last executing test programs: 11m41.489880883s ago: executing program 0 (id=578): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&>\xde?\xde<\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/230, 0xfdef, 0x3) 11m41.245847371s ago: executing program 0 (id=579): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xb}}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x1000000) 11m40.844993693s ago: executing program 0 (id=583): statmount$auto(0x0, 0x0, 0x1fe, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x3c1880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/pvrusb2/remove_id\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/disksize\x00', 0x101102, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 11m40.660493284s ago: executing program 0 (id=584): r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) acct$auto(&(0x7f0000000340)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/dT\x02\xa2%h\xdd\xfep\x0e\xe6\x96w\x05r\x9c\xb6L\t0\x0f\x954\xf6\b\xa0&C\x83L\xc0\xe9\t\"\xa5\x8f\xce\x03\xb6\x16\x90\xc3\x97\xb7\n\"zB\xedCf\xfd \x87\xdb\x8f\x87\xe9\xea\x89-B\x06\x97\xcb+\xf09\xa1\xa5\x8d\x9b\b\xc8\x15\xb6|\xc7 t\xc8#\xf8,\xab\x96\xf6\x03Z\x93\xf5\xc8\x87\xc9z}]\x85\xcc\xd5d\x02_\xd4>b\x96\xc5\x93\xb1\xa0E\xda\xb8\xb1\xa5G\r\xf4[\xec \"\xd9\x13\x803\xa6V\xe3\x06\xc72\xc0d|?\xfaA\xd2\xd6\xce\xfa\x9a\x98\x01\aXV.\xf15>;\xfaR\xcb\xc2v\x0f\xfc\xb3:f\x8f\xae\xcc\xbb\xd2\xfa\xef%\xfa\x85\xd9\x7fL\xad\xab\xd0\xd1\xc9v{Ze\x8a\xeb~\xf1V<\xc2p~\x90\xe6\x1c\xf86\xeb\x11\xe2\x90\rr\xda.\x82\xbd\x0f\xbd{\x861\x03\xda-#\\^`\xc8\x01%V\xab\r\b\xde\xaa\xf8s\x86K\bR\x12\xbc{\xef\xc5<\xfd\x02\xe2\xf0\br\xb4\n\xe4\xa6\v\xbcd\x1e\xe9\xbd\x18\x89\xa1\xe8w\x0e7\xae\x10e\xb6\xce\xe25\xdf\xd8\x12X`\xec\n\x87\x86X\x9b\x80i7\xcb\xed\xbdQ\xe4\xbb*\xedq\xb0>\x92\xb6W\b\x1eV\xadk\x11\xa9\xa1\x1f\xe1\xac\xb7\xd0\xcc\x94\xc1g\x8c\xe5\xf0\"\xe1\xc2. \\X\xe0\xd30\xa9X\x8d@\xb1\xddS\xbey\xb4]j \x96\xe3\x84\xcc\x02C\xd23\x16T\xden\"\xea\xf2j\b\xd2\xf6\xe5\xc2a\xaa\xefr\x80\rZ\x06s\xa0\xaf\x93MmM|\xfdN\x19\xf0RS\xc4\xca\x84H\x19T\xd4\xc4>\x8e\x050\x9c\x8f\xa9P\x8a\xd0\xd48\xb4\x0e0\xff\x98\xce\x01\'\x83i\xd9\x94\xcf\xd7\x03_|J\x9b\x06q\x0e\xdf_/u\xfa\xcd\xb9\"L\x17\xc3\xdc\x16\xc7\x02\xb7\x91\x85Ot\xd0r\xc2r\xee\xce\xefU\x1a\x89\xd6,\x04\x96o\xb9\x1b\x00\xec\xf17\xbbpu\xeeW\xd7HSXt\xe4\xf07+\xc8\xd3\x87|\x15\x9b\x95t\x195l\xcb\xfd\xae@\xbd>\xdcd\xaa\x19r\xec_>\xf2\x7f\xe6\xe7\x1c\x1dE\x87k(k\x98\x81\xe8\t\"\xed\x94\xe33\xfd*\xc1\xcc\x98\x1d\xdd\x9c\v\xc3\xef\x9b\xc3\xca\x14\xb54\x8aS\xa0`*\xc4\xe6|n\xc7\xbf1\x02yc\xc2\xf3\xb1\x0e\xb4\xc5\xf3\xe2\x10\xa9\xbdQ\xb6') r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb2c", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x801, 0x100) r4 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a8935ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de48306c2fb", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r7, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r7}) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x7c8, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf70}, @IPVS_CMD_ATTR_DAEMON={0x1b0, 0x3, 0x0, 0x1, [@nested={0x1ab, 0x63, 0x0, 0x1, [@generic="773b6f66800dacd6a941eff1502370da6687bc2a680f97a7c2e3d250d8d81dbf4644321c2a9fd53f0d1894966deb938151e49482255f9cc3daf13eebada10c39deebbe8050ec28ca93e61dd87b2d2f78059898959b0d5427ae52c6c4d9461efeb0abb204f69d99f134fc3d823fa67d79c8eb01762d7a8c11d9e8b521c6520bc7be780f543691612d236e94363b354db6f92f84d1bef5f7cbf36fef382145d8736d396904df165df81bfc0f", @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x80}, @generic="62b267bfe1fc0af3f5d72dd2f7e974f411a71705eee39843fa514b36c2063a99e7c25c3ce27859f97225d909338e5c336e8f381293c45c84676f6eba1d707048c5546004ad18e544119b99884d3dc65e8da818fe770e378927fb47342e63dbf5f18e8de0358e5e3708865b698bae1893ede7b5fff292d72f45b1e6e34264673893448d698b21db0aeeaaba3563e1afd5b10e4da1efec01cb9a8d7c54e647cc502bfaceb159b7bd738d2543eb3a4d8f38ef019b3ca42475f53344f36fe8e3715131ae68c5960d52e50db948235df4f1afdb6866b0ed8889c8f609c1f11918903f58a7a563b943d5193aff039f5d1cf18e"]}]}, @IPVS_CMD_ATTR_DEST={0x90, 0x2, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x8}, @generic="4195ed09fe717de8193f3409cd8eea0ebb5a2e313ac3f022059385250455668839c58200c7a5fead30498a8657526218f3c4ab01f6c604fe43d62b2547ef66e7fca5e9da005439ae6e4e517683564e1a75f171d51f40c49c05c156b12f52026875de3bac220569e4b5344ead9035663bc306ec22c3492aee377a7c963babba45ade6a73e"]}, @IPVS_CMD_ATTR_DAEMON={0x55a, 0x3, 0x0, 0x1, [@generic="e18d0e58eb45188e5b4dc69542ba8bdda0c5c0ae540c5662de49007aa046defd1c08fa94d46b0b2c3b11e4318e89cab2de036a3555e6b3d4c86159e74324f966e92f96d3dc6e5cb852d9b81c70e6cf84ee20911e28d8ee42b3b7e0f127e0ffd949be5bcc9d41f14d5fe9cfcb3c59a54fe95f7bbb6294994fcb0f03bdfbe09227ef55777efc50ea249a609fa056ad75703e1a44e43d402bed27328fe391f4cca76bddc8d3c1a3ca6116249e1aa93fbe4bb1246966e9965579a4162e216b417ea956e608574aaf0da8bcfd5f2c", @nested={0x161, 0xb2, 0x0, 0x1, [@generic="02d80896570c8d73358d9c4f373b788e9a5f6356db0d57e11f9299aa523efeb588a5af56a7e937b3ab1b030a0146acececcefa3877e233191e546de6935d1706698550bd3e02c00c03a0b69fe29a36986ca7388226a14789ca218e81bc200a1fcde913774070adf4436aa2c999731d5fe93d64d5edde2fc9cadf6c84ebbbfda83fda83b6fd63236a36ede14923a69f9c6a74547e4d24eb14974e94bb9fdd2df2845ec5ff804c1538cdd0cdec10fc5ee5d962e9cbb428b584e346265a64b79a1123ea68", @generic="668957ab843de4e58fa76a07a81e91f76b0487cf57c017651a40ad64bb3dba82a04da49bfc890be8d96b88285a92ccdec759166a4aed37b90c1a39e6786cd94f49b1587a869c5a4e4339b325de9b1c7d11e2d9bec761d137021e8d488fade16265aa4337855e555435c5b987e98581", @generic="1a9318a9f3dc4700259b3c4989ed668a6739c95e57687c57ca068b1114f031130e6b1595db8fbd", @typed={0x4, 0xf3}]}, @nested={0x23e, 0x140, 0x0, 0x1, [@generic="1019ad81b9bfbdd823cbb19d79164b6ed51d3e42db", @nested={0x4, 0xa1}, @generic="40f40f2b2200c6cb183fd6b6ed4ec9332b19a20226b3a0e5c4c03fc0a50ec51b12e51bb72395b71c0973ca3f5a4e66e45e871b75d35c2b279946885b2f891e6b412a60536c99b165c503", @typed={0xb, 0xe4, 0x0, 0x0, @str='%o%\\\x95/\x00'}, @generic="498d64f63db8c6c8487575c997b7d267c3e8efabad7f6a2b324d27bda8f2cf6c2d148914aa211cb4cff84bf4dbf22a032a24172f72ddc8b69c994560524082c5ac5bd354aa65e667ce2b7f30d29de21ea16367a0aaba4dd0541e589b65a7397928b6520f89b037d36c946cf9f812c8772b8a5775b29219cf1cc434d510489090b5d3de1146095e0eb47f80d0be925b4002e70789e2842489d61ef190d5673b3ca4d30b159dacdf20d1eae628ea2d2dbf77276f8344ccc026be44aefda49693ecf4e5dcc5873c0e50b5c4494d4df657b18a4f9475fdbff703cac403badcda7cae09", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0xd6}, @generic="77b164f7f0cb52726d775622719d9548d3e50f7a7a9dac57f0e07d71b648cad3c870be026d97cf4673fb8b78e5ac520d7bb82410342c048d3b80744e6ebe09cb843b81795f1582c2b7d32bd8be19d20f5eb34dda47c035ab08dfa40e6eb95f2f843d25670c8c84d372aca02b13899bdfd3fa8994e7068b08314ef3e37d9495a852a5eb8e5c86f6171de9d0125ad17df63f3b18dba461c78b0c4a865ccfa64c7115f5729f785fb447132042ee41380f6f21c311fa321abe042533a34a7821036bd0d6f79ccd3c986ec45abe1651174dacb2beff9038d988670033", @nested={0x4, 0xb}]}, @typed={0x8, 0x13b, 0x0, 0x0, @fd=r1}, @generic="8f1f2dff4f2441538d12e43bf749eef35141804df166d6f376bf9268878ca7e75ce537b7b170d781f4d0ee5ae3d6a5c5459d783badfbd4b30bfe28c42a9c1ffc954983732b8dc9b6be0d441922a05788b877aac6988992b1d6e955d0e8153771d62f71ad68ffa062607354f006a00f08aa21d1775be1d67d481e2feaa4d238bfd2fa2f5492fb7fb7af68e7a4aab19cd68454252ae50e81bfbabf8118c85712238f5c7d3c10951f7ed8ca93e57dc10c30f20a3c1c233eee47b0d9b6a02dec49b3d29faf86ea27bb61c5c1304cc231058652711e2cb512", @typed={0x8, 0xd6, 0x0, 0x0, @u32=0x3}]}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x4000090}, 0x40040) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0xa, 0x0) r8 = socket(0x2, 0x5, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)='}]\x00', 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), r4) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f00000001c0)={0x2, 0x2, 0x8, 0x10000, 0x4, 0x0}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100025bd7000fddbdf2501000000140001800800ab008fb1000008002a008c186e2c3df6b738d2af4b8bdd9e1dcbedfe1eacba711c267e3fda9974c29a34bf4ac534c9bd0eb8a16402aa4aa8999e33aed4e510acb4764673acc5d824d90c5ca39ea96ab6d299526d2dc156133e51102f9cd65d90bc49bdbc3278881923fd5e0b0e5ecb381bccf51992904f814e8952f432f64450df7193bd5676fbd2007d975215537e1e445de0c39e11e73bd7d54c02fcd778586224ea3127cd4ef198dbc1", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x51) mlock$auto(0xfbe8, 0x4) mlockall$auto(0x9) 11m40.226400618s ago: executing program 0 (id=589): mmap$auto(0xfffffffffffffffd, 0x83e0, 0xdb, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xfffffffe, 0x0, [{0x400000ff, 0x8, 0xb789}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x84102, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram4\x00', 0x0, 0x0) mmap$auto(0x0, 0x7ff, 0x7fffffff, 0x44eb1, 0x3, 0x300000000000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) mremap$auto(0x0, 0x7, 0x3ed9, 0x3, 0x1ffffffe) prctl$auto(0x1000000003b, 0x6, 0x0, 0x5, 0x200000000007) socket(0x10, 0x3, 0x3) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) getpid() timerfd_settime$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={{0x85, 0x8}, {0x809, 0xffffffffffffffff}}) 11m38.194575368s ago: executing program 0 (id=594): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r0) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x40040) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x3b72, 0x0) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) clone$auto(0x400000000000007, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mlockall$auto(0x7) write$auto(0x3, 0x0, 0x81) 11m23.065013664s ago: executing program 32 (id=594): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r0) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x40040) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x3b72, 0x0) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) clone$auto(0x400000000000007, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mlockall$auto(0x7) write$auto(0x3, 0x0, 0x81) 3m4.615965515s ago: executing program 2 (id=2476): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(0x0, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x10200000000000, 0x200007, 0x8) 2m43.864517439s ago: executing program 2 (id=2482): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, 0x0, 0x801) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004240)=ANY=[@ANYBLOB="c4260000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf25010000002b0103800c00d10000000e0000000000761e21b301fabb68d53f5e29f0c279c63efb68a319debf1bdc1c936e669ebcc21540701e095fe773a8fc1dbad000e35d55f3e8bd2cadb11f2cc5ac89154ac04c9a9427dc8f1f53ce410003f6f776a42dfb9a3bd0cbaa486df53219da744593ad1df1f600e3fb336f0480f6d66244f86e05fef0262554ed93ca3d4d3a7dc53390730b17983f1f06ad08ea83148b9c2374d6911574b3d1288f206183f9ebd0637c6b154c8139e5ebe04226addd4c0c3e9fe3558246517ee4f0e695d1dc1de0a3f0320e1f5f7730e551130d36d81fe871aa09182741d2e62529d00a980f1f52d87831123e3606bde5c45dbc6aafea4920eacb12ccab4497b06c085ed586cbe41b0800828004007c8014006600fe8800000000000000000000000001010008000100080000000810028004109a8015e3888b7d7d9d91592b28d084ce28560cb1c78fa8d46f2e16e00ce8c88106826c8bf3355a1763a886f601ace6905de105bb50dcd7c77d4ef18b2801ba824130bb599cd44b9d1b781fde6bce2b5f07adc177d51494e5b1d1a0f104fbb8f0cd480d78a182356a6360b4c3c9ece1fbefa4fec8fcc814b3044f2bb8a012ff2a2cc9acc02a7c5397a1ce7672dfaa45eb238ce7224141afdd5c6c0354a868c2fad71026e8fa52a54cf516a9aae4dbf300bdf5a59fbd4624d88ba611b74dc8ad99944b2096b1ce6ed0228f4dc79b05957a64f6aa0fb11dd373f7d384c7bb88b6eafc693767324a3fd044b2ddffa5c747d58902857d5765e8b198dd4ae27d6775f4ccacebd0ed3fcfdefc4c72f96cac82676bd6d127357a7b6ee29d07784ddcd17f8a912b4b0ff07f6a4e356d1249af01a640215e891f629cf9d325bdc7671fb64577d08902d80badd7aadaa4e573e52d6734605d800525ea965d6713b405475d4bb3d6eec17bcb0c0b8adecc3b2cd5c663383a3e3f927cf77bfd117ea6bacad0dc2f5ea87ebfd22a59ab73542aa9c6375318bf94ea0d64fa18cb3242818977ea64f2d094d1a656cc4c00d14394691c1c93226731886cf43d75b07281bef66615d8ec9d38cc4c9b9231172b8a663a94192b7e8431b5688dec4f7412c15ce7fa7cc55fb609b845893dbce4a1dc9ceefc5a9d10253a4200416a92a9bde4ef3edccd05ba4d6041e8065032d283a85caf29ab0ca539b549a6740bb3fab8d5f17b030a8e2c42436c101d573e48e34d5be3bbfbca3907e347f632077e509b7a48b87d807bc37a03aa9a595d7db6dedd4f24d27e2c0e1de9dffbf248c4a2061a6ababa2c483e4a44e60c83a38827b6933b848a1686a1bf87b65123a07b39a1bfd823f556cce5a4c63275ec935a2384077f52a05a2dbe3519f95b969aa8a89cfe7c2b63487884d31930bf59011591eb10ae50b5d7f111b34869e63a3c7d1da1c24790220ce9dc2fdfd20aa15ea1d664354babd862047dea663494604e978042e42a7839be46f52b455c32bb258e1eea85a0062ce69f5146d84af9f5669929e8f68405b1f732ad370e3494a58e5fa95268c9cb32dc8bfb60ec1d880cdfdcd8e33af6255cc33f57c5cf661815452d42488071f6117d6e84d751f48ae4914e11ccaa08e399a6f734716f159236024b302e9b200f0052097e48f75b10820bf65b01c05bb69ac64ad8f9eed71fcad04410140087163c22971f0f717a6187f186252f2ee0185609a018cd0b97a6d18eeeb1a7b40988249b97ee442ee59412e66780e04b6e9e09e6d2fe4838f204086d44834c81726258cb7dd9e2541f56a9f05f7da49f15f5ae018bc70074c335f245c65ceaddef1d568545241a6f714e011c5bb2550aef157cb4916225692607bfbaf90ad46c8df0b08dd605891552c12cd4f1c0606b0e18f090d970e6187ea1c542676b6c7d60a121441999dfbf7a29d21b3ed12a105f30e00ac929332c39b91a3df607624a758a3e8841c4897b37f30465b94004a4676c72d6dd258e8f977ec8a076f0ee6999053e36b71d6eb36f56fcc9ac08151edafcdd060c56de8ae06261b4dd79035d708461a66c838d43944c2a7ecafde6057c8a20cb4fd9637c8198b8c6396a728b129c132043a8fb1402caad4fde8a2cf06d8608a05e11f2eec83ff2909d455d3070411d35f4efe82833e44ccc104a9eb73c2d8ea10ac71dc861a2fa31171610e0249f0c35a34b4fb6c6e7d56d7f681cc300e474226aeaea4ce55ee25b40e0bad55d9070a973c77c1ec4bca1686296095197f1392911aa1ebad5acc24265dcd00ebcc3f0e2a28cb950feb9dd4360092eb40d82ae0a214979b1c91c8774f2a30775bc3792e487b38f68c19a07b2be38eb8dc3ae48857e6d09e6adf3199283a4c5a4aa9352122724fed9898ce562c95fe7736e4afc70e4ee2ba34815e55c72fe71dee90cd868016d43fc12ec413d8dc1b4fa82cd47a1fe3153f35baa9158c0137d57fc8d088f4f262b5807652907d706147a6eab420b55b41710a638cdf9800d264c006dd8121ea7094eff4b4ae9eb9e06b8e70a08670deeddc047feb591dd254b25ce795026c11a389729e89380574745f1f87ba9ac4d7056e65d9775c31f271c254c25800b11ae18d0e1f74449dc212b2974667642a8bcff6e22cc2ae6ecaf187cb3f0bdb602f3ff3d117e9c22c00a7ce5046ac57baaa3017d85f0ffa39f4ae61dd16308f42f3bb8eb00cb39e32748adf78b38ec2447ad1db670815401bc92a5797d733b1f8a07835ca7dac70a52e310d4bd9b242b830d3c7d7a4fcf4dcd36dc4715908f160ac4ada6cc1a30232e9d0fd00eca17a19135997cb52d2a3744f00b2984c155896587ad8ae7600f4b98c4b7e4c36e63e5b5ddb6c3d6d006a0f8c66fae80ade2fa28c4688667a3027902952c0048dd74e568fd32eab060002862effb763c49b074eb9b32720c717c808ec32ac7b0ef449f002497ba30e2aecdeac9d2578d0c9bec54488558b10ae6544d4c1789ab55c6df1d039de00fd388e28f39519c6a919b6b3290e432536e983a318a6655a94291c77e20bc60e00bb0b438d0eba185109f68c6f959c7645a5e7f0cbb0de702458672de19889e49e32779c3e11d0b87fbe25febc4cbe17211e9b798c5e43c6ab79d4dc9a9c258", @ANYBLOB="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"], 0x26c4}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) 2m42.409024829s ago: executing program 2 (id=2525): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r2, 0x0, 0x5) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', &(0x7f0000000080)=0x48) r3 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x8182, 0x0) ioctl$auto(r1, 0x400c4d06, r3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) futex$auto(0x0, 0x85, 0x104, 0x0, 0x0, 0x7fffffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) madvise$auto(0x0, 0x3, 0x17) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/arch_status\x00', 0xed40, 0x0) 2m40.625128836s ago: executing program 2 (id=2533): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYBLOB="01002d"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x810) (fail_nth: 8) 2m39.571994556s ago: executing program 2 (id=2534): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800030000", @ANYRES32=0x0, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) 2m39.557965827s ago: executing program 1 (id=2535): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) shmat$auto(0x2, &(0x7f00000002c0)='macsec\x00', 0x6) r0 = socket(0x10, 0x2, 0xa) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) ioperm$auto(0x7, 0x71, 0x863) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) iopl$auto(0x3) ioperm$auto(0x5, 0x3432, 0x0) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/213, 0xd5) 2m39.058086114s ago: executing program 2 (id=2536): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) shmget$auto(0x5, 0x7, 0x8) socket(0x2, 0x1, 0x106) socket(0x1f, 0x2, 0x106) r1 = socket(0x2b, 0x807, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyyb/power/control\x00', 0x2c880, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf25280000000400fa000400a68004"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0xd5b, 0xc, 0x9d9, 0x948a, 0x2, 0x15f4da0d, 0x2, 0x2, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x400) 2m38.785378956s ago: executing program 1 (id=2540): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/tty16\x00', 0xa342, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2503000000040002802a00038008002a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="7a2abf0a71f304001500fc00ea80f50014005522bc029ae760722e027841aa64aa200992969fe6acf2fba74141702751fa9c4ebc7fcf01e9f38f995a0ed565bbbf1639192927fa5d522d0eb1f67d92228e9dfce95666250c576a2d42841d3f2ece918e5e187081ca08a8a734c8a230cf65c50672e1fe7b0cf19105180cb44743da5179d084149a7714af6cb158b62a37e57364bdcb7922bc05b0eaa860e1ff58086c5a05afb96edc435ae39e66ccd60e9c31dcf0017975776b9fe8adf6aab703c72ebe0ebd46a707c792048b6d66046eabd56e4a6d04ddb5eb68cc035904c3ddcda3aa2940edf0e7d45920f47e981992940dd17c9f815f0b8253244d6d806eeeade529000000000004000380"], 0x160}, 0x1, 0x0, 0x0, 0x4000012}, 0x48804) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) capset$auto(0x0, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, 0x0, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x11, 0x80003, 0x300) socket(0x2c, 0x80003, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002d80)={0x6d8, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_TX_RATES={0x6c2, 0x5a, 0x0, 0x1, [@generic="e8cdb24cf237d73d39a08bd644290396e80f9f50658ba723671c5c6b0ceb4a165cbb59a0909f29a401391fe84f122ee3285b267b493212648cab688a76f62fbb38592280de0e0a65c03079a405291d31fce0e81c977ddcad65c90d3f9795f075f8ea88c7589190605fcc9ffd4cda2ded7e609aa395f6fca25c66a475519b9dd11fafbfc03022aed25b02a570479ee5ca284d6a1d079cf08952420b08a564f55501fdd4f56764559fb350ab4570b50f509b9c3531da1a2b3257247078f9204d113735ed0bc63544640838020b94399f02ba94", @nested={0x5ec, 0x30, 0x0, 0x1, [@generic="69c8616a07dc642769d4816f8ce1c84b1504497b609651792a4ebb253419f44737e5a6af8f76cc74de9926be3a90944440ed421613a200a464a25795fe8061e261206ae804275f3ee80c0dd27464a8ebbfdb9a1c8d3f184a4bc5d226a66dc7903ee088e92c8379669e80eb509397935e8cffbf9d321c2e66abc8b455fc6384239cda1a786517372575b90274c8257f08e55b8e", @generic="b85488a846e2f6637286b9d9ce3afea81cbf2af57b47cdf454cd1830c85e5c4a52c0791eb56c182b18281550098ae09981abf0c4f524e5924ed4c04ebe0e63edcc8c064c1e6b0164024cd72d87584c3442d42a7fd70a6f", @generic="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"]}]}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x80}, 0x4008042) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket(0xa, 0x5, 0x94) 2m37.058610743s ago: executing program 1 (id=2543): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004240)=ANY=[@ANYBLOB="c4260000", @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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"], 0x26c4}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) 2m34.28122159s ago: executing program 1 (id=2546): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800030000", @ANYRES32=0x0, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) 2m33.599339326s ago: executing program 1 (id=2550): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) keyctl$auto_KEY_REQKEY_DEFL_GROUP_KEYRING(0x10, 0x6, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto(0x3, 0x4020aea5, 0x38) 2m32.950844736s ago: executing program 1 (id=2551): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) shmget$auto(0x5, 0x7, 0x8) socket(0x2, 0x1, 0x106) socket(0x1f, 0x2, 0x106) r1 = socket(0x2b, 0x807, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyyb/power/control\x00', 0x2c880, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf25280000000400fa000400a68004"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0xd5b, 0xc, 0x9d9, 0x948a, 0x2, 0x15f4da0d, 0x2, 0x2, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x400) 2m23.516617136s ago: executing program 33 (id=2536): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) shmget$auto(0x5, 0x7, 0x8) socket(0x2, 0x1, 0x106) socket(0x1f, 0x2, 0x106) r1 = socket(0x2b, 0x807, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyyb/power/control\x00', 0x2c880, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf25280000000400fa000400a68004"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0xd5b, 0xc, 0x9d9, 0x948a, 0x2, 0x15f4da0d, 0x2, 0x2, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x400) 2m16.887582565s ago: executing program 34 (id=2551): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) shmget$auto(0x5, 0x7, 0x8) socket(0x2, 0x1, 0x106) socket(0x1f, 0x2, 0x106) r1 = socket(0x2b, 0x807, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyyb/power/control\x00', 0x2c880, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf25280000000400fa000400a68004"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0xd5b, 0xc, 0x9d9, 0x948a, 0x2, 0x15f4da0d, 0x2, 0x2, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x400) 8.488098488s ago: executing program 5 (id=2916): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) 7.817854748s ago: executing program 4 (id=2918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c002000180003b44148cb5e4c00000003801000b0800c000200657468746f6f49001800018014000200776c616e300000150000000000000000"], 0x44}}, 0x24048084) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = socket(0x10, 0x2, 0x6) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) lseek$auto(r3, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x80000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo$auto(r6, r7, 0x1e, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffa, @_sigsys={0x0, 0x2, 0x7}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040060}, 0x48080) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8130000", @ANYRES16=r4, @ANYBLOB="200025bd7000fcdbdf250d00000008000e000900000005002500f70000000800160003000000050029000100000008001d00", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0400fc800400c78000001400be00000000000000000000000000000000010800cf000400000008006a00", @ANYRES32=r2, @ANYBLOB="0400f0e27b3cc0db877cf1cc8280563131b4ddf0df76b142e03497f8b92ad836f6196f0875caf3994e4267693e119df29ba8821ea04a63dc08c42a308bc8ab56cf2e88446fdc8306f477d4c884a84cd8deed72bfa6d0e61cd72499731bf9609bb216c355197b4554957ce75c9487e810e70db9f27e230000000000000056bba493bd2b5a4d5a9daced037233b4a75653665333297e5517f61ca76f4cc1e7e77b071cbe0c113ee6f4f1a374d569c4fe6b2d67358af15cbdf7e13d1452"], 0x13e8}, 0x1, 0x0, 0x0, 0x805}, 0x20004001) 6.479820208s ago: executing program 4 (id=2919): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='2', 0x1) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) arch_prctl$auto(0x1024, 0xfffffffffffffffb) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) socket(0x2, 0x2, 0x0) r4 = ioctl$auto_TIOCGPTPEER2(r2, 0x5441, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)="b9ebb9d7") connect$auto(r3, &(0x7f0000000080)=@isdn={0x22, 0x8, 0x8, 0xe0, 0x28}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x81, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) ioctl$auto(0xffffffffffffffff, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 6.356530989s ago: executing program 5 (id=2920): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0x1001) r2 = pipe$auto(0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x21}, 0x1, 0x0, 0x0, 0x28044810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4880) r4 = bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, r3, 0x0, 0x10014, 0x100000010001, 0x2, r1, 0x20000000000803, 0x2000000000000006}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x17, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="720100008404bfa357087db830a175ea523d99e762da7530ea10758ecaeab72c2953de4695bbb8deaad5ed37693d0a42be1f857536bddffb5df487c1", @ANYBLOB="12f18bf41265e6bf2c25a386756fd20976d98fbd447af293dbd181963edeae3b4ff793e0f7f5c111f0ab1d2c32f819e5aae1f450ddf7eca2c6f42a06f8b093ff7bfcdbcb9e3d8003854ad89b0d1275a4e775e2c60711c6eb55a64345098b6713198ec79b914244270905afa735bd6619b3d59019244157ba98b1502118d932d87faae91f775f5672b00b2136c1cc2e06672393813f186b5a7e2167e2b87e1cdaba6bc4219b3e29a2189f261344994e91b92dabc94047f46b4d7c82ffcd88a1f726c2fe5363fd32bc4fc8d432b6578c3ac487faf2131f0cd8af23066df183e12e4674a785eb"], 0x1ac}}, 0x4044811) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0xff}, 0xfffffffffffffffe, 0x0, 0x0, 0x9}, 0xffff}, 0x3, 0x0) r6 = socket(0x2, 0x2, 0x203) socket(0x9, 0x80000, 0x10) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_5={@target_fd=r4, r5, 0x7, 0x80000001, r0, @relative_id=0x2, 0x4}, 0x210) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008041}, 0x4040885) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xb6902, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/early_stop\x00', 0x80302, 0x0) sendfile$auto(r8, r6, 0x0, 0x3) read$auto(r7, &(0x7f0000000040)='\x14\xff\x13\xbd\xffX)\xca\x03', 0x1fe) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x40802, 0x0) 5.896780217s ago: executing program 5 (id=2931): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/gve/unbind\x00', 0xc8301, 0x0) write$auto(r0, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) vmsplice$auto(r2, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) write$auto(0x3, 0x0, 0xffd8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/fs/o2cb/logmask/CONN\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x22, 0x2, 0x2) bind$auto(0x7, &(0x7f0000000180), 0x6) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40086200, 0x38) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 4.754622188s ago: executing program 3 (id=2923): adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/udp\x00', 0x208140, 0x0) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x222004, 0x0) ioctl$auto_OTPSELECT(r3, 0x80044d0d, &(0x7f0000000140)=0xa37f) exit$auto(0x2) read$auto(r2, 0x0, 0x58b22256) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x0) getdents$auto(r4, 0x0, 0x62d4) pread64$auto(r1, 0x0, 0x10001, 0x830) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ptya7/power/runtime_suspended_time\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001100)=""/167, 0xa7) write$auto(r0, 0x0, 0x100) 4.116004267s ago: executing program 5 (id=2926): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/node/node0/numastat\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)=""/33, 0x21) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) mmap$auto(0x3, 0x8, 0x1, 0x51, 0xffffffffffffffff, 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000002c0)={0x2c, r5, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) 4.078567839s ago: executing program 4 (id=2927): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/248, 0xf8) io_uring_register$auto_IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000280)="843585336b84acc444f8699718efbc1cdaa15ad9b6117cd8f0588346395581eb36129674329251c170d222a619a86312ec4d5b0f50c7e135446c0cbd5b77657ce63b741f339e144936139a93c81152eb8c1b8a3bbc8481152b6b676addf43334e3464891cf2a87fc63bb241075029d404531e2638c9e57ba6f9e43e2da75b8108d09621f8a2ca154ec41d0a68e65aa85e4084956c4c1dae522d21a15681ff8b02895c8107a2d2b2ba3b58c6e15e6a886639f07326776d67376785e019e4f50d6c1001d7bef19d93455c9240e259e8441dce65297055e173f", 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x80, 0x0) read$auto_proc_mem_operations_base(r2, &(0x7f00000016c0)=""/4096, 0x1000) openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/output_bpc\x00', 0x80000, 0x0) close_range$auto(r0, r0, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x201, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa240, 0x0) ioctl$auto(r5, 0xc0585611, r5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) 4.068642333s ago: executing program 6 (id=2928): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_int=0x8001, @inferred, 0x8}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0}, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0xc001, 0x1}, 0x8}, 0x1, 0x5e0c) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0xf) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) madvise$auto(0x8000, 0x7f, 0x2) io_uring_setup$auto(0x6, 0x0) rt_sigqueueinfo$auto(0x0, 0x6, &(0x7f0000000000)={@siginfo_0_0={0xbb8, 0x155, 0xfffffffc, @_sigchld={0x0, 0x0, 0x80000001, 0x4e, 0xc}}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c00", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790485908288470000040002"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x0, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.64889783s ago: executing program 3 (id=2929): setresuid$auto(0x2, 0x7, 0x0) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x220080, 0xb5d1af1605322c72) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x4, 0x100fe, 'w\x00\x00\x00'}, 0x2) 3.55022146s ago: executing program 5 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x20009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x87) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(0xffffffffffffffff, 0x40095505, &(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x7, 0x9, 0x8, 0x1}) getsockopt$auto_SO_TYPE(r2, 0x9, 0x3, &(0x7f0000000080)='{\'$\x00', &(0x7f00000000c0)=0x7070) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200), 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r3, 0x0) mremap$auto(0x3ffd, 0x8, 0x3fda, 0x4, 0x18000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3.450521627s ago: executing program 3 (id=2932): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r0}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x23, 0xc, 0x2008, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x7, 0x3, 0x3, 0x62, 0x80000001, 0x800000000000007, 0x1, 0x7f, 0x1, 0x8000000000000001]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x20009, 0x100000000, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x53, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0xb) 3.274784774s ago: executing program 4 (id=2933): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x800}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008010) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (rerun: 64) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf250a00ecff33df031df066f8010a89da344c75f746fb7625366e1fa4144d7d7bfca85b4be4e14b40541830667ff5e1629613cd3002f69e18cff1ffd94758f1264ec36ef3aa1c56f046f9118aab50dcdceabbd525694ae536982318ff7183c166b5aa71f5d6f73b3273c9658ffb0c373fe324e404fcfbaf395522816f3af49d89e4e5f725e8209d06671c57a7c4dba69900f05a28619a3f4c9c40ccbe02e8d4f88582236fd294d8d93063bd34d0776ebc5554f3eac3145076ac13aea03b85f4"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) (async) mmap$auto(0x100000000000, 0x2020009, 0x6, 0xeb1, r0, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x44082, 0x0) (async, rerun: 64) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) (rerun: 64) writev$auto(r1, &(0x7f0000000c00)={0x0, 0x7}, 0x5) socket(0x10, 0x2, 0xf) ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)=0x10001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250500000008000a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) (async) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) (async) mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x40010, r2, 0x4) (async, rerun: 32) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) (rerun: 32) prlimit64$auto(0xffffffffffffffff, 0x101, 0x0, 0x0) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) (async) mprotect$auto(0xa1, 0x2, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7413c1, 0x149) (async) socket(0x27, 0x1, 0xb1f4) (async) epoll_pwait$auto(0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x4) 1.722587376s ago: executing program 3 (id=2934): mmap$auto(0x0, 0x4, 0x1, 0xebe, 0xffffffffffffffff, 0x7ffd) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x90080, 0x0) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x10, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x42a8a0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = open(0x0, 0x261c2, 0x84) socket(0x2b, 0x1, 0x1) ioctl$auto_SNAPSHOT_UNFREEZE(r4, 0x3302, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10, 0x5, 0x1, 0x948b, 0x63c, 0x15f4da0a, 0x200, 0x3, 0x4, 0x4080000016, 0x1, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) read$auto(r0, 0x0, 0x6) close_range$auto(0x0, r0, 0x4000000000002) memfd_create$auto(0x0, 0x12) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x541c, r6) 1.487898494s ago: executing program 6 (id=2935): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x2000a, 0x800000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x40009, 0x100000001, 0x9b72, 0x7, 0x28000) r3 = prctl$auto(0x3, 0x1, 0x4, 0x5, 0x9) mmap$auto(0xfffffffffffffffd, 0x1, 0x5, 0x200eb9, 0xffffffffffffffff, 0x800000000008001) close_range$auto(r3, 0x8, 0x0) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0xc0a00, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x21, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x54, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r4, @ANYBLOB="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", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xc4}, 0xffffffffffff4792, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x205, 0x20009, 0x4000000000df, 0x14, 0x401, 0x8000) 1.43205204s ago: executing program 4 (id=2936): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) write$auto(r0, 0x0, 0x0) move_pages$auto(0x0, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 848.590667ms ago: executing program 5 (id=2937): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='2', 0x1) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) arch_prctl$auto(0x1024, 0xfffffffffffffffb) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) socket(0x2, 0x2, 0x0) r4 = ioctl$auto_TIOCGPTPEER2(r2, 0x5441, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)="b9ebb9d7") connect$auto(r3, &(0x7f0000000080)=@isdn={0x22, 0x8, 0x8, 0xe0, 0x28}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x81, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) ioctl$auto(0xffffffffffffffff, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 846.759626ms ago: executing program 6 (id=2938): mmap$auto(0x0, 0x20006, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) setreuid$auto(0x3, 0x7) fchdir$auto(r1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0x13, r2, 0x8000) semctl$auto(0x5, 0x10, 0x3, 0x7) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000000)="24c0c5a78394a501a84e89ebbf6337cac429756aa14447817a351d78ac76652f7392b68f1286ddef5a29a7eeb665e5ce91411e1d6accd9e7b1acb94d8f04f21795e94e1cb825d707553f9de8c0b234732e8a38b683ddcd6337631bb1807bbf9255e6cea31b3b3e2a08834cb6930fc9a80cb253c9a861000f3bb4fb5e72f0045ce2810b6097cb37d936f1482de0bfccff2fe18a74532e0154358f360e3b102fbfb7cfded97cef636400e56720a603a444e482dceaaf01325811b8c9", 0x1fd) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/gretap0/force_tllao\x00', 0x34880, 0x0) 651.338791ms ago: executing program 6 (id=2939): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x400, 0x0) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x200, 0x0) getsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0x3, 0x31, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b76, 0xffffffffffffffff, 0x9) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rxrpc/stats\x00', 0x62240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/7, 0x7) madvise$auto(0x0, 0x200007, 0x8) 453.71562ms ago: executing program 6 (id=2940): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/node/node0/numastat\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)=""/33, 0x21) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) mmap$auto(0x3, 0x8, 0x1, 0x51, 0xffffffffffffffff, 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000002c0)={0x2c, r5, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) 435.799269ms ago: executing program 3 (id=2941): setresuid$auto(0x2, 0x7, 0x0) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x220080, 0xb5d1af1605322c72) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x4, 0x100fe, 'w\x00\x00\x00'}, 0x2) 289.339961ms ago: executing program 4 (id=2942): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r0}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x23, 0xc, 0x2008, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x7, 0x3, 0x3, 0x62, 0x80000001, 0x800000000000007, 0x1, 0x7f, 0x1, 0x8000000000000001]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x20009, 0x100000000, 0xffffffff, 0x405, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x53, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0xb) 41.543515ms ago: executing program 6 (id=2943): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x20009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x87) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(0xffffffffffffffff, 0x40095505, &(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x7, 0x9, 0x8, 0x1}) getsockopt$auto_SO_TYPE(r0, 0x9, 0x3, &(0x7f0000000080)='{\'$\x00', &(0x7f00000000c0)=0x7070) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x3ffd, 0x8, 0x3fda, 0x4, 0x18000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 3 (id=2944): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r1 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x8, &(0x7f0000000200)="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") writev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000040)="13bd409e236d351d39666cac074757c16c3a8c53953912dac3c43bcf25752b7e913ee8e6681a6c1d47c7f08eb64905a4eef75fccef493326bc197871fe743fa394dbc01c2a3bf86310c02bdc3142cc51dcc1c0c2d749fbb4ce2f952aea6d82c0d5fe246b", 0x52}, 0x1000) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001200)={0x8, r0}) kernel console output (not intermixed with test programs): ed to keep mac addresses unique to avoid problems! [ 865.865320][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.883010][T14737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.892433][T14737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.913843][T14737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.931550][T14737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.281746][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.310084][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.414602][ T7812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.440965][ T7812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.058785][T14970] ubi0: attaching mtd0 [ 868.079541][T14970] ubi0: scanning is finished [ 868.144294][T14970] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 868.514682][T14970] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 869.530254][T14993] FAULT_INJECTION: forcing a failure. [ 869.530254][T14993] name failslab, interval 1, probability 0, space 0, times 0 [ 869.552326][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.4.2087 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 869.552372][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 869.552392][T14993] Call Trace: [ 869.552402][T14993] [ 869.552416][T14993] dump_stack_lvl+0x16c/0x1f0 [ 869.552470][T14993] should_fail_ex+0x512/0x640 [ 869.552516][T14993] ? __kmalloc_noprof+0xbf/0x510 [ 869.552554][T14993] ? xfrm_hash_alloc+0xd1/0x100 [ 869.552601][T14993] should_failslab+0xc2/0x120 [ 869.552641][T14993] __kmalloc_noprof+0xd2/0x510 [ 869.552674][T14993] ? proc_create_reg+0xe3/0x180 [ 869.552717][T14993] ? __pfx_xfrm_net_init+0x10/0x10 [ 869.552766][T14993] xfrm_hash_alloc+0xd1/0x100 [ 869.552813][T14993] xfrm_state_init+0x9c/0x630 [ 869.552866][T14993] ? __pfx_xfrm_net_init+0x10/0x10 [ 869.552913][T14993] xfrm_net_init+0x210/0xcc0 [ 869.552970][T14993] ? __pfx_xfrm_net_init+0x10/0x10 [ 869.553019][T14993] ops_init+0x1df/0x5f0 [ 869.553072][T14993] setup_net+0x21e/0x850 [ 869.553116][T14993] ? __pfx_setup_net+0x10/0x10 [ 869.553154][T14993] ? lockdep_init_map_type+0x5c/0x280 [ 869.553199][T14993] ? __pfx_down_read_killable+0x10/0x10 [ 869.553257][T14993] ? debug_mutex_init+0x37/0x70 [ 869.553292][T14993] copy_net_ns+0x2a6/0x5f0 [ 869.553340][T14993] create_new_namespaces+0x3ea/0xad0 [ 869.553386][T14993] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 869.553428][T14993] ksys_unshare+0x45b/0xa40 [ 869.553473][T14993] ? __pfx_ksys_unshare+0x10/0x10 [ 869.553513][T14993] ? xfd_validate_state+0x5d/0x180 [ 869.553567][T14993] ? rcu_is_watching+0x12/0xc0 [ 869.553607][T14993] __x64_sys_unshare+0x31/0x40 [ 869.553650][T14993] do_syscall_64+0xcd/0x230 [ 869.553699][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.553733][T14993] RIP: 0033:0x7f752658e969 [ 869.553760][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.553793][T14993] RSP: 002b:00007f752732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 869.553825][T14993] RAX: ffffffffffffffda RBX: 00007f75267b5fa0 RCX: 00007f752658e969 [ 869.553847][T14993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 869.553867][T14993] RBP: 00007f7526610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 869.553887][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.553907][T14993] R13: 0000000000000000 R14: 00007f75267b5fa0 R15: 00007fffb7c32268 [ 869.553949][T14993] [ 870.126147][T15005] ubi0: attaching mtd0 [ 870.182634][T15005] ubi0: scanning is finished [ 870.196605][T15005] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 871.078543][T15005] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 871.306173][T15017] ubi0: attaching mtd0 [ 871.311657][T15017] ubi0: scanning is finished [ 871.316688][T15017] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 871.519581][T15017] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 871.555261][ T30] audit: type=1800 audit(4294967429.419:11): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2093" name="members" dev="configfs" ino=48222 res=0 errno=0 [ 872.268776][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a021400: rx timeout, send abort [ 872.777882][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a021400: abort rx timeout. Force session deactivation [ 873.313392][T15028] Invalid ELF header magic: != ELF [ 873.353109][T15040] [ 873.825045][T15047] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2100'. [ 873.850638][T15047] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2100'. [ 874.670813][T15058] ubi0: attaching mtd0 [ 874.700257][T15058] ubi0: scanning is finished [ 874.710875][T15058] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 874.878124][T15058] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 875.278477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.285976][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.039459][T15052] kexec: Could not allocate control_code_buffer [ 876.642663][ T55] Bluetooth: hci2: unexpected event 0x17 length: 123 > 6 [ 877.149837][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060176c00: rx timeout, send abort [ 877.165540][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0c5400: rx timeout, send abort [ 877.673808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0c5400: abort rx timeout. Force session deactivation [ 878.276689][T15097] FAULT_INJECTION: forcing a failure. [ 878.276689][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 878.313065][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.4.2114 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 878.313111][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.313130][T15097] Call Trace: [ 878.313141][T15097] [ 878.313153][T15097] dump_stack_lvl+0x16c/0x1f0 [ 878.313206][T15097] should_fail_ex+0x512/0x640 [ 878.313252][T15097] ? __kmalloc_noprof+0xbf/0x510 [ 878.313303][T15097] ? __register_sysctl_table+0xb3/0x1900 [ 878.313340][T15097] should_failslab+0xc2/0x120 [ 878.313381][T15097] __kmalloc_noprof+0xd2/0x510 [ 878.313425][T15097] __register_sysctl_table+0xb3/0x1900 [ 878.313462][T15097] ? is_module_address+0x5f/0xf0 [ 878.313512][T15097] ? __pfx___register_sysctl_table+0x10/0x10 [ 878.313548][T15097] ? is_module_address+0x69/0xf0 [ 878.313589][T15097] ? register_net_sysctl_sz+0x228/0x3e0 [ 878.313640][T15097] ? __asan_memcpy+0x3c/0x60 [ 878.313671][T15097] ipv4_sysctl_init_net+0xfe/0x350 [ 878.313722][T15097] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 878.313768][T15097] ops_init+0x1df/0x5f0 [ 878.313811][T15097] setup_net+0x21e/0x850 [ 878.313855][T15097] ? __pfx_setup_net+0x10/0x10 [ 878.313892][T15097] ? lockdep_init_map_type+0x5c/0x280 [ 878.313936][T15097] ? __pfx_down_read_killable+0x10/0x10 [ 878.313992][T15097] ? debug_mutex_init+0x37/0x70 [ 878.314027][T15097] copy_net_ns+0x2a6/0x5f0 [ 878.314074][T15097] create_new_namespaces+0x3ea/0xad0 [ 878.314120][T15097] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 878.314160][T15097] ksys_unshare+0x45b/0xa40 [ 878.314206][T15097] ? __pfx_ksys_unshare+0x10/0x10 [ 878.314248][T15097] ? xfd_validate_state+0x5d/0x180 [ 878.314312][T15097] ? rcu_is_watching+0x12/0xc0 [ 878.314352][T15097] __x64_sys_unshare+0x31/0x40 [ 878.314396][T15097] do_syscall_64+0xcd/0x230 [ 878.314447][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.314481][T15097] RIP: 0033:0x7f752658e969 [ 878.314509][T15097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.314542][T15097] RSP: 002b:00007f752732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 878.314575][T15097] RAX: ffffffffffffffda RBX: 00007f75267b5fa0 RCX: 00007f752658e969 [ 878.314596][T15097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 878.314616][T15097] RBP: 00007f7526610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 878.314636][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.314656][T15097] R13: 0000000000000000 R14: 00007f75267b5fa0 R15: 00007fffb7c32268 [ 878.314698][T15097] [ 880.482977][T15147] FAULT_INJECTION: forcing a failure. [ 880.482977][T15147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.547951][T15147] CPU: 0 UID: 0 PID: 15147 Comm: syz.1.2126 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 880.547993][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 880.548010][T15147] Call Trace: [ 880.548020][T15147] [ 880.548030][T15147] dump_stack_lvl+0x16c/0x1f0 [ 880.548096][T15147] should_fail_ex+0x512/0x640 [ 880.548145][T15147] _copy_to_user+0x32/0xd0 [ 880.548194][T15147] simple_read_from_buffer+0xcb/0x170 [ 880.548244][T15147] proc_fail_nth_read+0x197/0x270 [ 880.548288][T15147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.548333][T15147] ? rw_verify_area+0xcf/0x680 [ 880.548378][T15147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.548424][T15147] vfs_read+0x1de/0xc70 [ 880.548458][T15147] ? __pfx___mutex_lock+0x10/0x10 [ 880.548502][T15147] ? __pfx_vfs_read+0x10/0x10 [ 880.548541][T15147] ? __fget_files+0x20e/0x3c0 [ 880.548602][T15147] ksys_read+0x12a/0x240 [ 880.548631][T15147] ? __pfx_ksys_read+0x10/0x10 [ 880.548659][T15147] ? rcu_is_watching+0x12/0xc0 [ 880.548699][T15147] do_syscall_64+0xcd/0x230 [ 880.548748][T15147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.548780][T15147] RIP: 0033:0x7fe177b8d37c [ 880.548805][T15147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 880.548834][T15147] RSP: 002b:00007fe17894e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.548862][T15147] RAX: ffffffffffffffda RBX: 00007fe177db5fa0 RCX: 00007fe177b8d37c [ 880.548882][T15147] RDX: 000000000000000f RSI: 00007fe17894e0a0 RDI: 0000000000000004 [ 880.548900][T15147] RBP: 00007fe17894e090 R08: 0000000000000000 R09: 0000000000000000 [ 880.548919][T15147] R10: 000000000000074c R11: 0000000000000246 R12: 0000000000000001 [ 880.548938][T15147] R13: 0000000000000000 R14: 00007fe177db5fa0 R15: 00007ffc534eea18 [ 880.548979][T15147] [ 881.519179][T15161] nvme_fcloop: unknown parameter or missing value '7' [ 881.553554][T15163] bond0: option mode: unable to set because the bond device is up [ 881.608852][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 882.182742][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 883.620634][T15199] netlink: 194 bytes leftover after parsing attributes in process `syz.2.2144'. [ 885.437736][T15220] FAULT_INJECTION: forcing a failure. [ 885.437736][T15220] name failslab, interval 1, probability 0, space 0, times 0 [ 885.453194][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.3.2147 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 885.453242][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 885.453261][T15220] Call Trace: [ 885.453272][T15220] [ 885.453284][T15220] dump_stack_lvl+0x16c/0x1f0 [ 885.453337][T15220] should_fail_ex+0x512/0x640 [ 885.453382][T15220] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 885.453440][T15220] should_failslab+0xc2/0x120 [ 885.453480][T15220] __kmalloc_cache_noprof+0x6a/0x3e0 [ 885.453534][T15220] ? lockdep_init_map_type+0x5c/0x280 [ 885.453575][T15220] ? slip_open+0x846/0x1150 [ 885.453615][T15220] ? do_init_timer+0xc9/0x110 [ 885.453652][T15220] slip_open+0x846/0x1150 [ 885.453696][T15220] ? __pfx_n_tty_close+0x10/0x10 [ 885.453742][T15220] ? find_held_lock+0x2b/0x80 [ 885.453771][T15220] ? __pfx_slip_open+0x10/0x10 [ 885.453813][T15220] ? down_write+0x14d/0x200 [ 885.453866][T15220] ? __pfx_slip_open+0x10/0x10 [ 885.453916][T15220] tty_ldisc_open+0x9c/0x120 [ 885.453951][T15220] tty_set_ldisc+0x32b/0x780 [ 885.453991][T15220] tty_ioctl+0xc42/0x1610 [ 885.454030][T15220] ? __pfx_tty_ioctl+0x10/0x10 [ 885.454082][T15220] ? __sys_sendmsg+0x199/0x220 [ 885.454117][T15220] ? hook_file_ioctl_common+0x145/0x410 [ 885.454165][T15220] ? xfd_validate_state+0x5d/0x180 [ 885.454219][T15220] ? __pfx_tty_ioctl+0x10/0x10 [ 885.454264][T15220] __x64_sys_ioctl+0x190/0x200 [ 885.454314][T15220] do_syscall_64+0xcd/0x230 [ 885.454361][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.454389][T15220] RIP: 0033:0x7f9c12f8e969 [ 885.454411][T15220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.454439][T15220] RSP: 002b:00007f9c13e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.454464][T15220] RAX: ffffffffffffffda RBX: 00007f9c131b6080 RCX: 00007f9c12f8e969 [ 885.454482][T15220] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000001 [ 885.454498][T15220] RBP: 00007f9c13010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 885.454516][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.454532][T15220] R13: 0000000000000000 R14: 00007f9c131b6080 R15: 00007fffc30a9d08 [ 885.454567][T15220] [ 888.837990][T15247] FAULT_INJECTION: forcing a failure. [ 888.837990][T15247] name failslab, interval 1, probability 0, space 0, times 0 [ 888.882490][T15247] CPU: 0 UID: 0 PID: 15247 Comm: syz.2.2152 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 888.882540][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 888.882561][T15247] Call Trace: [ 888.882572][T15247] [ 888.882585][T15247] dump_stack_lvl+0x16c/0x1f0 [ 888.882640][T15247] should_fail_ex+0x512/0x640 [ 888.882688][T15247] ? fs_reclaim_acquire+0xae/0x150 [ 888.882743][T15247] ? tomoyo_encode2+0x100/0x3e0 [ 888.882787][T15247] should_failslab+0xc2/0x120 [ 888.882828][T15247] __kmalloc_noprof+0xd2/0x510 [ 888.882861][T15247] ? d_absolute_path+0x136/0x1a0 [ 888.882908][T15247] tomoyo_encode2+0x100/0x3e0 [ 888.882959][T15247] tomoyo_encode+0x29/0x50 [ 888.883001][T15247] tomoyo_realpath_from_path+0x18f/0x6e0 [ 888.883058][T15247] tomoyo_check_open_permission+0x2ab/0x3c0 [ 888.883101][T15247] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 888.883182][T15247] ? do_raw_spin_lock+0x12c/0x2b0 [ 888.883243][T15247] tomoyo_file_open+0x6b/0x90 [ 888.883298][T15247] security_file_open+0x84/0x1e0 [ 888.883351][T15247] do_dentry_open+0x596/0x1c10 [ 888.883405][T15247] vfs_open+0x82/0x3f0 [ 888.883454][T15247] path_openat+0x1e5e/0x2d40 [ 888.883503][T15247] ? __pfx_path_openat+0x10/0x10 [ 888.883547][T15247] do_filp_open+0x20b/0x470 [ 888.883580][T15247] ? __pfx_do_filp_open+0x10/0x10 [ 888.883641][T15247] ? alloc_fd+0x471/0x7d0 [ 888.883704][T15247] do_sys_openat2+0x11b/0x1d0 [ 888.883748][T15247] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.883813][T15247] __x64_sys_openat+0x174/0x210 [ 888.883859][T15247] ? __pfx___x64_sys_openat+0x10/0x10 [ 888.883906][T15247] ? rcu_is_watching+0x12/0xc0 [ 888.883945][T15247] do_syscall_64+0xcd/0x230 [ 888.883991][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.884021][T15247] RIP: 0033:0x7fb2ff98e969 [ 888.884045][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.884078][T15247] RSP: 002b:00007fb3008a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.884110][T15247] RAX: ffffffffffffffda RBX: 00007fb2ffbb5fa0 RCX: 00007fb2ff98e969 [ 888.884133][T15247] RDX: 0000000000941683 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 888.884155][T15247] RBP: 00007fb2ffa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 888.884175][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.884195][T15247] R13: 0000000000000000 R14: 00007fb2ffbb5fa0 R15: 00007ffe572d7a48 [ 888.884238][T15247] [ 888.884323][T15247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 889.166991][T15251] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2154'. [ 889.277939][T15251] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2154'. [ 889.354545][T15258] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2154'. [ 889.630321][T15263] ubi0: attaching mtd0 [ 889.655054][T15263] ubi0: scanning is finished [ 889.659890][T15263] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 889.927707][T15263] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 891.101476][ T30] audit: type=1800 audit(4294967448.959:12): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2159" name="members" dev="configfs" ino=48774 res=0 errno=0 [ 893.961564][T15299] openvswitch: netlink: Message has 4104 unknown bytes. [ 894.463237][T15308] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2169'. [ 894.504743][T15308] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2169'. [ 894.830978][T15312] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2170'. [ 894.901910][T15315] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2170'. [ 895.377321][T15323] ubi0: attaching mtd0 [ 895.396681][T15323] ubi0: scanning is finished [ 895.401935][T15323] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 896.025801][T15323] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 896.043984][T15325] ubi0: attaching mtd0 [ 896.053740][T15325] ubi0: scanning is finished [ 896.058401][T15325] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 896.374559][T15325] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 897.678211][T15346] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2178'. [ 897.766796][T15346] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2178'. [ 900.190894][T15376] random: crng reseeded on system resumption [ 900.336195][T15378] binder: 15373:15378 ioctl 40046210 0 returned -14 [ 903.574592][T15407] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2188'. [ 903.631133][T15407] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2188'. [ 904.549577][T15421] ubi0: attaching mtd0 [ 904.576389][T15421] ubi0: scanning is finished [ 904.581067][T15421] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 904.827407][T15425] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2191'. [ 904.931562][T15426] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2191'. [ 905.177090][T15421] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 905.813186][T15435] [ 907.253689][T15455] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2198'. [ 907.333420][T15455] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2198'. [ 908.508024][T15484] ubi0: attaching mtd0 [ 908.639957][T15484] ubi0: scanning is finished [ 908.645734][T15484] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 908.743313][T15478] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2203'. [ 908.932048][T15478] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2203'. [ 909.384607][T15484] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 910.058906][T15505] ubi0: attaching mtd0 [ 910.083725][T15505] ubi0: scanning is finished [ 910.088434][T15505] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 910.440615][T15505] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 911.536023][T15525] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2211'. [ 911.604179][T15525] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2211'. [ 914.649923][T15527] kexec: Could not allocate control_code_buffer [ 915.271373][T15567] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2224'. [ 915.325943][T15567] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2224'. [ 918.344080][T15598] random: crng reseeded on system resumption [ 919.129198][T15613] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2233'. [ 919.165542][T15613] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2233'. [ 921.067905][T15640] zswap: compressor not available [ 922.736938][T15669] netlink: zone id is out of range [ 922.779667][T15669] netlink: zone id is out of range [ 922.827584][T15669] netlink: zone id is out of range [ 922.832928][T15669] netlink: zone id is out of range [ 922.839105][T15669] netlink: zone id is out of range [ 922.844369][T15669] netlink: zone id is out of range [ 922.851301][T15669] netlink: zone id is out of range [ 922.857058][T15669] netlink: zone id is out of range [ 922.868708][T15669] netlink: zone id is out of range [ 922.874250][T15669] netlink: zone id is out of range [ 923.797325][T15689] ubi0: attaching mtd0 [ 923.802965][T15689] ubi0: scanning