510 [ 595.155049][T14694] __netlink_kernel_create+0x17f/0x750 [ 595.155070][T14694] ? __pfx___netlink_kernel_create+0x10/0x10 [ 595.155087][T14694] ? find_held_lock+0x2b/0x80 [ 595.155103][T14694] ? audit_net_init+0x190/0x440 [ 595.155121][T14694] audit_net_init+0x1ae/0x440 [ 595.155136][T14694] ? __pfx_audit_net_init+0x10/0x10 [ 595.155151][T14694] ? __pfx_audit_receive+0x10/0x10 [ 595.155167][T14694] ? __pfx_audit_multicast_bind+0x10/0x10 [ 595.155183][T14694] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 595.155200][T14694] ? trace_kmalloc+0x2b/0xd0 [ 595.155221][T14694] ? __pfx_audit_net_init+0x10/0x10 [ 595.155235][T14694] ops_init+0x1df/0x5f0 [ 595.155256][T14694] setup_net+0x21e/0x850 [ 595.155276][T14694] ? __pfx_setup_net+0x10/0x10 [ 595.155294][T14694] ? lockdep_init_map_type+0x5c/0x280 [ 595.155312][T14694] ? __pfx_down_read_killable+0x10/0x10 [ 595.155327][T14694] ? debug_mutex_init+0x37/0x70 [ 595.155343][T14694] copy_net_ns+0x2a6/0x5f0 [ 595.155364][T14694] create_new_namespaces+0x3ea/0xad0 [ 595.155385][T14694] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 595.155403][T14694] ksys_unshare+0x45b/0xa40 [ 595.155423][T14694] ? __pfx_ksys_unshare+0x10/0x10 [ 595.155440][T14694] ? xfd_validate_state+0x5d/0x180 [ 595.155455][T14694] ? rcu_is_watching+0x12/0xc0 [ 595.155473][T14694] __x64_sys_unshare+0x31/0x40 [ 595.155491][T14694] do_syscall_64+0xcd/0x230 [ 595.155512][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.155526][T14694] RIP: 0033:0x7f007978e169 [ 595.155538][T14694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.155551][T14694] RSP: 002b:00007f007a529038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 595.155565][T14694] RAX: ffffffffffffffda RBX: 00007f00799b6080 RCX: 00007f007978e169 [ 595.155582][T14694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 595.155591][T14694] RBP: 00007f0079810a68 R08: 0000000000000000 R09: 0000000000000000 [ 595.155599][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.155607][T14694] R13: 0000000000000000 R14: 00007f00799b6080 R15: 00007fff35680038 [ 595.155626][T14694] [ 595.157647][T14694] audit: cannot initialize netlink socket in namespace [ 597.213341][T14708] random: crng reseeded on system resumption [ 599.579397][T14776] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1902'. [ 601.940756][T14813] device-mapper: ioctl: device name cannot contain '/' [ 603.889724][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 603.996894][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 604.070196][T14872] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 242 [ 606.470465][T14928] FAULT_INJECTION: forcing a failure. [ 606.470465][T14928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.554772][T14928] CPU: 0 UID: 0 PID: 14928 Comm: syz.5.1924 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 606.554794][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.554803][T14928] Call Trace: [ 606.554808][T14928] [ 606.554813][T14928] dump_stack_lvl+0x16c/0x1f0 [ 606.554837][T14928] should_fail_ex+0x512/0x640 [ 606.554856][T14928] should_fail_alloc_page+0xe7/0x130 [ 606.554875][T14928] prepare_alloc_pages+0x3c2/0x610 [ 606.554900][T14928] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 606.554917][T14928] ? find_held_lock+0x2b/0x80 [ 606.554931][T14928] ? is_bpf_text_address+0x8a/0x1a0 [ 606.554949][T14928] ? bpf_ksym_find+0x124/0x1c0 [ 606.554962][T14928] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.554979][T14928] ? is_bpf_text_address+0x94/0x1a0 [ 606.554995][T14928] ? kernel_text_address+0x8d/0x100 [ 606.555009][T14928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.555028][T14928] ? unwind_get_return_address+0x59/0xa0 [ 606.555050][T14928] ? __lock_acquire+0x5ca/0x1ba0 [ 606.555069][T14928] ? stack_trace_save+0x8e/0xc0 [ 606.555083][T14928] ? __pfx_stack_trace_save+0x10/0x10 [ 606.555097][T14928] ? stack_depot_save_flags+0x28/0xa50 [ 606.555111][T14928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.555132][T14928] ? policy_nodemask+0xea/0x4e0 [ 606.555151][T14928] alloc_pages_mpol+0x1fb/0x550 [ 606.555168][T14928] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 606.555186][T14928] ? __lock_acquire+0xaa4/0x1ba0 [ 606.555206][T14928] folio_alloc_mpol_noprof+0x36/0x2f0 [ 606.555226][T14928] shmem_alloc_folio+0x135/0x160 [ 606.555242][T14928] shmem_alloc_and_add_folio+0x499/0xc20 [ 606.555263][T14928] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 606.555281][T14928] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 606.555301][T14928] shmem_get_folio_gfp+0x687/0x1530 [ 606.555321][T14928] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 606.555339][T14928] ? filemap_map_pages+0xf6c/0x1680 [ 606.555359][T14928] shmem_fault+0x1fe/0xa30 [ 606.555377][T14928] ? __pfx_shmem_fault+0x10/0x10 [ 606.555394][T14928] ? __kernel_text_address+0xd/0x40 [ 606.555407][T14928] ? __pfx_filemap_map_pages+0x10/0x10 [ 606.555430][T14928] __do_fault+0x10a/0x490 [ 606.555449][T14928] do_pte_missing+0x1031/0x3fb0 [ 606.555465][T14928] ? __handle_mm_fault+0x1010/0x2a40 [ 606.555488][T14928] __handle_mm_fault+0x103d/0x2a40 [ 606.555507][T14928] ? __pfx___handle_mm_fault+0x10/0x10 [ 606.555532][T14928] ? find_vma+0xbf/0x140 [ 606.555550][T14928] ? __pfx_find_vma+0x10/0x10 [ 606.555570][T14928] handle_mm_fault+0x3fe/0xad0 [ 606.555588][T14928] do_user_addr_fault+0x7a6/0x1370 [ 606.555605][T14928] ? rcu_is_watching+0x12/0xc0 [ 606.555620][T14928] exc_page_fault+0x5c/0xc0 [ 606.555638][T14928] asm_exc_page_fault+0x26/0x30 [ 606.555651][T14928] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 606.555667][T14928] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 606.555680][T14928] RSP: 0018:ffffc900052c7d78 EFLAGS: 00050216 [ 606.555692][T14928] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000020 [ 606.555700][T14928] RDX: ffffed100dd1eb44 RSI: 0000000000000000 RDI: ffff88806e8f5a00 [ 606.555709][T14928] RBP: 0000000000000020 R08: 0000000000000001 R09: ffffed100dd1eb43 [ 606.555717][T14928] R10: ffff88806e8f5a1f R11: 0000000000000000 R12: 0000000000000000 [ 606.555725][T14928] R13: ffff88806e8f5a00 R14: 0000000000000002 R15: ffff88805f2863c0 [ 606.555742][T14928] _copy_from_user+0x98/0xd0 [ 606.555761][T14928] do_mq_notify+0x3c9/0xe60 [ 606.555775][T14928] ? __might_fault+0xe3/0x190 [ 606.555791][T14928] ? __pfx_do_mq_notify+0x10/0x10 [ 606.555809][T14928] __x64_sys_mq_notify+0x100/0x170 [ 606.555824][T14928] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 606.555843][T14928] ? rcu_is_watching+0x12/0xc0 [ 606.555858][T14928] do_syscall_64+0xcd/0x230 [ 606.555877][T14928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.555890][T14928] RIP: 0033:0x7f93c6f8e169 [ 606.555901][T14928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.555913][T14928] RSP: 002b:00007f93c7da4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 606.555925][T14928] RAX: ffffffffffffffda RBX: 00007f93c71b5fa0 RCX: 00007f93c6f8e169 [ 606.555933][T14928] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 606.555941][T14928] RBP: 00007f93c7da4090 R08: 0000000000000000 R09: 0000000000000000 [ 606.555949][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.555956][T14928] R13: 0000000000000000 R14: 00007f93c71b5fa0 R15: 00007ffe44a79598 [ 606.555973][T14928] [ 607.259427][T14911] device-mapper: ioctl: device name cannot contain '/' [ 610.194306][T14986] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 612.520082][T15047] ubi0: attaching mtd0 [ 612.545154][T15047] ubi0: scanning is finished [ 612.578729][T15047] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 612.834055][T15047] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 613.102787][T15027] kexec: Could not allocate control_code_buffer [ 617.253372][T15124] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 617.260345][T15124] CPU: 0 UID: 0 PID: 15124 Comm: syz.2.1963 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 617.260369][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 617.260378][T15124] Call Trace: [ 617.260383][T15124] [ 617.260388][T15124] dump_stack_lvl+0x16c/0x1f0 [ 617.260413][T15124] sysfs_warn_dup+0x7f/0xa0 [ 617.260433][T15124] sysfs_create_dir_ns+0x24b/0x2b0 [ 617.260447][T15124] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 617.260459][T15124] ? find_held_lock+0x2b/0x80 [ 617.260478][T15124] ? nfs_netns_namespace+0xd/0x40 [ 617.260497][T15124] kobject_add_internal+0x2c4/0x9b0 [ 617.260521][T15124] kobject_init_and_add+0x11b/0x190 [ 617.260535][T15124] ? __pfx_kobject_init_and_add+0x10/0x10 [ 617.260558][T15124] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 617.260577][T15124] nfs_net_init+0x10a/0x300 [ 617.260597][T15124] ? __pfx_nfs_net_init+0x10/0x10 [ 617.260615][T15124] ops_init+0x1df/0x5f0 [ 617.260636][T15124] setup_net+0x21e/0x850 [ 617.260655][T15124] ? __pfx_setup_net+0x10/0x10 [ 617.260672][T15124] ? lockdep_init_map_type+0x5c/0x280 [ 617.260690][T15124] ? __pfx_down_read_killable+0x10/0x10 [ 617.260705][T15124] ? debug_mutex_init+0x37/0x70 [ 617.260720][T15124] copy_net_ns+0x2a6/0x5f0 [ 617.260742][T15124] create_new_namespaces+0x3ea/0xad0 [ 617.260762][T15124] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 617.260780][T15124] ksys_unshare+0x45b/0xa40 [ 617.260799][T15124] ? __pfx_ksys_unshare+0x10/0x10 [ 617.260816][T15124] ? xfd_validate_state+0x5d/0x180 [ 617.260831][T15124] ? syscall_user_dispatch+0x78/0x140 [ 617.260855][T15124] __x64_sys_unshare+0x31/0x40 [ 617.260873][T15124] do_syscall_64+0xcd/0x230 [ 617.260893][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.260907][T15124] RIP: 0033:0x7f007978e169 [ 617.260919][T15124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.260932][T15124] RSP: 002b:00007f007a54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 617.260945][T15124] RAX: ffffffffffffffda RBX: 00007f00799b5fa0 RCX: 00007f007978e169 [ 617.260954][T15124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 617.260963][T15124] RBP: 00007f0079810a68 R08: 0000000000000000 R09: 0000000000000000 [ 617.260971][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.260979][T15124] R13: 0000000000000000 R14: 00007f00799b5fa0 R15: 00007fff35680038 [ 617.260997][T15124] [ 617.591162][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 617.601405][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 618.682148][T15124] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 621.669963][T15173] kexec: Could not allocate control_code_buffer [ 622.952132][T15214] input: f¬ as /devices/virtual/input/input18 [ 624.634835][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.641133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.607342][T15313] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 633.355298][ T30] audit: type=1800 audit(6040340464.016:20): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="lu_gp_id" dev="configfs" ino=45969 res=0 errno=0 [ 633.600878][T15381] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 633.710220][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.5.2025 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 633.710245][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.710254][T15381] Call Trace: [ 633.710259][T15381] [ 633.710265][T15381] dump_stack_lvl+0x16c/0x1f0 [ 633.710290][T15381] sysfs_warn_dup+0x7f/0xa0 [ 633.710305][T15381] sysfs_create_dir_ns+0x24b/0x2b0 [ 633.710318][T15381] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.710330][T15381] ? find_held_lock+0x2b/0x80 [ 633.710349][T15381] ? nfs_netns_namespace+0xd/0x40 [ 633.710367][T15381] kobject_add_internal+0x2c4/0x9b0 [ 633.710391][T15381] kobject_init_and_add+0x11b/0x190 [ 633.710405][T15381] ? __pfx_kobject_init_and_add+0x10/0x10 [ 633.710428][T15381] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 633.710446][T15381] nfs_net_init+0x10a/0x300 [ 633.710467][T15381] ? __pfx_nfs_net_init+0x10/0x10 [ 633.710485][T15381] ops_init+0x1df/0x5f0 [ 633.710506][T15381] setup_net+0x21e/0x850 [ 633.710526][T15381] ? __pfx_setup_net+0x10/0x10 [ 633.710543][T15381] ? lockdep_init_map_type+0x5c/0x280 [ 633.710561][T15381] ? __pfx_down_read_killable+0x10/0x10 [ 633.710576][T15381] ? debug_mutex_init+0x37/0x70 [ 633.710592][T15381] copy_net_ns+0x2a6/0x5f0 [ 633.710614][T15381] create_new_namespaces+0x3ea/0xad0 [ 633.710634][T15381] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 633.710652][T15381] ksys_unshare+0x45b/0xa40 [ 633.710672][T15381] ? __pfx_ksys_unshare+0x10/0x10 [ 633.710689][T15381] ? xfd_validate_state+0x5d/0x180 [ 