last executing test programs: 14m43.939592399s ago: executing program 2 (id=69): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r0 = socket(0x10, 0x2, 0x0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1dcb, 0x18) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) r1 = fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) (async, rerun: 32) mlockall$auto(0x7) (async) write$auto_sg_fops_sg(r1, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) (async, rerun: 32) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) (async, rerun: 32) socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x1c) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64) pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00022805000005000082c48f44dab554596670000000414856b6a8e9d4164edf48e0de1d361072b24c99eed9dea89b"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14m43.301592147s ago: executing program 2 (id=72): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) r1 = waitid$auto_P_ALL(0x0, 0x7fff, &(0x7f00000006c0)={@_si_pad}, 0x3ff, &(0x7f0000000740)={{0x6, 0xf}, {0x7, 0x2}, 0x9, 0x7ff, 0xe000, 0x804d, 0x8000000000000001, 0x1, 0x2, 0x3ff, 0x0, 0x4, 0xffffffffffffffc0, 0xfffffffffffffff8, 0xfff, 0x90000000000}) fcntl$auto_F_SETOWN(r0, 0x8, r1) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff030}}) (async) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) (async) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4) (async) socketcall$auto(0x1, &(0x7f0000000000)=0x81) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) mmap$auto(0x0, 0x202000b, 0x3, 0x12, r0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) r3 = timerfd_create$auto(0x9, 0x0) ioctl$auto(0x3, 0x40085400, 0x5) socket(0x11, 0x80003, 0x300) (async) ioctl$auto(0x3, 0x8918, 0x91) (async) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r3) (async, rerun: 32) ioctl$auto(r4, 0x40025504, 0xea3) (async, rerun: 32) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = socket(0x2b, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (rerun: 64) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x1, 0x84) 14m41.697375184s ago: executing program 2 (id=78): mmap$auto(0x0, 0x2020009, 0x7, 0x8011, 0xfffffffffffffffa, 0x0) (async) write$auto(0xca, 0x0, 0x1ff) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4080000000df, 0x40eb2, 0x4, 0x300000000000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x9, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) (async) timer_create$auto(0x3, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x6, 0x2, 0xb) socket(0xa, 0x3, 0xff) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xfdef) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 14m40.711369312s ago: executing program 2 (id=82): fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0xffff0000, 0x0, &(0x7f0000000080)="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", 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) ioctl$auto_MEMERASE64(r1, 0x40104d14, &(0x7f0000000000)={0xa6, 0x7}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\x02\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02f\xdd\b\x8aMw\x9d\x18^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x8, 0xdf, 0x9b72, 0x2, 0x8003) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004140), 0xffffffffffffffff) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x2, 0x9, 0x10001, 0x4, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x4, 0x10000008, 0x0, 0x420, 0x10000, 0x3fdc, 0x3, 0x5}, {0xa, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x7}}) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r4, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000280)=ANY=[@ANYBLOB="ff466e2d002182f42b8905d6c3d419108f00", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf651c00000008002c0036000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) connect$auto(0x3, &(0x7f0000000000), 0x55) mremap$auto(0xff, 0x9, 0x9, 0x6, 0x3) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) lseek$auto(0x3, 0x6eed8bcc, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14m39.70553174s ago: executing program 2 (id=87): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x4a83}, @HSR_A_IF1_AGE={0x8, 0x3, 0xe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xfffffffffffffd97}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev}, @HSR_A_IF1_SEQ={0x0, 0x6, 0x1}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40011) (async) r1 = socket(0x10, 0x2, 0x4) (async) mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) (async) sysfs$auto(0x2, 0x100000000000037, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xe, 0x0, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2d, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) fcntl$auto(r3, 0x400, 0x1) setxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='-\x00', &(0x7f0000000200), 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) socket(0x2d, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x11d, 0x81, 0x0, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) (async) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) utime$auto(0x0, 0x0) 14m38.707433651s ago: executing program 2 (id=90): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40383d0c, 0x0) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r2, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0xffffffffffff241e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) 14m29.78154664s ago: executing program 3 (id=122): openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4fc803, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064bb, r0) r1 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="940f08bba4f5c1613e4be01a5742340528286966a5389fa8061c40c866b30b2290e9c65f64535538fc113bf072e3e76fc510860766ca0950a241197c3674aea7b5d16f29a081c3368cb0307cac8e021bc0c40ccda421b862479b8c4311978f9a6d77c610e176004adc2c1949b93200f4d009b048576cfa3d7ab900000000000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf25020000000800040004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 14m29.446787321s ago: executing program 3 (id=124): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @rand_addr=0x640100ff}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="0c000000080000000500001e9107d876587d5f27bb0000000000060000000002000002000000070000000000"]) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x6, 0x5, 0x80000000, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/120, 0x78) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 14m28.78363295s ago: executing program 3 (id=126): mmap$auto(0x0, 0x2020009, 0xaa, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c000380050001800300000004000280080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0c4) io_uring_setup$auto(0x6, 0x0) r2 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x28, 0x4, 0xfffffffd) r3 = socket(0xa, 0x3, 0xff) r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x200, 0x0) read$auto_tracing_err_log_fops_trace(r4, &(0x7f00000000c0)=""/232, 0xe8) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) close_range$auto(0x2, r2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x163340, 0x2a) socket(0x21, 0x5, 0x1) 14m27.901568802s ago: executing program 3 (id=130): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f0000000480)=@raw_tracepoint={0x5, r2, 0x0, 0x4}, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x83) 14m27.605185306s ago: executing program 3 (id=132): r0 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) mmap$auto(0x5, 0x926, 0x4, 0x13, r0, 0xffffffffffff14d8) recvmsg$auto(r0, &(0x7f0000001180)={&(0x7f0000000040)="b35f462e0cb94a2a92ddab99f92f8679b4beb426572e06be343961e3c1ec64711f1f58f8814fd51d0d51833566be784536500932844397496f20e5f0952e467963652ceb03048fab864e748a3ca47e96b2f00390797f4e255740928ad865e875ae7409", 0x10000, &(0x7f00000010c0)={&(0x7f00000000c0)="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", 0x101}, 0x3, &(0x7f0000001100)="80fd778d0c11c59d8566452472aed0d4f0a10e1aaf5b9c9ad2765a89766b439a292d970f6cb93934f3f7720b3a774c47dfaed7ac09f4bcdb6e217916f436727933e8bc9855422ac72ef806a9d6a9b0c1f07505dc4ca669386d4b2d99d58087de51b67795cb9f31316a0a73ab8a4578b9a570a484373aa3ec5f46f363baf34a", 0xd}, 0xae) read$auto_supply_map_fops_(r0, &(0x7f00000011c0)=""/146, 0x92) mlockall$auto(0x3) getsockopt$auto_SO_BSDCOMPAT(r0, 0x9, 0xe, &(0x7f0000001280)='/sys/kernel/debug/regulator/supply_map\x00', &(0x7f00000012c0)) setsockopt$auto_SO_DONTROUTE(r0, 0x0, 0x5, &(0x7f0000001300)=',]\x00', 0x40) read$auto_supply_map_fops_(r0, &(0x7f0000001340)=""/128, 0x80) r1 = syz_clone3(&(0x7f0000001600)={0x800, &(0x7f00000013c0)=0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001440), {0x2f}, &(0x7f0000001480)=""/4, 0x4, &(0x7f00000014c0)=""/220, &(0x7f00000015c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) process_madvise$auto_MADV_GUARD_INSTALL(r2, &(0x7f0000001740)={&(0x7f0000001680)="5cfa3bcaf8fc56d52a1148bca7a35eceac65f26e0b0ac638e0819027690e21b2aa748efe9114f99be0a49d64d809d1e2ede9b45a59097c67bbbe35ce566e741226c488cb4da27efa39ada8b44cc9a98eec4bd9b6234297a0d0b2d39f7fdbb215b0ed0a2704823c8ad985c0ce81f3059a35407458aa0aa2a61cb5d9528fa22d72a1db024aa0", 0x8}, 0x8000000000000000, 0x66, 0x9) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000001780)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x256000, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001940)={{r2, &(0x7f00000017c0)="b53f87cea8e4bfc8908c181d0538407631da34c0d98dbc28657c537bb525d8090b00b1e238a97de6b578dc321fe00602973a37bfb69cd96a559476237ffffc9ae49b24cecf08f9f15e2d0d152689ea9c6781f61ef4040ab75a0720b292d4593a7b49e095ddc5137f35f7812a2b32b518ed51cbfdffeb99ab28814a1c7ee78847101ba4df0bbfd7ff482201722046a27c69319ee37da6de38bd", 0x6, 0xfffffffffffffffe, 0xffff, &(0x7f0000001880)="0715d6464e4fb0a3b7bf08ba82a01c0e00340f3739c48d2fc8cd4fe111", &(0x7f00000018c0)=0x300000}, {[0x3, 0x8, 0x101, 0x7f]}, 0x2, 0xfff, &(0x7f0000001900)}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04, 0x0) write$auto_lowpan_control_fops_6lowpan(r4, &(0x7f00000019c0)="225c88bc896642f901d484fbad0959c3bf094cd11e0e84efd21150eb694550ef45fb50fe6afd1cfc1be0a9c1c24f272d4fe4ca285622eca02ca80b48f8852f0b58c8f9ea66a095dec8d52de10d3ba5f8c8bfd7524ed694333255adf4a595521230db091882db98792b51e755ba37db7bd1a125c1112b72ff673b1ad4502527dd232683d0d977cf8676f8b3bd115bb69965dcd8213933475ad63b47ccff76a4fc97dfd37c084a05b167fb07aef58f7ed2e4f08e22c19f973d40", 0xb9) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x5, &(0x7f0000001a80)="a77b187c27a9ea8e4bfa") write$auto(r2, &(0x7f0000001ac0)='/sys/kernel/debug/regulator/supply_map\x00', 0x5) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/ptybb\x00', 0x10202, 0x0) sendmmsg$auto(r3, &(0x7f0000001e00)={{&(0x7f0000001b40)="49b55576e7c12eec81327270a7c74bee0d3e38642dff2ed83f409488a401f79d890ca464f51ec832ed5b3f254d3ec734943f07cbd4750090ca5bee04534cdeea586806692972f09fac002dc906231fb01bdceb62e2e755b8b41824ea0bdcc7974cc374a1ac7e9fe3dbefb2396a96232580c913ecbe97327eff2e142f5029f060bae8beb37b1e0b768a07a51e47411c6c8b5de793c0ffed266eeef30576f44da2ac7f84686dd5c97f6640", 0x100, &(0x7f0000001d00)={&(0x7f0000001c00)="9cea8bd70f6bb8433c54412a3e6f13afa9040d57b820c268720988eface343bd846728647efdba17cfca51b796bc5c3369c28e941c56467d5d25b95742708dc27c8cf61440f19e371052c4c344841f84d072aeae3c32c285d7c0d1866a526fd81704d02f20906aac3534f613bc5c1f4a486c95cd6600545d648e0e19161118e3c107a2660dd19d30cd419e273a578f01d22a1ea928d28f69be4da88918cace8b0d3c6e62439bb4ef7abff0ea90d5ff47ea9f71bcfbad19f86f0689d1f010827eed7e9dae68cac2c48956006976700f0e3cbd02309afb49f4d912ec4088e737a37ea3752d622a334d2a9039a29b96b5af8d", 0x7f}, 0x7, &(0x7f0000001d40)="484340c024a0139a73b32d53cb7985949d9efbb46c666f8997092b910e7806b941b5d46b1539cab888fd83475aae17890669405541a0340473b2cb8ddcac6d2f22390b8afbc2db762c82c42a252ffc3f086c95f895401af159993fbf47544116681013f2334e45797217f5d81be9cc27eb3d55530183cdba78abb6dcb00f90e3060ad89366e9a1c317d79b539fe0c35be7c7a01853d3ad9c02a7cb03224960f63f21937951", 0x1, 0x556}, 0x7fff}, 0xa, 0x200) statmount$auto(&(0x7f0000001e40)={0x9, @inferred=r5, 0x5, 0x9, 0x7}, &(0x7f0000001e80)={0x9, 0x1, 0x2, 0x4, 0x8, 0x3, 0x4, 0x7, 0x1, 0x0, 0x7fff, 0x8, 0x1, 0x400, 0x3, 0x401, 0xfff, 0x8, 0xc, 0x100, 0x6, 0xf366, 0x2, 0x4a3, 0x80, 0x101, 0xa, 0x80, 0xffffff3c, 0x7, 0x4, [0x4, 0x0, 0x100000001, 0x2, 0xfffffffffffffff7, 0x1000, 0xb8e, 0x0, 0x4, 0xfffffffffffff5f7, 0x4462, 0x7, 0xffff, 0x1000, 0x3, 0x6b7d4a8f, 0x14e2, 0x1ff, 0x2, 0x5, 0x80000001, 0x3, 0x6, 0x0, 0x0, 0x0, 0x8000000000000000, 0x2, 0x7fffffff, 0x7fffffffffffffff, 0x7ff, 0x7, 0x2, 0x5, 0x0, 0x7fffffff, 0x1, 0x2, 0xb49, 0x9, 0x8001, 0x1000000000000000, 0x4], "772e7535d85033751dfc76ec24e07422e23b3a5e2d59c2873f2d43dc6127fcf9f040050a9b7d2a5a14a4f705652c7b2cdf52d37925c6e61eec84f53b9dd552b50277ee2522f9c82903fa6c6a059f2184a62159bcb35ce9d748851ee513d241e4087d37918e03c6906d071dffdb097c53df8a30ec9dacbca13a04f8ab191e41bd6a4d6052eb15ffc688a1c82988eeebe943150bbd184fd312c95b5e4fa4c174ebd9bc"}, 0x1, 0x8) close_range$auto(r5, r2, 0x942) write$auto_userio_fops_userio(r4, &(0x7f0000002140)="b89deefe7ed30d6d42a975d547d7e924e999b3ba628eaebfde636ef8362afa6604e956677bb94af664060b01fa7e5aa36a3cd4bdae2f4ca0cfc0d57658458dd4eb63183209953930f8ee33756af6b8f53305e4d05436755ac1657bbc96945b8c2e1cc3e62b0f7e1ac45ab4adc2de7b5fca9b847bc74505e06138de709ae3534295ae148edfe2b604dce2f30f7e34f6032a2c3cf1f913aefcc8216653fe13d42c8d831bbbb3d394bcc8a85e444aa5", 0xae) waitid$auto_P_PGID(0x2, r1, &(0x7f0000002200)={@siginfo_0_0={0x3, 0x5, 0x7, @_sigpoll={0xfffffffffffffffc, r4}}}, 0x10, &(0x7f0000002280)={{0x1, 0x3}, {0x8, 0x2}, 0xff, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1800, 0x0, 0x3, 0x2, 0x2, 0x9, 0x2, 0x9, 0x9, 0x10001}) futex_wait$auto(&(0x7f0000002340)="482666a3", 0x5, 0x10001, 0x8, &(0x7f0000002380)={0xd, 0x800}, 0x80000000) ioctl$auto_OSS_GETVERSION2(r4, 0x80044d76, &(0x7f00000023c0)="8880304a7db82179afcdb95a95fa3c79252fda9574f31c99222789a3930f417d27bf472fdef88c1a0bb3107a90") ioctl$auto_EVIOCGVERSION(r4, 0x80044501, &(0x7f0000002400)=0x7fffffff) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002440), r4) gettimeofday$auto(&(0x7f0000002480)={0x8, 0x8}, &(0x7f00000024c0)={0x5, 0x8001}) exit$auto(0x2) getsockopt$auto_SO_ERROR(r3, 0x80000000, 0x4, &(0x7f0000002500)='IPVS\x00', &(0x7f0000002540)=0x40ab) sendmsg$auto_NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xa0, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0x8b, 0x6, "b6c6d13d725d065b9b29d03ea3902f39281bff41f6f5018fa4e7ebb29dbfd172497f0b8fc4ab8ffb5f769367f15e8c604eeede0b5fe9ba593e05cb21b2a2c4e64106af852d044592023fe1b5b9bbfddc485f93b876ee4c7316d1a3b1fd76f6c31b93e1a076ed9bf4c591c67851bd71c9c88e08055451d1a8e09e7392c3ff9905528446af80c11f"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 14m23.538618884s ago: executing program 32 (id=90): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40383d0c, 0x0) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r2, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0xffffffffffff241e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) 14m21.756339278s ago: executing program 3 (id=149): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe}, 0x8002, 0x1, 0x6) socket(0xa, 0x1, 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) (async) socket(0xa, 0x5, 0x84) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) (async) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x4000, 0xfee0, 0x9, 0x3, 0xfffff000) 14m6.277033316s ago: executing program 33 (id=149): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe}, 0x8002, 0x1, 0x6) socket(0xa, 0x1, 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) (async) socket(0xa, 0x5, 0x84) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) (async) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x4000, 0xfee0, 0x9, 0x3, 0xfffff000) 11m41.535833477s ago: executing program 5 (id=650): socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x100009, 0x0, 0xfb3) r0 = fanotify_init$auto(0x9, 0x1f2) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) fcntl$auto(r1, 0x403, 0xffffffffffffffff) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdb, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x2) ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0x3ff) socket(0xa, 0x2, 0x3a) socket(0xa, 0x801, 0x84) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) mmap$auto(0x5, 0x6, 0x4b5, 0x13, r0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/is_otg\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/17, 0x11) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCEXCL2(r5, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/audio1\x00j\x10\xa4\'ah\x16`x\xfe$*\xedf\fN\rM\xaf\x1b\x1d5\x01`\xa0\xfb\x8ax\x9c\x84\x95\x92\x96 \xd3F\xf9Y\xbaJ\xb0\x95J=\xfc\x18L\xe3\xbap\"\x9dL\xe87\x18\xc6\xe9\xa7zF\x97{I3\xc1\x81Q\x89{0\xeb\xdd5\xeff\x9a\xd8\xe1\xd9\xfc\xe0\xbf\x87e\xfal8\xc2x\xc1\xf3\xd3&\xcd\xe3\xc4\xc9{\xa4+>)\xc6\xd0Bk\x9e\xe6\xd8Y\x92x\xf0\xf5', 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) 11m34.151711815s ago: executing program 5 (id=675): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) userfaultfd$auto(0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) set_mempolicy$auto(0x2, 0x0, 0x4) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) (async) write$auto(0xca, 0x0, 0x1ff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) prctl$auto_PR_SCHED_CORE_GET(0xfff, 0x0, 0xffffffffffffffff, 0x5b, 0x1) (async) r2 = prctl$auto_PR_SCHED_CORE_GET(0xfff, 0x0, 0xffffffffffffffff, 0x5b, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket(0x1f, 0x800, 0xffffff01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 11m29.425471379s ago: executing program 5 (id=688): r0 = socket(0x1a, 0xa, 0xfffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x65, 0x0, 0x8) timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0xffffffffffffffff, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x1000, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7e]}, 0x1fe, 0x81) r2 = socket(0x6, 0xa, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r2, &(0x7f0000000600)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)="c953bceff001ad8e524de9c3b4e3b7966e5d2f0803565719ec251351e206522a9183f59000c77b3c578206d60f939950bb31cd58cd7deadb9645785666383c0c51bf1d57a529835f0dd4fb503aa947c66e41d5ea8ac49645cf51ead369033bae25ee0cfcde712c6c0bdf75c9288075ad40b3f59a311a8a8411b06e05430db245dabfa6ed15db91c1a9a21acc64edcb55b1495daa85e5", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000080)="4f68f8a40771eb4570be838920ff426616d32c37cbef93bbf3f8074ff072dcf9e8c1832057b4d528a18aeff85bbf0db1ca8ece724c6828c40e3ac06ac5c42aa0f4e70d1d83dd255a956595b44163db97263b191785bc36e176dac43d8d4c79a744f43c09c3aed0a89b6c", 0x7, &(0x7f0000000100)="6aafcf54f6da1655c97f2451fbe18240936a0727508c249198d1efefed09b574ae3b5d242e65a78e3509a18428a847f88ff0c54d762734cf32a1660e0f3fb75ea5a3dcbd9fa4a4e0c0c1", 0x7, &(0x7f00000001c0)="d5d9fe0b0d648d80206bb44aa07fed5b04baa212d499a6a8a9755b1d0ae66068518fa50c20bfbcfed77fae448935bdd34f700e007ddc4c7a9862354b052c86b3270e7ca42e7c717781e249f57fe36274f2c099f938e79364c14beae7d306b0aaedcb4827968b82838aa553fc970da1b455d41dbd6f4f98f2a3261fc4dc145577b3b5efe328a980afba84d39f49230dff25c198adb57573980f93026cd3ee6e2f0d5fa8f41f2e67d1f127e1138ca7b22a52fbe579fbdbb31bcf2e51a2", &(0x7f00000002c0)=0xf}) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000340)={0x80000001, r4}) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xc, 0xffffffffffffff21, 0x8, 0x803) fgetxattr$auto(0xffffffffffffffff, 0x0, &(0x7f0000000440)="2b60fb503a854df47f42cbc232fa814c70bc416a7080daa5014b598b633efbbd35dbdf37b7c0f34c116867ef0a80", 0x84) write$auto(r4, &(0x7f00000003c0)='/proc/self/mountstats\x00', 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 11m27.657627536s ago: executing program 5 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x6195, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex, r0, 0x0, 0x4, 0x1, @relative_id=0x4, 0xd}, 0x92) bpf$auto(0x2, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = getpgrp(0xffffffffffffffff) fcntl$auto_F_SETOWN(r1, 0x8, r2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r3, 0x0, 0x1f40) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) 11m25.120660269s ago: executing program 5 (id=700): eventfd$auto(0x87c) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f00000000c0)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x3) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) madvise$auto(0x0, 0x1, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x800, 0x0) pread64$auto(r0, 0x0, 0x20, 0x1300) 11m16.321977334s ago: executing program 5 (id=721): set_mempolicy$auto(0xf0000000, &(0x7f00000000c0)=0xffffffffffff2e93, 0x4) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1dcb, 0x18) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) r0 = fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_proc_mem_operations_base(r0, &(0x7f0000000140)="26050159c654a6a9d606e91835493618533dd00f51310f60cb6d855028a40ae7cd8e57d1d0b94fe37541726e07d42540f6c1f6d476a6c8edee40e3dd21fbb27998b21f0ab83366f18498e50719a2fbad788d14e15f451e8139dec416c973214356f0e376e1e50ea1c5ef19808deab1e0ecfa2beaed94c298c7b6d423b53f9dff17ff3699c1d7ce431bb97dbe1ee3fdb1843ac54f3d5052642f99a53a342be34582e5a18542f65f02051395ff18f65164d48259a49e6a970777f2b982b154f5f408c36f1927809b3b9d54bdaf801a5a451a7f383b9e82247d583cae2c771f69bcc83f78d062f6", 0xe6) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) (async) process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) mlockall$auto(0x7) (async, rerun: 32) write$auto_sg_fops_sg(r0, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) (async, rerun: 32) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) (async) socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8, 0x2) (rerun: 32) pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11m1.185553437s ago: executing program 34 (id=721): set_mempolicy$auto(0xf0000000, &(0x7f00000000c0)=0xffffffffffff2e93, 0x4) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1dcb, 0x18) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) r0 = fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_proc_mem_operations_base(r0, &(0x7f0000000140)="26050159c654a6a9d606e91835493618533dd00f51310f60cb6d855028a40ae7cd8e57d1d0b94fe37541726e07d42540f6c1f6d476a6c8edee40e3dd21fbb27998b21f0ab83366f18498e50719a2fbad788d14e15f451e8139dec416c973214356f0e376e1e50ea1c5ef19808deab1e0ecfa2beaed94c298c7b6d423b53f9dff17ff3699c1d7ce431bb97dbe1ee3fdb1843ac54f3d5052642f99a53a342be34582e5a18542f65f02051395ff18f65164d48259a49e6a970777f2b982b154f5f408c36f1927809b3b9d54bdaf801a5a451a7f383b9e82247d583cae2c771f69bcc83f78d062f6", 0xe6) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) (async) process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) mlockall$auto(0x7) (async, rerun: 32) write$auto_sg_fops_sg(r0, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) (async, rerun: 32) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) (async) socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8, 0x2) (rerun: 32) pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 7.948394177s ago: executing program 1 (id=2657): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef307143959554d"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0xfffffffffffffff7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1be0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x4020ae76, r5) 6.283837733s ago: executing program 1 (id=2661): madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x3, 0x100) (async) r0 = socket(0x10, 0x2, 0x0) r1 = io_uring_setup$auto(0x400d, 0x0) (async) setsockopt$auto(r0, 0x1, 0x45, 0x0, 0x8b) ioctl$auto(0x4000000000000c8, 0x800454cf, r1) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) close_range$auto(r0, 0x8, 0x3) (async) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket(0x1d, 0x1, 0x1) (async) unshare$auto(0x40000080) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r2, r2, 0x0, 0x23f) (async) sysfs$auto(0x2, 0x10000000000002a, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x23, 0x5, 0x0) socket(0xa, 0x5, 0x0) (async) socket(0x29, 0xa, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket(0x1a, 0x1, 0x84) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x11, 0x3, 0x2) (async) socket(0x2b, 0x1, 0x1) 6.170457832s ago: executing program 6 (id=2663): r0 = socket(0x1a, 0xa, 0xfffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x65, 0x0, 0x8) timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0xffffffffffffffff, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x1000, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7e]}, 0x1fe, 0x81) r2 = socket(0x6, 0xa, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$auto(r2, &(0x7f0000000600)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)="c953bceff001ad8e524de9c3b4e3b7966e5d2f0803565719ec251351e206522a9183f59000c77b3c578206d60f939950bb31cd58cd7deadb9645785666383c0c51bf1d57a529835f0dd4fb503aa947c66e41d5ea8ac49645cf51ead369033bae25ee0cfcde712c6c0bdf75c9288075ad40b3f59a311a8a8411b06e05430db245dabfa6ed15db91c1a9a21acc64edcb55b1495daa85e5", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={r3, &(0x7f0000000080)="4f68f8a40771eb4570be838920ff426616d32c37cbef93bbf3f8074ff072dcf9e8c1832057b4d528a18aeff85bbf0db1ca8ece724c6828c40e3ac06ac5c42aa0f4e70d1d83dd255a956595b44163db97263b191785bc36e176dac43d8d4c79a744f43c09c3aed0a89b6c", 0x7, &(0x7f0000000100)="6aafcf54f6da1655c97f2451fbe18240936a0727508c249198d1efefed09b574ae3b5d242e65a78e3509a18428a847f88ff0c54d762734cf32a1660e0f3fb75ea5a3dcbd9fa4a4e0c0c1", 0x7, &(0x7f00000001c0)="d5d9fe0b0d648d80206bb44aa07fed5b04baa212d499a6a8a9755b1d0ae66068518fa50c20bfbcfed77fae448935bdd34f700e007ddc4c7a9862354b052c86b3270e7ca42e7c717781e249f57fe36274f2c099f938e79364c14beae7d306b0aaedcb4827968b82838aa553fc970da1b455d41dbd6f4f98f2a3261fc4dc145577b3b5", &(0x7f00000002c0)=0xf}) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000340)={0x80000001, r4}) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xc, 0xffffffffffffff21, 0x8, 0x803) fgetxattr$auto(r3, 0x0, 0x0, 0x84) write$auto(r4, &(0x7f00000003c0)='/proc/self/mountstats\x00', 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 5.980773556s ago: executing program 6 (id=2664): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x840141, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r0 = eventfd$auto(0x0) r1 = io_uring_setup$auto(0x6, 0x0) fstat$auto(r0, 0x0) ioctl$auto(0xffffffffffffffff, 0xc1205531, r1) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c804}, 0x48811) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x1, 0x0) r2 = socket(0x2, 0x1, 0x100) getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r3, 0x28000) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rt6_stats\x00', 0x0, 0x0) 5.88157313s ago: executing program 4 (id=2665): r0 = socket(0x1a, 0xa, 0xfffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x65, 0x0, 0x8) timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0xffffffffffffffff, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x1000, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7e]}, 0x1fe, 0x81) r2 = socket(0x6, 0xa, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$auto(r2, &(0x7f0000000600)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)="c953bceff001ad8e524de9c3b4e3b7966e5d2f0803565719ec251351e206522a9183f59000c77b3c578206d60f939950bb31cd58cd7deadb9645785666383c0c51bf1d57a529835f0dd4fb503aa947c66e41d5ea8ac49645cf51ead369033bae25ee0cfcde712c6c0bdf75c9288075ad40b3f59a311a8a8411b06e05430db245dabfa6ed15db91c1a9a21acc64edcb55b1495daa85e5", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={r3, &(0x7f0000000080)="4f68f8a40771eb4570be838920ff426616d32c37cbef93bbf3f8074ff072dcf9e8c1832057b4d528a18aeff85bbf0db1ca8ece724c6828c40e3ac06ac5c42aa0f4e70d1d83dd255a956595b44163db97263b191785bc36e176dac43d8d4c79a744f43c09c3aed0a89b6c", 0x7, &(0x7f0000000100)="6aafcf54f6da1655c97f2451fbe18240936a0727508c249198d1efefed09b574ae3b5d242e65a78e3509a18428a847f88ff0c54d762734cf32a1660e0f3fb75ea5a3dcbd9fa4a4e0c0c1", 0x7, &(0x7f00000001c0)="d5d9fe0b0d648d80206bb44aa07fed5b04baa212d499a6a8a9755b1d0ae66068518fa50c20bfbcfed77fae448935bdd34f700e007ddc4c7a9862354b052c86b3270e7ca42e7c717781e249f57fe36274f2c099f938e79364c14beae7d306b0aaedcb4827968b82838aa553fc970da1b455d41dbd6f4f98f2a3261fc4dc145577b3b5", &(0x7f00000002c0)=0xf}) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000340)={0x80000001, r4}) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xc, 0xffffffffffffff21, 0x8, 0x803) fgetxattr$auto(r3, 0x0, 0x0, 0x84) write$auto(r4, &(0x7f00000003c0)='/proc/self/mountstats\x00', 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 5.712080302s ago: executing program 4 (id=2666): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000005880)='/dev/bus/usb/002/001\x00', 0x2082, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r1, 0x113, 0xffffffff, 0x0, 0x81) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) msgctl$auto_MSG_INFO(0xcde0, 0xc, &(0x7f0000000380)={{0x9, 0xee00, 0xee01, 0x2, 0x6, 0xc, 0x3}, &(0x7f0000000280)=0x10, &(0x7f0000000340)=0x5, 0x1, 0x4, 0x0, 0x906, 0x7fff, 0x200, 0x3, 0x9, @raw=0x5, @raw=0x4}) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000001900)={&(0x7f0000000140), 0xc, &(0x7f00000018c0)={&(0x7f0000000540)={0x134c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x98}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_PEER={0x1200, 0x28, 0x0, 0x1, [@typed={0xe, 0x39, 0x0, 0x0, @str='/dev/ptmx\x00'}, @generic="16013f857ab7ee281ea8c9e2503260f4a6387aabf80d18b25223e2d4425bd8baca2228173c2e4012b9bc133b5167c004d41c37ee4e8249c40183ea5009a48b1f2d3cfd052f2df9e1220890935bde4a21cb2c9f681a2f12dbda169487564b854acc362e4333afa80dc67f45e902cff63faba706831482c0c28bc5f589dee3ab0c2d629b5ff2ad4fcf563ea04eeb7ae255b3e7de4ae32c31ada4468cfc48205cf5fcb937b56e946801a014f83e2c2eb35ea8510b10de55d9e4a4d6f1d1f2e2aef0", @generic="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", @typed={0x4, 0x6f}, @nested={0x9e, 0x6e, 0x0, 0x1, [@nested={0x4, 0x14a}, @nested={0x4, 0xf3}, @nested={0x4, 0x120}, @generic="60f847e97f96887c4fdf466b34ddaa34445cd799ad238aea4624491354d5acd165254f70833ce4aa112c6975cf739d81e5212b63d42b96763f95c628d06474bb77af98c483bb482d4b83dcadcc16361d2416b0c488be6873ed0bde8de8f583b13c1727d8ebd10f84c7ceeeeaac354bd09d4538bdb8d321f92774e14fe10d9087b0f2bf75532146df972d0308c9f3"]}, @typed={0x8, 0xbd, 0x0, 0x0, @uid=r3}, @generic="61d3c12de091fa467891681c2674a29b4357fc192ea9c2dac020bce655c29665e49065fc32c9a2aed2a28f1cea80e9f19643050376c5ee2f5a23c68e0afcfb102b81d2ca847113e173414c53e14623abfef945a6c956a93191f619082d0b1e0d26c3068bd4dedf3e78b7b4a63ac81defbf5143895d5b036558ec47cb1939222c"]}, @NL802154_ATTR_SEC_KEY={0x103, 0x30, 0x0, 0x1, [@generic="783ca0aef7e51c99d3bd3ee26b8b5b962ff35fe0fe50fb39422726b52141adee154c8e60b1c1664f2eb27878cbbe2f055b3f444ccfec4aa09b4f251c67fc342896b8651a9a9f7317da335a2ff59ff15afdd9e130f43a37a1df37f6604b110305eb676830ab0e33b1cf917cf6beae7cb5a33cc45f4a15911b6b56f6597da4c212c75c927137fc67d529f30887838d7725aff1b06977c917811b925262aa27ee63a5c283d62843003c92449220f6563cbc8df3407896e57cbe6f5dc1bdf2dd49ee292b60d5c5995df3571501685200c1f328df762afd168b808298a76830b39dcd7ba44aefb4fe71435d974642707ef00ca7ee862744bbad3e1b22266e1fd49b"]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x134c}, 0x1, 0x0, 0x0, 0x4001}, 0x40010) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3a, 0xfff, 0x948b, 0x8, 0x95f4da0a, 0x3, 0x3, 0xb4dd, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xffffffffffffff7e]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) syslog$auto(0x3, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r5) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="46431d01ce1767bb03f0f47afdfa7c4bebb915d149f944640cd1b7de77ad11f4dc8f7959c0ffe35f1a5a2a6fa464e4e822c6a6d82b02137bbd12bb3f63a2a1cb37263096dc4b30a9e05e6b79f33e3310b9bf41fd6f5e53eea6f2d5d30805031f0172f38dceecf1e401a32cea4ccff829b514b7350b56d4d045a0af12596c03d6693f6ace0e91e8d5edea893456a9002920c2d795da4a3a5d421a01496e8baa746fb2fcb85a74146c0bd56273a23cf66cbc0b8c", @ANYRES32=r0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8249c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf2501000000bb000d807e79c0d272eb0b24ac26deb8a8c3316895de8d3c70c81a9f005780b0eff182b4270f1f3359d2e83925a09ac39294f399a787bedec4887fe93b77cfd21f65a02cd42c47687c1c76b93fa37fc1513b50eebacd6e659ad5481707b0f646e804f8d6b8b6f48390d8b88c68e894359bc5edfbff"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x24040841) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000040)="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", 0xfe04) splice$auto(0xffffffffffffffff, &(0x7f0000000080)=0xc52, 0xffffffffffffffff, &(0x7f00000000c0)=0xb, 0x804, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 4.901817634s ago: executing program 6 (id=2668): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf2503000000040008000400080014000180100010800c000b00080001"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) io_uring_setup$auto(0x8006, 0x0) r3 = socket(0x1f, 0x2, 0x200000) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000000)="4b8dd080e4c8d3523833adf8a3b8461b") unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x402000a, 0xdf, 0x10000000000eb1, r3, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x0, 0x806121, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) open(0x0, 0x6041, 0x0) 4.621981096s ago: executing program 4 (id=2669): r0 = socket(0xa, 0x2, 0x8) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000001a00)={0x11c4, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x11a0, 0xbb, "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"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xff}]}, 0x11c4}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffff7, 0x0, 0x57c4, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x10, 0x80009, 0x304) setsockopt$auto(r3, 0x107, 0x9, 0x0, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci3/hci3:201/power/autosuspend_delay_ms\x00', 0x2f8a01, 0x0) r6 = pipe$auto(0x0) close_range$auto(0xffffffffffffffff, r3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec5, r5) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC0\x00', 0x800, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0x5452, &(0x7f00000000c0)={0x81, 0xfff, [0x6, 0x8, 0xce]}) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x2d09, r7}) r8 = socket(0x2a, 0x2, 0x0) ioctl$auto(r8, 0x5411, r4) ioctl$auto_I2C_TENBIT(r2, 0x704, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 4.237585776s ago: executing program 1 (id=2670): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef307143959554d"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0xfffffffffffffff7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1be0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x4020ae76, r5) 3.690569887s ago: executing program 4 (id=2674): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x7ff, &(0x7f0000000000)={{0x2000000000000001, 0x3ff}, {0x0, 0x3}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x100000, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = gettid() r2 = getpid() r3 = getpgid$auto(r2) rt_tgsigqueueinfo$auto(r3, r1, 0x1, &(0x7f0000000600)={@_si_pad}) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/wakeup_count\x00', 0x0, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000240)={@inferred, "285ca5ac12ef5c612fb2ada37fca34159d972fb0bcd42e9e8c4c02bd70c8f32a0a7e918dbd01a1616053ece7aa8b695e4ff8ef4112fdda417eb5d303b8e526481617398743e416f0b88d79bbb357e3067cadcfa862a3c60ad1cd47a7a984c052de3b09e488295656f81c01867db6d60ab52836b2fc056f7f27ac0d4a72bace5226df0b629fb40c9ff37cd2d9c7627183824181bc172ca1ca93ab952b77ca7c4797cc32cc572fadc817175c8934c877288c62b6ecdec6cc327470d9c28652fc1234630c4c1f07923a7287c0acf28e470585a6450f5bdff19974c8bf35f01a7de78c37d17550f03c88e3b630e9a4d4f9d263e5fda6501d56980578929ad4c57d385ef0817d6f742bf9e03f6fb9015210cc1f5319f9908b799e5b9ef96dacdd27d07899068a1d06355ab3a2d9ce6f9a9417bd3bbd0dacf4fdb6c1fa0ad2e55c9496716b7378f755e49deca696e6d42b9c1554d3c347df325b958b95f1a5441f3da670d7690e9d3969459ff51a7456218ede2f4c91581d4918e7292d6af05fb59940b1ab6d2ddf3dac7e558d1e62cd9e04512ef2dcd68f6c209ce6a70c3a52a013f4140e584f0257ce5f65c756b66c668b98af272f52fa19bfb69a54d3d3d5c9c8ce14de659dcf10f5f72166f9649b556376b4c914cfc54a5f97568f656699dc04579845e622e539882aa105e970b8d9353bc8cdef5d77318106175890ea9c3d290b8b16987fb1b39861b1f7b30054e1786b4ccf3a05b7875cbc56db02c86d7c3d65e6c4d7b967c670a191771cfe5af6c90b0c8f4bc8d4a884089b1db3d50ea3a1f49bd38134ba49e37c5a9792009b60101eb6ea8a89c2140fde8a310eb2a83b6fc571fa7fd6363b938b473838706f7934da3ea08825e2cbd7f592a1b38b3c494b985cc0d94f5abeaa783b1514157cc813e839a1ec7f2bb97f2b332990d648f3e71a6868791fbaa65dd9295f63bf9235a790a2e4b6baf3c862a02dac6f003b2db869d4b80bb77b5070b7d39cdb5189abd37ef64a9062a23f901ca32eb16c1f6aa78956bf2cb384d1ea531428692cc80a6087981901fe4e86031bd53630613b3420cc08fa99478c24fa981d74e1c5b31465b66e410376457ee50dd28bba3a5351f4accf591b5a0d4ac1cf431688f557b482c30c2bd432985860e46a51ad0d19d8dd5642dd049bb9113167becb0757aa077604da9879d15110e2e8f4ec3266c518986f0f3768fafdee0df01efaeb0f05b8088f198bf41061b0d9ef2a41a6e54d974aad74452aa62c17268b976c6f2225d16109d31ace854357746c7345e8fa71105e8554ad1ae3d40f576bd1ca0f6501e4093bee2cb05951163ce86e1b04a8dfcfdc17670cf254f35c0d01954721c521c90be8b56611280194389ae53d8d3b0623ec8429647770a04fbde6a9c2917e0b24bbd67c3295bb20a56ed0fb2163bbccdbfe7495f06903561ce668e32ced9dc7c7cdd0f3374d93604cdb94edf148b78e7ce27a94d4dfd2873b750673cbef568fb7c8a876e429e1a56de1175fa97c21d15c0b1a08f24db96b208302e953c266e64e14a623323b7bcd3b1749c04fb6a495d313011a73172a84e97293e0a7ed86483e84e53e4a3c1f815aaa63cc20c2588c421eee54f0445bd7d1526b66464000dc17a3563cbf0eff4fb01fc1a94b417dc6c6c6fcdc544e88cf27d3ce040546835a822e1570de37dcf7e4eee19de07db8a071aa7a356e03e795e4a18421a78c742114aa1bb8f032d520cb51a0a248d25e0f6d6268a88fb56be7ab0d73aff95209031a0b252516e4a2291f7af10f3a98d972f23e233ff65250627e7f982f5ee0f5f1746ba1594cab5ccbb8bd1315522d28ca8031a189ffeec8e4d103ae30c942d26262fad9c5253782111858193524380ec037411e67a398aeb38fc0f640c8d6452c32e3a43409f19b406f3c59391ab5fe9a071a1da1bd79c8a0c7d335bea21569b8fa8982431de95da86af7441e9be141d83ceb543f5aa44a69432aee7954151a0d0e062a192823ddb337b6bcbd145459d9ba6de534415bc8108017de8cb0a2ec853ccaa1945526a098b110c7bb366c0b9cf3f13e4dd8d935cb04d50cdb88f08270a900c4062a7e64986ed4ccc5c78dda0c6cc11e60e2965eec4657e90c126af730707635827715f9c35b1880b998f3c41962a05fd23ffab9b2808a4cbb1f9f9abe7b2e2d50f04fa4679e67eeb33406bfc4ce8bd3ad4ba19eb8d9b9525a37174ef2d668e7089a27f05d1c6be9ecbd0449f54ee6243d3d95d7d1cefe01dbc7a343327b0ebd51fd5fb8542160bb17a384a3212ba678959e0d47b826d81f8527b77dc568d70d54ee51da147c5cc0260659a4e69a751e5723ef71991e706a100ef171f8a0e46238683b4ab74b5b8997f676e77619290e1d66e18ffe373a9f107f7a3aa7ed6090186fbd280327cad72e425437bf993ee514ac80ab8a0a45f06fa8bdb54a21d92f8889f85a8f7568a12d9ee17dc58f9755b54a855536eada3a1205c869f1afc2fede6fe1e50e0c0701344e9031bdf76c528ad1ffe520962a1c86ff1b4e464878103e091cf29da161282c38d7400b69f6649b53d7e488082288953fa828d46fe944c4df20c16a0a7a5c9a2c9526bc543e1176bd060f9c6b8f1be23fc6086300740c3b21dfbff64bbf0e3b74a11536719f4eb4a34ec137d3b98f1af89875178dcc00c540fad8ff7539ed72b25082fdf60a600d43b735ab182b8c8a69d8bb06e1743a448ea60189f138a68f481cb1a83abf4c05d017eed977429b516e3ca21959bd5e180f0222fe3a9073bac57d1541c20a014e91375ef0d65c887a44ac0d32491c8202fe0a2915814f648c51ea95f2367518892dd4629eb964e1f643b9ef8bcbbab17dd827398deda6974f665ea1235e95f7403937f26626eb94b2d73a166d889801a8b1719896315ee553f30bb8413786c5e9173ee7f772ae3db01dbb48e90c2efc8e1ab86f535cd5e84f2219b494958d49265a3d0d08c2f4876f0524c597328ac0888cb6c96ab4eb48b3d603e06b035f464c36da923f81977b2ddb0e5f90649fef3e0447b5609ec16dc321b85d43a360794b66dfb3b2b9c794248901425866dd12fb353314511701174a8eb2ce0aed06b177da6577cf88f3136d338c4f2cb7f8104964896b103a33593ed5115dcdc0d252fc2556ba49d65a159a7142437d19d05fef9f6c4bda4c97838fd3e892a7a76873a5f270a34786ec5f727dc2e336d798ad81c5778badf942fbd86c2b2f08b5dad8185f672570c78db617c9a1068f84efad66fd613a1a30fe19d6070efab0ab6dadad285cfba2dc22ce8e10a855d91a670f4fe172ce5d5f14dbdc929a81d78161e3461370ef5a2e97e7ed188c0a6457946cb808404c1a0fc428d50036e1bc038415928771d76094d17248cf254a29e3149e5069287833a1a9c4b4041b1ac987c83b4216e9d0be822657ac6c498ccc2de724586c284abe2c1562c1bab0bd97967854d00144cf7fe132e457119716ce7ef941d357995bc38f972e880e49c2c1cc05acb49826c03ecac94e52d74b28ea99c09893f7fe563083c4ccc8eaf440398879dda3a6d4176406d921ed678eef731be2ac014bf3fa947f2d7ca88f2e6b1df5239e7d98b45103f0949469140f4489c613f3e71b816660003b477c95dee3c89a853d3f9e5c521176b9785d82144144cc2e6facb752727df240ae1f78a69a8b4e33f13c23431087c1410a1e9581264d9233dfbb6e4cfddc01c6e64e4cb9b068f94ed5a5f0fba67305a376ff1017a46a55052cc603200808be7a246553876782afa8fdb58e511febe1de59e16f4d0527f7835655fa863d2d936a7679c621de225a770e7f967a300cb2b38568e58048ef225700e086caae846b29e5bb5af2021a2ec54677aee9d8dc5b0ac50a966eda2660bb43b0fb4d865eff378d6f0a348ecb4b130cff72abb10ff817e956ca2d4ca7179a7512d7bb262e651e23b09f3599dc79cd598666c3c38287939aaf34de5b2315066d020703c48b3649d3697b71dd055c1910193ed5ca3dba16d6b9bed85cfc98f975dcabea369ea8fa484b4615bce9ac40d3621c5a99f86951b22be25cdd7124fcb4b7b4aef109cabd197749c58adb276b4b3e2394bcc569b7deb0f053493458a6b5d2072a15d7711f7a7d0e0bc74fd702b25522ffc3e42a8c09350ea96082e9bff8de275dae7fffbdbbec7bf1248689daca69c5eae06bc57b588e06d08536b6c62f16c0e39440d0db89859ec73d4c7437e988515e2b4355de71b4e0a51be62fcc15afa0271d79851fbeca25b13861ee9bfe5a9acc0b098456e4fab99601bcb3706c7927bc69de255ad8a30788c5e31f6b6a7656a73b076149753547b60417d6bba1b01fc286521ab61ba9f9f7a02728c1ba0529c7428f55859cabb4a35c77c6f5ac071794064d0286dec1adff12e476769d1cb1c24e3c77cae7b0da3588d8cb59411f5516ef1925e5fa415a4e79d395c27a4c6b05b2e19e5e272d868e4f50ee1b5366c089f4bd00b134738fd31ce3ba95e5542e593b8c91ea7dfc92504f947e47ae69a7947cb524d8ac81dca935afb5dafb1b2237e470c00adc516ea13eb7ba689638b6c3c6e132accaa548b6397e848b6c201166569ae347db9a9d43319251a1feeda85a66e9be7a44c53c4727cb8f2c81a400bf12ff58df002e172bd82fe445f1f9e0d7f99e73fbd0aa1c97b85c33c1ef02f458c91c92aac2bd234f78e73b204cf141042ba7304604d0274ad132dc1c324f9af89fe15ddfc0b218d31d00e36c72b652af2542c6e2f4a6e0436fa78ad3f41eb2c9a3fe65ebdda9eefaa6297feb8874d8d7f1b45a9b7b87e6741202a524dfa8e3199976acc0952e20b6718ed902c581503090e92b72c8a29f6394ac69fe34913c8bc7aed3d76af24cebd0b4dd2f72903e65f7e486da36c4124e39fbd452a9cac4418de507d6048fddb91b59ab6a92afca1341af2ed9812616f87d662305a7bacc73883099105cbaf891ea91253a5e734a263ec8b95dc5eaa56493089503f721ec6b3e9176c7af536e9dca108a870ba901af3f12bd14cc7c1f3cb2610aaeafb7e3c142be1acc89d77ba1cd6f2363d7afe589989af81b306185619bec1f25a99e506c488185a2fbe575423000fff2cbd377b87124011caae66351340c9ce1c60d825eb9aa99abddad3ce1ff2218f64d1cda1ca7c8583e8fe431b3dec595ea61de1b13de52fdd0d0c23eea8be8be47d5ff6b696bb32dc86a8e25c0dd9a509308ee4893bfe56ec71d7d46fcda5aa115064c2542d9c935b29818f25ed0462b7a4c24538da26eaf6d8a11f99b2604551671ffe1b35ab3cb01185edd578cb11b25b6fdb57cf4df0e560707b466496c81766c6744c13089e1cd84eb8e1475a5270a8e8dcc86b2d0b3375a573af4f9114f446d9eb66821626a23498bfca34c7feb86a32ee0e61fff1d99653a1e5df46ccaa1e7657aa9a2756ae471d18db52052fb8f83e9163b237ce1d3b5cea4b6f3ec8e1d1351f8b75606fbca67382d9c0dbf2c8196cb938ab8ca04024ac1123c8119518edaa7e47bfc2da56a55f945f53e32e307f84175a33939731bfcb333a99b1ae6e2dca3e347ba0f9902a0f70d0f1d6805f1976ff70a4bc993ee7a836143c1c106c3495a9e6dd586c8626dfdc0b5a4652e9634b915c9413eb4125b861298885031b3ef24fb4541fd092af570850c9dcb2935be55187a2a0774603038144fe565b3e0a6072d46652052d6f8a76b4812b26bb507a9f30b7003604bc0d0d75ec952d4999bcdf3c46b39aae9fb"}) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x7, 0x8, 0xffffffff, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0xffffffff, 0xe, 0x22000, 0x5, 0xfffffffa, 0x84, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000]}, 0x1fa, 0xd) unshare$auto(0xf66) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid\x00') close_range$auto(r4, 0xffffffffffffffff, 0xfffffffa) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto_SHMEM_HUGE_FORCE(r5, 0x4, &(0x7f0000000580)='veth1_to_hsr\x00', &(0x7f00000005c0), 0xfffffffffffffffe) timer_settime$auto(0xfffffffd, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x2, 0x83}}, 0x0) 3.501448005s ago: executing program 0 (id=2675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) stat$auto(0x0, &(0x7f00000001c0)={0x101, 0x9, 0x4, 0xffffffff, 0xee01, 0x0, 0x0, 0x3, 0x800000000000, 0x9, 0x7, 0x0, 0x1, 0x5, 0x8000, 0x4, 0x7}) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub6/xrun_injection\x00', 0x80002, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) semget$auto(0xff, 0x40000000, 0x7f) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen_full\x00', 0x2, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) mmap$auto(0x0, 0x4000000003fe, 0xdf, 0xeb1, 0x1272, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') 3.115581036s ago: executing program 1 (id=2676): r0 = prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x410100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, r0}) r2 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/free_buffer\x00', 0x4002, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000df, 0xeb1, r2, 0x8000) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = socket(0x27, 0x80000, 0x6) r4 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000180)={0xff, &(0x7f00000000c0)={0x5, 0x4, 0x9, @raw=0x100003}}) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mlockall$auto(0x7) mmap$auto(0xc, 0x40000c, 0x800000000000df, 0x9b72, r3, 0x400000007ffd) madvise$auto(0x0, 0x2000040080000007, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x3, 0x2) socket(0x21, 0x2, 0xa) getsockopt$auto(0x6, 0x110, 0x6, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) write$auto(r0, 0x0, 0x4) ioctl$auto(0x3, 0x6f42, 