last executing test programs: 5m5.866081016s ago: executing program 0 (id=1207): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x400007, 0xdf, 0x16, r0, 0x1000000000007ffd) 5m5.714730879s ago: executing program 0 (id=1208): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000080)=@link_create={@prog_fd=r0, @target_ifindex=r1, 0x4, 0x8, @target_btf_id=0xfffffff7}, 0xe040) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dvmrp1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) splice$auto(r3, &(0x7f0000000300)=0xfffffffffffffffc, r2, &(0x7f0000000340)=0x8, 0xc, 0x93f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000003c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r9, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0xa, 0x2, '-\\)\xc3@\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x4}, @CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'net-shaper\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x1}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3324}, @CTRL_ATTR_OP={0x8, 0xa, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4081) r10 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000540), r8) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r8, &(0x7f0000001740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000580)={0x117c, r10, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV={0x115e, 0xe, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x100c, 0xff, 0x0, 0x1, [@typed={0x5, 0x107, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @typed={0x48, 0xa2, 0x0, 0x0, @binary="5b8eece99c64006fccc48748d56ccd8a9eb724b6af147b54b9db8cd3af019b9fbff51d2044c0395e777caea63badec76c2fe0f90aed594528c875d73aca6882a78088a08"}, @generic="aa7924272d39f0ab891f2ac79c4ff37308af4957fe00f2fc2d479def1688a2231f7d8ef0dc0c320a83654620d6c09833b11214701b7f245edb60c7", @generic="e28655402a8b052342faa7cc7d2cd21d81927dd6813f0239fa874d77038b28af01d225e140aad52f0424b20e04b7f7db8210b67f32af4a6acd2ed44bfb60dd61d7eaf3157ddab3ce085061148ec219d014113f692c9325433d9a5424c9b8016f95713d4d8d706bef5cf0a277770cc4e2640a367d9cd3f39b35df36e7eb74ddf100ebf4b6ed388d826f3a696816bbb078c109facb94c5d5eb40c905ce6cc806abf9512ebee3c01b1674da8ec2ba24e111b5af8833db7bae", @generic, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x3}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x2}]}, 0x117c}, 0x1, 0x0, 0x0, 0x840}, 0x800) r11 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000017c0), r2) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000001900)={&(0x7f0000001780), 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xbc, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, "4cb4efc4c3ccca2c3a1467976476a2d76b3d03eddcee761a70b34aafb8dfe678b23fd0747c2eadc23ba57fb2f49e723e5c187d91c30ddc0940cda64e7f58488006ba0c591927aefd6beb6f09feca7a737005c83dcb27f5eb3877e205e5d0a1bb0e58e62daef0f1b14136ef7acc659d9ff249f84188b07b6bfe64927b9efe5f349705a2fd2a57199cb9757526e77196042204f7eefc7ba8b3f81868424e14bd35e945ba1d47"}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x34008010) r12 = open$auto(&(0x7f0000001940)='./file0\x00', 0x6, 0x6) r13 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000019c0), r2) sendmsg$auto_NFC_CMD_SE_IO(r12, &(0x7f0000002ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001a00)={0x1064, r13, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x4}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '&]&'}, @NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [@nested={0xc, 0x34, 0x0, 0x1, [@nested={0x4, 0xf3}, @nested={0x4, 0x136}]}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@private1}]}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "4e1860fe7c5320e3349d2e561ecc6ce3dcb28c214d6819b33d9483adc2fcb3107a0b3b4e05919a692b4a09191ee87559e5c68cc9f9cca9c553c5df68344b7de283e5c7725b2fb0f6a37d2e89899a7495d7d0794e24d9f7de7d44c8edb8270269fb7851dda55b1f4f2f08f2c12d0f7cca035f9559db679ecf3b21b6b317b782cead92653eac26e863396ec6d80dfdf0ebdd8fd97f953fddf39f38c2f3a86d9dd4ca8bc732616759e3b3ded07d51aabbc055fec79f3b24321323c710bb5b2d8a4822f739dd2f9e15116f8d248e17beaf39ba67d7a0dcc329d49b6505151dc9db83d64bf1222942e8ff6aa11ce302673d4a6efa4c39429f0de388dac7d8530a1635e69d6c8798835e572691f05f457b5ef8bcc156bc16f9e5e4f110a76f23c51bec3b243392dc59c133dbeb91ef983206b1dbf57fac54cdcf65902135419100ed5a2986829b21dffa58b64576219e24c549472184babc547138a71ee92ced1c15129336041153c6d6213597e182632e4eeadb917d74e19c491ccbd8bcead99652cadfc0947f9e9684e512d06266fb1a0580aaab11a4eeb7d4afa48b69dddd686b584e70033bb56ac25628c71cffb5486348bade2a77585f68a3f1b4f0c984411f589b8af81d885bd820ee5b30b3711161a63c9d92e9e6e47514bd879b410589a62eb273f4588ce310ea28570c342cc32edc15366833bed1a5b5727fc3471f09cc02f7828c3a2c22c6193d0541be55385f49530ca4bcfa6f8784e769aece1b0f59eb4c225d08d011fdcbe82979b7d333661038119985b618f8982384d992947e295e26a8fa1acb5a673213f8c0f6a90d07a44ffedf3585fcd6de87dae572cda2421461a71f010edd37a5d6d57407f95afff1c5205752796d7a13b5b945a37f163ec9f616e082067b067466d4f1dbd24eef37916c898e4b485cd8abf23897b278fc8965721e6dd39fae772dd214f37752fe4228c7be2814ad493f9bf1b5d527b8b15fc10bbbcfd277ae97ace3751ed8000b22b830e3d484262a1442a40f476bf4df0f39a2dc3e10ce48af838460a93ef67484bd8bf389986ad7af23ea4bb4a2c998f968dd69ca9b17b5599343fd15f2dac92101bf22c75f5f36eae04ec19cebdf8181408dead35b0f81f6110bf8c68ccb48145224c33acbf9e69931ee3f9680aeb73c5c2933c3c89e18623a3f67dcfad1c9975873e23dbad93ef00ddbd01301c042ed42bc8577b8e354fc6f783a2bed2b9affd5b76436fbf3c129b67e4598cc14463b16f8b233ab3aa055ff47a9ded585c81abe75c33450d6e197959c1683dbbfa919be1307ab6d45a1121d2213d6bc78c143aaea2cdac145d8559616ff020f8d6492792cd811efebcf7ed77c73180376a28df03e809d6b1c94797069ce4fb42acbeae24cb0826a090c3de4a50b0a6170748abb4b46cbf6e47dec3aec613d12a94ec3f4c1c7a9f45bc1ff773fea00fc061152d89254c12a04bba60e840c8156113264abfadcaa2237802545110233ad4d86be1ed377d0b8d0243f7ead4cfd5033f9fa87477d501ddce40ef13d236b5aaf8bcd73c45df1956d548be2fe8787e5c6d4c01ae4ad0e6081f27bf64e99264c600996fae7787fe740673b661e46553b4717e72233bf3448f9bfaa522f3518cc33257e4cb07e684ca4d3c4d9d9da3d5cffe4eec2b9908f8fb808f48f5692bf90e364f8189e488ca8442428ed0394e079ff8c22ebcaeb3ab7f9eaae2b0b1df85d0e7e2ab2d17f527f69fe85381c1ff22f423f98a4d1c186187190fa4d6144a09ea4625c566cdbfbcac7e2b72f1c3cbd825df9dafcd9b81a6aa45cabbf4fdfd99011ec768ab3e9db563d9b5cf02d1412b8ae65d25e94612739d89c688a84a2e5816133ea958fcf61d04d4cc2c954586d278d5dc060fb12879e0080a7c3de568bf3c5b7b7867bd016baf58c07f93cf1c534f2a9f4aadd8ff9094ac7e7cedf137a62afe8d6803cac0d6e966bd3cab8ea8505cde14a24e4bbd38f683779475fe4d320845b690ce56d8b2e2e92f09892c6b6c7836f81a87f73470764060e0341b5d40f26963c62a5f74a68cea816cf606a9480d3d0a7b49d150170fc4193a0272f820c13fe62da5001e72e7922a12d70a3ea0da34a952265052b8d20bffecde1faf578f75cfe0e6706115cf908269763e5206047be206f5e1849416cd900da43f3f93644a1a4c529b4795f43f9f2c1bf52ef66f4a365a363c5d9c626bc72d8644617885a3b5610de31cd43cd520cd158d357104d4c163745123a6adc8b3068d55ebade9b17180ba7c7086c1cedbb94241c69344188ac794d24c4717cf40346e33ceecb46448186fe9eb9fec5f0d56cdb616a8b951494d15ce6cf45eebbb0e4cceb98d38b8b001e9bb473a4b4a8b526945c34061a7ee3b089358b67123c842ebbfd21665250e346067108b45befe80c8bc99b9be4e7b12010b357cb5a499f646986b7f48969ca8e2d1dfd41d738a8b1e77c6ac923fb20959a8449e0ed2375d16388701e32229645a1cd51cf61e498d7a71f57f45ce61fb79ef696ca65ee987d2a237503c540d6beb8ebc08d6594c6036f246df8c2678d6eb1646b724af124fddfb8affee51f563722b64442c5abf48ff856755ac8f3df27d1644a3fd4c8a06e16f871fb72a9a3831341dd014d94bb4da493e118d87614f2c3c232acc8c8ad0a74feac7a21b8125f63297b010cd9e5315af6f59c3118a215e825d8929a2d7b590ec1e3ccbf80aa23a0beb61c91b185043d3a1226314cecfb30225374255c6b947d1f50f9bed2055e819ff080f31935c0208131130f46fac0d5ff7a527b43bdc820052b4b83ba67eecd1d22ee372e14574fef8c84d5d48dae4901ad6679507f0796ba9dee248d07060325b37873ddbb07981a50f38db3cb16b9e8d5b5d56fe8da8d7c2e7e8b9948c4afe95e64737bbdf8e8bea348d36cf573d4b95bbccff935ee33f13081f62541dd709892e595ec1f95a1cac553487a42bb3c4d436402c379d68aedcf6db7c702472ee3c04448fa5f04533659b9ba9319019b5c8349da4d6efe419ec925b97c3b3ea63c2275a6ba896c5d6364a11e875c76253cf0a2bd7fb14977727f50d887298147b668a6e4a7ffd32c65d13018d6b8f036da2893a8c2195b63f718ae3e495794c3388f7061e0f08fb0e65492816a4b538346116d75f76019fd0e4c785891cdf95f8ffd3f4350af99298a91c15f178bc4d49c6211aae712e042e8c31810d5f32863bda5610e2f771363cbc1b86d083e913c8e8dc5b4f70c7705b980a24471fad187c29d30a4be7c73a3281712653cba597806b5b9ae12e0277f9fb22db29efb2291d2fb32f477aa1c6b9ebb547c17badb62b9787f080bbd821e11e8f875dfc0e3898d1ca4499b9a20f5e1e22c54d67fa03dc4ad2632e1788927c9391ef99051d2ed5ceae8dea151de22ae968c8c46ebeca212af6d67cbb869250c614ac074be7e2c697fb54db20eaaa0edcc4843b7affbe591f63c6e841515cc9e6144dabc59cb3113db7627630fbeee440ff024533b1a57f5e557380feb658e5d61754a94c9af7cff481d465a29ba10f2aa7e90fba7b61f3822986dbeaabe5a0d5650410a3b2b828bb9f4c330ec4f1a550ff464fdd1234bb731cbbe79c3f533b4c47f8a7367bf302d0f81dfeab82cf837cd90e93f32cfd10214187462879d79cf739bcdcd2b87769bf4ece8c26a2f160b2488023f4d45233e387583747e41d6088ce0e1831ebd011531ec5dc412569d6e0576ac40f57acb5e42f2143175279c24606dc59c9b2e8a9c2921a1f0da6148cb120c8aee04268c4818b9e1138f84d0532f8db1ce245b8535f7455986615a33ea5faac5022ffacc6fce8179c68898976f5b840f46fedddea6d53f37ce88694b25571bd7f4bef527b45db6c39562515cb86ac86d6091e257796a8c12c27c48c8f3fe7ffca60beeeb6ca1069cf8a3a12d8f428305b97cee6d88de073f6d92d6242c3d6f27f9fa7205ab1e62b6dc8b504733034d3dbb92955cda2793abae0973dc874646e9d6c6eb05429a84794004b53a45af2521b638915fcf42586923fbb1280a91d3b25891ff23d9ac9ed3fba3ad18da23355ef568b002c9a047a4fb87e20c98c0fae81f155a4c8fdbe6e4693c170f1d1149e8a6117d3c698fe7b191a51950b437c5aa7ff514343f55d73381175901fbf9c4ab861196f8887b0d308c2ffa238ba7aca46caa8614feb5005017097f6b1ce3d58986e6b887e914171c14e77e7a799caf5a8ee73ca28ccc0820b058b032854351ac29c6ab51119d3b57147485fff344f70f584d34f407e6d157ca2ba1542a3dbff3ba2537586a22efb8aba2438efad7863ab4b5628063c54d8b55835e758570172b81c52b86e12145c6c69b7a94562428a079d5ea8a413260a3961497d03dfd91dbb38542ea4d5fe0dea2fb14a8e5c33f21c86d58c98167b01614e156be7e5bd2ddee84148bddcd6fcfc04bbe0227ce87333018b46734945ec067f1ba96d1174b6d50df45875b10bbd09c95344fdcadfa881a76e38051820349382e1fe9c44f0493d5076caf292c3d9a9db12e642683fb04f8cb35d431fdff81afcd0603b06c8930c329ac9c46ea12c5636da6ee70928f157f00b217cadc2849923c84a2dae7624