633.710704][T15381] ? rcu_is_watching+0x12/0xc0 [ 633.710722][T15381] __x64_sys_unshare+0x31/0x40 [ 633.710741][T15381] do_syscall_64+0xcd/0x230 [ 633.710762][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.710775][T15381] RIP: 0033:0x7f93c6f8e169 [ 633.710787][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.710802][T15381] RSP: 002b:00007f93c7da4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 633.710816][T15381] RAX: ffffffffffffffda RBX: 00007f93c71b5fa0 RCX: 00007f93c6f8e169 [ 633.710825][T15381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 633.710833][T15381] RBP: 00007f93c7010a68 R08: 0000000000000000 R09: 0000000000000000 [ 633.710841][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.710849][T15381] R13: 0000000000000000 R14: 00007f93c71b5fa0 R15: 00007ffe44a79598 [ 633.710866][T15381] [ 633.710982][T15381] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 634.752203][T15402] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 637.789046][T15448] netlink: 'syz.0.2041': attribute type 1 has an invalid length. [ 642.323996][T15493] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 645.748879][ T30] audit: type=1800 audit(6040340476.400:21): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2057" name="lu_gp_id" dev="configfs" ino=46477 res=0 errno=0 [ 655.414248][ T30] audit: type=1800 audit(6040340486.065:22): pid=15603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2080" name="lu_gp_id" dev="configfs" ino=46964 res=0 errno=0 [ 659.166335][T15670] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 659.214448][T15670] CPU: 0 UID: 0 PID: 15670 Comm: syz.2.2098 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 659.214473][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 659.214482][T15670] Call Trace: [ 659.214487][T15670] [ 659.214494][T15670] dump_stack_lvl+0x16c/0x1f0 [ 659.214519][T15670] sysfs_warn_dup+0x7f/0xa0 [ 659.214534][T15670] sysfs_create_dir_ns+0x24b/0x2b0 [ 659.214547][T15670] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 659.214559][T15670] ? find_held_lock+0x2b/0x80 [ 659.214578][T15670] ? nfs_netns_namespace+0xd/0x40 [ 659.214599][T15670] kobject_add_internal+0x2c4/0x9b0 [ 659.214623][T15670] kobject_init_and_add+0x11b/0x190 [ 659.214637][T15670] ? __pfx_kobject_init_and_add+0x10/0x10 [ 659.214660][T15670] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 659.214679][T15670] nfs_net_init+0x10a/0x300 [ 659.214699][T15670] ? __pfx_nfs_net_init+0x10/0x10 [ 659.214717][T15670] ops_init+0x1df/0x5f0 [ 659.214738][T15670] setup_net+0x21e/0x850 [ 659.214758][T15670] ? __pfx_setup_net+0x10/0x10 [ 659.214775][T15670] ? lockdep_init_map_type+0x5c/0x280 [ 659.214794][T15670] ? __pfx_down_read_killable+0x10/0x10 [ 659.214809][T15670] ? debug_mutex_init+0x37/0x70 [ 659.214826][T15670] copy_net_ns+0x2a6/0x5f0 [ 659.214848][T15670] create_new_namespaces+0x3ea/0xad0 [ 659.214869][T15670] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 659.214886][T15670] ksys_unshare+0x45b/0xa40 [ 659.214906][T15670] ? __pfx_ksys_unshare+0x10/0x10 [ 659.214923][T15670] ? xfd_validate_state+0x5d/0x180 [ 659.214938][T15670] ? syscall_user_dispatch+0x78/0x140 [ 659.214963][T15670] __x64_sys_unshare+0x31/0x40 [ 659.214981][T15670] do_syscall_64+0xcd/0x230 [ 659.215002][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.215016][T15670] RIP: 0033:0x7f007978e169 [ 659.215029][T15670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.215045][T15670] RSP: 002b:00007f007a54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 659.215060][T15670] RAX: ffffffffffffffda RBX: 00007f00799b5fa0 RCX: 00007f007978e169 [ 659.215069][T15670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 659.215078][T15670] RBP: 00007f0079810a68 R08: 0000000000000000 R09: 0000000000000000 [ 659.215086][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.215094][T15670] R13: 0000000000000000 R14: 00007f00799b5fa0 R15: 00007fff35680038 [ 659.215113][T15670] [ 659.215148][T15670] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 663.527595][ T5837] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 665.611305][T15775] Invalid ELF header magic: != ELF [ 666.017377][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 666.239089][T15778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2125'. [ 666.301578][T15778] geneve1: entered promiscuous mode [ 666.366655][T15778] geneve1: entered allmulticast mode [ 668.580295][T15824] FAULT_INJECTION: forcing a failure. [ 668.580295][T15824] name failslab, interval 1, probability 0, space 0, times 0 [ 668.632389][T15824] CPU: 0 UID: 0 PID: 15824 Comm: syz.0.2133 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 668.632412][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 668.632420][T15824] Call Trace: [ 668.632425][T15824] [ 668.632431][T15824] dump_stack_lvl+0x16c/0x1f0 [ 668.632455][T15824] should_fail_ex+0x512/0x640 [ 668.632478][T15824] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 668.632497][T15824] should_failslab+0xc2/0x120 [ 668.632515][T15824] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 668.632530][T15824] ? trace_cap_capable+0x18d/0x200 [ 668.632544][T15824] ? create_new_namespaces+0x30/0xad0 [ 668.632564][T15824] create_new_namespaces+0x30/0xad0 [ 668.632578][T15824] ? bpf_lsm_capable+0x9/0x10 [ 668.632593][T15824] ? security_capable+0x7e/0x260 [ 668.632609][T15824] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 668.632626][T15824] ksys_unshare+0x45b/0xa40 [ 668.632646][T15824] ? __pfx_ksys_unshare+0x10/0x10 [ 668.632665][T15824] ? syscall_user_dispatch+0x78/0x140 [ 668.632690][T15824] __x64_sys_unshare+0x31/0x40 [ 668.632708][T15824] do_syscall_64+0xcd/0x230 [ 668.632728][T15824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.632741][T15824] RIP: 0033:0x7fbe4538e169 [ 668.632753][T15824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.632765][T15824] RSP: 002b:00007fbe46212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 668.632779][T15824] RAX: ffffffffffffffda RBX: 00007fbe455b5fa0 RCX: 00007fbe4538e169 [ 668.632788][T15824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 668.632796][T15824] RBP: 00007fbe46212090 R08: 0000000000000000 R09: 0000000000000000 [ 668.632804][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.632811][T15824] R13: 0000000000000000 R14: 00007fbe455b5fa0 R15: 00007ffc43dad2b8 [ 668.632828][T15824] [ 669.082919][ T30] audit: type=1800 audit(6040340499.658:23): pid=15828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2134" name="lu_gp_id" dev="configfs" ino=47980 res=0 errno=0 [ 670.325290][ T30] audit: type=1800 audit(6040340500.958:24): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2147" name="lu_gp_id" dev="configfs" ino=48190 res=0 errno=0 [ 671.221391][T15879] netlink: 'syz.5.2152': attribute type 1 has an invalid length. [ 672.089425][ T30] audit: type=1800 audit(6040340502.737:25): pid=15904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2157" name="lu_gp_id" dev="configfs" ino=48352 res=0 errno=0 [ 673.053073][T15917] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 673.117534][T15917] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 673.271840][T15917] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 674.128231][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2168'. [ 674.393725][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 674.402643][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.413536][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.424540][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.432026][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.520350][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.588808][T15944] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 674.629124][T15944] CPU: 0 UID: 0 PID: 15944 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 674.629146][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.629155][T15944] Call Trace: [ 674.629160][T15944] [ 674.629166][T15944] dump_stack_lvl+0x16c/0x1f0 [ 674.629188][T15944] sysfs_warn_dup+0x7f/0xa0 [ 674.629202][T15944] sysfs_create_dir_ns+0x24b/0x2b0 [ 674.629215][T15944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 674.629227][T15944] ? find_held_lock+0x2b/0x80 [ 674.629244][T15944] ? nfs_netns_namespace+0xd/0x40 [ 674.629263][T15944] kobject_add_internal+0x2c4/0x9b0 [ 674.629287][T15944] kobject_init_and_add+0x11b/0x190 [ 674.629300][T15944] ? __pfx_kobject_init_and_add+0x10/0x10 [ 674.629323][T15944] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 674.629341][T15944] nfs_net_init+0x10a/0x300 [ 674.629361][T15944] ? __pfx_nfs_net_init+0x10/0x10 [ 674.629379][T15944] ops_init+0x1df/0x5f0 [ 674.629399][T15944] setup_net+0x21e/0x850 [ 674.629419][T15944] ? __pfx_setup_net+0x10/0x10 [ 674.629436][T15944] ? lockdep_init_map_type+0x5c/0x280 [ 674.629454][T15944] ? __pfx_down_read_killable+0x10/0x10 [ 674.629469][T15944] ? debug_mutex_init+0x37/0x70 [ 674.629484][T15944] copy_net_ns+0x2a6/0x5f0 [ 674.629506][T15944] create_new_namespaces+0x3ea/0xad0 [ 674.629526][T15944] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 674.629543][T15944] ksys_unshare+0x45b/0xa40 [ 674.629563][T15944] ? __pfx_ksys_unshare+0x10/0x10 [ 674.629581][T15944] ? __pfx_fput_close_sync+0x10/0x10 [ 674.629605][T15944] __x64_sys_unshare+0x31/0x40 [ 674.629623][T15944] do_syscall_64+0xcd/0x230 [ 674.629643][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.629657][T15944] RIP: 0033:0x7fa97118f967 [ 674.629669][T15944] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.629682][T15944] RSP: 002b:00007fff0e22a918 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 674.629695][T15944] RAX: ffffffffffffffda RBX: 00007fa9713b5f40 RCX: 00007fa97118f967 [ 674.629704][T15944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 674.629713][T15944] RBP: 00007fa9713b6738 R08: 0000000000000000 R09: 0000000000000000 [ 674.629721][T15944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 674.629728][T15944] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 674.629745][T15944] [ 674.629762][T15944] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 675.004435][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.266207][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.335507][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.493022][ T55] Bluetooth: hci1: command tx timeout [ 677.026301][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.049159][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.076921][ T12] bond0 (unregistering): Released all slaves [ 677.615632][T15944] chnl_net:caif_netlink_parms(): no params data found [ 678.318227][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.378275][T15944] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.425041][T15944] bridge_slave_0: entered allmulticast mode [ 678.477447][T15944] bridge_slave_0: entered promiscuous mode [ 678.537472][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.571346][ T55] Bluetooth: hci1: command tx timeout [ 678.590577][T15944] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.642834][T15944] bridge_slave_1: entered allmulticast mode [ 678.698141][T15944] bridge_slave_1: entered promiscuous mode [ 678.772501][ T12] hsr_slave_0: left promiscuous mode [ 678.826225][ T12] hsr_slave_1: left promiscuous mode [ 678.853672][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.908551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.947205][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.055644][ T12] veth1_macvtap: left promiscuous mode [ 679.088714][ T12] veth0_macvtap: left promiscuous mode [ 680.652238][ T55] Bluetooth: hci1: command tx timeout [ 681.018828][ T12] team0 (unregistering): Port device team_slave_1 removed [ 681.127030][ T12] team0 (unregistering): Port device team_slave_0 removed [ 682.236826][T15944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.330322][T15944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.539548][T15944] team0: Port device team_slave_0 added [ 682.633994][T15944] team0: Port device team_slave_1 added [ 682.740153][ T55] Bluetooth: hci1: command tx timeout [ 682.872637][T15944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.901629][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.036803][T15944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.268861][T15944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.298610][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.400382][T15944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.804181][T15944] hsr_slave_0: entered promiscuous mode [ 683.811709][T15944] hsr_slave_1: entered promiscuous mode [ 683.830482][T15944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.855315][T15944] Cannot create hsr debugfs directory [ 684.327833][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 684.395569][T16096] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 685.621906][T15944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 685.709024][T15944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.957636][T15944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.007301][T15944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 686.105857][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.112152][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.517488][T15944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.796069][T15944] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.910825][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.917987][T13584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.023806][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.030955][T13584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.975592][T15944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.149682][T15944] veth0_vlan: entered promiscuous mode [ 688.176293][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 688.203318][T15944] veth1_vlan: entered promiscuous mode [ 688.295020][T15944] veth0_macvtap: entered promiscuous mode [ 688.339384][T15944] veth1_macvtap: entered promiscuous mode [ 688.411353][T16186] FAULT_INJECTION: forcing a failure. [ 688.411353][T16186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.426765][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.451995][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.466326][T16186] CPU: 0 UID: 0 PID: 16186 Comm: syz.0.2204 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 688.466350][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 688.466359][T16186] Call Trace: [ 688.466364][T16186] [ 688.466370][T16186] dump_stack_lvl+0x16c/0x1f0 [ 688.466396][T16186] should_fail_ex+0x512/0x640 [ 688.466416][T16186] _copy_to_user+0x32/0xd0 [ 688.466435][T16186] simple_read_from_buffer+0xcb/0x170 [ 688.466457][T16186] proc_fail_nth_read+0x197/0x270 [ 688.466477][T16186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.466498][T16186] ? rw_verify_area+0xcf/0x680 [ 688.466517][T16186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.466536][T16186] vfs_read+0x1de/0xc70 [ 688.466560][T16186] ? __pfx___mutex_lock+0x10/0x10 [ 688.466579][T16186] ? __pfx_vfs_read+0x10/0x10 [ 688.466598][T16186] ? __fget_files+0x20e/0x3c0 [ 688.466616][T16186] ksys_read+0x12a/0x240 [ 688.466629][T16186] ? __pfx_ksys_read+0x10/0x10 [ 688.466641][T16186] ? rcu_is_watching+0x12/0xc0 [ 688.466661][T16186] do_syscall_64+0xcd/0x230 [ 688.466680][T16186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.466695][T16186] RIP: 0033:0x7fbe4538cb7c [ 688.466707][T16186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 688.466720][T16186] RSP: 002b:00007fbe46212030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.466734][T16186] RAX: ffffffffffffffda RBX: 00007fbe455b5fa0 RCX: 00007fbe4538cb7c [ 688.466743][T16186] RDX: 000000000000000f RSI: 00007fbe462120a0 RDI: 0000000000000004 [ 688.466751][T16186] RBP: 00007fbe46212090 R08: 0000000000000000 R09: 0000000000000000 [ 688.466758][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.466766][T16186] R13: 0000000000000000 R14: 00007fbe455b5fa0 R15: 00007ffc43dad2b8 [ 688.466783][T16186] [ 688.686464][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.697006][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.706963][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.717432][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.729378][T15944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.738541][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.749023][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.758892][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.769316][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.779121][T15944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.790011][T15944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.800737][T15944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.810082][T15944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.819180][T15944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.827908][T15944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.837096][T15944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.958896][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 689.381895][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.426304][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.585484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.624229][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.039764][T16220] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 692.916845][T16262] kexec: Could not allocate control_code_buffer [ 699.205902][ T30] audit: type=1800 audit(6040340529.833:26): pid=16431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2249" name="lu_gp_id" dev="configfs" ino=51090 res=0 errno=0 [ 703.097210][T16487] netlink: 'syz.5.2264': attribute type 1 has an invalid length. [ 703.853873][T16503] FAULT_INJECTION: forcing a failure. [ 703.853873][T16503] name failslab, interval 1, probability 0, space 0, times 0 [ 703.969429][T16503] CPU: 0 UID: 0 PID: 16503 Comm: syz.5.2265 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 703.969454][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 703.969464][T16503] Call Trace: [ 703.969470][T16503] [ 703.969476][T16503] dump_stack_lvl+0x16c/0x1f0 [ 703.969502][T16503] should_fail_ex+0x512/0x640 [ 703.969519][T16503] ? __kmalloc_noprof+0xbf/0x510 [ 703.969537][T16503] ? __register_sysctl_table+0xb3/0x1900 [ 703.969553][T16503] should_failslab+0xc2/0x120 [ 703.969571][T16503] __kmalloc_noprof+0xd2/0x510 [ 703.969591][T16503] __register_sysctl_table+0xb3/0x1900 [ 703.969608][T16503] ? is_module_address+0x5f/0xf0 [ 703.969629][T16503] ? __pfx___register_sysctl_table+0x10/0x10 [ 703.969644][T16503] ? is_module_address+0x69/0xf0 [ 703.969661][T16503] ? register_net_sysctl_sz+0x228/0x3e0 [ 703.969683][T16503] ? __asan_memcpy+0x3c/0x60 [ 703.969698][T16503] nf_log_net_init+0x109/0x450 [ 703.969717][T16503] ? __pfx_nf_log_net_init+0x10/0x10 [ 703.969733][T16503] ops_init+0x1df/0x5f0 [ 703.969755][T16503] setup_net+0x21e/0x850 [ 703.969775][T16503] ? __pfx_setup_net+0x10/0x10 [ 703.969791][T16503] ? lockdep_init_map_type+0x5c/0x280 [ 703.969810][T16503] ? __pfx_down_read_killable+0x10/0x10 [ 703.969825][T16503] ? debug_mutex_init+0x37/0x70 [ 703.969840][T16503] copy_net_ns+0x2a6/0x5f0 [ 703.969862][T16503] create_new_namespaces+0x3ea/0xad0 [ 703.969883][T16503] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 703.969900][T16503] ksys_unshare+0x45b/0xa40 [ 703.969920][T16503] ? __pfx_ksys_unshare+0x10/0x10 [ 703.969937][T16503] ? xfd_validate_state+0x5d/0x180 [ 703.969952][T16503] ? rcu_is_watching+0x12/0xc0 [ 703.969970][T16503] __x64_sys_unshare+0x31/0x40 [ 703.969988][T16503] do_syscall_64+0xcd/0x230 [ 703.970008][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.970023][T16503] RIP: 0033:0x7f93c6f8e169 [ 703.970035][T16503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.970048][T16503] RSP: 002b:00007f93c7d83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 703.970062][T16503] RAX: ffffffffffffffda RBX: 00007f93c71b6080 RCX: 00007f93c6f8e169 [ 703.970071][T16503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 703.970079][T16503] RBP: 00007f93c7010a68 R08: 0000000000000000 R09: 0000000000000000 [ 703.970088][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.970096][T16503] R13: 0000000000000000 R14: 00007f93c71b6080 R15: 00007ffe44a79598 [ 703.970114][T16503] [ 705.347948][T16485] kexec: Could not allocate control_code_buffer [ 705.621187][ T30] audit: type=1800 audit(6040340536.230:27): pid=16514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2269" name="lu_gp_id" dev="configfs" ino=51468 res=0 errno=0 [ 705.961761][T16520] FAULT_INJECTION: forcing a failure. [ 705.961761][T16520] name failslab, interval 1, probability 0, space 0, times 0 [ 706.032045][T16520] CPU: 0 UID: 5 PID: 16520 Comm: syz.2.2271 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 706.032072][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 706.032081][T16520] Call Trace: [ 706.032086][T16520] [ 706.032093][T16520] dump_stack_lvl+0x16c/0x1f0 [ 706.032118][T16520] should_fail_ex+0x512/0x640 [ 706.032135][T16520] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 706.032152][T16520] should_failslab+0xc2/0x120 [ 706.032171][T16520] __kmalloc_cache_noprof+0x6a/0x3e0 [ 706.032186][T16520] ? snd_seq_oss_open+0x55/0xa20 [ 706.032209][T16520] snd_seq_oss_open+0x55/0xa20 [ 706.032232][T16520] odev_open+0x6f/0x90 [ 706.032250][T16520] ? __pfx_odev_open+0x10/0x10 [ 706.032267][T16520] soundcore_open+0x409/0x580 [ 706.032288][T16520] ? __pfx_soundcore_open+0x10/0x10 [ 706.032305][T16520] chrdev_open+0x231/0x6a0 [ 706.032320][T16520] ? __pfx_apparmor_file_open+0x10/0x10 [ 706.032338][T16520] ? __pfx_chrdev_open+0x10/0x10 [ 706.032354][T16520] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 706.032378][T16520] do_dentry_open+0x741/0x1c10 [ 706.032393][T16520] ? __pfx_chrdev_open+0x10/0x10 [ 706.032411][T16520] vfs_open+0x82/0x3f0 [ 706.032432][T16520] path_openat+0x1e5e/0x2d40 [ 706.032453][T16520] ? __pfx_path_openat+0x10/0x10 [ 706.032471][T16520] do_filp_open+0x20b/0x470 [ 706.032486][T16520] ? __pfx_do_filp_open+0x10/0x10 [ 706.032513][T16520] ? alloc_fd+0x471/0x7d0 [ 706.032531][T16520] do_sys_openat2+0x11b/0x1d0 [ 706.032548][T16520] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.032573][T16520] __x64_sys_openat+0x174/0x210 [ 706.032592][T16520] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.032612][T16520] ? rcu_is_watching+0x12/0xc0 [ 706.032631][T16520] do_syscall_64+0xcd/0x230 [ 706.032651][T16520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.032665][T16520] RIP: 0033:0x7f007978e169 [ 706.032678][T16520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.032692][T16520] RSP: 002b:00007f007a54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.032706][T16520] RAX: ffffffffffffffda RBX: 00007f00799b5fa0 RCX: 00007f007978e169 [ 706.032715][T16520] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 706.032724][T16520] RBP: 00007f0079810a68 R08: 0000000000000000 R09: 0000000000000000 [ 706.032732][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.032741][T16520] R13: 0000000000000000 R14: 00007f00799b5fa0 R15: 00007fff35680038 [ 706.032759][T16520] [ 706.438207][T16527] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 711.744614][T16630] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 715.905633][T16678] FAULT_INJECTION: forcing a failure. [ 715.905633][T16678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.039902][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.2.2309 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 716.039926][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 716.039935][T16678] Call Trace: [ 716.039940][T16678] [ 716.039945][T16678] dump_stack_lvl+0x16c/0x1f0 [ 716.039970][T16678] should_fail_ex+0x512/0x640 [ 716.039989][T16678] _copy_from_iter+0x2a4/0x15b0 [ 716.040011][T16678] ? __pfx__copy_from_iter+0x10/0x10 [ 716.040026][T16678] ? rcu_is_watching+0x12/0xc0 [ 716.040041][T16678] ? trace_kmalloc+0x2b/0xd0 [ 716.040058][T16678] ? __kvmalloc_node_noprof+0x296/0x600 [ 716.040074][T16678] ? proc_sys_call_handler+0x2a6/0x5c0 [ 716.040088][T16678] ? ns_capable_noaudit+0xda/0x110 [ 716.040108][T16678] proc_sys_call_handler+0x317/0x5c0 [ 716.040125][T16678] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 716.040147][T16678] vfs_write+0x5ba/0x1180 [ 716.040162][T16678] ? __pfx_proc_sys_write+0x10/0x10 [ 716.040178][T16678] ? __pfx_vfs_write+0x10/0x10 [ 716.040190][T16678] ? find_held_lock+0x2b/0x80 [ 716.040215][T16678] __x64_sys_pwrite64+0x1f4/0x250 [ 716.040231][T16678] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 716.040244][T16678] ? syscall_user_dispatch+0x78/0x140 [ 716.040270][T16678] do_syscall_64+0xcd/0x230 [ 716.040290][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.040304][T16678] RIP: 0033:0x7f007978e169 [ 716.040315][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.040329][T16678] RSP: 