last executing test programs: 1m57.72131178s ago: executing program 0 (id=315): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40e983, 0xdf, 0xeb1, r0, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x201, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) 1m57.107097921s ago: executing program 0 (id=317): r0 = semctl$auto(0x7, 0x5, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="80050000", @ANYRESDEC=r0, @ANYBLOB="02002bbd7000fcdbdf25010000000400e2000000002000328005000300020000000500030002000000040005000800040000000000000be24c183fde5b9d4eaa60152c220b90f9370ed909cb387efd44283302b1f53dcde4e9bc252c784fea90af25c968b063e49d0c7166e007d16e", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00', 0x7, 0x3) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgid$auto(r3) sched_getattr$auto(r4, &(0x7f0000000000)={0x5, 0x80000002, 0x2, 0xc19, 0x1, 0x0, 0xfffffffffffffff8, 0x4, 0xfff, 0x1}, 0xfff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3ff, r1, 0x8001) mmap$auto(0x0, 0x801004, 0x8000000000000001, 0x40eb2, 0x402, 0x80300000000000) 1m53.207631378s ago: executing program 0 (id=332): mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r1, &(0x7f0000000340)=""/231, 0xe7) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00", @ANYBLOB='F'], 0x24}}, 0x4000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r4, &(0x7f0000000240)='/\x00', 0x100000001) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video6\x00', 0x80383, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m52.643831181s ago: executing program 0 (id=335): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffc, 0x7, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x9, 0x0, &(0x7f0000000140)=0x1e) getsockopt$auto_SO_ERROR(r1, 0x6, 0x4, 0x0, 0x0) r2 = getsockopt$auto(r1, 0x9, 0x1, 0x0, &(0x7f0000000040)=0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000c87d93b646e912f0e76d8adc63a23adc3dcb1ab1b05a5eb76b8b5037b80cd494fab2e18c8b44d49d0637efdbcb43e54b01a8ef2a52a025d1ba023f3c2d78d282c27c4e8ead758901db877d26e1cb6e71100f616638628773", @ANYRES16=r5, @ANYBLOB="020028bd7000fcdbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x2004805}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r6, 0xb, 0xa79e) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/102, 0x66) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x2102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x28, 0x1, 0x0) 1m51.439155229s ago: executing program 0 (id=339): socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) bpf$auto(0x23, 0x0, 0xe000000000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100df251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) fstatfs$auto(0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) 1m50.758337836s ago: executing program 0 (id=341): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x8, 0x0) (async) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, r2, 0x23, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048008}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', 0xc2581, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20009, 0x4000001000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x100085) (async) write$auto(r3, 0x0, 0x100085) mmap$auto(0x0, 0x20009, 0xdf, 0x12, r3, 0x8000) ioctl$auto(0x3, 0xc0485619, 0x38) 1m35.574657517s ago: executing program 32 (id=341): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x8, 0x0) (async) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, r2, 0x23, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048008}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', 0xc2581, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20009, 0x4000001000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x100085) (async) write$auto(r3, 0x0, 0x100085) mmap$auto(0x0, 0x20009, 0xdf, 0x12, r3, 0x8000) ioctl$auto(0x3, 0xc0485619, 0x38) 6.687009772s ago: executing program 4 (id=767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffc, 0x7, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x9, 0x0, &(0x7f0000000140)=0x1e) getsockopt$auto_SO_ERROR(r1, 0x6, 0x4, 0x0, 0x0) r2 = getsockopt$auto(r1, 0x9, 0x1, 0x0, &(0x7f0000000040)=0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000c87d93b646e912f0", @ANYRES16=r5, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2004805}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r6, 0xb, 0xa79e) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/102, 0x66) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x2102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x28, 0x1, 0x0) 5.218724546s ago: executing program 2 (id=773): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x82400, 0x0) setsockopt$auto_SO_SNDTIMEO_OLD(r0, 0xb7, 0x15, &(0x7f0000000040)=':\\#\x00', 0x2cc) pwritev2$auto(r0, &(0x7f0000001080)={&(0x7f0000000080)="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", 0x2}, 0xe74, 0x0, 0x445f, 0x35929f69) r1 = dup$auto(r0) ioctl$auto_FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000010c0)={0x6, 0x3, 0xe, 0x7, "5a4e090176db0a59"}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), r1) fstat$auto(r1, &(0x7f0000001180)={0x7, 0x2, 0x0, 0x9, 0xee01, 0xffffffffffffffff, 0x0, 0x800, 0xfffffffffffffff8, 0x2, 0x8ff8, 0x0, 0x4, 0x4, 0x9, 0x1, 0x1}) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f00000024c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000001240)={0x1218, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SELECT={0x11c8, 0xe3, 0x0, 0x1, [@nested={0xe7, 0x27, 0x0, 0x1, [@nested={0x4, 0x81}, @generic="dce465a2782f492e4e7f92cf4f6f49c2bfe089952325c69aa4508cd04c2f211a8148210290ddbdf2398b80bfe685ff45901663d21081e1d4357d18003427194ad23a2e129cb4732b1c8c4fbe1d7401bc11885a6093ee85084bc9ace402a8b2ea28d1785ef528aad962496fcaee31d96bc5b7f2dfe9a0db656291edc56aa8c7ab6ead5a5b305c2d3f3e3dcdfbbec8753f3327be37dc2e7add968a2712ce83b52da45d2ed28911c725e9e69c2d2e1b21eb8e928f00350d75a01a5e3ab3ebd8e24a3a948e5618c5c3efd0a3829bba78ca4559da8d", @nested={0x4, 0x70}, @typed={0x8, 0x78, 0x0, 0x0, @uid=r3}]}, @typed={0x5, 0x134, 0x0, 0x0, @str='\x00'}, @nested={0x10d1, 0x7d, 0x0, 0x1, [@generic="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", @generic="09c148e39f1ae962dafa1a840b03ada70dae", @generic="0ecb61a015ca478de8adfed7b3a110ce774277c3fe69d8292fdb03b93e410109a93a336044683194a5d296fc3aac6c34c6e1d04d50fc97d19d2e818b1b2dbe2118944bd51c613391f767cd8dd446bcf15104c971cdc57dd7d71e064ae066595c0b591a0684e3fbbd4699e708afa68b3f79b2b670d0c02a4c7c181cc9bdea43d20b86159c59afc7e52f2e7421e5fc31201e7b26e5f44faa13210fc0ca7632e8063e80fbcb00ccc0895b73280c68e93e1ebd5a3f78963d9a7839ea6e"]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x2e, 0x7f, "2b8ed71e5555f49a4cea17b1a439374e70c19157894f628bd4278872f457904c9aea0409205921f7a619"}]}, 0x1218}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000002500)='/sys/kernel/debug/netdevsim/netdevsim4/psample/enable\x00', 0x0, 0x0) r5 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000002540)=@batch={0x4, 0x5, 0x1000, 0x10000, 0x4a55, r4, 0xa, 0x9}, 0x2) r7 = clone$auto(0x9, 0xda2, &(0x7f0000002600)=0x5, &(0x7f0000002640)=0xfffffff7, 0xe) r8 = prctl$auto(0x4, 0x401, r7, 0x7, 0x81) r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002680)='/dev/dsp\x00', 0x20902, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000026c0)="ac27c50018ea2d925404f6f13da0ec6e32061d48c3b1de44d0e8d3c91b297e6676ddd53a4381d76fd075ee037a0c0290b3e3f456f19fec2c561870a2a94a9ac2f47025cc0ccdb15ccd6bfd5b43f54142e657899991cce864b737cb428d9cce40304bf37bb4047d84f1a02ad2ddb8ea9cce9ba4f95bcd118d90790a342e083146d4a719ecda4a7c5764fea4e51ab9") ioctl$auto_BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000002780)=[{0xf34b, 0x8, 0x5}, {0x7ff, 0x400, 0x6}]) r10 = socket(0xb, 0x6, 0x7) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000027c0)="7f12b8bb955748130cca3495ce19782c793cb17e5fbba114848d411ff2532e29e3f87982a5b0e2043e61528ade4b0cc95e6c0c9494310bc0be5e83149a03aa8131b753a3df03") setsockopt$auto_SO_ZEROCOPY(0xffffffffffffffff, 0xfb, 0x3c, &(0x7f0000002840)='[\x00', 0xa540) ioctl$auto_RTC_ALM_READ(r8, 0x80247008, &(0x7f0000002880)={0x9, 0x6, 0x7, 0x2, 0x9, 0xffffae6b, 0xa225, 0x9, 0x3}) ioctl$auto_TIOCGSID2(r6, 0x5429, &(0x7f00000028c0)="21e6d34168944568ab436499dee338252d580f1189441d5a2de527d6e541c1dbcf96f39af81ae24422489ad1e6512a3ca3d66c9ee1de34a49de4b55728644c357e53824e4ff110865c623fcfe933d8a6154cc2462b77823ebdf7842058c68d9bea08ae75") ioctl$auto_SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000002940)="b099a4cd7a7751a8bf9e9d82dc33d97602aed5594d340a192aefec358d9e3a4f900889e97645b48bdcc0744ff6581bff5aef5b3df54ea983c8457be6f633cfb14fd4e4c2227771d72f33fda81895ddcc6b46fd0ebdd2eda7195267d0ac0b237578bd52f655cf83fa94de5f2792dc666f8288d7c558d4f10e873f58f624f9036a1eacf2c043a2ecdb80e7722fb9a5c4e73a649b511b") ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002a40)={'syz_tun\x00', 0x0}) sendmsg$auto_NL80211_CMD_CONNECT(r10, &(0x7f0000002d80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002a80)={0x2a0, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1fc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1f5, 0x2, "c1086d7d822e006af542e7a26e80648684c823f70bfc61a6de9733e8d7bec0cf44bac99b9f5d4539bbce3a1948d44595b43eb23aaaf76d74c7bcc7ad3548f428c9d78dc57e2f6d3c871c9bf1bf597f028147b78943de2ce73fd98b4096fc2ab7ad4a9359e3af35869d40b46e19bacf0910d794b2376f49bf823e52e2bea76033e44e110b76f847afb890ca8261268c110e60711b28024c1f247785645e312e1818b80aa9c812b5b45397959889e158492f094e854f1f5a989eec1c15116f924baa976dee398fdfb553386c36599253512eed5de2973aba2ecab1d4476af128f53816232b169e67dcb9ce299c9f1c0e69721b0b7475f0c9b6b02510b926dd876c13335050432f7264d738a3eec615be70e141af67a6fe45b18cfb6ac406906637c8ed5d695fb740c540bd7a6c0d0416d0e1ceffe6f6cd426d0fa010fbf4186a3830ac59957fcc3f0845ad0ef1ead81f61c7aab5c2691c132294af81e7273ead0251d038c8109f406cb6290c63e7ab48edfdd8c11598a0a6baa6f506420a03c37d7f0cfc180f940559811da75a0c07bcd8c895e8b5d9f16f9857782f68053d5a6687110f4775753756394f67719aebcf6968a8c093933f586a3f2f5809e7803974488af8aac2446d031c673298fc08a362fdfa6c51b15b06518d826b6ade7228311d99345bf1550da8d5e3043c1716fd4b6b"}]}, @NL80211_ATTR_PMKR0_NAME={0x51, 0x102, "ad89c332f875d8f4a3e33acec5bbc4386569af4ad78bd632df431087d25e40581f161d7fba82571ba64ab9c11a4a8f061a034314fce7ccfec6167ad42f3486a6075b017726b021d9afcc9ee2c6"}, @NL80211_ATTR_FILS_KEK={0x32, 0xf2, "84cf6cfbef67f378f30627083389ee0433e069342837f0698609647b51f0688cc532ca74c843c572451f03ea11e4"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4044}, 0x94) r12 = io_uring_setup$auto(0x7, &(0x7f0000002dc0)={0x3, 0x2e, 0x9, 0x30db, 0x7, 0x85a, r1, [0xfffffffd, 0x9, 0x1], {0x2, 0x1, 0xdbeb, 0xfffff801, 0x118c, 0x5, 0x8, 0x0, 0x8}, {0x1, 0x3, 0x2, 0x4, 0xaf0e, 0x2, 0x5, 0xb14, 0x3}}) recvmmsg$auto(r10, &(0x7f00000030c0)={{&(0x7f0000002e40)="360956e4fa87ca9803bd4c339765ddca3ecaf6f99ead741521199cce35361b1305cf405880cfc38d1f28dd28fa053785dc7e571fe938785c5ba6ae6a2eb54be90398dd04688088c92316c8c6724f854e7a243ab5b5c161f7306418c383f868c2a536db922d6f8791ade508abf1660e12a13c2877a9b6b1", 0x4, &(0x7f0000002f80)={&(0x7f0000002ec0)="6cecb136a9758734095647f64cc41f65860de9c956f8fc35041d9ac4ded4b990623811c00a0aecd10a48a1d62bd19695ae8187cde14f3cae97bec509eddce1415ff0da74cdb7a590c4b277d13b38709882ccda794b7f7ca4937b8f95d174da41caa702176debd1a1ef83a410f093921cc6c700a0649bf2b774e5d2654c4722cc8736b1", 0x9}, 0x7, &(0x7f0000002fc0)="83235db09b73062ed112a1cae2005cba69c41d235ee014795930cc31c76455905080ab1920d3846c7db68f8ce53e58fc2a3abd2ce4d9589610e999360b734c4cf5c64387c1b6dd62ed50f4c4127dbb3f6655ac57adae29bae8a2cb2c589b092d0a02cd3df726441ef2a152067529cd1e368611fdb3214a2024435868c8d684791e4c0b4efb014cf80efef03c9dee06caccec7bcfd9c56c572981e55b7701a92402b04556a300838f4ac87e4ae3f3fccd2e0ec57310853ba5f2b86293c0684cb6a2d7ec538e4b388441efdba2efa7ea463c61daf216cbb9a8bb0456a18072dfca7f992422accfa9d86e08337e38016f2e08c43c", 0x5, 0xffffffff}, 0x9}, 0x7ff, 0x8, &(0x7f0000003100)={0xffffffffffffff80, 0xd}) r13 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003180), r12) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000003280)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x54, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x8001}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9965}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xfffffffc}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r11}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xfffffff9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x810) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x40000, 0x0) capset$auto(&(0x7f0000003340)={0x6ac6, r7}, &(0x7f0000003380)={0xc, 0x6, 0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000003400)={0xa, 0x6d2, 0x26, @inferred=r14, &(0x7f00000033c0)={@inferred=r7, 0xfffffffb, 0x8001, 0x101, "b0ca40bba7eb9887e403091607354aefa77665c2ee313625d70e23b4d8431d98c0e4d48276ce5136b26d007e", @inferred=r7}, "f436277002bc24c9710ca7b83d9a4f0e13e9466aac691b6c32b7aa72627ffa00078e115a0962581d759d3484c0a3c7abfc72"}) 5.215504821s ago: executing program 4 (id=774): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x6901, 0x0) (rerun: 32) mmap$auto(0x4, 0x8001, 0xc2c, 0xff, r1, 0x40000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='i\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 32) mq_getsetattr$auto(r1, &(0x7f0000000000)={0x7fffffffffffffff, 0xffffffffffffffff, 0x9, 0x3}, &(0x7f0000000180)={0x401, 0x10001, 0x5, 0x3}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(0x0, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x4c, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c) 4.751821428s ago: executing program 4 (id=777): mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x5) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xfffffffffffffe81}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x128, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xfff7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x49}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_SE_APDU={0xf3, 0x19, "91412d5d9ba98b943a32eb448b4bcdb968b5342f8dfe35c293f23967ea833f2785b98c7273a8c4eefae0f2bcdfd1b24d923defa2a7d87ab8f3e1cf09f081207ee4a1460b493d4ce468fe0cb6b763cd790af8ffcf609d726453ca7b16813fd61d87587da5c30019d2cab9982b1a856cd783918f687a43d3cb4c024ca81cf5ccf78f1a478fbaad3e2770d4d6dbc4468be22595ffb218cbbd5bff64b3985cf66e3033ecbc2b7831adba97db572fc05f7271beaffb5ad9bef3ac9cd7b62b8712d17acfc3cd00c0530bd643184f6110e56caed5f3f8df7eda0e4ce882c0ce14648ac6cd4fcfc6ad0f6f19ff466a560bdfe4"}]}, 0x128}}, 0x2000c800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) 4.751338159s ago: executing program 2 (id=778): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r1, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = eventfd$auto(0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_prepare\x00', 0x2400, 0x0) read$auto(r5, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9) readv$auto(r4, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r4, 0x0, 0xcc9c) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) r7 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000001c0)=@query={@target_fd=r7, 0x1, 0x86e6, 0x9, 0x63, @count=0x4, 0x0, 0x6, 0x2, 0x10004, 0xb716}, 0xc) 4.693920952s ago: executing program 1 (id=779): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x79, 0x0, 0x0, 0x20) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x9) 4.314562716s ago: executing program 1 (id=780): r0 = socket(0x37, 0x800, 0x106) setsockopt$auto(r0, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/rto_beta_exp_divisor\x00', 0xa0081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f00000001c0)=0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0xb, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) statmount$auto(&(0x7f0000000240)={0x2, @inferred=r4, 0x6, 0x5, 0x6}, &(0x7f00000006c0)={0x6, 0x3, 0x6, 0x9, 0x6, 0xef2, 0x80, 0x3, 0xf6d, 0x8000, 0x3, 0x5, 0x100, 0x10001, 0x8, 0x9, 0x1, 0x10000, 0x0, 0x1, 0x7, 0x44f, 0x7ff, 0xffffff01, 0x5a9d7750, 0x40, 0x81, 0x1c00, 0x3, 0x8, 0xf, [0x9, 0x9, 0xffffffffffffffa0, 0xa787, 0x200, 0x86, 0x6, 0xb8, 0x6, 0x0, 0x4, 0xe, 0x10, 0x400, 0x2, 0x17a8, 0x6, 0x6, 0x40, 0x9, 0xffffffffffffffff, 0x8, 0x3ce3, 0x732c, 0x2cd2, 0x8, 0x5, 0x5a3f, 0x6, 0x1, 0xf94c, 0x1, 0x3, 0x3, 0xd7ed, 0x8, 0xffffffff, 0xe, 0x10, 0xfffffffffffffffa, 0x5, 0x1], "8ed8d1d33690aac3275b5414b077f16708a0bb7bfa96b2d500f35772defa9ecbbc59"}, 0x7, 0x7fffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) listen$auto(0x3, 0x81) 3.000115344s ago: executing program 2 (id=783): socket(0xa, 0x801, 0x106) r0 = socket(0x2b, 0x1, 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) mmap$auto(0x8000000000000, 0xc4c, 0x29, 0x16, r1, 0x8001) r2 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r2, &(0x7f00000000c0)='/dev/dma_heap/system\x00', &(0x7f0000000380), 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x84200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x89, 0x1f, 0x3, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0xc8c, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.939971955s ago: executing program 3 (id=784): socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) socket(0xf, 0x3, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) add_key$auto(0x0, 0x0, &(0x7f0000000080), 0xb, 0x2df) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x2, 0xd8ce, 0x8000, &(0x7f0000000040)=0x9, 0x4, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) adjtimex$auto(&(0x7f0000000080)={0x2, 0x0, 0x100, 0x9, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x9, 0xe, {0x4, 0x7}, 0x8c, 0x8, 0xda0, 0x0, 0x0, 0x6, 0x8, 0x737, 0x6, 0x6, 0x3}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 2.856009507s ago: executing program 4 (id=785): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) mmap$auto(0x4, 0x40000000000008, 0xff, 0x9b72, 0x2, 0x8002) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x300) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xda0, 0x400, 0x9}]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r3, &(0x7f0000000000)='#', 0x1) socket(0x2, 0x1, 0x0) getsockopt$auto(0x100000006, 0x1, 0x28, 0xfffffffffffffffc, 0x0) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) socket(0xa, 0x801, 0x84) r4 = open(0x0, 0x22240, 0x154) execveat$auto(r4, 0x0, 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0x8, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) socket(0x2, 0x1, 0x0) 2.722426299s ago: executing program 1 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x25, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @rand_addr=' \x01\x00'}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @remote}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x48004) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0xa02, 0x70bd26, 0x25dfdbfc, {}, [@NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x128dd477a6a0c06f}, 0x800) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) (async) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) (async) r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x400000, 0x9) (async) r4 = prctl$auto_PR_SET_MM_START_DATA(0xcb6, 0x3, 0xffffffffffffffff, 0x2, 0xb) move_mount$auto(r3, &(0x7f0000000340)='./file0\x00', r4, &(0x7f0000000380)='./file0\x00', 0x9) mmap$auto(0x100000001, 0x10, 0xd, 0x7fffffff, r2, 0xf4) (async) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/uid_map\x00', 0x101000, 0x0) write$auto_proc_uid_map_operations_base(r5, &(0x7f0000000400)="ad352af150e483b0aaa3a4e1c1c554", 0xf) (async, rerun: 32) fcntl$auto_F_SETOWN_EX(r4, 0xf, 0x7fff) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_NONE={0xf4, 