0x38) write$auto(r5, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mlockall$auto(0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.023963357s ago: executing program 6 (id=2677): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x840141, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r0 = eventfd$auto(0x0) r1 = io_uring_setup$auto(0x6, 0x0) fstat$auto(r0, 0x0) ioctl$auto(0xffffffffffffffff, 0xc1205531, r1) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c804}, 0x48811) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x1, 0x0) r2 = socket(0x2, 0x1, 0x100) getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r3, 0x28000) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rt6_stats\x00', 0x0, 0x0) 2.646418098s ago: executing program 4 (id=2678): sendmsg$auto_NFSD_CMD_THREADS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001000}, 0x40) r0 = syz_clone(0x40100, &(0x7f0000000100)="25fa4bb27d572fbd1a363228756197cc9c2ac099bcb477b4294c4b57ec07f7ef7ce8296e3f4f6a7b7140f81c872d6e0fc4feab9fd2f59ba931dc7d25ca41d606102823338050e09f6f6fe8be52c2eb18f646206c44d76d2b3f87b34fadde7e653befb2ebd46815bfc6f5bddd67755b4c5ffc408618742f3c087284131926e010e5b1e1d8c2714727f4ee8419cc16d76e132dd40a8015ade50384afd9919c9897de4fcecb9e12225d6fbdab4bb55f938e1ed0c61a61a421c020154b950ae659fde5eedaaff85997c82b1452d4511f170c715d443d8a988e342d4023cfadb470ccf23141805f1b7fb439af7a23ee30a0c796", 0xf1, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="1291e42a231c265914adf30fe4f412f165a94f353d65") r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x174, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_QOS_MAP={0x102, 0xc7, "99dc9d8bfe0719766f1a109baedfd10336e4f226a4a50c2aa979ae16540243ba51bd4984dcda444774d3ebef086d5c3342888b2232bfc4f8be27d79af79b0cb328c8398c39c4b09dcf5887411fe38077c7a441c98d58e66f0094b2eff2bedf8d4c86f7e05c57ffa065327c68063f492fce9acf3d1331a7d6a3c80f1808ab7ffcebb8bc8fff159de59541de430c74692d83d7ddf2fd707eafcae5704e71f1ad85cda4c989989b13f73d3521d0901259206b0f193e4c34625e5e2e19228d2da98a66528524e7af0808490fd32bba621b70f218deeb9d324fa9dd72bf7021cfd8b8fb66156464490c837482e30315cd8f26f0a19a9f753c3756f752c3c870ba"}, @NL80211_ATTR_EHT_CAPABILITY={0x51, 0x136, "23963f273dc3a138533ae7be7132e9637cd53b20c319ffdd5a75f65bca5bebe44b9ef0bea801a96b308a356b2fb3541521079bdd03284b9f1955b9b31f4a7f7b9f1ae932370d92520c3894283a"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x44}]}, 0x174}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000580), 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000700)={{0x5, 0xffffffffffffffff, 0xee00, 0x9, 0x1000, 0x7, 0x5}, 0x3ff, 0x5, 0x1, 0x4, @inferred=r0, @inferred=r0, 0x400, 0x0, &(0x7f00000005c0)="eb70b6bd8c5f7237c9", &(0x7f0000000600)="4ffcc2d70ea460778a81fdbecdd1bf589a7906084a10f09d637739b6213ce5b5bebdc6571db1d5dc67568b6dab25c20744e27e059b14d5627ebd013244dd4145a21e9da5ae1311aac7d9ee0f0cd3cc0a40dc2d06311f6137b2b6edbc2865169e00fa9d23024d3846c7aa7fa0eb6235f6ea10310feb92411acc5f44ea68298e9e8770d8a5d7ceab78c1d79bb251c940e605b8d5bc8ee36a5b08a03edca0aac13e53fe17e784599d0d7513fa736b2e1d9913a35c20b98612e9cb717cc15f74a78691e9c5bbbc2678128a4bcb624e948674"}) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x3f0c90349fcb0dd2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x204, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1e8, 0x1, 0x0, 0x1, [@nested={0xa5, 0x2f, 0x0, 0x1, [@generic="c56f1d7853e207d414c232b108a7b11d9b022efc705176914bd8f540c6e61343b8752269ee31934ccfaeb17ad872dbd08c0dfea13609879b3622ad091a7e22d5c28e490e0d10183056f15fd4a4116692a77eb8b612d178012035fd5d82710ce4795a00b353d6321c7e5e03e4cb4697568bba2f32b57fa82d90b35baecb92fe67fc61d75fd4337feda5160d3e20e15cf7775079d0ab810a9c9d5adc48e1", @nested={0x4, 0xc3}]}, @typed={0x4, 0x9a}, @typed={0x4, 0xb2}, @nested={0x134, 0x130, 0x0, 0x1, [@typed={0xd2, 0x13f, 0x0, 0x0, @binary="4bf43dfba2ba82a5d66beab092259ded4dcd9f99257c854a90fdccf6c02188744646be1e53eb252b1f5621edc24c48c4d78f9c66d450f4bbe9461e4490cd8145bae2c472a5f60c8859221147c4aefd55e628e09d0a6447313e08b5fc328957cb6f4b4e3cd7e411857a7948bbef51d2a316bde8b9cc7e2fdda12b89765d6eede35e9af505dce7cf355fa6aaab9b4fe3a758bcec81a40f867f909538ee501cc2b6e4caa63597a1f126a1780548aec2c42ff6477380d55942d7494c7dcc06afd8c056992fce47cb9474f2c5760dacac"}, @typed={0x8, 0xbd, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xcd}, @typed={0x4, 0x78}, @generic="5a5586a8502fac6e452d18c3ca9236a9321b5a884b13c7028bf7fd6bf9babe36dde76bac0b2acc2c9df518f6640d43b563f1481b3c98b367386ed78a0b30aafcb86911a056ab4752071e9248"]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000a40), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) r7 = fcntl$getown(r2, 0x9) r8 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000b80)={@_si_pad}, 0x4, &(0x7f0000000c00)={{0x9, 0x10000}, {0x1, 0x8}, 0x10, 0xc4, 0x0, 0x7, 0x1000, 0x10001, 0x1, 0x10, 0x5, 0x7, 0xa14a, 0x1, 0x4, 0xeb}) rt_tgsigqueueinfo$auto(r7, r5, 0xfffffffd, &(0x7f0000000d80)={@siginfo_0_0={0xd, 0x5, 0xf309, @_rt={r8, r4, @sival_ptr=&(0x7f0000000cc0)="a0844d384c95f14bc9b1fea794821bad321d9fe58d1247c33ec2b7871cbb6f5f698f481c89f3efeb3de8f4459e6910effcfe9ed049514995423c24b4a053b505971d877b5bc39a931affe01a9f5fd02ead34d1f4a3c29cf573c1734f3f00622d8e19766c0640079a56a732c0a9f8f945c08787101092725ad202c3eec8f76dc0b2fc28dcf62b08270ef12642e54366f9c83591af85d879a23e444851aa"}}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/snd/controlC0\x00', 0x200000, 0x0) mmap$auto(0x7, 0x0, 0x4, 0x411, r2, 0xfff) r9 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/tracing/buffer_size_kb\x00', 0x284400, 0x0) setsockopt$auto(r2, 0x9, 0x6, &(0x7f0000000e80)='i\'\x00', 0x9) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ec0)=@batch={0x7, 0xff, 0x8000000000000001, 0x3, 0x7, r9, 0x401}, 0x1) r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000f80), 0x80000, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r11, 0xfffffffb, &(0x7f0000001040)={@siginfo_0_0={0x1fa2, 0xb78, 0x2, @_sigfault={&(0x7f0000000fc0)="d34bc99de77443bcf2d9e9ac33ae5385b986161699032e9a760e91b015648c35c4844357f17d545f396188eb6baa89a9d866df7e2e191984b24609b0bd9db6a733ea44998529d05ae49d38a9273dc9e6af1cd2d7651ea459ecbaa909ec7c067768384c1946a62614970b6b8ec2dec631c2db9e16a561", @_addr_lsb=0xfff7}}}, 0x1) sched_get_priority_min$auto(0x9) r12 = socket(0x0, 0x2, 0x5) r13 = getsockopt$auto(r6, 0x40, 0xc, &(0x7f00000010c0)='\x00', &(0x7f0000001100)=0x39) write$auto_uhid_fops_uhid(r13, &(0x7f0000001140)="f920f7b3c9424eaf449b6d31399487c1008cbc96d2970033cf77f8c41414d7163e3791d433cb8a9f52547af5e219c816ceb4d6b300d34540cca2b54bdb72f70a45c2df31a60dfd7bcc7d91ab5b1491a22a90677004e5938cdca92bcad8ad484916c2f76f0fad76025381f77438df1e81ac13035d7e15ced9992da108ff8d168d83883104049c0072992efa33231116375ef26fab4bf587390c479d209ae5ff653740b435edf0236d2d0c516402e5b4eeca73041787fbaaa6eb486914dc8e782c41be07a327ede4c624978842ccb4bcfc762334a66864dbcb3850b8", 0xdb) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r14, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x5000200}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xd0, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_VENDOR_DATA={0xae, 0xc5, "b45c25845bb991c15b2d4497870cbe3268ca316626e3f1875a4b03286fc8c83517c2c853ef7399ea4b7bc97b04e10eaf4bdeea216b0732f7a0651d2414d69fad1993c2cc856be6fcba941211f89dac33730382a452297f73e9537c0aa89d39f71135e3710a4c205c3f458d8e46b0e8c57ecf271d87116d32531f7ce3aa11349fcc069cf58ca9180989ffe96842f715936eae4f038ff9839132148bc56dbc0306bc705ba6c7739396c953"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7fff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x800) bpf$auto(0x141b, &(0x7f0000001400)=@bpf_attr_0={0x1, 0x9, 0x5, 0x2, 0x2600, r2, 0x0, "1d99f3b26b00bad6c744acbd88b72480", 0x0, r11, 0x6, 0x101, 0x2, 0x0, r10, r11}, 0x8000) getsockopt$auto_SO_PEERCRED(r15, 0x3, 0x11, &(0x7f00000014c0)='ethtool\x00', &(0x7f0000001500)=0x101) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r12, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x150, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x134, 0x3, 0x0, 0x1, [@nested={0x12e, 0x10e, 0x0, 0x1, [@nested={0x4, 0x1c}, @generic="0bfad51b33065a3e68cfdfa6921543dd57b428de6aa4ecc9c548a7308cf2fe6c08cf6c7c0a790541d9713f4c9e0dc46c09d9175d18e60aa792294581123256a30205c5d25efb4572ae8519eb8144fb5c54f3745c061797a1684951cb3e4020baf9ac643566846f09b0a7e94eb0afe123ef7d2fa88789c107dcf5a354cb761bc5061e3ed01f20351446f73080a963971fe28b3e39f153c2439709d1912d0d90f0f249181a119b66c8a5e85bb31e4eeed579a8657b02d8ab17395bad97dc4ed440ded8b5a3c206aa3451232babed5be0b549541906a9409b12b99f4ded0e5fb2f46f20229cc842087c43ef792bf1a8dd953a12842a64", @generic="151db3369df54e472c60f7195bfda5f2bb2c445bb02b202300b4980e12443c3eb0731cff02d15ad06c9d6411a4", @nested={0x4, 0xc2}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xf6a}]}, 0x150}, 0x1, 0x0, 0x0, 0x400}, 0x4040840) 2.567248661s ago: executing program 0 (id=2679): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) 2.111825093s ago: executing program 1 (id=2680): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000480), r2) sendmsg$auto_SMC_NETLINK_GET_STATS(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, "8477d01b8c57aa72d8dd59bcc1c08db96176c2960e0fb64273bda7221d6451b641131737964b4807a4c07db36c35b0ea594a4d8484ba887b1082e012c685c762a1f14406d65f95655d726120b38c473861786830084a35e30b14e97e352f8b46cc6d08d385729eef7f483cebdd44e900b3540d4c236d8e6f1c29fc46a49dceacd746fcf7a2737b73d4d69417b38bec949973c4e34046afd1cff52bf6b83fb82fa3153b9c95dc757d4d7ce4119a10a7edcfb1ce1ce7343c75aaef75ebea6faf795156c901282f460af03ba0b74e51cc71db9294110232baafede439b2ed477f2a39871537323c3eb4192d3ecddf4ab8"}, 0x104}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\x10\x00\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Fr3, &(0x7f0000000080)="4f68f8a40771eb4570be838920ff426616d32c37cbef93bbf3f8074ff072dcf9e8c1832057b4d528a18aeff85bbf0db1ca8ece724c6828c40e3ac06ac5c42aa0f4e70d1d83dd255a956595b44163db97263b191785bc36e176dac43d8d4c79a744f43c09c3aed0a89b6c", 0x7, &(0x7f0000000100)="6aafcf54f6da1655c97f2451fbe18240936a0727508c249198d1efefed09b574ae3b5d242e65a78e3509a18428a847f88ff0c54d762734cf32a1660e0f3fb75ea5a3dcbd9fa4a4e0c0c1", 0x7, &(0x7f00000001c0)="d5d9fe0b0d648d80206bb44aa07fed5b04baa212d499a6a8a9755b1d0ae66068518fa50c20bfbcfed77fae448935bdd34f700e007ddc4c7a9862354b052c86b3270e7ca42e7c717781e249f57fe36274f2c099f938e79364c14beae7d306b0aaedcb4827968b82838aa553fc970da1b455d41dbd6f4f98f2a3261fc4dc145577b3b5", &(0x7f00000002c0)=0xf}) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000340)={0x80000001, r4}) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xc, 0xffffffffffffff21, 0x8, 0x803) fgetxattr$auto(r3, 0x0, &(0x7f0000000440), 0x84) write$auto(r4, &(0x7f00000003c0)='/proc/self/mountstats\x00', 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 1.856458385s ago: executing program 6 (id=2682): socket(0x15, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="853b33beb09cc9805808ebfcf09c11e1f16d8766f7d285df51d3f93f524861b48f927d619dcf98b1d448352bb6b73362a150591191f29db12efc6bd5fb3a4a65bd1223fc536a894f0a72a1a5b23fc6aeadcb1e1611d62ac3f5ddbceb50b715871b98b255605106af1386095da3ee314be8d9f0f325490823693c4c491bcf64168ea62286f6f6b7af85") r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000d00000006000600070000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0xed6a, 0x20400009}, 0x7}, 0x3, 0x0) 1.655267734s ago: executing program 0 (id=2683): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0xf82, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) fsopen$auto(0x0, 0x9) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (rerun: 32) 1.653632171s ago: executing program 4 (id=2684): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef307143959554d"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0xfffffffffffffff7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1be0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x4020ae76, r5) 1.628766837s ago: executing program 1 (id=2685): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x800) close_range$auto(0xffffffffffffffff, 0x8, 0x1107) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, &(0x7f0000000040)='/dev/tap63\x00', &(0x7f0000000080)="f9903314fb23667ba70ff7706b60e7c5c97b1d55bb877517edc7010153b6aaac4c4fe3c5c2329af280c7e38c08e79d3cd052348ef7de078e0178a1048e5d142d4cef8b8bda9c04fb09c289cd", 0x80) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r4 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r4, 0x0, 0x80) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000140)=0x3) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1.195422035s ago: executing program 6 (id=2686): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x7ffd) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x20000800) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = prctl$auto(0x3e, 0xab75, 0xffffffffffffffff, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000019c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001980)={&(0x7f0000000480)=ANY=[], 0x14ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000240)="d15a4c06bbbb584a78f5a124b496d24400ace4984fa83328faf7f8c1e2d80d273e3372dd02934e36243e494d74255706e78caef5fe51ad82538ce1c1fd187b142e44e50603baac1d02734b56ec4ca1187108e9ad1e48274f8018850ef85b0de82f517e69ac9705130b0f191ff38609d3ac27559dc1660cf49eedc521f08a24150c62398f2b3d339cbc58b419f09c0ee25efca6d3e2fd96d8abcb6aefcb09dcedc84d0c35e6fbd8c17f1da4f99a6dfb12e14422d191cb999ada6245a3ee4ef4b0f7965c4e42fb761227defe8cf9ae341a21c56662219bebf07cecae4fc16e8d273631c81e3b7b80") getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys5\x00', 0xa0001, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20008805) ioperm$auto(0x400000ffff, 0xe, 0x1) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, 0x0, 0xfffff7fffffffffa, 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x11, 0x3, 0x10) geteuid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) 549.649414ms ago: executing program 0 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xc25, 0x0, 0xffffffffffffffff, 0x9, 0x200) r2 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000080), r0) sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0xb1507c85f0333f5c, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x80}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x9}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xab18}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000890}, 0x44000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000200)=0x853) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, 0x0, 0x6b) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_force_wakeup_fops_hci_vhci(r1, &(0x7f0000000240)=""/4096, 0x1000) r5 = clone$auto(0x4, 0x0, 0x0, 0x0, 0x8) r6 = set_tid_address$auto(0x0) kcmp$auto(r5, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x7fb, 0xa6f, 0x10000003, 0x17, 0xfffffffffffffffa, 0x8004) r7 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r7, &(0x7f0000000040)={0x0, 0x20002}, 0x2) eventfd$auto(0x3) eventfd$auto(0x0) 0s ago: executing program 0 (id=2688): write$auto(0xca, &(0x7f0000000280)='\x04>2\x1b!\xe2\x00\x94\xf2\xa2\x00\x00z\x0e\x8d\xea!\xbc\xf8*\x84(rw\xee\x9c\xb4,\xdaW\x0f\xef7\xbf\n|\x9a\xd9\xc3\xe7%\xeb\x1b\xd0\xc4\xc0\xae\xf6\xdf\x90,\x84\x12o4\a\x87\xe6\xe6\x17t\xb3<\xed\x91*\x8a#\x938D\xb6s\x9f\x14\xd4\x97\fY\xad5\xf5\xe9Iv\xe0\xd9\xfd\xff\x02idN\x94\x81\xc3\xa6\xb1\x11pM-> [ 888.359282][T17624] dump_stack_lvl+0x16c/0x1f0 [ 888.359322][T17624] should_fail_ex+0x512/0x640 [ 888.359368][T17624] _copy_from_user+0x2e/0xd0 [ 888.359407][T17624] do_handle_open+0x61b/0xb70 [ 888.359453][T17624] ? __pfx_do_handle_open+0x10/0x10 [ 888.359488][T17624] ? __x64_sys_futex+0x1e0/0x4c0 [ 888.359519][T17624] ? xfd_validate_state+0x5d/0x180 [ 888.359543][T17624] ? rcu_is_watching+0x12/0xc0 [ 888.359573][T17624] ? do_syscall_64+0xcd/0x230 [ 888.359609][T17624] do_syscall_64+0xcd/0x230 [ 888.359647][T17624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.359672][T17624] RIP: 0033:0x7fe1ca38e969 [ 888.359690][T17624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.359713][T17624] RSP: 002b:00007fe1cb195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 888.359735][T17624] RAX: ffffffffffffffda RBX: 00007fe1ca5b5fa0 RCX: 00007fe1ca38e969 [ 888.359751][T17624] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 888.359765][T17624] RBP: 00007fe1ca410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 888.359779][T17624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.359793][T17624] R13: 0000000000000000 R14: 00007fe1ca5b5fa0 R15: 00007fffb15ccdf8 [ 888.359822][T17624] [ 888.844843][T17627] EXT4-fs error: 1 callbacks suppressed [ 889.163343][T17636] FAULT_INJECTION: forcing a failure. [ 889.163343][T17636] name failslab, interval 1, probability 0, space 0, times 0 [ 889.177502][T17636] CPU: 0 UID: 0 PID: 17636 Comm: syz.4.2244 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 889.177552][T17636] Tainted: [U]=USER [ 889.177562][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.177581][T17636] Call Trace: [ 889.177592][T17636] [ 889.177610][T17636] dump_stack_lvl+0x16c/0x1f0 [ 889.177661][T17636] should_fail_ex+0x512/0x640 [ 889.177706][T17636] ? __kmalloc_noprof+0xbf/0x510 [ 889.177743][T17636] ? lsm_blob_alloc+0x68/0x90 [ 889.177769][T17636] should_failslab+0xc2/0x120 [ 889.177810][T17636] __kmalloc_noprof+0xd2/0x510 [ 889.177856][T17636] lsm_blob_alloc+0x68/0x90 [ 889.177886][T17636] security_prepare_creds+0x30/0x270 [ 889.177938][T17636] prepare_creds+0x56f/0x7d0 [ 889.177989][T17636] __sys_setuid+0x9a/0x440 [ 889.178028][T17636] do_syscall_64+0xcd/0x230 [ 889.178080][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.178112][T17636] RIP: 0033:0x7f802038e969 [ 889.178137][T17636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.178168][T17636] RSP: 002b:00007f801e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 889.178197][T17636] RAX: ffffffffffffffda RBX: 00007f80205b6080 RCX: 00007f802038e969 [ 889.178218][T17636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 889.178236][T17636] RBP: 00007f801e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.178255][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.178274][T17636] R13: 0000000000000000 R14: 00007f80205b6080 R15: 00007ffc1f2957d8 [ 889.178313][T17636] [ 890.019683][T17642] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 890.362497][T17652] FAULT_INJECTION: forcing a failure. [ 890.362497][T17652] name failslab, interval 1, probability 0, space 0, times 0 [ 890.417206][T17652] CPU: 1 UID: 0 PID: 17652 Comm: syz.0.2249 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 890.417274][T17652] Tainted: [U]=USER [ 890.417285][T17652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.417305][T17652] Call Trace: [ 890.417316][T17652] [ 890.417330][T17652] dump_stack_lvl+0x16c/0x1f0 [ 890.417390][T17652] should_fail_ex+0x512/0x640 [ 890.417439][T17652] ? fs_reclaim_acquire+0xae/0x150 [ 890.417497][T17652] should_failslab+0xc2/0x120 [ 890.417542][T17652] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 890.417584][T17652] ? security_inode_alloc+0x3b/0x2b0 [ 890.417631][T17652] security_inode_alloc+0x3b/0x2b0 [ 890.417673][T17652] inode_init_always_gfp+0xce4/0x1030 [ 890.417712][T17652] alloc_inode+0x86/0x240 [ 890.417755][T17652] sock_alloc+0x40/0x280 [ 890.417802][T17652] sock_create_lite+0x82/0x120 [ 890.417852][T17652] __netlink_kernel_create+0xbd/0x750 [ 890.417896][T17652] ? __kvmalloc_node_noprof+0x296/0x600 [ 890.417934][T17652] ? __pfx___netlink_kernel_create+0x10/0x10 [ 890.417995][T17652] fib_net_init+0x26d/0x3f0 [ 890.418035][T17652] ? __pfx___register_sysctl_table+0x10/0x10 [ 890.418076][T17652] ? __pfx_fib_net_init+0x10/0x10 [ 890.418117][T17652] ? lockdep_init_map_type+0x5c/0x280 [ 890.418163][T17652] ? __pfx_nl_fib_input+0x10/0x10 [ 890.418212][T17652] ? devinet_init_net+0x5c2/0x910 [ 890.418270][T17652] ? __pfx_fib_net_init+0x10/0x10 [ 890.418311][T17652] ops_init+0x1df/0x5f0 [ 890.418362][T17652] setup_net+0x21e/0x850 [ 890.418412][T17652] ? __pfx_setup_net+0x10/0x10 [ 890.418455][T17652] ? lockdep_init_map_type+0x5c/0x280 [ 890.418502][T17652] ? __pfx_down_read_killable+0x10/0x10 [ 890.418542][T17652] ? debug_mutex_init+0x37/0x70 [ 890.418581][T17652] copy_net_ns+0x2a6/0x5f0 [ 890.418633][T17652] create_new_namespaces+0x3ea/0xad0 [ 890.418683][T17652] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 890.418727][T17652] ksys_unshare+0x45b/0xa40 [ 890.418776][T17652] ? __pfx_ksys_unshare+0x10/0x10 [ 890.418821][T17652] ? xfd_validate_state+0x5d/0x180 [ 890.418857][T17652] ? rcu_is_watching+0x12/0xc0 [ 890.418899][T17652] __x64_sys_unshare+0x31/0x40 [ 890.418945][T17652] do_syscall_64+0xcd/0x230 [ 890.419002][T17652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.419037][T17652] RIP: 0033:0x7f98d2b8e969 [ 890.419062][T17652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.419096][T17652] RSP: 002b:00007f98d09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 890.419127][T17652] RAX: ffffffffffffffda RBX: 00007f98d2db6080 RCX: 00007f98d2b8e969 [ 890.419149][T17652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 890.419170][T17652] RBP: 00007f98d2c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 890.419191][T17652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.419212][T17652] R13: 0000000000000000 R14: 00007f98d2db6080 R15: 00007ffc95fd3348 [ 890.419264][T17652] [ 891.135268][ T5922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.175924][ T5922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.206947][ T5922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.272232][ T5922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.282115][ T5922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.207233][T17655] chnl_net:caif_netlink_parms(): no params data found [ 892.358331][T17697] FAULT_INJECTION: forcing a failure. [ 892.358331][T17697] name failslab, interval 1, probability 0, space 0, times 0 [ 892.373620][T17697] CPU: 0 UID: 0 PID: 17697 Comm: syz.6.2256 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 892.373672][T17697] Tainted: [U]=USER [ 892.373683][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 892.373701][T17697] Call Trace: [ 892.373712][T17697] [ 892.373723][T17697] dump_stack_lvl+0x16c/0x1f0 [ 892.373773][T17697] should_fail_ex+0x512/0x640 [ 892.373807][T17697] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 892.373838][T17697] should_failslab+0xc2/0x120 [ 892.373868][T17697] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 892.373895][T17697] ? alloc_uid+0x13d/0x4c0 [ 892.373928][T17697] alloc_uid+0x13d/0x4c0 [ 892.373957][T17697] ? __pfx_alloc_uid+0x10/0x10 [ 892.373988][T17697] ? bpf_lsm_capable+0x9/0x10 [ 892.374014][T17697] ? security_capable+0x7e/0x260 [ 892.374042][T17697] __sys_setuid+0x1cc/0x440 [ 892.374069][T17697] do_syscall_64+0xcd/0x230 [ 892.374108][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.374131][T17697] RIP: 