is finished [ 923.807733][T15689] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 924.054017][T15679] Invalid ELF header magic: != ELF [ 924.245460][T15689] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 927.224287][T15728] netlink: 'syz.1.2258': attribute type 21 has an invalid length. [ 927.249353][T15728] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2258'. [ 930.564385][T15761] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2268'. [ 930.608413][T15761] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2268'. syzkaller syzkaller login: [ 935.897376][T15829] ubi0: attaching mtd0 [ 935.970474][T15829] ubi0: scanning is finished [ 935.975391][T15829] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 936.682155][T15829] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 936.707069][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.714155][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.923675][T15840] ubi0: attaching mtd0 [ 936.951472][T15840] ubi0: scanning is finished [ 936.966502][T15840] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 937.204233][T15840] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 937.890658][T15855] ubi0: attaching mtd0 [ 937.927007][T15855] ubi0: scanning is finished [ 937.931693][T15855] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 938.246045][T15855] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 938.433249][T15853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 943.116430][T15913] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2306'. [ 943.150403][T15913] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2306'. [ 944.962644][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 944.976077][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 944.991785][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 945.001054][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 945.008887][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 945.105035][T12692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.369342][T12692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.483914][T15936] ubi0: attaching mtd0 [ 945.498862][T15936] ubi0: scanning is finished [ 945.504637][T15936] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 945.783270][T15937] delete_channel: no stack [ 945.946913][T15936] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 946.058731][T12692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.181681][T15945] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2314'. [ 946.195064][T15945] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2314'. [ 946.349803][T15943] FAULT_INJECTION: forcing a failure. [ 946.349803][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 946.416564][T12692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.432325][T15943] CPU: 1 UID: 0 PID: 15943 Comm: syz.2.2313 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 946.432373][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.432392][T15943] Call Trace: [ 946.432402][T15943] [ 946.432416][T15943] dump_stack_lvl+0x16c/0x1f0 [ 946.432468][T15943] should_fail_ex+0x512/0x640 [ 946.432514][T15943] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 946.432574][T15943] should_failslab+0xc2/0x120 [ 946.432616][T15943] __kmalloc_cache_noprof+0x6a/0x3e0 [ 946.432670][T15943] ? nfs_init_fs_context+0x4f/0x11e0 [ 946.432721][T15943] nfs_init_fs_context+0x4f/0x11e0 [ 946.432766][T15943] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 946.432813][T15943] alloc_fs_context+0x54a/0x9c0 [ 946.432853][T15943] __x64_sys_fsopen+0xeb/0x240 [ 946.432892][T15943] do_syscall_64+0xcd/0x230 [ 946.432944][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.432978][T15943] RIP: 0033:0x7fb2ff98e969 [ 946.433006][T15943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.433037][T15943] RSP: 002b:00007fb3008a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 946.433070][T15943] RAX: ffffffffffffffda RBX: 00007fb2ffbb5fa0 RCX: 00007fb2ff98e969 [ 946.433092][T15943] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 946.433111][T15943] RBP: 00007fb2ffa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 946.433131][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.433151][T15943] R13: 0000000000000000 R14: 00007fb2ffbb5fa0 R15: 00007ffe572d7a48 [ 946.433192][T15943] [ 947.106439][ T5870] Bluetooth: hci3: command tx timeout [ 947.145746][T15931] chnl_net:caif_netlink_parms(): no params data found [ 947.804632][T12692] bridge_slave_1: left allmulticast mode [ 947.810515][T12692] bridge_slave_1: left promiscuous mode [ 947.827995][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.922418][T15970] FAULT_INJECTION: forcing a failure. [ 947.922418][T15970] name failslab, interval 1, probability 0, space 0, times 0 [ 948.183526][T12692] bridge_slave_0: left allmulticast mode [ 948.189316][T12692] bridge_slave_0: left promiscuous mode [ 948.195900][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.220092][T15970] CPU: 1 UID: 0 PID: 15970 Comm: syz.4.2319 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 948.220126][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.220140][T15970] Call Trace: [ 948.220148][T15970] [ 948.220157][T15970] dump_stack_lvl+0x16c/0x1f0 [ 948.220196][T15970] should_fail_ex+0x512/0x640 [ 948.220228][T15970] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 948.220270][T15970] should_failslab+0xc2/0x120 [ 948.220299][T15970] __kmalloc_cache_noprof+0x6a/0x3e0 [ 948.220338][T15970] ? nfs_init_fs_context+0x4f/0x11e0 [ 948.220385][T15970] nfs_init_fs_context+0x4f/0x11e0 [ 948.220417][T15970] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 948.220451][T15970] alloc_fs_context+0x54a/0x9c0 [ 948.220480][T15970] __x64_sys_fsopen+0xeb/0x240 [ 948.220507][T15970] do_syscall_64+0xcd/0x230 [ 948.220544][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.220568][T15970] RIP: 0033:0x7f752658e969 [ 948.220586][T15970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.220610][T15970] RSP: 002b:00007f752732f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 948.220632][T15970] RAX: ffffffffffffffda RBX: 00007f75267b5fa0 RCX: 00007f752658e969 [ 948.220648][T15970] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 948.220662][T15970] RBP: 00007f7526610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 948.220676][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.220690][T15970] R13: 0000000000000000 R14: 00007f75267b5fa0 R15: 00007fffb7c32268 [ 948.220719][T15970] [ 948.586941][T15979] FAULT_INJECTION: forcing a failure. [ 948.586941][T15979] name failslab, interval 1, probability 0, space 0, times 0 [ 948.681285][T15979] CPU: 0 UID: 0 PID: 15979 Comm: syz.2.2321 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 948.681333][T15979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.681352][T15979] Call Trace: [ 948.681364][T15979] [ 948.681376][T15979] dump_stack_lvl+0x16c/0x1f0 [ 948.681430][T15979] should_fail_ex+0x512/0x640 [ 948.681476][T15979] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 948.681535][T15979] should_failslab+0xc2/0x120 [ 948.681577][T15979] __kmalloc_cache_noprof+0x6a/0x3e0 [ 948.681630][T15979] ? nfs_init_fs_context+0x4f/0x11e0 [ 948.681681][T15979] nfs_init_fs_context+0x4f/0x11e0 [ 948.681728][T15979] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 948.681775][T15979] alloc_fs_context+0x54a/0x9c0 [ 948.681816][T15979] __x64_sys_fsopen+0xeb/0x240 [ 948.681855][T15979] do_syscall_64+0xcd/0x230 [ 948.681906][T15979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.681939][T15979] RIP: 0033:0x7fb2ff98e969 [ 948.681965][T15979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.681998][T15979] RSP: 002b:00007fb3008a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 948.682031][T15979] RAX: ffffffffffffffda RBX: 00007fb2ffbb5fa0 RCX: 00007fb2ff98e969 [ 948.682052][T15979] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 948.682080][T15979] RBP: 00007fb2ffa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 948.682101][T15979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.682120][T15979] R13: 0000000000000000 R14: 00007fb2ffbb5fa0 R15: 00007ffe572d7a48 [ 948.682166][T15979] [ 949.192233][ T5870] Bluetooth: hci3: command tx timeout [ 949.457974][T15992] ubi0: attaching mtd0 [ 949.488815][T15992] ubi0: scanning is finished [ 949.494000][T15992] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 950.081268][T15992] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 951.276595][ T5870] Bluetooth: hci3: command tx timeout [ 952.291520][T12692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.335046][T12692] bond0 (unregistering): Released all slaves [ 952.486811][T15931] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.515097][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.598408][T15931] bridge_slave_0: entered allmulticast mode [ 952.749083][T15931] bridge_slave_0: entered promiscuous mode [ 952.817772][T15931] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.864912][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.902356][T15931] bridge_slave_1: entered allmulticast mode [ 952.910492][T15931] bridge_slave_1: entered promiscuous mode [ 953.038893][T12692] ovs_: left promiscuous mode [ 953.163817][T16022] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2331'. [ 953.215913][T16022] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2331'. [ 953.342351][ T5870] Bluetooth: hci3: command tx timeout [ 953.605059][T15931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.694128][T15931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.417040][T15931] team0: Port device team_slave_0 added [ 954.453166][T15931] team0: Port device team_slave_1 added [ 954.881664][T15931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.952575][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.978623][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.012453][T16037] [ 955.072265][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.387890][T12692] hsr_slave_0: left promiscuous mode [ 955.412613][T16051] ubi0: attaching mtd0 [ 955.464824][T16051] ubi0: scanning is finished [ 955.471545][T16051] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 955.491081][T12692] hsr_slave_1: left promiscuous mode [ 955.604669][T12692] veth1_macvtap: left promiscuous mode [ 955.610378][T12692] veth0_macvtap: left promiscuous mode [ 955.617047][T12692] veth1_vlan: left promiscuous mode [ 955.624198][T12692] veth0_vlan: left promiscuous mode [ 956.243717][T16051] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 958.307013][T12692] team0 (unregistering): Port device team_slave_1 removed [ 958.887023][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.894311][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.921074][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.099794][T15931] hsr_slave_0: entered promiscuous mode [ 959.107528][T15931] hsr_slave_1: entered promiscuous mode [ 959.114405][T15931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.123934][T15931] Cannot create hsr debugfs directory [ 959.819357][T16101] ubi0: attaching mtd0 [ 959.883056][T16101] ubi0: scanning is finished [ 959.897413][T16101] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 960.318163][T16101] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 961.156888][T16115] ubi0: attaching mtd0 [ 961.164543][T16115] ubi0: scanning is finished [ 961.169272][T16115] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 962.707122][T16115] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 963.037519][T15931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 963.179954][T15931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 963.191887][T15931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 963.207563][T15931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 963.502563][T15931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.637284][T15931] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.731031][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.738309][T12697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.850959][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.858267][T12697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.883174][T16129] [ 964.582778][T16152] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2350'. [ 964.647120][T16152] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2350'. [ 964.686643][T15931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.849921][T15931] veth0_vlan: entered promiscuous mode [ 964.905059][T15931] veth1_vlan: entered promiscuous mode [ 965.040850][T15931] veth0_macvtap: entered promiscuous mode [ 965.066019][T15931] veth1_macvtap: entered promiscuous mode [ 965.132727][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.167375][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.192280][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.224216][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.264513][T15931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.306719][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.372220][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.402483][T15931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.425339][T15931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.463969][T15931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.552780][T15931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.561594][T15931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.626835][T15931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.642345][T15931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.715694][T16171] ubi0: attaching mtd0 [ 965.763498][T16171] ubi0: scanning is finished [ 965.817128][T16171] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 966.094805][T16171] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 966.097752][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.139978][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.255381][ T7813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.288242][ T7813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.682478][T16192] [ 967.177954][T16191] FAULT_INJECTION: forcing a failure. [ 967.177954][T16191] name fail_futex, interval 1, probability 0, space 0, times 0 [ 967.232766][T16191] CPU: 0 UID: 0 PID: 16191 Comm: syz.2.2358 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 967.232814][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.232833][T16191] Call Trace: [ 967.232844][T16191] [ 967.232855][T16191] dump_stack_lvl+0x16c/0x1f0 [ 967.232908][T16191] should_fail_ex+0x512/0x640 [ 967.232959][T16191] get_futex_key+0x49e/0x1000 [ 967.232997][T16191] ? __pfx_get_futex_key+0x10/0x10 [ 967.233026][T16191] ? find_held_lock+0x2b/0x80 [ 967.233059][T16191] ? is_bpf_text_address+0x8a/0x1a0 [ 967.233097][T16191] ? bpf_ksym_find+0x124/0x1c0 [ 967.233156][T16191] futex_wait_setup+0x78/0x290 [ 967.233199][T16191] ? __kernel_text_address+0xd/0x40 [ 967.233251][T16191] ? arch_stack_walk+0xa6/0x100 [ 967.233292][T16191] __futex_wait+0x266/0x3c0 [ 967.233337][T16191] ? __pfx___futex_wait+0x10/0x10 [ 967.233396][T16191] ? __pfx_futex_wake_mark+0x10/0x10 [ 967.233453][T16191] ? kasan_save_stack+0x42/0x60 [ 967.233486][T16191] ? kasan_save_stack+0x33/0x60 [ 967.233517][T16191] ? kasan_save_track+0x14/0x30 [ 967.233547][T16191] ? kasan_save_free_info+0x3b/0x60 [ 967.233591][T16191] ? __kasan_slab_free+0x51/0x70 [ 967.233633][T16191] futex_wait+0xe8/0x380 [ 967.233672][T16191] ? __pfx_futex_wait+0x10/0x10 [ 967.233736][T16191] do_futex+0x229/0x350 [ 967.233769][T16191] ? __pfx_do_futex+0x10/0x10 [ 967.233811][T16191] __x64_sys_futex+0x1e0/0x4c0 [ 967.233850][T16191] ? __pfx___x64_sys_futex+0x10/0x10 [ 967.233887][T16191] ? rcu_is_watching+0x12/0xc0 [ 967.233928][T16191] do_syscall_64+0xcd/0x230 [ 967.233980][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.234015][T16191] RIP: 0033:0x7fb2ff98e969 [ 967.234042][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.234076][T16191] RSP: 002b:00007fb3008a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 967.234109][T16191] RAX: ffffffffffffffda RBX: 00007fb2ffbb5fa8 RCX: 00007fb2ff98e969 [ 967.234132][T16191] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2ffbb5fa8 [ 967.234152][T16191] RBP: 00007fb2ffbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 967.234172][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2ffbb5fac [ 967.234193][T16191] R13: 0000000000000000 R14: 00007ffe572d7960 R15: 00007ffe572d7a48 [ 967.234236][T16191] [ 968.079173][T16212] netlink: 91 bytes leftover after parsing attributes in process `syz.2.2368'. [ 968.289996][T16223] ubi0: attaching mtd0 [ 968.295904][T16223] ubi0: scanning is finished [ 968.300615][T16223] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 968.614389][T16223] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 969.471688][T16237] FAULT_INJECTION: forcing a failure. [ 969.471688][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 969.521025][T16237] CPU: 1 UID: 0 PID: 16237 Comm: syz.1.2364 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 969.521079][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 969.521099][T16237] Call Trace: [ 969.521109][T16237] [ 969.521121][T16237] dump_stack_lvl+0x16c/0x1f0 [ 969.521175][T16237] should_fail_ex+0x512/0x640 [ 969.521220][T16237] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 969.521276][T16237] should_failslab+0xc2/0x120 [ 969.521316][T16237] __kmalloc_cache_noprof+0x6a/0x3e0 [ 969.521371][T16237] ? nfs_init_fs_context+0x4f/0x11e0 [ 969.521420][T16237] nfs_init_fs_context+0x4f/0x11e0 [ 969.521465][T16237] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 969.521518][T16237] alloc_fs_context+0x54a/0x9c0 [ 969.521561][T16237] __x64_sys_fsopen+0xeb/0x240 [ 969.521602][T16237] do_syscall_64+0xcd/0x230 [ 969.521655][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.521689][T16237] RIP: 0033:0x7f425f58e969 [ 969.521715][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.521748][T16237] RSP: 002b:00007f4260325038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 969.521780][T16237] RAX: ffffffffffffffda RBX: 00007f425f7b5fa0 RCX: 00007f425f58e969 [ 969.521801][T16237] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 969.521819][T16237] RBP: 00007f425f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 969.521838][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.521857][T16237] R13: 0000000000000000 R14: 00007f425f7b5fa0 R15: 00007fffbe7f5f08 [ 969.521897][T16237] [ 969.687237][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.175822][T16244] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 970.249060][T16250] ubi0: attaching mtd0 [ 970.274928][T16250] ubi0: scanning is finished [ 970.287746][T16250] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 970.646963][T16250] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 972.803001][T16306] FAULT_INJECTION: forcing a failure. [ 972.803001][T16306] name failslab, interval 1, probability 0, space 0, times 0 [ 972.816111][T16306] CPU: 0 UID: 0 PID: 16306 Comm: syz.1.2376 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 972.816142][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.816156][T16306] Call Trace: [ 972.816164][T16306] [ 972.816173][T16306] dump_stack_lvl+0x16c/0x1f0 [ 