cf6bc71d8cbad6ef8fa12a07c4492ce40b05053f36acb7f4fe79944d82f80f5c533b3d269ec4c4058b8245f8cb4d402c123b5f2a727ec9cb6414339b3e97ee6cc3991940856a2fd1c14becf84cca1480ce976ede0e397e5db2817f832ff1e9189315b2d64f4cd44221fdfdc8acfbdf938e6a271af8c54fcd8814328a3ea68c8f99db7dae0a888a71da9ea0582fbee82ccd7608ac0aa3f834c5a1092f106740c43c6c5758f8fc8400dcadbcd42dd180022333be48822e08afbd552d079fe02cfb1c1acd6b2c2a9eb2645ea56297a97025d25d52b455cc800383d4bc909885ce2f16da9cefe7578a1fa0991d99ec4aa55a8451d763b782dce7c017b7dc4ffba7b3627fc3d1ba6b18db9efab8c38daa091e1420af1b02ea3e1f01053139b75083d54514748db6e78fb0b7ee1bcd080db25616fbac8d01eec9d576138907c6f895e88a8dc3cdcbc3f08b09dbfbdb34f99d975b3763320d55ec2ae74c5f054c81e4e72d394c8fe7d1feff950ae17eb76f62eead66550344bc6250f4ec13307c88eb0b45e1efbdcd27c0ca77bc4d2227b71a37daeff373da5f514fca008608bf21319039203e66be1f00549e7d4a5e8162e158618b04fb6c2f06bd62162ac0b3f6ef3b4a7762632e702be2cf6e9fab53d3d23971f1976571972c000089ba8d5854c75f1e139610813cb97c083fb4df0d71090120a22110293d43909ecc428abb60f18a5878ba5d24c33fe6b1235ca5a71f94295ac0a7c8e9da9fbc6e80e945188de3367e9aeb91bdc6b3d7fa13fb83a1f710d361f861b79d96efaabd985e56c3c090be88b1b560ebb31b100c50826010fff9fdd895af306b8e4889bec2262989ab1e5cf32244effce4457bdc0154134e6975effc2268833c9fd6ed6939486476b6cbb629da8cf3c808b1ede33ae4de8dcca50d46950c622c86f324eebb478bca1623ddd0e42088ee0a21129ba6f8c2c2d3b20037a7fe4ca02c6cb2e61df06a407a7b746e24514448406128bb5feed7bc839a7da571926b387e4db40701f8ce51e0537c14ff9f91ee0c18f69ea0d1da4c308194d516bf90b479618f1d015ed5364e45356d77fb1a0cbd3e103e4b90706c3b6314ce06c13c7b2d62fd3bde3afc85d41ab034182bd3f3789cf40b03f370ee98b3b583c14"}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x101}]}, 0x1064}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$auto_NFC_CMD_START_POLL(r3, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x24, r13, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x3}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002c40), r8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x20, r14, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0xc, 0x149, "56c282e6c186379f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x8000) r15 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002d80), r12) newfstatat$auto(r3, &(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x1, 0x8000000000000000, 0x8, 0x2b0, 0x0, 0xee01, 0x0, 0x401, 0xe, 0x45, 0x9bf2, 0xffffffffffffffff, 0x800, 0xfffffffffffffffa, 0x6, 0x8, 0xd08}, 0xe65b) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004380)={&(0x7f0000002ec0)={0x1490, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x24, 0x1e, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x103, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x31}]}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1448, 0x2b, 0x0, 0x1, [@nested={0x29a, 0x119, 0x0, 0x1, [@typed={0x4, 0x102}, @typed={0xcc, 0xf4, 0x0, 0x0, @binary="54b063c036e956972f377c6ffaeb2988490f9ad1e27f594d5755be74bd6862e2770b7dfee36a949f9129c9151742251f77a0fe78c64bd8e0862b3502d9a1c77b41e0cd1a05ab3ac14cb21c6cbb7aa4c25f02530b8d7f1c91c2f2e9ba26dfa5b17344499db7f23e4228c416d6bb98416174e5f9fdd8c575acce888ba8649ef96c6e3e636cc004a57debec4e91bcec462f680ed06c2191ea7b17a6ef72877a310db2a4970ffb7fcb0161658f968b9c12f4bcc6bdeab46e56c5cf90caa9228f8d5bfa41f00ba5d28bc5"}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x100}, @nested={0x4, 0x90}, @typed={0x8, 0xfd, 0x0, 0x0, @uid=r16}, @generic="fd065f67a4b17ef933e43c67ee3a6e11851323c222f3964a95f9d316e1d8fcc33e", @nested={0x4, 0x26}, @generic="1e193f66488326ead015db7b4613eb74576dadd18b9d2db6d1129d105dcce6f8622aead558a2da237313f471ff0468fc5b29324244eab38e76e18a92827ee3d5a94af6dc8118368ce78f5131c8e7c18937b76d9e07c3122d553bf41e116829e38f22fff67bc97e4ab91e62b67b123f12c9270ae58973377832dcd373155436aea5a3aa67a7c0fb9425606276be8ea84b9b9515bec9", @nested={0x4, 0x36}, @generic="f64593b694bb7ae1340cd26c00eaee2667a1edd915aa1beb886f54c4774989a44b4c9ce30834b36abb8719064dcdc413f710d0cc12d03745558e96584c330939086b2dc0d900ff421229fbbbc3a180de3cc6b5f64ce8056095fd6abfb628d96dcae1abf09c1207f47654be805934f0fbfe8ae59ad0ca12b340bbbfb9fde3161170840a9bf4357e5e14024ad2e5b1bba6c19fd14231437f1502ea8080a34a9bb9bc76f766320ef085114d7f453a38e18278940df353a57905a01ead911a0161902e951e0c6e45479af09c2d63dd4c15764c49732be0506537e83e91be6f6769bba45601d165863e5437082d29506ee20f"]}, @typed={0x4, 0xea}, @nested={0x69, 0xf0, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @u32=0x7}, @generic="b054", @nested={0x4, 0xf2}, @generic="c1f98a5f33d37e8d037c7907c8fd0d0cdad975c6ce8abddfee7723fa874e5a0e22f5caf6046b4f847b854ab57d4ff2693aef1ef843ccccc53f54f11a67021ef4d39d0bc32835de62a62364fa6eeb78c22f55ea", @typed={0x4, 0xc0}]}, @generic="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", @nested={0x131, 0x8d, 0x0, 0x1, [@nested={0x4, 0x142}, @nested={0x4, 0x65}, @typed={0x8, 0x48, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xb}, @generic="ce29d080c51e36b5c342d016370cc16946a893a83b07a31c6871bbd713612bcaf6ed214b67691fe42aed2ce52dd9613e920dc39dcb22bfbf15403b3183339839bf8b105442dc8a65bd5abff0c784b5b3f5098e9fdabb79e983159992b7eba15d9052ee742e815961f4cab0994295219905a6cd8d162f66e5a0a5", @nested={0x4, 0x8}, @generic="e8446d0aca8a1a3ab16ed61abb5bb0706a8d77906b616ec218044c5ec1423869d62df37c4b2bc116", @nested={0x4, 0x10a}, @generic="7883825afbcadc1ce860f9f58219cb3fd95089c6bf720147ef39ddfe8ef67865936cb818bb1f88f952d9f2869eebc27fa4e0b55a5ec5af9c27b3c0f6f4b80cd3b962e0a4b74088387f9f30e1b93b0aabfb649077d2ba92fbb2169a0730c086ee1ce7c065f4c590", @typed={0x6, 0x1b, 0x0, 0x0, @str='%\x00'}]}, @typed={0x4, 0x91}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x5}]}, 0x1490}, 0x1, 0x0, 0x0, 0x20008801}, 0x90) fcntl$auto_F_OFD_SETLK(r0, 0x25, 0x68) pwritev2$auto(r8, &(0x7f0000004500)={&(0x7f0000004400)="a89ea98e0ddcb2aaa56d1aac27cca1484c352c4f81153ee90a793ecf3f78059b7821413cc471f18ec71225b3116295c362ee9c7fe538b483b21ff95b4adb6b716c1ef7b49bad10874a4d128d46b74c320e62838af1ea04af5cde42622d9b43aa13582c7a15b4df64cf181c878ffc602f8ac8090efcfc4573c41d9a127e0252f5f9d596fb95abc395d85f1fdbd9d36f1f7562cc8ebfa6163c1490af55736d26b6815f8436ecca4260b8d47cf12cdbcb63e10635d473b47b52e8bc33ad362b0855cff11104799c63f57d834ec24e7860bc1c1ff19d116397d8dd858bc5200c"}, 0x765, 0x9dbe, 0x5, 0x9) lseek$auto(r8, 0xed93, 0x4) r17 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004580), r12) r18 = semctl$auto(0x5, 0x8, 0x7, 0x2) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r12, &(0x7f0000005a00)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000059c0)={&(0x7f00000045c0)={0x13c4, r17, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1f8, 0x2b, 0x0, 0x1, [@generic="aa888a1ae890c9bb696f599ac356c6e488970e872f418c730b37f8300ef26c1056bcd331d1b843ebfa8b3cec29b007cb96bd717ef2276fee1b4aaf5858030091333134cf128a7f4eb69bcf49e74a11361825673fb9de2466ce837e6b63cfe081a4ad86f6dcb94c6e7be53bd8d7d91b6e9b20cee6cb82caa816248f4095a75eac22c147943703ddaad519a1d240c69d7e3c050d8ab43fc507ca9b0d5fa0f1516a53aa15d0", @nested={0x150, 0x5b, 0x0, 0x1, [@typed={0xf, 0xb6, 0x0, 0x0, @str='net-shaper\x00'}, @generic="ddbaf825fc4f7a26010f4c98d31f71db47fd7d9776856d9088eb3cd7cd71835196bb", @nested={0x4, 0x10a}, @nested={0x4, 0x121}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r16}, @nested={0x4, 0x55}, @typed={0x8, 0xec, 0x0, 0x0, @pid=r18}, @generic="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"]}]}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@loopback}, @nested={0x11, 0x6e, 0x0, 0x1, [@nested={0x4, 0x60}, @generic="090743d6af", @nested={0x4, 0xf6}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x84}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x114f, 0x19, 0x0, 0x1, [@nested={0xc5, 0xcd, 0x0, 0x1, [@generic="666d478eb050ea3b34a6efcf4c2a33ce4da39ef449f7cad17e3dbd048a5a8f1eb7c2e56924878776845975946f272c8558e60be2ec82b7dcab8ba1cc19fdeb324d43c40c04989bbfcb8b1d02c6d41c9f2b10b6703c78fd4f29bf", @typed={0x8, 0x48, 0x0, 0x0, @u32=0xffffffff}, @nested={0x4, 0xbe}, @typed={0x8, 0xc0, 0x0, 0x0, @uid=r16}, @generic="7a75c66c15dfcfe81529c76039fa5138547fd84d9990192454b913d407f60c970e4ab8228dc4a2ceb877d35aa5bf762d134dc058035eeaf604c384b38f09b3d855186f3b3d18e01ba3e765e6b04a68de163de6"]}, @generic="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", @generic="840773f56102dbd2d4e73a29e1dfbc61784e60a6e0e30e2efad844a8b2ce1382fd9170a093bf3b37f16f892f683efa5b5eed70ebfb83f4227ca2fba608dd7ea604a0fe1eea94f91035562d0898e0883bc9de7cbc61bc9511e059a19e4f0f13d3823fc37ca57741c90a704c8aa46240b9ec619e434bc2634eefca3bdae6f355eed3f1cf"]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 5m5.364186113s ago: executing program 0 (id=1211): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x100000000cb}, 0x3, 0x0, 0x80000000, 0x80000000}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 5m4.34307777s ago: executing program 0 (id=1216): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) (rerun: 64) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) r0 = socket(0xa, 0x1, 0x84) (rerun: 32) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) (async) close_range$auto(0x2, 0x8, 0x0) 5m2.844091565s ago: executing program 0 (id=1223): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0xffffffffffffffff, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x4045c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd3/state\x00', 0x301802, 0x0) write$auto(r2, 0x0, 0x3) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001000000000200000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0xc800) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x2, 0x4000000000df, 0x9176, 0x401, 0x300000000000) madvise$auto(0x100, 0x9, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000003c0)) 4m57.123697841s ago: executing program 0 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) write$auto(r0, &(0x7f0000000400)='nl80211\x00', 0x48b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) (async) r2 = socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) (async) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r3) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000ba", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250d0000002000018008000300000000001400020064766d72703000"/46], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 