0033:0x7fb8fad8e969 [ 892.374148][T17697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.374170][T17697] RSP: 002b:00007fb8fbba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 892.374192][T17697] RAX: ffffffffffffffda RBX: 00007fb8fafb6080 RCX: 00007fb8fad8e969 [ 892.374207][T17697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 892.374220][T17697] RBP: 00007fb8fbba9090 R08: 0000000000000000 R09: 0000000000000000 [ 892.374234][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.374254][T17697] R13: 0000000000000000 R14: 00007fb8fafb6080 R15: 00007ffca94aad18 [ 892.374283][T17697] [ 893.048031][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.059469][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.068519][T17655] bridge_slave_0: entered allmulticast mode [ 893.077741][T17655] bridge_slave_0: entered promiscuous mode [ 893.103113][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.112171][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.145459][T17655] bridge_slave_1: entered allmulticast mode [ 893.187735][T17655] bridge_slave_1: entered promiscuous mode [ 893.325906][T17705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 893.380833][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.393336][ T5922] Bluetooth: hci0: command tx timeout [ 893.428451][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.563015][T17655] team0: Port device team_slave_0 added [ 893.574804][T17655] team0: Port device team_slave_1 added [ 893.675369][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.693304][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.723650][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.738591][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.746722][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.814475][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.934018][T17655] hsr_slave_0: entered promiscuous mode [ 893.975426][T17655] hsr_slave_1: entered promiscuous mode [ 893.982505][T17655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.994852][T17722] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 894.004315][T17655] Cannot create hsr debugfs directory [ 894.691345][T17655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.257577][T17655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.468094][ T5922] Bluetooth: hci0: command tx timeout [ 895.737416][T17655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.893038][T17655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.027118][T17749] FAULT_INJECTION: forcing a failure. [ 896.027118][T17749] name failslab, interval 1, probability 0, space 0, times 0 [ 896.060259][T17749] CPU: 0 UID: 0 PID: 17749 Comm: syz.6.2266 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 896.060312][T17749] Tainted: [U]=USER [ 896.060321][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 896.060340][T17749] Call Trace: [ 896.060351][T17749] [ 896.060363][T17749] dump_stack_lvl+0x16c/0x1f0 [ 896.060407][T17749] should_fail_ex+0x512/0x640 [ 896.060440][T17749] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 896.060467][T17749] should_failslab+0xc2/0x120 [ 896.060495][T17749] __kmalloc_cache_noprof+0x6a/0x3e0 [ 896.060516][T17749] ? _setid_policy_lookup+0x218/0x3e0 [ 896.060547][T17749] ? alloc_ucounts+0x13d/0x440 [ 896.060579][T17749] alloc_ucounts+0x13d/0x440 [ 896.060613][T17749] ? __pfx_alloc_ucounts+0x10/0x10 [ 896.060655][T17749] set_cred_ucounts+0xcd/0x200 [ 896.060694][T17749] __sys_setuid+0x2b6/0x440 [ 896.060721][T17749] do_syscall_64+0xcd/0x230 [ 896.060760][T17749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.060783][T17749] RIP: 0033:0x7fb8fad8e969 [ 896.060802][T17749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.060825][T17749] RSP: 002b:00007fb8fbba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 896.060847][T17749] RAX: ffffffffffffffda RBX: 00007fb8fafb6080 RCX: 00007fb8fad8e969 [ 896.060862][T17749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 896.060876][T17749] RBP: 00007fb8fbba9090 R08: 0000000000000000 R09: 0000000000000000 [ 896.060892][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.060906][T17749] R13: 0000000000000000 R14: 00007fb8fafb6080 R15: 00007ffca94aad18 [ 896.060935][T17749] [ 896.597267][T17752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 896.813841][T17655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 896.859131][T17655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 896.909741][T17655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 896.930602][T17655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 897.407287][T17762] random: crng reseeded on system resumption [ 897.496939][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.540383][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.553198][ T8893] Bluetooth: hci0: command tx timeout [ 897.639353][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.647276][T17683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.730190][T17681] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.738195][T17681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.907854][T17655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.371197][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.474612][T17655] veth0_vlan: entered promiscuous mode [ 898.545591][T17655] veth1_vlan: entered promiscuous mode [ 898.683957][T17655] veth0_macvtap: entered promiscuous mode [ 898.695348][T17655] veth1_macvtap: entered promiscuous mode [ 898.715151][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.745125][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.064485][T17655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.074468][T17655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.084238][T17655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.110853][T17655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.623492][ T5922] Bluetooth: hci0: command tx timeout [ 899.832610][T17681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.858845][T17681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.873210][T17779] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 899.934947][T17685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.951700][T17685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.939749][T17794] FAULT_INJECTION: forcing a failure. [ 900.939749][T17794] name failslab, interval 1, probability 0, space 0, times 0 [ 900.987466][T17794] CPU: 1 UID: 0 PID: 17794 Comm: syz.6.2276 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 900.987515][T17794] Tainted: [U]=USER [ 900.987523][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.987537][T17794] Call Trace: [ 900.987545][T17794] [ 900.987553][T17794] dump_stack_lvl+0x16c/0x1f0 [ 900.987607][T17794] should_fail_ex+0x512/0x640 [ 900.987658][T17794] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 900.987702][T17794] should_failslab+0xc2/0x120 [ 900.987744][T17794] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.987784][T17794] ? security_file_alloc+0x34/0x2b0 [ 900.987837][T17794] security_file_alloc+0x34/0x2b0 [ 900.987885][T17794] init_file+0x93/0x4c0 [ 900.987927][T17794] alloc_empty_file+0x73/0x1e0 [ 900.987973][T17794] dentry_open+0x46/0xd0 [ 900.988018][T17794] pidfs_alloc_file+0x1c6/0x320 [ 900.988067][T17794] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 900.988119][T17794] ? find_get_pid+0x19b/0x310 [ 900.988170][T17794] pidfd_prepare+0xa8/0x130 [ 900.988216][T17794] __x64_sys_pidfd_open+0x105/0x1a0 [ 900.988268][T17794] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 900.988324][T17794] ? rcu_is_watching+0x12/0xc0 [ 900.988360][T17794] do_syscall_64+0xcd/0x230 [ 900.988416][T17794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.988457][T17794] RIP: 0033:0x7fb8fad8e969 [ 900.988494][T17794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.988529][T17794] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 900.988561][T17794] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 900.988590][T17794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 900.988610][T17794] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 900.988649][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.988669][T17794] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 900.988713][T17794] [ 901.258315][T17795] FAULT_INJECTION: forcing a failure. [ 901.258315][T17795] name failslab, interval 1, probability 0, space 0, times 0 [ 901.290780][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.6.2276 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 901.290840][T17795] Tainted: [U]=USER [ 901.290852][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.290873][T17795] Call Trace: [ 901.290885][T17795] [ 901.290897][T17795] dump_stack_lvl+0x16c/0x1f0 [ 901.290954][T17795] should_fail_ex+0x512/0x640 [ 901.291007][T17795] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 901.291046][T17795] should_failslab+0xc2/0x120 [ 901.291091][T17795] __kmalloc_cache_noprof+0x6a/0x3e0 [ 901.291125][T17795] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 901.291172][T17795] ? fscontext_alloc_log+0x4a/0x1b0 [ 901.291218][T17795] fscontext_alloc_log+0x4a/0x1b0 [ 901.291261][T17795] __x64_sys_fsopen+0x157/0x240 [ 901.291303][T17795] do_syscall_64+0xcd/0x230 [ 901.291358][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.291392][T17795] RIP: 0033:0x7fb8fad8e969 [ 901.291430][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.291464][T17795] RSP: 002b:00007fb8fbba9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 901.291496][T17795] RAX: ffffffffffffffda RBX: 00007fb8fafb6080 RCX: 00007fb8fad8e969 [ 901.291518][T17795] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 901.291538][T17795] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 901.291559][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.291580][T17795] R13: 0000000000000000 R14: 00007fb8fafb6080 R15: 00007ffca94aad18 [ 901.291623][T17795] [ 902.612598][T17814] FAULT_INJECTION: forcing a failure. [ 902.612598][T17814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 902.639960][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.4.2280 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 902.640016][T17814] Tainted: [U]=USER [ 902.640027][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.640048][T17814] Call Trace: [ 902.640058][T17814] [ 902.640071][T17814] dump_stack_lvl+0x16c/0x1f0 [ 902.640129][T17814] should_fail_ex+0x512/0x640 [ 902.640186][T17814] should_fail_alloc_page+0xe7/0x130 [ 902.640234][T17814] prepare_alloc_pages+0x3c2/0x610 [ 902.640298][T17814] ? rcu_is_watching+0x12/0xc0 [ 902.640340][T17814] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 902.640391][T17814] ? cgroup_rstat_updated+0x2a/0xb20 [ 902.640456][T17814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 902.640516][T17814] ? __lock_acquire+0x5ca/0x1ba0 [ 902.640564][T17814] ? __lock_acquire+0x5ca/0x1ba0 [ 902.640610][T17814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 902.640661][T17814] ? policy_nodemask+0xea/0x4e0 [ 902.640707][T17814] alloc_pages_mpol+0x1fb/0x550 [ 902.640753][T17814] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 902.640797][T17814] ? __lock_acquire+0x5ca/0x1ba0 [ 902.640849][T17814] folio_alloc_mpol_noprof+0x36/0x2f0 [ 902.640902][T17814] vma_alloc_folio_noprof+0xed/0x1e0 [ 902.640952][T17814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 902.641016][T17814] do_pte_missing+0x223d/0x3fb0 [ 902.641068][T17814] __handle_mm_fault+0x103d/0x2a40 [ 902.641119][T17814] ? __pfx___handle_mm_fault+0x10/0x10 [ 902.641154][T17814] ? __pte_offset_map_lock+0x155/0x2f0 [ 902.641203][T17814] ? find_held_lock+0x2b/0x80 [ 902.641234][T17814] ? find_held_lock+0x2b/0x80 [ 902.641303][T17814] handle_mm_fault+0x3fe/0xad0 [ 902.641347][T17814] __get_user_pages+0x771/0x36f0 [ 902.641412][T17814] ? __pfx_mt_find+0x10/0x10 [ 902.641445][T17814] ? __pfx___get_user_pages+0x10/0x10 [ 902.641516][T17814] populate_vma_page_range+0x278/0x3a0 [ 902.641552][T17814] ? __pfx_populate_vma_page_range+0x10/0x10 [ 902.641584][T17814] ? __pfx_find_vma_intersection+0x10/0x10 [ 902.641638][T17814] ? do_mmap+0x69c/0x11b0 [ 902.641695][T17814] __mm_populate+0x1d8/0x380 [ 902.641731][T17814] ? __pfx___mm_populate+0x10/0x10 [ 902.641769][T17814] ? up_write+0x1b2/0x520 [ 902.641824][T17814] vm_mmap_pgoff+0x362/0x450 [ 902.641880][T17814] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 902.641931][T17814] ? snd_seq_oss_ioctl+0xed/0xda0 [ 902.641993][T17814] ? __x64_sys_futex+0x1e0/0x4c0 [ 902.642030][T17814] ? __x64_sys_futex+0x1e9/0x4c0 [ 902.642073][T17814] ksys_mmap_pgoff+0x7d/0x5c0 [ 902.642125][T17814] ? rcu_is_watching+0x12/0xc0 [ 902.642162][T17814] __x64_sys_mmap+0x125/0x190 [ 902.642202][T17814] do_syscall_64+0xcd/0x230 [ 902.642258][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.642298][T17814] RIP: 0033:0x7f802038e969 [ 902.642327][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.642361][T17814] RSP: 002b:00007f8021113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 902.642395][T17814] RAX: ffffffffffffffda RBX: 00007f80205b5fa0 RCX: 00007f802038e969 [ 902.642419][T17814] RDX: 00000000000000b3 RSI: 0000000000040008 RDI: 0000000000000000 [ 902.642440][T17814] RBP: 00007f8020410ab1 R08: 0000000000000003 R09: 0000000000028000 [ 902.642463][T17814] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 902.642484][T17814] R13: 0000000000000000 R14: 00007f80205b5fa0 R15: 00007ffc1f2957d8 [ 902.642530][T17814] [ 903.528723][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 904.631893][T17856] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 905.818524][ T8893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 905.834704][ T8893] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 905.846831][ T8893] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 905.876027][ T8893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 905.886370][ T8893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 906.940706][T17684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.106813][T17684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.352568][T17684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.682555][T17871] chnl_net:caif_netlink_parms(): no params data found [ 907.905387][T17900] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 907.941477][ T8893] Bluetooth: hci3: command tx timeout [ 908.142693][T17684] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.308357][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.316376][T17871] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.338844][T17871] bridge_slave_0: entered allmulticast mode [ 908.347880][T17871] bridge_slave_0: entered promiscuous mode [ 908.369419][T17871] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.427215][T17871] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.435249][T17871] bridge_slave_1: entered allmulticast mode [ 908.469755][T17871] bridge_slave_1: entered promiscuous mode [ 908.736387][T17871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.882411][T17871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.378714][T17871] team0: Port device team_slave_0 added [ 909.386610][T17684] bridge_slave_1: left allmulticast mode [ 909.393568][T17684] bridge_slave_1: left promiscuous mode [ 909.422288][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.468304][T17684] bridge_slave_0: left allmulticast mode [ 909.474592][T17684] bridge_slave_0: left promiscuous mode [ 909.487177][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.016231][ T8893] Bluetooth: hci3: command tx timeout [ 910.446418][T17684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.478774][T17684] bond0 (unregistering): Released all slaves [ 910.527919][T17871] team0: Port device team_slave_1 added [ 910.835466][T17684] ovs_: left promiscuous mode [ 910.927835][T17871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.946775][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.958067][T17956] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 910.989141][T17871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.003499][T17684] ovs_: left promiscuous mode [ 911.033726][T17871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.042132][T17871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.076385][T17871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.108758][T17684] ܹx: left promiscuous mode [ 911.233086][T17871] hsr_slave_0: entered promiscuous mode [ 911.246792][T17871] hsr_slave_1: entered promiscuous mode [ 911.253966][T17871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.263398][T17871] Cannot create hsr debugfs directory [ 912.095477][ T8893] Bluetooth: hci3: command tx timeout [ 912.680472][T17684] hsr_slave_1: left promiscuous mode [ 912.793623][T17684] veth1_vlan: left promiscuous mode [ 912.812226][T17684] veth0_vlan: left promiscuous mode [ 913.090477][T17999] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 913.440733][T17684] team0 (unregistering): Port device team_slave_1 removed [ 913.517802][T17684] team0 (unregistering): Port device team_slave_0 removed [ 914.174252][ T8893] Bluetooth: hci3: command tx timeout [ 915.322508][T17871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.377936][T17871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.459062][T17871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.578498][T17871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 916.027810][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033e5dc00: rx timeout, send abort [ 916.041892][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033e5dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 916.397898][T18031] program syz.6.2324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.423675][T18031] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 916.538195][T17871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.636778][T17871] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.665419][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.673406][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.749168][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.757160][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.349946][T18048] FAULT_INJECTION: forcing a failure. [ 917.349946][T18048] name failslab, interval 1, probability 0, space 0, times 0 [ 917.372533][T18048] CPU: 1 UID: 0 PID: 18048 Comm: syz.6.2328 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 917.372589][T18048] Tainted: [U]=USER [ 917.372601][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.372621][T18048] Call Trace: [ 917.372632][T18048] [ 917.372645][T18048] dump_stack_lvl+0x16c/0x1f0 [ 917.372706][T18048] should_fail_ex+0x512/0x640 [ 917.372754][T18048] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 917.372807][T18048] should_failslab+0xc2/0x120 [ 917.372853][T18048] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 917.372898][T18048] ? __d_alloc+0x31/0xaa0 [ 917.372943][T18048] __d_alloc+0x31/0xaa0 [ 917.372985][T18048] d_alloc_pseudo+0x1c/0xc0 [ 917.373033][T18048] alloc_file_pseudo+0xcf/0x230 [ 917.373083][T18048] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 917.373133][T18048] ? alloc_fd+0x471/0x7d0 [ 917.373170][T18048] __anon_inode_getfile+0xf7/0x370 [ 917.373237][T18048] anon_inode_getfile_fmode+0x37/0xa0 [ 917.373297][T18048] do_eventfd+0x19b/0x2c0 [ 917.373338][T18048] ? rcu_is_watching+0x12/0xc0 [ 917.373374][T18048] __x64_sys_eventfd+0x32/0x50 [ 917.373415][T18048] do_syscall_64+0xcd/0x230 [ 917.373473][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.373508][T18048] RIP: 0033:0x7fb8fad8e969 [ 917.373536][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.373579][T18048] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 917.373611][T18048] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 917.373635][T18048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 917.373656][T18048] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 917.373678][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.373700][T18048] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 917.373742][T18048] [ 918.309744][T17871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.580875][T17871] veth0_vlan: entered promiscuous mode [ 918.622546][T17871] veth1_vlan: entered promiscuous mode [ 918.723987][T17871] veth0_macvtap: entered promiscuous mode [ 918.757348][T17871] veth1_macvtap: entered promiscuous mode [ 918.932927][T18086] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2334'. [ 918.955635][T17871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.013712][T17871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.099855][T17871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.141098][T17871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.195132][T17871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.212042][T17871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.656225][T17681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.666362][T17681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.957495][T18112] ovs_: entered promiscuous mode [ 919.969354][ T6531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.035113][ T6531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.217714][T18117] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 920.317519][ T8893] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 920.583290][T18128] program syz.4.