002b:00007f007a54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 716.040342][T16678] RAX: ffffffffffffffda RBX: 00007f00799b5fa0 RCX: 00007f007978e169 [ 716.040351][T16678] RDX: 00000000000006bc RSI: 0000200000000000 RDI: 0000000000000005 [ 716.040359][T16678] RBP: 00007f007a54a090 R08: 0000000000000000 R09: 0000000000000000 [ 716.040367][T16678] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 716.040375][T16678] R13: 0000000000000000 R14: 00007f00799b5fa0 R15: 00007fff35680038 [ 716.040392][T16678] [ 716.361305][T16679] Invalid ELF header magic: != ELF [ 718.476545][T16714] FAULT_INJECTION: forcing a failure. [ 718.476545][T16714] name failslab, interval 1, probability 0, space 0, times 0 [ 718.645054][T16714] CPU: 0 UID: 0 PID: 16714 Comm: syz.0.2315 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 718.645080][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 718.645089][T16714] Call Trace: [ 718.645094][T16714] [ 718.645101][T16714] dump_stack_lvl+0x16c/0x1f0 [ 718.645126][T16714] should_fail_ex+0x512/0x640 [ 718.645143][T16714] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 718.645162][T16714] should_failslab+0xc2/0x120 [ 718.645181][T16714] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 718.645197][T16714] ? __kernfs_new_node+0xd2/0x8a0 [ 718.645213][T16714] __kernfs_new_node+0xd2/0x8a0 [ 718.645229][T16714] ? __pfx___kernfs_new_node+0x10/0x10 [ 718.645247][T16714] ? find_held_lock+0x2b/0x80 [ 718.645262][T16714] ? kernfs_root+0xee/0x2a0 [ 718.645279][T16714] kernfs_new_node+0x13c/0x1e0 [ 718.645294][T16714] ? net_ns_get_ownership+0xf8/0x1b0 [ 718.645315][T16714] kernfs_create_dir_ns+0x4c/0x1a0 [ 718.645333][T16714] sysfs_create_dir_ns+0x13a/0x2b0 [ 718.645347][T16714] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 718.645359][T16714] ? find_held_lock+0x2b/0x80 [ 718.645375][T16714] ? net_namespace+0x12/0x50 [ 718.645394][T16714] ? device_namespace+0x76/0xa0 [ 718.645409][T16714] kobject_add_internal+0x2c4/0x9b0 [ 718.645433][T16714] kobject_add+0x16e/0x240 [ 718.645446][T16714] ? __pfx_kobject_add+0x10/0x10 [ 718.645459][T16714] ? get_device_parent+0x1c5/0x4e0 [ 718.645472][T16714] ? kobject_put+0xab/0x5a0 [ 718.645496][T16714] device_add+0x288/0x1a70 [ 718.645510][T16714] ? __pfx_dev_set_name+0x10/0x10 [ 718.645526][T16714] ? __pfx_device_add+0x10/0x10 [ 718.645541][T16714] ? lockdep_init_map_type+0x5c/0x280 [ 718.645560][T16714] ? __init_waitqueue_head+0xca/0x150 [ 718.645577][T16714] netdev_register_kobject+0x182/0x3a0 [ 718.645600][T16714] register_netdevice+0x13dc/0x2270 [ 718.645623][T16714] ? __pfx_register_netdevice+0x10/0x10 [ 718.645651][T16714] ? alloc_netdev_mqs+0xe7e/0x1570 [ 718.645672][T16714] ? __pfx_loopback_net_init+0x10/0x10 [ 718.645687][T16714] register_netdev+0x34/0x50 [ 718.645707][T16714] loopback_net_init+0x7a/0x170 [ 718.645721][T16714] ? __pfx_loopback_net_init+0x10/0x10 [ 718.645733][T16714] ops_init+0x1df/0x5f0 [ 718.645754][T16714] setup_net+0x21e/0x850 [ 718.645774][T16714] ? __pfx_setup_net+0x10/0x10 [ 718.645791][T16714] ? lockdep_init_map_type+0x5c/0x280 [ 718.645810][T16714] ? __pfx_down_read_killable+0x10/0x10 [ 718.645825][T16714] ? debug_mutex_init+0x37/0x70 [ 718.645840][T16714] copy_net_ns+0x2a6/0x5f0 [ 718.645862][T16714] create_new_namespaces+0x3ea/0xad0 [ 718.645883][T16714] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 718.645900][T16714] ksys_unshare+0x45b/0xa40 [ 718.645920][T16714] ? __pfx_ksys_unshare+0x10/0x10 [ 718.645937][T16714] ? xfd_validate_state+0x5d/0x180 [ 718.645953][T16714] ? rcu_is_watching+0x12/0xc0 [ 718.645971][T16714] __x64_sys_unshare+0x31/0x40 [ 718.645989][T16714] do_syscall_64+0xcd/0x230 [ 718.646010][T16714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.646024][T16714] RIP: 0033:0x7fbe4538e169 [ 718.646036][T16714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.646050][T16714] RSP: 002b:00007fbe46212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 718.646064][T16714] RAX: ffffffffffffffda RBX: 00007fbe455b5fa0 RCX: 00007fbe4538e169 [ 718.646074][T16714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 718.646086][T16714] RBP: 00007fbe45410a68 R08: 0000000000000000 R09: 0000000000000000 [ 718.646094][T16714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.646102][T16714] R13: 0000000000000000 R14: 00007fbe455b5fa0 R15: 00007ffc43dad2b8 [ 718.646119][T16714] [ 719.402848][T16714] kobject: kobject_add_internal failed for lo (error: -12 parent: net) [ 720.484177][T16735] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2321'. [ 721.158823][ T30] audit: type=1800 audit(6040340551.772:28): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2325" name="lu_gp_id" dev="configfs" ino=52644 res=0 errno=0 [ 722.986247][T16770] warning: `syz.3.2330' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 727.270013][T16841] FAULT_INJECTION: forcing a failure. [ 727.270013][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 727.375581][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.5.2350 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 727.375604][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 727.375612][T16841] Call Trace: [ 727.375617][T16841] [ 727.375623][T16841] dump_stack_lvl+0x16c/0x1f0 [ 727.375647][T16841] should_fail_ex+0x512/0x640 [ 727.375663][T16841] ? fs_reclaim_acquire+0xae/0x150 [ 727.375685][T16841] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 727.375704][T16841] should_failslab+0xc2/0x120 [ 727.375722][T16841] __kmalloc_noprof+0xd2/0x510 [ 727.375742][T16841] tomoyo_realpath_from_path+0xc2/0x6e0 [ 727.375762][T16841] ? tomoyo_profile+0x47/0x60 [ 727.375784][T16841] tomoyo_path_number_perm+0x245/0x580 [ 727.375799][T16841] ? tomoyo_path_number_perm+0x237/0x580 [ 727.375823][T16841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 727.375840][T16841] ? find_held_lock+0x2b/0x80 [ 727.375870][T16841] ? find_held_lock+0x2b/0x80 [ 727.375883][T16841] ? hook_file_ioctl_common+0x145/0x410 [ 727.375902][T16841] ? __fget_files+0x20e/0x3c0 [ 727.375918][T16841] security_file_ioctl+0x9b/0x240 [ 727.375936][T16841] __x64_sys_ioctl+0xb7/0x200 [ 727.375956][T16841] do_syscall_64+0xcd/0x230 [ 727.375976][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.375990][T16841] RIP: 0033:0x7f93c6f8e169 [ 727.376001][T16841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.376014][T16841] RSP: 002b:00007f93c7da4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.376028][T16841] RAX: ffffffffffffffda RBX: 00007f93c71b5fa0 RCX: 00007f93c6f8e169 [ 727.376037][T16841] RDX: 0000000000000038 RSI: 000000004010ae67 RDI: 0000000000000003 [ 727.376045][T16841] RBP: 00007f93c7da4090 R08: 0000000000000000 R09: 0000000000000000 [ 727.376053][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.376061][T16841] R13: 0000000000000000 R14: 00007f93c71b5fa0 R15: 00007ffe44a79598 [ 727.376078][T16841] [ 727.376581][T16841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 728.292212][T16850] FAULT_INJECTION: forcing a failure. [ 728.292212][T16850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.356460][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.3.2353 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 728.356483][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 728.356493][T16850] Call Trace: [ 728.356497][T16850] [ 728.356503][T16850] dump_stack_lvl+0x16c/0x1f0 [ 728.356527][T16850] should_fail_ex+0x512/0x640 [ 728.356546][T16850] _copy_from_user+0x2e/0xd0 [ 728.356564][T16850] copy_msghdr_from_user+0x98/0x160 [ 728.356583][T16850] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 728.356604][T16850] ? __pfx__kstrtoull+0x10/0x10 [ 728.356627][T16850] ___sys_sendmsg+0xfe/0x1d0 [ 728.356645][T16850] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.356670][T16850] ? find_held_lock+0x2b/0x80 [ 728.356695][T16850] __sys_sendmmsg+0x200/0x420 [ 728.356715][T16850] ? __pfx___sys_sendmmsg+0x10/0x10 [ 728.356744][T16850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.356770][T16850] ? fput+0x70/0xf0 [ 728.356786][T16850] ? ksys_write+0x1b9/0x240 [ 728.356800][T16850] ? __pfx_ksys_write+0x10/0x10 [ 728.356812][T16850] ? rcu_is_watching+0x12/0xc0 [ 728.356829][T16850] __x64_sys_sendmmsg+0x9c/0x100 [ 728.356846][T16850] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.356863][T16850] do_syscall_64+0xcd/0x230 [ 728.356883][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.356897][T16850] RIP: 0033:0x7fa97118e169 [ 728.356909][T16850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.356921][T16850] RSP: 002b:00007fa972097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 728.356934][T16850] RAX: ffffffffffffffda RBX: 00007fa9713b5fa0 RCX: 00007fa97118e169 [ 728.356943][T16850] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 728.356951][T16850] RBP: 00007fa972097090 R08: 0000000000000000 R09: 0000000000000000 [ 728.356959][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.356967][T16850] R13: 0000000000000000 R14: 00007fa9713b5fa0 R15: 00007fff0e22a398 [ 728.356983][T16850] [ 730.448623][T16888] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2362'. [ 735.832237][ T30] audit: type=1800 audit(6040340566.445:29): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2379" name="lu_gp_id" dev="configfs" ino=53701 res=0 errno=0 [ 736.082890][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 736.094429][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 736.102809][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 736.112528][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 736.123226][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 737.334779][T16972] chnl_net:caif_netlink_parms(): no params data found [ 737.768154][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.795732][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.816195][T16972] bridge_slave_0: entered allmulticast mode [ 737.834093][T16972] bridge_slave_0: entered promiscuous mode [ 737.863399][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.882705][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.900906][T16972] bridge_slave_1: entered allmulticast mode [ 737.920185][T16972] bridge_slave_1: entered promiscuous mode [ 738.002832][T16972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.050144][T16972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.190181][T16972] team0: Port device team_slave_0 added [ 738.203711][ T55] Bluetooth: hci4: command tx timeout [ 738.237203][T16972] team0: Port device team_slave_1 added [ 738.328662][T16972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.359439][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.459978][T16972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.505014][T16972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.564418][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.633495][T17013] netlink: 'syz.3.2388': attribute type 1 has an invalid length. [ 738.676922][T16972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.854669][T16972] hsr_slave_0: entered promiscuous mode [ 738.882533][T16972] hsr_slave_1: entered promiscuous mode [ 738.896793][T17017] FAULT_INJECTION: forcing a failure. [ 738.896793][T17017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.923748][T16972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.959855][T16972] Cannot create hsr debugfs directory [ 738.989853][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.3.2389 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 738.989878][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 738.989887][T17017] Call Trace: [ 738.989893][T17017] [ 738.989899][T17017] dump_stack_lvl+0x16c/0x1f0 [ 738.989924][T17017] should_fail_ex+0x512/0x640 [ 738.989944][T17017] should_fail_alloc_page+0xe7/0x130 [ 738.989964][T17017] prepare_alloc_pages+0x3c2/0x610 [ 738.989990][T17017] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 738.990007][T17017] ? kasan_save_stack+0x33/0x60 [ 738.990022][T17017] ? kasan_save_track+0x14/0x30 [ 738.990036][T17017] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 738.990054][T17017] ? __lock_acquire+0x5ca/0x1ba0 [ 738.990075][T17017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 738.990092][T17017] ? __lock_acquire+0x5ca/0x1ba0 [ 738.990115][T17017] ? __lock_acquire+0x5ca/0x1ba0 [ 738.990134][T17017] ? __lock_acquire+0xaa4/0x1ba0 [ 738.990151][T17017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 738.990171][T17017] ? policy_nodemask+0xea/0x4e0 [ 738.990191][T17017] alloc_pages_mpol+0x1fb/0x550 [ 