4m39.282986644s ago: executing program 32 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) write$auto(r0, &(0x7f0000000400)='nl80211\x00', 0x48b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) (async) r2 = socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) (async) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r3) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000ba", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250d0000002000018008000300000000001400020064766d72703000"/46], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004540)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 3m39.661512696s ago: executing program 2 (id=1440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r0, r0, 0x0, 0xffffffff) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) 3m38.550321669s ago: executing program 2 (id=1442): mmap$auto(0x0, 0x100, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(r2, r1, 0xffe00000) r3 = prctl$auto(0x3e, 0xf6a, 0x0, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xe1, 0x9b72, 0x1000, 0x28000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="7ad6adedcb84af20ac6a4a0ac848c40000000a7199ad2580b099ce3104006ab19404186d470de61c118e8f2f369ffd8d1b9df9105de6f2613abb450444a18262c3fee1410ecf73fc56ce72031540f4100aa24ac08617e02db8cfbe4f14a203f88f269ca66cbe0cea10307e19773e84", @ANYRES16=r5, @ANYBLOB="010629bd7000fedbdf250200000004000a80080001001243ed14", @ANYRES64=r0, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) setrlimit$auto(0xb, 0x0) r6 = getpid() mmap$auto(0x0, 0x40009, 0x1df, 0x9b72, 0x7, 0x28000) mincore$auto(0x4, 0x8001, 0x0) rt_tgsigqueueinfo$auto(r6, 0x0, 0x21, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/rpc/nfsd.export/flush\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x8, 0x5, 0xb7, 0x4}, "1452c08d5e10f21ff1a0e80906dcd34684bdf38e5857e7ccf9f7758d0a49ef74a07347a2b493abb47646cdf4303fdb4099ad65446f93ba76955593e88eb49ee6f112344d4a3358f6c472325db13942a9", 0xb0000000}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) clock_getres$auto(0xfffffffd, 0x0) 3m36.977111035s ago: executing program 2 (id=1448): madvise$auto(0x0, 0xffffffffffff0001, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dmi/id/product_name\x00', 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x2, "a7d7363b4fd495c01bdb1a0f9518"}, 0x7ff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000280)=""/21, 0x15) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x388}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) open(0x0, 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) bpf$auto(0x0, &(0x7f0000000780)=@link_update={r3, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x10000000, 0x800002020009, 0x85fa, 0xeb1, r0, 0x8000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = geteuid() keyctl$auto(0x1f, r5, r5, 0x0, 0x8) rt_tgsigqueueinfo$auto(r2, r2, 0xf, &(0x7f0000000100)={@siginfo_0_0={0x2a, 0x5, 0x6, @_rt={r2, r5, @sival_int=0xffffffff}}}) mmap$auto(0x541, 0x4020007, 0x9, 0x14, 0x401, 0x800) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$auto_nsim_psample_enable_fops_psample(r4, &(0x7f00000002c0)="94eb4f5bf57c54fed7e3a3600d240e1d4dd2e6d714365ca651498b106dc1374f02727b2b22448ef934def0fb2d11b7487ce16bfbbd8248d2553b59ac4147ca729a9935a8c5a3967aea1154d8a81ee0cf9f424a85a33815f190590448d275f59611ad9cb805642e99fc6f5b91a4e1daec903c1c6f42315e90b3ed3d360f9769239177253b338abdc8ce3417eea69bc4c0e084bd9709054752031717b8ebc35d00b695003252f4d15660043a190b2033711c4bc31b31148f0188ff40c384299e026ea2ab336ec8bd393d37a9307466ac3a265cc0f0296dc61c", 0xd8) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) 3m36.319411959s ago: executing program 2 (id=1452): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) gettid() close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m35.090821203s ago: executing program 2 (id=1456): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x191101, 0x0) r1 = socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, 0x0, 0x4040801) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES8=r2, @ANYBLOB="7bb5bdab2959dcf499e7c70640e1dcaf0500000000000000fea02bb4b83250b9e1710b605f61e916f670697ef1c8"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0xc1) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000ff8951baa915700af754a4ba828207bc46e542216180a44a3151978eb1a32c35df7b0940776f3fb78e3f07253bd30302bc4bf382a53018b962935a8110c91bd4388f227ae6e59d5edfef08f2a47bc3095bcffbf471518c2792f65dad31aeb626933298b1d235027b0dfd4763a133673ac4dbec1be1591a41ed814349daa7419dffc86359b49cf30ba64e30385ee22ac241281fc909ea009dff3d43e2a64ecd03c4d154ee9a5757", @ANYRES16=r3, @ANYRESDEC, @ANYRES64=r7, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r8 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r8, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) write$auto(r8, 0x0, 0x2) r9 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r9, 0x0, 0x1ff) sendmsg$auto_NL80211_CMD_SET_BEACON(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYBLOB="000325bd7000fddbdf250e0000000600b10000800000"], 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x0, 0x100000008948b, 0x0, 0x15f4da0a, 0x3, 0x5, 0x62, 0x2, 0x7, 0x6d3e, 0xa422, 0x10000000002, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xffff, 0xf2cf, 0x1ff, 0x7f}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d621f400fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6e}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x208200, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) sendfile$auto(r10, r10, 0x0, 0x3) 3m32.897557348s ago: executing program 2 (id=1462): mmap$auto(0x0, 0x11cc00000000000, 0xdf, 0x94, 0xffffffffffffffff, 0xffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x4d, 0x0, 0x101) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x4, 0x0, 0x8, 0xe, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40840) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x840, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0xa020008, 0x4000000003, 0x12, r1, 0x8000) (async) r2 = socket(0xe, 0x4, 0x0) sendmsg$auto(r2, 0x0, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) cachestat$auto(r0, &(0x7f0000000000)={0x80000000, 0x2}, &(0x7f0000000080)={0x3, 0x1, 0x2, 0x2, 0x2}, 0x3) (async) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x6, 0xdf, 0x9a72, 0x2, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r4) mmap$auto(0x0, 0x200006, 0x5, 0x79e788ba, 0x602, 0x310000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x5, 0x2c) 3m17.291238908s ago: executing program 33 (id=1462): mmap$auto(0x0, 0x11cc00000000000, 0xdf, 0x94, 0xffffffffffffffff, 0xffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x4d, 0x0, 0x101) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x4, 0x0, 0x8, 0xe, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40840) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x840, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0xa020008, 0x4000000003, 0x12, r1, 0x8000) (async) r2 = socket(0xe, 0x4, 0x0) sendmsg$auto(r2, 0x0, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) cachestat$auto(r0, &(0x7f0000000000)={0x80000000, 0x2}, &(0x7f0000000080)={0x3, 0x1, 0x2, 0x2, 0x2}, 0x3) (async) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x6, 0xdf, 0x9a72, 0x2, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r4) mmap$auto(0x0, 0x200006, 0x5, 0x79e788ba, 0x602, 0x310000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x5, 0x2c) 7.247841754s ago: executing program 4 (id=2134): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x1, 0x8000000d) semctl$auto(0x9, 0x20000001, 0x13, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x29, 0x2, 0x0) (async) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) (async) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x5, 0x800000000000ffb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_getevents$auto(0x1, 0x1ff, 0x9, &(0x7f0000000080)={0xffffffff, 0xc, 0xffffffffffffffff, 0x9}, 0x0) (async) io_getevents$auto(0x1, 0x1ff, 0x9, &(0x7f0000000080)={0xffffffff, 0xc, 0xffffffffffffffff, 0x9}, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) preadv$auto(r0, &(0x7f0000000140)={0x0, 0x8000000}, 0x3, 0x9, 0x10) socket(0x28, 0xb, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x98) setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0xfffff9d5, 0x2d, &(0x7f00000001c0)='\xf0&}\\:-:b\x00', 0x4) write$auto(0xffffffffffffffff, 0x0, 0xc6) (async) write$auto(0xffffffffffffffff, 0x0, 0xc6) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) (async) write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) 6.83811798s ago: executing program 4 (id=2135): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000240)={r0, 0x5, 0x2}, 0x68, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) read$auto(0x3, 0x0, 0x7fffffff) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r3, 0x40104d14, r3) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pread64$auto(0xffffffffffffffff, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8) 5.651811647s ago: executing program 4 (id=2142): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/inflight\x00', 0x88040, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/inflight\x00', 0x88040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0xffffffffffffffff, 0x2}, 0x0, 0xf4240, 0x0) 5.411608929s ago: executing program 3 (id=2145): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/5u\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000080)={r2, 0x0, 0x9, 0xd5e0, 0x9, 0x5, [0x4, 0x2, 0x7ff, 0x0, 0x3, 0x2]}) pread64$auto(r2, 0x0, 0x0, 0x40000000009) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) close_range$auto(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x758, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5e9}, @NL80211_ATTR_QOS_MAP={0xe9, 0xc7, "16df01c943bd32706a9c9c3a828d09804f53a3fcab35f407508ba5c4ad54c08409ed7f9b4fc3de45e99b19516d3eb77e0a5e08137fffc33bb72409b48b75fd3205a71fb288f336669570c66346fa943553f6530dfa3d2ccf900f708a08a19bbeabb256002ae47adef582d7dd563a28bb7db90c6d664eb423f9b5464246df81a97b8fa2c8793f22d979465fddb97b920e918f37b0bcca5eec719336c2e064a6c9a63da2fde0eba752f7917faa8f020e592fc21328f4b58876ee2b245fe74288a7761b3ba8bcf3ccfccfaafcaf1d9ef2e2562763b278df667201b3d59ab9540a3e4996b99aa7"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x638, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3ba9}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x612, 