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.333024][T18164] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 922.870075][T18197] FAULT_INJECTION: forcing a failure. [ 922.870075][T18197] name failslab, interval 1, probability 0, space 0, times 0 [ 922.982099][T18197] CPU: 1 UID: 0 PID: 18197 Comm: syz.0.2351 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 922.982154][T18197] Tainted: [U]=USER [ 922.982166][T18197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.982185][T18197] Call Trace: [ 922.982196][T18197] [ 922.982208][T18197] dump_stack_lvl+0x16c/0x1f0 [ 922.982272][T18197] should_fail_ex+0x512/0x640 [ 922.982320][T18197] ? fs_reclaim_acquire+0xae/0x150 [ 922.982371][T18197] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 922.982420][T18197] should_failslab+0xc2/0x120 [ 922.982461][T18197] __kmalloc_noprof+0xd2/0x510 [ 922.982511][T18197] tomoyo_realpath_from_path+0xc2/0x6e0 [ 922.982573][T18197] tomoyo_check_open_permission+0x2ab/0x3c0 [ 922.982619][T18197] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 922.982706][T18197] ? do_raw_spin_lock+0x12c/0x2b0 [ 922.982768][T18197] tomoyo_file_open+0x6b/0x90 [ 922.982803][T18197] security_file_open+0x84/0x1e0 [ 922.982853][T18197] do_dentry_open+0x596/0x1c10 [ 922.982902][T18197] vfs_open+0x82/0x3f0 [ 922.982953][T18197] path_openat+0x1e5e/0x2d40 [ 922.983005][T18197] ? __pfx_path_openat+0x10/0x10 [ 922.983051][T18197] do_filp_open+0x20b/0x470 [ 922.983087][T18197] ? __pfx_do_filp_open+0x10/0x10 [ 922.983153][T18197] ? alloc_fd+0x471/0x7d0 [ 922.983201][T18197] do_sys_openat2+0x11b/0x1d0 [ 922.983256][T18197] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.983320][T18197] __x64_sys_openat+0x174/0x210 [ 922.983365][T18197] ? __pfx___x64_sys_openat+0x10/0x10 [ 922.983415][T18197] ? rcu_is_watching+0x12/0xc0 [ 922.983459][T18197] do_syscall_64+0xcd/0x230 [ 922.983515][T18197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.983549][T18197] RIP: 0033:0x7fd12cf8e969 [ 922.983574][T18197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.983607][T18197] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 922.983638][T18197] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 922.983661][T18197] RDX: 0000000000008001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 922.983682][T18197] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 922.983703][T18197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.983722][T18197] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 922.983765][T18197] [ 922.983981][T18197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 923.195360][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.241948][T18273] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 927.847997][T18292] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 929.269191][T18325] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 930.588968][ T8893] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 931.008052][T18364] FAULT_INJECTION: forcing a failure. [ 931.008052][T18364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.022675][T18364] CPU: 1 UID: 0 PID: 18364 Comm: syz.4.2376 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 931.022738][T18364] Tainted: [U]=USER [ 931.022750][T18364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 931.022771][T18364] Call Trace: [ 931.022783][T18364] [ 931.022796][T18364] dump_stack_lvl+0x16c/0x1f0 [ 931.022853][T18364] should_fail_ex+0x512/0x640 [ 931.022909][T18364] _copy_from_user+0x2e/0xd0 [ 931.022963][T18364] do_handle_open+0x61b/0xb70 [ 931.023017][T18364] ? __pfx_do_handle_open+0x10/0x10 [ 931.023063][T18364] ? __x64_sys_futex+0x1e0/0x4c0 [ 931.023106][T18364] ? xfd_validate_state+0x5d/0x180 [ 931.023140][T18364] ? rcu_is_watching+0x12/0xc0 [ 931.023180][T18364] ? do_syscall_64+0xcd/0x230 [ 931.023226][T18364] do_syscall_64+0xcd/0x230 [ 931.023275][T18364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.023307][T18364] RIP: 0033:0x7f802038e969 [ 931.023333][T18364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.023364][T18364] RSP: 002b:00007f8021113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 931.023396][T18364] RAX: ffffffffffffffda RBX: 00007f80205b5fa0 RCX: 00007f802038e969 [ 931.023418][T18364] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 931.023438][T18364] RBP: 00007f8020410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 931.023481][T18364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.023501][T18364] R13: 0000000000000000 R14: 00007f80205b5fa0 R15: 00007ffc1f2957d8 [ 931.023542][T18364] [ 931.535915][T18371] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 932.664700][ T30] audit: type=1804 audit(4294967761.230:29): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2384" name="/newroot/sys/kernel/tracing/tracing_cpumask" dev="tracefs" ino=1257 res=1 errno=0 [ 932.786666][ T30] audit: type=1804 audit(4294967761.290:30): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2384" name="/newroot/sys/kernel/tracing/tracing_cpumask" dev="tracefs" ino=1257 res=1 errno=0 [ 933.315285][T18410] QAT: Device 0 not found [ 933.380412][T18416] nbd: socks must be embedded in a SOCK_ITEM attr [ 933.497720][T18416] block nbd0: shutting down sockets [ 933.957701][ T30] audit: type=1326 audit(4294967762.531:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18426 comm="syz.1.2388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f487498e969 code=0x0 [ 934.228473][T18432] netlink: 'syz.4.2390': attribute type 9 has an invalid length. [ 934.245610][T18432] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2390'. [ 934.579572][T18438] FAULT_INJECTION: forcing a failure. [ 934.579572][T18438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.611927][T18438] CPU: 0 UID: 0 PID: 18438 Comm: syz.4.2392 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 934.611985][T18438] Tainted: [U]=USER [ 934.611997][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 934.612018][T18438] Call Trace: [ 934.612030][T18438] [ 934.612044][T18438] dump_stack_lvl+0x16c/0x1f0 [ 934.612091][T18438] should_fail_ex+0x512/0x640 [ 934.612132][T18438] _copy_from_user+0x2e/0xd0 [ 934.612173][T18438] move_addr_to_kernel+0x65/0x170 [ 934.612215][T18438] __sys_sendto+0x1be/0x510 [ 934.612244][T18438] ? __pfx___sys_sendto+0x10/0x10 [ 934.612279][T18438] ? fput+0x70/0xf0 [ 934.612319][T18438] ? xfd_validate_state+0x5d/0x180 [ 934.612344][T18438] ? rcu_is_watching+0x12/0xc0 [ 934.612383][T18438] __x64_sys_sendto+0xe0/0x1c0 [ 934.612408][T18438] ? do_syscall_64+0x91/0x230 [ 934.612462][T18438] ? lockdep_hardirqs_on+0x7c/0x110 [ 934.612504][T18438] do_syscall_64+0xcd/0x230 [ 934.612543][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.612568][T18438] RIP: 0033:0x7f80203907fc [ 934.612587][T18438] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 934.612611][T18438] RSP: 002b:00007f8021111ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 934.612634][T18438] RAX: ffffffffffffffda RBX: 00007f8021111fc0 RCX: 00007f80203907fc [ 934.612650][T18438] RDX: 0000000000000020 RSI: 00007f8021112010 RDI: 0000000000000009 [ 934.612665][T18438] RBP: 0000000000000000 R08: 00007f8021111f14 R09: 000000000000000c [ 934.612681][T18438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 934.612696][T18438] R13: 00007f8021111f68 R14: 00007f8021112010 R15: 0000000000000000 [ 934.612725][T18438] [ 935.385182][T18440] Invalid ELF header magic: != ELF [ 935.597357][T18451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2395'. [ 936.603562][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.610573][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.271515][ T5922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.283454][ T5922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 937.309848][ T5922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 937.334035][ T5922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 937.363247][ T5922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.522680][ T5922] Bluetooth: hci1: command tx timeout [ 939.614697][T17681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.653125][T17681] bond0 (unregistering): Released all slaves [ 940.081449][T17681] HfR: left promiscuous mode [ 940.250669][T17681] HSR: left promiscuous mode [ 941.301991][T18477] chnl_net:caif_netlink_parms(): no params data found [ 941.601182][ T5922] Bluetooth: hci1: command tx timeout [ 941.912086][T17681] hsr_slave_0: left promiscuous mode [ 941.922778][T17681] hsr_slave_1: left promiscuous mode [ 942.127178][T17681] veth1_macvtap: left promiscuous mode [ 942.175896][T17681] veth0_macvtap: left promiscuous mode [ 942.534074][T18544] delete_channel: no stack [ 942.581460][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 942.593040][T18546] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2412'. [ 942.612362][T18548] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2412'. [ 943.688250][ T5922] Bluetooth: hci1: command tx timeout [ 943.910807][T17681] team0 (unregistering): Port device team_slave_1 removed [ 944.448114][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 944.829705][T18570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2416'. [ 944.888167][T18477] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.896919][T18477] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.911321][T18477] bridge_slave_0: entered allmulticast mode [ 944.920471][T18477] bridge_slave_0: entered promiscuous mode [ 944.931241][T18477] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.939761][T18477] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.947708][T18477] bridge_slave_1: entered allmulticast mode [ 944.957189][T18477] bridge_slave_1: entered promiscuous mode [ 945.226377][T18477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.283565][T18477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.653128][T18477] team0: Port device team_slave_0 added [ 945.715393][T18477] team0: Port device team_slave_1 added [ 945.760646][ T5922] Bluetooth: hci1: command tx timeout [ 945.846622][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'. [ 945.974386][T18477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.020245][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.076655][T18477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.115762][T18477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.136866][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.191646][T18477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.520084][T18477] hsr_slave_0: entered promiscuous mode [ 946.527488][T18477] hsr_slave_1: entered promiscuous mode [ 946.554147][T18620] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 946.670671][T17681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.922610][T17681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.139813][T17681] bridge0: port 3(netdevsim1) entered disabled state [ 947.204997][T17681] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 947.243599][T17681] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 947.256672][T17681] bridge0: port 3(netdevsim1) entered disabled state [ 947.305816][T17681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.612775][T17681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.057435][T17681] bridge_slave_1: left allmulticast mode [ 948.063728][T17681] bridge_slave_1: left promiscuous mode [ 948.107413][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.189361][T17681] bridge_slave_0: left allmulticast mode [ 948.195735][T17681] bridge_slave_0: left promiscuous mode [ 948.233369][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.362996][T18661] can: request_module (can-proto-3) failed. [ 949.800662][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2436'. [ 950.709741][T18693] nfsd: Unknown parameter '^B-' [ 950.733380][T18693] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 950.865193][T17681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.889800][T17681] bond0 (unregistering): Released all slaves [ 950.912353][T18695] FAULT_INJECTION: forcing a failure. [ 950.912353][T18695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.935722][T18695] CPU: 1 UID: 0 PID: 18695 Comm: syz.6.2441 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 950.935783][T18695] Tainted: [U]=USER [ 950.935796][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.935818][T18695] Call Trace: [ 950.935831][T18695] [ 950.935846][T18695] dump_stack_lvl+0x16c/0x1f0 [ 950.935899][T18695] should_fail_ex+0x512/0x640 [ 950.935958][T18695] _copy_from_user+0x2e/0xd0 [ 950.936014][T18695] do_handle_open+0x61b/0xb70 [ 950.936068][T18695] ? __pfx_do_handle_open+0x10/0x10 [ 950.936117][T18695] ? __x64_sys_futex+0x1e0/0x4c0 [ 950.936163][T18695] ? xfd_validate_state+0x5d/0x180 [ 950.936197][T18695] ? rcu_is_watching+0x12/0xc0 [ 950.936240][T18695] ? do_syscall_64+0xcd/0x230 [ 950.936289][T18695] do_syscall_64+0xcd/0x230 [ 950.936342][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.936377][T18695] RIP: 0033:0x7fb8fad8e969 [ 950.936404][T18695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.936439][T18695] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 950.936471][T18695] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 950.936497][T18695] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 950.936519][T18695] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 950.936540][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.936563][T18695] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 950.936606][T18695] [ 951.469554][T10506] EXT4-fs error: 3 callbacks suppressed [ 951.469718][T10506] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 951.495108][T10506] EXT4-fs (sda1): This should not happen!! Data will be lost [ 951.495108][T10506] [ 951.516891][T17681] ovs_: left promiscuous mode [ 952.097032][T10510] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 952.152597][T10510] EXT4-fs (sda1): This should not happen!! Data will be lost [ 952.152597][T10510] [ 953.178157][T18477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 953.333946][T18477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 953.379124][T18477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 953.994379][T18477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 954.327079][T17681] hsr_slave_0: left promiscuous mode [ 954.354587][T17681] hsr_slave_1: left promiscuous mode [ 954.423495][T17681] veth1_macvtap: left promiscuous mode [ 954.446522][T17681] veth0_macvtap: left promiscuous mode [ 954.452767][T17681] veth1_vlan: left promiscuous mode [ 954.468711][T10493] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 954.511020][T17681] veth0_vlan: left promiscuous mode [ 954.516275][T18743] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input64 [ 954.539851][T10493] EXT4-fs (sda1): This should not happen!! Data will be lost [ 954.539851][T10493] [ 956.076885][T17681] team0 (unregistering): Port device team_slave_1 removed [ 956.239658][T17681] team0 (unregistering): Port device team_slave_0 removed [ 956.270810][T10493] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 956.326921][T10493] EXT4-fs (sda1): This should not happen!! Data will be lost [ 956.326921][T10493] [ 958.137433][T18477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.354419][T18477] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.516607][T18357] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.524557][T18357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.583228][T18357] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.591149][T18357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.897649][T18800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 958.929516][T18800] FAULT_INJECTION: forcing a failure. [ 958.929516][T18800] name failslab, interval 1, probability 0, space 0, times 0 [ 958.975276][T18800] CPU: 0 UID: 0 PID: 18800 Comm: syz.0.2458 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 958.975333][T18800] Tainted: [U]=USER [ 958.975346][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.975366][T18800] Call Trace: [ 958.975394][T18800] [ 958.975408][T18800] dump_stack_lvl+0x16c/0x1f0 [ 958.975467][T18800] should_fail_ex+0x512/0x640 [ 958.975519][T18800] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 958.975564][T18800] should_failslab+0xc2/0x120 [ 958.975620][T18800] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 958.975660][T18800] ? security_file_alloc+0x34/0x2b0 [ 958.975714][T18800] security_file_alloc+0x34/0x2b0 [ 958.975762][T18800] init_file+0x93/0x4c0 [ 958.975805][T18800] alloc_empty_file+0x73/0x1e0 [ 958.975851][T18800] path_openat+0xe0/0x2d40 [ 958.975879][T18800] ? __x64_sys_openat+0x174/0x210 [ 958.975923][T18800] ? do_syscall_64+0xcd/0x230 [ 958.975973][T18800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.976023][T18800] ? __pfx_path_openat+0x10/0x10 [ 958.976069][T18800] do_filp_open+0x20b/0x470 [ 958.976103][T18800] ? __pfx_do_filp_open+0x10/0x10 [ 958.976169][T18800] ? alloc_fd+0x471/0x7d0 [ 958.976218][T18800] do_sys_openat2+0x11b/0x1d0 [ 958.976265][T18800] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.976315][T18800] ? __pfx___might_resched+0x10/0x10 [ 958.976365][T18800] __x64_sys_openat+0x174/0x210 [ 958.976413][T18800] ? __pfx___x64_sys_openat+0x10/0x10 [ 958.976463][T18800] ? rcu_is_watching+0x12/0xc0 [ 958.976507][T18800] do_syscall_64+0xcd/0x230 [ 958.976563][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.976596][T18800] RIP: 0033:0x7fd12cf8e969 [ 958.976622][T18800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.976656][T18800] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 958.976687][T18800] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 958.976710][T18800] RDX: 0000000000000800 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 958.976731][T18800] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 958.976752][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.976772][T18800] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 958.976815][T18800] [ 959.242216][T18804] EXT4-fs error: 1 callbacks suppressed [ 959.704386][T18813] mtrr: base(0x40000) is not aligned on a size(0x0000) boundary [ 959.969091][T18477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.777456][T18477] veth0_vlan: entered promiscuous mode [ 960.814151][T18477] veth1_vlan: entered promiscuous mode [ 960.887601][T18477] veth0_macvtap: entered promiscuous mode [ 960.914827][T18477] veth1_macvtap: entered promiscuous mode [ 960.959123][T18477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.988465][T18477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.012968][T18477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.025711][T18477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.047438][T18477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.059309][T18477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.245184][T18357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.279939][T18357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.344603][T18357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.363246][T18357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.889782][T18867] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 965.573666][T18886] Invalid ELF header magic: != ELF [ 966.068687][T18902] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 966.495535][T18919] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 966.527781][T18918] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 966.568566][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'. [ 968.229333][T18948] FAULT_INJECTION: forcing a failure. [ 968.229333][T18948] name failslab, interval 1, probability 0, space 0, times 0 [ 968.274151][T18948] CPU: 1 UID: 0 PID: 18948 Comm: syz.6.2487 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 968.274231][T18948] Tainted: [U]=USER [ 968.274245][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 968.274266][T18948] Call Trace: [ 968.274295][T18948] [ 968.274310][T18948] dump_stack_lvl+0x16c/0x1f0 [ 968.274366][T18948] should_fail_ex+0x512/0x640 [ 968.274422][T18948] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 968.274470][T18948] should_failslab+0xc2/0x120 [ 968.274514][T18948] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 968.274555][T18948] ? __kernfs_new_node+0xd2/0x8a0 [ 968.274589][T18948] __kernfs_new_node+0xd2/0x8a0 [ 968.274616][T18948] ? __pfx___kernfs_new_node+0x10/0x10 [ 968.274648][T18948] ? find_held_lock+0x2b/0x80 [ 968.274673][T18948] ? kernfs_root+0xee/0x2a0 [ 968.274702][T18948] kernfs_new_node+0x13c/0x1e0 [ 968.274737][T18948] __kernfs_create_file+0x53/0x350 [ 968.274775][T18948] sysfs_add_file_mode_ns+0x207/0x3c0 [ 968.274822][T18948] internal_create_group+0x578/0xf30 [ 968.274855][T18948] ? __pfx_internal_create_group+0x10/0x10 [ 968.274886][T18948] ? kernfs_create_link+0x1bd/0x240 [ 968.274925][T18948] internal_create_groups+0x9d/0x150 [ 968.274953][T18948] device_add+0x77f/0x1a70 [ 968.274992][T18948] ? __pfx_device_add+0x10/0x10 [ 968.275032][T18948] ? do_raw_spin_lock+0x12c/0x2b0 [ 968.275075][T18948] add_disk_fwnode+0x468/0x13a0 [ 968.275120][T18948] zram_add+0x494/0x6c0 [ 968.275155][T18948] ? __pfx_zram_add+0x10/0x10 [ 968.275208][T18948] ? __pfx_class_attr_show+0x10/0x10 [ 968.275241][T18948] ? __pfx_hot_add_show+0x10/0x10 [ 968.275284][T18948] ? __pfx_hot_add_show+0x10/0x10 [ 968.275318][T18948] ? __pfx_class_attr_show+0x10/0x10 [ 968.275351][T18948] hot_add_show+0x21/0x80 [ 968.275386][T18948] class_attr_show+0x72/0xa0 [ 968.275428][T18948] sysfs_kf_seq_show+0x213/0x3e0 [ 968.275471][T18948] seq_read_iter+0x509/0x12c0 [ 968.275522][T18948] kernfs_fop_read_iter+0x40f/0x5a0 [ 968.275555][T18948] ? rw_verify_area+0xcf/0x680 [ 968.275596][T18948] vfs_read+0x8cb/0xc70 [ 968.275623][T18948] ? __pfx___mutex_lock+0x10/0x10 [ 968.275661][T18948] ? __pfx_vfs_read+0x10/0x10 [ 968.275706][T18948] ksys_read+0x12a/0x240 [ 968.275730][T18948] ? __pfx_ksys_read+0x10/0x10 [ 968.275752][T18948] ? rcu_is_watching+0x12/0xc0 [ 968.275784][T18948] do_syscall_64+0xcd/0x230 [ 968.275824][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.275849][T18948] RIP: 0033:0x7fb8fad8e969 [ 968.275869][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.275893][T18948] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.275916][T18948] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 968.275932][T18948] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 968.275948][T18948] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 968.275963][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.275978][T18948] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 968.276010][T18948] [ 968.618207][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.836964][T19002] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 970.918663][T19002] FAULT_INJECTION: forcing a failure. [ 970.918663][T19002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.955356][T19002] CPU: 0 UID: 0 PID: 19002 Comm: syz.1.2498 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 970.955418][T19002] Tainted: [U]=USER [ 970.955431][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 970.955452][T19002] Call Trace: [ 970.955463][T19002] [ 970.955477][T19002] dump_stack_lvl+0x16c/0x1f0 [ 970.955537][T19002] should_fail_ex+0x512/0x640 [ 970.955600][T19002] strncpy_from_user+0x3b/0x2e0 [ 970.955651][T19002] getname_flags.part.0+0x8f/0x550 [ 970.955705][T19002] getname_flags+0x93/0xf0 [ 970.955758][T19002] do_sys_openat2+0xb8/0x1d0 [ 970.955803][T19002] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.955849][T19002] ? __pfx___might_resched+0x10/0x10 [ 970.955909][T19002] __x64_sys_openat+0x174/0x210 [ 970.955962][T19002] ? __pfx___x64_sys_openat+0x10/0x10 [ 970.956009][T19002] ? rcu_is_watching+0x12/0xc0 [ 970.956054][T19002] do_syscall_64+0xcd/0x230 [ 970.956106][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.956141][T19002] RIP: 0033:0x7f487498e969 [ 970.956169][T19002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.956202][T19002] RSP: 002b:00007f4875790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.956235][T19002] RAX: ffffffffffffffda RBX: 00007f4874bb5fa0 RCX: 00007f487498e969 [ 970.956259][T19002] RDX: 0000000000028102 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 