972.816210][T16306] should_fail_ex+0x512/0x640 [ 972.816247][T16306] should_failslab+0xc2/0x120 [ 972.816275][T16306] __kmalloc_cache_noprof+0x6a/0x3e0 [ 972.816314][T16306] ? __alloc_skb+0x166/0x380 [ 972.816337][T16306] ? batadv_tp_start+0x274/0xfc0 [ 972.816368][T16306] batadv_tp_start+0x274/0xfc0 [ 972.816394][T16306] ? skb_put+0x138/0x1b0 [ 972.816426][T16306] ? __pfx_batadv_tp_start+0x10/0x10 [ 972.816449][T16306] ? __nlmsg_put+0x152/0x1c0 [ 972.816474][T16306] ? genlmsg_put+0x258/0x2d0 [ 972.816508][T16306] batadv_netlink_tp_meter_start+0x20d/0x4b0 [ 972.816536][T16306] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 972.816565][T16306] ? dev_get_by_index+0x186/0x380 [ 972.816589][T16306] ? batadv_meshif_is_valid+0xd/0x70 [ 972.816625][T16306] ? batadv_pre_doit+0x119/0x6a0 [ 972.816652][T16306] genl_family_rcv_msg_doit+0x206/0x2f0 [ 972.816687][T16306] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 972.816721][T16306] ? trace_cap_capable+0x18d/0x200 [ 972.816762][T16306] ? bpf_lsm_capable+0x9/0x10 [ 972.816794][T16306] ? security_capable+0x7e/0x260 [ 972.816825][T16306] ? ns_capable+0xd7/0x110 [ 972.816862][T16306] genl_rcv_msg+0x55c/0x800 [ 972.816911][T16306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.816960][T16306] ? __pfx___dev_queue_xmit+0x10/0x10 [ 972.817009][T16306] ? __pfx_batadv_pre_doit+0x10/0x10 [ 972.817040][T16306] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 972.817075][T16306] ? __pfx_batadv_post_doit+0x10/0x10 [ 972.817112][T16306] ? __lock_acquire+0xaa4/0x1ba0 [ 972.817162][T16306] netlink_rcv_skb+0x16a/0x440 [ 972.817199][T16306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.817246][T16306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.817307][T16306] ? __pfx_down_read+0x10/0x10 [ 972.817356][T16306] ? netlink_deliver_tap+0x1ae/0xd30 [ 972.817398][T16306] genl_rcv+0x28/0x40 [ 972.817438][T16306] netlink_unicast+0x53a/0x7f0 [ 972.817483][T16306] ? __pfx_netlink_unicast+0x10/0x10 [ 972.817519][T16306] ? __lock_acquire+0xaa4/0x1ba0 [ 972.817570][T16306] netlink_sendmsg+0x8d1/0xdd0 [ 972.817615][T16306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.817668][T16306] ____sys_sendmsg+0xa95/0xc70 [ 972.817714][T16306] ? copy_msghdr_from_user+0x10a/0x160 [ 972.817749][T16306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.817815][T16306] ___sys_sendmsg+0x134/0x1d0 [ 972.817854][T16306] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.817943][T16306] __sys_sendmsg+0x16d/0x220 [ 972.817983][T16306] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.818018][T16306] ? rcu_is_watching+0x12/0xc0 [ 972.818047][T16306] do_syscall_64+0xcd/0x230 [ 972.818083][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.818106][T16306] RIP: 0033:0x7f425f58e969 [ 972.818126][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.818148][T16306] RSP: 002b:00007f4260325038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.818169][T16306] RAX: ffffffffffffffda RBX: 00007f425f7b5fa0 RCX: 00007f425f58e969 [ 972.818185][T16306] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 972.818199][T16306] RBP: 00007f4260325090 R08: 0000000000000000 R09: 0000000000000000 [ 972.818213][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.818226][T16306] R13: 0000000000000000 R14: 00007f425f7b5fa0 R15: 00007fffbe7f5f08 [ 972.818255][T16306] [ 973.788864][T16310] netlink: 91 bytes leftover after parsing attributes in process `syz.1.2377'. [ 974.392683][T16320] [ 974.625085][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 974.708405][T16328] FAULT_INJECTION: forcing a failure. [ 974.708405][T16328] name fail_futex, interval 1, probability 0, space 0, times 0 [ 974.862663][T16328] CPU: 1 UID: 0 PID: 16328 Comm: syz.3.2381 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 974.862714][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.862734][T16328] Call Trace: [ 974.862746][T16328] [ 974.862759][T16328] dump_stack_lvl+0x16c/0x1f0 [ 974.862810][T16328] should_fail_ex+0x512/0x640 [ 974.862864][T16328] get_futex_key+0x49e/0x1000 [ 974.862903][T16328] ? __pfx_get_futex_key+0x10/0x10 [ 974.862932][T16328] ? find_held_lock+0x2b/0x80 [ 974.862965][T16328] ? is_bpf_text_address+0x8a/0x1a0 [ 974.863006][T16328] ? bpf_ksym_find+0x124/0x1c0 [ 974.863072][T16328] futex_wait_setup+0x78/0x290 [ 974.863115][T16328] ? __kernel_text_address+0xd/0x40 [ 974.863168][T16328] ? arch_stack_walk+0xa6/0x100 [ 974.863212][T16328] __futex_wait+0x266/0x3c0 [ 974.863257][T16328] ? __pfx___futex_wait+0x10/0x10 [ 974.863308][T16328] ? __pfx_futex_wake_mark+0x10/0x10 [ 974.863357][T16328] ? kasan_save_stack+0x42/0x60 [ 974.863395][T16328] ? kasan_save_stack+0x33/0x60 [ 974.863433][T16328] ? kasan_save_track+0x14/0x30 [ 974.863466][T16328] ? kasan_save_free_info+0x3b/0x60 [ 974.863507][T16328] ? __kasan_slab_free+0x51/0x70 [ 974.863541][T16328] futex_wait+0xe8/0x380 [ 974.863576][T16328] ? __pfx_futex_wait+0x10/0x10 [ 974.863630][T16328] do_futex+0x229/0x350 [ 974.863666][T16328] ? __pfx_do_futex+0x10/0x10 [ 974.863703][T16328] __x64_sys_futex+0x1e0/0x4c0 [ 974.863737][T16328] ? __pfx___x64_sys_futex+0x10/0x10 [ 974.863768][T16328] ? rcu_is_watching+0x12/0xc0 [ 974.863803][T16328] do_syscall_64+0xcd/0x230 [ 974.863843][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.863870][T16328] RIP: 0033:0x7f9c12f8e969 [ 974.863892][T16328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.863918][T16328] RSP: 002b:00007f9c13e640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 974.863943][T16328] RAX: ffffffffffffffda RBX: 00007f9c131b5fa8 RCX: 00007f9c12f8e969 [ 974.863961][T16328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c131b5fa8 [ 974.863977][T16328] RBP: 00007f9c131b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 974.863993][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c131b5fac [ 974.864009][T16328] R13: 0000000000000000 R14: 00007fffc30a9c20 R15: 00007fffc30a9d08 [ 974.864047][T16328] [ 975.859416][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2385'. [ 975.891614][T16349] veth0_macvtap: left promiscuous mode [ 975.907682][T16349] macvtap0: entered promiscuous mode [ 975.933074][T16349] macvtap0: entered allmulticast mode [ 976.429490][T16363] [ 977.249271][T16372] netlink: 91 bytes leftover after parsing attributes in process `syz.3.2393'. [ 979.393887][T16405] block nbd1: Unsupported socket: shutdown callout must be supported. [ 979.422781][T16405] FAULT_INJECTION: forcing a failure. [ 979.422781][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 979.442305][T16405] CPU: 1 UID: 0 PID: 16405 Comm: syz.3.2403 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 979.442348][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.442374][T16405] Call Trace: [ 979.442384][T16405] [ 979.442396][T16405] dump_stack_lvl+0x16c/0x1f0 [ 979.442447][T16405] should_fail_ex+0x512/0x640 [ 979.442489][T16405] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 979.442532][T16405] should_failslab+0xc2/0x120 [ 979.442572][T16405] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 979.442609][T16405] ? __alloc_skb+0x2b2/0x380 [ 979.442650][T16405] __alloc_skb+0x2b2/0x380 [ 979.442684][T16405] ? __pfx___alloc_skb+0x10/0x10 [ 979.442725][T16405] ? netlink_has_listeners+0x20f/0x430 [ 979.442770][T16405] alloc_uevent_skb+0x7d/0x210 [ 979.442805][T16405] kobject_uevent_env+0xca4/0x1870 [ 979.442843][T16405] ? nbd_config_put+0xe3/0x750 [ 979.442883][T16405] nbd_config_put+0x4fc/0x750 [ 979.442924][T16405] nbd_genl_connect+0x12df/0x1c20 [ 979.442966][T16405] ? __pfx_nbd_genl_connect+0x10/0x10 [ 979.443010][T16405] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 979.443056][T16405] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 979.443114][T16405] genl_family_rcv_msg_doit+0x206/0x2f0 [ 979.443158][T16405] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 979.443196][T16405] ? genl_get_cmd+0x194/0x580 [ 979.443240][T16405] ? __local_bh_enable_ip+0xa4/0x120 [ 979.443269][T16405] ? __dev_queue_xmit+0x896/0x43e0 [ 979.443308][T16405] ? __radix_tree_lookup+0x21f/0x2c0 [ 979.443346][T16405] genl_rcv_msg+0x55c/0x800 [ 979.443393][T16405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 979.443428][T16405] ? __pfx___dev_queue_xmit+0x10/0x10 [ 979.443469][T16405] ? __pfx_nbd_genl_connect+0x10/0x10 [ 979.443500][T16405] ? __lock_acquire+0xaa4/0x1ba0 [ 979.443541][T16405] netlink_rcv_skb+0x16a/0x440 [ 979.443573][T16405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 979.443612][T16405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 979.443663][T16405] ? __pfx_down_read+0x10/0x10 [ 979.443704][T16405] ? netlink_deliver_tap+0x1ae/0xd30 [ 979.443739][T16405] genl_rcv+0x28/0x40 [ 979.443771][T16405] netlink_unicast+0x53a/0x7f0 [ 979.443807][T16405] ? __pfx_netlink_unicast+0x10/0x10 [ 979.443837][T16405] ? __lock_acquire+0xaa4/0x1ba0 [ 979.443879][T16405] netlink_sendmsg+0x8d1/0xdd0 [ 979.443917][T16405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.443963][T16405] ____sys_sendmsg+0xa95/0xc70 [ 979.444002][T16405] ? copy_msghdr_from_user+0x10a/0x160 [ 979.444030][T16405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 979.444084][T16405] ___sys_sendmsg+0x134/0x1d0 [ 979.444115][T16405] ? __pfx____sys_sendmsg+0x10/0x10 [ 979.444175][T16405] ? __pfx_vfs_write+0x10/0x10 [ 979.444201][T16405] ? do_sys_openat2+0x157/0x1d0 [ 979.444239][T16405] __sys_sendmsg+0x16d/0x220 [ 979.444269][T16405] ? __pfx___sys_sendmsg+0x10/0x10 [ 979.444309][T16405] ? rcu_is_watching+0x12/0xc0 [ 979.444342][T16405] do_syscall_64+0xcd/0x230 [ 979.444391][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.444417][T16405] RIP: 0033:0x7f9c12f8e969 [ 979.444439][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.444463][T16405] RSP: 002b:00007f9c13e64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.444487][T16405] RAX: ffffffffffffffda RBX: 00007f9c131b5fa0 RCX: 00007f9c12f8e969 [ 979.444504][T16405] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000000 [ 979.444520][T16405] RBP: 00007f9c13e64090 R08: 0000000000000000 R09: 0000000000000000 [ 979.444535][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 979.444549][T16405] R13: 0000000000000000 R14: 00007f9c131b5fa0 R15: 00007fffc30a9d08 [ 979.444583][T16405] [ 980.273219][T16410] [ 981.661304][T16421] Invalid ELF header magic: != ELF [ 981.733891][T16436] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2411'. [ 981.749952][T16436] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2411'. [ 981.958547][T16423] could not allocate digest TFM handle [ 982.043214][T16422] could not allocate digest TFM handle [ 982.615824][T16444] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 982.701116][T16444] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 982.752553][T16444] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 982.760218][T16444] page_type: f8(unknown) [ 982.869177][T16444] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 982.907522][T16458] ubi0: attaching mtd0 [ 982.924707][T16458] ubi0: scanning is finished [ 982.942690][T16458] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 982.968597][T16444] raw: ffff888078006000 0000000000000000 00000001f8000000 0000000000000000 [ 983.050071][T16444] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 983.175675][T16444] head: ffff888078006000 0000000000000000 00000001f8000000 0000000000000000 [ 983.208210][T16458] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 983.294823][T16444] head: 00fff00000000004 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 983.360413][T16444] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 983.488626][T16444] page dumped because: unmovable page [ 983.549580][T16444] page_owner tracks the page as allocated [ 983.564905][T16444] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40820(GFP_ATOMIC|__GFP_COMP), pid 10917, tgid 10917 (syz-executor), ts 621578156267, free_ts 618335356160 [ 983.681734][T16444] post_alloc_hook+0x181/0x1b0 [ 983.700575][T16444] get_page_from_freelist+0x135c/0x3920 [ 983.721318][T16444] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 983.745460][T16444] __alloc_pages_noprof+0xb/0x1b0 [ 983.774213][T16444] ___kmalloc_large_node+0x82/0x1e0 [ 983.842295][T16444] __kmalloc_large_node_noprof+0x1c/0x70 [ 983.906137][T16444] __kmalloc_noprof.cold+0xc/0x61 [ 983.911294][T16444] batadv_hash_new+0xb2/0x2e0 [ 983.935802][T16444] batadv_dat_init+0x65/0x310 [ 984.142244][T16444] batadv_mesh_init+0x543/0x9a0 [ 984.178832][T16444] batadv_meshif_init_late+0xbd4/0xf30 [ 984.199169][T16444] register_netdevice+0x650/0x2270 [ 984.212253][T16444] batadv_meshif_newlink+0x8f/0xc0 [ 984.217505][T16444] rtnl_newlink+0xc42/0x2000 [ 984.242316][T16444] rtnetlink_rcv_msg+0x95b/0xe90 [ 984.247546][T16444] netlink_rcv_skb+0x16a/0x440 [ 984.257713][T16444] page last free pid 8609 tgid 8609 stack trace: [ 984.277991][T16444] __free_frozen_pages+0x69d/0xff0 [ 984.288120][T16444] vfree+0x176/0x960 [ 984.310240][T16444] kcov_close+0x34/0x60 [ 984.314608][T16444] __fput+0x3ff/0xb70 [ 984.329319][T16444] task_work_run+0x14d/0x240 [ 984.340320][T16444] do_exit+0xafb/0x2c30 [ 984.354846][T16444] do_group_exit+0xd3/0x2a0 [ 984.363716][T16444] __x64_sys_exit_group+0x3e/0x50 [ 984.368863][T16444] x64_sys_call+0x1530/0x1730 [ 984.407629][T16444] do_syscall_64+0xcd/0x230 [ 984.413465][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.078128][T16501] [ 987.815185][T16523] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 987.932356][T16523] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 988.020986][T16523] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 988.111209][T16523] page_type: f8(unknown) [ 988.245866][T16523] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 988.270097][T16523] raw: ffff888078006000 0000000000000000 00000001f8000000 0000000000000000 [ 988.372304][T16523] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 988.413022][T16523] head: ffff888078006000 0000000000000000 00000001f8000000 0000000000000000 [ 988.451503][T16523] head: 00fff00000000004 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 988.472305][T16523] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 988.481077][T16523] page dumped because: unmovable page [ 988.522271][T16523] page_owner tracks the page as allocated [ 988.528538][T16523] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40820(GFP_ATOMIC|__GFP_COMP), pid 10917, tgid 10917 (syz-executor), ts 621578156267, free_ts 618335356160 [ 988.622876][T16523] post_alloc_hook+0x181/0x1b0 [ 988.628560][T16523] get_page_from_freelist+0x135c/0x3920 [ 988.635709][T16523] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 988.641785][T16523] __alloc_pages_noprof+0xb/0x1b0 [ 988.647146][T16523] ___kmalloc_large_node+0x82/0x1e0 [ 988.652676][T16523] __kmalloc_large_node_noprof+0x1c/0x70 [ 988.658485][T16523] __kmalloc_noprof.cold+0xc/0x61 [ 988.663776][T16523] batadv_hash_new+0xb2/0x2e0 [ 988.668636][T16523] batadv_dat_init+0x65/0x310 [ 988.673556][T16523] batadv_mesh_init+0x543/0x9a0 [ 988.678572][T16523] batadv_meshif_init_late+0xbd4/0xf30 [ 988.684406][T16523] register_netdevice+0x650/0x2270 [ 988.689709][T16523] batadv_meshif_newlink+0x8f/0xc0 [ 988.695031][T16523] rtnl_newlink+0xc42/0x2000 [ 988.699788][T16523] rtnetlink_rcv_msg+0x95b/0xe90 [ 988.705863][T16523] netlink_rcv_skb+0x16a/0x440 [ 988.710796][T16523] page last free pid 8609 tgid 8609 stack trace: [ 988.717450][T16523] __free_frozen_pages+0x69d/0xff0 [ 988.722776][T16523] vfree+0x176/0x960 [ 988.726835][T16523] kcov_close+0x34/0x60 [ 988.731186][T16523] __fput+0x3ff/0xb70 [ 988.735392][T16523] task_work_run+0x14d/0x240 [ 988.748081][T16523] do_exit+0xafb/0x2c30 [ 988.752479][T16523] do_group_exit+0xd3/0x2a0 [ 988.757082][T16523] __x64_sys_exit_group+0x3e/0x50 [ 988.762364][T16523] x64_sys_call+0x1530/0x1730 [ 988.767140][T16523] do_syscall_64+0xcd/0x230 [ 988.771740][T16523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.386450][T16552] FAULT_INJECTION: forcing a failure. [ 989.386450][T16552] name failslab, interval 1, probability 0, space 0, times 0 [ 989.434274][T16552] CPU: 1 UID: 0 PID: 16552 Comm: syz.1.2439 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 989.434317][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.434336][T16552] Call Trace: [ 989.434346][T16552] [ 989.434358][T16552] dump_stack_lvl+0x16c/0x1f0 [ 989.434406][T16552] should_fail_ex+0x512/0x640 [ 989.434450][T16552] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 989.434507][T16552] should_failslab+0xc2/0x120 [ 989.434546][T16552] __kmalloc_cache_noprof+0x6a/0x3e0 [ 989.434597][T16552] ? open_substream+0xec/0x9b0 [ 989.434650][T16552] open_substream+0xec/0x9b0 [ 989.434693][T16552] ? lockdep_hardirqs_on+0x7c/0x110 [ 989.434749][T16552] rawmidi_open_priv+0x4db/0x6e0 [ 989.434786][T16552] snd_rawmidi_open+0x4cc/0xbf0 [ 989.434824][T16552] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 989.434857][T16552] ? __pfx_default_wake_function+0x10/0x10 [ 989.434894][T16552] ? kobject_get_unless_zero+0x156/0x1e0 [ 989.434948][T16552] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 989.434979][T16552] snd_open+0x1fe/0x450 [ 989.435020][T16552] ? __pfx_snd_open+0x10/0x10 [ 989.435059][T16552] chrdev_open+0x231/0x6a0 [ 989.435091][T16552] ? __pfx_apparmor_file_open+0x10/0x10 [ 989.435131][T16552] ? __pfx_chrdev_open+0x10/0x10 [ 989.435166][T16552] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 989.435223][T16552] do_dentry_open+0x741/0x1c10 [ 989.435256][T16552] ? __pfx_chrdev_open+0x10/0x10 [ 989.435297][T16552] vfs_open+0x82/0x3f0 [ 989.435343][T16552] path_openat+0x1e5e/0x2d40 [ 989.435390][T16552] ? __pfx_path_openat+0x10/0x10 [ 989.435432][T16552] do_filp_open+0x20b/0x470 [ 989.435462][T16552] ? __pfx_do_filp_open+0x10/0x10 [ 989.435524][T16552] ? alloc_fd+0x471/0x7d0 [ 989.435585][T16552] do_sys_openat2+0x11b/0x1d0 [ 989.435626][T16552] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.435672][T16552] ? __fget_files+0x20e/0x3c0 [ 989.435727][T16552] __x64_sys_openat+0x174/0x210 [ 989.435782][T16552] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.435824][T16552] ? ksys_write+0x1b9/0x240 [ 989.435853][T16552] ? rcu_is_watching+0x12/0xc0 [ 989.435895][T16552] do_syscall_64+0xcd/0x230 [ 989.435943][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.435975][T16552] RIP: 0033:0x7f425f58e969 [ 989.436000][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.436030][T16552] RSP: 002b:00007f4260325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.436061][T16552] RAX: ffffffffffffffda RBX: 00007f425f7b5fa0 RCX: 00007f425f58e969 [ 989.436083][T16552] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 989.436103][T16552] RBP: 00007f4260325090 R08: 0000000000000000 R09: 0000000000000000 [ 989.436122][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.436139][T16552] R13: 0000000000000000 R14: 00007f425f7b5fa0 R15: 00007fffbe7f5f08 [ 989.436181][T16552] [ 991.622244][ T30] audit: type=1806 audit(4294967549.479:13): xattr="" res=-22 [ 991.648006][ T30] audit: type=1806 audit(4294967549.509:14): xattr="" res=-22 [ 992.027652][T16593] ubi0: attaching mtd0 [ 992.035460][T16593] ubi0: scanning is finished [ 992.040218][T16593] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 992.308617][T16593] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 993.955487][T16619] [ 997.094209][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2464'. [ 