0x0, "785ca099641d16b7a379a9736b399c9b606c828f1deed5cad4fc3ecb71892bf5b5e627d68f5822824ed7f0f3e73d0d5d7eb9ba8e141c25f33b7a5542f13ba16623620ffa7947c9a02301b6f7b3a3abde2fafbe112ca709059c9312a36f7e7dcf9fbfa576f8e7654dbf6661f4d68429a1a4d5926d96aeaa305e9ef54bf18957b83b3a77b2cd367c5621fa6e00d02a546ba684cad061c6f7a1071c7d4e70f657fafeba25c5419a9275a00310e83b67385770fd515de3a1be42ff985b4b42f4dd0b8819f0a129552eaefac471788e7a632780eba85e88a90e7a3362a0708f49dc236daaf7573283e48bbed8b6338333981f"}]}, 0x128}}, 0xb13568597765d8bb) (async) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/numa_maps\x00', 0x4000, 0x0) (async) r7 = fcntl$auto_F_GETOWN(r4, 0x9, 0x6d) r8 = pidfd_open$auto(r7, 0x61) (async) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000700), 0xffffffffffffffff) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000800)={{0x7, 0xee01, 0xee01, 0x7, 0x80000001, 0x5, 0x1}, 0xd546, 0x4, 0x1, 0x7fffffff, @raw=0x7, @inferred=r7, 0xc7b, 0x0, &(0x7f0000000740)="3847cf0359128307359232197f3c31abc4c609b8bfd7424495513c9299e1aa4e909ffbc7d954137007cb3274dd9dd78a7cfac2dc4adc4af69cc2cf70ea2259a230f266510e1a9b6a", &(0x7f00000007c0)="c4b2f0f25802f057562d6ae03d4aac874bfdea657da4bcb31eca962931362b9390791ef1f5189111dd9f72b1cb2cfcc54dced9e6280cb274"}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000001040)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000880)={0x75c, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x26c, 0x3, 0x0, 0x1, [@typed={0x7, 0x93, 0x0, 0x0, @str=')}\x00'}, @nested={0xf8, 0x58, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @uid=r10}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r7}, @generic="4bdee5d899f20bb18c98b258e3a4ace5f280653d7fc278d56788266cb08a4419e11149c9810f2490bbf60e544295b3064e937c309f0e67bf5f8b8d087c88757baaa31b7d81969a37b6218c8b4cc94283a47f76618550515f79c0a03388fe79062f07c1b9db2c1af9de8f36ca69e93c57b83fc14bdb7833e48ffd21fa73ab5c2154fab3b44dccaf41ddbbee1058485511735653b83bf0f27391fd87ac52bede9b326b93b86e6447ba27a36d07e46108a89ad542b2bacae369c825e48fb2bed12264b1f139", @typed={0x8, 0x52, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x56}, @nested={0x4, 0xcc}, @nested={0x4, 0x119}]}, @generic="9a6bf4cc1b40c8aa24980f89d2c5846bf99ff016cfb35d211100964a0133cdbaca03e4f29ee77fcd3df6c4e730a60ba27df8a7d230c03726b259ac334d1dd4be940945ea916325e0d6ea272328b8a245640d367ac40f44371f09299ba6addedc6b8ee4903c1ad17bb9311ec6711820cd830d170f43f950be3d2bdd07", @typed={0x4, 0x672}, @typed={0x4, 0x7b}, @generic="7f09db9f7565944bc119427c95565f97b63f2c310b02ad584ae84dfcfce90556905478c889e23bf336cfbc5fd2e3fa1e38b984fa7e5f35bbee01f90eb54a981e3858d9670f779b1ebe5530cd90bad0adc9d723d6e007c995a179780ca94d030157c05e2886314466827fe2369c93a4f93e28a8ebe5d6f2db5bc4a3194ce47661123001f36e260fec3dfd5b98d00cb4e3d6b658727cfc6ee55f59a57428b6deab8731d153bfb4a50d30b4e1821be606428fc0fdafdc420ab96fdd33d5b550549e47b1e35fb78fa9749ecba1700e3504481c1928a91d2b1a453b4143572d0e2e22c5a3cb16"]}, @MACSEC_ATTR_OFFLOAD={0x2af, 0x9, 0x0, 0x1, [@generic="cab450f5c5d54775b3b1cdf845a4ae4688232378fe609af19282d4e1f54dd8311312ed006d7d82e2cf7d274e26ee333b5b248d2a019f7c84e94bc4f834c21c328cf90a00ca3bb0991c8495f041037efd3d8ed20a76810e956ed5b3eef7def46c9fb3d14570f736749a7a0b548c239debf53427d7922adfcc70b54a7c506c5de2d5ce3292b31692818d37227ed1a5c02c4f107ccddd3edf2fcc8d54ec0937050f1493925240b7632fb341eec85a3c1d2b4725335b144644512176335026a7500185d10cafb25889", @nested={0xd7, 0x113, 0x0, 0x1, [@generic, @generic="5cdc3d788666a3c8f8aff95a214af48e5e8096bdd8a0aa0ae9cdd53ec900072d0eb71029eb6911092372e963d08b27c998d48b4db83f26", @nested={0x4, 0xef}, @typed={0x8, 0x11d, 0x0, 0x0, @u32=0x8237}, @generic="f4850fef7e7be4fdba9db44a37596ded604b5c29a89a4210e375d4a888efd63c2c45f5794356d1c445bf4c9748a4044fd481952a406962e46e12f3ee44b074c87845b96c97504e4c97acda2ec6cd6dcea0324254cbdd17bf5bebce1e0e94659e6859cbda25c2e62cde1b63c82b594e8d059210492eb58762395e8e024942ee0245bb59adb2cbaa191e73a64e60ad1e8b"]}, @nested={0x101, 0x128, 0x0, 0x1, [@generic="4f88d2646f11810fc9fc4f6df74951f01d6691bf9ae047c1146a62c2676c12fbddd0825d258f52efbccdc5dea766819ee2f2acd7be8580340c97d0c86bae979aa0427b12589aeb9340f2c570da7d93a449a2cbd71a395f42eca54ef795533f83b83d6ccfe293d8dc39e03d40a9ad0103bb13389a950da7d7c9cf8f739ab0458d5a8b4b6e3d0d277502a197652a1b03f6f9456f082c193af9711a8f8e49b3955da4b8a33ecafdd60195c7cf3afe4cf98b57a66c04ced02f662a017cedbba00afb57cf7fcc7d934344369316425781d0f553d6dbf0fe97c6fba0f8b96c5ccc8b4221e353a43795f7a73342f14021e26fe56e2bf323c3e18db8ee", @nested={0x4, 0xdd}]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r4}]}, @MACSEC_ATTR_OFFLOAD={0x22b, 0x9, 0x0, 0x1, [@typed={0x14, 0x56, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}, @nested={0x48, 0x66, 0x0, 0x1, [@nested={0x4, 0x8d}, @generic="e7f76fbcb01c6bacf12e6be132a37c2c6a2d8b2e07553bca140234f677d7c9534817ef454c99a40232fb2e632996b5d98b482a778240ccbb1b65a94c1dd0c232"]}, @nested={0x68, 0x133, 0x0, 0x1, [@typed={0x4, 0x41}, @typed={0xc, 0xea, 0x0, 0x0, @u64=0x80}, @typed={0x54, 0xd0, 0x0, 0x0, @binary="02886ee4b1615be9db1bec6724ff6ac2dd600817ecbe82ec7f84c6c56f962dadb544571292e99dbebc314d206c614db689a6a7ea9578f265089a272851057c416f5a8d68e7b57f10bb70edb953adea06"}]}, @generic="a9804c63ee4302b3591df5d77245c9ae184a87e92e4fbbd136d89d1697ac456f3f27d5d5413bcddc33fc65549158b3ab237278e096117ff83a272f8eb715b19623b6ffa53e10613fedf1fb9fcc9a6277dc1f24bccd8aaee27bb88b422c15b08302402969275f578b8052e6637ab732afac1565327892d9eb2a802a6893fa4d472da839ebd9f80aaff1a5da68f3b2a2b00a56c8414a19bae417d5af7adcf06802379ad2bc98fccce58fcce1ee07784f88ccf68d1cb370b75ea96037b340d4f69a20a946f26f6ea7d005d60bb98424ad08827ac00bde9e59c6ef3dc82c2278e672518ff2d90fa017b460a73cb265b2f1b102257fcfbd0a4b129fc0b7", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x5}, @typed={0x59, 0x83, 0x0, 0x0, @binary="beee90dfa2953a5a6b6a3dd38651c8de0ce007d7cd27de249600c864feae6aecea18f77e296e22225585cffb3891fbc701d2f71455d817ac7f80c1c58b63d1fb38e81aedad19ee7d1fbef03c8828f28f06f499980f"}]}]}, 0x75c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000001080), 0x404700, 0x0) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), r0) sendmsg$auto_NL80211_CMD_GET_MPATH(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r11, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x14}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x82}]}, 0x28}, 0x1, 0x0, 0x0, 0x20051001}, 0x20000000) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000002380)={r3, &(0x7f0000001200)="cdb8f35d2df8b37484d26de0684f07759c7d09d4593bd2d3a0970739995cdc760270d620ba8ece72ea0ac510ff5964106ec4c378e580c6d3ab2de39cc66475674e0eac0dbe0090a69da0de074e44d4fe11d559c5a8ddb0da14eaac46f56aba556e8c0031ea03f15be37f01218dc0f7f052f63e4651dedd34eda135981aefdc1b5f1d0430c969e730cb197376e2ed783a6535461fab81f689fc72acff4edc703f3adc12044485a6e2b664e22199ab6eb4e025af33655e44e3f7ff2268a5b64f63451c656f6ec139", 0x6, &(0x7f0000001300)="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", 0x6, &(0x7f0000002300)="23fe33a275653b90c092ad58f03a9e21c377a948f0f873a4980b13d6ac32d0c6757e9454d17582171d4f03bb991667377b80bf", &(0x7f0000002340)=0x6aa0f00a}) (async) r13 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002400), r0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r12, &(0x7f00000025c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100001000}, 0xc, &(0x7f0000002580)={&(0x7f0000002440)={0x104, r13, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x21, 0x3, 0x0, 0x1, [@generic="7752b2a009b14bbb041e76a8b1585d39d74fc3efc6b88ed6e21e5fbb6d"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xb1, 0x2, 0x0, 0x1, [@generic="97f826ac59c9fe26f125d26dac7b39383f1cba235544004e68282007a58bcd106be224f894b6ba6ef59abb517fa24b40acbd6f52bd33142225078c50d9eef7e5c2b408ceb40619b75a4da8bb81872ea83d6af4607db4c414f8c3063df254146c10c3b0549c0ab5f1a8", @nested={0x43, 0xb8, 0x0, 0x1, [@generic="6d1437edfde92240e2382797624abbb7a5c00a162866d2dae3579cd2a65e72da52dde373a13780bbb4", @generic="9e4965319d399f48d21d61bb277deb57a4a6d5590729"]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4800}, 0x20048010) (async) read$auto(r8, &(0x7f0000002600)='\xa7]*\x00', 0x1ff) (async, rerun: 64) r14 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer\x00', 0x2, 0x0) (rerun: 64) ioctl$auto_SNDCTL_MIDI_INFO(r14, 0xc074510c, &(0x7f0000002680)="b2c43d92bb713913f23a06f6020c80d84dcbff2255c6839fb208b75901442e5ec27781c6730db0362b8acc7fa4937e38fb45") 2.044519838s ago: executing program 3 (id=787): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyy7\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, 0x0, 0x4fffffdf2) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, 0x0) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7f, 0x4000000000df, 0xeb4, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) creat$auto(&(0x7f0000000300)='./file0\x00', 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/xrun_debug\x00', 0x4a2202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) io_submit$auto(0x4, 0x81, &(0x7f0000000140)=&(0x7f00000000c0)={0x6, 0x2, 0x7ff, 0x9, 0x0, r1, 0xc, 0x9, 0x1000000000000000, 0x0, 0x1, r1}) 2.040218431s ago: executing program 2 (id=788): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x79, 0x0, 0x0, 0x20) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x9) 1.902075087s ago: executing program 4 (id=789): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1.835836324s ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mtrr\x00', 0xa8240, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) fcntl$auto(r2, 0x8, 0x1) fcntl$auto(r2, 0x11, 0x2) socket(0x2b, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x3c, 0xffffffffffffffff, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, r3, 0x300000000000) 1.743816153s ago: executing program 2 (id=791): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/12u\x00', 0x589200, 0x0) setsockopt$auto_SO_BSDCOMPAT(r1, 0xfffffff7, 0xe, &(0x7f0000000040)='({.$^\x00', 0x1) 1.301972391s ago: executing program 2 (id=792): ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, 0x9, 0xe, 0xc, "9eee0000663407d4"}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_proc_mem_operations_base(r2, 0x0, 0x0) mlock$auto(0x10, 0x10) mlockall$auto(0x7) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000) mlock$auto(0x749fd573, 0x204a) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xc, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x5, 0xa, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 1.049327476s ago: executing program 1 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mtrr\x00', 0xa8240, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) fcntl$auto(r2, 0x8, 0x1) fcntl$auto(r2, 0x11, 0x2) socket(0x2b, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x3c, 0xffffffffffffffff, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) 968.957083ms ago: executing program 4 (id=794): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x400) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x1cbf03, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x7, 0xa7be}, 0x2007) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x1, 0x7fffffffff7fffff, 0xc) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 705.502788ms ago: executing program 3 (id=795): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/lockdep_stats\x00', 0x400, 0x0) socket(0xa, 0x2, 0x3a) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000540)=""/89, 0x59) mlock$auto(0xfbe8, 0x4) mlock$auto(0x1a81, 0x2) mlock$auto(0x7c88, 0x7fff) 340.840361ms ago: executing program 3 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="0ef9f18c"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r2 = socket(0x11, 0x2, 0x0) landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000040)="e6e2927b07109f4ce1068342a0df04bf7c2a6cf09343496e199e28a7da4a56637543e90e0e55fe7a5c0b", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8905, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cgroup\x00', 0x80002, 0x0) 177.556155ms ago: executing program 3 (id=797): openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/tracing/error_log\x00', 0x503, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/tracing/error_log\x00', 0x503, 0x0) (async) 150.574163ms ago: executing program 1 (id=798): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xd0502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddb"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0xa2741, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xe8ca) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x20) read$auto(r2, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x5609, r4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x3, 0x9) 0s ago: executing program 3 (id=799): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (fail_nth: 90) kernel console output (not intermixed with test programs): 5029][ T6982] veth0_vlan: entered allmulticast mode [ 131.159367][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.305204][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.466344][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.574103][ T6998] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 131.816247][ T7003] vivid-003: ================= START STATUS ================= [ 131.824144][ T7003] vivid-003: Radio HW Seek Mode: Bounded [ 131.831709][ T7003] vivid-003: Radio Programmable HW Seek: false [ 131.838843][ T7003] vivid-003: RDS Rx I/O Mode: Block I/O [ 131.844882][ T7003] vivid-003: Generate RBDS Instead of RDS: false [ 131.852752][ T7003] vivid-003: RDS Reception: true [ 131.862150][ T7003] vivid-003: RDS Program Type: 0 inactive [ 131.898806][ T7003] vivid-003: RDS PS Name: inactive [ 131.911834][ T7003] vivid-003: RDS Radio Text: inactive [ 131.956197][ T7003] vivid-003: RDS Traffic Announcement: false inactive [ 131.963439][ T7003] vivid-003: RDS Traffic Program: false inactive [ 131.971627][ T7003] vivid-003: RDS Music: false inactive [ 131.978950][ T7003] vivid-003: ================== END STATUS ================== [ 132.115188][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.714452][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 132.831578][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838363][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225266][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.249550][ T7047] block2mtd: device name too long [ 133.385286][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.545888][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.810566][ T7058] netlink: 334 bytes leftover after parsing attributes in process `syz.2.229'. [ 134.483329][ T7069] FAULT_INJECTION: forcing a failure. [ 134.483329][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.510504][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.1.231 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 134.510538][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.510551][ T7069] Call Trace: [ 134.510560][ T7069] [ 134.510568][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 134.510602][ T7069] should_fail_ex+0x512/0x640 [ 134.510650][ T7069] _copy_from_user+0x2e/0xd0 [ 134.510686][ T7069] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 134.510730][ T7069] snd_rawmidi_write+0x26e/0xc10 [ 134.510769][ T7069] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 134.510812][ T7069] ? __pfx_default_wake_function+0x10/0x10 [ 134.510840][ T7069] ? bpf_lsm_file_permission+0x9/0x10 [ 134.510875][ T7069] ? security_file_permission+0x71/0x210 [ 134.510905][ T7069] ? rw_verify_area+0xcf/0x680 [ 134.510941][ T7069] vfs_write+0x25c/0x1180 [ 134.510960][ T7069] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 134.510998][ T7069] ? __pfx_vfs_write+0x10/0x10 [ 134.511017][ T7069] ? find_held_lock+0x2b/0x80 [ 134.511040][ T7069] ? __fget_files+0x204/0x3c0 [ 134.511076][ T7069] ? __fget_files+0x20e/0x3c0 [ 134.511118][ T7069] ksys_write+0x205/0x240 [ 134.511140][ T7069] ? __pfx_ksys_write+0x10/0x10 [ 134.511159][ T7069] ? rcu_is_watching+0x12/0xc0 [ 134.511190][ T7069] do_syscall_64+0xcd/0x230 [ 134.511221][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.511244][ T7069] RIP: 0033:0x7f0da4b8e969 [ 134.511263][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.511284][ T7069] RSP: 002b:00007f0da5983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.511307][ T7069] RAX: ffffffffffffffda RBX: 00007f0da4db5fa0 RCX: 00007f0da4b8e969 [ 134.511329][ T7069] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000007 [ 134.511345][ T7069] RBP: 00007f0da4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 134.511359][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.511374][ T7069] R13: 0000000000000000 R14: 00007f0da4db5fa0 R15: 00007ffd48e1a5e8 [ 134.511406][ T7069] [ 134.794975][ T7079] synth uevent: /devices/virtual/tty/ttyua: unknown uevent action string [ 134.803697][ T7079] tty ttyua: uevent: failed to send synthetic uevent: -22 [ 134.948540][ T7080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 134.975302][ T7080] CIFS mount error: No usable UNC path provided in device string! [ 134.975302][ T7080] [ 135.015468][ T7080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.899846][ T7145] CIFS mount error: No usable UNC path provided in device string! [ 135.899846][ T7145] [ 135.947011][ T7145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.744726][ T7159] random: crng reseeded on system resumption [ 138.072582][ T7184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.368845][ T7184] netlink: 'syz.2.246': attribute type 4 has an invalid length. [ 138.400642][ T7184] netlink: 314 bytes leftover after parsing attributes in process `syz.2.246'. [ 138.597049][ T7192] random: crng reseeded on system resumption [ 138.689540][ T7196] netlink: 19 bytes leftover after parsing attributes in process `syz.1.249'. [ 139.192869][ T7202] random: crng reseeded on system resumption [ 139.249094][ T7207] < [ 140.348394][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 140.441032][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 141.032616][ T7239] FAULT_INJECTION: forcing a failure. [ 141.032616][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 141.064331][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.2.258 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 141.064363][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.064376][ T7239] Call Trace: [ 141.064384][ T7239] [ 141.064392][ T7239] dump_stack_lvl+0x16c/0x1f0 [ 141.064422][ T7239] should_fail_ex+0x512/0x640 [ 141.064451][ T7239] ? fs_reclaim_acquire+0xae/0x150 [ 141.064483][ T7239] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.064511][ T7239] should_failslab+0xc2/0x120 [ 141.064537][ T7239] __kmalloc_noprof+0xd2/0x510 [ 141.064567][ T7239] tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.064598][ T7239] ? tomoyo_profile+0x47/0x60 [ 141.064632][ T7239] tomoyo_path_number_perm+0x245/0x580 [ 141.064655][ T7239] ? tomoyo_path_number_perm+0x237/0x580 [ 141.064683][ T7239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.064709][ T7239] ? find_held_lock+0x2b/0x80 [ 141.064761][ T7239] ? find_held_lock+0x2b/0x80 [ 141.064781][ T7239] ? hook_file_ioctl_common+0x145/0x410 [ 141.064812][ T7239] ? __fget_files+0x20e/0x3c0 [ 141.064848][ T7239] security_file_ioctl+0x9b/0x240 [ 141.064876][ T7239] __x64_sys_ioctl+0xb7/0x200 [ 141.064907][ T7239] do_syscall_64+0xcd/0x230 [ 141.064935][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.064957][ T7239] RIP: 0033:0x7f401db8e969 [ 141.064975][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.064995][ T7239] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.065016][ T7239] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 141.065031][ T7239] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 141.065044][ T7239] RBP: 00007f401ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 141.065058][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.065070][ T7239] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 141.065102][ T7239] [ 141.264839][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.284680][ T7245] random: crng reseeded on system resumption [ 141.297866][ T7239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.336020][ T7239] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.448322][ T7247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.562159][ T7249] netlink: 334 bytes leftover after parsing attributes in process `syz.3.261'. [ 141.981619][ T7261] random: crng reseeded on system resumption [ 142.213030][ T7266] Invalid ELF header magic: != ELF [ 142.382638][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 142.515421][ T7273] bridge0: port 4(batadv0) entered blocking state [ 142.523358][ T7273] bridge0: port 4(batadv0) entered disabled state [ 142.534315][ T7273] batadv0: entered allmulticast mode [ 142.541479][ T7273] batadv0: entered promiscuous mode [ 142.562961][ T7273] bridge0: port 4(batadv0) entered blocking state [ 142.569562][ T7273] bridge0: port 4(batadv0) entered forwarding state [ 142.777593][ T7281] random: crng reseeded on system resumption [ 142.845939][ T6085] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 142.855541][ T6085] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.894905][ T7285] FAULT_INJECTION: forcing a failure. [ 142.894905][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 142.913167][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.0.272 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 142.913198][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.913210][ T7285] Call Trace: [ 142.913218][ T7285] [ 142.913227][ T7285] dump_stack_lvl+0x16c/0x1f0 [ 142.913257][ T7285] should_fail_ex+0x512/0x640 [ 142.913285][ T7285] ? fs_reclaim_acquire+0xae/0x150 [ 142.913319][ T7285] ? tomoyo_encode2+0x100/0x3e0 [ 142.913345][ T7285] should_failslab+0xc2/0x120 [ 142.913371][ T7285] __kmalloc_noprof+0xd2/0x510 [ 142.913400][ T7285] ? d_absolute_path+0x136/0x1a0 [ 142.913432][ T7285] tomoyo_encode2+0x100/0x3e0 [ 142.913465][ T7285] tomoyo_encode+0x29/0x50 [ 142.913491][ T7285] tomoyo_realpath_from_path+0x18f/0x6e0 [ 142.913530][ T7285] tomoyo_path_number_perm+0x245/0x580 [ 142.913554][ T7285] ? tomoyo_path_number_perm+0x237/0x580 [ 142.913581][ T7285] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.913608][ T7285] ? find_held_lock+0x2b/0x80 [ 142.913660][ T7285] ? find_held_lock+0x2b/0x80 [ 142.913680][ T7285] ? hook_file_ioctl_common+0x145/0x410 [ 142.913711][ T7285] ? __fget_files+0x20e/0x3c0 [ 142.913748][ T7285] security_file_ioctl+0x9b/0x240 [ 142.913776][ T7285] __x64_sys_ioctl+0xb7/0x200 [ 142.913808][ T7285] do_syscall_64+0xcd/0x230 [ 142.913836][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.913860][ T7285] RIP: 0033:0x7fc11e78e969 [ 142.913878][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.913899][ T7285] RSP: 002b:00007fc11f650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.913920][ T7285] RAX: ffffffffffffffda RBX: 00007fc11e9b5fa0 RCX: 00007fc11e78e969 [ 142.913934][ T7285] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 142.913948][ T7285] RBP: 00007fc11f650090 R08: 0000000000000000 R09: 0000000000000000 [ 142.913961][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.913973][ T7285] R13: 0000000000000000 R14: 00007fc11e9b5fa0 R15: 00007ffc03fe6be8 [ 142.914004][ T7285] [ 142.914591][ T7285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.075996][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.096525][ T7285] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 143.278009][ T7291] netlink: 334 bytes leftover after parsing attributes in process `syz.1.273'. [ 143.536669][ T7293] Invalid ELF header magic: != ELF [ 145.309348][ T7345] FAULT_INJECTION: forcing a failure. [ 145.309348][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.324185][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: syz.3.282 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 145.324225][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 145.324238][ T7345] Call Trace: [ 145.324246][ T7345] [ 145.324254][ T7345] dump_stack_lvl+0x16c/0x1f0 [ 145.324287][ T7345] should_fail_ex+0x512/0x640 [ 145.324322][ T7345] _copy_from_user+0x2e/0xd0 [ 145.324354][ T7345] dvb_usercopy+0x27e/0x340 [ 145.324382][ T7345] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 145.324416][ T7345] ? __pfx_dvb_usercopy+0x10/0x10 [ 145.324456][ T7345] ? __fget_files+0x20e/0x3c0 [ 145.324495][ T7345] dvb_demux_ioctl+0x29/0x40 [ 145.324522][ T7345] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 145.324551][ T7345] __x64_sys_ioctl+0x190/0x200 [ 145.324583][ T7345] do_syscall_64+0xcd/0x230 [ 145.324611][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.324634][ T7345] RIP: 0033:0x7f771138e969 [ 145.324652][ T7345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.324673][ T7345] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.324694][ T7345] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 145.324709][ T7345] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 145.324723][ T7345] RBP: 00007f7712120090 R08: 0000000000000000 R09: 0000000000000000 [ 145.324736][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.324749][ T7345] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 145.324779][ T7345] [ 145.349011][ T7347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.495685][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.050252][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 146.137710][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.239850][ T7363] bridge_slave_1 (unregistering): left allmulticast mode [ 146.278457][ T7363] bridge_slave_1 (unregistering): left promiscuous mode [ 146.293240][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.847609][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 146.873278][ T7390] FAULT_INJECTION: forcing a failure. [ 146.873278][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 146.889374][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.3.289 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 146.889407][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 146.889421][ T7390] Call Trace: [ 146.889429][ T7390] [ 146.889438][ T7390] dump_stack_lvl+0x16c/0x1f0 [ 146.889473][ T7390] should_fail_ex+0x512/0x640 [ 146.889505][ T7390] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 146.889537][ T7390] should_failslab+0xc2/0x120 [ 146.889567][ T7390] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 146.889591][ T7390] ? __asan_memcpy+0x3c/0x60 [ 146.889624][ T7390] ? __kernfs_new_node+0xd2/0x8a0 [ 146.889664][ T7390] __kernfs_new_node+0xd2/0x8a0 [ 146.889716][ T7390] ? __pfx___kernfs_new_node+0x10/0x10 [ 146.889762][ T7390] ? find_held_lock+0x2b/0x80 [ 146.889786][ T7390] ? kernfs_root+0xee/0x2a0 [ 146.889826][ T7390] kernfs_new_node+0x13c/0x1e0 [ 146.889852][ T7390] ? net_ns_get_ownership+0xf8/0x1b0 [ 146.889880][ T7390] kernfs_create_dir_ns+0x4c/0x1a0 [ 146.889909][ T7390] sysfs_create_dir_ns+0x13a/0x2b0 [ 146.889944][ T7390] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 146.889975][ T7390] ? find_held_lock+0x2b/0x80 [ 146.890000][ T7390] ? net_namespace+0x12/0x50 [ 146.890023][ T7390] ? device_namespace+0x76/0xa0 [ 146.890054][ T7390] kobject_add_internal+0x2c4/0x9b0 [ 146.890099][ T7390] kobject_add+0x16e/0x240 [ 146.890130][ T7390] ? __pfx_kobject_add+0x10/0x10 [ 146.890163][ T7390] ? get_device_parent+0x1c5/0x4e0 [ 146.890191][ T7390] ? kobject_put+0xab/0x5a0 [ 146.890231][ T7390] device_add+0x288/0x1a70 [ 146.890259][ T7390] ? __pfx_dev_set_name+0x10/0x10 [ 146.890291][ T7390] ? __pfx_device_add+0x10/0x10 [ 146.890320][ T7390] ? lockdep_init_map_type+0x5c/0x280 [ 146.890351][ T7390] ? __init_waitqueue_head+0xca/0x150 [ 146.890393][ T7390] netdev_register_kobject+0x182/0x3a0 [ 146.890425][ T7390] register_netdevice+0x13dc/0x2270 [ 146.890457][ T7390] ? __pfx_register_netdevice+0x10/0x10 [ 146.890492][ T7390] slip_open+0xb86/0x1150 [ 146.890527][ T7390] ? __pfx_slip_open+0x10/0x10 [ 146.890554][ T7390] ? down_write+0x14d/0x200 [ 146.890587][ T7390] ? __pfx_slip_open+0x10/0x10 [ 146.890616][ T7390] tty_ldisc_open+0x9c/0x120 [ 146.890641][ T7390] tty_set_ldisc+0x32b/0x780 [ 146.890670][ T7390] tty_ioctl+0xc42/0x1610 [ 146.890698][ T7390] ? __pfx_tty_ioctl+0x10/0x10 [ 146.890733][ T7390] ? fdget+0x187/0x210 [ 146.890766][ T7390] ? __sys_sendmsg+0x199/0x220 [ 146.890788][ T7390] ? hook_file_ioctl_common+0x145/0x410 [ 146.890822][ T7390] ? xfd_validate_state+0x5d/0x180 [ 146.890861][ T7390] ? __pfx_tty_ioctl+0x10/0x10 [ 146.890888][ T7390] __x64_sys_ioctl+0x190/0x200 [ 146.890921][ T7390] do_syscall_64+0xcd/0x230 [ 146.890953][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.890977][ T7390] RIP: 0033:0x7f771138e969 [ 146.890996][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.891020][ T7390] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.891043][ T7390] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 146.891058][ T7390] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000001 [ 146.891079][ T7390] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 146.891094][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.891108][ T7390] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 146.891144][ T7390] [ 146.891177][ T7390] kobject: kobject_add_internal failed for sl0 (error: -12 parent: net) [ 147.185992][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.327610][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.349516][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.363800][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.373493][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.836061][ T7409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 148.150280][ T7414] FAULT_INJECTION: forcing a failure. [ 148.150280][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 148.180217][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.2.294 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 148.180249][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 148.180261][ T7414] Call Trace: [ 148.180269][ T7414] [ 148.180277][ T7414] dump_stack_lvl+0x16c/0x1f0 [ 148.180308][ T7414] should_fail_ex+0x512/0x640 [ 148.180335][ T7414] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 148.180373][ T7414] should_failslab+0xc2/0x120 [ 148.180399][ T7414] __kmalloc_cache_noprof+0x6a/0x3e0 [ 148.180432][ T7414] ? dvb_dmxdev_add_pid+0x14f/0x380 [ 148.180468][ T7414] dvb_dmxdev_add_pid+0x14f/0x380 [ 148.180503][ T7414] dvb_demux_do_ioctl+0x973/0x12f0 [ 148.180545][ T7414] dvb_usercopy+0x164/0x340 [ 148.180572][ T7414] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 148.180605][ T7414] ? __pfx_dvb_usercopy+0x10/0x10 [ 148.180646][ T7414] ? __fget_files+0x20e/0x3c0 [ 148.180684][ T7414] dvb_demux_ioctl+0x29/0x40 [ 148.180710][ T7414] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 148.180746][ T7414] __x64_sys_ioctl+0x190/0x200 [ 148.180777][ T7414] do_syscall_64+0xcd/0x230 [ 148.180806][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.180829][ T7414] RIP: 0033:0x7f401db8e969 [ 148.180846][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.180867][ T7414] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.180888][ T7414] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 148.180903][ T7414] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 148.180916][ T7414] RBP: 00007f401ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 148.180930][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.180942][ T7414] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 148.180973][ T7414] [ 149.891486][ T7457] HfR: entered promiscuous mode [ 149.954238][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 150.015617][ T7457] HfR: left promiscuous mode [ 150.272425][ T7457] HfR: entered promiscuous mode [ 150.837931][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 153.981072][ T7538] FAULT_INJECTION: forcing a failure. [ 153.981072][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.041812][ T7538] CPU: 1 UID: 0 PID: 7538 Comm: syz.1.326 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 154.041849][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.041862][ T7538] Call Trace: [ 154.041871][ T7538] [ 154.041880][ T7538] dump_stack_lvl+0x16c/0x1f0 [ 154.041916][ T7538] should_fail_ex+0x512/0x640 [ 154.041953][ T7538] strncpy_from_user+0x3b/0x2e0 [ 154.041987][ T7538] getname_flags.part.0+0x8f/0x550 [ 154.042022][ T7538] getname_flags+0x93/0xf0 [ 154.042054][ T7538] do_sys_openat2+0xb8/0x1d0 [ 154.042083][ T7538] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.042125][ T7538] __x64_sys_openat+0x174/0x210 [ 154.042155][ T7538] ? __pfx___x64_sys_openat+0x10/0x10 [ 154.042186][ T7538] ? rcu_is_watching+0x12/0xc0 [ 154.042218][ T7538] do_syscall_64+0xcd/0x230 [ 154.042248][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.042280][ T7538] RIP: 0033:0x7f0da4b8e969 [ 154.042300][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.042324][ T7538] RSP: 002b:00007f0da5983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.042347][ T7538] RAX: ffffffffffffffda RBX: 00007f0da4db5fa0 RCX: 00007f0da4b8e969 [ 154.042363][ T7538] RDX: 0000000000022201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.042378][ T7538] RBP: 00007f0da4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.042392][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.042407][ T7538] R13: 0000000000000000 R14: 00007f0da4db5fa0 R15: 00007ffd48e1a5e8 [ 154.042439][ T7538] [ 154.690908][ T30] audit: type=1800 audit(6040742118.887:7): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.327" name="dummy_udc" dev="gadgetfs" ino=5704 res=0 errno=0 [ 155.642857][ T7565] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 156.475791][ T7582] FAULT_INJECTION: forcing a failure. [ 156.475791][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 156.504714][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.0.335 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 156.504751][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.504766][ T7582] Call Trace: [ 156.504775][ T7582] [ 156.504784][ T7582] dump_stack_lvl+0x16c/0x1f0 [ 156.504819][ T7582] should_fail_ex+0x512/0x640 [ 156.504850][ T7582] ? __kmalloc_noprof+0xbf/0x510 [ 156.504879][ T7582] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 156.504911][ T7582] should_failslab+0xc2/0x120 [ 156.504941][ T7582] __kmalloc_noprof+0xd2/0x510 [ 156.504974][ T7582] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 156.505008][ T7582] acpi_ex_start_trace_method+0x30/0x480 [ 156.505045][ T7582] acpi_ds_begin_method_execution+0x3c/0x980 [ 156.505082][ T7582] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 156.505125][ T7582] acpi_ps_execute_method+0x94/0xb30 [ 156.505157][ T7582] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 156.505191][ T7582] acpi_ns_evaluate+0x76c/0xca0 [ 156.505222][ T7582] ? kasan_save_track+0x14/0x30 [ 156.505250][ T7582] acpi_evaluate_object+0x1fa/0xa90 [ 156.505277][ T7582] ? do_syscall_64+0xcd/0x230 [ 156.505303][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.505337][ T7582] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 156.505365][ T7582] ? __mutex_trylock_common+0xe9/0x250 [ 156.505402][ T7582] acpi_evaluate_integer+0xdd/0x200 [ 156.505440][ T7582] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 156.505491][ T7582] ? __pfx_status_show+0x10/0x10 [ 156.505515][ T7582] status_show+0xa0/0x120 [ 156.505540][ T7582] ? __pfx_status_show+0x10/0x10 [ 156.505575][ T7582] dev_attr_show+0x53/0xe0 [ 156.505605][ T7582] ? __pfx_dev_attr_show+0x10/0x10 [ 156.505630][ T7582] sysfs_kf_seq_show+0x213/0x3e0 [ 156.505669][ T7582] seq_read_iter+0x506/0x12c0 [ 156.505717][ T7582] kernfs_fop_read_iter+0x40f/0x5a0 [ 156.505744][ T7582] ? rw_verify_area+0xcf/0x680 [ 156.505781][ T7582] vfs_read+0x8c8/0xc70 [ 156.505809][ T7582] ? __pfx___mutex_lock+0x10/0x10 [ 156.505837][ T7582] ? __pfx_vfs_read+0x10/0x10 [ 156.505884][ T7582] ksys_read+0x12a/0x240 [ 156.505905][ T7582] ? __pfx_ksys_read+0x10/0x10 [ 156.505924][ T7582] ? rcu_is_watching+0x12/0xc0 [ 156.505957][ T7582] do_syscall_64+0xcd/0x230 [ 156.505987][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.506008][ T7582] RIP: 0033:0x7fc11e78e969 [ 156.506028][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.506050][ T7582] RSP: 002b:00007fc11f62f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.506073][ T7582] RAX: ffffffffffffffda RBX: 00007fc11e9b6080 RCX: 00007fc11e78e969 [ 156.506088][ T7582] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 156.506102][ T7582] RBP: 00007fc11e810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 156.506117][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.506130][ T7582] R13: 0000000000000000 R14: 00007fc11e9b6080 R15: 00007ffc03fe6be8 [ 156.506164][ T7582] [ 156.903161][ T7582] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 156.938873][ T7586] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 157.227692][ T7586] bond0: option all_slaves_active: invalid value () [ 160.056711][ T7639] ubi0: attaching mtd0 [ 160.062405][ T7639] ubi0: scanning is finished [ 160.070457][ T7639] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 160.164407][ T7641] netlink: 334 bytes leftover after parsing attributes in process `syz.1.346'. [ 160.337815][ T7639] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 161.516536][ T7650] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 162.332319][ T7674] netlink: 334 bytes leftover after parsing attributes in process `syz.1.354'. [ 162.467974][ T7681] netlink: 334 bytes leftover after parsing attributes in process `syz.3.356'. [ 162.785444][ T7692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 162.925353][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 164.068639][ T7723] kexec: Could not allocate control_code_buffer [ 164.674211][ T7744] FAULT_INJECTION: forcing a failure. [ 164.674211][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 164.720426][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.1.371 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 164.720460][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 164.720472][ T7744] Call Trace: [ 164.720479][ T7744] [ 164.720488][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 164.720519][ T7744] should_fail_ex+0x512/0x640 [ 164.720545][ T7744] ? __kmalloc_noprof+0xbf/0x510 [ 164.720572][ T7744] ? quirks_param_set+0x200/0x750 [ 164.720593][ T7744] should_failslab+0xc2/0x120 [ 164.720620][ T7744] __kmalloc_noprof+0xd2/0x510 [ 164.720651][ T7744] quirks_param_set+0x200/0x750 [ 164.720675][ T7744] ? __pfx_quirks_param_set+0x10/0x10 [ 164.720712][ T7744] param_attr_store+0x196/0x300 [ 164.720745][ T7744] ? __pfx_param_attr_store+0x10/0x10 [ 164.720766][ T7744] module_attr_store+0x55/0x80 [ 164.720797][ T7744] ? __pfx_module_attr_store+0x10/0x10 [ 164.720827][ T7744] sysfs_kf_write+0xef/0x150 [ 164.720859][ T7744] kernfs_fop_write_iter+0x351/0x510 [ 164.720897][ T7744] ? __pfx_sysfs_kf_write+0x10/0x10 [ 164.720930][ T7744] vfs_write+0x5ba/0x1180 [ 164.720952][ T7744] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 164.720981][ T7744] ? __pfx___mutex_lock+0x10/0x10 [ 164.721008][ T7744] ? __pfx_vfs_write+0x10/0x10 [ 164.721054][ T7744] ksys_write+0x12a/0x240 [ 164.721076][ T7744] ? __pfx_ksys_write+0x10/0x10 [ 164.721095][ T7744] ? rcu_is_watching+0x12/0xc0 [ 164.721127][ T7744] do_syscall_64+0xcd/0x230 [ 164.721157][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.721179][ T7744] RIP: 0033:0x7f0da4b8e969 [ 164.721198][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.721219][ T7744] RSP: 002b:00007f0da5983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.721240][ T7744] RAX: ffffffffffffffda RBX: 00007f0da4db5fa0 RCX: 00007f0da4b8e969 [ 164.721255][ T7744] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 164.721268][ T7744] RBP: 00007f0da5983090 R08: 0000000000000000 R09: 0000000000000000 [ 164.721282][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.721295][ T7744] R13: 0000000000000000 R14: 00007f0da4db5fa0 R15: 00007ffd48e1a5e8 [ 164.721328][ T7744] [ 165.331413][ T7750] sctp: [Deprecated]: syz.2.373 (pid 7750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.331413][ T7750] Use struct sctp_sack_info instead [ 165.348992][ T7750] netlink: 342 bytes leftover after parsing attributes in process `syz.2.373'. [ 165.704733][ T7755] FAULT_INJECTION: forcing a failure. [ 165.704733][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 165.722537][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 165.763255][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.3.374 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 165.763290][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.763303][ T7755] Call Trace: [ 165.763311][ T7755] [ 165.763320][ T7755] dump_stack_lvl+0x16c/0x1f0 [ 165.763356][ T7755] should_fail_ex+0x512/0x640 [ 165.763388][ T7755] ? __kmalloc_noprof+0xbf/0x510 [ 165.763481][ T7755] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 165.763514][ T7755] should_failslab+0xc2/0x120 [ 165.763540][ T7755] __kmalloc_noprof+0xd2/0x510 [ 165.763572][ T7755] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 165.763606][ T7755] acpi_ex_start_trace_method+0x30/0x480 [ 165.763645][ T7755] acpi_ds_begin_method_execution+0x3c/0x980 [ 165.763683][ T7755] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 165.763725][ T7755] acpi_ps_execute_method+0x94/0xb30 [ 165.763755][ T7755] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 165.763791][ T7755] acpi_ns_evaluate+0x76c/0xca0 [ 165.763821][ T7755] ? kasan_save_track+0x14/0x30 [ 165.763845][ T7755] acpi_evaluate_object+0x1fa/0xa90 [ 165.763872][ T7755] ? do_syscall_64+0xcd/0x230 [ 165.763899][ T7755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.763924][ T7755] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 165.763951][ T7755] ? __mutex_trylock_common+0xe9/0x250 [ 165.763985][ T7755] acpi_evaluate_integer+0xdd/0x200 [ 165.764020][ T7755] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 165.764079][ T7755] ? __pfx_status_show+0x10/0x10 [ 165.764102][ T7755] status_show+0xa0/0x120 [ 165.764124][ T7755] ? __pfx_status_show+0x10/0x10 [ 165.764158][ T7755] dev_attr_show+0x53/0xe0 [ 165.764188][ T7755] ? __pfx_dev_attr_show+0x10/0x10 [ 165.764213][ T7755] sysfs_kf_seq_show+0x213/0x3e0 [ 165.764251][ T7755] seq_read_iter+0x506/0x12c0 [ 165.764300][ T7755] kernfs_fop_read_iter+0x40f/0x5a0 [ 165.764326][ T7755] ? rw_verify_area+0xcf/0x680 [ 165.764362][ T7755] vfs_read+0x8c8/0xc70 [ 165.764396][ T7755] ? __pfx___mutex_lock+0x10/0x10 [ 165.764423][ T7755] ? __pfx_vfs_read+0x10/0x10 [ 165.764464][ T7755] ksys_read+0x12a/0x240 [ 165.764485][ T7755] ? __pfx_ksys_read+0x10/0x10 [ 165.764502][ T7755] ? rcu_is_watching+0x12/0xc0 [ 165.764533][ T7755] do_syscall_64+0xcd/0x230 [ 165.764574][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.764597][ T7755] RIP: 0033:0x7f771138e969 [ 165.764617][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.764639][ T7755] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.764662][ T7755] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 165.764678][ T7755] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 165.764692][ T7755] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 165.764706][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.764718][ T7755] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 165.764751][ T7755] [ 165.925194][ T7755] ACPI Error: [ 166.014320][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.079163][ T7755] Could not allocate 15 bytes (20240827/nsnames-308) [ 166.361636][ T7775] can: request_module (can-proto-3) failed. [ 166.513801][ T7778] FAULT_INJECTION: forcing a failure. [ 166.513801][ T7778] name fail_futex, interval 1, probability 0, space 0, times 1 [ 166.559295][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.3.379 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 166.559330][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 166.559345][ T7778] Call Trace: [ 166.559351][ T7778] [ 166.559356][ T7778] dump_stack_lvl+0x16c/0x1f0 [ 166.559378][ T7778] should_fail_ex+0x512/0x640 [ 166.559399][ T7778] get_futex_key+0x49e/0x1000 [ 166.559416][ T7778] ? __pfx_get_futex_key+0x10/0x10 [ 166.559428][ T7778] ? __pfx___schedule+0x10/0x10 [ 166.559450][ T7778] futex_wait_setup+0x78/0x290 [ 166.559472][ T7778] __futex_wait+0x266/0x3c0 [ 166.559490][ T7778] ? __pfx___futex_wait+0x10/0x10 [ 166.559509][ T7778] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.559532][ T7778] futex_wait+0xe8/0x380 [ 166.559548][ T7778] ? __pfx_futex_wait+0x10/0x10 [ 166.559573][ T7778] do_futex+0x229/0x350 [ 166.559587][ T7778] ? __pfx_do_futex+0x10/0x10 [ 166.559604][ T7778] ? __pfx___might_resched+0x10/0x10 [ 166.559620][ T7778] __x64_sys_futex+0x1e0/0x4c0 [ 166.559636][ T7778] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.559650][ T7778] ? rcu_is_watching+0x12/0xc0 [ 166.559667][ T7778] do_syscall_64+0xcd/0x230 [ 166.559683][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.559700][ T7778] RIP: 0033:0x7f771138e969 [ 166.559718][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.559740][ T7778] RSP: 002b:00007f770f1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.559761][ T7778] RAX: ffffffffffffffda RBX: 00007f77115b6168 RCX: 00007f771138e969 [ 166.559776][ T7778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f77115b6168 [ 166.559790][ T7778] RBP: 00007f77115b6160 R08: 0000000000000000 R09: 0000000000000000 [ 166.559803][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f77115b616c [ 166.559818][ T7778] R13: 0000000000000000 R14: 00007ffdf2f83a70 R15: 00007ffdf2f83b58 [ 166.559847][ T7778] [ 167.091924][ T7784] netlink: 334 bytes leftover after parsing attributes in process `syz.1.381'. [ 167.403548][ T7795] netlink: 334 bytes leftover after parsing attributes in process `syz.3.384'. [ 167.655510][ T7802] bridge0: port 3(gretap0) entered blocking state [ 167.663090][ T7802] bridge0: port 3(gretap0) entered disabled state [ 167.707068][ T7802] gretap0: entered allmulticast mode [ 167.733425][ T7802] gretap0: entered promiscuous mode [ 167.740821][ T7802] bridge0: port 3(gretap0) entered blocking state [ 167.747436][ T7802] bridge0: port 3(gretap0) entered forwarding state [ 167.927018][ T7800] netlink: 342 bytes leftover after parsing attributes in process `syz.3.386'. [ 168.408776][ T7823] can: request_module (can-proto-3) failed. [ 168.613906][ T7831] netlink: 334 bytes leftover after parsing attributes in process `syz.1.392'. [ 168.987312][ T7841] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 169.016164][ T7852] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 169.437260][ T7850] netlink: 342 bytes leftover after parsing attributes in process `syz.2.397'. [ 170.284682][ T7883] netlink: 334 bytes leftover after parsing attributes in process `syz.2.403'. [ 170.600428][ T7894] Invalid ELF header magic: != ELF [ 171.429415][ T7918] FAULT_INJECTION: forcing a failure. [ 171.429415][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 171.547210][ T7918] CPU: 0 UID: 5 PID: 7918 Comm: syz.2.409 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 171.547242][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.547254][ T7918] Call Trace: [ 171.547260][ T7918] [ 171.547269][ T7918] dump_stack_lvl+0x16c/0x1f0 [ 171.547300][ T7918] should_fail_ex+0x512/0x640 [ 171.547328][ T7918] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 171.547365][ T7918] should_failslab+0xc2/0x120 [ 171.547391][ T7918] __kmalloc_cache_noprof+0x6a/0x3e0 [ 171.547424][ T7918] ? __do_sys_fanotify_init+0x40b/0xb80 [ 171.547454][ T7918] __do_sys_fanotify_init+0x40b/0xb80 [ 171.547479][ T7918] ? rcu_is_watching+0x12/0xc0 [ 171.547503][ T7918] do_syscall_64+0xcd/0x230 [ 171.547531][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.547553][ T7918] RIP: 0033:0x7f401db8e969 [ 171.547570][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.547590][ T7918] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 171.547611][ T7918] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 171.547626][ T7918] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000200 [ 171.547638][ T7918] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.547651][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.547664][ T7918] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 171.547694][ T7918] [ 171.765860][ T7921] FAULT_INJECTION: forcing a failure. [ 171.765860][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 171.780314][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.3.410 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 171.780347][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.780361][ T7921] Call Trace: [ 171.780369][ T7921] [ 171.780377][ T7921] dump_stack_lvl+0x16c/0x1f0 [ 171.780411][ T7921] should_fail_ex+0x512/0x640 [ 171.780441][ T7921] ? __kmalloc_noprof+0xbf/0x510 [ 171.780469][ T7921] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 171.780501][ T7921] should_failslab+0xc2/0x120 [ 171.780529][ T7921] __kmalloc_noprof+0xd2/0x510 [ 171.780562][ T7921] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 171.780598][ T7921] acpi_ex_start_trace_method+0x30/0x480 [ 171.780634][ T7921] acpi_ds_begin_method_execution+0x3c/0x980 [ 171.780670][ T7921] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 171.780709][ T7921] acpi_ps_execute_method+0x94/0xb30 [ 171.780740][ T7921] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 171.780774][ T7921] acpi_ns_evaluate+0x76c/0xca0 [ 171.780804][ T7921] ? kasan_save_track+0x14/0x30 [ 171.780832][ T7921] acpi_evaluate_object+0x1fa/0xa90 [ 171.780858][ T7921] ? do_syscall_64+0xcd/0x230 [ 171.780884][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.780910][ T7921] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 171.780945][ T7921] ? __mutex_trylock_common+0xe9/0x250 [ 171.780986][ T7921] acpi_evaluate_integer+0xdd/0x200 [ 171.781022][ T7921] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 171.781073][ T7921] ? __pfx_status_show+0x10/0x10 [ 171.781097][ T7921] status_show+0xa0/0x120 [ 171.781122][ T7921] ? __pfx_status_show+0x10/0x10 [ 171.781157][ T7921] dev_attr_show+0x53/0xe0 [ 171.781187][ T7921] ? __pfx_dev_attr_show+0x10/0x10 [ 171.781214][ T7921] sysfs_kf_seq_show+0x213/0x3e0 [ 171.781253][ T7921] seq_read_iter+0x506/0x12c0 [ 171.781305][ T7921] kernfs_fop_read_iter+0x40f/0x5a0 [ 171.781333][ T7921] ? rw_verify_area+0xcf/0x680 [ 171.781371][ T7921] vfs_read+0x8c8/0xc70 [ 171.781398][ T7921] ? __pfx___mutex_lock+0x10/0x10 [ 171.781426][ T7921] ? __pfx_vfs_read+0x10/0x10 [ 171.781472][ T7921] ksys_read+0x12a/0x240 [ 171.781493][ T7921] ? __pfx_ksys_read+0x10/0x10 [ 171.781512][ T7921] ? rcu_is_watching+0x12/0xc0 [ 171.781544][ T7921] do_syscall_64+0xcd/0x230 [ 171.781574][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.781597][ T7921] RIP: 0033:0x7f771138e969 [ 171.781617][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.781638][ T7921] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.781661][ T7921] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 171.781677][ T7921] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 171.781692][ T7921] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.781707][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.781721][ T7921] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 171.781754][ T7921] [ 171.782949][ T7921] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 172.250802][ T7931] FAULT_INJECTION: forcing a failure. [ 172.250802][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 172.263881][ T7931] CPU: 1 UID: 0 PID: 7931 Comm: syz.3.411 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 172.263925][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.263939][ T7931] Call Trace: [ 172.263947][ T7931] [ 172.263956][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 172.263991][ T7931] should_fail_ex+0x512/0x640 [ 172.264023][ T7931] ? __kmalloc_noprof+0xbf/0x510 [ 172.264053][ T7931] ? __alloc_workqueue+0xd5c/0x1810 [ 172.264081][ T7931] should_failslab+0xc2/0x120 [ 172.264108][ T7931] __kmalloc_noprof+0xd2/0x510 [ 172.264141][ T7931] __alloc_workqueue+0xd5c/0x1810 [ 172.264182][ T7931] alloc_workqueue+0xd2/0x200 [ 172.264210][ T7931] ? __pfx_alloc_workqueue+0x10/0x10 [ 172.264244][ T7931] ? rcu_is_watching+0x12/0xc0 [ 172.264266][ T7931] ? trace_kmalloc+0x2b/0xd0 [ 172.264294][ T7931] ? do_raw_spin_lock+0x12c/0x2b0 [ 172.264325][ T7931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.264362][ T7931] ieee80211_register_hw+0x1e18/0x4020 [ 172.264400][ T7931] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 172.264425][ T7931] ? __debug_object_init+0x221/0x3d0 [ 172.264453][ T7931] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 172.264491][ T7931] ? find_held_lock+0x2b/0x80 [ 172.264514][ T7931] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.264546][ T7931] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 172.264571][ T7931] ? __hrtimer_setup+0x176/0x280 [ 172.264606][ T7931] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 172.264660][ T7931] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 172.264704][ T7931] hwsim_new_radio_nl+0xb51/0x12c0 [ 172.264741][ T7931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 172.264784][ T7931] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 172.264815][ T7931] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 172.264853][ T7931] genl_family_rcv_msg_doit+0x206/0x2f0 [ 172.264884][ T7931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 172.264921][ T7931] ? trace_cap_capable+0x18d/0x200 [ 172.264954][ T7931] ? bpf_lsm_capable+0x9/0x10 [ 172.264978][ T7931] ? security_capable+0x7e/0x260 [ 172.265016][ T7931] ? ns_capable+0xd7/0x110 [ 172.265044][ T7931] genl_rcv_msg+0x55c/0x800 [ 172.265076][ T7931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.265103][ T7931] ? __pfx___dev_queue_xmit+0x10/0x10 [ 172.265138][ T7931] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 172.265171][ T7931] ? __lock_acquire+0xaa4/0x1ba0 [ 172.265204][ T7931] netlink_rcv_skb+0x16a/0x440 [ 172.265228][ T7931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.265257][ T7931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.265297][ T7931] ? __pfx_down_read+0x10/0x10 [ 172.265328][ T7931] ? netlink_deliver_tap+0x1ae/0xd30 [ 172.265357][ T7931] genl_rcv+0x28/0x40 [ 172.265381][ T7931] netlink_unicast+0x53a/0x7f0 [ 172.265407][ T7931] ? __pfx_netlink_unicast+0x10/0x10 [ 172.265426][ T7931] ? __lock_acquire+0xaa4/0x1ba0 [ 172.265457][ T7931] netlink_sendmsg+0x8d1/0xdd0 [ 172.265483][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.265515][ T7931] ____sys_sendmsg+0xa95/0xc70 [ 172.265540][ T7931] ? copy_msghdr_from_user+0x10a/0x160 [ 172.265558][ T7931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.265596][ T7931] ___sys_sendmsg+0x134/0x1d0 [ 172.265617][ T7931] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.265673][ T7931] __sys_sendmsg+0x16d/0x220 [ 172.265692][ T7931] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.265710][ T7931] ? __x64_sys_futex+0x1e0/0x4c0 [ 172.265739][ T7931] ? rcu_is_watching+0x12/0xc0 [ 172.265765][ T7931] do_syscall_64+0xcd/0x230 [ 172.265790][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.265810][ T7931] RIP: 0033:0x7f771138e969 [ 172.265827][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.265845][ T7931] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.265864][ T7931] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 172.265877][ T7931] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 172.265895][ T7931] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 172.265908][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.265920][ T7931] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 172.265949][ T7931] [ 173.272100][ T7939] netlink: 334 bytes leftover after parsing attributes in process `syz.2.414'. [ 173.982499][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.995906][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.003857][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.014587][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.022637][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.382996][ T7341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.589542][ T7341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.621620][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 174.677865][ T7341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.787299][ T7982] netlink: 342 bytes leftover after parsing attributes in process `syz.1.421'. [ 174.856658][ T7341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.313241][ T8007] syz.1.425 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.380488][ T8006] .SR: entered promiscuous mode [ 175.386336][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 175.470741][ T8006] Invalid ELF header magic: != ELF [ 175.818618][ T7341] bridge_slave_0: left allmulticast mode [ 175.824580][ T7341] bridge_slave_0: left promiscuous mode [ 175.867128][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.110029][ T5142] Bluetooth: hci4: command tx timeout [ 176.943549][ T7341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.961603][ T7341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.978924][ T7341] bond0 (unregistering): Released all slaves [ 177.088155][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.139946][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.163640][ T7952] bridge_slave_0: entered allmulticast mode [ 177.171988][ T7952] bridge_slave_0: entered promiscuous mode [ 177.259876][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.269990][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.277941][ T7952] bridge_slave_1: entered allmulticast mode [ 177.288938][ T7952] bridge_slave_1: entered promiscuous mode [ 177.572882][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.612213][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.938786][ T7952] team0: Port device team_slave_0 added [ 178.034402][ T7952] team0: Port device team_slave_1 added [ 178.185244][ T5142] Bluetooth: hci4: command tx timeout [ 178.230440][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.255770][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.316523][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.363763][ T7341] hsr_slave_0: left promiscuous mode [ 178.376704][ T7341] hsr_slave_1: left promiscuous mode [ 178.388651][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 178.411002][ T7341] veth1_macvtap: left promiscuous mode [ 178.428201][ T7341] veth0_macvtap: left promiscuous mode [ 178.945922][ T7341] team0 (unregistering): Port device team_slave_1 removed [ 178.988315][ T7341] team0 (unregistering): Port device team_slave_0 removed [ 179.415865][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.423329][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.452930][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.467421][ T8059] veth0_macvtap: left promiscuous mode [ 179.529353][ T8032] FAULT_INJECTION: forcing a failure. [ 179.529353][ T8032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.587754][ T7952] hsr_slave_0: entered promiscuous mode [ 179.617774][ T8032] CPU: 1 UID: 0 PID: 8032 Comm: syz.1.433 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 179.617811][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.617829][ T8032] Call Trace: [ 179.617837][ T8032] [ 179.617850][ T8032] dump_stack_lvl+0x16c/0x1f0 [ 179.617886][ T8032] should_fail_ex+0x512/0x640 [ 179.617923][ T8032] should_fail_alloc_page+0xe7/0x130 [ 179.617954][ T8032] prepare_alloc_pages+0x3c2/0x610 [ 179.617993][ T8032] ? rcu_is_watching+0x12/0xc0 [ 179.618018][ T8032] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 179.618058][ T8032] ? __pfx___schedule+0x10/0x10 [ 179.618089][ T8032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.618116][ T8032] ? do_raw_spin_lock+0x12c/0x2b0 [ 179.618148][ T8032] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.618181][ T8032] ? find_held_lock+0x2b/0x80 [ 179.618214][ T8032] ? __lock_acquire+0xaa4/0x1ba0 [ 179.618243][ T8032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.618276][ T8032] ? policy_nodemask+0xea/0x4e0 [ 179.618305][ T8032] alloc_pages_mpol+0x1fb/0x550 [ 179.618333][ T8032] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.618369][ T8032] folio_alloc_mpol_noprof+0x36/0x2f0 [ 179.618402][ T8032] shmem_alloc_folio+0x135/0x160 [ 179.618440][ T8032] shmem_alloc_and_add_folio+0x499/0xc20 [ 179.618475][ T8032] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 179.618507][ T8032] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 179.618541][ T8032] shmem_get_folio_gfp+0x687/0x1530 [ 179.618579][ T8032] ? __lock_acquire+0xaa4/0x1ba0 [ 179.618607][ T8032] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 179.618636][ T8032] ? __pte_offset_map_lock+0x155/0x2f0 [ 179.618671][ T8032] shmem_write_begin+0x160/0x300 [ 179.618701][ T8032] ? __pfx_shmem_write_begin+0x10/0x10 [ 179.618730][ T8032] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 179.618764][ T8032] ? __pfx_timestamp_truncate+0x10/0x10 [ 179.618793][ T8032] generic_perform_write+0x3cd/0x930 [ 179.618833][ T8032] ? __pfx_generic_perform_write+0x10/0x10 [ 179.618862][ T8032] ? inode_needs_update_time.part.0+0x191/0x270 [ 179.618894][ T8032] shmem_file_write_iter+0x10e/0x140 [ 179.618927][ T8032] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 179.618956][ T8032] __kernel_write_iter+0x317/0xa90 [ 179.618983][ T8032] ? __pfx___kernel_write_iter+0x10/0x10 [ 179.619005][ T8032] ? __up_read+0x1f8/0x750 [ 179.619040][ T8032] ? dump_user_range+0x73d/0xb30 [ 179.619077][ T8032] dump_user_range+0x418/0xb30 [ 179.619116][ T8032] ? __pfx_dump_user_range+0x10/0x10 [ 179.619148][ T8032] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 179.619179][ T8032] ? __pfx_writenote+0x10/0x10 [ 179.619221][ T8032] elf_core_dump+0x288a/0x3a90 [ 179.619272][ T8032] ? __pfx_elf_core_dump+0x10/0x10 [ 179.619302][ T8032] ? kasan_save_stack+0x33/0x60 [ 179.619324][ T8032] ? kasan_save_track+0x14/0x30 [ 179.619346][ T8032] ? __kasan_kmalloc+0xaa/0xb0 [ 179.619368][ T8032] ? do_coredump+0x17aa/0x4480 [ 179.619394][ T8032] ? get_signal+0x22e3/0x26d0 [ 179.619417][ T8032] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 179.619454][ T8032] ? 0xffffffffff600000 [ 179.619533][ T8032] ? do_coredump+0x3183/0x4480 [ 179.619567][ T8032] do_coredump+0x3183/0x4480 [ 179.619611][ T8032] ? __pfx_do_coredump+0x10/0x10 [ 179.619644][ T8032] ? stack_trace_save+0x8e/0xc0 [ 179.619668][ T8032] ? __pfx_stack_trace_save+0x10/0x10 [ 179.619690][ T8032] ? stack_depot_save_flags+0x28/0xa50 [ 179.619723][ T8032] ? __lock_acquire+0xaa4/0x1ba0 [ 179.619760][ T8032] ? __kasan_slab_free+0x51/0x70 [ 179.619783][ T8032] ? kmem_cache_free+0x2d4/0x4d0 [ 179.619804][ T8032] ? __sigqueue_free+0xba/0x2a0 [ 179.619832][ T8032] ? get_signal+0xcba/0x26d0 [ 179.619854][ T8032] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 179.619933][ T8032] ? proc_coredump_connector+0x2d1/0x4f0 [ 179.619966][ T8032] ? __pfx_proc_coredump_connector+0x10/0x10 [ 179.620007][ T8032] ? rcu_is_watching+0x12/0xc0 [ 179.620032][ T8032] get_signal+0x22e3/0x26d0 [ 179.620071][ T8032] ? __pfx_get_signal+0x10/0x10 [ 179.620096][ T8032] ? fpu__clear_user_states+0x16a/0x260 [ 179.620124][ T8032] ? rcu_is_watching+0x12/0xc0 [ 179.620143][ T8032] ? __local_bh_enable_ip+0xa4/0x120 [ 179.620173][ T8032] arch_do_signal_or_restart+0x8f/0x7a0 [ 179.620206][ T8032] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 179.620246][ T8032] ? __pfx_do_writev+0x10/0x10 [ 179.620276][ T8032] ? rcu_is_watching+0x12/0xc0 [ 179.620302][ T8032] syscall_exit_to_user_mode+0x150/0x2a0 [ 179.620331][ T8032] do_syscall_64+0xda/0x230 [ 179.620362][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.620386][ T8032] RIP: 0033:0x7f0da4a4f830 [ 179.620406][ T8032] Code: 10 83 e0 01 83 e2 01 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 89 12 1c 00 48 8d 3d 8f 12 1c 00 31 c0 e8 30 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 179.620427][ T8032] RSP: 002b:00007f0da5982b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.620457][ T8032] RAX: 0000000000000000 RBX: 00007f0da4db5fa8 RCX: 00007f0da4b8e969 [ 179.620473][ T8032] RDX: 00007f0da5982b40 RSI: 00007f0da5982c70 RDI: 000000000000000b [ 179.620488][ T8032] RBP: 00007f0da4db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 179.620503][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0da4db5fac [ 179.620519][ T8032] R13: 0000000000000000 R14: 00007ffd48e1a500 R15: 00007ffd48e1a5e8 [ 179.620559][ T8032] [ 179.621003][ T7952] hsr_slave_1: entered promiscuous mode [ 179.846637][ T7952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.198413][ T7952] Cannot create hsr debugfs directory [ 180.267708][ T5142] Bluetooth: hci4: command tx timeout [ 180.354664][ T8093] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.015900][ T8116] ima: policy update failed [ 181.056105][ T30] audit: type=1802 audit(6040742145.237:8): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.444" res=0 errno=0 [ 181.074084][ T7952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.114934][ T7952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.164622][ T7952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.582997][ T8126] delete_channel: no stack [ 181.924360][ T7952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.283393][ T8133] netlink: 342 bytes leftover after parsing attributes in process `syz.1.445'. [ 182.346269][ T5142] Bluetooth: hci4: command tx timeout [ 182.891027][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.917622][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.960550][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.967739][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.988629][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.995856][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.124256][ T7952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.178707][ T7952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.134046][ T8189] can0: slcan on ptm0. [ 184.170840][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.286218][ T8188] can0 (unregistered): slcan off ptm0. [ 184.721072][ T7952] veth0_vlan: entered promiscuous mode [ 184.783893][ T7952] veth1_vlan: entered promiscuous mode [ 184.824013][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 185.079950][ T7952] veth0_macvtap: entered promiscuous mode [ 185.157832][ T7952] veth1_macvtap: entered promiscuous mode [ 185.266480][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.277796][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.288451][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.299599][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.310500][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.321437][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.334596][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.404322][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.455156][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.465029][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.514397][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.545169][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.575165][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.602715][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.733698][ T7952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.756326][ T7952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.765080][ T7952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.778704][ T7952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.138944][ T7340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.199241][ T7340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.319968][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.383182][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.396510][ T8255] netlink: 342 bytes leftover after parsing attributes in process `syz.2.463'. [ 186.567491][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 187.397673][ T8280] Invalid ELF header magic: != ELF [ 188.682129][ T8334] openvswitch: netlink: Key type 261 is out of range max 32 [ 189.445282][ T8356] bond0: option all_slaves_active: invalid value () [ 189.461655][ T8339] bond0: option all_slaves_active: invalid value () [ 190.034469][ T8380] netlink: 334 bytes leftover after parsing attributes in process `syz.1.485'. [ 190.296594][ T8395] netlink: 338 bytes leftover after parsing attributes in process `syz.2.487'. [ 190.396251][ T8396] netlink: 338 bytes leftover after parsing attributes in process `syz.2.487'. [ 190.423842][ T8400] netlink: 342 bytes leftover after parsing attributes in process `syz.1.488'. [ 192.938843][ T8458] netlink: 342 bytes leftover after parsing attributes in process `syz.1.496'. [ 193.217548][ T8475] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 193.934759][ T8483] FAULT_INJECTION: forcing a failure. [ 193.934759][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 193.972531][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.1.502 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 193.972565][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.972579][ T8483] Call Trace: [ 193.972588][ T8483] [ 193.972598][ T8483] dump_stack_lvl+0x16c/0x1f0 [ 193.972632][ T8483] should_fail_ex+0x512/0x640 [ 193.972662][ T8483] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 193.972691][ T8483] should_failslab+0xc2/0x120 [ 193.972718][ T8483] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 193.972744][ T8483] ? acpi_ps_alloc_op+0xf1/0x310 [ 193.972775][ T8483] acpi_ps_alloc_op+0xf1/0x310 [ 193.972804][ T8483] acpi_ps_create_scope_op+0x1a/0x70 [ 193.972830][ T8483] acpi_ps_execute_method+0x1b1/0xb30 [ 193.972859][ T8483] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 193.972893][ T8483] acpi_ns_evaluate+0x76c/0xca0 [ 193.972924][ T8483] ? kasan_save_track+0x14/0x30 [ 193.972952][ T8483] acpi_evaluate_object+0x1fa/0xa90 [ 193.972980][ T8483] ? do_syscall_64+0xcd/0x230 [ 193.973007][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.973033][ T8483] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 193.973059][ T8483] ? __mutex_trylock_common+0xe9/0x250 [ 193.973094][ T8483] acpi_evaluate_integer+0xdd/0x200 [ 193.973129][ T8483] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 193.973179][ T8483] ? __pfx_status_show+0x10/0x10 [ 193.973203][ T8483] status_show+0xa0/0x120 [ 193.973226][ T8483] ? __pfx_status_show+0x10/0x10 [ 193.973260][ T8483] dev_attr_show+0x53/0xe0 [ 193.973291][ T8483] ? __pfx_dev_attr_show+0x10/0x10 [ 193.973317][ T8483] sysfs_kf_seq_show+0x213/0x3e0 [ 193.973354][ T8483] seq_read_iter+0x506/0x12c0 [ 193.973403][ T8483] kernfs_fop_read_iter+0x40f/0x5a0 [ 193.973432][ T8483] ? rw_verify_area+0xcf/0x680 [ 193.973477][ T8483] vfs_read+0x8c8/0xc70 [ 193.973505][ T8483] ? __pfx___mutex_lock+0x10/0x10 [ 193.973536][ T8483] ? __pfx_vfs_read+0x10/0x10 [ 193.973584][ T8483] ksys_read+0x12a/0x240 [ 193.973605][ T8483] ? __pfx_ksys_read+0x10/0x10 [ 193.973625][ T8483] ? rcu_is_watching+0x12/0xc0 [ 193.973656][ T8483] do_syscall_64+0xcd/0x230 [ 193.973685][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.973707][ T8483] RIP: 0033:0x7f0da4b8e969 [ 193.973726][ T8483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.973748][ T8483] RSP: 002b:00007f0da5983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.973772][ T8483] RAX: ffffffffffffffda RBX: 00007f0da4db5fa0 RCX: 00007f0da4b8e969 [ 193.973788][ T8483] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 193.973803][ T8483] RBP: 00007f0da4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 193.973818][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.973832][ T8483] R13: 0000000000000000 R14: 00007f0da4db5fa0 R15: 00007ffd48e1a5e8 [ 193.973868][ T8483] [ 194.275729][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282156][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.523961][ T8571] FAULT_INJECTION: forcing a failure. [ 196.523961][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 196.546019][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.3.514 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 196.546053][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.546067][ T8571] Call Trace: [ 196.546075][ T8571] [ 196.546085][ T8571] dump_stack_lvl+0x16c/0x1f0 [ 196.546120][ T8571] should_fail_ex+0x512/0x640 [ 196.546152][ T8571] ? __kmalloc_noprof+0xbf/0x510 [ 196.546179][ T8571] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 196.546210][ T8571] should_failslab+0xc2/0x120 [ 196.546238][ T8571] __kmalloc_noprof+0xd2/0x510 [ 196.546277][ T8571] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 196.546315][ T8571] acpi_ex_start_trace_method+0x30/0x480 [ 196.546352][ T8571] acpi_ds_begin_method_execution+0x3c/0x980 [ 196.546386][ T8571] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 196.546422][ T8571] acpi_ps_execute_method+0x94/0xb30 [ 196.546453][ T8571] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 196.546485][ T8571] acpi_ns_evaluate+0x76c/0xca0 [ 196.546515][ T8571] ? kasan_save_track+0x14/0x30 [ 196.546543][ T8571] acpi_evaluate_object+0x1fa/0xa90 [ 196.546571][ T8571] ? do_syscall_64+0xcd/0x230 [ 196.546598][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.546625][ T8571] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 196.546653][ T8571] ? __mutex_trylock_common+0xe9/0x250 [ 196.546689][ T8571] acpi_evaluate_integer+0xdd/0x200 [ 196.546724][ T8571] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 196.546776][ T8571] ? __pfx_status_show+0x10/0x10 [ 196.546800][ T8571] status_show+0xa0/0x120 [ 196.546825][ T8571] ? __pfx_status_show+0x10/0x10 [ 196.546864][ T8571] dev_attr_show+0x53/0xe0 [ 196.546896][ T8571] ? __pfx_dev_attr_show+0x10/0x10 [ 196.546923][ T8571] sysfs_kf_seq_show+0x213/0x3e0 [ 196.546964][ T8571] seq_read_iter+0x506/0x12c0 [ 196.547012][ T8571] kernfs_fop_read_iter+0x40f/0x5a0 [ 196.547040][ T8571] ? rw_verify_area+0xcf/0x680 [ 196.547075][ T8571] vfs_read+0x8c8/0xc70 [ 196.547103][ T8571] ? __pfx___mutex_lock+0x10/0x10 [ 196.547131][ T8571] ? __pfx_vfs_read+0x10/0x10 [ 196.547178][ T8571] ksys_read+0x12a/0x240 [ 196.547199][ T8571] ? __pfx_ksys_read+0x10/0x10 [ 196.547219][ T8571] ? rcu_is_watching+0x12/0xc0 [ 196.547252][ T8571] do_syscall_64+0xcd/0x230 [ 196.547290][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.547314][ T8571] RIP: 0033:0x7f771138e969 [ 196.547335][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.547358][ T8571] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.547381][ T8571] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 196.547398][ T8571] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 196.547413][ T8571] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 196.547433][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.547448][ T8571] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 196.547482][ T8571] [ 196.548517][ T8571] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 197.003315][ T8591] ubi0: attaching mtd0 [ 197.009428][ T8591] ubi0: scanning is finished [ 197.057880][ T8591] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 197.233549][ T8592] Invalid ELF header magic: != ELF [ 197.436741][ T8591] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 197.533740][ T8591] Invalid ELF header magic: != ELF [ 197.668658][ T8597] erspan0: entered allmulticast mode [ 197.771397][ T8608] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 197.835851][ T8608] ep_00: uevent: failed to send synthetic uevent: -22 [ 197.980900][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.015234][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.022346][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.034010][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.041271][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.051306][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.291703][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.369828][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.426697][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.467682][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.540330][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.627811][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 198.697970][ T8617] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 198.708479][ T8617] ep_00: uevent: failed to send synthetic uevent: -22 [ 200.008837][ T5142] Bluetooth: hci1: unexpected event 0x3e length: 1020 > 260 [ 200.008873][ T5142] Bluetooth: hci1: unexpected subevent 0x01 length: 1019 > 18 [ 201.049883][ T8670] FAULT_INJECTION: forcing a failure. [ 201.049883][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 201.172776][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.3.525 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 201.172813][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.172826][ T8670] Call Trace: [ 201.172834][ T8670] [ 201.172843][ T8670] dump_stack_lvl+0x16c/0x1f0 [ 201.172877][ T8670] should_fail_ex+0x512/0x640 [ 201.172909][ T8670] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 201.172940][ T8670] should_failslab+0xc2/0x120 [ 201.172969][ T8670] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 201.172995][ T8670] ? acpi_ps_alloc_op+0xf1/0x310 [ 201.173028][ T8670] acpi_ps_alloc_op+0xf1/0x310 [ 201.173058][ T8670] acpi_ps_create_scope_op+0x1a/0x70 [ 201.173085][ T8670] acpi_ps_execute_method+0x1b1/0xb30 [ 201.173117][ T8670] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 201.173151][ T8670] acpi_ns_evaluate+0x76c/0xca0 [ 201.173183][ T8670] ? kasan_save_track+0x14/0x30 [ 201.173212][ T8670] acpi_evaluate_object+0x1fa/0xa90 [ 201.173239][ T8670] ? do_syscall_64+0xcd/0x230 [ 201.173265][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.173292][ T8670] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 201.173319][ T8670] ? __mutex_trylock_common+0xe9/0x250 [ 201.173355][ T8670] acpi_evaluate_integer+0xdd/0x200 [ 201.173391][ T8670] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 201.173442][ T8670] ? __pfx_status_show+0x10/0x10 [ 201.173466][ T8670] status_show+0xa0/0x120 [ 201.173492][ T8670] ? __pfx_status_show+0x10/0x10 [ 201.173526][ T8670] dev_attr_show+0x53/0xe0 [ 201.173557][ T8670] ? __pfx_dev_attr_show+0x10/0x10 [ 201.173583][ T8670] sysfs_kf_seq_show+0x213/0x3e0 [ 201.173622][ T8670] seq_read_iter+0x506/0x12c0 [ 201.173681][ T8670] kernfs_fop_read_iter+0x40f/0x5a0 [ 201.173711][ T8670] ? rw_verify_area+0xcf/0x680 [ 201.173750][ T8670] vfs_read+0x8c8/0xc70 [ 201.173777][ T8670] ? __pfx___mutex_lock+0x10/0x10 [ 201.173807][ T8670] ? __pfx_vfs_read+0x10/0x10 [ 201.173853][ T8670] ksys_read+0x12a/0x240 [ 201.173875][ T8670] ? __pfx_ksys_read+0x10/0x10 [ 201.173894][ T8670] ? rcu_is_watching+0x12/0xc0 [ 201.173927][ T8670] do_syscall_64+0xcd/0x230 [ 201.173958][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.173982][ T8670] RIP: 0033:0x7f771138e969 [ 201.174003][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.174025][ T8670] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.174048][ T8670] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 201.174065][ T8670] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 201.174081][ T8670] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 201.174095][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.174110][ T8670] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 201.174144][ T8670] [ 202.949077][ T8718] netlink: 342 bytes leftover after parsing attributes in process `syz.1.532'. [ 203.162512][ T5841] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 204.089236][ T8761] FAULT_INJECTION: forcing a failure. [ 204.089236][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 204.139663][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.4.539 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 204.139699][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.139714][ T8761] Call Trace: [ 204.139722][ T8761] [ 204.139732][ T8761] dump_stack_lvl+0x16c/0x1f0 [ 204.139767][ T8761] should_fail_ex+0x512/0x640 [ 204.139799][ T8761] ? __kmalloc_noprof+0xbf/0x510 [ 204.139827][ T8761] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 204.139860][ T8761] should_failslab+0xc2/0x120 [ 204.139889][ T8761] __kmalloc_noprof+0xd2/0x510 [ 204.139922][ T8761] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 204.139957][ T8761] acpi_ex_start_trace_method+0x30/0x480 [ 204.139994][ T8761] acpi_ds_begin_method_execution+0x3c/0x980 [ 204.140031][ T8761] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 204.140070][ T8761] acpi_ps_execute_method+0x94/0xb30 [ 204.140102][ T8761] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 204.140137][ T8761] acpi_ns_evaluate+0x76c/0xca0 [ 204.140168][ T8761] ? kasan_save_track+0x14/0x30 [ 204.140196][ T8761] acpi_evaluate_object+0x1fa/0xa90 [ 204.140229][ T8761] ? do_syscall_64+0xcd/0x230 [ 204.140258][ T8761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.140285][ T8761] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 204.140313][ T8761] ? __mutex_trylock_common+0xe9/0x250 [ 204.140349][ T8761] acpi_evaluate_integer+0xdd/0x200 [ 204.140384][ T8761] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 204.140443][ T8761] ? __pfx_status_show+0x10/0x10 [ 204.140470][ T8761] status_show+0xa0/0x120 [ 204.140497][ T8761] ? __pfx_status_show+0x10/0x10 [ 204.140534][ T8761] dev_attr_show+0x53/0xe0 [ 204.140565][ T8761] ? __pfx_dev_attr_show+0x10/0x10 [ 204.140591][ T8761] sysfs_kf_seq_show+0x213/0x3e0 [ 204.140629][ T8761] seq_read_iter+0x506/0x12c0 [ 204.140678][ T8761] kernfs_fop_read_iter+0x40f/0x5a0 [ 204.140706][ T8761] ? rw_verify_area+0xcf/0x680 [ 204.140743][ T8761] vfs_read+0x8c8/0xc70 [ 204.140770][ T8761] ? __pfx___mutex_lock+0x10/0x10 [ 204.140799][ T8761] ? __pfx_vfs_read+0x10/0x10 [ 204.140846][ T8761] ksys_read+0x12a/0x240 [ 204.140867][ T8761] ? __pfx_ksys_read+0x10/0x10 [ 204.140886][ T8761] ? rcu_is_watching+0x12/0xc0 [ 204.140920][ T8761] do_syscall_64+0xcd/0x230 [ 204.140950][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.140973][ T8761] RIP: 0033:0x7f8dd358e969 [ 204.140993][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.141015][ T8761] RSP: 002b:00007f8dd4411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.141038][ T8761] RAX: ffffffffffffffda RBX: 00007f8dd37b5fa0 RCX: 00007f8dd358e969 [ 204.141055][ T8761] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 204.141070][ T8761] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 204.141084][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.141099][ T8761] R13: 0000000000000000 R14: 00007f8dd37b5fa0 R15: 00007ffe6967e7c8 [ 204.141133][ T8761] [ 204.141144][ T8761] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 204.990286][ T8769] mkiss: ax0: crc mode is auto. [ 205.068375][ T8767] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 205.139955][ T8800] ptrace attach of "./syz-executor exec"[7952] was attempted by "./syz-executor exec"[8800] [ 206.860037][ T8847] ubi0: attaching mtd0 [ 206.866059][ T8847] ubi0: scanning is finished [ 206.870835][ T8847] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 206.966618][ T8847] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 207.563061][ T8850] FAULT_INJECTION: forcing a failure. [ 207.563061][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 207.581362][ T8850] CPU: 1 UID: 0 PID: 8850 Comm: syz.3.552 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 207.581405][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.581420][ T8850] Call Trace: [ 207.581428][ T8850] [ 207.581438][ T8850] dump_stack_lvl+0x16c/0x1f0 [ 207.581473][ T8850] should_fail_ex+0x512/0x640 [ 207.581505][ T8850] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 207.581537][ T8850] should_failslab+0xc2/0x120 [ 207.581565][ T8850] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 207.581594][ T8850] ? acpi_ps_alloc_op+0xf1/0x310 [ 207.581627][ T8850] acpi_ps_alloc_op+0xf1/0x310 [ 207.581658][ T8850] acpi_ps_create_scope_op+0x1a/0x70 [ 207.581685][ T8850] acpi_ps_execute_method+0x1b1/0xb30 [ 207.581717][ T8850] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 207.581753][ T8850] acpi_ns_evaluate+0x76c/0xca0 [ 207.581785][ T8850] ? kasan_save_track+0x14/0x30 [ 207.581814][ T8850] acpi_evaluate_object+0x1fa/0xa90 [ 207.581842][ T8850] ? do_syscall_64+0xcd/0x230 [ 207.581867][ T8850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.581894][ T8850] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 207.581922][ T8850] ? __mutex_trylock_common+0xe9/0x250 [ 207.581959][ T8850] acpi_evaluate_integer+0xdd/0x200 [ 207.581994][ T8850] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 207.582046][ T8850] ? __pfx_status_show+0x10/0x10 [ 207.582071][ T8850] status_show+0xa0/0x120 [ 207.582096][ T8850] ? __pfx_status_show+0x10/0x10 [ 207.582132][ T8850] dev_attr_show+0x53/0xe0 [ 207.582163][ T8850] ? __pfx_dev_attr_show+0x10/0x10 [ 207.582188][ T8850] sysfs_kf_seq_show+0x213/0x3e0 [ 207.582228][ T8850] seq_read_iter+0x506/0x12c0 [ 207.582277][ T8850] kernfs_fop_read_iter+0x40f/0x5a0 [ 207.582305][ T8850] ? rw_verify_area+0xcf/0x680 [ 207.582341][ T8850] vfs_read+0x8c8/0xc70 [ 207.582368][ T8850] ? __pfx___mutex_lock+0x10/0x10 [ 207.582410][ T8850] ? __pfx_vfs_read+0x10/0x10 [ 207.582458][ T8850] ksys_read+0x12a/0x240 [ 207.582481][ T8850] ? __pfx_ksys_read+0x10/0x10 [ 207.582502][ T8850] ? rcu_is_watching+0x12/0xc0 [ 207.582534][ T8850] do_syscall_64+0xcd/0x230 [ 207.582565][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.582589][ T8850] RIP: 0033:0x7f771138e969 [ 207.582609][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.582631][ T8850] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.582654][ T8850] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 207.582672][ T8850] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 207.582687][ T8850] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.582702][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.582716][ T8850] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 207.582749][ T8850] [ 208.378979][ T8886] Invalid ELF header magic: != ELF [ 214.425719][ T9039] netlink: 'syz.4.581': attribute type 15 has an invalid length. [ 214.452258][ T9039] netlink: 'syz.4.581': attribute type 16 has an invalid length. [ 214.544507][ T9039] netlink: 'syz.4.581': attribute type 17 has an invalid length. [ 214.581337][ T9039] netlink: 'syz.4.581': attribute type 19 has an invalid length. [ 214.605222][ T9039] netlink: 238 bytes leftover after parsing attributes in process `syz.4.581'. [ 216.363358][ T9076] ima: policy update failed [ 216.385344][ T30] audit: type=1802 audit(6040742180.567:9): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.588" res=0 errno=0 [ 216.560982][ T9090] netlink: 'syz.3.590': attribute type 29 has an invalid length. [ 216.629951][ T9090] netlink: 334 bytes leftover after parsing attributes in process `syz.3.590'. [ 216.962944][ T9099] FAULT_INJECTION: forcing a failure. [ 216.962944][ T9099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.016796][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.4.592 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 217.016833][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.016848][ T9099] Call Trace: [ 217.016856][ T9099] [ 217.016866][ T9099] dump_stack_lvl+0x16c/0x1f0 [ 217.016900][ T9099] should_fail_ex+0x512/0x640 [ 217.016938][ T9099] _copy_from_user+0x2e/0xd0 [ 217.016976][ T9099] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 217.017021][ T9099] snd_rawmidi_write+0x26e/0xc10 [ 217.017064][ T9099] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 217.017100][ T9099] ? __pfx_default_wake_function+0x10/0x10 [ 217.017126][ T9099] ? bpf_lsm_file_permission+0x9/0x10 [ 217.017160][ T9099] ? security_file_permission+0x71/0x210 [ 217.017191][ T9099] ? rw_verify_area+0xcf/0x680 [ 217.017245][ T9099] vfs_write+0x25c/0x1180 [ 217.017266][ T9099] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 217.017306][ T9099] ? __pfx_vfs_write+0x10/0x10 [ 217.017324][ T9099] ? find_held_lock+0x2b/0x80 [ 217.017346][ T9099] ? __fget_files+0x204/0x3c0 [ 217.017385][ T9099] ? __fget_files+0x20e/0x3c0 [ 217.017428][ T9099] ksys_write+0x205/0x240 [ 217.017451][ T9099] ? __pfx_ksys_write+0x10/0x10 [ 217.017470][ T9099] ? rcu_is_watching+0x12/0xc0 [ 217.017502][ T9099] do_syscall_64+0xcd/0x230 [ 217.017533][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.017558][ T9099] RIP: 0033:0x7f8dd358e969 [ 217.017578][ T9099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.017601][ T9099] RSP: 002b:00007f8dd4411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.017625][ T9099] RAX: ffffffffffffffda RBX: 00007f8dd37b5fa0 RCX: 00007f8dd358e969 [ 217.017642][ T9099] RDX: 000000000000a3d9 RSI: 0000200000000400 RDI: 000000000000000a [ 217.017658][ T9099] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 217.017673][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.017689][ T9099] R13: 0000000000000000 R14: 00007f8dd37b5fa0 R15: 00007ffe6967e7c8 [ 217.017729][ T9099] [ 218.261832][ T9118] netlink: 354 bytes leftover after parsing attributes in process `syz.1.594'. [ 218.345718][ T9121] vivid-007: ================= START STATUS ================= [ 218.353624][ T9121] vivid-007: Generate PTS: true [ 218.359902][ T9121] vivid-007: Generate SCR: true [ 218.385265][ T9121] tpg source WxH: 640x360 (Y'CbCr) [ 218.390404][ T9121] tpg field: 1 [ 218.393786][ T9121] tpg crop: (0,0)/640x360 [ 218.428621][ T9121] tpg compose: (0,0)/640x360 [ 218.433251][ T9121] tpg colorspace: 8 [ 218.474730][ T9121] tpg transfer function: 0/0 [ 218.493391][ T9121] tpg Y'CbCr encoding: 0/0 [ 218.515975][ T9121] tpg quantization: 0/0 [ 218.524386][ T9127] netlink: 342 bytes leftover after parsing attributes in process `syz.1.597'. [ 218.555009][ T9121] tpg RGB range: 0/2 [ 218.565554][ T9121] vivid-007: ================== END STATUS ================== [ 218.586613][ T9129] netlink: 342 bytes leftover after parsing attributes in process `syz.1.597'. [ 219.013243][ T9139] mkiss: ax0: crc mode is auto. [ 219.236766][ T9131] netlink: 342 bytes leftover after parsing attributes in process `syz.2.596'. [ 219.922740][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 222.907205][ T9196] ima: policy update failed [ 222.918946][ T30] audit: type=1802 audit(4294968322.395:10): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.610" res=0 errno=0 [ 223.092184][ T9194] netlink: 342 bytes leftover after parsing attributes in process `syz.3.609'. [ 223.785698][ T9221] FAULT_INJECTION: forcing a failure. [ 223.785698][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 223.872366][ T9221] CPU: 1 UID: 0 PID: 9221 Comm: syz.4.616 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 223.872436][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.872469][ T9221] Call Trace: [ 223.872486][ T9221] [ 223.872507][ T9221] dump_stack_lvl+0x16c/0x1f0 [ 223.872543][ T9221] should_fail_ex+0x512/0x640 [ 223.872573][ T9221] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 223.872604][ T9221] should_failslab+0xc2/0x120 [ 223.872631][ T9221] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 223.872658][ T9221] ? acpi_ps_alloc_op+0xf1/0x310 [ 223.872690][ T9221] acpi_ps_alloc_op+0xf1/0x310 [ 223.872719][ T9221] acpi_ps_create_scope_op+0x1a/0x70 [ 223.872746][ T9221] acpi_ps_execute_method+0x1b1/0xb30 [ 223.872775][ T9221] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 223.872811][ T9221] acpi_ns_evaluate+0x76c/0xca0 [ 223.872842][ T9221] ? kasan_save_track+0x14/0x30 [ 223.872870][ T9221] acpi_evaluate_object+0x1fa/0xa90 [ 223.872897][ T9221] ? do_syscall_64+0xcd/0x230 [ 223.872933][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.872960][ T9221] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 223.872987][ T9221] ? __mutex_trylock_common+0xe9/0x250 [ 223.873023][ T9221] acpi_evaluate_integer+0xdd/0x200 [ 223.873058][ T9221] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 223.873108][ T9221] ? __pfx_status_show+0x10/0x10 [ 223.873132][ T9221] status_show+0xa0/0x120 [ 223.873157][ T9221] ? __pfx_status_show+0x10/0x10 [ 223.873192][ T9221] dev_attr_show+0x53/0xe0 [ 223.873222][ T9221] ? __pfx_dev_attr_show+0x10/0x10 [ 223.873247][ T9221] sysfs_kf_seq_show+0x213/0x3e0 [ 223.873286][ T9221] seq_read_iter+0x506/0x12c0 [ 223.873335][ T9221] kernfs_fop_read_iter+0x40f/0x5a0 [ 223.873363][ T9221] ? rw_verify_area+0xcf/0x680 [ 223.873397][ T9221] vfs_read+0x8c8/0xc70 [ 223.873424][ T9221] ? __pfx___mutex_lock+0x10/0x10 [ 223.873451][ T9221] ? __pfx_vfs_read+0x10/0x10 [ 223.873497][ T9221] ksys_read+0x12a/0x240 [ 223.873518][ T9221] ? __pfx_ksys_read+0x10/0x10 [ 223.873537][ T9221] ? rcu_is_watching+0x12/0xc0 [ 223.873569][ T9221] do_syscall_64+0xcd/0x230 [ 223.873600][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.873623][ T9221] RIP: 0033:0x7f8dd358e969 [ 223.873643][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.873667][ T9221] RSP: 002b:00007f8dd4411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.873689][ T9221] RAX: ffffffffffffffda RBX: 00007f8dd37b5fa0 RCX: 00007f8dd358e969 [ 223.873705][ T9221] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 223.873719][ T9221] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 223.873733][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.873746][ T9221] R13: 0000000000000000 R14: 00007f8dd37b5fa0 R15: 00007ffe6967e7c8 [ 223.873779][ T9221] [ 224.837755][ T9245] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 225.477727][ T9222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.488482][ T9222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.494598][ T9222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.534843][ T9222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.558047][ T9222] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 225.596614][ T9222] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 226.745283][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.945904][ T9274] netlink: 342 bytes leftover after parsing attributes in process `syz.3.626'. [ 227.291369][ T9297] FAULT_INJECTION: forcing a failure. [ 227.291369][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 227.341711][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.2.630 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 227.341750][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 227.341765][ T9297] Call Trace: [ 227.341774][ T9297] [ 227.341784][ T9297] dump_stack_lvl+0x16c/0x1f0 [ 227.341819][ T9297] should_fail_ex+0x512/0x640 [ 227.341851][ T9297] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 227.341882][ T9297] should_failslab+0xc2/0x120 [ 227.341919][ T9297] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 227.341944][ T9297] ? __proc_create+0xc3/0x8c0 [ 227.341970][ T9297] ? __proc_create+0x2ce/0x8c0 [ 227.342001][ T9297] __proc_create+0x2ce/0x8c0 [ 227.342029][ T9297] ? __pfx___proc_create+0x10/0x10 [ 227.342061][ T9297] ? _raw_write_unlock+0x28/0x50 [ 227.342087][ T9297] ? proc_register+0x314/0x5f0 [ 227.342117][ T9297] proc_create_reg+0x7d/0x180 [ 227.342147][ T9297] proc_create_data+0x86/0x110 [ 227.342174][ T9297] ? __pfx_proc_create_data+0x10/0x10 [ 227.342204][ T9297] ? cache_register_net+0x137/0x5e0 [ 227.342245][ T9297] cache_register_net+0x25a/0x5e0 [ 227.342281][ T9297] nfsd_idmap_init+0xb6/0x250 [ 227.342308][ T9297] ? __pfx_nfsd_net_init+0x10/0x10 [ 227.342343][ T9297] nfsd_net_init+0x69/0x3d0 [ 227.342378][ T9297] ? __pfx_nfsd_net_init+0x10/0x10 [ 227.342412][ T9297] ops_init+0x1df/0x5f0 [ 227.342442][ T9297] setup_net+0x21e/0x850 [ 227.342471][ T9297] ? __pfx_setup_net+0x10/0x10 [ 227.342493][ T9297] ? lockdep_init_map_type+0x5c/0x280 [ 227.342524][ T9297] ? __pfx_down_read_killable+0x10/0x10 [ 227.342560][ T9297] ? debug_mutex_init+0x37/0x70 [ 227.342599][ T9297] copy_net_ns+0x2a6/0x5f0 [ 227.342630][ T9297] create_new_namespaces+0x3ea/0xad0 [ 227.342664][ T9297] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 227.342694][ T9297] ksys_unshare+0x45b/0xa40 [ 227.342730][ T9297] ? __pfx_ksys_unshare+0x10/0x10 [ 227.342759][ T9297] ? xfd_validate_state+0x5d/0x180 [ 227.342800][ T9297] ? rcu_is_watching+0x12/0xc0 [ 227.342832][ T9297] __x64_sys_unshare+0x31/0x40 [ 227.342864][ T9297] do_syscall_64+0xcd/0x230 [ 227.342901][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.342926][ T9297] RIP: 0033:0x7f401db8e969 [ 227.342947][ T9297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.342973][ T9297] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 227.342997][ T9297] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 227.343014][ T9297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 227.343029][ T9297] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 227.343045][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.343060][ T9297] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 227.343094][ T9297] [ 227.545433][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.634230][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.640304][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.905860][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 229.705919][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.604352][ T9376] can: request_module (can-proto-0) failed. [ 231.706378][ T9372] netlink: 342 bytes leftover after parsing attributes in process `syz.1.646'. [ 231.773610][ T9378] zswap: compressor not available [ 231.786544][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.828565][ T9385] can: request_module (can-proto-0) failed. [ 231.966130][ T9394] FAULT_INJECTION: forcing a failure. [ 231.966130][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 231.987619][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.4.649 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 231.987656][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.987672][ T9394] Call Trace: [ 231.987680][ T9394] [ 231.987690][ T9394] dump_stack_lvl+0x16c/0x1f0 [ 231.987724][ T9394] should_fail_ex+0x512/0x640 [ 231.987757][ T9394] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.987788][ T9394] should_failslab+0xc2/0x120 [ 231.987817][ T9394] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.987860][ T9394] ? acpi_ps_alloc_op+0xf1/0x310 [ 231.987895][ T9394] acpi_ps_alloc_op+0xf1/0x310 [ 231.987926][ T9394] acpi_ps_create_scope_op+0x1a/0x70 [ 231.987955][ T9394] acpi_ps_execute_method+0x1b1/0xb30 [ 231.987987][ T9394] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 231.988022][ T9394] acpi_ns_evaluate+0x76c/0xca0 [ 231.988054][ T9394] ? kasan_save_track+0x14/0x30 [ 231.988082][ T9394] acpi_evaluate_object+0x1fa/0xa90 [ 231.988110][ T9394] ? do_syscall_64+0xcd/0x230 [ 231.988137][ T9394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.988163][ T9394] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 231.988191][ T9394] ? __mutex_trylock_common+0xe9/0x250 [ 231.988227][ T9394] acpi_evaluate_integer+0xdd/0x200 [ 231.988262][ T9394] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 231.988311][ T9394] ? __pfx_status_show+0x10/0x10 [ 231.988335][ T9394] status_show+0xa0/0x120 [ 231.988359][ T9394] ? __pfx_status_show+0x10/0x10 [ 231.988395][ T9394] dev_attr_show+0x53/0xe0 [ 231.988426][ T9394] ? __pfx_dev_attr_show+0x10/0x10 [ 231.988452][ T9394] sysfs_kf_seq_show+0x213/0x3e0 [ 231.988493][ T9394] seq_read_iter+0x506/0x12c0 [ 231.988539][ T9394] kernfs_fop_read_iter+0x40f/0x5a0 [ 231.988566][ T9394] ? rw_verify_area+0xcf/0x680 [ 231.988609][ T9394] vfs_read+0x8c8/0xc70 [ 231.988635][ T9394] ? __pfx___mutex_lock+0x10/0x10 [ 231.988663][ T9394] ? __pfx_vfs_read+0x10/0x10 [ 231.988708][ T9394] ksys_read+0x12a/0x240 [ 231.988729][ T9394] ? __pfx_ksys_read+0x10/0x10 [ 231.988749][ T9394] ? rcu_is_watching+0x12/0xc0 [ 231.988781][ T9394] do_syscall_64+0xcd/0x230 [ 231.988811][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.988835][ T9394] RIP: 0033:0x7f8dd358e969 [ 231.988856][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.988880][ T9394] RSP: 002b:00007f8dd4411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.988902][ T9394] RAX: ffffffffffffffda RBX: 00007f8dd37b5fa0 RCX: 00007f8dd358e969 [ 231.988918][ T9394] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 231.988931][ T9394] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 231.988944][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.988958][ T9394] R13: 0000000000000000 R14: 00007f8dd37b5fa0 R15: 00007ffe6967e7c8 [ 231.988991][ T9394] [ 232.277679][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.057784][ T9450] netlink: 342 bytes leftover after parsing attributes in process `syz.3.661'. [ 235.611860][ T9473] netlink: 334 bytes leftover after parsing attributes in process `syz.3.665'. [ 235.658345][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 235.992409][ T9484] netlink: 334 bytes leftover after parsing attributes in process `syz.3.669'. [ 236.740221][ T9492] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 237.390819][ T9501] can: request_module (can-proto-0) failed. [ 237.409780][ T9500] can: request_module (can-proto-0) failed. [ 237.606662][ T9517] FAULT_INJECTION: forcing a failure. [ 237.606662][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 237.626703][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.2.675 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 237.626725][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.626734][ T9517] Call Trace: [ 237.626740][ T9517] [ 237.626745][ T9517] dump_stack_lvl+0x16c/0x1f0 [ 237.626767][ T9517] should_fail_ex+0x512/0x640 [ 237.626784][ T9517] ? __kmalloc_noprof+0xbf/0x510 [ 237.626801][ T9517] ? ieee80211_register_hw+0x1548/0x4020 [ 237.626820][ T9517] should_failslab+0xc2/0x120 [ 237.626842][ T9517] __kmalloc_noprof+0xd2/0x510 [ 237.626855][ T9517] ? do_raw_spin_lock+0x12c/0x2b0 [ 237.626874][ T9517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.626894][ T9517] ieee80211_register_hw+0x1548/0x4020 [ 237.626915][ T9517] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 237.626930][ T9517] ? __debug_object_init+0x221/0x3d0 [ 237.626946][ T9517] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 237.626966][ T9517] ? find_held_lock+0x2b/0x80 [ 237.626988][ T9517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.627005][ T9517] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 237.627021][ T9517] ? __hrtimer_setup+0x176/0x280 [ 237.627042][ T9517] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 237.627074][ T9517] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 237.627100][ T9517] hwsim_new_radio_nl+0xb51/0x12c0 [ 237.627120][ T9517] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.627144][ T9517] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 237.627162][ T9517] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 237.627183][ T9517] genl_family_rcv_msg_doit+0x206/0x2f0 [ 237.627200][ T9517] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.627216][ T9517] ? trace_cap_capable+0x18d/0x200 [ 237.627234][ T9517] ? bpf_lsm_capable+0x9/0x10 [ 237.627247][ T9517] ? security_capable+0x7e/0x260 [ 237.627268][ T9517] ? ns_capable+0xd7/0x110 [ 237.627283][ T9517] genl_rcv_msg+0x55c/0x800 [ 237.627301][ T9517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.627317][ T9517] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.627337][ T9517] ? __lock_acquire+0xaa4/0x1ba0 [ 237.627356][ T9517] netlink_rcv_skb+0x16a/0x440 [ 237.627369][ T9517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.627386][ T9517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.627408][ T9517] ? __pfx_down_read+0x10/0x10 [ 237.627426][ T9517] ? netlink_deliver_tap+0x1ae/0xd30 [ 237.627442][ T9517] genl_rcv+0x28/0x40 [ 237.627454][ T9517] netlink_unicast+0x53a/0x7f0 [ 237.627471][ T9517] ? __pfx_netlink_unicast+0x10/0x10 [ 237.627483][ T9517] ? __lock_acquire+0xaa4/0x1ba0 [ 237.627503][ T9517] netlink_sendmsg+0x8d1/0xdd0 [ 237.627520][ T9517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.627541][ T9517] ____sys_sendmsg+0xa95/0xc70 [ 237.627558][ T9517] ? copy_msghdr_from_user+0x10a/0x160 [ 237.627571][ T9517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.627590][ T9517] ? try_to_wake_up+0xa2f/0x1680 [ 237.627606][ T9517] ___sys_sendmsg+0x134/0x1d0 [ 237.627619][ T9517] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.627654][ T9517] __sys_sendmsg+0x16d/0x220 [ 237.627667][ T9517] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.627679][ T9517] ? __x64_sys_futex+0x1e0/0x4c0 [ 237.627701][ T9517] ? rcu_is_watching+0x12/0xc0 [ 237.627719][ T9517] do_syscall_64+0xcd/0x230 [ 237.627737][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.627751][ T9517] RIP: 0033:0x7f401db8e969 [ 237.627763][ T9517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.627776][ T9517] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.627791][ T9517] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 237.627801][ T9517] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 237.627809][ T9517] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 237.627817][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.627832][ T9517] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 237.627850][ T9517] [ 238.433817][ T9521] ubi0: attaching mtd0 [ 238.439087][ T9521] ubi0: scanning is finished [ 238.444629][ T9521] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 238.536491][ T9521] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 238.558164][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 240.040552][ T9559] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 241.318233][ T9582] FAULT_INJECTION: forcing a failure. [ 241.318233][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 241.361887][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.3.687 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 241.361930][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.361955][ T9582] Call Trace: [ 241.361964][ T9582] [ 241.361974][ T9582] dump_stack_lvl+0x16c/0x1f0 [ 241.362009][ T9582] should_fail_ex+0x512/0x640 [ 241.362040][ T9582] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 241.362081][ T9582] should_failslab+0xc2/0x120 [ 241.362113][ T9582] __kmalloc_cache_noprof+0x6a/0x3e0 [ 241.362149][ T9582] ? __mutex_lock+0x1ca/0xb90 [ 241.362176][ T9582] ? alloc_tty_struct+0x96/0x8c0 [ 241.362210][ T9582] alloc_tty_struct+0x96/0x8c0 [ 241.362236][ T9582] ? __pfx___mutex_lock+0x10/0x10 [ 241.362265][ T9582] ? __pfx_alloc_tty_struct+0x10/0x10 [ 241.362293][ T9582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.362331][ T9582] tty_init_dev.part.0+0x1e/0x500 [ 241.362361][ T9582] tty_init_dev+0x60/0x80 [ 241.362389][ T9582] ? __pfx_ptmx_open+0x10/0x10 [ 241.362437][ T9582] ptmx_open+0x10d/0x360 [ 241.362475][ T9582] ? __pfx_ptmx_open+0x10/0x10 [ 241.362509][ T9582] chrdev_open+0x231/0x6a0 [ 241.362533][ T9582] ? __pfx_apparmor_file_open+0x10/0x10 [ 241.362564][ T9582] ? __pfx_chrdev_open+0x10/0x10 [ 241.362592][ T9582] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 241.362635][ T9582] do_dentry_open+0x741/0x1c10 [ 241.362660][ T9582] ? __pfx_chrdev_open+0x10/0x10 [ 241.362692][ T9582] vfs_open+0x82/0x3f0 [ 241.362724][ T9582] path_openat+0x1e5e/0x2d40 [ 241.362760][ T9582] ? __pfx_path_openat+0x10/0x10 [ 241.362798][ T9582] do_filp_open+0x20b/0x470 [ 241.362822][ T9582] ? __pfx_do_filp_open+0x10/0x10 [ 241.362870][ T9582] ? alloc_fd+0x471/0x7d0 [ 241.362916][ T9582] do_sys_openat2+0x11b/0x1d0 [ 241.362945][ T9582] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.362990][ T9582] __x64_sys_openat+0x174/0x210 [ 241.363020][ T9582] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.363052][ T9582] ? rcu_is_watching+0x12/0xc0 [ 241.363084][ T9582] do_syscall_64+0xcd/0x230 [ 241.363114][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.363139][ T9582] RIP: 0033:0x7f771138e969 [ 241.363165][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.363190][ T9582] RSP: 002b:00007f770f1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.363215][ T9582] RAX: ffffffffffffffda RBX: 00007f77115b6160 RCX: 00007f771138e969 [ 241.363231][ T9582] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 241.363247][ T9582] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 241.363263][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.363279][ T9582] R13: 0000000000000000 R14: 00007f77115b6160 R15: 00007ffdf2f83b58 [ 241.363311][ T9582] [ 241.680426][ T9573] netlink: 342 bytes leftover after parsing attributes in process `syz.2.686'. [ 242.888835][ T9608] netlink: 334 bytes leftover after parsing attributes in process `syz.3.692'. [ 244.602663][ T9650] can: request_module (can-proto-0) failed. [ 246.273091][ T9702] netlink: 346 bytes leftover after parsing attributes in process `syz.1.712'. [ 246.536180][ T9702] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 247.025608][ T9710] CIFS mount error: No usable UNC path provided in device string! [ 247.025608][ T9710] [ 247.043636][ T9710] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 247.403965][ T9719] could not allocate digest TFM handle [ 247.899986][ T30] audit: type=1807 audit(4294968347.385:11): UNKNOWN=rX res=0 [ 247.921528][ T30] audit: type=1802 audit(4294968347.385:12): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.718" res=0 errno=0 [ 247.946460][ T9731] netlink: 342 bytes leftover after parsing attributes in process `syz.4.715'. [ 248.174370][ T9739] ima: policy update failed [ 248.203467][ T30] audit: type=1802 audit(4294968347.685:13): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.718" res=0 errno=0 [ 248.629571][ T9750] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 250.559223][ T9798] netlink: 342 bytes leftover after parsing attributes in process `syz.4.729'. [ 251.244896][ T9808] netlink: 342 bytes leftover after parsing attributes in process `syz.3.731'. [ 251.270101][ T9804] FAULT_INJECTION: forcing a failure. [ 251.270101][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 251.403043][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.2.730 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 251.403082][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 251.403096][ T9804] Call Trace: [ 251.403106][ T9804] [ 251.403116][ T9804] dump_stack_lvl+0x16c/0x1f0 [ 251.403152][ T9804] should_fail_ex+0x512/0x640 [ 251.403194][ T9804] should_failslab+0xc2/0x120 [ 251.403224][ T9804] __kmalloc_cache_noprof+0x6a/0x3e0 [ 251.403262][ T9804] ? minstrel_ht_alloc+0x4f/0x980 [ 251.403297][ T9804] minstrel_ht_alloc+0x4f/0x980 [ 251.403336][ T9804] ieee80211_init_rate_ctrl_alg+0x209/0x6b0 [ 251.403375][ T9804] ieee80211_register_hw+0x20aa/0x4020 [ 251.403412][ T9804] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 251.403438][ T9804] ? __debug_object_init+0x221/0x3d0 [ 251.403465][ T9804] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 251.403503][ T9804] ? find_held_lock+0x2b/0x80 [ 251.403529][ T9804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.403561][ T9804] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 251.403587][ T9804] ? __hrtimer_setup+0x176/0x280 [ 251.403623][ T9804] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 251.403680][ T9804] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 251.403725][ T9804] hwsim_new_radio_nl+0xb51/0x12c0 [ 251.403762][ T9804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.403806][ T9804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 251.403846][ T9804] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 251.403886][ T9804] genl_family_rcv_msg_doit+0x206/0x2f0 [ 251.403919][ T9804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.403950][ T9804] ? trace_cap_capable+0x18d/0x200 [ 251.403983][ T9804] ? bpf_lsm_capable+0x9/0x10 [ 251.404006][ T9804] ? security_capable+0x7e/0x260 [ 251.404043][ T9804] ? ns_capable+0xd7/0x110 [ 251.404071][ T9804] genl_rcv_msg+0x55c/0x800 [ 251.404104][ T9804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.404131][ T9804] ? __pfx___dev_queue_xmit+0x10/0x10 [ 251.404164][ T9804] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.404199][ T9804] ? __lock_acquire+0xaa4/0x1ba0 [ 251.404236][ T9804] netlink_rcv_skb+0x16a/0x440 [ 251.404262][ T9804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.404292][ T9804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.404336][ T9804] ? __pfx_down_read+0x10/0x10 [ 251.404368][ T9804] ? netlink_deliver_tap+0x1ae/0xd30 [ 251.404398][ T9804] genl_rcv+0x28/0x40 [ 251.404423][ T9804] netlink_unicast+0x53a/0x7f0 [ 251.404453][ T9804] ? __pfx_netlink_unicast+0x10/0x10 [ 251.404475][ T9804] ? __lock_acquire+0xaa4/0x1ba0 [ 251.404514][ T9804] netlink_sendmsg+0x8d1/0xdd0 [ 251.404546][ T9804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.404586][ T9804] ____sys_sendmsg+0xa95/0xc70 [ 251.404617][ T9804] ? copy_msghdr_from_user+0x10a/0x160 [ 251.404640][ T9804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.404677][ T9804] ? try_to_wake_up+0xa2f/0x1680 [ 251.404706][ T9804] ___sys_sendmsg+0x134/0x1d0 [ 251.404733][ T9804] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.404803][ T9804] __sys_sendmsg+0x16d/0x220 [ 251.404833][ T9804] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.404857][ T9804] ? __x64_sys_futex+0x1e0/0x4c0 [ 251.404893][ T9804] ? rcu_is_watching+0x12/0xc0 [ 251.404928][ T9804] do_syscall_64+0xcd/0x230 [ 251.404961][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.404986][ T9804] RIP: 0033:0x7f401db8e969 [ 251.405006][ T9804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.405030][ T9804] RSP: 002b:00007f401ea72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.405054][ T9804] RAX: ffffffffffffffda RBX: 00007f401ddb5fa0 RCX: 00007f401db8e969 [ 251.405070][ T9804] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 251.405086][ T9804] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 251.405101][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.405114][ T9804] R13: 0000000000000000 R14: 00007f401ddb5fa0 R15: 00007ffc25fea618 [ 251.405144][ T9804] [ 251.819175][ T9804] ieee80211 phy21: Failed to select rate control algorithm [ 252.188673][ T9813] bond0: option mode: unable to set because the bond device is up [ 252.407633][ T9818] FAULT_INJECTION: forcing a failure. [ 252.407633][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 252.420447][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.3.734 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 252.420482][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 252.420497][ T9818] Call Trace: [ 252.420506][ T9818] [ 252.420516][ T9818] dump_stack_lvl+0x16c/0x1f0 [ 252.420549][ T9818] should_fail_ex+0x512/0x640 [ 252.420581][ T9818] ? __kmalloc_noprof+0xbf/0x510 [ 252.420610][ T9818] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 252.420645][ T9818] should_failslab+0xc2/0x120 [ 252.420673][ T9818] __kmalloc_noprof+0xd2/0x510 [ 252.420738][ T9818] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 252.420776][ T9818] acpi_ex_start_trace_method+0x30/0x480 [ 252.420814][ T9818] acpi_ds_begin_method_execution+0x3c/0x980 [ 252.420852][ T9818] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 252.420893][ T9818] acpi_ps_execute_method+0x94/0xb30 [ 252.420925][ T9818] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 252.420960][ T9818] acpi_ns_evaluate+0x76c/0xca0 [ 252.420991][ T9818] ? kasan_save_track+0x14/0x30 [ 252.421020][ T9818] acpi_evaluate_object+0x1fa/0xa90 [ 252.421048][ T9818] ? do_syscall_64+0xcd/0x230 [ 252.421074][ T9818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.421101][ T9818] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 252.421128][ T9818] ? __mutex_trylock_common+0xe9/0x250 [ 252.421165][ T9818] acpi_evaluate_integer+0xdd/0x200 [ 252.421200][ T9818] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 252.421251][ T9818] ? __pfx_status_show+0x10/0x10 [ 252.421275][ T9818] status_show+0xa0/0x120 [ 252.421301][ T9818] ? __pfx_status_show+0x10/0x10 [ 252.421336][ T9818] dev_attr_show+0x53/0xe0 [ 252.421366][ T9818] ? __pfx_dev_attr_show+0x10/0x10 [ 252.421392][ T9818] sysfs_kf_seq_show+0x213/0x3e0 [ 252.421431][ T9818] seq_read_iter+0x506/0x12c0 [ 252.421480][ T9818] kernfs_fop_read_iter+0x40f/0x5a0 [ 252.421508][ T9818] ? rw_verify_area+0xcf/0x680 [ 252.421544][ T9818] vfs_read+0x8c8/0xc70 [ 252.421585][ T9818] ? __pfx___mutex_lock+0x10/0x10 [ 252.421616][ T9818] ? __pfx_vfs_read+0x10/0x10 [ 252.421665][ T9818] ksys_read+0x12a/0x240 [ 252.421694][ T9818] ? __pfx_ksys_read+0x10/0x10 [ 252.421714][ T9818] ? rcu_is_watching+0x12/0xc0 [ 252.421748][ T9818] do_syscall_64+0xcd/0x230 [ 252.421780][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.421804][ T9818] RIP: 0033:0x7f771138e969 [ 252.421825][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.421848][ T9818] RSP: 002b:00007f7712120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.421872][ T9818] RAX: ffffffffffffffda RBX: 00007f77115b5fa0 RCX: 00007f771138e969 [ 252.421889][ T9818] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 252.421904][ T9818] RBP: 00007f7711410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 252.421918][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.421932][ T9818] R13: 0000000000000000 R14: 00007f77115b5fa0 R15: 00007ffdf2f83b58 [ 252.421966][ T9818] [ 252.424399][ T9818] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 253.672145][ T9853] zswap: compressor not available [ 253.748302][ T9843] could not allocate digest TFM handle [ 254.287080][ T9874] svc: failed to register nfsdv3 RPC service (errno 101). [ 254.332884][ T9874] svc: failed to register nfsaclv3 RPC service (errno 101). [ 254.834238][ T9905] FAULT_INJECTION: forcing a failure. [ 