970.956281][T19002] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 970.956302][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.956323][T19002] R13: 0000000000000000 R14: 00007f4874bb5fa0 R15: 00007ffc96e878a8 [ 970.956367][T19002] [ 971.511697][T19014] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 971.626401][T19015] FAULT_INJECTION: forcing a failure. [ 971.626401][T19015] name failslab, interval 1, probability 0, space 0, times 0 [ 971.665483][T19015] CPU: 1 UID: 0 PID: 19015 Comm: syz.0.2501 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 971.665536][T19015] Tainted: [U]=USER [ 971.665547][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.665567][T19015] Call Trace: [ 971.665578][T19015] [ 971.665591][T19015] dump_stack_lvl+0x16c/0x1f0 [ 971.665646][T19015] should_fail_ex+0x512/0x640 [ 971.665695][T19015] ? fs_reclaim_acquire+0xae/0x150 [ 971.665749][T19015] ? tomoyo_encode2+0x100/0x3e0 [ 971.665795][T19015] should_failslab+0xc2/0x120 [ 971.665860][T19015] __kmalloc_noprof+0xd2/0x510 [ 971.665908][T19015] tomoyo_encode2+0x100/0x3e0 [ 971.665962][T19015] tomoyo_encode+0x29/0x50 [ 971.666009][T19015] tomoyo_realpath_from_path+0x18f/0x6e0 [ 971.666070][T19015] tomoyo_check_open_permission+0x2ab/0x3c0 [ 971.666114][T19015] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 971.666210][T19015] ? do_raw_spin_lock+0x12c/0x2b0 [ 971.666273][T19015] tomoyo_file_open+0x6b/0x90 [ 971.666307][T19015] security_file_open+0x84/0x1e0 [ 971.666356][T19015] do_dentry_open+0x596/0x1c10 [ 971.666404][T19015] vfs_open+0x82/0x3f0 [ 971.666453][T19015] path_openat+0x1e5e/0x2d40 [ 971.666504][T19015] ? __pfx_path_openat+0x10/0x10 [ 971.666549][T19015] do_filp_open+0x20b/0x470 [ 971.666584][T19015] ? __pfx_do_filp_open+0x10/0x10 [ 971.666633][T19015] ? __pfx_kfree_link+0x10/0x10 [ 971.666691][T19015] ? alloc_fd+0x471/0x7d0 [ 971.666733][T19015] do_sys_openat2+0x11b/0x1d0 [ 971.666779][T19015] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.666843][T19015] __x64_sys_openat+0x174/0x210 [ 971.666888][T19015] ? __pfx___x64_sys_openat+0x10/0x10 [ 971.666940][T19015] ? rcu_is_watching+0x12/0xc0 [ 971.666984][T19015] do_syscall_64+0xcd/0x230 [ 971.667040][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.667074][T19015] RIP: 0033:0x7fd12cf8e969 [ 971.667101][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.667143][T19015] RSP: 002b:00007fd12de90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.667177][T19015] RAX: ffffffffffffffda RBX: 00007fd12d1b6080 RCX: 00007fd12cf8e969 [ 971.667201][T19015] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 971.667223][T19015] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 971.667245][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.667267][T19015] R13: 0000000000000000 R14: 00007fd12d1b6080 R15: 00007ffff0cac6a8 [ 971.667308][T19015] [ 971.667396][T19015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 973.169152][T19037] FAULT_INJECTION: forcing a failure. [ 973.169152][T19037] name failslab, interval 1, probability 0, space 0, times 0 [ 973.221398][T19037] CPU: 0 UID: 0 PID: 19037 Comm: syz.1.2507 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 973.221457][T19037] Tainted: [U]=USER [ 973.221468][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.221490][T19037] Call Trace: [ 973.221502][T19037] [ 973.221515][T19037] dump_stack_lvl+0x16c/0x1f0 [ 973.221577][T19037] should_fail_ex+0x512/0x640 [ 973.221628][T19037] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 973.221669][T19037] should_failslab+0xc2/0x120 [ 973.221713][T19037] __kmalloc_cache_noprof+0x6a/0x3e0 [ 973.221749][T19037] ? alloc_pipe_info+0x10e/0x590 [ 973.221790][T19037] alloc_pipe_info+0x10e/0x590 [ 973.221833][T19037] splice_direct_to_actor+0x77d/0xa30 [ 973.221888][T19037] ? __pfx_direct_splice_actor+0x10/0x10 [ 973.221955][T19037] ? __pfx_aa_file_perm+0x10/0x10 [ 973.222008][T19037] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 973.222074][T19037] do_splice_direct+0x174/0x240 [ 973.222126][T19037] ? __pfx_do_splice_direct+0x10/0x10 [ 973.222178][T19037] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 973.222232][T19037] ? bpf_lsm_file_permission+0x9/0x10 [ 973.222262][T19037] ? security_file_permission+0x71/0x210 [ 973.222311][T19037] ? rw_verify_area+0xcf/0x680 [ 973.222367][T19037] do_sendfile+0xafd/0xe50 [ 973.222406][T19037] ? __pfx_do_sendfile+0x10/0x10 [ 973.222445][T19037] ? __x64_sys_futex+0x1e0/0x4c0 [ 973.222482][T19037] ? __x64_sys_futex+0x1e9/0x4c0 [ 973.222524][T19037] __x64_sys_sendfile64+0x1d8/0x220 [ 973.222566][T19037] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 973.222607][T19037] ? rcu_is_watching+0x12/0xc0 [ 973.222650][T19037] do_syscall_64+0xcd/0x230 [ 973.222705][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.222738][T19037] RIP: 0033:0x7f487498e969 [ 973.222764][T19037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.222799][T19037] RSP: 002b:00007f487576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 973.222831][T19037] RAX: ffffffffffffffda RBX: 00007f4874bb6080 RCX: 00007f487498e969 [ 973.222854][T19037] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 973.222874][T19037] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 973.222895][T19037] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 973.222925][T19037] R13: 0000000000000000 R14: 00007f4874bb6080 R15: 00007ffc96e878a8 [ 973.222968][T19037] [ 974.201615][ T30] audit: type=1800 audit(4294967802.781:32): pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2507" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 975.627814][T19072] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.704206][T19072] FAULT_INJECTION: forcing a failure. [ 975.704206][T19072] name failslab, interval 1, probability 0, space 0, times 0 [ 975.763425][T19072] CPU: 1 UID: 0 PID: 19072 Comm: syz.0.2513 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 975.763486][T19072] Tainted: [U]=USER [ 975.763498][T19072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 975.763517][T19072] Call Trace: [ 975.763528][T19072] [ 975.763541][T19072] dump_stack_lvl+0x16c/0x1f0 [ 975.763618][T19072] should_fail_ex+0x512/0x640 [ 975.763667][T19072] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 975.763714][T19072] should_failslab+0xc2/0x120 [ 975.763758][T19072] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 975.763796][T19072] ? __pfx_apparmor_file_open+0x10/0x10 [ 975.763843][T19072] ? proc_reg_open+0x21d/0x610 [ 975.763882][T19072] proc_reg_open+0x21d/0x610 [ 975.763918][T19072] do_dentry_open+0x741/0x1c10 [ 975.763956][T19072] ? __pfx_proc_reg_open+0x10/0x10 [ 975.763999][T19072] vfs_open+0x82/0x3f0 [ 975.764052][T19072] path_openat+0x1e5e/0x2d40 [ 975.764104][T19072] ? __pfx_path_openat+0x10/0x10 [ 975.764152][T19072] do_filp_open+0x20b/0x470 [ 975.764188][T19072] ? __pfx_do_filp_open+0x10/0x10 [ 975.764239][T19072] ? __pfx_kfree_link+0x10/0x10 [ 975.764298][T19072] ? alloc_fd+0x471/0x7d0 [ 975.764341][T19072] do_sys_openat2+0x11b/0x1d0 [ 975.764388][T19072] ? __pfx_do_sys_openat2+0x10/0x10 [ 975.764465][T19072] __x64_sys_openat+0x174/0x210 [ 975.764517][T19072] ? __pfx___x64_sys_openat+0x10/0x10 [ 975.764570][T19072] ? rcu_is_watching+0x12/0xc0 [ 975.764616][T19072] do_syscall_64+0xcd/0x230 [ 975.764684][T19072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.764719][T19072] RIP: 0033:0x7fd12cf8e969 [ 975.764746][T19072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.764780][T19072] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 975.764812][T19072] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 975.764834][T19072] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 975.764856][T19072] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 975.764877][T19072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.764898][T19072] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 975.764940][T19072] [ 976.022476][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.743427][T19100] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 978.307502][T19109] EXT4-fs error: 1 callbacks suppressed [ 978.309577][T19109] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 978.350825][T19109] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 978.392490][T19109] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 979.004232][T19114] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 979.659875][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2526'. [ 983.264235][T19185] FAULT_INJECTION: forcing a failure. [ 983.264235][T19185] name failslab, interval 1, probability 0, space 0, times 0 [ 983.295946][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.1.2542 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 983.296005][T19185] Tainted: [U]=USER [ 983.296016][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 983.296036][T19185] Call Trace: [ 983.296047][T19185] [ 983.296059][T19185] dump_stack_lvl+0x16c/0x1f0 [ 983.296114][T19185] should_fail_ex+0x512/0x640 [ 983.296160][T19185] ? fs_reclaim_acquire+0xae/0x150 [ 983.296215][T19185] should_failslab+0xc2/0x120 [ 983.296257][T19185] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 983.296297][T19185] ? security_inode_alloc+0x3b/0x2b0 [ 983.296342][T19185] security_inode_alloc+0x3b/0x2b0 [ 983.296383][T19185] inode_init_always_gfp+0xce4/0x1030 [ 983.296422][T19185] alloc_inode+0x86/0x240 [ 983.296464][T19185] iget_locked+0x2e4/0x830 [ 983.296511][T19185] ? __pfx_iget_locked+0x10/0x10 [ 983.296557][T19185] ? find_held_lock+0x2b/0x80 [ 983.296591][T19185] ? kernfs_root+0xee/0x2a0 [ 983.296632][T19185] kernfs_get_inode+0x48/0x460 [ 983.296685][T19185] kernfs_iop_lookup+0x1a7/0x2d0 [ 983.296722][T19185] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 983.296754][T19185] lookup_open.isra.0+0x4d7/0x1580 [ 983.296814][T19185] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 983.296888][T19185] ? mnt_get_write_access+0x20c/0x300 [ 983.296940][T19185] path_openat+0x905/0x2d40 [ 983.296996][T19185] ? __pfx_path_openat+0x10/0x10 [ 983.297043][T19185] do_filp_open+0x20b/0x470 [ 983.297077][T19185] ? __pfx_do_filp_open+0x10/0x10 [ 983.297141][T19185] ? alloc_fd+0x471/0x7d0 [ 983.297182][T19185] do_sys_openat2+0x11b/0x1d0 [ 983.297226][T19185] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.297288][T19185] __x64_sys_openat+0x174/0x210 [ 983.297333][T19185] ? __pfx___x64_sys_openat+0x10/0x10 [ 983.297380][T19185] ? rcu_is_watching+0x12/0xc0 [ 983.297425][T19185] do_syscall_64+0xcd/0x230 [ 983.297477][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.297509][T19185] RIP: 0033:0x7f487498e969 [ 983.297534][T19185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.297565][T19185] RSP: 002b:00007f4875790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 983.297595][T19185] RAX: ffffffffffffffda RBX: 00007f4874bb5fa0 RCX: 00007f487498e969 [ 983.297616][T19185] RDX: 00000000000207a1 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 983.297636][T19185] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 983.297656][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.297676][T19185] R13: 0000000000000000 R14: 00007f4874bb5fa0 R15: 00007ffc96e878a8 [ 983.297717][T19185] [ 983.698269][T19189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 983.735429][T19191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 984.072840][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 984.125040][T19200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 984.906788][T19209] FAULT_INJECTION: forcing a failure. [ 984.906788][T19209] name failslab, interval 1, probability 0, space 0, times 0 [ 984.921005][T19209] CPU: 0 UID: 0 PID: 19209 Comm: syz.0.2548 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 984.921059][T19209] Tainted: [U]=USER [ 984.921070][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.921090][T19209] Call Trace: [ 984.921102][T19209] [ 984.921114][T19209] dump_stack_lvl+0x16c/0x1f0 [ 984.921170][T19209] should_fail_ex+0x512/0x640 [ 984.921220][T19209] ? fs_reclaim_acquire+0xae/0x150 [ 984.921277][T19209] should_failslab+0xc2/0x120 [ 984.921321][T19209] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 984.921362][T19209] ? security_inode_alloc+0x3b/0x2b0 [ 984.921411][T19209] security_inode_alloc+0x3b/0x2b0 [ 984.921452][T19209] inode_init_always_gfp+0xce4/0x1030 [ 984.921493][T19209] alloc_inode+0x86/0x240 [ 984.921535][T19209] sock_alloc+0x40/0x280 [ 984.921582][T19209] __sock_create+0xc1/0x8d0 [ 984.921653][T19209] inet_ctl_sock_create+0x94/0x230 [ 984.921705][T19209] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 984.921754][T19209] ? lockdep_init_map_type+0x5c/0x280 [ 984.921824][T19209] ? do_init_timer+0xc9/0x110 [ 984.921866][T19209] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 984.921921][T19209] sctp_ctrlsock_init+0x40/0xf0 [ 984.921973][T19209] ops_init+0x1df/0x5f0 [ 984.922022][T19209] setup_net+0x21e/0x850 [ 984.922074][T19209] ? __pfx_setup_net+0x10/0x10 [ 984.922118][T19209] ? lockdep_init_map_type+0x5c/0x280 [ 984.922166][T19209] ? __pfx_down_read_killable+0x10/0x10 [ 984.922208][T19209] ? debug_mutex_init+0x37/0x70 [ 984.922248][T19209] copy_net_ns+0x2a6/0x5f0 [ 984.922304][T19209] create_new_namespaces+0x3ea/0xad0 [ 984.922355][T19209] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 984.922402][T19209] ksys_unshare+0x45b/0xa40 [ 984.922453][T19209] ? __pfx_ksys_unshare+0x10/0x10 [ 984.922500][T19209] ? xfd_validate_state+0x5d/0x180 [ 984.922536][T19209] ? rcu_is_watching+0x12/0xc0 [ 984.922581][T19209] __x64_sys_unshare+0x31/0x40 [ 984.922650][T19209] do_syscall_64+0xcd/0x230 [ 984.922707][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.922741][T19209] RIP: 0033:0x7fd12cf8e969 [ 984.922768][T19209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.922821][T19209] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 984.922853][T19209] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 984.922877][T19209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 984.922900][T19209] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 984.922922][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.922943][T19209] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 984.922986][T19209] [ 984.923210][T19209] socket: no more sockets [ 986.926191][T19242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 987.413851][T19253] binder: 19252:19253 unknown command 3 [ 987.460053][T19253] binder: 19252:19253 ioctl c0306201 0 returned -22 [ 988.631550][T19277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2561'. [ 989.716000][T19281] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 990.320467][T19281] FAULT_INJECTION: forcing a failure. [ 990.320467][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 990.376251][T19281] CPU: 1 UID: 0 PID: 19281 Comm: syz.6.2563 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 990.376308][T19281] Tainted: [U]=USER [ 990.376319][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.376341][T19281] Call Trace: [ 990.376359][T19281] [ 990.376372][T19281] dump_stack_lvl+0x16c/0x1f0 [ 990.376430][T19281] should_fail_ex+0x512/0x640 [ 990.376481][T19281] ? fs_reclaim_acquire+0xae/0x150 [ 990.376557][T19281] should_failslab+0xc2/0x120 [ 990.376602][T19281] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 990.376645][T19281] ? security_inode_alloc+0x3b/0x2b0 [ 990.376692][T19281] security_inode_alloc+0x3b/0x2b0 [ 990.376735][T19281] inode_init_always_gfp+0xce4/0x1030 [ 990.376781][T19281] alloc_inode+0x86/0x240 [ 990.376826][T19281] new_inode+0x22/0x1c0 [ 990.376867][T19281] ? proc_lookup_de+0x217/0x320 [ 990.376912][T19281] proc_get_inode+0x1d/0x780 [ 990.376953][T19281] proc_lookup_de+0x253/0x320 [ 990.376998][T19281] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 990.377040][T19281] proc_tgid_net_lookup+0x75/0x120 [ 990.377085][T19281] lookup_open.isra.0+0x4d7/0x1580 [ 990.377148][T19281] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 990.377228][T19281] ? lookup_fast+0x156/0x610 [ 990.377287][T19281] path_openat+0x905/0x2d40 [ 990.377339][T19281] ? __pfx_path_openat+0x10/0x10 [ 990.377392][T19281] do_filp_open+0x20b/0x470 [ 990.377429][T19281] ? __pfx_do_filp_open+0x10/0x10 [ 990.377481][T19281] ? __pfx_kfree_link+0x10/0x10 [ 990.377541][T19281] ? alloc_fd+0x471/0x7d0 [ 990.377585][T19281] do_sys_openat2+0x11b/0x1d0 [ 990.377634][T19281] ? __pfx_do_sys_openat2+0x10/0x10 [ 990.377702][T19281] __x64_sys_openat+0x174/0x210 [ 990.377753][T19281] ? __pfx___x64_sys_openat+0x10/0x10 [ 990.377805][T19281] ? rcu_is_watching+0x12/0xc0 [ 990.377852][T19281] do_syscall_64+0xcd/0x230 [ 990.377909][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.377945][T19281] RIP: 0033:0x7fb8fad8e969 [ 990.377973][T19281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.378009][T19281] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 990.378043][T19281] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 990.378067][T19281] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 990.378105][T19281] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 990.378128][T19281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.378150][T19281] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 990.378195][T19281] [ 990.967406][T19287] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 993.358562][T19339] FAULT_INJECTION: forcing a failure. [ 993.358562][T19339] name failslab, interval 1, probability 0, space 0, times 0 [ 993.399261][T19339] CPU: 0 UID: 0 PID: 19339 Comm: syz.4.2575 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 993.399320][T19339] Tainted: [U]=USER [ 993.399331][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.399349][T19339] Call Trace: [ 993.399360][T19339] [ 993.399372][T19339] dump_stack_lvl+0x16c/0x1f0 [ 993.399429][T19339] should_fail_ex+0x512/0x640 [ 993.399480][T19339] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 993.399532][T19339] should_failslab+0xc2/0x120 [ 993.399577][T19339] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 993.399620][T19339] ? sk_prot_alloc+0x60/0x2a0 [ 993.399678][T19339] sk_prot_alloc+0x60/0x2a0 [ 993.399732][T19339] sk_alloc+0x36/0xc20 [ 993.399773][T19339] inet6_create+0x381/0x1300 [ 993.399816][T19339] ? inet6_create+0x7f/0x1300 [ 993.399861][T19339] __sock_create+0x335/0x8d0 [ 993.399924][T19339] inet_ctl_sock_create+0x94/0x230 [ 993.399977][T19339] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 993.400025][T19339] ? lockdep_init_map_type+0x5c/0x280 [ 993.400075][T19339] ? do_init_timer+0xc9/0x110 [ 993.400117][T19339] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 993.400170][T19339] sctp_ctrlsock_init+0x40/0xf0 [ 993.400229][T19339] ops_init+0x1df/0x5f0 [ 993.400280][T19339] setup_net+0x21e/0x850 [ 993.400330][T19339] ? __pfx_setup_net+0x10/0x10 [ 993.400374][T19339] ? lockdep_init_map_type+0x5c/0x280 [ 993.400421][T19339] ? __pfx_down_read_killable+0x10/0x10 [ 993.400462][T19339] ? debug_mutex_init+0x37/0x70 [ 993.400501][T19339] copy_net_ns+0x2a6/0x5f0 [ 993.400556][T19339] create_new_namespaces+0x3ea/0xad0 [ 993.400607][T19339] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 993.400653][T19339] ksys_unshare+0x45b/0xa40 [ 993.400703][T19339] ? __pfx_ksys_unshare+0x10/0x10 [ 993.400749][T19339] ? xfd_validate_state+0x5d/0x180 [ 993.400785][T19339] ? rcu_is_watching+0x12/0xc0 [ 993.400830][T19339] __x64_sys_unshare+0x31/0x40 [ 993.400878][T19339] do_syscall_64+0xcd/0x230 [ 993.400934][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.400969][T19339] RIP: 0033:0x7efeca78e969 [ 993.400997][T19339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.401033][T19339] RSP: 002b:00007efecb524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 993.401066][T19339] RAX: ffffffffffffffda RBX: 00007efeca9b6080 RCX: 00007efeca78e969 [ 993.401090][T19339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 993.401110][T19339] RBP: 00007efeca810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 993.401131][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.401153][T19339] R13: 0000000000000000 R14: 00007efeca9b6080 R15: 00007ffec97867b8 [ 993.401205][T19339] [ 993.786410][T19337] random: crng reseeded on system resumption [ 994.134253][ T30] audit: type=1800 audit(4294967822.731:33): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2577" name="dbroot" dev="configfs" ino=69286 res=0 errno=0 [ 995.777209][T19381] binder: 19380:19381 unknown command 3 [ 995.790564][T19382] sysfs_service_op_show: Client not running :-5: [ 995.811899][T19381] binder: 19380:19381 ioctl c0306201 0 returned -22 [ 995.835953][T19376] sysfs_service_op_show: Client not running :-5: [ 996.386524][T19397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2586'. [ 997.977960][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.985141][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.746815][T19438] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 998.867029][T19444] openvswitch: netlink: IP tunnel dst address not specified [ 998.934092][T19450] FAULT_INJECTION: forcing a failure. [ 998.934092][T19450] name failslab, interval 1, probability 0, space 0, times 0 [ 998.990845][T19450] CPU: 1 UID: 0 PID: 19450 Comm: syz.1.2595 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 998.990902][T19450] Tainted: [U]=USER [ 998.990915][T19450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.990936][T19450] Call Trace: [ 998.990948][T19450] [ 998.990961][T19450] dump_stack_lvl+0x16c/0x1f0 [ 998.991020][T19450] should_fail_ex+0x512/0x640 [ 998.991073][T19450] ? fs_reclaim_acquire+0xae/0x150 [ 998.991132][T19450] should_failslab+0xc2/0x120 [ 998.991176][T19450] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 998.991219][T19450] ? security_inode_alloc+0x3b/0x2b0 [ 998.991267][T19450] security_inode_alloc+0x3b/0x2b0 [ 998.991310][T19450] inode_init_always_gfp+0xce4/0x1030 [ 998.991363][T19450] alloc_inode+0x86/0x240 [ 998.991408][T19450] new_inode+0x22/0x1c0 [ 998.991449][T19450] ? proc_lookup_de+0x217/0x320 [ 998.991495][T19450] proc_get_inode+0x1d/0x780 [ 998.991535][T19450] proc_lookup_de+0x253/0x320 [ 998.991583][T19450] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 998.991627][T19450] proc_tgid_net_lookup+0x75/0x120 [ 998.991670][T19450] lookup_open.isra.0+0x4d7/0x1580 [ 998.991728][T19450] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 998.991805][T19450] ? lookup_fast+0x156/0x610 [ 998.991862][T19450] path_openat+0x905/0x2d40 [ 998.991912][T19450] ? __pfx_path_openat+0x10/0x10 [ 998.991960][T19450] do_filp_open+0x20b/0x470 [ 998.991995][T19450] ? __pfx_do_filp_open+0x10/0x10 [ 998.992047][T19450] ? __pfx_kfree_link+0x10/0x10 [ 998.992108][T19450] ? alloc_fd+0x471/0x7d0 [ 998.992154][T19450] do_sys_openat2+0x11b/0x1d0 [ 998.992202][T19450] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.992269][T19450] __x64_sys_openat+0x174/0x210 [ 998.992317][T19450] ? __pfx___x64_sys_openat+0x10/0x10 [ 