0x2, "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"}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_FILS_KEK={0x9, 0xf2, "22a335c7bc"}]}, 0x758}, 0x1, 0x0, 0x0, 0xba6c658bd8323328}, 0x20008805) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 5.269959315s ago: executing program 1 (id=2146): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mremap$auto(0x0, 0xeb, 0x3fd6, 0x3, 0x7ffffffdb004) r1 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) read$auto(r2, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) write$auto(0x3, 0x0, 0xfffffdef) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) read$auto_clk_dump_fops_(r1, &(0x7f0000000040)=""/59, 0x3b) io_uring_setup$auto(0x6, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x80401, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000080)="8c551a1f616f58606842f48a1ce54f0f4ac0dd8335f4e3327f912d5b11b2187c90421a18c23b2b5c3de63d84a320cd2b851df4851f250a4714a2d096bffaf0b09040ec44ae8d948d5377e735b4f589e2d1397ae4edc6d1d29fd20689b983e764", 0x7}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, 0x0, 0x4000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz9\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) adjtimex$auto(&(0x7f00000001c0)={0xfffffe01, 0x0, 0x2, 0x2833, 0x100000001, 0x7, 0x5, 0x0, 0xd801, 0x9, 0x9, {0x8, 0x101}, 0x80000000, 0x36c, 0xe, 0xffff, 0x0, 0x2, 0x4, 0x8, 0x6, 0x3, 0x4}) io_uring_setup$auto(0x6, 0x0) 5.16880843s ago: executing program 4 (id=2147): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f0, 0x24) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mseal$auto(0x8, 0x7f, 0x0) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.375724087s ago: executing program 3 (id=2148): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) bind$auto(0x3, 0x0, 0x6a) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/99, 0x63) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x803) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim15/power/runtime_suspended_time\x00', 0x44000, 0x0) read$auto(r2, 0x0, 0x20) unshare$auto(0x3ff) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 4.165708756s ago: executing program 5 (id=2149): gettid() (async) r0 = gettid() process_vm_writev$auto(r0, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) (async) process_vm_writev$auto(r0, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) capset$auto(&(0x7f00000000c0)={0x4, r0}, &(0x7f0000000100)={0x33, 0x2, 0x8001}) mmap$auto(0x0, 0x6, 0x4000000000df, 0x80000000000eb3, 0x401, 0x40000008003) close_range$auto(0xffffffffffffffff, 0x8, 0x0) io_uring_setup$auto(0x4d, 0x0) (async) io_uring_setup$auto(0x4d, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) getsockopt$auto(r1, 0x80, 0x3, &(0x7f0000000300)='\b\x02\xb8y\xa5\x042\x9f\x12\xe9&\x1e\x10\xeeu\xdf-_J\x14K\xe7\x8dy\xe7\xce<\xae4\xbd%?\xba\x8f\xf7cS\xcf\xe2\xfb\xa0\xf4M\r\xb0z\xf7\x8a\x10\x03\x0eL\x01[\xe6\xdb\xd3\xf1M\xd9\x8c\x10v$\xa7\xcd\x90\xbd\xd6B\x83QIt\x9d\x9b\xa5V\xd4A\xccS\xf4\xfb\x80]Y\xd8\xc9\x95\x80\xb5\xbcyp*\xca \xa2\xd4\xfby+\xb4\x1e\xfc\xe4nz|\xd3e\xed\xba\x890\xb6IG\x1c\xde\x96\x04\xe4\xafI\xcc\x9a\x7f\x14\xd6\x05Y9\x97\xea\x03p}\xc9\xe7\xa7&i\xb0\xa8\x04\x12\x92\xa0\x0f\x03\x05\\B\x933\x0f\xc6\xb3\x10\xc2\xb0*\x16', &(0x7f0000000080)=0x8) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) getdents$auto(r2, &(0x7f0000000080)={0x7, 0xc, 0x3ff}, 0x201) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f42) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0xffffff80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)="b4", 0x1) (async) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)="b4", 0x1) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x80100, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x80100, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x2) (async) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x2) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', &(0x7f0000000100)=':,\x00') (async) rename$auto(&(0x7f00000000c0)=':,\x00', &(0x7f0000000100)=':,\x00') prctl$auto(0x1bc, 0x1, 0x0, 0xb3e7, 0x4) 3.917841019s ago: executing program 5 (id=2150): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000bc0)={{@raw=0x1, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x5, 0x8, 0x4, 0x0, 0x0, 0x7, 0x100000001, 0x3, 0x9, 0x8, 0x81, 0x9f, 0x9, 0x9, 0xb1, 0x0, 0x3, 0x8, 0x2, 0x10001, 0x1, 0x80000000, 0x8000, 0xffffffff8db4d983, 0x5, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0xb, 0x0, 0x804, 0x3, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x4, 0xa, 0x0, 0x6, 0x800, 0x0, 0x7, 0x101, 0x2, 0xc9d, 0x401, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0x6, 0x4, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x7, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x8000000000000001, 0x4925, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x5, 0x9, 0x8000000000000001, 0x5, 0x1ff, 0x1, 0x40, 0xffffffffffffffff, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0x1, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x2, 0x7fffffff, 0x6, 0x2, 0x0, 0x8, 0x5, 0x1, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x10, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) exit$auto(0x7) read$auto(r5, 0x0, 0x1f42) close_range$auto(0x0, 0xffffeffe, 0x2) 3.916439593s ago: executing program 3 (id=2151): unshare$auto(0x40000080) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r2 = getpgid$auto(0xffffffffffffffff) ptrace$auto(0xffffffffffffffff, r2, 0x4, 0x0) ptrace$auto(0x8, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r3, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffd, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) 3.836919759s ago: executing program 1 (id=2152): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000080)={0xb, 0x8, 0xe1, 0x8, 0x2, 0x0, "defcdfad81bc39a60e91ce9ec0d179e4e41cc77d5773c44672b86b4a74719d01e9cb7832c5d64107ed79313d838673b7bfa9481ccdf37e79c83c4024ded4bf594b645bdd8aea6b3305f0fd920acf3c371df4ebf9a1ac0e5ec91c013bd113937bed11cf919ff323f23ed2b4b44da44e4916e1d80d2859c99d7be118aa401cfd0df53812d6becd6defb0196de01a3f2b0d25755373a41a76dbf8829fb9bc6aec4eafec603b838a8e9dcededa27346551dce6af34fe5cab322e127429e23bd52a4d2e853633d97405bc87a03d5ccc1b35d465b0fde3e974d248013ed1323bec770aa7756df319efeba7c2"}, 0x3, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) 3.474500726s ago: executing program 1 (id=2153): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101, 0x0) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000f40)=0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x3) creat$auto(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) (async) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fe, 0x0, 0x1, 0x0, 0x2, 0x3}, 0xa}, 0x405, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r3 = memfd_create$auto(0x0, 0x4) socket(0xa, 0x3, 0x3a) (async) r4 = socket(0xa, 0x3, 0x3a) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) (async) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x14, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), r2) write$auto(0x3, 0x0, 0xffd8) 3.1195294s ago: executing program 4 (id=2154): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x9b, 0xdf, 0x9b72, 0x2, 0xd) mmap$auto(0x2000000f4d, 0x20009, 0x7fffffff, 0x10, 0xffffffffffffffff, 0x80000000000008) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_uinput_fops_uinput(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/block/loop11/mq/0/nr_tags\x00', 0x8300, 0x0) read$auto(r1, 0x0, 0x400000000020) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x1ff) r4 = bpf$auto(0xd, &(0x7f0000000040)=@link_detach={r1}, 0x26) geteuid() shmctl$auto_SHM_INFO(0x7, 0xe, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2400c047}, 0x44050) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x81, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0xfffffffffffffffe}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@l2={0x1f, 0x1000, @any, 0x0, 0x1}, 0x55) fstat$auto(r4, 0x0) 2.929626791s ago: executing program 5 (id=2155): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x119040, 0x0) close_range$auto(0x2, r0, 0xfff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffeffe, 0x2) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0x2, 0x0) ioctl$auto(r1, 0x5411, 0x24) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x40800) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x87\x90\xa2', 0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0x3f1) 2.838939833s ago: executing program 3 (id=2156): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) listen$auto(0x3, 0x83) read$auto(r0, 0x0, 0x20) write$auto(0xffffffffffffffff, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x4045c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x301802, 0x0) write$auto(r3, 0x0, 0x3) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0xb8842, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x302, 0x0) 2.801215638s ago: executing program 4 (id=2157): mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x22, 0x2, 0x24) r1 = getsockopt$auto(r0, 0x3, 0x1, 0x0, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) mmap$auto(0x6, 0xab, 0x3, 0x10, r1, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = socket(0x2b, 0x1, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async, rerun: 64) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x9, 0x1000000100000007, 0x4, 0x0, 0x2000009, 0x4) (async, rerun: 64) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) (rerun: 64) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x781c02, 0x0) socket(0x1f, 0x800, 0xffffff01) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x2000000109b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x1, 0x5, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x0) (async) sysfs$auto(0xffffffff, 0x12, 0x8) setsockopt$auto(0x3, 0x1, 0x20009, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) writev$auto(r3, &(0x7f00000000c0)={&(0x7f0000000080), 