738.990209][T17017] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 738.990224][T17017] ? page_table_check_set+0x96f/0xb50 [ 738.990246][T17017] alloc_pages_noprof+0x131/0x390 [ 738.990264][T17017] pte_alloc_one+0x19/0x380 [ 738.990281][T17017] __pte_alloc+0x6d/0x3c0 [ 738.990299][T17017] ? __pfx___pte_alloc+0x10/0x10 [ 738.990316][T17017] ? __pfx___might_resched+0x10/0x10 [ 738.990332][T17017] ? copy_page_range+0x197d/0x5fe0 [ 738.990347][T17017] copy_page_range+0x3a29/0x5fe0 [ 738.990379][T17017] ? __pfx_copy_page_range+0x10/0x10 [ 738.990405][T17017] ? __pfx___might_resched+0x10/0x10 [ 738.990420][T17017] ? __pfx_mas_store+0x10/0x10 [ 738.990431][T17017] ? __vma_enter_locked+0x163/0x3f0 [ 738.990449][T17017] ? copy_process+0x85dd/0x91a0 [ 738.990466][T17017] ? down_write+0x14d/0x200 [ 738.990488][T17017] ? up_write+0x1b2/0x520 [ 738.990509][T17017] copy_process+0x862b/0x91a0 [ 738.990540][T17017] ? __pfx_copy_process+0x10/0x10 [ 738.990556][T17017] ? __pfx___futex_wait+0x10/0x10 [ 738.990591][T17017] kernel_clone+0xfc/0x960 [ 738.990610][T17017] ? __pfx_kernel_clone+0x10/0x10 [ 738.990631][T17017] ? do_sys_openat2+0x1b0/0x1d0 [ 738.990655][T17017] __do_sys_clone+0xce/0x120 [ 738.990672][T17017] ? __pfx___do_sys_clone+0x10/0x10 [ 738.990708][T17017] ? rcu_is_watching+0x12/0xc0 [ 738.990729][T17017] do_syscall_64+0xcd/0x230 [ 738.990752][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.990767][T17017] RIP: 0033:0x7fa97118e169 [ 738.990779][T17017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.990793][T17017] RSP: 002b:00007fa972097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 738.990808][T17017] RAX: ffffffffffffffda RBX: 00007fa9713b5fa0 RCX: 00007fa97118e169 [ 738.990818][T17017] RDX: 0000200000000100 RSI: 0000000000000005 RDI: 0000000000000006 [ 738.990827][T17017] RBP: 00007fa971210a68 R08: 0000000000000000 R09: 0000000000000000 [ 738.990835][T17017] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 738.990844][T17017] R13: 0000000000000000 R14: 00007fa9713b5fa0 R15: 00007fff0e22a398 [ 738.990862][T17017] [ 739.686750][T16972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.833068][T16972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.928418][T16972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.944216][T17017] netlink: 'syz.3.2389': attribute type 2 has an invalid length. [ 740.035587][T16972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.282193][ T55] Bluetooth: hci4: command tx timeout [ 740.404087][T16972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 740.447746][T16972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.484517][T16972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 740.521215][T16972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.869073][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.057565][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.111133][T13574] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.118285][T13574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.189990][T13574] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.197130][T13574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.412819][T16972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.868320][T17057] netlink: 'syz.0.2396': attribute type 1 has an invalid length. [ 741.928595][T16972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.156613][T16972] veth0_vlan: entered promiscuous mode [ 742.310557][T16972] veth1_vlan: entered promiscuous mode [ 742.364985][ T55] Bluetooth: hci4: command tx timeout [ 742.497308][T16972] veth0_macvtap: entered promiscuous mode [ 742.536979][T16972] veth1_macvtap: entered promiscuous mode [ 742.570275][T17061] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x17c0 pfn:0x79c00 [ 742.627537][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.653946][T17061] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 742.661102][T17061] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 742.719988][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.786609][T17061] raw: 00000000000017c0 0000000000000000 00000001ffffffff 0000000000000000 [ 742.796771][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.863248][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.935900][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.949085][T17061] page dumped because: unmovable page [ 742.964439][T17062] could not allocate digest TFM handle [ 742.970055][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.999139][T17061] page_owner tracks the page as allocated [ 743.007910][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.049962][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.060249][T17061] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 16960, tgid 16960 (syz-executor), ts 735431840461, free_ts 705108929312 [ 743.117057][T16972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.167936][T17061] post_alloc_hook+0x181/0x1b0 [ 743.188966][T17061] get_page_from_freelist+0x135c/0x3920 [ 743.209233][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.240570][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.263016][T17061] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 743.271558][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.289754][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.309550][T17061] alloc_pages_mpol+0x1fb/0x550 [ 743.315485][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.336334][T17061] alloc_pages_noprof+0x131/0x390 [ 743.341527][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.362364][T17061] __vmalloc_node_range_noprof+0x732/0x1540 [ 743.370106][T16972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.387792][T17061] vmalloc_user_noprof+0x6b/0x90 [ 743.394921][T16972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.429458][T17061] kcov_ioctl+0x4c/0x730 [ 743.447638][T17061] __x64_sys_ioctl+0x190/0x200 [ 743.457962][T17061] do_syscall_64+0xcd/0x230 [ 743.469689][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.482318][T17061] page last free pid 16485 tgid 16483 stack trace: [ 743.501912][T17061] __free_frozen_pages+0x69d/0xff0 [ 743.511564][T16972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.520662][T17061] kimage_free_page_list+0x130/0x230 [ 743.526818][T17061] kimage_alloc_control_pages+0x3b3/0x910 [ 743.555149][T17061] do_kexec_load+0x480/0x8d0 [ 743.559775][T17061] __x64_sys_kexec_load+0x1bf/0x230 [ 743.570972][T16972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.581640][T17061] do_syscall_64+0xcd/0x230 [ 743.588016][T16972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.600242][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.608604][T16972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.690520][T16972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.185376][T13574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.256760][T13574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.447015][ T5837] Bluetooth: hci4: command tx timeout [ 744.548180][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.622302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.449585][T17127] FAULT_INJECTION: forcing a failure. [ 746.449585][T17127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.778531][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.2.2406 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 746.778555][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 746.778564][T17127] Call Trace: [ 746.778570][T17127] [ 746.778575][T17127] dump_stack_lvl+0x16c/0x1f0 [ 746.778599][T17127] should_fail_ex+0x512/0x640 [ 746.778620][T17127] should_fail_alloc_page+0xe7/0x130 [ 746.778640][T17127] prepare_alloc_pages+0x3c2/0x610 [ 746.778662][T17127] ? rcu_is_watching+0x12/0xc0 [ 746.778679][T17127] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 746.778698][T17127] ? do_raw_spin_lock+0x12c/0x2b0 [ 746.778712][T17127] ? find_held_lock+0x2b/0x80 [ 746.778728][T17127] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.778745][T17127] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 746.778762][T17127] ? stack_depot_save_flags+0x3e6/0xa50 [ 746.778783][T17127] ? kasan_save_stack+0x42/0x60 [ 746.778800][T17127] ? __lock_acquire+0xaa4/0x1ba0 [ 746.778816][T17127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.778836][T17127] ? policy_nodemask+0xea/0x4e0 [ 746.778855][T17127] alloc_pages_mpol+0x1fb/0x550 [ 746.778881][T17127] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.778898][T17127] ? __page_table_check_ptes_set+0x1ae/0x420 [ 746.778917][T17127] ? find_held_lock+0x2b/0x80 [ 746.778934][T17127] alloc_pages_noprof+0x131/0x390 [ 746.778953][T17127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 746.778967][T17127] get_free_pages_noprof+0xc/0x40 [ 746.778985][T17127] kasan_populate_vmalloc_pte+0x2d/0x160 [ 746.779000][T17127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 746.779014][T17127] __apply_to_page_range+0x617/0xd60 [ 746.779030][T17127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 746.779047][T17127] ? __pfx___apply_to_page_range+0x10/0x10 [ 746.779060][T17127] ? alloc_vmap_area+0x872/0x2970 [ 746.779083][T17127] alloc_vmap_area+0x919/0x2970 [ 746.779109][T17127] ? __pfx_alloc_vmap_area+0x10/0x10 [ 746.779133][T17127] __get_vm_area_node+0x1a7/0x300 [ 746.779156][T17127] __vmalloc_node_range_noprof+0x277/0x1540 [ 746.779170][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.779196][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.779219][T17127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 746.779239][T17127] __kvmalloc_node_noprof+0x2ff/0x600 [ 746.779254][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.779274][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.779296][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.779314][T17127] __do_sys_listmount+0x1c2/0xed0 [ 746.779337][T17127] ? __x64_sys_futex+0x1e0/0x4c0 [ 746.779352][T17127] ? __x64_sys_futex+0x1e9/0x4c0 [ 746.779367][T17127] ? __pfx___do_sys_listmount+0x10/0x10 [ 746.779387][T17127] ? xfd_validate_state+0x5d/0x180 [ 746.779407][T17127] do_syscall_64+0xcd/0x230 [ 746.779428][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.779442][T17127] RIP: 0033:0x7f605098e169 [ 746.779454][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.779467][T17127] RSP: 002b:00007f6051741038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 746.779481][T17127] RAX: ffffffffffffffda RBX: 00007f6050bb6160 RCX: 00007f605098e169 [ 746.779490][T17127] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 746.779499][T17127] RBP: 00007f6050a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 746.779508][T17127] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 746.779516][T17127] R13: 0000000000000000 R14: 00007f6050bb6160 R15: 00007ffccd00dfd8 [ 746.779534][T17127] [ 746.779733][T17127] syz.2.2406: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 746.779858][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.2.2406 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 746.779883][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 746.779892][T17127] Call Trace: [ 746.779896][T17127] [ 746.779902][T17127] dump_stack_lvl+0x16c/0x1f0 [ 746.779923][T17127] warn_alloc+0x248/0x3a0 [ 746.779940][T17127] ? __pfx_warn_alloc+0x10/0x10 [ 746.779957][T17127] ? kfree+0x2b6/0x4d0 [ 746.779973][T17127] ? __get_vm_area_node+0x1e5/0x300 [ 746.779999][T17127] __vmalloc_node_range_noprof+0xd31/0x1540 [ 746.780019][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.780043][T17127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 746.780064][T17127] __kvmalloc_node_noprof+0x2ff/0x600 [ 746.780080][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.780100][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.780122][T17127] ? __do_sys_listmount+0x1c2/0xed0 [ 746.780140][T17127] __do_sys_listmount+0x1c2/0xed0 [ 746.780162][T17127] ? __x64_sys_futex+0x1e0/0x4c0 [ 746.780177][T17127] ? __x64_sys_futex+0x1e9/0x4c0 [ 746.780192][T17127] ? __pfx___do_sys_listmount+0x10/0x10 [ 746.780212][T17127] ? xfd_validate_state+0x5d/0x180 [ 746.780233][T17127] do_syscall_64+0xcd/0x230 [ 746.780253][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.780266][T17127] RIP: 0033:0x7f605098e169 [ 746.780277][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.780290][T17127] RSP: 002b:00007f6051741038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 746.780302][T17127] RAX: ffffffffffffffda RBX: 00007f6050bb6160 RCX: 00007f605098e169 [ 