254.834238][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 254.847157][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.4.744 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 254.847192][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.847206][ T9905] Call Trace: [ 254.847215][ T9905] [ 254.847224][ T9905] dump_stack_lvl+0x16c/0x1f0 [ 254.847258][ T9905] should_fail_ex+0x512/0x640 [ 254.847291][ T9905] ? __kmalloc_noprof+0xbf/0x510 [ 254.847321][ T9905] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 254.847353][ T9905] should_failslab+0xc2/0x120 [ 254.847401][ T9905] __kmalloc_noprof+0xd2/0x510 [ 254.847437][ T9905] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 254.847479][ T9905] acpi_ex_start_trace_method+0x30/0x480 [ 254.847518][ T9905] acpi_ds_begin_method_execution+0x3c/0x980 [ 254.847554][ T9905] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 254.847593][ T9905] acpi_ps_execute_method+0x94/0xb30 [ 254.847625][ T9905] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 254.847659][ T9905] acpi_ns_evaluate+0x76c/0xca0 [ 254.847690][ T9905] ? kasan_save_track+0x14/0x30 [ 254.847718][ T9905] acpi_evaluate_object+0x1fa/0xa90 [ 254.847746][ T9905] ? do_syscall_64+0xcd/0x230 [ 254.847780][ T9905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.847808][ T9905] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 254.847837][ T9905] ? __mutex_trylock_common+0xe9/0x250 [ 254.847871][ T9905] acpi_evaluate_integer+0xdd/0x200 [ 254.847905][ T9905] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 254.847956][ T9905] ? __pfx_status_show+0x10/0x10 [ 254.847979][ T9905] status_show+0xa0/0x120 [ 254.848004][ T9905] ? __pfx_status_show+0x10/0x10 [ 254.848039][ T9905] dev_attr_show+0x53/0xe0 [ 254.848070][ T9905] ? __pfx_dev_attr_show+0x10/0x10 [ 254.848096][ T9905] sysfs_kf_seq_show+0x213/0x3e0 [ 254.848136][ T9905] seq_read_iter+0x506/0x12c0 [ 254.848197][ T9905] kernfs_fop_read_iter+0x40f/0x5a0 [ 254.848227][ T9905] ? rw_verify_area+0xcf/0x680 [ 254.848263][ T9905] vfs_read+0x8c8/0xc70 [ 254.848290][ T9905] ? __pfx___mutex_lock+0x10/0x10 [ 254.848320][ T9905] ? __pfx_vfs_read+0x10/0x10 [ 254.848367][ T9905] ksys_read+0x12a/0x240 [ 254.848389][ T9905] ? __pfx_ksys_read+0x10/0x10 [ 254.848409][ T9905] ? rcu_is_watching+0x12/0xc0 [ 254.848444][ T9905] do_syscall_64+0xcd/0x230 [ 254.848475][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.848498][ T9905] RIP: 0033:0x7f8dd358e969 [ 254.848518][ T9905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.848542][ T9905] RSP: 002b:00007f8dd4411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.848565][ T9905] RAX: ffffffffffffffda RBX: 00007f8dd37b5fa0 RCX: 00007f8dd358e969 [ 254.848582][ T9905] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 254.848597][ T9905] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 254.848612][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.848627][ T9905] R13: 0000000000000000 R14: 00007f8dd37b5fa0 R15: 00007ffe6967e7c8 [ 254.848661][ T9905] [ 254.848672][ T9905] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 255.470804][ T9919] random: crng reseeded on system resumption [ 255.710678][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717151][ T1297] ieee802154 phy1 wpan1: encryption failed: -22             [ 258.691383][ T9957] FAULT_INJECTION: forcing a failure. [ 258.691383][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 258.693158][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.1.756 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 258.693190][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.693204][ T9957] Call Trace: [ 258.693211][ T9957] [ 258.693220][ T9957] dump_stack_lvl+0x16c/0x1f0 [ 258.693254][ T9957] should_fail_ex+0x512/0x640 [ 258.693286][ T9957] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 258.693318][ T9957] should_failslab+0xc2/0x120 [ 258.693346][ T9957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 258.693375][ T9957] ? acpi_ps_alloc_op+0xf1/0x310 [ 258.693408][ T9957] acpi_ps_alloc_op+0xf1/0x310 [ 258.693439][ T9957] acpi_ps_create_scope_op+0x1a/0x70 [ 258.693473][ T9957] acpi_ps_execute_method+0x1b1/0xb30 [ 258.693505][ T9957] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 258.693542][ T9957] acpi_ns_evaluate+0x76c/0xca0 [ 258.693574][ T9957] ? kasan_save_track+0x14/0x30 [ 258.693603][ T9957] acpi_evaluate_object+0x1fa/0xa90 [ 258.693631][ T9957] ? do_syscall_64+0xcd/0x230 [ 258.693658][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.693690][ T9957] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 258.693718][ T9957] ? __mutex_trylock_common+0xe9/0x250 [ 258.693755][ T9957] acpi_evaluate_integer+0xdd/0x200 [ 258.693791][ T9957] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 258.693843][ T9957] ? __pfx_status_show+0x10/0x10 [ 258.693868][ T9957] status_show+0xa0/0x120 [ 258.693894][ T9957] ? __pfx_status_show+0x10/0x10 [ 258.693929][ T9957] dev_attr_show+0x53/0xe0 [ 258.693960][ T9957] ? __pfx_dev_attr_show+0x10/0x10 [ 258.693986][ T9957] sysfs_kf_seq_show+0x213/0x3e0 [ 258.694026][ T9957] seq_read_iter+0x506/0x12c0 [ 258.694075][ T9957] kernfs_fop_read_iter+0x40f/0x5a0 [ 258.694103][ T9957] ? rw_verify_area+0xcf/0x680 [ 258.694140][ T9957] vfs_read+0x8c8/0xc70 [ 258.694167][ T9957] ? __pfx___mutex_lock+0x10/0x10 [ 258.694196][ T9957] ? __pfx_vfs_read+0x10/0x10 [ 258.694242][ T9957] ksys_read+0x12a/0x240 [ 258.694264][ T9957] ? __pfx_ksys_read+0x10/0x10 [ 258.694284][ T9957] ? rcu_is_watching+0x12/0xc0 [ 258.694317][ T9957] do_syscall_64+0xcd/0x230 [ 258.694348][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.694372][ T9957] RIP: 0033:0x7f0da4b8e969 [ 258.694393][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.694417][ T9957] RSP: 002b:00007f0da5983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.694440][ T9957] RAX: ffffffffffffffda RBX: 00007f0da4db5fa0 RCX: 00007f0da4b8e969 [ 258.694457][ T9957] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 258.694478][ T9957] RBP: 00007f0da4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 258.694493][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.694507][ T9957] R13: 0000000000000000 R14: 00007f0da4db5fa0 R15: 00007ffd48e1a5e8 [ 258.694543][ T9957] [ 262.218793][T10005] netlink: 342 bytes leftover after parsing attributes in process `syz.2.765'. [ 262.562162][T10022] FAULT_INJECTION: forcing a failure. [ 262.562162][T10022] name failslab, interval 1, probability 0, space 0, times 0 [ 262.563984][T10022] CPU: 0 UID: 0 PID: 10022 Comm: syz.4.767 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 262.564015][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.564030][T10022] Call Trace: [ 262.564038][T10022] [ 262.564047][T10022] dump_stack_lvl+0x16c/0x1f0 [ 262.564080][T10022] should_fail_ex+0x512/0x640 [ 262.564113][T10022] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.564145][T10022] should_failslab+0xc2/0x120 [ 262.564175][T10022] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.564209][T10022] ? acpi_ps_alloc_op+0xf1/0x310 [ 262.564243][T10022] acpi_ps_alloc_op+0xf1/0x310 [ 262.564274][T10022] acpi_ps_create_scope_op+0x1a/0x70 [ 262.564302][T10022] acpi_ps_execute_method+0x1b1/0xb30 [ 262.564335][T10022] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 262.564370][T10022] acpi_ns_evaluate+0x76c/0xca0 [ 262.564403][T10022] ? kasan_save_track+0x14/0x30 [ 262.564431][T10022] acpi_evaluate_object+0x1fa/0xa90 [ 262.564464][T10022] ? do_syscall_64+0xcd/0x230 [ 262.564491][T10022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.564519][T10022] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 262.564548][T10022] ? __mutex_trylock_common+0xe9/0x250 [ 262.564585][T10022] acpi_evaluate_integer+0xdd/0x200 [ 262.564621][T10022] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 262.564672][T10022] ? __pfx_status_show+0x10/0x10 [ 262.564697][T10022] status_show+0xa0/0x120 [ 262.564722][T10022] ? __pfx_status_show+0x10/0x10 [ 262.564758][T10022] dev_attr_show+0x53/0xe0 [ 262.564788][T10022] ? __pfx_dev_attr_show+0x10/0x10 [ 262.564814][T10022] sysfs_kf_seq_show+0x213/0x3e0 [ 262.564854][T10022] seq_read_iter+0x506/0x12c0 [ 262.564902][T10022] kernfs_fop_read_iter+0x40f/0x5a0 [ 262.564930][T10022] ? rw_verify_area+0xcf/0x680 [ 262.564966][T10022] vfs_read+0x8c8/0xc70 [ 262.564994][T10022] ? __pfx___mutex_lock+0x10/0x10 [ 262.565032][T10022] ? __pfx_vfs_read+0x10/0x10 [ 262.565080][T10022] ksys_read+0x12a/0x240 [ 262.565103][T10022] ? __pfx_ksys_read+0x10/0x10 [ 262.565124][T10022] ? rcu_is_watching+0x12/0xc0 [ 262.565155][T10022] do_syscall_64+0xcd/0x230 [ 262.565193][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.565217][T10022] RIP: 0033:0x7f8dd358e969 [ 262.565238][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.565262][T10022] RSP: 002b:00007f8dd43f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.565285][T10022] RAX: ffffffffffffffda RBX: 00007f8dd37b6080 RCX: 00007f8dd358e969 [ 262.565303][T10022] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000007 [ 262.565319][T10022] RBP: 00007f8dd3610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 262.565334][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.565350][T10022] R13: 0000000000000000 R14: 00007f8dd37b6080 R15: 00007ffe6967e7c8 [ 262.565385][T10022] [ 264.330230][T10065] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 264.702606][T10073] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 265.538186][T10077] netlink: 334 bytes leftover after parsing attributes in process `syz.3.781'. [ 266.359739][T10088] ima: policy update failed [ 266.361312][ T30] audit: type=1802 audit(4294968365.845:14): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.785" res=0 errno=0 [ 268.723354][T10121] ================================================================== [ 268.724584][T10121] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 268.725731][T10121] Read of size 8 at addr ffff88803545d000 by task syz.2.792/10121 [ 268.726807][T10121] [ 268.727183][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.2.792 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 268.727216][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.727231][T10121] Call Trace: [ 268.727239][T10121] [ 268.727249][T10121] dump_stack_lvl+0x116/0x1f0 [ 268.727281][T10121] print_report+0xc3/0x670 [ 268.727307][T10121] ? __virt_addr_valid+0x5e/0x590 [ 268.727339][T10121] ? __phys_addr+0xc6/0x150 [ 268.727368][T10121] ? force_devcd_write+0x312/0x340 [ 268.727397][T10121] kasan_report+0xe0/0x110 [ 268.727424][T10121] ? force_devcd_write+0x312/0x340 [ 268.727461][T10121] force_devcd_write+0x312/0x340 [ 268.727490][T10121] ? __pfx_force_devcd_write+0x10/0x10 [ 268.727519][T10121] ? __debugfs_file_get+0x1fe/0x840 [ 268.727544][T10121] ? __pfx___debugfs_file_get+0x10/0x10 [ 268.727578][T10121] full_proxy_write+0x13c/0x200 [ 268.727604][T10121] vfs_write+0x25c/0x1180 [ 268.727625][T10121] ? __pfx_full_proxy_write+0x10/0x10 [ 268.727652][T10121] ? __pfx___mutex_lock+0x10/0x10 [ 268.727681][T10121] ? __pfx_vfs_write+0x10/0x10 [ 268.727706][T10121] ? __fget_files+0x20e/0x3c0 [ 268.727743][T10121] ksys_write+0x12a/0x240 [ 268.727765][T10121] ? __pfx_ksys_write+0x10/0x10 [ 268.727785][T10121] ? rcu_is_watching+0x12/0xc0 [ 268.727810][T10121] do_syscall_64+0xcd/0x230 [ 268.727845][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.727869][T10121] RIP: 0033:0x7f401db8e969 [ 268.727889][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.727912][T10121] RSP: 002b:00007f401ea51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.727935][T10121] RAX: ffffffffffffffda RBX: 00007f401ddb6080 RCX: 00007f401db8e969 [ 268.727953][T10121] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000004 [ 268.727969][T10121] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 268.727985][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.728000][T10121] R13: 0000000000000000 R14: 00007f401ddb6080 R15: 00007ffc25fea618 [ 268.728023][T10121] [ 268.728032][T10121] [ 268.757828][T10121] Allocated by task 5998: [ 268.758449][T10121] kasan_save_stack+0x33/0x60 [ 268.759139][T10121] kasan_save_track+0x14/0x30 [ 268.759830][T10121] __kasan_kmalloc+0xaa/0xb0 [ 268.760492][T10121] __kmalloc_noprof+0x223/0x510 [ 268.761214][T10121] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 268.762065][T10121] ieee80211_inform_bss+0x10b/0x1140 [ 268.762817][T10121] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 268.763702][T10121] cfg80211_inform_bss_data+0x224/0x3bd0 [ 268.764525][T10121] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 268.765388][T10121] ieee80211_bss_info_update+0x310/0xab0 [ 268.766178][T10121] ieee80211_scan_rx+0x475/0xae0 [ 268.766856][T10121] ieee80211_rx_list+0x1bdb/0x2980 [ 268.767556][T10121] ieee80211_rx_napi+0xdc/0x410 [ 268.768225][T10121] ieee80211_handle_queued_frames+0xd5/0x130 [ 268.769046][T10121] tasklet_action_common+0x281/0x400 [ 268.769772][T10121] handle_softirqs+0x216/0x8e0 [ 268.770429][T10121] __irq_exit_rcu+0x109/0x170 [ 268.771077][T10121] irq_exit_rcu+0x9/0x30 [ 268.771664][T10121] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 268.772438][T10121] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.773255][T10121] [ 268.773613][T10121] Freed by task 5998: [ 268.774164][T10121] kasan_save_stack+0x33/0x60 [ 268.774813][T10121] kasan_save_track+0x14/0x30 [ 268.775486][T10121] kasan_save_free_info+0x3b/0x60 [ 268.776184][T10121] __kasan_slab_free+0x51/0x70 [ 268.776853][T10121] kfree+0x2b6/0x4d0 [ 268.777405][T10121] ieee80211_inform_bss+0x77c/0x1140 [ 268.778129][T10121] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 268.778980][T10121] cfg80211_inform_bss_data+0x224/0x3bd0 [ 268.779752][T10121] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 268.780580][T10121] ieee80211_bss_info_update+0x310/0xab0 [ 268.781360][T10121] ieee80211_scan_rx+0x475/0xae0 [ 268.782065][T10121] ieee80211_rx_list+0x1bdb/0x2980 [ 268.782790][T10121] ieee80211_rx_napi+0xdc/0x410 [ 268.783463][T10121] ieee80211_handle_queued_frames+0xd5/0x130 [ 268.784282][T10121] tasklet_action_common+0x281/0x400 [ 268.785006][T10121] handle_softirqs+0x216/0x8e0 [ 268.785666][T10121] __irq_exit_rcu+0x109/0x170 [ 268.786314][T10121] irq_exit_rcu+0x9/0x30 [ 268.786903][T10121] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 268.787672][T10121] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.788485][T10121] [ 268.788821][T10121] The buggy address belongs to the object at ffff88803545d000 [ 268.788821][T10121] which belongs to the cache kmalloc-1k of size 1024 [ 268.790667][T10121] The buggy address is located 0 bytes inside of [ 268.790667][T10121] freed 1024-byte region [ffff88803545d000, ffff88803545d400) [ 268.792475][T10121] [ 268.792811][T10121] The buggy address belongs to the physical page: [ 268.793679][T10121] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35458 [ 268.794846][T10121] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 268.795983][T10121] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 268.796997][T10121] page_type: f5(slab) [ 268.797570][T10121] raw: 00fff00000000040 ffff88801b441dc0 ffffea0001874000 dead000000000002 [ 268.798718][T10121] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 268.799864][T10121] head: 00fff00000000040 ffff88801b441dc0 ffffea0001874000 dead000000000002 [ 268.801020][T10121] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 268.802176][T10121] head: 00fff00000000003 ffffea0000d51601 00000000ffffffff 00000000ffffffff [ 268.803333][T10121] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 268.804484][T10121] page dumped because: kasan: bad access detected [ 268.805348][T10121] page_owner tracks the page as allocated [ 268.806123][T10121] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5146, tgid 5146 (cryptomgr_probe), ts 26044070552, free_ts 0 [ 268.808837][T10121] post_alloc_hook+0x181/0x1b0 [ 268.809497][T10121] get_page_from_freelist+0x135c/0x3920 [ 268.810258][T10121] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 268.811063][T10121] alloc_pages_mpol+0x1fb/0x550 [ 268.811734][T10121] new_slab+0x244/0x340 [ 268.812317][T10121] ___slab_alloc+0xd9c/0x1940 [ 268.812969][T10121] __slab_alloc.constprop.0+0x56/0xb0 [ 268.813711][T10121] __kmalloc_cache_noprof+0xfb/0x3e0 [ 268.814440][T10121] lskcipher_alloc_instance_simple+0x189/0xa80 [ 268.815287][T10121] crypto_cbc_create+0x1e/0x1f0 [ 268.815974][T10121] cryptomgr_probe+0xbc/0x2a0 [ 268.816626][T10121] kthread+0x3c2/0x780 [ 268.817198][T10121] ret_from_fork+0x45/0x80 [ 268.817815][T10121] ret_from_fork_asm+0x1a/0x30 [ 268.818479][T10121] page_owner free stack trace missing [ 268.819206][T10121] [ 268.819542][T10121] Memory state around the buggy address: [ 268.820314][T10121] ffff88803545cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 268.821394][T10121] ffff88803545cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 268.822471][T10121] >ffff88803545d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 268.823547][T10121] ^ [ 268.824120][T10121] ffff88803545d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 268.825220][T10121] ffff88803545d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 268.826309][T10121] ================================================================== [ 268.895850][T10121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.896963][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.2.792 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 268.898596][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.899970][T10121] Call Trace: [ 268.900457][T10121] [ 268.900896][T10121] dump_stack_lvl+0x3d/0x1f0 [ 268.901569][T10121] panic+0x71c/0x800 [ 268.902151][T10121] ? __pfx_panic+0x10/0x10 [ 268.902794][T10121] ? mark_held_locks+0x49/0x80 [ 268.903487][T10121] ? preempt_schedule_thunk+0x16/0x30 [ 268.904266][T10121] ? force_devcd_write+0x312/0x340 [ 268.905025][T10121] ? preempt_schedule_common+0x44/0xc0 [ 268.905835][T10121] ? force_devcd_write+0x312/0x340 [ 268.906569][T10121] check_panic_on_warn+0xab/0xb0 [ 268.907286][T10121] end_report+0x107/0x170 [ 268.907939][T10121] kasan_report+0xee/0x110 [ 268.908579][T10121] ? force_devcd_write+0x312/0x340 [ 268.909319][T10121] force_devcd_write+0x312/0x340 [ 268.910031][T10121] ? __pfx_force_devcd_write+0x10/0x10 [ 268.910815][T10121] ? __debugfs_file_get+0x1fe/0x840 [ 268.911580][T10121] ? __pfx___debugfs_file_get+0x10/0x10 [ 268.912375][T10121] full_proxy_write+0x13c/0x200 [ 268.913073][T10121] vfs_write+0x25c/0x1180 [ 268.913703][T10121] ? __pfx_full_proxy_write+0x10/0x10 [ 268.914478][T10121] ? __pfx___mutex_lock+0x10/0x10 [ 268.915202][T10121] ? __pfx_vfs_write+0x10/0x10 [ 268.915888][T10121] ? __fget_files+0x20e/0x3c0 [ 268.916577][T10121] ksys_write+0x12a/0x240 [ 268.917208][T10121] ? __pfx_ksys_write+0x10/0x10 [ 268.917923][T10121] ? rcu_is_watching+0x12/0xc0 [ 268.918613][T10121] do_syscall_64+0xcd/0x230 [ 268.919270][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.920131][T10121] RIP: 0033:0x7f401db8e969 [ 268.920788][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.923395][T10121] RSP: 002b:00007f401ea51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.924574][T10121] RAX: ffffffffffffffda RBX: 00007f401ddb6080 RCX: 00007f401db8e969 [ 268.925689][T10121] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000004 [ 268.926797][T10121] RBP: 00007f401dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 268.927887][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.928994][T10121] R13: 0000000000000000 R14: 00007f401ddb6080 R15: 00007ffc25fea618 [ 268.930091][T10121] [ 268.930773][T10121] Kernel Offset: disabled [ 268.931378][T10121] Rebooting in 86400 seconds..