998.160019][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.166515][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.321068][T16703] ubi0: attaching mtd0 [ 1003.331850][T16703] ubi0: scanning is finished [ 1003.364742][T16703] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1003.849761][T16709] [ 1004.306317][T16703] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1005.166189][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.187990][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.202259][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.216441][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.226923][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.321194][T16727] ubi0: attaching mtd0 [ 1005.378702][T16727] ubi0: scanning is finished [ 1005.384174][T16727] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1005.432797][ T7813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.462904][T16726] FAULT_INJECTION: forcing a failure. [ 1005.462904][T16726] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.516748][T16726] CPU: 1 UID: 0 PID: 16726 Comm: syz.4.2493 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1005.516782][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.516796][T16726] Call Trace: [ 1005.516803][T16726] [ 1005.516812][T16726] dump_stack_lvl+0x16c/0x1f0 [ 1005.516849][T16726] should_fail_ex+0x512/0x640 [ 1005.516894][T16726] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1005.516936][T16726] should_failslab+0xc2/0x120 [ 1005.516964][T16726] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1005.517003][T16726] ? nfs_alloc_fhandle+0x3b/0x90 [ 1005.517037][T16726] nfs_alloc_fhandle+0x3b/0x90 [ 1005.517067][T16726] nfs_init_fs_context+0x65/0x11e0 [ 1005.517099][T16726] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 1005.517131][T16726] alloc_fs_context+0x54a/0x9c0 [ 1005.517159][T16726] __x64_sys_fsopen+0xeb/0x240 [ 1005.517187][T16726] do_syscall_64+0xcd/0x230 [ 1005.517222][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.517246][T16726] RIP: 0033:0x7f752658e969 [ 1005.517265][T16726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.517288][T16726] RSP: 002b:00007f752732f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1005.517309][T16726] RAX: ffffffffffffffda RBX: 00007f75267b5fa0 RCX: 00007f752658e969 [ 1005.517331][T16726] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1005.517344][T16726] RBP: 00007f7526610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1005.517358][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.517371][T16726] R13: 0000000000000000 R14: 00007f75267b5fa0 R15: 00007fffb7c32268 [ 1005.517399][T16726] [ 1006.048445][T16727] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1006.422008][ T7813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.751324][ T7813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.037369][ T7813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.272334][ T55] Bluetooth: hci2: command tx timeout [ 1007.281326][T16722] chnl_net:caif_netlink_parms(): no params data found [ 1008.214201][ T7813] bridge_slave_1: left allmulticast mode [ 1008.219907][ T7813] bridge_slave_1: left promiscuous mode [ 1008.261196][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.318105][ T7813] bridge_slave_0: left allmulticast mode [ 1008.362812][ T7813] bridge_slave_0: left promiscuous mode [ 1008.375950][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.320319][T16775] ubi0: attaching mtd0 [ 1009.343318][ T55] Bluetooth: hci2: command tx timeout [ 1009.374062][T16775] ubi0: scanning is finished [ 1009.378812][T16775] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1009.667077][T16775] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1009.796596][ T7813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.875912][ T7813] bond0 (unregistering): Released all slaves [ 1010.326488][T16778] [ 1010.464371][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.619935][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.637486][T16722] bridge_slave_0: entered allmulticast mode [ 1010.657289][T16722] bridge_slave_0: entered promiscuous mode [ 1010.707686][ T7813] tipc: Left network mode [ 1010.710977][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.744859][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.752095][T16722] bridge_slave_1: entered allmulticast mode [ 1010.789206][T16722] bridge_slave_1: entered promiscuous mode [ 1011.422368][ T55] Bluetooth: hci2: command tx timeout [ 1011.456487][T16794] [ 1011.506755][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.796775][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.053206][T16722] team0: Port device team_slave_0 added [ 1012.242980][T16722] team0: Port device team_slave_1 added [ 1012.467666][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.486792][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.567556][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.712741][ T7813] hsr_slave_0: left promiscuous mode [ 1012.718331][T16812] FAULT_INJECTION: forcing a failure. [ 1012.718331][T16812] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.777099][ T7813] hsr_slave_1: left promiscuous mode [ 1012.783420][T16812] CPU: 1 UID: 0 PID: 16812 Comm: syz.1.2504 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1012.783468][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.783488][T16812] Call Trace: [ 1012.783499][T16812] [ 1012.783512][T16812] dump_stack_lvl+0x16c/0x1f0 [ 1012.783564][T16812] should_fail_ex+0x512/0x640 [ 1012.783611][T16812] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1012.783671][T16812] should_failslab+0xc2/0x120 [ 1012.783712][T16812] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1012.783769][T16812] ? nfs_alloc_fhandle+0x3b/0x90 [ 1012.783817][T16812] nfs_alloc_fhandle+0x3b/0x90 [ 1012.783860][T16812] nfs_init_fs_context+0x65/0x11e0 [ 1012.783905][T16812] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 1012.783953][T16812] alloc_fs_context+0x54a/0x9c0 [ 1012.783992][T16812] __x64_sys_fsopen+0xeb/0x240 [ 1012.784029][T16812] do_syscall_64+0xcd/0x230 [ 1012.784077][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.784107][T16812] RIP: 0033:0x7f425f58e969 [ 1012.784131][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.784165][T16812] RSP: 002b:00007f4260325038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1012.784210][T16812] RAX: ffffffffffffffda RBX: 00007f425f7b5fa0 RCX: 00007f425f58e969 [ 1012.784231][T16812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1012.784250][T16812] RBP: 00007f425f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1012.784270][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.784290][T16812] R13: 0000000000000000 R14: 00007f425f7b5fa0 R15: 00007fffbe7f5f08 [ 1012.784338][T16812] [ 1013.257528][ T7813] veth0_macvtap: left promiscuous mode [ 1013.276165][ T7813] veth1_vlan: left promiscuous mode [ 1013.308446][ T7813] veth0_vlan: left promiscuous mode [ 1013.504996][ T55] Bluetooth: hci2: command tx timeout [ 1014.934954][ T7813] team0 (unregistering): Port device team_slave_1 removed [ 1014.996650][ T7813] team0 (unregistering): Port device team_slave_0 removed [ 1015.650163][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.657360][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.686498][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.877401][T16722] hsr_slave_0: entered promiscuous mode [ 1015.896506][T16722] hsr_slave_1: entered promiscuous mode [ 1015.917965][T16722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.941759][T16722] Cannot create hsr debugfs directory [ 1016.559147][T16827] [ 1018.199146][T16722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1018.254053][T16722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1018.308784][T16722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1018.368261][T16722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.583300][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2510'. [ 1018.686269][T16722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.745727][T16722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.807822][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.815052][T12697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.944824][T12689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.952004][T12689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.308907][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.689778][T16722] veth0_vlan: entered promiscuous mode [ 1020.721784][T16722] veth1_vlan: entered promiscuous mode [ 1020.836109][T16722] veth0_macvtap: entered promiscuous mode [ 1020.897133][T16722] veth1_macvtap: entered promiscuous mode [ 1021.139783][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.171393][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.193373][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.215597][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.242597][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.264905][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.302711][T16911] ubi0: attaching mtd0 [ 1021.324159][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.347714][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.360511][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.376598][T16911] ubi0: scanning is finished [ 1021.381488][T16911] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1021.390527][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.421772][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.460404][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.542374][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.555485][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.609627][T16722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.677554][T16722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.710626][T16722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.732549][T16722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.883649][T16911] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1022.064578][T16922] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1022.130047][ T7812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.170490][ T7812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.264291][ T7812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.303898][ T7812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.601605][T16938] ubi0: attaching mtd0 [ 1022.607343][T16938] ubi0: scanning is finished [ 1022.611987][T16938] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1023.027350][T16938] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1023.041985][T16941] ubi0: attaching mtd0 [ 1023.083453][T16941] ubi0: scanning is finished [ 1023.088245][T16941] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1023.581763][T16941] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1025.688290][T16989] ubi0: attaching mtd0 [ 1025.714433][T16991] [ 1025.776294][T16989] ubi0: scanning is finished [ 1025.783620][T16989] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1025.831776][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1025.856174][T16995] FAULT_INJECTION: forcing a failure. [ 1025.856174][T16995] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.009768][T16995] CPU: 1 UID: 0 PID: 16995 Comm: syz.2.2533 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1026.009813][T16995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1026.009833][T16995] Call Trace: [ 1026.009843][T16995] [ 1026.009855][T16995] dump_stack_lvl+0x16c/0x1f0 [ 1026.009899][T16995] should_fail_ex+0x512/0x640 [ 1026.009946][T16995] should_failslab+0xc2/0x120 [ 1026.009986][T16995] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1026.010024][T16995] ? skb_clone+0x190/0x3f0 [ 1026.010066][T16995] skb_clone+0x190/0x3f0 [ 1026.010104][T16995] netlink_deliver_tap+0xabd/0xd30 [ 1026.010152][T16995] netlink_unicast+0x6b2/0x7f0 [ 1026.010203][T16995] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.010247][T16995] netlink_ack+0x696/0xb80 [ 1026.010284][T16995] netlink_rcv_skb+0x347/0x440 [ 1026.010312][T16995] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1026.010347][T16995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1026.010375][T16995] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1026.010413][T16995] ? bpf_lsm_capable+0x9/0x10 [ 1026.010438][T16995] ? security_capable+0x7e/0x260 [ 1026.010461][T16995] ? ns_capable+0xd7/0x110 [ 1026.010488][T16995] nfnetlink_rcv+0x1b3/0x430 [ 1026.010518][T16995] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1026.010547][T16995] ? netlink_deliver_tap+0x1ae/0xd30 [ 1026.010578][T16995] netlink_unicast+0x53a/0x7f0 [ 1026.010609][T16995] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.010634][T16995] ? __lock_acquire+0xaa4/0x1ba0 [ 1026.010670][T16995] netlink_sendmsg+0x8d1/0xdd0 [ 1026.010702][T16995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.010740][T16995] ____sys_sendmsg+0xa95/0xc70 [ 1026.010773][T16995] ? copy_msghdr_from_user+0x10a/0x160 [ 1026.010797][T16995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.010841][T16995] ___sys_sendmsg+0x134/0x1d0 [ 1026.010867][T16995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.010927][T16995] __sys_sendmsg+0x16d/0x220 [ 1026.010952][T16995] ? __pfx___sys_sendmsg+0x10/0x10 [ 1026.010986][T16995] ? rcu_is_watching+0x12/0xc0 [ 1026.011014][T16995] do_syscall_64+0xcd/0x230 [ 1026.011048][T16995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.011075][T16995] RIP: 0033:0x7f90d658e969 [ 1026.011100][T16995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.011131][T16995] RSP: 002b:00007f90d7487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.011161][T16995] RAX: ffffffffffffffda RBX: 00007f90d67b5fa0 RCX: 00007f90d658e969 [ 1026.011187][T16995] RDX: 0000000000000810 RSI: 0000200000000180 RDI: 0000000000000002 [ 1026.011206][T16995] RBP: 00007f90d7487090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.011225][T16995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.011244][T16995] R13: 0000000000000000 R14: 00007f90d67b5fa0 R15: 00007ffc341d7938 [ 1026.011273][T16995] [ 1026.337143][T16989] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1026.347749][T16997] ubi0: attaching mtd0 [ 1026.353356][T16997] ubi0: scanning is finished [ 1026.357994][T16997] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1027.004053][T16997] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1027.215652][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1027.547916][T17013] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1029.673342][T17044] ubi0: attaching mtd0 [ 1029.690227][T17044] ubi0: scanning is finished [ 1029.698601][T17044] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1030.353009][T17044] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1032.722060][T17063] [ 1032.861150][T17069] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2549'. [ 1032.923760][T17069] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2549'. [ 1036.353226][T17094] ubi0: attaching mtd0 [ 1036.358698][T17094] ubi0: scanning is finished [ 1036.493623][T17094] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1037.494561][T17094] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1038.966281][T17108] ubi0: attaching mtd0 [ 1038.971777][T17108] ubi0: scanning is finished [ 1039.152385][T17108] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1040.154241][T17108] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1040.398079][T17118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1040.412231][T17118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.420703][T17118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.603497][T17118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.689886][T17118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.465635][T17117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.744430][T17128] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1043.654326][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1043.673487][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1043.685331][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1043.733745][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1043.759971][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1045.822292][ T5870] Bluetooth: hci4: command tx timeout [ 1046.256208][T17134] chnl_net:caif_netlink_parms(): no params data found [ 1047.109212][ T7812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.587538][ T7812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.812749][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.819956][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.902381][ T5870] Bluetooth: hci4: command tx timeout [ 1047.989780][T17162] ubi0: attaching mtd0 [ 1048.004089][T17162] ubi0: scanning is finished [ 1048.061817][T17162] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1048.080553][T17134] bridge_slave_0: entered allmulticast mode [ 1048.090010][T17134] bridge_slave_0: entered promiscuous mode [ 1048.305566][ T7812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.374340][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.381625][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.509290][T17134] bridge_slave_1: entered allmulticast mode [ 1048.567613][T17134] bridge_slave_1: entered promiscuous mode [ 1048.675000][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.691830][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.953027][T17162] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1049.384811][ T7812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.710609][T17134] team0: Port device team_slave_0 added [ 1049.827975][T17134] team0: Port device team_slave_1 added [ 1049.984341][ T5870] Bluetooth: hci4: command tx timeout [ 1050.264794][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.284502][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.360827][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.449978][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.464667][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.491584][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.502447][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.511169][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.515060][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.539653][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.564742][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.904224][ T7812] bridge_slave_1: left allmulticast mode [ 1050.952640][ T7812] bridge_slave_1: left promiscuous mode [ 1050.958606][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.009856][ T7812] bridge_slave_0: left allmulticast mode [ 1051.019430][ T7812] bridge_slave_0: left promiscuous mode [ 1051.053158][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.065340][ T5870] Bluetooth: hci4: command tx timeout [ 1052.622381][ T5870] Bluetooth: hci2: command tx timeout [ 1052.717732][ T7812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.736833][ T7812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.749298][ T7812] bond0 (unregistering): Released all slaves [ 1052.869061][T17134] hsr_slave_0: entered promiscuous mode [ 1052.896405][T17134] hsr_slave_1: entered promiscuous mode [ 1052.903548][T17134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1052.926453][T17134] Cannot create hsr debugfs directory [ 1053.304329][ T7812] hsr_slave_0: left promiscuous mode [ 1053.310631][ T7812] hsr_slave_1: left promiscuous mode [ 1053.317413][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.325912][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.336605][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.346031][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.413517][ T7812] veth1_macvtap: left promiscuous mode [ 1053.419106][ T7812] veth0_macvtap: left promiscuous mode [ 1053.462507][ T7812] veth1_vlan: left promiscuous mode [ 1053.467941][ T7812] veth0_vlan: left promiscuous mode [ 1053.871226][T17199] ubi0: attaching mtd0 [ 1053.877104][T17199] ubi0: scanning is finished [ 1053.881757][T17199] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1054.103716][T17199] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1054.704823][ T5870] Bluetooth: hci2: command tx timeout [ 1055.465217][ T7812] team0 (unregistering): Port device team_slave_1 removed [ 1055.556053][ T7812] team0 (unregistering): Port device team_slave_0 removed [ 1056.782786][ T5870] Bluetooth: hci2: command tx timeout [ 1057.162449][T17134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1057.373650][T17134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1057.549715][T17134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1057.623117][T17134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1057.724558][T17172] chnl_net:caif_netlink_parms(): no params data found [ 1057.957157][ T7812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.049670][ T7812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.066922][T17172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.076860][T17172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.085353][T17172] bridge_slave_0: entered allmulticast mode [ 1058.094542][T17172] bridge_slave_0: entered promiscuous mode [ 1058.104881][T17172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.112094][T17172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.119779][T17172] bridge_slave_1: entered allmulticast mode [ 1058.128477][T17172] bridge_slave_1: entered promiscuous mode [ 1058.200457][ T7812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.243588][T17172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.279755][T17172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.316749][ T7812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.463768][T17172] team0: Port device team_slave_0 added [ 1058.510638][T17172] team0: Port device team_slave_1 added [ 1058.754462][T17172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.794291][T17172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.842567][T17172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.858912][T17172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.867052][T17172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.872297][ T5870] Bluetooth: hci2: command tx timeout [ 1058.892965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.893261][T17172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.351828][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.499133][T17172] hsr_slave_0: entered promiscuous mode [ 1059.537774][T17172] hsr_slave_1: entered promiscuous mode [ 1059.567805][T17172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.588446][T17172] Cannot create hsr debugfs directory [ 1059.588598][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.600317][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.861174][ T7812] bridge_slave_1: left allmulticast mode [ 1059.868066][ T7812] bridge_slave_1: left promiscuous mode [ 1059.874999][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.894787][ T7812] bridge_slave_0: left allmulticast mode [ 1059.900558][ T7812] bridge_slave_0: left promiscuous mode [ 1059.908970][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.580023][ T7812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.593807][ T7812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.605901][ T7812] bond0 (unregistering): Released all slaves [ 1060.827032][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.015301][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.022701][T12692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.071767][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.079078][T12692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.146356][ T7812] hsr_slave_0: left promiscuous mode [ 1061.158836][ T7812] hsr_slave_1: left promiscuous mode [ 1061.166799][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.180108][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.191164][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.201935][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.236717][ T7812] veth1_macvtap: left promiscuous mode [ 1061.243503][ T7812] veth0_macvtap: left promiscuous mode [ 1061.249348][ T7812] veth1_vlan: left promiscuous mode [ 1061.259285][ T7812] veth0_vlan: left promiscuous mode [ 1061.971674][ T7812] team0 (unregistering): Port device team_slave_1 removed [ 1062.035171][ T7812] team0 (unregistering): Port device team_slave_0 removed [ 1063.121101][T17172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1063.241364][T17172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1063.276642][T17275] ubi0: attaching mtd0 [ 1063.297816][T17275] ubi0: scanning is finished [ 1063.305110][T17275] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1063.314528][T17172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1063.335555][T17172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1063.584052][T17275] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1063.845305][T17172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.977878][T17172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.026718][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.033955][T12692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.284547][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.291715][T12692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.664929][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.320245][T17172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.340695][T17318] ubi0: attaching mtd0 [ 1065.346877][T17318] ubi0: scanning is finished [ 1065.351528][T17318] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1065.555178][T17318] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1066.167530][T17134] veth0_vlan: entered promiscuous mode [ 1066.206420][T17134] veth1_vlan: entered promiscuous mode [ 1066.236599][T17333] ubi0: attaching mtd0 [ 1066.242442][T17333] ubi0: scanning is finished [ 1066.247522][T17333] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1066.421974][T17134] veth0_macvtap: entered promiscuous mode [ 1066.479134][T17134] veth1_macvtap: entered promiscuous mode [ 1066.534676][T17333] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1066.618705][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.652431][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.664069][T17134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.716275][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.755682][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.797411][T17134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.861371][T17134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.894964][T17134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.921133][T17134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.976755][T17134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.387788][T17172] veth0_vlan: entered promiscuous mode [ 1067.423478][ T7812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.431375][ T7812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.457854][T17172] veth1_vlan: entered promiscuous mode [ 1067.529713][T12692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.552621][T12692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.598382][T17172] veth0_macvtap: entered promiscuous mode [ 1067.635023][T17172] veth1_macvtap: entered promiscuous mode [ 1067.776844][T17172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.835871][T17172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.860290][T17172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.882178][T17172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.905397][T17172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.963990][T17172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.043197][T17172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.061540][T17367] ubi0: attaching mtd0 [ 1068.119632][T17172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.145700][T17367] ubi0: scanning is finished [ 1068.162513][T17367] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1068.178478][T17172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.204477][T17172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.239423][T17172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.360387][T17172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.552013][T17172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.596844][T17172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.947295][T17367] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1069.130323][T12697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.180099][T12697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.549833][T12692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.599163][T12692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.760553][T17405] ubi0: attaching mtd0 [ 1070.779084][T17405] ubi0: scanning is finished [ 1070.783965][T17405] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1071.083447][T17405] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1073.159221][T17427] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2595'. [ 1073.212273][T17427] net_ratelimit: 77 callbacks suppressed [ 1073.212300][T17427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1075.603450][T17479] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2602'. [ 1075.623554][T17479] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2602'. [ 1077.545871][T17505] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1077.556636][T17505] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1079.600146][T17542] program syz.3.2614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.701680][T17546] delete_channel: no stack [ 1081.270194][T17557] delete_channel: no stack [ 1081.797419][T17581] ubi0: attaching mtd0 [ 1081.851620][T17581] ubi0: scanning is finished [ 1081.866645][T17581] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1082.135148][T17581] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1082.914488][T17596] ubi0: attaching mtd0 [ 1082.919955][T17596] ubi0: scanning is finished [ 1082.932289][T17596] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1083.583311][T17596] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1087.615063][T17666] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2633'. [ 1087.627436][T17666] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2633'. [ 1092.349601][T17738] ubi0: attaching mtd0 [ 1092.360196][T17738] ubi0: scanning is finished [ 1092.402804][T17738] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1092.919039][T17741] FAULT_INJECTION: forcing a failure. [ 1092.919039][T17741] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.933607][T17738] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1092.945662][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.6.2644 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1092.945709][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1092.945729][T17741] Call Trace: [ 1092.945739][T17741] [ 1092.945751][T17741] dump_stack_lvl+0x16c/0x1f0 [ 1092.945803][T17741] should_fail_ex+0x512/0x640 [ 1092.945850][T17741] ? fs_reclaim_acquire+0xae/0x150 [ 1092.945903][T17741] should_failslab+0xc2/0x120 [ 1092.945943][T17741] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1092.945980][T17741] ? security_inode_alloc+0x3b/0x2b0 [ 1092.946022][T17741] security_inode_alloc+0x3b/0x2b0 [ 1092.946060][T17741] inode_init_always_gfp+0xce4/0x1030 [ 1092.946119][T17741] alloc_inode+0x86/0x240 [ 1092.946160][T17741] path_from_stashed+0x2be/0xb00 [ 1092.946199][T17741] ? __pfx_path_from_stashed+0x10/0x10 [ 1092.946235][T17741] ? do_raw_read_unlock+0x44/0xe0 [ 1092.946303][T17741] ns_get_path+0x5f/0x80 [ 1092.946354][T17741] proc_ns_get_link+0x121/0x260 [ 1092.946407][T17741] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1092.946462][T17741] ? __pfx___might_resched+0x10/0x10 [ 1092.946503][T17741] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1092.946556][T17741] step_into+0x1b22/0x2270 [ 1092.946615][T17741] ? __pfx_step_into+0x10/0x10 [ 1092.946667][T17741] ? find_held_lock+0x2b/0x80 [ 1092.946709][T17741] path_openat+0x749/0x2d40 [ 1092.946755][T17741] ? __pfx_path_openat+0x10/0x10 [ 1092.946798][T17741] do_filp_open+0x20b/0x470 [ 1092.946829][T17741] ? __pfx_do_filp_open+0x10/0x10 [ 1092.946889][T17741] ? alloc_fd+0x471/0x7d0 [ 1092.946951][T17741] do_sys_openat2+0x11b/0x1d0 [ 1092.946995][T17741] ? __pfx_do_sys_openat2+0x10/0x10 [ 1092.947056][T17741] __x64_sys_openat+0x174/0x210 [ 1092.947101][T17741] ? __pfx___x64_sys_openat+0x10/0x10 [ 1092.947149][T17741] ? do_user_addr_fault+0x843/0x1370 [ 1092.947193][T17741] do_syscall_64+0xcd/0x230 [ 1092.947254][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.947289][T17741] RIP: 0033:0x7f8baf38d2d0 [ 1092.947315][T17741] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1092.947349][T17741] RSP: 002b:00007f8bb0185f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1092.947379][T17741] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8baf38d2d0 [ 1092.947400][T17741] RDX: 0000000000000002 RSI: 00007f8bb0185fa0 RDI: 00000000ffffff9c [ 1092.947421][T17741] RBP: 00007f8bb0185fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.947441][T17741] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1092.947460][T17741] R13: 0000000000000000 R14: 00007f8baf5b5fa0 R15: 00007ffe3e6e3c78 [ 1092.947502][T17741] [ 1093.214178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.989431][T17822] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2657'. [ 1098.028008][T17822] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2657'. [ 1101.262353][T17845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1101.264622][T17885] FAULT_INJECTION: forcing a failure. [ 1101.264622][T17885] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.312179][T17885] CPU: 0 UID: 0 PID: 17885 Comm: syz.6.2666 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1101.312219][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1101.312237][T17885] Call Trace: [ 1101.312246][T17885] [ 1101.312258][T17885] dump_stack_lvl+0x16c/0x1f0 [ 1101.312307][T17885] should_fail_ex+0x512/0x640 [ 1101.312359][T17885] should_failslab+0xc2/0x120 [ 1101.312398][T17885] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1101.312436][T17885] ? skb_clone+0x190/0x3f0 [ 1101.312478][T17885] skb_clone+0x190/0x3f0 [ 1101.312516][T17885] netlink_deliver_tap+0xabd/0xd30 [ 1101.312563][T17885] netlink_unicast+0x5df/0x7f0 [ 1101.312606][T17885] ? __pfx_netlink_unicast+0x10/0x10 [ 1101.312641][T17885] ? __build_skb_around+0x278/0x3b0 [ 1101.312693][T17885] ? __build_skb+0x6e/0x90 [ 1101.312724][T17885] ? is_vmalloc_addr+0x30/0x40 [ 1101.312780][T17885] netlink_sendmsg+0x8d1/0xdd0 [ 1101.312828][T17885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.312884][T17885] ____sys_sendmsg+0xa95/0xc70 [ 1101.312935][T17885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.312989][T17885] ? __pfx__kstrtoull+0x10/0x10 [ 1101.313034][T17885] ___sys_sendmsg+0x134/0x1d0 [ 1101.313074][T17885] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.313131][T17885] ? find_held_lock+0x2b/0x80 [ 1101.313190][T17885] __sys_sendmmsg+0x200/0x420 [ 1101.313232][T17885] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1101.313283][T17885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.313350][T17885] ? fput+0x70/0xf0 [ 1101.313387][T17885] ? ksys_write+0x1b9/0x240 [ 1101.313416][T17885] ? __pfx_ksys_write+0x10/0x10 [ 1101.313449][T17885] ? rcu_is_watching+0x12/0xc0 [ 1101.313485][T17885] __x64_sys_sendmmsg+0x9c/0x100 [ 1101.313521][T17885] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.313564][T17885] do_syscall_64+0xcd/0x230 [ 1101.313612][T17885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.313644][T17885] RIP: 0033:0x7f8baf38e969 [ 1101.313668][T17885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.313700][T17885] RSP: 002b:00007f8bb0186038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1101.313730][T17885] RAX: ffffffffffffffda RBX: 00007f8baf5b5fa0 RCX: 00007f8baf38e969 [ 1101.313761][T17885] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1101.313781][T17885] RBP: 00007f8bb0186090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.313800][T17885] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1101.313819][T17885] R13: 0000000000000000 R14: 00007f8baf5b5fa0 R15: 00007ffe3e6e3c78 [ 1101.313861][T17885] [ 1101.344755][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 1101.383823][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2666'. [ 1101.927522][T17845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1101.936632][T17845] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1101.946343][T17845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1101.972324][T17845] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1102.018864][T17845] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1102.074701][T17845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1102.105954][T17845] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1102.124910][T17845] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1102.593490][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2670'. [ 1103.300795][T17897] delete_channel: no stack [ 1103.342223][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 1103.926720][T17924] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2672'. [ 1103.940931][T17924] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2672'. [ 1103.982329][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 1104.147942][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 1105.422361][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 1106.062275][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 1106.236331][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1107.171651][T17985] ubi0: attaching mtd0 [ 1107.206948][T17985] ubi0: scanning is finished [ 1107.218741][T17985] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1107.258821][T17973] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1107.363554][T17984] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1107.389100][T17985] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1108.149651][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 1108.282181][T18002] FAULT_INJECTION: forcing a failure. [ 1108.282181][T18002] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.321566][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1108.343747][T18002] CPU: 