746.780311][T17127] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 746.780319][T17127] RBP: 00007f6050a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 746.780327][T17127] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 746.780335][T17127] R13: 0000000000000000 R14: 00007f6050bb6160 R15: 00007ffccd00dfd8 [ 746.780352][T17127] [ 746.780356][T17127] Mem-Info: [ 746.780369][T17127] active_anon:19548 inactive_anon:0 isolated_anon:0 [ 746.780369][T17127] active_file:14856 inactive_file:43232 isolated_file:0 [ 746.780369][T17127] unevictable:768 dirty:963 writeback:0 [ 746.780369][T17127] slab_reclaimable:10796 slab_unreclaimable:99132 [ 746.780369][T17127] mapped:32141 shmem:5652 pagetables:1139 [ 746.780369][T17127] sec_pagetables:0 bounce:0 [ 746.780369][T17127] kernel_misc_reclaimable:0 [ 746.780369][T17127] free:1317881 free_pcp:635 free_cma:0 [ 746.780406][T17127] Node 0 active_anon:78192kB inactive_anon:0kB active_file:59424kB inactive_file:172920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128564kB dirty:3848kB writeback:0kB shmem:21072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 746.780443][T17127] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 746.780478][T17127] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.780516][T17127] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 746.780543][T17127] Node 0 DMA32 free:1348712kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:78144kB inactive_anon:0kB active_file:59424kB inactive_file:171340kB unevictable:1536kB writepending:3848kB present:3129332kB managed:2541752kB mlocked:0kB bounce:0kB free_pcp:2056kB local_pcp:2056kB free_cma:0kB [ 746.780581][T17127] lowmem_reserve[]: 0 0 1 1 1 [ 746.780606][T17127] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.780642][T17127] lowmem_reserve[]: 0 0 0 0 0 [ 746.780668][T17127] Node 1 Normal free:3907436kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:484kB free_cma:0kB [ 746.780704][T17127] lowmem_reserve[]: 0 0 0 0 0 [ 746.780729][T17127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 746.780814][T17127] Node 0 DMA32: 76*4kB (UE) 881*8kB (UME) 2262*16kB (ME) 1818*32kB (UME) 1550*64kB (UME) 805*128kB (UME) 293*256kB (UME) 230*512kB (UME) 92*1024kB (UM) 10*2048kB (UM) 180*4096kB (UM) = 1348696kB [ 746.780945][T17127] Node 0 Normal: 2*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 746.781029][T17127] Node 1 Normal: 114*4kB (UME) 58*8kB (UME) 40*16kB (UME) 212*32kB (UME) 114*64kB (UME) 29*128kB (UME) 20*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3907480kB [ 746.781148][T17127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.781159][T17127] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.781170][T17127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.781180][T17127] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.781191][T17127] 63762 total pagecache pages [ 746.781197][T17127] 35 pages in swap cache [ 746.781202][T17127] Free swap = 124892kB [ 746.781208][T17127] Total swap = 124996kB [ 746.781213][T17127] 2097051 pages RAM [ 746.781218][T17127] 0 pages HighMem/MovableOnly [ 746.781223][T17127] 429571 pages reserved [ 746.781228][T17127] 0 pages cma reserved [ 747.586422][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.586464][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.205249][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.289066][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.654221][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.920441][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.292678][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.511747][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.694077][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.024880][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.222955][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.893152][T17173] tty tty1: ldisc open failed (-12), clearing slot 0 [ 752.918294][T17186] tty tty12: ldisc open failed (-12), clearing slot 11 [ 752.943900][T17188] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 753.115849][ T30] audit: type=1800 audit(6040340583.716:30): pid=17199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2422" name="lu_gp_id" dev="configfs" ino=55191 res=0 errno=0 [ 753.298560][T17211] sd 0:0:1:0: PR command failed: 1026 [ 753.303985][T17211] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 753.373843][T17211] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 754.510798][T17233] input: f¬ as /devices/virtual/input/input19 [ 755.188716][T17243] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 756.336762][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 757.594137][T17297] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 758.076153][ T30] audit: type=1800 audit(6040340588.674:31): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2451" name="lu_gp_id" dev="configfs" ino=55746 res=0 errno=0 [ 761.325091][T17371] HfR: entered promiscuous mode [ 761.363699][T17371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2469'. [ 761.410869][T17371] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 761.468226][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'. [ 763.964262][T17421] kernel read not supported for file /\*)A (pid: 17421 comm: syz.5.2480) [ 764.272517][ T30] audit: type=1800 audit(6040340594.831:32): pid=17421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2480" name="\*)A" dev="mqueue" ino=42630 res=0 errno=0 [ 764.504312][T17431] FAULT_INJECTION: forcing a failure. [ 764.504312][T17431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.653674][T17431] CPU: 0 UID: 0 PID: 17431 Comm: syz.0.2484 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 764.653696][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 764.653705][T17431] Call Trace: [ 764.653710][T17431] [ 764.653716][T17431] dump_stack_lvl+0x16c/0x1f0 [ 764.653740][T17431] should_fail_ex+0x512/0x640 [ 764.653759][T17431] _copy_from_user+0x2e/0xd0 [ 764.653776][T17431] core_sys_select+0x35a/0xbe0 [ 764.653794][T17431] ? __pfx_core_sys_select+0x10/0x10 [ 764.653810][T17431] ? proc_fail_nth_write+0x9f/0x250 [ 764.653844][T17431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.653867][T17431] kern_select+0x15d/0x1e0 [ 764.653879][T17431] ? __pfx_kern_select+0x10/0x10 [ 764.653895][T17431] ? __pfx_ksys_write+0x10/0x10 [ 764.653908][T17431] ? rcu_is_watching+0x12/0xc0 [ 764.653924][T17431] __x64_sys_select+0xbd/0x160 [ 764.653936][T17431] ? do_syscall_64+0x91/0x230 [ 764.653954][T17431] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.653971][T17431] do_syscall_64+0xcd/0x230 [ 764.653990][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.654003][T17431] RIP: 0033:0x7fbe4538e169 [ 764.654015][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.654028][T17431] RSP: 002b:00007fbe461f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 764.654042][T17431] RAX: ffffffffffffffda RBX: 00007fbe455b6080 RCX: 00007fbe4538e169 [ 764.654051][T17431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 764.654059][T17431] RBP: 00007fbe461f1090 R08: 0000000000000000 R09: 0000000000000000 [ 764.654066][T17431] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 764.654075][T17431] R13: 0000000000000000 R14: 00007fbe455b6080 R15: 00007ffc43dad2b8 [ 764.654092][T17431] [ 766.040930][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2494'. [ 768.338587][T17506] FAULT_INJECTION: forcing a failure. [ 768.338587][T17506] name failslab, interval 1, probability 0, space 0, times 0 [ 768.369067][T17506] CPU: 0 UID: 0 PID: 17506 Comm: syz.0.2504 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 768.369091][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 768.369101][T17506] Call Trace: [ 768.369106][T17506] [ 768.369112][T17506] dump_stack_lvl+0x16c/0x1f0 [ 768.369137][T17506] should_fail_ex+0x512/0x640 [ 768.369155][T17506] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 768.369172][T17506] should_failslab+0xc2/0x120 [ 768.369191][T17506] __kmalloc_cache_noprof+0x6a/0x3e0 [ 768.369205][T17506] ? snd_seq_oss_open+0x55/0xa20 [ 768.369229][T17506] snd_seq_oss_open+0x55/0xa20 [ 768.369252][T17506] odev_open+0x6f/0x90 [ 768.369270][T17506] ? __pfx_odev_open+0x10/0x10 [ 768.369288][T17506] soundcore_open+0x409/0x580 [ 768.369309][T17506] ? __pfx_soundcore_open+0x10/0x10 [ 768.369326][T17506] chrdev_open+0x231/0x6a0 [ 768.369341][T17506] ? __pfx_apparmor_file_open+0x10/0x10 [ 768.369359][T17506] ? __pfx_chrdev_open+0x10/0x10 [ 768.369375][T17506] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 768.369399][T17506] do_dentry_open+0x741/0x1c10 [ 768.369415][T17506] ? __pfx_chrdev_open+0x10/0x10 [ 768.369433][T17506] vfs_open+0x82/0x3f0 [ 768.369453][T17506] path_openat+0x1e5e/0x2d40 [ 768.369474][T17506] ? __pfx_path_openat+0x10/0x10 [ 768.369493][T17506] do_filp_open+0x20b/0x470 [ 768.369507][T17506] ? __pfx_do_filp_open+0x10/0x10 [ 768.369534][T17506] ? alloc_fd+0x471/0x7d0 [ 768.369552][T17506] do_sys_openat2+0x11b/0x1d0 [ 768.369569][T17506] ? __pfx_do_sys_openat2+0x10/0x10 [ 768.369595][T17506] __x64_sys_openat+0x174/0x210 [ 768.369613][T17506] ? __pfx___x64_sys_openat+0x10/0x10 [ 768.369632][T17506] ? rcu_is_watching+0x12/0xc0 [ 768.369652][T17506] do_syscall_64+0xcd/0x230 [ 768.369671][T17506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.369685][T17506] RIP: 0033:0x7fbe4538e169 [ 768.369698][T17506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.369711][T17506] RSP: 002b:00007fbe46212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 768.369725][T17506] RAX: ffffffffffffffda RBX: 00007fbe455b5fa0 RCX: 00007fbe4538e169 [ 768.369734][T17506] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 768.369742][T17506] RBP: 00007fbe45410a68 R08: 0000000000000000 R09: 0000000000000000 [ 768.369751][T17506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.369759][T17506] R13: 0000000000000000 R14: 00007fbe455b5fa0 R15: 00007ffc43dad2b8 [ 768.369784][T17506] [ 768.760343][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2507'. [ 768.926132][ T30] audit: type=1800 audit(6040340599.291:33): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2505" name="lu_gp_id" dev="configfs" ino=56447 res=0 errno=0 [ 769.020256][T17533] FAULT_INJECTION: forcing a failure. [ 769.020256][T17533] name failslab, interval 1, probability 0, space 0, times 0 [ 769.037653][T17533] CPU: 0 UID: 5 PID: 17533 Comm: syz.2.2509 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 769.037678][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 769.037687][T17533] Call Trace: [ 769.037692][T17533] [ 769.037705][T17533] dump_stack_lvl+0x16c/0x1f0 [ 769.037730][T17533] should_fail_ex+0x512/0x640 [ 769.037746][T17533] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 769.037764][T17533] should_failslab+0xc2/0x120 [ 769.037782][T17533] __kmalloc_cache_noprof+0x6a/0x3e0 [ 769.037796][T17533] ? snd_seq_create_port+0xf7/0xad0 [ 769.037819][T17533] snd_seq_create_port+0xf7/0xad0 [ 769.037843][T17533] snd_seq_ioctl_create_port+0x253/0x950 [ 769.037863][T17533] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 769.037882][T17533] ? kasan_save_stack+0x42/0x60 [ 769.037896][T17533] ? kasan_save_stack+0x33/0x60 [ 769.037910][T17533] ? kasan_save_track+0x14/0x30 [ 769.037927][T17533] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 769.037949][T17533] create_port+0x197/0x260 [ 769.037968][T17533] ? __pfx_create_port+0x10/0x10 [ 769.037991][T17533] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 769.038004][T17533] ? __pfx_free_devinfo+0x10/0x10 [ 769.038037][T17533] ? mark_held_locks+0x49/0x80 [ 769.038054][T17533] ? _raw_spin_unlock_irq+0x23/0x50 [ 769.038073][T17533] snd_seq_oss_open+0x36c/0xa20 [ 769.038096][T17533] odev_open+0x6f/0x90 [ 769.038113][T17533] ? __pfx_odev_open+0x10/0x10 [ 769.038131][T17533] soundcore_open+0x409/0x580 [ 769.038151][T17533] ? __pfx_soundcore_open+0x10/0x10 [ 769.038169][T17533] chrdev_open+0x231/0x6a0 [ 769.038184][T17533] ? __pfx_apparmor_file_open+0x10/0x10 [ 769.038202][T17533] ? __pfx_chrdev_open+0x10/0x10 [ 769.038219][T17533] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 769.038243][T17533] do_dentry_open+0x741/0x1c10 [ 769.038258][T17533] ? __pfx_chrdev_open+0x10/0x10 [ 769.038277][T17533] vfs_open+0x82/0x3f0 [ 769.038297][T17533] path_openat+0x1e5e/0x2d40 [ 769.038318][T17533] ? __pfx_path_openat+0x10/0x10 [ 769.038336][T17533] do_filp_open+0x20b/0x470 [ 769.038351][T17533] ? __pfx_do_filp_open+0x10/0x10 [ 769.038378][T17533] ? alloc_fd+0x471/0x7d0 [ 