998.992378][T19450] ? rcu_is_watching+0x12/0xc0 [ 998.992426][T19450] do_syscall_64+0xcd/0x230 [ 998.992482][T19450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.992517][T19450] RIP: 0033:0x7f487498e969 [ 998.992545][T19450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.992581][T19450] RSP: 002b:00007f487576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 998.992615][T19450] RAX: ffffffffffffffda RBX: 00007f4874bb6080 RCX: 00007f487498e969 [ 998.992639][T19450] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 998.992661][T19450] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 998.992682][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.992704][T19450] R13: 0000000000000000 R14: 00007f4874bb6080 R15: 00007ffc96e878a8 [ 998.992750][T19450] [ 1000.333436][T19465] Invalid ELF header magic: != ELF [ 1000.523206][T19485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1000.682755][T19465] Invalid ELF header magic: != ELF [ 1000.731611][T19493] FAULT_INJECTION: forcing a failure. [ 1000.731611][T19493] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.794977][T19493] CPU: 1 UID: 0 PID: 19493 Comm: syz.0.2602 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1000.795036][T19493] Tainted: [U]=USER [ 1000.795048][T19493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.795069][T19493] Call Trace: [ 1000.795081][T19493] [ 1000.795095][T19493] dump_stack_lvl+0x16c/0x1f0 [ 1000.795155][T19493] should_fail_ex+0x512/0x640 [ 1000.795220][T19493] ? fs_reclaim_acquire+0xae/0x150 [ 1000.795279][T19493] ? tomoyo_encode2+0x100/0x3e0 [ 1000.795330][T19493] should_failslab+0xc2/0x120 [ 1000.795375][T19493] __kmalloc_noprof+0xd2/0x510 [ 1000.795425][T19493] tomoyo_encode2+0x100/0x3e0 [ 1000.795479][T19493] tomoyo_encode+0x29/0x50 [ 1000.795529][T19493] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1000.795592][T19493] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1000.795640][T19493] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1000.795725][T19493] ? do_raw_spin_lock+0x12c/0x2b0 [ 1000.795792][T19493] tomoyo_file_open+0x6b/0x90 [ 1000.795829][T19493] security_file_open+0x84/0x1e0 [ 1000.795881][T19493] do_dentry_open+0x596/0x1c10 [ 1000.795932][T19493] vfs_open+0x82/0x3f0 [ 1000.795985][T19493] path_openat+0x1e5e/0x2d40 [ 1000.796037][T19493] ? __pfx_path_openat+0x10/0x10 [ 1000.796084][T19493] do_filp_open+0x20b/0x470 [ 1000.796121][T19493] ? __pfx_do_filp_open+0x10/0x10 [ 1000.796173][T19493] ? __pfx_kfree_link+0x10/0x10 [ 1000.796242][T19493] ? alloc_fd+0x471/0x7d0 [ 1000.796286][T19493] do_sys_openat2+0x11b/0x1d0 [ 1000.796333][T19493] ? __pfx_do_sys_openat2+0x10/0x10 [ 1000.796398][T19493] __x64_sys_openat+0x174/0x210 [ 1000.796448][T19493] ? __pfx___x64_sys_openat+0x10/0x10 [ 1000.796507][T19493] ? rcu_is_watching+0x12/0xc0 [ 1000.796556][T19493] do_syscall_64+0xcd/0x230 [ 1000.796621][T19493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.796658][T19493] RIP: 0033:0x7fd12cf8e969 [ 1000.796687][T19493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.796721][T19493] RSP: 002b:00007fd12de6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1000.796755][T19493] RAX: ffffffffffffffda RBX: 00007fd12d1b6160 RCX: 00007fd12cf8e969 [ 1000.796779][T19493] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1000.796801][T19493] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1000.796820][T19493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.796837][T19493] R13: 0000000000000000 R14: 00007fd12d1b6160 R15: 00007ffff0cac6a8 [ 1000.796878][T19493] [ 1000.796919][T19493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1001.057412][T19465] Invalid ELF header magic: != ELF [ 1001.706095][T19511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2606'. [ 1002.072195][T19515] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1002.268739][T19517] FAULT_INJECTION: forcing a failure. [ 1002.268739][T19517] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.283531][T19517] CPU: 1 UID: 0 PID: 19517 Comm: syz.6.2608 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1002.283585][T19517] Tainted: [U]=USER [ 1002.283598][T19517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.283617][T19517] Call Trace: [ 1002.283628][T19517] [ 1002.283641][T19517] dump_stack_lvl+0x16c/0x1f0 [ 1002.283700][T19517] should_fail_ex+0x512/0x640 [ 1002.283752][T19517] ? fs_reclaim_acquire+0xae/0x150 [ 1002.283809][T19517] should_failslab+0xc2/0x120 [ 1002.283855][T19517] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1002.283894][T19517] ? security_inode_alloc+0x3b/0x2b0 [ 1002.283942][T19517] security_inode_alloc+0x3b/0x2b0 [ 1002.283984][T19517] inode_init_always_gfp+0xce4/0x1030 [ 1002.284025][T19517] alloc_inode+0x86/0x240 [ 1002.284066][T19517] new_inode+0x22/0x1c0 [ 1002.284113][T19517] proc_pid_make_inode+0x22/0x160 [ 1002.284147][T19517] proc_pident_instantiate+0x85/0x320 [ 1002.284188][T19517] proc_pident_lookup+0x21d/0x290 [ 1002.284234][T19517] __lookup_slow+0x24e/0x460 [ 1002.284284][T19517] ? __pfx___lookup_slow+0x10/0x10 [ 1002.284368][T19517] ? lookup_fast+0x156/0x610 [ 1002.284427][T19517] walk_component+0x353/0x5b0 [ 1002.284485][T19517] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 1002.284561][T19517] path_openat+0x227/0x2d40 [ 1002.284593][T19517] ? __x64_sys_openat+0x174/0x210 [ 1002.284660][T19517] ? __pfx_path_openat+0x10/0x10 [ 1002.284709][T19517] do_filp_open+0x20b/0x470 [ 1002.284744][T19517] ? __pfx_do_filp_open+0x10/0x10 [ 1002.284797][T19517] ? __pfx_kfree_link+0x10/0x10 [ 1002.284857][T19517] ? alloc_fd+0x471/0x7d0 [ 1002.284901][T19517] do_sys_openat2+0x11b/0x1d0 [ 1002.284947][T19517] ? __pfx_do_sys_openat2+0x10/0x10 [ 1002.285014][T19517] __x64_sys_openat+0x174/0x210 [ 1002.285064][T19517] ? __pfx___x64_sys_openat+0x10/0x10 [ 1002.285115][T19517] ? rcu_is_watching+0x12/0xc0 [ 1002.285162][T19517] do_syscall_64+0xcd/0x230 [ 1002.285220][T19517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.285256][T19517] RIP: 0033:0x7fb8fad8e969 [ 1002.285285][T19517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.285321][T19517] RSP: 002b:00007fb8fbba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1002.285362][T19517] RAX: ffffffffffffffda RBX: 00007fb8fafb6080 RCX: 00007fb8fad8e969 [ 1002.285387][T19517] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1002.285410][T19517] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1002.285432][T19517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.285454][T19517] R13: 0000000000000000 R14: 00007fb8fafb6080 R15: 00007ffca94aad18 [ 1002.285500][T19517] [ 1002.947387][T19528] FAULT_INJECTION: forcing a failure. [ 1002.947387][T19528] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.962000][T19528] CPU: 1 UID: 0 PID: 19528 Comm: syz.6.2611 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1002.962058][T19528] Tainted: [U]=USER [ 1002.962071][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.962092][T19528] Call Trace: [ 1002.962104][T19528] [ 1002.962117][T19528] dump_stack_lvl+0x16c/0x1f0 [ 1002.962176][T19528] should_fail_ex+0x512/0x640 [ 1002.962224][T19528] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1002.962278][T19528] should_failslab+0xc2/0x120 [ 1002.962324][T19528] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1002.962366][T19528] ? security_file_alloc+0x34/0x2b0 [ 1002.962420][T19528] security_file_alloc+0x34/0x2b0 [ 1002.962468][T19528] init_file+0x93/0x4c0 [ 1002.962511][T19528] alloc_empty_file+0x73/0x1e0 [ 1002.962558][T19528] alloc_file_pseudo+0x13a/0x230 [ 1002.962607][T19528] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1002.962657][T19528] ? alloc_fd+0x471/0x7d0 [ 1002.962695][T19528] __anon_inode_getfile+0xf7/0x370 [ 1002.962760][T19528] anon_inode_getfile_fmode+0x37/0xa0 [ 1002.962819][T19528] do_eventfd+0x19b/0x2c0 [ 1002.962855][T19528] ? rcu_is_watching+0x12/0xc0 [ 1002.962890][T19528] __x64_sys_eventfd+0x32/0x50 [ 1002.962931][T19528] do_syscall_64+0xcd/0x230 [ 1002.962987][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.963023][T19528] RIP: 0033:0x7fb8fad8e969 [ 1002.963051][T19528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.963086][T19528] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1002.963119][T19528] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 1002.963142][T19528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1002.963163][T19528] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1002.963185][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.963205][T19528] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 1002.963251][T19528] [ 1003.725524][T19551] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1003.897704][T19556] FAULT_INJECTION: forcing a failure. [ 1003.897704][T19556] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.956105][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.1.2617 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1003.956162][T19556] Tainted: [U]=USER [ 1003.956174][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1003.956192][T19556] Call Trace: [ 1003.956202][T19556] [ 1003.956216][T19556] dump_stack_lvl+0x16c/0x1f0 [ 1003.956274][T19556] should_fail_ex+0x512/0x640 [ 1003.956323][T19556] ? fs_reclaim_acquire+0xae/0x150 [ 1003.956381][T19556] should_failslab+0xc2/0x120 [ 1003.956424][T19556] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1003.956467][T19556] ? security_inode_alloc+0x3b/0x2b0 [ 1003.956516][T19556] security_inode_alloc+0x3b/0x2b0 [ 1003.956558][T19556] inode_init_always_gfp+0xce4/0x1030 [ 1003.956599][T19556] alloc_inode+0x86/0x240 [ 1003.956642][T19556] new_inode+0x22/0x1c0 [ 1003.956681][T19556] ? proc_lookup_de+0x217/0x320 [ 1003.956724][T19556] proc_get_inode+0x1d/0x780 [ 1003.956762][T19556] proc_lookup_de+0x253/0x320 [ 1003.956805][T19556] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 1003.956849][T19556] proc_tgid_net_lookup+0x75/0x120 [ 1003.956916][T19556] lookup_open.isra.0+0x4d7/0x1580 [ 1003.956988][T19556] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1003.957068][T19556] ? lookup_fast+0x156/0x610 [ 1003.957124][T19556] path_openat+0x905/0x2d40 [ 1003.957176][T19556] ? __pfx_path_openat+0x10/0x10 [ 1003.957223][T19556] do_filp_open+0x20b/0x470 [ 1003.957260][T19556] ? __pfx_do_filp_open+0x10/0x10 [ 1003.957312][T19556] ? __pfx_kfree_link+0x10/0x10 [ 1003.957373][T19556] ? alloc_fd+0x471/0x7d0 [ 1003.957417][T19556] do_sys_openat2+0x11b/0x1d0 [ 1003.957465][T19556] ? __pfx_do_sys_openat2+0x10/0x10 [ 1003.957532][T19556] __x64_sys_openat+0x174/0x210 [ 1003.957582][T19556] ? __pfx___x64_sys_openat+0x10/0x10 [ 1003.957635][T19556] ? rcu_is_watching+0x12/0xc0 [ 1003.957682][T19556] do_syscall_64+0xcd/0x230 [ 1003.957740][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.957776][T19556] RIP: 0033:0x7f487498e969 [ 1003.957802][T19556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.957836][T19556] RSP: 002b:00007f487574e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1003.957868][T19556] RAX: ffffffffffffffda RBX: 00007f4874bb6160 RCX: 00007f487498e969 [ 1003.957892][T19556] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1003.957914][T19556] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1003.957936][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.957958][T19556] R13: 0000000000000000 R14: 00007f4874bb6160 R15: 00007ffc96e878a8 [ 1003.958010][T19556] [ 1004.793096][T19570] FAULT_INJECTION: forcing a failure. [ 1004.793096][T19570] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.817479][T19570] CPU: 1 UID: 0 PID: 19570 Comm: syz.6.2623 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1004.817535][T19570] Tainted: [U]=USER [ 1004.817548][T19570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.817568][T19570] Call Trace: [ 1004.817580][T19570] [ 1004.817593][T19570] dump_stack_lvl+0x16c/0x1f0 [ 1004.817650][T19570] should_fail_ex+0x512/0x640 [ 1004.817700][T19570] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1004.817744][T19570] should_failslab+0xc2/0x120 [ 1004.817791][T19570] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1004.817857][T19570] ? __d_alloc+0x31/0xaa0 [ 1004.817899][T19570] __d_alloc+0x31/0xaa0 [ 1004.817941][T19570] d_alloc_pseudo+0x1c/0xc0 [ 1004.817989][T19570] alloc_file_pseudo+0xcf/0x230 [ 1004.818037][T19570] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1004.818084][T19570] ? alloc_fd+0x471/0x7d0 [ 1004.818121][T19570] __anon_inode_getfile+0xf7/0x370 [ 1004.818185][T19570] anon_inode_getfile_fmode+0x37/0xa0 [ 1004.818243][T19570] do_eventfd+0x19b/0x2c0 [ 1004.818278][T19570] ? rcu_is_watching+0x12/0xc0 [ 1004.818313][T19570] __x64_sys_eventfd+0x32/0x50 [ 1004.818353][T19570] do_syscall_64+0xcd/0x230 [ 1004.818409][T19570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.818443][T19570] RIP: 0033:0x7fb8fad8e969 [ 1004.818470][T19570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.818505][T19570] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1004.818537][T19570] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 1004.818561][T19570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1004.818581][T19570] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1004.818607][T19570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.818628][T19570] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 1004.818669][T19570] [ 1005.130589][T19575] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1005.819558][T19594] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1005.893643][T19599] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1006.011001][T19602] FAULT_INJECTION: forcing a failure. [ 1006.011001][T19602] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.055915][T19602] CPU: 0 UID: 0 PID: 19602 Comm: syz.4.2629 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1006.055973][T19602] Tainted: [U]=USER [ 1006.055987][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.056008][T19602] Call Trace: [ 1006.056020][T19602] [ 1006.056033][T19602] dump_stack_lvl+0x16c/0x1f0 [ 1006.056093][T19602] should_fail_ex+0x512/0x640 [ 1006.056145][T19602] ? fs_reclaim_acquire+0xae/0x150 [ 1006.056202][T19602] ? tomoyo_encode2+0x100/0x3e0 [ 1006.056249][T19602] should_failslab+0xc2/0x120 [ 1006.056294][T19602] __kmalloc_noprof+0xd2/0x510 [ 1006.056343][T19602] tomoyo_encode2+0x100/0x3e0 [ 1006.056399][T19602] tomoyo_encode+0x29/0x50 [ 1006.056446][T19602] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1006.056512][T19602] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1006.056557][T19602] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1006.056645][T19602] ? do_raw_spin_lock+0x12c/0x2b0 [ 1006.056742][T19602] tomoyo_file_open+0x6b/0x90 [ 1006.056778][T19602] security_file_open+0x84/0x1e0 [ 1006.056829][T19602] do_dentry_open+0x596/0x1c10 [ 1006.056880][T19602] vfs_open+0x82/0x3f0 [ 1006.056931][T19602] path_openat+0x1e5e/0x2d40 [ 1006.056983][T19602] ? __pfx_path_openat+0x10/0x10 [ 1006.057030][T19602] do_filp_open+0x20b/0x470 [ 1006.057066][T19602] ? __pfx_do_filp_open+0x10/0x10 [ 1006.057116][T19602] ? __pfx_kfree_link+0x10/0x10 [ 1006.057175][T19602] ? alloc_fd+0x471/0x7d0 [ 1006.057216][T19602] do_sys_openat2+0x11b/0x1d0 [ 1006.057263][T19602] ? __pfx_do_sys_openat2+0x10/0x10 [ 1006.057329][T19602] __x64_sys_openat+0x174/0x210 [ 1006.057377][T19602] ? __pfx___x64_sys_openat+0x10/0x10 [ 1006.057431][T19602] ? rcu_is_watching+0x12/0xc0 [ 1006.057475][T19602] do_syscall_64+0xcd/0x230 [ 1006.057534][T19602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.057569][T19602] RIP: 0033:0x7efeca78e969 [ 1006.057597][T19602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.057634][T19602] RSP: 002b:00007efecb524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1006.057667][T19602] RAX: ffffffffffffffda RBX: 00007efeca9b6080 RCX: 00007efeca78e969 [ 1006.057691][T19602] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1006.057714][T19602] RBP: 00007efeca810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1006.057748][T19602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.057769][T19602] R13: 0000000000000000 R14: 00007efeca9b6080 R15: 00007ffec97867b8 [ 1006.057815][T19602] [ 1006.057847][T19602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1006.770844][T19619] FAULT_INJECTION: forcing a failure. [ 1006.770844][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.830378][T19619] CPU: 1 UID: 0 PID: 19619 Comm: syz.0.2633 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1006.830439][T19619] Tainted: [U]=USER [ 1006.830463][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.830486][T19619] Call Trace: [ 1006.830498][T19619] [ 1006.830512][T19619] dump_stack_lvl+0x16c/0x1f0 [ 1006.830573][T19619] should_fail_ex+0x512/0x640 [ 1006.830635][T19619] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1006.830682][T19619] should_failslab+0xc2/0x120 [ 1006.830727][T19619] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1006.830767][T19619] ? d_instantiate+0x77/0x90 [ 1006.830805][T19619] ? alloc_empty_file+0x55/0x1e0 [ 1006.830857][T19619] alloc_empty_file+0x55/0x1e0 [ 1006.830903][T19619] alloc_file_pseudo+0x13a/0x230 [ 1006.830953][T19619] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1006.831001][T19619] ? alloc_fd+0x471/0x7d0 [ 1006.831038][T19619] __anon_inode_getfile+0xf7/0x370 [ 1006.831100][T19619] anon_inode_getfile_fmode+0x37/0xa0 [ 1006.831160][T19619] do_eventfd+0x19b/0x2c0 [ 1006.831194][T19619] ? rcu_is_watching+0x12/0xc0 [ 1006.831230][T19619] __x64_sys_eventfd+0x32/0x50 [ 1006.831270][T19619] do_syscall_64+0xcd/0x230 [ 1006.831327][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.831361][T19619] RIP: 0033:0x7fd12cf8e969 [ 1006.831390][T19619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.831424][T19619] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1006.831457][T19619] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 1006.831481][T19619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1006.831502][T19619] RBP: 00007fd12d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1006.831523][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.831544][T19619] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 1006.831587][T19619] [ 1008.246876][T19644] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 1008.890536][T19650] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1009.065091][T19653] FAULT_INJECTION: forcing a failure. [ 1009.065091][T19653] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.126937][T19653] CPU: 1 UID: 0 PID: 19653 Comm: syz.1.2640 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1009.126994][T19653] Tainted: [U]=USER [ 1009.127006][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1009.127027][T19653] Call Trace: [ 1009.127039][T19653] [ 1009.127052][T19653] dump_stack_lvl+0x16c/0x1f0 [ 1009.127110][T19653] should_fail_ex+0x512/0x640 [ 1009.127161][T19653] ? fs_reclaim_acquire+0xae/0x150 [ 1009.127223][T19653] ? tomoyo_encode2+0x100/0x3e0 [ 1009.127271][T19653] should_failslab+0xc2/0x120 [ 1009.127316][T19653] __kmalloc_noprof+0xd2/0x510 [ 1009.127366][T19653] tomoyo_encode2+0x100/0x3e0 [ 1009.127422][T19653] tomoyo_encode+0x29/0x50 [ 1009.127470][T19653] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1009.127536][T19653] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1009.127583][T19653] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1009.127688][T19653] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.127755][T19653] tomoyo_file_open+0x6b/0x90 [ 1009.127792][T19653] security_file_open+0x84/0x1e0 [ 1009.127843][T19653] do_dentry_open+0x596/0x1c10 [ 1009.127894][T19653] vfs_open+0x82/0x3f0 [ 1009.127945][T19653] path_openat+0x1e5e/0x2d40 [ 1009.127997][T19653] ? __pfx_path_openat+0x10/0x10 [ 1009.128044][T19653] do_filp_open+0x20b/0x470 [ 1009.128079][T19653] ? __pfx_do_filp_open+0x10/0x10 [ 1009.128130][T19653] ? __pfx_kfree_link+0x10/0x10 [ 1009.128190][T19653] ? alloc_fd+0x471/0x7d0 [ 1009.128233][T19653] do_sys_openat2+0x11b/0x1d0 [ 1009.128279][T19653] ? __pfx_do_sys_openat2+0x10/0x10 [ 1009.128344][T19653] __x64_sys_openat+0x174/0x210 [ 1009.128393][T19653] ? __pfx___x64_sys_openat+0x10/0x10 [ 1009.128443][T19653] ? rcu_is_watching+0x12/0xc0 [ 1009.128488][T19653] do_syscall_64+0xcd/0x230 [ 1009.128545][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.128579][T19653] RIP: 0033:0x7f487498e969 [ 1009.128607][T19653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.128641][T19653] RSP: 002b:00007f487576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1009.128679][T19653] RAX: ffffffffffffffda RBX: 00007f4874bb6080 RCX: 00007f487498e969 [ 1009.128703][T19653] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1009.128725][T19653] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1009.128746][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.128766][T19653] R13: 0000000000000000 R14: 00007f4874bb6080 R15: 00007ffc96e878a8 [ 1009.128811][T19653] [ 1009.131123][T19653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.993559][T19671] FAULT_INJECTION: forcing a failure. [ 1009.993559][T19671] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.125265][T19671] CPU: 1 UID: 0 PID: 19671 Comm: syz.6.2644 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1010.125348][T19671] Tainted: [U]=USER [ 1010.125361][T19671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.125380][T19671] Call Trace: [ 1010.125400][T19671] [ 1010.125419][T19671] dump_stack_lvl+0x16c/0x1f0 [ 1010.125480][T19671] should_fail_ex+0x512/0x640 [ 1010.125529][T19671] ? fs_reclaim_acquire+0xae/0x150 [ 1010.125584][T19671] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1010.125642][T19671] should_failslab+0xc2/0x120 [ 1010.125686][T19671] __kmalloc_noprof+0xd2/0x510 [ 1010.125736][T19671] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1010.125798][T19671] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1010.125843][T19671] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1010.125927][T19671] ? find_held_lock+0x2b/0x80 [ 1010.125971][T19671] tomoyo_file_open+0x6b/0x90 [ 1010.126011][T19671] security_file_open+0x84/0x1e0 [ 1010.126057][T19671] do_dentry_open+0x596/0x1c10 [ 1010.126106][T19671] vfs_open+0x82/0x3f0 [ 1010.126158][T19671] path_openat+0x1e5e/0x2d40 [ 1010.126204][T19671] ? __pfx_path_openat+0x10/0x10 [ 1010.126249][T19671] do_filp_open+0x20b/0x470 [ 1010.126278][T19671] ? __pfx_do_filp_open+0x10/0x10 [ 1010.126318][T19671] ? __pfx_kfree_link+0x10/0x10 [ 1010.126367][T19671] ? alloc_fd+0x471/0x7d0 [ 1010.126401][T19671] do_sys_openat2+0x11b/0x1d0 [ 1010.126438][T19671] ? __pfx_do_sys_openat2+0x10/0x10 [ 1010.126473][T19671] ? __pfx_do_sys_openat2+0x10/0x10 [ 1010.126523][T19671] __x64_sys_openat+0x174/0x210 [ 1010.126561][T19671] ? __pfx___x64_sys_openat+0x10/0x10 [ 1010.126610][T19671] ? rcu_is_watching+0x12/0xc0 [ 1010.126646][T19671] do_syscall_64+0xcd/0x230 [ 