0x8}, 0x94) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) (async) mmap$auto(0x4, 0xe983, 0xffffffffffffffff, 0xeb1, r3, 0x8000) 2.44809083s ago: executing program 1 (id=2158): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x200000, 0x0) r1 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$auto(r1, &(0x7f0000000040)='}+\'%\'#@^\x00', 0xffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x284000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x100000000eb1, r5, 0x3) epoll_create$auto(0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) read$auto_tap_fops_tap(0xffffffffffffffff, 0x0, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r8, 0x80044dff, &(0x7f0000000140)) ioctl$auto_SG_SET_TIMEOUT2(r5, 0x2201, &(0x7f0000002680)) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRRU(r3, 0x4004743b, 0x0) 2.261520534s ago: executing program 3 (id=2159): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r2, 0xc0285629, r2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x101, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ipvs(0x0, r0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) mmap$auto(0x0, 0x40000a, 0xdb, 0x10010, 0x2, 0x8003) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x1, 0x0) socket(0x1e, 0x80000, 0x5c) write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f00000020c0)="12140d9a68c365c4c0df125a489812d0147ed8e9b37bf00efdafe1316a4420ea2832650b3216d88c6c10c1bc28699d660405b767ba7fd19ef35a302c2f47c922b94b1ad9c8b6c46467c0d4ea0fa5a6fee35055e604004b1193fdd48baee1ae0bbb46ed9ae04fe4f88c8a67698e880c5f33fc6d55d2e4e1bb1373df6cab3603f13669b29632902b569d1af05a87dd319eb0992bc47e742ce1d59e7e302509486db595210d9007774a5e0685e35436cf4e2328707dbb606f88f483097f3c0e959e9e87c155e87c684c255dbf47c03ad33a115a696eea5cf1409c4087f354b9081005e43eac8d1fb05f87dc34673ae6dc4b57f2968d684cf226f8b3d559f1fd18844dc6c45e5fed2841cc38121548bc4e2443f6b5d2022c3dcf106aeb21ee1ca8ca6aee97c47821e0f4304aa7120e8f49081a58986378fcdd533a2de6a881c005dff63cd625d870cf693ffab97ef9c6601eb99837cb8c7fc69e4bc678b6427ed4b529dd7c9eb599dda56e9b7761dec511f66ec2baedd9f03695d7ee59098b5103fdb85bd17450741c52f94de6441ade071eedf2b1762afca704ae40858f75753fd4001edc012f24a6816e3079338be1cd7999b6c72432fbec9dd4ae166fc3af2dbb9564932953fb2c686591d8c0ac880e14e05bc649676ee38e2d4b2e6a8ceeb71211f7ff88383e80e657415dc4867ebc8b87b9214561ba18230c22c869cd05bb59a07956a42bf8d5fc5034863d4766860cf19f44a5f03809ed096350b73defd945f48f6135dc5e3ebcdea0a461724fa8c8623cad02af4d9eb28fa28c5aa158fcd653c724116d362bd52dc53e7cdb8226daf6757233c7339f8ff143877d5d20c14f554fe93402c62f19a6a7da5450cce2a6feaf3929d4cdec04b27ca3a698aa817229b7070370c28bf4221310ac297a158ce400c06a08cb7a2cee610fc4832b94341b7322255504dad67a36397e43bb281439ed89bf8651a77416f479283b18a5f8cf0e60b802ba650e35b73fdb45fe83f6b079447e92f2f9d993c480a91ea6b648bd8c67ab3cbb7efc651f5685d57183cecfec7221a9c7b14dd804772a91061d9f9c54de8210f611059a81c98059b4c34c50db2594b2f42d2258852e4ac8aa10f11029eba05dfd4c91ceefcc5e47e4fd9d07a12d2d0f2deb5e6c3d278096da8a8fa4ae93a0b93db5eba4b59b3f30fb49f9eed714ebd5cc9619fe6e92778ef1cae2281bb869e89a35ccccc053f1687f0fdef71fb9d7ccc63e51fa9ad725fc62db71ef07ca92c23745e9e105b6d08d402c417708ae43da959bfcc48c520a65a774dcec03ba59a1d457f9f38dacd53d3a6d1209d09dffa2f4ba74b31fa5d4f6a59aee26305b4b7a742b97aaaccb678144a3f7fbccc7bb89770bda2b88b08dc2891962fece67372f081cf6819873c02ead1b2b87928c86883eeaa3a2e68e87ff09fd659c488528e8cef9ac3976d9264001c9cccd58e94316394a0d3202e65b581a604b5b65bb805bfb5c9b05e7b379793337ffa9223ae29fe6358a12b5460ebb0c6b7c5a9229e74e558ea577904a4a4880048f4afe4e0df65e68aec0a106cfc66db58680fbc8b4307abdce22eb77f5c7462ebabc6d0f47ca1e76e4fbea81449b4d7da00741f03a350b831df19efc4a74a52a3eae9d297adf60e9d58c6d60582989177f099c1a1b7a056ac8c202082e8d8c816a515f36828c4063493c7a0b0af6ff89c262f2059fc6d20d601c8e74f5a1d84b999e60592f186678dd134d52641203b7cdae03d0377e146b2eed3b34d907d815fe63bf396f02a9350b57915df6ebc2e2369faab7e28a621465d9dc65d242281e375225080c798f4210a1b29f153ee5fa98db2e10ebfe7c4880c471de2b59dc1111c5a0e34e7354d5f0608690d1202f7bf48b10ce779e1ee29aaa693a1c7f3fdb3a68ccb3d2af00a267aaeebadb50659e45e329805e030863032f8a2160848aba0661a5907ba95d9d1554503640a0d8383fe3a70e6d4517b045d3c748c92998eb8541356f0068216aef5b191f9225ff34ceec423ee2b7944b8e8b27ad9053738305571e88efe8101e693754799720586eaa860ac81f1dc20c3009906c748905de81e21bcad166042308faf3b371587c4a3ba068f21c675e505ae2ca1edfa53e442fd65d46aacc19112fba404699807bb502011e18da4359a3299803669a3059d5eb073caa5ad644d6c8857fb05b77dd164468ad708281a426ecbc6c1a205ae2dcf665a2ea99620956730874fea1b5723e0fe02dd713578f4a5688d347be7e3b5b0387189757b689c1858039f039257da47883eef59ba1a9addcdd8314fbdd1a326c9dcc6d97984e15950615e5797ae5d6166b1c26eb7605f9a3fd07caaf73d7d7e1621e8aad537aa1c2fa1ad504d6941545176b1cbe55f7c6e180a5636891cd8e7fcd3b4f344020420c3091f773fe09f9040120d2b869a5df4054af4941dd4f122a189652933d93a60707c107a5e5c2d25600dde92215a7f73e281682bbf8d8cae2d17c5133dcc743224869bcbe4eccf079c1af37e2d332c26ed32502e6076137a1a51aa7a2e0a3a40e5c9ab91b37de0cdc702ce4a5f256fa755134c376b4a5c2dd89e9f9823a3a0ed02c2311af8bf935da68aece3744ae3c4d0679cb70a2cf199cd9bd8c9ba1e7e5ca32816072faae3ffb21b9cbef9b61e60b336143b4f69d8bfa6f2be3b94e8f7c9952e1d7b30e9aadb86b13e1ceda07e4413f568cf69bb64f6a993f4bf659298ed8eadeefcc63f1319628cc36154c2c34365543b1ce7d12cb3eccbef75e71d03b81b4ce301272a94d9a533da423729752f17bfdb80f5baa919b7b19158ef6d2260397aaedd97acf6455fda0ac8ce71a31d3bf2147d97d2ec68a64274b51a73b16ac9a66c8dfbe0374d375bcedc2166c54df61d2cea01927ac598f2c94ac6c122956be6827d8ac7010189862783afd53a8de427550eca0e60a6bcdce7eff161d98de44e83953650559ed766b684186e840dfa682bffef184f4d6ce812fcd71c0e8f3e03360b633a54e80fb8c574c79375899d2669093741a1241831078881ca40e0e7b1452d075bba99df335becd18b084461a746a54d74e0586f6b2949cd6c88d62c1298aa27e2d704d572539f2537c88884cb28dbc96851c6e5bd2e829516c0867df756cd43cf5e4365ece009caf3e16e533a1533a29887dcc6c60d3ce7b77d17d12810faab83b5b3a62c1f1f6f0145cd457124bb0d395a5682b92b5f2a45237ef28b6e8295923922f1b31b6cb1ee38a4bedbaa9d51050fbe8d17fb6f1c3363e0d4907b10ef5c971ed36de3fbfc40264bd94520f2ff3384418da9f075efdd0aaa9bb2c976593972532824f8977d7e0006a5a951c151ba828a256322ab70e7762018fde659230b4f3c8fcd068362fa9618d0e87d6405ad8b4ab1ab5a78e2a8613c8c6b70c83ea6f90637647862c2dde8197f775968c0b838cd6c105e54ac74e8bedf4e9acae02139b0cffc122366bef65671f4ec42c8a63f8a3ceb89734a09277aa4117a1281e7c914fcf9f87dec7dd667892c32fba63b98e371736810f365df781f814702d410ec9bc22f8566f85cae26bbd5d7769d347144519528e54e821aa85a08e2798dc08cbfbacdc6033056f9004ae1f1559f995a447fd4c4428746c7ddd8992de1b6c624176e58a8e119c55d1ba2350c2e69f80b85b074b6c3691ea06fc67812b8afe578d42b8872cee782ea369ca030515945a218959cea131b2ee8d9ad02375db19907b9e5e43f440236357c3d45d7f7fbadc0e82f5907dd54859001ff5355f83b06af14c0d93f0a5e2d364553d16a3ac6af4da5d31f4469d4ac5bcc58030c9fc92657102422a466b33072d316fb4e79e32f7ea6a8e2f8f94f653e3459b8004f8d1d8e3f32f2505116bf92c4911d2ab164330be14604827a482d5ebe28ce593a5760c56816dd6049ac0baa312f66268477c4794c06eb6942d38132ca4944700f59644946c6a5345e1d171a9f7372d4abd1df87627cd9406b29f0dd6707a1af3514edecb0315fee9f4678b51b17edccc07a3e92eadd7b95909886dd3e33b33fa7b22faba1b32fe1fa4c0b8d46e79d141b01ecc20b32c5f3827893dbb109dc0143c3a7b557af8852b15784c1d1435b8776270a0ca866c74482bca4561345042d8ad169471056452bbf583cbec14f1ed768c7d2082d47c37438f265dadba6c1e7d4a2f175a9c46e5a4ba07c7346ce155e29509bc10d446175226bfe63af665be3e58e1f1cd71c15ed08684fea8d7b430977ec1f2001d729f2802e318865220cbe84ba798fba2116b5b1853948291edff1d9e7a4cf359738b598fe862250287e674481ceb0fd9566939ae4846c75573cd8f06856933a9d5570adc16e339970d20515e0c4ac5ee0a0e166da650a62e29ded46bd89041b29ccec23740d46dab4d2a7ff5735fed364b0e06eb9f6c9535a27f40d2b4cceb350c25f4dd6e878a00380e2c921ac30d339665e86d8c5ed6ab25d10e491c94f18d6c0cf40086d290cd6ae12ddfaa7e169c8f63aa49383b5319036a1c1af6482488ea11926519802c4eeb1e0d0be5003bd07760751f58650b28ad04b83a58dd1a8f5400f460a9b477b8ccae183f78d7262cf472c9c1d29191997d9603fcd4ff09a4c9c0896031c529a283bf1b40c9ed13211f04049a042542cdbd53d3167d174ce24044624582e1c31126e45300e416cdf75145633d8317882a13f3dfa1922dbebaef9999f8c3a88eeffaf6a37be9124ec74e4b64615e83b93e32cddbf57002ad2e358656aa2d15073a5c62f1010f6dd742a7331256a3aa27b28d1f9b28edaa8c37f469077d136d019ce8428c17422fe6df865b04c0e0848573f4a0997e4398a0da3b394f161b63172fb5ae3fe12d57c7ec098e06af1ca4cbd32bb5cfec3db931499bae076a010caacdea451a3ae616fb50e722391ba3d590c60f005b47873b7a3455a275ed6c757a41e1246628db236386039c2cbfa50ae9c7faa45b2ed3eadc8a7fb0674c8dbfa68386f323811d56d486dc0d50afbdde7f95c0010a4b5824895a06c3be0b6239912422a0e9ddd38dec93fa936a222cbdd829d0653c34f1b1878e5622cbe83b2cef3d5aab71a194934b144f746d2d2c208f03447dfa115e4136c066774e4779e4d5da091a18828e6ca5be99919eaa3fb0a6f43a79006c4d02c64bcd00c2fbb9c8adaf980267b714fc83e2a02e184fc4dac2756a7848128176d8bc3791381aa31a1c939346ffa6c90887aae852a7f667c192410e891917716e0963baccc546838a4f19fdaaab424b2aef7d57a29aa6d697424c4c2a18cf06d24b0876dcffa8a22dd5c9d43b92760b946f10993d0f014b43219f13ef6d83bcccb1d092f89db29136d854a9278306acea876bee29f99f88e0d8aaeda20e1ac941dfbe976e736a2fe92d6bb4cd0def4c93f401ba7ce317716d623e28dada42bbed1c4094eff413d7a475a4d8e8a4b40c18de7c0020e49e79cdc56cd35ea846a09d3815d5d8d49ef255c212c3", 0xf39) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap$auto(0xfffffffffffffff7, 0x1fffffff, 0x40000, 0x401000000eb4, 0xffffffffffffffff, 0x800000000009) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x10, 0xdf, 0xeb1, 0x401, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) 1.405891592s ago: executing program 5 (id=2160): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) write$auto(r0, 0x0, 0x81) write$auto(r0, 0x0, 0x98c7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x6) write$auto(0x3, 0x0, 0x4fffffdf2) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) rseq$auto(&(0x7f0000000300)={0x7fffffff, 0x3fe, 0x0, 0x20000006, 0x1e}, 0x8002, 0x1, 0x6) select$auto(0xc, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4a, 0x5, 0x80000000001823, 0xcd40000000000000, 0x5, 0xfffffffffffffff4, 0x19, 0x100000000, 0x1000000009, 0x8000a, 0xc, 0x9, 0xab, 0x0, 0xfffffffffffffffd]}, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 1.160654592s ago: executing program 5 (id=2161): rseq$auto(&(0x7f0000000380)={0x1ca32, 