769.038396][T17533] do_sys_openat2+0x11b/0x1d0 [ 769.038414][T17533] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.038440][T17533] __x64_sys_openat+0x174/0x210 [ 769.038458][T17533] ? __pfx___x64_sys_openat+0x10/0x10 [ 769.038478][T17533] ? rcu_is_watching+0x12/0xc0 [ 769.038497][T17533] do_syscall_64+0xcd/0x230 [ 769.038517][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.038531][T17533] RIP: 0033:0x7f605098e169 [ 769.038544][T17533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.038558][T17533] RSP: 002b:00007f6051783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 769.038572][T17533] RAX: ffffffffffffffda RBX: 00007f6050bb5fa0 RCX: 00007f605098e169 [ 769.038581][T17533] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 769.038589][T17533] RBP: 00007f6050a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 769.038598][T17533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.038609][T17533] R13: 0000000000000000 R14: 00007f6050bb5fa0 R15: 00007ffccd00dfd8 [ 769.038627][T17533] [ 769.040004][T17533] ALSA: seq_oss: can't create port [ 800.858362][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 809.023530][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.032783][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 862.293861][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 870.461351][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.469526][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 918.454358][ T31] INFO: task syz-executor:5822 blocked for more than 143 seconds. [ 918.462193][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 918.494545][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 918.507204][ T31] task:syz-executor state:D stack:23048 pid:5822 tgid:5822 ppid:5820 task_flags:0x440100 flags:0x00000002 [ 918.519387][ T31] Call Trace: [ 918.522658][ T31] [ 918.527736][ T31] __schedule+0x116f/0x5de0 [ 918.532255][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 918.538011][ T31] ? __pfx___schedule+0x10/0x10 [ 918.542872][ T31] ? find_held_lock+0x2b/0x80 [ 918.549588][ T31] ? schedule+0x2d7/0x3a0 [ 918.555422][ T31] schedule+0xe7/0x3a0 [ 918.559496][ T31] io_schedule+0xbf/0x130 [ 918.565913][ T31] bit_wait_io+0x15/0xe0 [ 918.570158][ T31] __wait_on_bit+0x62/0x180 [ 918.576502][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 918.581445][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 918.590924][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 918.597133][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 918.602592][ T31] do_get_write_access+0x93d/0x12a0 [ 918.610885][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 918.617488][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 918.625535][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 918.631163][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 918.636925][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 918.642298][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 918.650265][ T31] ? rcu_is_watching+0x12/0xc0 [ 918.655893][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 918.661531][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 918.668858][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 918.674704][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 918.680334][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 918.689642][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 918.697533][ T31] ext4_dirty_inode+0xd9/0x130 [ 918.702299][ T31] ? rcu_is_watching+0x12/0xc0 [ 918.710172][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 918.715407][ T31] generic_update_time+0xcf/0xf0 [ 918.720341][ T31] file_update_time+0x17d/0x1c0 [ 918.727309][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 918.732420][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 918.738171][ T31] do_page_mkwrite+0x171/0x380 [ 918.742932][ T31] do_pte_missing+0x29c/0x3fb0 [ 918.749748][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 918.755239][ T31] __handle_mm_fault+0x103d/0x2a40 [ 918.760909][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 918.768407][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 918.773829][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 918.779040][ T31] handle_mm_fault+0x3fe/0xad0 [ 918.785870][ T31] do_user_addr_fault+0x60c/0x1370 [ 918.790986][ T31] exc_page_fault+0x5c/0xc0 [ 918.798254][ T31] asm_exc_page_fault+0x26/0x30 [ 918.803133][ T31] RIP: 0033:0x7fc62b6775ef [ 918.812862][ T31] RSP: 002b:00007ffc024acc50 EFLAGS: 00010202 [ 918.819303][ T31] RAX: 00007fc62a5b8000 RBX: 000055558b6b25b0 RCX: 0000000000000002 [ 918.829335][ T31] RDX: 1ffffffff095dfea RSI: 000055558b6a5288 RDI: 0000000000000004 [ 918.837636][ T31] RBP: 00007ffc024acf40 R08: 000055558b6a5288 R09: 0000000000003bfd [ 918.847641][ T31] R10: 0000000000000001 R11: 00007ffc024ad150 R12: 00007ffc024acfa0 [ 918.856695][ T31] R13: 0000000000000004 R14: 00007ffc024accc0 R15: 00007ffc024acd90 [ 918.867261][ T31] [ 918.870366][ T31] INFO: task syz.3.2503:17502 blocked for more than 143 seconds. [ 918.878488][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 918.891451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 918.900337][ T31] task:syz.3.2503 state:D stack:26488 pid:17502 tgid:17502 ppid:15944 task_flags:0x440040 flags:0x00000004 [ 918.919392][ T31] Call Trace: [ 918.922679][ T31] [ 918.926465][ T31] __schedule+0x116f/0x5de0 [ 918.930978][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 918.938077][ T31] ? __pfx___schedule+0x10/0x10 [ 918.942966][ T31] ? find_held_lock+0x2b/0x80 [ 918.948679][ T31] ? schedule+0x2d7/0x3a0 [ 918.953011][ T31] schedule+0xe7/0x3a0 [ 918.958827][ T31] io_schedule+0xbf/0x130 [ 918.964242][ T31] bit_wait_io+0x15/0xe0 [ 918.968488][ T31] __wait_on_bit+0x62/0x180 [ 918.972981][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 918.979814][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 918.985757][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 918.991738][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 918.998948][ T31] do_get_write_access+0x93d/0x12a0 [ 919.004712][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 919.010697][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 919.019491][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 919.029674][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 919.036931][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 919.042705][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 919.049270][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.055802][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 919.061440][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 919.067889][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 919.075202][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 919.080839][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 919.086441][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 919.091809][ T31] ext4_dirty_inode+0xd9/0x130 [ 919.098823][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.104177][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 919.109204][ T31] generic_update_time+0xcf/0xf0 [ 919.115896][ T31] file_update_time+0x17d/0x1c0 [ 919.121850][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 919.127623][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 919.133087][ T31] do_page_mkwrite+0x171/0x380 [ 919.144340][ T31] do_pte_missing+0x29c/0x3fb0 [ 919.149115][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 919.156156][ T31] __handle_mm_fault+0x103d/0x2a40 [ 919.161270][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 919.167904][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.173113][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.183243][ T31] handle_mm_fault+0x3fe/0xad0 [ 919.188600][ T31] do_user_addr_fault+0x60c/0x1370 [ 919.195344][ T31] exc_page_fault+0x5c/0xc0 [ 919.199849][ T31] asm_exc_page_fault+0x26/0x30 [ 919.205378][ T31] RIP: 0033:0x7fa97106e2fa [ 919.209787][ T31] RSP: 002b:00007fff0e22a420 EFLAGS: 00010202 [ 919.217553][ T31] RAX: 0000001b2efeb000 RBX: 00007fa971ee5720 RCX: 0000001b2efeaff8 [ 919.227138][ T31] RDX: 0000001b2ec20220 RSI: 0000000000000008 RDI: 00007fa971ee5720 [ 919.236801][ T31] RBP: ffffffff848fb35e R08: 00007fa9713b6038 R09: 00007fa9713a2000 [ 919.248733][ T31] R10: 00007fa9707ff008 R11: 0000000000000019 R12: 0000000000000019 [ 919.259318][ T31] R13: 00000000000000a3 R14: ffffffff848fbc18 R15: 000000000000019d [ 919.268458][ T31] ? ima_match_policy+0xb88/0x22e0 [ 919.275271][ T31] ? ima_match_policy+0x2ce/0x22e0 [ 919.280388][ T31] [ 919.283393][ T31] INFO: task syz.5.2507:17509 blocked for more than 144 seconds. [ 919.291872][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 919.301140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 919.310410][ T31] task:syz.5.2507 state:D stack:28344 pid:17509 tgid:17509 ppid:14096 task_flags:0x440040 flags:0x00000004 [ 919.325426][ T31] Call Trace: [ 919.328711][ T31] [ 919.331633][ T31] __schedule+0x116f/0x5de0 [ 919.336512][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 919.341449][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 919.348652][ T31] ? __pfx___schedule+0x10/0x10 [ 919.357044][ T31] ? find_held_lock+0x2b/0x80 [ 919.361726][ T31] ? schedule+0x2d7/0x3a0 [ 919.368996][ T31] schedule+0xe7/0x3a0 [ 919.373887][ T31] io_schedule+0xbf/0x130 [ 919.378223][ T31] bit_wait_io+0x15/0xe0 [ 919.382455][ T31] __wait_on_bit+0x62/0x180 [ 919.389195][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 919.394333][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 919.399700][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 919.407990][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 919.413460][ T31] do_get_write_access+0x93d/0x12a0 [ 919.421768][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 919.430820][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 919.437148][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 919.442689][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 919.450401][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 919.456384][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 919.462359][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.474011][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 919.479662][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 919.486940][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 919.492578][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 919.499172][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 919.506153][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 919.511535][ T31] ext4_dirty_inode+0xd9/0x130 [ 919.516592][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.521350][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 919.529398][ T31] generic_update_time+0xcf/0xf0 [ 919.534556][ T31] file_update_time+0x17d/0x1c0 [ 919.539405][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 919.546572][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 919.552132][ T31] do_page_mkwrite+0x171/0x380 [ 919.557219][ T31] do_pte_missing+0x29c/0x3fb0 [ 919.561981][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 919.569418][ T31] __handle_mm_fault+0x103d/0x2a40 [ 919.579173][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 919.587504][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.592711][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.598401][ T31] handle_mm_fault+0x3fe/0xad0 [ 919.603198][ T31] do_user_addr_fault+0x60c/0x1370 [ 919.610516][ T31] exc_page_fault+0x5c/0xc0 [ 919.615230][ T31] asm_exc_page_fault+0x26/0x30 [ 919.620073][ T31] RIP: 0033:0x7f93c6e6e2fa [ 919.626510][ T31] RSP: 002b:00007ffe44a79620 EFLAGS: 00010202 [ 919.633919][ T31] RAX: 0000001b2c407000 RBX: 00007f93c7ce5720 RCX: 0000001b2c406ff8 [ 919.641894][ T31] RDX: 0000001b2c020220 RSI: 0000000000000008 RDI: 00007f93c7ce5720 [ 919.651961][ T31] RBP: ffffffff84ca65b5 R08: 00007f93c71b6038 R09: 00007f93c71a2000 [ 919.660595][ T31] R10: 00007f93c65ff008 R11: 000000000000001d R12: 000000000000001d [ 919.670584][ T31] R13: 000000000000012c R14: ffffffff84ca6828 R15: 0000000000000140 [ 919.679313][ T31] ? _copy_from_iter+0x358/0x15b0 [ 919.689627][ T31] ? _copy_from_iter+0xe5/0x15b0 [ 919.695090][ T31] [ 919.698146][ T31] INFO: task syz.0.2506:17512 blocked for more than 144 seconds. [ 919.707973][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 919.715866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 