1010.126690][T19671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.126718][T19671] RIP: 0033:0x7fb8fad8d2d0 [ 1010.126740][T19671] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1010.126767][T19671] RSP: 002b:00007fb8fbbc9fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1010.126794][T19671] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb8fad8d2d0 [ 1010.126812][T19671] RDX: 0000000000000002 RSI: 00007fb8fae10d96 RDI: 00000000ffffff9c [ 1010.126829][T19671] RBP: 00007fb8fae10d96 R08: 0000000000000000 R09: 00007fb8fbbcb000 [ 1010.126846][T19671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1010.126863][T19671] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 1010.126897][T19671] [ 1010.425974][T19672] FAULT_INJECTION: forcing a failure. [ 1010.425974][T19672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.440468][T19672] CPU: 1 UID: 0 PID: 19672 Comm: syz.4.2645 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1010.440524][T19672] Tainted: [U]=USER [ 1010.440535][T19672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.440554][T19672] Call Trace: [ 1010.440564][T19672] [ 1010.440577][T19672] dump_stack_lvl+0x16c/0x1f0 [ 1010.440634][T19672] should_fail_ex+0x512/0x640 [ 1010.440690][T19672] _copy_from_user+0x2e/0xd0 [ 1010.440744][T19672] do_handle_open+0x61b/0xb70 [ 1010.440798][T19672] ? __pfx_do_handle_open+0x10/0x10 [ 1010.440847][T19672] ? __x64_sys_futex+0x1e0/0x4c0 [ 1010.440892][T19672] ? xfd_validate_state+0x5d/0x180 [ 1010.440928][T19672] ? rcu_is_watching+0x12/0xc0 [ 1010.440973][T19672] ? do_syscall_64+0xcd/0x230 [ 1010.441023][T19672] do_syscall_64+0xcd/0x230 [ 1010.441079][T19672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.441114][T19672] RIP: 0033:0x7efeca78e969 [ 1010.441143][T19672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.441176][T19672] RSP: 002b:00007efecb545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1010.441209][T19672] RAX: ffffffffffffffda RBX: 00007efeca9b5fa0 RCX: 00007efeca78e969 [ 1010.441231][T19672] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 1010.441254][T19672] RBP: 00007efeca810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1010.441276][T19672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.441298][T19672] R13: 0000000000000000 R14: 00007efeca9b5fa0 R15: 00007ffec97867b8 [ 1010.441341][T19672] [ 1010.486012][T19671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.676313][T19669] FAULT_INJECTION: forcing a failure. [ 1010.676313][T19669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.691509][T19669] CPU: 1 UID: 0 PID: 19669 Comm: syz.1.2643 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1010.691569][T19669] Tainted: [U]=USER [ 1010.691582][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.691611][T19669] Call Trace: [ 1010.691623][T19669] [ 1010.691637][T19669] dump_stack_lvl+0x16c/0x1f0 [ 1010.691698][T19669] should_fail_ex+0x512/0x640 [ 1010.691757][T19669] _copy_from_user+0x2e/0xd0 [ 1010.691816][T19669] do_handle_open+0x61b/0xb70 [ 1010.691874][T19669] ? __pfx_do_handle_open+0x10/0x10 [ 1010.691926][T19669] ? __x64_sys_futex+0x1e0/0x4c0 [ 1010.691972][T19669] ? xfd_validate_state+0x5d/0x180 [ 1010.692010][T19669] ? rcu_is_watching+0x12/0xc0 [ 1010.692057][T19669] ? do_syscall_64+0xcd/0x230 [ 1010.692110][T19669] do_syscall_64+0xcd/0x230 [ 1010.692164][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.692198][T19669] RIP: 0033:0x7f487498e969 [ 1010.692226][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.692261][T19669] RSP: 002b:00007f4875790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1010.692295][T19669] RAX: ffffffffffffffda RBX: 00007f4874bb5fa0 RCX: 00007f487498e969 [ 1010.692319][T19669] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 1010.692340][T19669] RBP: 00007f4874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1010.692363][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.692383][T19669] R13: 0000000000000000 R14: 00007f4874bb5fa0 R15: 00007ffc96e878a8 [ 1010.692428][T19669] [ 1011.881102][T19705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1012.130247][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 1012.603387][T19718] FAULT_INJECTION: forcing a failure. [ 1012.603387][T19718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.626709][T19718] CPU: 0 UID: 0 PID: 19718 Comm: syz.6.2656 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1012.626772][T19718] Tainted: [U]=USER [ 1012.626785][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.626805][T19718] Call Trace: [ 1012.626818][T19718] [ 1012.626833][T19718] dump_stack_lvl+0x16c/0x1f0 [ 1012.626896][T19718] should_fail_ex+0x512/0x640 [ 1012.626959][T19718] _copy_from_user+0x2e/0xd0 [ 1012.627020][T19718] do_handle_open+0x61b/0xb70 [ 1012.627078][T19718] ? __pfx_do_handle_open+0x10/0x10 [ 1012.627130][T19718] ? __x64_sys_futex+0x1e0/0x4c0 [ 1012.627177][T19718] ? xfd_validate_state+0x5d/0x180 [ 1012.627217][T19718] ? rcu_is_watching+0x12/0xc0 [ 1012.627264][T19718] ? do_syscall_64+0xcd/0x230 [ 1012.627318][T19718] do_syscall_64+0xcd/0x230 [ 1012.627378][T19718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.627423][T19718] RIP: 0033:0x7fb8fad8e969 [ 1012.627454][T19718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.627490][T19718] RSP: 002b:00007fb8fbbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1012.627525][T19718] RAX: ffffffffffffffda RBX: 00007fb8fafb5fa0 RCX: 00007fb8fad8e969 [ 1012.627548][T19718] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 1012.627570][T19718] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1012.627591][T19718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.627612][T19718] R13: 0000000000000000 R14: 00007fb8fafb5fa0 R15: 00007ffca94aad18 [ 1012.627656][T19718] [ 1012.695042][T17685] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3539 with max blocks 45 with error 117 [ 1012.850927][T17685] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1012.850927][T17685] [ 1012.874318][T17685] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3509 with max blocks 30 with error 117 [ 1012.890964][T17685] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1012.890964][T17685] [ 1013.126910][T18356] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3509 with max blocks 1 with error 117 [ 1013.196964][T18356] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1013.196964][T18356] [ 1013.282262][T19734] Invalid ELF header magic: != ELF [ 1013.478210][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2655'. [ 1013.571558][T19719] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1014.700930][T19763] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1015.268467][T19773] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1015.408040][ T8893] Bluetooth: hci0: command 0x0406 tx timeout [ 1017.511892][T19828] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2676'. [ 1017.617987][T19831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1017.905538][T19835] FAULT_INJECTION: forcing a failure. [ 1017.905538][T19835] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.987704][T19835] CPU: 1 UID: 0 PID: 19835 Comm: syz.6.2677 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1017.987765][T19835] Tainted: [U]=USER [ 1017.987777][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1017.987799][T19835] Call Trace: [ 1017.987811][T19835] [ 1017.987826][T19835] dump_stack_lvl+0x16c/0x1f0 [ 1017.987887][T19835] should_fail_ex+0x512/0x640 [ 1017.987952][T19835] ? fs_reclaim_acquire+0xae/0x150 [ 1017.988012][T19835] ? tomoyo_encode2+0x100/0x3e0 [ 1017.988062][T19835] should_failslab+0xc2/0x120 [ 1017.988108][T19835] __kmalloc_noprof+0xd2/0x510 [ 1017.988158][T19835] tomoyo_encode2+0x100/0x3e0 [ 1017.988216][T19835] tomoyo_encode+0x29/0x50 [ 1017.988264][T19835] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1017.988330][T19835] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1017.988378][T19835] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1017.988471][T19835] ? do_raw_spin_lock+0x12c/0x2b0 [ 1017.988538][T19835] tomoyo_file_open+0x6b/0x90 [ 1017.988576][T19835] security_file_open+0x84/0x1e0 [ 1017.988627][T19835] do_dentry_open+0x596/0x1c10 [ 1017.988679][T19835] vfs_open+0x82/0x3f0 [ 1017.988732][T19835] path_openat+0x1e5e/0x2d40 [ 1017.988786][T19835] ? __pfx_path_openat+0x10/0x10 [ 1017.988835][T19835] do_filp_open+0x20b/0x470 [ 1017.988871][T19835] ? __pfx_do_filp_open+0x10/0x10 [ 1017.988923][T19835] ? __pfx_kfree_link+0x10/0x10 [ 1017.988990][T19835] ? alloc_fd+0x471/0x7d0 [ 1017.989034][T19835] do_sys_openat2+0x11b/0x1d0 [ 1017.989082][T19835] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.989149][T19835] __x64_sys_openat+0x174/0x210 [ 1017.989199][T19835] ? __pfx___x64_sys_openat+0x10/0x10 [ 1017.989251][T19835] ? rcu_is_watching+0x12/0xc0 [ 1017.989298][T19835] do_syscall_64+0xcd/0x230 [ 1017.989356][T19835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.989391][T19835] RIP: 0033:0x7fb8fad8e969 [ 1017.989419][T19835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.989456][T19835] RSP: 002b:00007fb8fbb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1017.989489][T19835] RAX: ffffffffffffffda RBX: 00007fb8fafb6160 RCX: 00007fb8fad8e969 [ 1017.989517][T19835] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1017.989540][T19835] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1017.989561][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.989581][T19835] R13: 0000000000000000 R14: 00007fb8fafb6160 R15: 00007ffca94aad18 [ 1017.989627][T19835] [ 1018.269022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.313126][T19835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1018.593860][T19845] HfR: entered promiscuous mode [ 1018.610362][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1020.081688][T19887] FAULT_INJECTION: forcing a failure. [ 1020.081688][T19887] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.096657][T19887] CPU: 0 UID: 0 PID: 19887 Comm: syz.0.2687 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1020.096708][T19887] Tainted: [U]=USER [ 1020.096717][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.096731][T19887] Call Trace: [ 1020.096740][T19887] [ 1020.096749][T19887] dump_stack_lvl+0x16c/0x1f0 [ 1020.096792][T19887] should_fail_ex+0x512/0x640 [ 1020.096835][T19887] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1020.096867][T19887] should_failslab+0xc2/0x120 [ 1020.096899][T19887] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1020.096925][T19887] ? register_lock_class+0x41/0x4c0 [ 1020.096959][T19887] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 1020.097002][T19887] mas_dup_build.constprop.0+0x5f3/0x1740 [ 1020.097052][T19887] __mt_dup+0xeb/0x1f0 [ 1020.097087][T19887] ? __pfx___mt_dup+0x10/0x10 [ 1020.097139][T19887] ? get_mm_exe_file+0x8a/0x1a0 [ 1020.097176][T19887] copy_process+0x7152/0x91a0 [ 1020.097205][T19887] ? find_held_lock+0x2b/0x80 [ 1020.097249][T19887] ? __pfx_copy_process+0x10/0x10 [ 1020.097279][T19887] ? __pfx___futex_wait+0x10/0x10 [ 1020.097339][T19887] kernel_clone+0xfc/0x960 [ 1020.097372][T19887] ? __pfx_kernel_clone+0x10/0x10 [ 1020.097422][T19887] __do_sys_clone+0xce/0x120 [ 1020.097454][T19887] ? __pfx___do_sys_clone+0x10/0x10 [ 1020.097502][T19887] ? rcu_is_watching+0x12/0xc0 [ 1020.097534][T19887] do_syscall_64+0xcd/0x230 [ 1020.097574][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.097599][T19887] RIP: 0033:0x7fd12cf8e969 [ 1020.097618][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.097643][T19887] RSP: 002b:00007fd12deb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1020.097672][T19887] RAX: ffffffffffffffda RBX: 00007fd12d1b5fa0 RCX: 00007fd12cf8e969 [ 1020.097689][T19887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1020.097704][T19887] RBP: 00007fd12d010ab1 R08: 0000000000000008 R09: 0000000000000000 [ 1020.097719][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.097733][T19887] R13: 0000000000000000 R14: 00007fd12d1b5fa0 R15: 00007ffff0cac6a8 [ 1020.097765][T19887] [ 1020.787019][T19883] ================================================================== [ 1020.787042][T19883] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 1020.787112][T19883] Read of size 14 at addr ffff888142ebf586 by task syz.6.2686/19883 [ 1020.787142][T19883] [ 1020.787175][T19883] CPU: 1 UID: 0 PID: 19883 Comm: syz.6.2686 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1020.787224][T19883] Tainted: [U]=USER [ 1020.787236][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.787256][T19883] Call Trace: [ 1020.787268][T19883] [ 1020.787281][T19883] dump_stack_lvl+0x116/0x1f0 [ 1020.787331][T19883] print_report+0xc3/0x670 [ 1020.787371][T19883] ? __virt_addr_valid+0x5e/0x590 [ 1020.787424][T19883] ? __phys_addr+0xc6/0x150 [ 1020.787469][T19883] ? fbcon_prepare_logo+0xa03/0xc70 [ 1020.787511][T19883] kasan_report+0xe0/0x110 [ 1020.787554][T19883] ? fbcon_prepare_logo+0xa03/0xc70 [ 1020.787601][T19883] kasan_check_range+0xef/0x1a0 [ 1020.787650][T19883] __asan_memcpy+0x23/0x60 [ 1020.787682][T19883] fbcon_prepare_logo+0xa03/0xc70 [ 1020.787735][T19883] fbcon_init+0xd77/0x1900 [ 1020.787778][T19883] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1020.787821][T19883] visual_init+0x31d/0x620 [ 1020.787855][T19883] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1020.787902][T19883] store_bind+0x61d/0x760 [ 1020.787943][T19883] ? sysfs_file_kobj+0xe4/0x290 [ 1020.787992][T19883] ? __pfx_store_bind+0x10/0x10 [ 1020.788030][T19883] dev_attr_store+0x58/0x80 [ 1020.788073][T19883] ? __pfx_dev_attr_store+0x10/0x10 [ 1020.788118][T19883] sysfs_kf_write+0xef/0x150 [ 1020.788169][T19883] kernfs_fop_write_iter+0x354/0x510 [ 1020.788212][T19883] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1020.788264][T19883] vfs_write+0x5bd/0x1180 [ 1020.788298][T19883] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1020.788344][T19883] ? __pfx___mutex_lock+0x10/0x10 [ 1020.788396][T19883] ? __pfx_vfs_write+0x10/0x10 [ 1020.788450][T19883] ksys_write+0x12a/0x240 [ 1020.788484][T19883] ? __pfx_ksys_write+0x10/0x10 [ 1020.788517][T19883] ? rcu_is_watching+0x12/0xc0 [ 1020.788556][T19883] do_syscall_64+0xcd/0x230 [ 1020.788609][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.788642][T19883] RIP: 0033:0x7fb8fad8e969 [ 1020.788667][T19883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.788703][T19883] RSP: 002b:00007fb8fbb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.788734][T19883] RAX: ffffffffffffffda RBX: 00007fb8fafb6160 RCX: 00007fb8fad8e969 [ 1020.788757][T19883] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1020.788777][T19883] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1020.788796][T19883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.788815][T19883] R13: 0000000000000000 R14: 00007fb8fafb6160 R15: 00007ffca94aad18 [ 1020.788846][T19883] [ 1020.788857][T19883] [ 1020.788867][T19883] Allocated by task 17655: [ 1020.788882][T19883] kasan_save_stack+0x33/0x60 [ 1020.788917][T19883] kasan_save_track+0x14/0x30 [ 1020.788951][T19883] __kasan_kmalloc+0xaa/0xb0 [ 1020.788983][T19883] __get_vm_area_node+0x101/0x330 [ 1020.789033][T19883] __vmalloc_node_range_noprof+0x277/0x1540 [ 1020.789063][T19883] vzalloc_noprof+0x6b/0x90 [ 1020.789091][T19883] do_ip6t_get_ctl+0x63f/0xa50 [ 1020.789134][T19883] nf_getsockopt+0x79/0xe0 [ 1020.789173][T19883] ipv6_getsockopt+0x1f7/0x280 [ 1020.789214][T19883] tcp_getsockopt+0x9e/0x100 [ 1020.789244][T19883] do_sock_getsockopt+0x3ff/0x800 [ 1020.789292][T19883] __sys_getsockopt+0x123/0x1a0 [ 1020.789326][T19883] __x64_sys_getsockopt+0xbd/0x160 [ 1020.789363][T19883] do_syscall_64+0xcd/0x230 [ 1020.789418][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.789450][T19883] [ 1020.789459][T19883] Freed by task 17655: [ 1020.789474][T19883] kasan_save_stack+0x33/0x60 [ 1020.789507][T19883] kasan_save_track+0x14/0x30 [ 1020.789540][T19883] kasan_save_free_info+0x3b/0x60 [ 1020.789605][T19883] __kasan_slab_free+0x51/0x70 [ 1020.789640][T19883] kfree+0x2b6/0x4d0 [ 1020.789668][T19883] vfree+0x316/0x960 [ 1020.789716][T19883] do_ip6t_get_ctl+0x869/0xa50 [ 1020.789759][T19883] nf_getsockopt+0x79/0xe0 [ 1020.789797][T19883] ipv6_getsockopt+0x1f7/0x280 [ 1020.789838][T19883] tcp_getsockopt+0x9e/0x100 [ 1020.789869][T19883] do_sock_getsockopt+0x3ff/0x800 [ 1020.789916][T19883] __sys_getsockopt+0x123/0x1a0 [ 1020.789950][T19883] __x64_sys_getsockopt+0xbd/0x160 [ 1020.789987][T19883] do_syscall_64+0xcd/0x230 [ 1020.790036][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.790068][T19883] [ 1020.790076][T19883] The buggy address belongs to the object at ffff888142ebf580 [ 1020.790076][T19883] which belongs to the cache kmalloc-96 of size 96 [ 1020.790105][T19883] The buggy address is located 6 bytes inside of [ 1020.790105][T19883] freed 96-byte region [ffff888142ebf580, ffff888142ebf5e0) [ 1020.790140][T19883] [ 1020.790149][T19883] The buggy address belongs to the physical page: [ 1020.790163][T19883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142ebf [ 1020.790193][T19883] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 1020.790219][T19883] page_type: f5(slab) [ 1020.790248][T19883] raw: 057ff00000000000 ffff88801b441280 ffffea0005357700 dead000000000002 [ 1020.790278][T19883] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 1020.790299][T19883] page dumped because: kasan: bad access detected [ 1020.790314][T19883] page_owner tracks the page as allocated [ 1020.790326][T19883] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3406779647, free_ts 3303875645 [ 1020.790392][T19883] post_alloc_hook+0x181/0x1b0 [ 1020.790433][T19883] get_page_from_freelist+0x135c/0x3920 [ 1020.790469][T19883] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1020.790509][T19883] alloc_pages_mpol+0x1fb/0x550 [ 1020.790547][T19883] new_slab+0x244/0x340 [ 1020.790574][T19883] ___slab_alloc+0xd9c/0x1940 [ 1020.790602][T19883] __slab_alloc.constprop.0+0x56/0xb0 [ 1020.790634][T19883] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1020.790668][T19883] acpi_ut_evaluate_object+0x80/0x4a0 [ 1020.790713][T19883] acpi_rs_get_method_data+0x84/0xf0 [ 1020.790763][T19883] acpi_walk_resources+0x15b/0x1e0 [ 1020.790812][T19883] acpi_mipi_check_crs_csi2+0x99/0x1d0 [ 1020.790866][T19883] acpi_bus_check_add+0x6d6/0x910 [ 1020.790913][T19883] acpi_ns_walk_namespace+0x408/0x5b0 [ 1020.790948][T19883] acpi_walk_namespace+0x110/0x130 [ 1020.790981][T19883] acpi_bus_scan+0x3e8/0x4a0 [ 1020.791028][T19883] page last free pid 1 tgid 1 stack trace: [ 1020.791045][T19883] __free_frozen_pages+0x69d/0xff0 [ 1020.791075][T19883] qlist_free_all+0x4e/0x120 [ 1020.791105][T19883] kasan_quarantine_remove_cache+0x167/0x180 [ 1020.791140][T19883] kmem_cache_shrink+0xd/0x20 [ 1020.791169][T19883] acpi_os_purge_cache+0x15/0x20 [ 1020.791216][T19883] acpi_purge_cached_objects+0x86/0x100 [ 1020.791255][T19883] acpi_initialize_objects+0x47/0xa0 [ 1020.791303][T19883] acpi_init+0x168/0xb80 [ 1020.791339][T19883] do_one_initcall+0x120/0x6e0 [ 1020.791386][T19883] kernel_init_freeable+0x5c2/0x900 [ 1020.791446][T19883] kernel_init+0x1c/0x2b0 [ 1020.791481][T19883] ret_from_fork+0x48/0x80 [ 1020.791508][T19883] ret_from_fork_asm+0x1a/0x30 [ 1020.791554][T19883] [ 1020.791562][T19883] Memory state around the buggy address: [ 1020.791580][T19883] ffff888142ebf480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1020.791604][T19883] ffff888142ebf500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1020.791628][T19883] >ffff888142ebf580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1020.791646][T19883] ^ [ 1020.791663][T19883] ffff888142ebf600: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 1020.791687][T19883] ffff888142ebf680: 00 00 00 00 00 00 00 00 00 00 04 fc fc fc fc fc [ 1020.791706][T19883] ================================================================== [ 1020.843369][T19883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1020.843403][T19883] CPU: 0 UID: 0 PID: 19883 Comm: syz.6.2686 Tainted: G U 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1020.843457][T19883] Tainted: [U]=USER [ 1020.843469][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.843491][T19883] Call Trace: [ 1020.843504][T19883] [ 1020.843517][T19883] dump_stack_lvl+0x3d/0x1f0 [ 1020.843572][T19883] panic+0x71c/0x800 [ 1020.843622][T19883] ? __pfx_panic+0x10/0x10 [ 1020.843671][T19883] ? irqentry_exit+0x3b/0x90 [ 1020.843720][T19883] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.843770][T19883] ? preempt_schedule_thunk+0x16/0x30 [ 1020.843824][T19883] ? fbcon_prepare_logo+0xa03/0xc70 [ 1020.843868][T19883] ? preempt_schedule_common+0x44/0xc0 [ 1020.843920][T19883] ? fbcon_prepare_logo+0xa03/0xc70 [ 1020.843962][T19883] check_panic_on_warn+0xab/0xb0 [ 1020.844012][T19883] end_report+0x107/0x170 [ 1020.844053][T19883] kasan_report+0xee/0x110 [ 1020.844095][T19883] ? fbcon_prepare_logo+0xa03/0xc70 [ 1020.844145][T19883] kasan_check_range+0xef/0x1a0 [ 1020.844195][T19883] __asan_memcpy+0x23/0x60 [ 1020.844227][T19883] fbcon_prepare_logo+0xa03/0xc70 [ 1020.844280][T19883] fbcon_init+0xd77/0x1900 [ 1020.844324][T19883] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1020.844383][T19883] visual_init+0x31d/0x620 [ 1020.844419][T19883] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1020.844465][T19883] store_bind+0x61d/0x760 [ 1020.844505][T19883] ? sysfs_file_kobj+0xe4/0x290 [ 1020.844555][T19883] ? __pfx_store_bind+0x10/0x10 [ 1020.844593][T19883] dev_attr_store+0x58/0x80 [ 1020.844697][T19883] ? __pfx_dev_attr_store+0x10/0x10 [ 1020.844768][T19883] sysfs_kf_write+0xef/0x150 [ 1020.844818][T19883] kernfs_fop_write_iter+0x354/0x510 [ 1020.844860][T19883] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1020.844911][T19883] vfs_write+0x5bd/0x1180 [ 1020.844946][T19883] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1020.844995][T19883] ? __pfx___mutex_lock+0x10/0x10 [ 1020.845048][T19883] ? __pfx_vfs_write+0x10/0x10 [ 1020.845095][T19883] ksys_write+0x12a/0x240 [ 1020.845130][T19883] ? __pfx_ksys_write+0x10/0x10 [ 1020.845164][T19883] ? rcu_is_watching+0x12/0xc0 [ 1020.845204][T19883] do_syscall_64+0xcd/0x230 [ 1020.845259][T19883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.845293][T19883] RIP: 0033:0x7fb8fad8e969 [ 1020.845320][T19883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.845398][T19883] RSP: 002b:00007fb8fbb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.845433][T19883] RAX: ffffffffffffffda RBX: 00007fb8fafb6160 RCX: 00007fb8fad8e969 [ 1020.845477][T19883] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1020.845500][T19883] RBP: 00007fb8fae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1020.845523][T19883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.845543][T19883] R13: 0000000000000000 R14: 00007fb8fafb6160 R15: 00007ffca94aad18 [ 1020.845577][T19883] [ 1020.845895][T19883] Kernel Offset: disabled