0x403, 0x0, 0x6, 0x2, 0xffffffff}, 0x7ffc, 0x0, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vidtv.0/i2c-0/dvb/dvb0.dvr0/uevent\x00', 0x183800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000003c0)=""/134, 0x86) socket(0x25, 0x1, 0x5) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfa3, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x5, 0x4, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r1, 0xfffff588, 0x8, 0x2, 0x100000000000200}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) modify_ldt$auto(0x1, 0x0, 0x10) rseq$auto(&(0x7f0000000000)={0x0, 0x1ff, 0x189ced57, 0x40, 0xf, 0x9, "7823fc3653fb979694af2c208e4923590ddcaabbd9bb4fc6aa57dc7f452007fd1816a3b372d79f0291d4c193bac2a010cb286c55c6d05f71d6f603c3ab8c6a30a767c1e2b97cdd76e194b36ffd0415269424a33258715553014a4d6151988da12d1c061f"}, 0x7, 0x1, 0x771) sysfs$auto(0xfffffff9, 0x7fffffff, 0x101) modify_ldt$auto(0x1, 0x0, 0x1) 996.167721ms ago: executing program 1 (id=2162): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121000, 0x0) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, r0, 0x8000) r1 = open(0x0, 0x404, 0xc4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa2202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0xc080) mmap$auto(0x0, 0x10008, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) (fail_nth: 1) 528.294303ms ago: executing program 3 (id=2163): unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={"d7a410c00a6ab65eb68710947af8b22c2b90a3f5f8fd01905e21b8d3e3b1db5b", 0x4, 0x9, 0x4, 0x4b, 0x8a38, 0x0}) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08a0acd1cfbc23a1996df86520bf97e1706393b85c681b7dd41737d0c0798b8a311b4ff863dfbd2a7b77ebb132a6ef6fa6a0c881c757f0f78b27129c740b4f52cff955283b7ade6520372076e5c5c4ab8aa8d572bc049e9aae3480f6b0dd050a32f387d586c42a882517ff4eb54c7877befbd2f7012309ba11c16781b10335e320b0af7f1a2cd19b8c0511811c8e3e600a7891c98eeb1c92e40a0f91f2f54ea65678b1efff7d6dfca805a57a42603d1da48c71902d53e9c056d8cac21e07a921700fc1e15749ed427337193fe792"], 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r7, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r7, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 53.224147ms ago: executing program 5 (id=2164): unshare$auto(0x40000080) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r2 = getpgid$auto(0xffffffffffffffff) ptrace$auto(0xffffffffffffffff, r2, 0x4, 0x0) ptrace$auto(0x8, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r3, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffd, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) 0s ago: executing program 1 (id=2165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0xa040, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getpid() (async) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000240)={r1, 0x5, 0x2}, 0x68, 0x0, 0x0, 0x8) (async) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) (async) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) read$auto(0x3, 0x0, 0x7fffffff) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000002c0)={0x8, r4, 0x1, 0x33}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 652.098804][T14714] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 652.098815][T14714] R13: 0000000000000000 R14: 00007f88acbb6080 R15: 00007ffc65eec5c8 [ 652.098839][T14714] [ 652.099749][T14714] warn_alloc: 2 callbacks suppressed [ 652.099760][T14714] syz.5.1727: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 652.417728][T14707] __x64_sys_kexec_load+0x1bf/0x230 [ 652.487809][T14707] do_syscall_64+0xcd/0x490 [ 652.492433][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.506452][T14714] ,cpuset=/,mems_allowed=0-1 [ 652.511321][T14714] CPU: 1 UID: 0 PID: 14714 Comm: syz.5.1727 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 652.511372][T14714] Tainted: [U]=USER [ 652.511383][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.511401][T14714] Call Trace: [ 652.511412][T14714] [ 652.511425][T14714] dump_stack_lvl+0x16c/0x1f0 [ 652.511478][T14714] warn_alloc+0x248/0x3a0 [ 652.511527][T14714] ? __pfx_warn_alloc+0x10/0x10 [ 652.511575][T14714] ? kfree+0x2b4/0x4d0 [ 652.511620][T14714] ? __get_vm_area_node+0x208/0x330 [ 652.511667][T14714] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 652.511720][T14714] ? __lock_acquire+0xb8a/0x1c90 [ 652.511761][T14714] ? __do_sys_listmount+0x1c2/0xec0 [ 652.511815][T14714] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 652.511858][T14714] ? __alloc_pages_noprof+0xb/0x1b0 [ 652.511899][T14714] ? ___kmalloc_large_node+0x84/0x1e0 [ 652.511929][T14714] ? find_held_lock+0x2b/0x80 [ 652.511965][T14714] __kvmalloc_node_noprof+0x30a/0x620 [ 652.512007][T14714] ? __do_sys_listmount+0x1c2/0xec0 [ 652.512047][T14714] ? __do_sys_listmount+0x1c2/0xec0 [ 652.512103][T14714] ? __do_sys_listmount+0x1c2/0xec0 [ 652.512138][T14714] __do_sys_listmount+0x1c2/0xec0 [ 652.512185][T14714] ? __x64_sys_futex+0x1e0/0x4c0 [ 652.512221][T14714] ? __x64_sys_futex+0x1e9/0x4c0 [ 652.512259][T14714] ? __pfx___do_sys_listmount+0x10/0x10 [ 652.512319][T14714] do_syscall_64+0xcd/0x490 [ 652.512369][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.512400][T14714] RIP: 0033:0x7f88ac98e929 [ 652.512427][T14714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.512456][T14714] RSP: 002b:00007f88ad742038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 652.512484][T14714] RAX: ffffffffffffffda RBX: 00007f88acbb6080 RCX: 00007f88ac98e929 [ 652.512504][T14714] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 652.512523][T14714] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 652.512539][T14714] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 652.512556][T14714] R13: 0000000000000000 R14: 00007f88acbb6080 R15: 00007ffc65eec5c8 [ 652.512596][T14714] [ 652.512607][T14714] Mem-Info: [ 652.834381][T14714] active_anon:13515 inactive_anon:0 isolated_anon:0 [ 652.834381][T14714] active_file:15474 inactive_file:42962 isolated_file:0 [ 652.834381][T14714] unevictable:768 dirty:486 writeback:0 [ 652.834381][T14714] slab_reclaimable:11712 slab_unreclaimable:98486 [ 652.834381][T14714] mapped:28848 shmem:1495 pagetables:1512 [ 652.834381][T14714] sec_pagetables:0 bounce:0 [ 652.834381][T14714] kernel_misc_reclaimable:0 [ 652.834381][T14714] free:1324072 free_pcp:1136 free_cma:0 [ 652.907082][T14714] Node 0 active_anon:54160kB inactive_anon:0kB active_file:61896kB inactive_file:171376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119292kB dirty:1236kB writeback:692kB shmem:4444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12764kB pagetables:5828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 652.940912][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.985250][T14714] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:300kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 653.126519][T14714] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.220779][T14714] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 653.236967][T14714] Node 0 DMA32 free:1347728kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60868kB inactive_anon:0kB active_file:61896kB inactive_file:172756kB unevictable:1536kB writepending:1296kB present:3129332kB managed:2540868kB mlocked:0kB bounce:0kB free_pcp:6896kB local_pcp:5432kB free_cma:0kB [ 653.269668][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.368099][T14714] lowmem_reserve[]: 0 0 1 1 1 [ 653.373080][T14714] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 653.518204][T14714] lowmem_reserve[]: 0 0 0 0 0 [ 653.537323][T14714] Node 1 Normal free:3918924kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:472kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2804kB local_pcp:0kB free_cma:0kB [ 653.568915][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.633060][T14714] lowmem_reserve[]: 0 0 0 0 0 [ 653.657800][T14714] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 653.714001][T14714] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 1463*16kB (UME) 1296*32kB (UME) 745*64kB (UME) 364*128kB (UME) 263*256kB (UME) 89*512kB (UME) 65*1024kB (UME) 29*2048kB (UME) 223*4096kB (UM) = 1311424kB [ 653.798367][T14714] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 653.810418][T14714] Node 1 Normal: 173*4kB (UME) 45*8kB (UME) 41*16kB (UME) 205*32kB (UME) 102*64kB (UME) 35*128kB (UME) 19*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 947*4096kB (UM) = 3918924kB [ 653.940644][T14714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.950557][T14714] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 653.960264][T14714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.970445][T14714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 653.981263][T14714] 64758 total pagecache pages [ 653.986055][T14714] 0 pages in swap cache [ 653.990319][T14714] Free swap = 124996kB [ 653.995295][T14714] Total swap = 124996kB [ 653.999959][T14714] 2097051 pages RAM [ 654.004246][T14714] 0 pages HighMem/MovableOnly [ 654.016396][T14714] 429856 pages reserved [ 654.028506][T14714] 0 pages cma reserved [ 654.403752][T14726] kexec: Could not allocate control_code_buffer [ 654.786719][T14737] netlink: 'syz.1.1731': attribute type 19 has an invalid length. [ 654.840189][T14737] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1731'. [ 654.882299][T14749] FAULT_INJECTION: forcing a failure. [ 654.882299][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 654.897858][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.4.1732 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 654.897909][T14749] Tainted: [U]=USER [ 654.897919][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.897936][T14749] Call Trace: [ 654.897947][T14749] [ 654.897960][T14749] dump_stack_lvl+0x16c/0x1f0 [ 654.898008][T14749] should_fail_ex+0x512/0x640 [ 654.898050][T14749] ? __kmalloc_noprof+0xbf/0x510 [ 654.898105][T14749] ? constrain_params_by_rules+0x175/0xca0 [ 654.898140][T14749] should_failslab+0xc2/0x120 [ 654.898172][T14749] __kmalloc_noprof+0xd2/0x510 [ 654.898214][T14749] ? unwind_get_return_address+0x59/0xa0 [ 654.898279][T14749] constrain_params_by_rules+0x175/0xca0 [ 654.898314][T14749] ? register_lock_class+0x41/0x4c0 [ 