0 UID: 0 PID: 18002 Comm: syz.5.2684 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1108.343795][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.343815][T18002] Call Trace: [ 1108.343824][T18002] [ 1108.343837][T18002] dump_stack_lvl+0x16c/0x1f0 [ 1108.343887][T18002] should_fail_ex+0x512/0x640 [ 1108.343934][T18002] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1108.343994][T18002] should_failslab+0xc2/0x120 [ 1108.344035][T18002] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1108.344088][T18002] ? __mutex_lock+0x1ca/0xb90 [ 1108.344134][T18002] ? alloc_tty_struct+0x96/0x8c0 [ 1108.344182][T18002] alloc_tty_struct+0x96/0x8c0 [ 1108.344229][T18002] ? __pfx___mutex_lock+0x10/0x10 [ 1108.344278][T18002] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1108.344323][T18002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1108.344382][T18002] tty_init_dev.part.0+0x1e/0x500 [ 1108.344429][T18002] tty_init_dev+0x60/0x80 [ 1108.344470][T18002] ? __pfx_ptmx_open+0x10/0x10 [ 1108.344497][T18002] ptmx_open+0x10d/0x360 [ 1108.344526][T18002] ? __pfx_ptmx_open+0x10/0x10 [ 1108.344555][T18002] chrdev_open+0x231/0x6a0 [ 1108.344588][T18002] ? __pfx_apparmor_file_open+0x10/0x10 [ 1108.344631][T18002] ? __pfx_chrdev_open+0x10/0x10 [ 1108.344668][T18002] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1108.344726][T18002] do_dentry_open+0x741/0x1c10 [ 1108.344760][T18002] ? __pfx_chrdev_open+0x10/0x10 [ 1108.344803][T18002] vfs_open+0x82/0x3f0 [ 1108.344850][T18002] path_openat+0x1e5e/0x2d40 [ 1108.344897][T18002] ? __pfx_path_openat+0x10/0x10 [ 1108.344940][T18002] do_filp_open+0x20b/0x470 [ 1108.344973][T18002] ? __pfx_do_filp_open+0x10/0x10 [ 1108.345037][T18002] ? alloc_fd+0x471/0x7d0 [ 1108.345099][T18002] do_sys_openat2+0x11b/0x1d0 [ 1108.345142][T18002] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.345204][T18002] __x64_sys_openat+0x174/0x210 [ 1108.345256][T18002] ? __pfx___x64_sys_openat+0x10/0x10 [ 1108.345304][T18002] ? rcu_is_watching+0x12/0xc0 [ 1108.345347][T18002] do_syscall_64+0xcd/0x230 [ 1108.345398][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.345431][T18002] RIP: 0033:0x7fdd8478e969 [ 1108.345458][T18002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.345491][T18002] RSP: 002b:00007fdd8562d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1108.345523][T18002] RAX: ffffffffffffffda RBX: 00007fdd849b6080 RCX: 00007fdd8478e969 [ 1108.345544][T18002] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1108.345566][T18002] RBP: 00007fdd84810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1108.345586][T18002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.345605][T18002] R13: 0000000000000000 R14: 00007fdd849b6080 R15: 00007ffc7d46e6b8 [ 1108.345648][T18002] [ 1110.402775][T18033] delete_channel: no stack [ 1112.341784][T18076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1112.625224][T18084] ubi0: attaching mtd0 [ 1112.637398][T18084] ubi0: scanning is finished [ 1112.642408][T18084] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1112.914096][T18084] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1114.270752][T18112] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2702'. [ 1116.378015][T18152] ubi0: attaching mtd0 [ 1116.455397][T18152] ubi0: scanning is finished [ 1116.460300][T18152] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1116.856028][T18152] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1116.865317][T18165] ubi0: attaching mtd0 [ 1116.874327][T18165] ubi0: scanning is finished [ 1116.879321][T18165] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1117.040351][T18165] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1120.358930][T18240] ubi0: attaching mtd0 [ 1120.373531][T18240] ubi0: scanning is finished [ 1120.387553][T18240] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1120.786714][T18240] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1121.027980][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.035115][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.469509][T18252] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2726'. [ 1121.489411][T18252] netlink: 350 bytes leftover after parsing attributes in process `syz.5.2726'. [ 1121.713680][T18258] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2727'. [ 1122.443883][T18267] delete_channel: no stack [ 1122.825352][T18280] FAULT_INJECTION: forcing a failure. [ 1122.825352][T18280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.918463][T18280] CPU: 0 UID: 0 PID: 18280 Comm: syz.4.2728 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1122.918508][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.918524][T18280] Call Trace: [ 1122.918532][T18280] [ 1122.918542][T18280] dump_stack_lvl+0x16c/0x1f0 [ 1122.918584][T18280] should_fail_ex+0x512/0x640 [ 1122.918625][T18280] _copy_from_user+0x2e/0xd0 [ 1122.918668][T18280] copy_msghdr_from_user+0x98/0x160 [ 1122.918698][T18280] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1122.918732][T18280] ? kfree+0x252/0x4d0 [ 1122.918751][T18280] ? __pfx__kstrtoull+0x10/0x10 [ 1122.918787][T18280] ___sys_sendmsg+0xfe/0x1d0 [ 1122.918817][T18280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.918873][T18280] ? __pfx___might_resched+0x10/0x10 [ 1122.918915][T18280] __sys_sendmmsg+0x200/0x420 [ 1122.918949][T18280] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1122.918988][T18280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1122.919039][T18280] ? fput+0x70/0xf0 [ 1122.919069][T18280] ? ksys_write+0x1b9/0x240 [ 1122.919092][T18280] ? __pfx_ksys_write+0x10/0x10 [ 1122.919115][T18280] ? rcu_is_watching+0x12/0xc0 [ 1122.919143][T18280] __x64_sys_sendmmsg+0x9c/0x100 [ 1122.919172][T18280] ? lockdep_hardirqs_on+0x7c/0x110 [ 1122.919206][T18280] do_syscall_64+0xcd/0x230 [ 1122.919244][T18280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.919270][T18280] RIP: 0033:0x7f752658e969 [ 1122.919290][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.919316][T18280] RSP: 002b:00007f75243b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1122.919340][T18280] RAX: ffffffffffffffda RBX: 00007f75267b6320 RCX: 00007f752658e969 [ 1122.919357][T18280] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1122.919373][T18280] RBP: 00007f75243b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.919388][T18280] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.919404][T18280] R13: 0000000000000000 R14: 00007f75267b6320 R15: 00007fffb7c32268 [ 1122.919435][T18280] [ 1123.384064][T18284] netlink: 'syz.5.2731': attribute type 1 has an invalid length. [ 1129.191677][T18382] ubi0: attaching mtd0 [ 1129.207578][T18382] ubi0: scanning is finished [ 1129.262332][T18382] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1129.646044][T18382] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1134.925574][T18480] ubi0: attaching mtd0 [ 1134.981786][T18480] ubi0: scanning is finished [ 1135.078830][T18480] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1135.963066][T18480] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1137.082772][T18517] delete_channel: no stack [ 1137.241245][T18528] ubi0: attaching mtd0 [ 1137.246901][T18528] ubi0: scanning is finished [ 1137.268912][T18528] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1137.294238][T18527] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2763'. [ 1137.331285][T18527] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2763'. [ 1137.458747][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2764'. [ 1137.640267][T18528] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1138.890459][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2775'. [ 1139.411679][T18571] [U]  [ 1139.414825][T18571] [U] [ 1139.417583][T18571] [U] [ 1139.420355][T18571] [U] [ 1139.519562][T18582] [U] [ 1140.299330][T18600] can: request_module (can-proto-5) failed. [ 1140.387733][T18606] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2774'. [ 1140.409867][T18606] netlink: 350 bytes leftover after parsing attributes in process `syz.5.2774'. [ 1144.371968][T18668] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1144.381942][T18668] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1145.052965][ T55] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1145.053012][ T55] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1145.072974][ T55] Bluetooth: hci0: adv larger than maximum supported [ 1145.073022][ T55] Bluetooth: hci0: adv larger than maximum supported [ 1145.080089][ T55] Bluetooth: hci0: adv larger than maximum supported [ 1145.086939][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 1145.093772][ T55] Bluetooth: hci0: adv larger than maximum supported [ 1149.087278][T18732] netlink: 'syz.5.2792': attribute type 1 has an invalid length. [ 1149.341168][T18736] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2793'. [ 1151.813376][T18793] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1151.834863][T18793] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1153.152538][T18812] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 1154.462406][T18828] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2815'. [ 1154.525201][T18828] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2815'. [ 1154.734936][T18831] netlink: 'syz.4.2816': attribute type 2 has an invalid length. [ 1156.861634][ T30] audit: type=1800 audit(4294967714.714:15): pid=18838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2818" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1156.911664][T18848] delete_channel: no stack [ 1157.467814][T18868] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2826'. [ 1157.520478][T18868] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2826'. [ 1158.814402][T18901] ubi0: attaching mtd0 [ 1158.820127][T18901] ubi0: scanning is finished [ 1158.825353][T18901] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1159.009562][T18896] delete_channel: no stack [ 1159.078841][T18901] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1161.266692][T18888] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2832'. [ 1161.286370][T18888] unsupported nla_type 65535 [ 1162.350354][T18946] ubi0: attaching mtd0 [ 1162.369036][T18946] ubi0: scanning is finished [ 1162.375431][T18946] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1162.697582][T18946] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1162.711579][T18951] ubi0: attaching mtd0 [ 1162.770507][T18951] ubi0: scanning is finished [ 1162.775386][T18951] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1163.148255][T18951] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1164.634017][T18986] delete_channel: no stack [ 1165.322821][T19004] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1165.396785][T19004] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1165.948795][T19016] delete_channel: no stack [ 1167.714202][T19061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.890191][T19067] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2878'. [ 1167.926128][T19067] netlink: 350 bytes leftover after parsing attributes in process `syz.6.2878'. [ 1168.507284][T19069] delete_channel: no stack [ 1169.755250][T19100] ubi0: attaching mtd0 [ 1169.808163][T19100] ubi0: scanning is finished [ 1169.819666][T19100] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1170.006595][T19100] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1170.945034][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.951706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.221017][T19121] delete_channel: no stack [ 1175.634636][T19205] ubi0: attaching mtd0 [ 1175.640094][T19205] ubi0: scanning is finished [ 1175.652256][T19205] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1176.443564][T19205] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1176.460210][T19210] ubi0: attaching mtd0 [ 1176.502170][T19210] ubi0: scanning is finished [ 1176.536388][T19210] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1176.818062][T19210] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1178.053657][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1178.089831][T19224] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1178.105329][T19224] FAULT_INJECTION: forcing a failure. [ 1178.105329][T19224] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.132991][T19224] CPU: 1 UID: 0 PID: 19224 Comm: syz.4.2915 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1178.133036][T19224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1178.133052][T19224] Call Trace: [ 1178.133059][T19224] [ 1178.133068][T19224] dump_stack_lvl+0x16c/0x1f0 [ 1178.133107][T19224] should_fail_ex+0x512/0x640 [ 1178.133140][T19224] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1178.133169][T19224] should_failslab+0xc2/0x120 [ 1178.133199][T19224] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1178.133224][T19224] ? __pfx_map_id_range_down+0x10/0x10 [ 1178.133255][T19224] ? prepare_creds+0x2c/0x7d0 [ 1178.133293][T19224] prepare_creds+0x2c/0x7d0 [ 1178.133328][T19224] __sys_setregid+0x101/0x910 [ 1178.133351][T19224] ? rcu_is_watching+0x12/0xc0 [ 1178.133375][T19224] do_syscall_64+0xcd/0x230 [ 1178.133411][T19224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.133435][T19224] RIP: 0033:0x7f752658e969 [ 1178.133454][T19224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.133479][T19224] RSP: 002b:00007f752732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 1178.133502][T19224] RAX: ffffffffffffffda RBX: 00007f75267b5fa0 RCX: 00007f752658e969 [ 1178.133518][T19224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.133532][T19224] RBP: 00007f7526610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1178.133546][T19224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.133560][T19224] R13: 0000000000000000 R14: 00007f75267b5fa0 R15: 00007fffb7c32268 [ 1178.133588][T19224] [ 1178.840078][T19235] ubi0: attaching mtd0 [ 1178.853571][T19235] ubi0: scanning is finished [ 1178.858227][T19235] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1179.176306][T19238] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1179.729826][T19235] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1182.475870][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.482342][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.662395][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1186.427933][T19342] ptp ptp0: delete virtual clock ptp1 [ 1186.552356][T19342] [ 1186.554748][T19342] ============================================ [ 1186.560924][T19342] WARNING: possible recursive locking detected [ 1186.567090][T19342] 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 Not tainted [ 1186.574216][T19342] -------------------------------------------- [ 1186.580395][T19342] syz.3.2944/19342 is trying to acquire lock: [ 1186.586472][T19342] ffff88807e9f4868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_clock_unregister+0x21/0x250 [ 1186.596430][T19342] [ 1186.596430][T19342] but task is already holding lock: [ 1186.603887][T19342] ffff8880305e6868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1186.613420][T19342] [ 1186.613420][T19342] other info that might help us debug this: [ 1186.621486][T19342] Possible unsafe locking scenario: [ 1186.621486][T19342] [ 1186.628944][T19342] CPU0 [ 1186.632237][T19342] ---- [ 1186.635534][T19342] lock(&ptp->n_vclocks_mux); [ 1186.640329][T19342] lock(&ptp->n_vclocks_mux); [ 1186.645122][T19342] [ 1186.645122][T19342] *** DEADLOCK *** [ 1186.645122][T19342] [ 1186.653374][T19342] May be due to missing lock nesting notation [ 1186.653374][T19342] [ 1186.661705][T19342] 5 locks held by syz.3.2944/19342: [ 1186.666913][T19342] #0: ffff88803537c7f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1186.676025][T19342] #1: ffff888035076420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1186.685068][T19342] #2: ffff888025ce2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1186.694867][T19342] #3: ffff8880301304b8 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1186.705029][T19342] #4: ffff8880305e6868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1186.715009][T19342] [ 1186.715009][T19342] stack backtrace: [ 1186.720909][T19342] CPU: 1 UID: 0 PID: 19342 Comm: syz.3.2944 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 1186.720945][T19342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1186.720961][T19342] Call Trace: [ 1186.720971][T19342] [ 1186.720981][T19342] dump_stack_lvl+0x116/0x1f0 [ 1186.721031][T19342] print_deadlock_bug+0x1e9/0x240 [ 1186.721064][T19342] __lock_acquire+0xff7/0x1ba0 [ 1186.721105][T19342] lock_acquire+0x179/0x350 [ 1186.721138][T19342] ? ptp_clock_unregister+0x21/0x250 [ 1186.721166][T19342] ? __pfx___might_resched+0x10/0x10 [ 1186.721194][T19342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1186.721236][T19342] __mutex_lock+0x199/0xb90 [ 1186.721272][T19342] ? ptp_clock_unregister+0x21/0x250 [ 1186.721299][T19342] ? ptp_clock_unregister+0x21/0x250 [ 1186.721326][T19342] ? __pfx___mutex_lock+0x10/0x10 [ 1186.721362][T19342] ? synchronize_rcu_expedited+0x3b9/0x460 [ 1186.721404][T19342] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1186.721442][T19342] ? ptp_clock_unregister+0x21/0x250 [ 1186.721466][T19342] ptp_clock_unregister+0x21/0x250 [ 1186.721493][T19342] ptp_vclock_unregister+0x11a/0x160 [ 1186.721526][T19342] unregister_vclock+0x108/0x1a0 [ 1186.721555][T19342] ? __pfx_unregister_vclock+0x10/0x10 [ 1186.721584][T19342] device_for_each_child_reverse+0x133/0x1a0 [ 1186.721664][T19342] ? __pfx_device_for_each_child_reverse+0x10/0x10 [ 1186.721708][T19342] ? __pfx_kstrtouint+0x10/0x10 [ 1186.721743][T19342] n_vclocks_store+0x4b6/0x6d0 [ 1186.721774][T19342] ? __pfx_n_vclocks_store+0x10/0x10 [ 1186.721805][T19342] ? find_held_lock+0x2b/0x80 [ 1186.721831][T19342] ? __pfx_n_vclocks_store+0x10/0x10 [ 1186.721860][T19342] dev_attr_store+0x55/0x80 [ 1186.721891][T19342] ? __pfx_dev_attr_store+0x10/0x10 [ 1186.721922][T19342] sysfs_kf_write+0xef/0x150 [ 1186.721961][T19342] kernfs_fop_write_iter+0x351/0x510 [ 1186.722000][T19342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1186.722038][T19342] vfs_write+0x5ba/0x1180 [ 1186.722065][T19342] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1186.722105][T19342] ? __pfx___mutex_lock+0x10/0x10 [ 1186.722143][T19342] ? __pfx_vfs_write+0x10/0x10 [ 1186.722178][T19342] ksys_write+0x12a/0x240 [ 1186.722203][T19342] ? __pfx_ksys_write+0x10/0x10 [ 1186.722227][T19342] ? rcu_is_watching+0x12/0xc0 [ 1186.722257][T19342] do_syscall_64+0xcd/0x230 [ 1186.722295][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.722323][T19342] RIP: 0033:0x7f9c12f8e969 [ 1186.722344][T19342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.722371][T19342] RSP: 002b:00007f9c13e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1186.722395][T19342] RAX: ffffffffffffffda RBX: 00007f9c131b5fa0 RCX: 00007f9c12f8e969 [ 1186.722413][T19342] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1186.722430][T19342] RBP: 00007f9c13010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1186.722446][T19342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.722462][T19342] R13: 0000000000000000 R14: 00007f9c131b5fa0 R15: 00007fffc30a9d08 [ 1186.722488][T19342] [ 1187.424650][T19342] ptp ptp0: only physical clock in use now