919.726542][ T31] task:syz.0.2506 state:D stack:26488 pid:17512 tgid:17512 ppid:9115 task_flags:0x440040 flags:0x00000004 [ 919.739951][ T31] Call Trace: [ 919.743235][ T31] [ 919.748268][ T31] __schedule+0x116f/0x5de0 [ 919.752780][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 919.758074][ T31] ? __pfx___schedule+0x10/0x10 [ 919.762947][ T31] ? find_held_lock+0x2b/0x80 [ 919.769813][ T31] ? schedule+0x2d7/0x3a0 [ 919.774944][ T31] schedule+0xe7/0x3a0 [ 919.779023][ T31] io_schedule+0xbf/0x130 [ 919.786045][ T31] bit_wait_io+0x15/0xe0 [ 919.790303][ T31] __wait_on_bit+0x62/0x180 [ 919.798342][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 919.803289][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 919.810899][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 919.817254][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 919.822717][ T31] do_get_write_access+0x93d/0x12a0 [ 919.830129][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 919.837308][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 919.843378][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 919.851050][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 919.856697][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 919.862152][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 919.870216][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.875152][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 919.880778][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 919.888589][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 919.895333][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 919.900972][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 919.911403][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 919.917532][ T31] ext4_dirty_inode+0xd9/0x130 [ 919.922303][ T31] ? rcu_is_watching+0x12/0xc0 [ 919.929297][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 919.934681][ T31] generic_update_time+0xcf/0xf0 [ 919.940691][ T31] file_update_time+0x17d/0x1c0 [ 919.947633][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 919.952665][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 919.958328][ T31] do_page_mkwrite+0x171/0x380 [ 919.963179][ T31] do_pte_missing+0x29c/0x3fb0 [ 919.970456][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 919.975941][ T31] __handle_mm_fault+0x103d/0x2a40 [ 919.981052][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 919.989161][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.994559][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 919.999769][ T31] handle_mm_fault+0x3fe/0xad0 [ 920.006685][ T31] do_user_addr_fault+0x60c/0x1370 [ 920.011800][ T31] exc_page_fault+0x5c/0xc0 [ 920.020483][ T31] asm_exc_page_fault+0x26/0x30 [ 920.027393][ T31] RIP: 0033:0x7fbe4526e2fa [ 920.031806][ T31] RSP: 002b:00007ffc43dad340 EFLAGS: 00010202 [ 920.038138][ T31] RAX: 0000001b2d510000 RBX: 00007fbe460e5720 RCX: 0000001b2d50fff8 [ 920.049396][ T31] RDX: 0000001b2d120220 RSI: 0000000000000008 RDI: 00007fbe460e5720 [ 920.057742][ T31] RBP: ffffffff8b6ba419 R08: 00007fbe455b6118 R09: 00007fbe455a2000 [ 920.067771][ T31] R10: 00007fbe445fd008 R11: 000000000000000c R12: 000000000000000c [ 920.075976][ T31] R13: 0000000000000052 R14: ffffffff8b6ba631 R15: 0000000000000065 [ 920.085918][ T31] ? format_decode+0x341/0xd40 [ 920.091242][ T31] ? format_decode+0x129/0xd40 [ 920.096293][ T31] [ 920.099433][ T31] INFO: task syz.2.2509:17532 blocked for more than 145 seconds. [ 920.109219][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 920.117032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.131482][ T31] task:syz.2.2509 state:D stack:28344 pid:17532 tgid:17532 ppid:16972 task_flags:0x440040 flags:0x00000004 [ 920.147767][ T31] Call Trace: [ 920.151580][ T31] [ 920.155148][ T31] __schedule+0x116f/0x5de0 [ 920.159661][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 920.166774][ T31] ? __pfx___schedule+0x10/0x10 [ 920.171636][ T31] ? find_held_lock+0x2b/0x80 [ 920.176585][ T31] ? schedule+0x2d7/0x3a0 [ 920.180913][ T31] schedule+0xe7/0x3a0 [ 920.187058][ T31] io_schedule+0xbf/0x130 [ 920.191970][ T31] bit_wait_io+0x15/0xe0 [ 920.196501][ T31] __wait_on_bit+0x62/0x180 [ 920.201003][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 920.208004][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 920.213380][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 920.222710][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 920.230283][ T31] do_get_write_access+0x93d/0x12a0 [ 920.239060][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 920.248702][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 920.254984][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 920.260527][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 920.268448][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 920.274048][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 920.280024][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.286849][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 920.293052][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 920.298575][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 920.306184][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 920.311817][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 920.316999][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 920.322367][ T31] ext4_dirty_inode+0xd9/0x130 [ 920.329190][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.334174][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 920.339200][ T31] generic_update_time+0xcf/0xf0 [ 920.350541][ T31] file_update_time+0x17d/0x1c0 [ 920.356145][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 920.361174][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 920.368723][ T31] do_page_mkwrite+0x171/0x380 [ 920.375147][ T31] do_pte_missing+0x29c/0x3fb0 [ 920.379922][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 920.387314][ T31] __handle_mm_fault+0x103d/0x2a40 [ 920.392431][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 920.398892][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 920.406106][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 920.411321][ T31] handle_mm_fault+0x3fe/0xad0 [ 920.416352][ T31] do_user_addr_fault+0x60c/0x1370 [ 920.421462][ T31] exc_page_fault+0x5c/0xc0 [ 920.428045][ T31] asm_exc_page_fault+0x26/0x30 [ 920.432892][ T31] RIP: 0033:0x7f605086e2fa [ 920.437576][ T31] RSP: 002b:00007ffccd00e010 EFLAGS: 00010202 [ 920.445722][ T31] RAX: 0000001b30209000 RBX: 00007f60516e5720 RCX: 0000001b30208ff8 [ 920.460951][ T31] RDX: 0000001b2fc2021c RSI: 0000000000000008 RDI: 00007f60516e5720 [ 920.471624][ T31] RBP: ffffffff823a22db R08: 00007f6050bb6038 R09: 00007f6050ba2000 [ 920.480266][ T31] R10: 00007f604ffff008 R11: 0000000000000007 R12: 0000000000000007 [ 920.490562][ T31] R13: 00000000000001e9 R14: ffffffff823a2d27 R15: 00000000000002a7 [ 920.499381][ T31] ? mntget+0x17/0x50 [ 920.503369][ T31] ? fs_name+0x11b/0x220 [ 920.509657][ T31] [ 920.512944][ T31] [ 920.512944][ T31] Showing all locks held in the system: [ 920.520751][ T31] 1 lock held by khungtaskd/31: [ 920.527749][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 920.538489][ T31] 3 locks held by syz-executor/5822: [ 920.545770][ T31] #0: ffff888028824308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 920.556289][ T31] #1: ffff888034512518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 920.571637][ T31] #2: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.581520][ T31] 2 locks held by getty/13220: [ 920.588256][ T31] #0: ffff8880369320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 920.598498][ T31] #1: ffffc9000409b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 920.611262][ T31] 6 locks held by kworker/u8:24/13588: [ 920.617467][ T31] #0: ffff8881412ed948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 920.630187][ T31] #1: ffffc90004147d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 920.642274][ T31] #2: ffff8880345120e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 920.655887][ T31] #3: ffff888034514b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 920.666390][ T31] #4: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.681912][ T31] #5: ffff88807cc0b450 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 920.691887][ T31] 3 locks held by syz.3.2503/17502: [ 920.699455][ T31] #0: ffff88807d3b9088 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 920.709771][ T31] #1: ffff888034512518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 920.721312][ T31] #2: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.731087][ T31] 3 locks held by syz.5.2507/17509: [ 920.738254][ T31] #0: ffff8880347db308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 920.747760][ T31] #1: ffff888034512518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 920.760252][ T31] #2: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.770091][ T31] 3 locks held by syz.0.2506/17512: [ 920.777434][ T31] #0: ffff88802efe86c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 920.790332][ T31] #1: ffff888034512518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 920.801917][ T31] #2: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.812252][ T31] 3 locks held by syz.2.2509/17532: [ 920.819725][ T31] #0: ffff88806c6ba948 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 920.829227][ T31] #1: ffff888034512518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 920.840723][ T31] #2: ffff888034516950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 920.850540][ T31] [ 920.852855][ T31] ============================================= [ 920.852855][ T31] [ 920.865319][ T31] NMI backtrace for cpu 0 [ 920.865333][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 920.865350][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 920.865358][ T31] Call Trace: [ 920.865362][ T31] [ 920.865367][ T31] dump_stack_lvl+0x116/0x1f0 [ 920.865390][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 920.865407][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.865422][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 920.865438][ T31] watchdog+0xf70/0x12c0 [ 920.865460][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.865477][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.865495][ T31] ? __kthread_parkme+0x19e/0x250 [ 920.865513][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.865530][ T31] kthread+0x3c2/0x780 [ 920.865550][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865567][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865585][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865602][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865620][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.865634][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865653][ T31] ret_from_fork+0x45/0x80 [ 920.865665][ T31] ? __pfx_kthread+0x10/0x10 [ 920.865684][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.865712][ T31] [ 920.865723][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 920.998064][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 921.009852][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 921.019890][ T31] Call Trace: [ 921.023154][ T31] [ 921.026067][ T31] dump_stack_lvl+0x3d/0x1f0 [ 921.030649][ T31] panic+0x71c/0x800 [ 921.034537][ T31] ? __pfx_panic+0x10/0x10 [ 921.038942][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 921.043906][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 921.049636][ T31] ? irq_work_queue+0xce/0x100 [ 921.054402][ T31] ? watchdog+0xdda/0x12c0 [ 921.058806][ T31] ? watchdog+0xdcd/0x12c0 [ 921.063213][ T31] watchdog+0xdeb/0x12c0 [ 921.067447][ T31] ? __pfx_watchdog+0x10/0x10 [ 921.072111][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 921.077300][ T31] ? __kthread_parkme+0x19e/0x250 [ 921.082310][ T31] ? __pfx_watchdog+0x10/0x10 [ 921.086978][ T31] kthread+0x3c2/0x780 [ 921.091035][ T31] ? __pfx_kthread+0x10/0x10 [ 921.095635][ T31] ? __pfx_kthread+0x10/0x10 [ 921.100213][ T31] ? __pfx_kthread+0x10/0x10 [ 921.104787][ T31] ? __pfx_kthread+0x10/0x10 [ 921.109366][ T31] ? rcu_is_watching+0x12/0xc0 [ 921.114118][ T31] ? __pfx_kthread+0x10/0x10 [ 921.118696][ T31] ret_from_fork+0x45/0x80 [ 921.123096][ T31] ? __pfx_kthread+0x10/0x10 [ 921.127672][ T31] ret_from_fork_asm+0x1a/0x30 [ 921.132434][ T31] [ 921.135497][ T31] Kernel Offset: disabled [ 921.139812][ T31] Rebooting in 86400 seconds..