654.898378][T14749] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 654.898414][T14749] ? __lock_acquire+0xb8a/0x1c90 [ 654.898463][T14749] ? __mutex_trylock_common+0xe9/0x250 [ 654.898520][T14749] ? rcu_is_watching+0x12/0xc0 [ 654.898554][T14749] ? trace_contention_end+0xdd/0x130 [ 654.898591][T14749] ? snd_interval_refine+0x2fa/0x580 [ 654.898641][T14749] snd_pcm_hw_refine+0x7de/0xad0 [ 654.898686][T14749] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 654.898735][T14749] ? do_raw_spin_lock+0x12c/0x2b0 [ 654.898786][T14749] ? mark_held_locks+0x49/0x80 [ 654.898830][T14749] snd_pcm_hw_params+0x3e4/0x1b40 [ 654.898870][T14749] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 654.898903][T14749] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 654.898942][T14749] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 654.898980][T14749] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 654.899016][T14749] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 654.899050][T14749] ? __asan_memset+0x23/0x50 [ 654.899094][T14749] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 654.899133][T14749] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 654.899184][T14749] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 654.899220][T14749] ? __pfx___mutex_lock+0x10/0x10 [ 654.899315][T14749] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 654.899352][T14749] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 654.899387][T14749] snd_pcm_oss_sync+0x1de/0x840 [ 654.899428][T14749] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 654.899463][T14749] snd_pcm_oss_release+0x28b/0x310 [ 654.899499][T14749] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 654.899531][T14749] __fput+0x402/0xb70 [ 654.899576][T14749] task_work_run+0x14d/0x240 [ 654.899622][T14749] ? __pfx_task_work_run+0x10/0x10 [ 654.899669][T14749] ? __pfx___do_sys_close_range+0x10/0x10 [ 654.899724][T14749] exit_to_user_mode_loop+0xeb/0x110 [ 654.899773][T14749] do_syscall_64+0x3f6/0x490 [ 654.899825][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.899855][T14749] RIP: 0033:0x7ff2f138e929 [ 654.899883][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.899912][T14749] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 654.899944][T14749] RAX: 0000000000000000 RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 654.899963][T14749] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 654.899981][T14749] RBP: 00007ff2f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 654.899997][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.900015][T14749] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 654.900056][T14749] [ 655.247429][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.914513][T14772] FAULT_INJECTION: forcing a failure. [ 655.914513][T14772] name failslab, interval 1, probability 0, space 0, times 0 [ 655.964615][T14772] CPU: 0 UID: 0 PID: 14772 Comm: syz.5.1736 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 655.964666][T14772] Tainted: [U]=USER [ 655.964675][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.964693][T14772] Call Trace: [ 655.964703][T14772] [ 655.964715][T14772] dump_stack_lvl+0x16c/0x1f0 [ 655.964764][T14772] should_fail_ex+0x512/0x640 [ 655.964805][T14772] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 655.964853][T14772] should_failslab+0xc2/0x120 [ 655.964883][T14772] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 655.964925][T14772] ? lockdep_init_map_type+0x5c/0x280 [ 655.964966][T14772] ? __d_alloc+0x31/0xaa0 [ 655.965017][T14772] __d_alloc+0x31/0xaa0 [ 655.965074][T14772] d_alloc_pseudo+0x1c/0xc0 [ 655.965109][T14772] alloc_file_pseudo+0xcf/0x230 [ 655.965146][T14772] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 655.965180][T14772] ? alloc_fd+0x471/0x7d0 [ 655.965228][T14772] sock_alloc_file+0x50/0x210 [ 655.965261][T14772] __sys_socket+0x1c0/0x260 [ 655.965293][T14772] ? fput+0x70/0xf0 [ 655.965319][T14772] ? __pfx___sys_socket+0x10/0x10 [ 655.965351][T14772] ? ksys_write+0x1ac/0x250 [ 655.965391][T14772] ? __pfx_ksys_write+0x10/0x10 [ 655.965443][T14772] __x64_sys_socket+0x72/0xb0 [ 655.965476][T14772] ? lockdep_hardirqs_on+0x7c/0x110 [ 655.965519][T14772] do_syscall_64+0xcd/0x490 [ 655.965565][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.965596][T14772] RIP: 0033:0x7f88ac98e929 [ 655.965619][T14772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.965648][T14772] RSP: 002b:00007f88ad763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 655.965678][T14772] RAX: ffffffffffffffda RBX: 00007f88acbb5fa0 RCX: 00007f88ac98e929 [ 655.965698][T14772] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 655.965716][T14772] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 655.965735][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.965753][T14772] R13: 0000000000000000 R14: 00007f88acbb5fa0 R15: 00007ffc65eec5c8 [ 655.965792][T14772] [ 656.992152][T14796] ubi0: attaching mtd0 [ 657.043571][T14796] ubi0: scanning is finished [ 657.048407][T14796] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 657.107425][T14798] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input178 [ 657.572518][T14796] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 658.566502][ T30] audit: type=1804 audit(4294967404.227:14): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1746" name="/newroot/59/file0" dev="tmpfs" ino=330 res=1 errno=0 [ 658.639429][T14820] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1747'. [ 659.084062][T14826] XFS: Clearing xfsstats [ 660.311824][ T30] audit: type=1804 audit(4294967405.966:15): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1756" name="/newroot/465/file0" dev="tmpfs" ino=2488 res=1 errno=0 [ 660.953311][T14873] Process accounting resumed [ 661.446694][T14889] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1759'. [ 661.756629][T14901] netlink: 'syz.5.1761': attribute type 1 has an invalid length. [ 662.113852][T14900] FAULT_INJECTION: forcing a failure. [ 662.113852][T14900] name failslab, interval 1, probability 0, space 0, times 0 [ 662.150732][T14900] CPU: 0 UID: 0 PID: 14900 Comm: syz.1.1763 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 662.150788][T14900] Tainted: [U]=USER [ 662.150798][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.150817][T14900] Call Trace: [ 662.150828][T14900] [ 662.150841][T14900] dump_stack_lvl+0x16c/0x1f0 [ 662.150892][T14900] should_fail_ex+0x512/0x640 [ 662.150944][T14900] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 662.151002][T14900] should_failslab+0xc2/0x120 [ 662.151034][T14900] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 662.151087][T14900] ? kstrdup_const+0x63/0x80 [ 662.151141][T14900] kstrdup+0x53/0x100 [ 662.151187][T14900] kstrdup_const+0x63/0x80 [ 662.151230][T14900] __kernfs_new_node+0x9b/0x8e0 [ 662.151280][T14900] ? __pfx___kernfs_new_node+0x10/0x10 [ 662.151338][T14900] ? find_held_lock+0x2b/0x80 [ 662.151372][T14900] ? kernfs_root+0xee/0x2a0 [ 662.151426][T14900] kernfs_new_node+0x13c/0x1e0 [ 662.151494][T14900] kernfs_create_dir_ns+0x4c/0x1a0 [ 662.151555][T14900] sysfs_create_dir_ns+0x13a/0x2b0 [ 662.151599][T14900] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 662.151637][T14900] ? find_held_lock+0x2b/0x80 [ 662.151676][T14900] ? do_raw_spin_unlock+0x172/0x230 [ 662.151721][T14900] kobject_add_internal+0x2c4/0x9b0 [ 662.151764][T14900] kobject_add+0x16e/0x240 [ 662.151795][T14900] ? __pfx_kobject_add+0x10/0x10 [ 662.151829][T14900] ? do_raw_spin_unlock+0x172/0x230 [ 662.151877][T14900] ? kobject_put+0xab/0x5a0 [ 662.151947][T14900] device_add+0x288/0x1a70 [ 662.151981][T14900] ? __pfx_dev_set_name+0x10/0x10 [ 662.152018][T14900] ? __pfx_device_add+0x10/0x10 [ 662.152049][T14900] ? lockdep_init_map_type+0x5c/0x280 [ 662.152093][T14900] ? __init_waitqueue_head+0xca/0x150 [ 662.152151][T14900] rfkill_register+0x1ad/0xb40 [ 662.152192][T14900] nfc_register_device+0x11f/0x3c0 [ 662.152246][T14900] nci_register_device+0x7f1/0xb80 [ 662.152290][T14900] ? __pfx_nci_register_device+0x10/0x10 [ 662.152334][T14900] ? lockdep_init_map_type+0x5c/0x280 [ 662.152380][T14900] virtual_ncidev_open+0x141/0x220 [ 662.152418][T14900] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 662.152455][T14900] misc_open+0x35d/0x420 [ 662.152492][T14900] ? __pfx_misc_open+0x10/0x10 [ 662.152528][T14900] chrdev_open+0x231/0x6a0 [ 662.152574][T14900] ? __pfx_apparmor_file_open+0x10/0x10 [ 662.152613][T14900] ? __pfx_chrdev_open+0x10/0x10 [ 662.152663][T14900] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 662.152713][T14900] do_dentry_open+0x744/0x1c10 [ 662.152761][T14900] ? __pfx_chrdev_open+0x10/0x10 [ 662.152814][T14900] vfs_open+0x82/0x3f0 [ 662.152853][T14900] path_openat+0x1de4/0x2cb0 [ 662.152912][T14900] ? __pfx_path_openat+0x10/0x10 [ 662.152968][T14900] ? __lock_acquire+0xb8a/0x1c90 [ 662.153014][T14900] do_filp_open+0x20b/0x470 [ 662.153057][T14900] ? __pfx_do_filp_open+0x10/0x10 [ 662.153135][T14900] ? alloc_fd+0x471/0x7d0 [ 662.153190][T14900] do_sys_openat2+0x11b/0x1d0 [ 662.153225][T14900] ? __pfx_do_sys_openat2+0x10/0x10 [ 662.153277][T14900] __x64_sys_openat+0x174/0x210 [ 662.153312][T14900] ? __pfx___x64_sys_openat+0x10/0x10 [ 662.153366][T14900] do_syscall_64+0xcd/0x490 [ 662.153416][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.153447][T14900] RIP: 0033:0x7ff7c0f8e929 [ 662.153473][T14900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.153503][T14900] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 662.153534][T14900] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 662.153555][T14900] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 662.153574][T14900] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 662.153593][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.153612][T14900] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 662.153654][T14900] [ 662.643152][T14900] kobject: kobject_add_internal failed for rfkill73 (error: -12 parent: nfc2) [ 663.634374][ T30] audit: type=1804 audit(4294967409.294:16): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1765" name="/newroot/439/file0" dev="tmpfs" ino=2316 res=1 errno=0 [ 664.874362][T14958] __vm_enough_memory: pid: 14958, comm: syz.4.1771, bytes: 9223372036854775808 not enough memory for the allocation [ 666.405930][T14984] FAULT_INJECTION: forcing a failure. [ 666.405930][T14984] name failslab, interval 1, probability 0, space 0, times 0 [ 666.516751][T14984] CPU: 0 UID: 0 PID: 14984 Comm: syz.5.1775 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 666.516807][T14984] Tainted: [U]=USER [ 666.516819][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.516837][T14984] Call Trace: [ 666.516849][T14984] [ 666.516861][T14984] dump_stack_lvl+0x16c/0x1f0 [ 666.516913][T14984] should_fail_ex+0x512/0x640 [ 666.516955][T14984] ? __kmalloc_noprof+0xbf/0x510 [ 666.517001][T14984] ? constrain_params_by_rules+0x175/0xca0 [ 666.517033][T14984] should_failslab+0xc2/0x120 [ 666.517062][T14984] __kmalloc_noprof+0xd2/0x510 [ 666.517103][T14984] ? kasan_quarantine_put+0x10a/0x240 [ 666.517145][T14984] ? lockdep_hardirqs_on+0x7c/0x110 [ 666.517195][T14984] constrain_params_by_rules+0x175/0xca0 [ 666.517236][T14984] ? constrain_params_by_rules+0xa09/0xca0 [ 666.517280][T14984] ? constrain_params_by_rules+0xa0e/0xca0 [ 666.517322][T14984] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 666.517367][T14984] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 666.517400][T14984] ? kfree+0x2b4/0x4d0 [ 666.517430][T14984] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 666.517472][T14984] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 666.517504][T14984] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 666.517539][T14984] ? snd_interval_refine+0x2fa/0x580 [ 666.517588][T14984] snd_pcm_hw_refine+0x7de/0xad0 [ 666.517629][T14984] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 666.517671][T14984] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 666.517719][T14984] snd_pcm_hw_param_first+0x334/0x6f0 [ 666.517767][T14984] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 666.517808][T14984] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 666.517842][T14984] ? __asan_memset+0x23/0x50 [ 666.517881][T14984] ? calc_src_frames.isra.0+0x187/0x1d0 [ 666.517927][T14984] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 666.517978][T14984] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 666.518013][T14984] ? __pfx___mutex_lock+0x10/0x10 [ 666.518086][T14984] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 666.518121][T14984] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 666.518150][T14984] snd_pcm_oss_sync+0x1de/0x840 [ 666.518186][T14984] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 666.518225][T14984] snd_pcm_oss_release+0x28b/0x310 [ 666.518258][T14984] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 666.518290][T14984] __fput+0x402/0xb70 [ 666.518329][T14984] task_work_run+0x14d/0x240 [ 666.518373][T14984] ? __pfx_task_work_run+0x10/0x10 [ 666.518419][T14984] ? __pfx___do_sys_close_range+0x10/0x10 [ 666.518473][T14984] exit_to_user_mode_loop+0xeb/0x110 [ 666.518520][T14984] do_syscall_64+0x3f6/0x490 [ 666.518570][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.518602][T14984] RIP: 0033:0x7f88ac98e929 [ 666.518627][T14984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.518657][T14984] RSP: 002b:00007f88ad763038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 666.518687][T14984] RAX: 0000000000000000 RBX: 00007f88acbb5fa0 RCX: 00007f88ac98e929 [ 666.518707][T14984] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 666.518727][T14984] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 666.518746][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.518765][T14984] R13: 0000000000000000 R14: 00007f88acbb5fa0 R15: 00007ffc65eec5c8 [ 666.518806][T14984] [ 667.398039][T15006] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1777'. [ 670.376803][T15063] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1785'. [ 670.417005][T15063] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1785'. [ 671.197225][ T30] audit: type=1804 audit(4294967416.851:17): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1787" name="/newroot/117/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 672.446981][T15079] kexec: Could not allocate control_code_buffer [ 673.478959][T15129] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1796'. [ 673.553416][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1795'. [ 673.841703][T15134] ovs_: entered promiscuous mode [ 675.200699][T15162] FAULT_INJECTION: forcing a failure. [ 675.200699][T15162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.235422][T15162] CPU: 1 UID: 0 PID: 15162 Comm: syz.1.1802 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 675.235477][T15162] Tainted: [U]=USER [ 675.235489][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.235509][T15162] Call Trace: [ 675.235520][T15162] [ 675.235534][T15162] dump_stack_lvl+0x16c/0x1f0 [ 675.235586][T15162] should_fail_ex+0x512/0x640 [ 675.235638][T15162] should_fail_alloc_page+0xe7/0x130 [ 675.235673][T15162] prepare_alloc_pages+0x3c2/0x610 [ 675.235710][T15162] ? rcu_is_watching+0x12/0xc0 [ 675.235747][T15162] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 675.235810][T15162] ? __pfx___schedule+0x10/0x10 [ 675.235871][T15162] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 675.235924][T15162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 675.235987][T15162] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.236048][T15162] ? trace_mm_page_alloc+0x35/0x1a0 [ 675.236091][T15162] alloc_pages_bulk_noprof+0x71c/0x1410 [ 675.236139][T15162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.236192][T15162] ? policy_nodemask+0xea/0x4e0 [ 675.236237][T15162] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 675.236286][T15162] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 675.236335][T15162] kasan_populate_vmalloc+0xf1/0x1f0 [ 675.236387][T15162] alloc_vmap_area+0x959/0x29c0 [ 675.236439][T15162] ? __pfx_alloc_vmap_area+0x10/0x10 [ 675.236484][T15162] __get_vm_area_node+0x1ca/0x330 [ 675.236529][T15162] __vmalloc_node_range_noprof+0x271/0x14b0 [ 675.236570][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.236619][T15162] ? __lock_acquire+0xb8a/0x1c90 [ 675.236658][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.236699][T15162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 675.236735][T15162] ? __alloc_pages_noprof+0xb/0x1b0 [ 675.236773][T15162] ? ___kmalloc_large_node+0x84/0x1e0 [ 675.236803][T15162] ? find_held_lock+0x2b/0x80 [ 675.236837][T15162] __kvmalloc_node_noprof+0x30a/0x620 [ 675.236876][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.236911][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.236951][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.236983][T15162] __do_sys_listmount+0x1c2/0xec0 [ 675.237024][T15162] ? __x64_sys_futex+0x1e0/0x4c0 [ 675.237056][T15162] ? __x64_sys_futex+0x1e9/0x4c0 [ 675.237090][T15162] ? __pfx___do_sys_listmount+0x10/0x10 [ 675.237142][T15162] do_syscall_64+0xcd/0x490 [ 675.237187][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.237224][T15162] RIP: 0033:0x7ff7c0f8e929 [ 675.237249][T15162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.237276][T15162] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 675.237305][T15162] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 675.237325][T15162] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 675.237343][T15162] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 675.237361][T15162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 675.237380][T15162] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 675.237417][T15162] [ 675.660394][T15162] warn_alloc: 1 callbacks suppressed [ 675.660420][T15162] syz.1.1802: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 675.718326][T15162] CPU: 0 UID: 0 PID: 15162 Comm: syz.1.1802 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 675.718363][T15162] Tainted: [U]=USER [ 675.718369][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.718380][T15162] Call Trace: [ 675.718387][T15162] [ 675.718395][T15162] dump_stack_lvl+0x16c/0x1f0 [ 675.718428][T15162] warn_alloc+0x248/0x3a0 [ 675.718457][T15162] ? __pfx_warn_alloc+0x10/0x10 [ 675.718486][T15162] ? kfree+0x2b4/0x4d0 [ 675.718512][T15162] ? __get_vm_area_node+0x208/0x330 [ 675.718539][T15162] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 675.718568][T15162] ? __lock_acquire+0xb8a/0x1c90 [ 675.718592][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.718620][T15162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 675.718645][T15162] ? __alloc_pages_noprof+0xb/0x1b0 [ 675.718671][T15162] ? ___kmalloc_large_node+0x84/0x1e0 [ 675.718691][T15162] ? find_held_lock+0x2b/0x80 [ 675.718712][T15162] __kvmalloc_node_noprof+0x30a/0x620 [ 675.718738][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.718760][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.718786][T15162] ? __do_sys_listmount+0x1c2/0xec0 [ 675.718807][T15162] __do_sys_listmount+0x1c2/0xec0 [ 675.718834][T15162] ? __x64_sys_futex+0x1e0/0x4c0 [ 675.718855][T15162] ? __x64_sys_futex+0x1e9/0x4c0 [ 675.718877][T15162] ? __pfx___do_sys_listmount+0x10/0x10 [ 675.718910][T15162] do_syscall_64+0xcd/0x490 [ 675.718940][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.718960][T15162] RIP: 0033:0x7ff7c0f8e929 [ 675.718976][T15162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.718994][T15162] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 675.719013][T15162] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 675.719025][T15162] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 675.719036][T15162] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 675.719047][T15162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 675.719058][T15162] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 675.719080][T15162] [ 675.719087][T15162] Mem-Info: [ 675.948690][T15162] active_anon:31939 inactive_anon:0 isolated_anon:0 [ 675.948690][T15162] active_file:13863 inactive_file:40775 isolated_file:0 [ 675.948690][T15162] unevictable:768 dirty:392 writeback:0 [ 675.948690][T15162] slab_reclaimable:11612 slab_unreclaimable:97772 [ 675.948690][T15162] mapped:25449 shmem:20700 pagetables:1449 [ 675.948690][T15162] sec_pagetables:0 bounce:0 [ 675.948690][T15162] kernel_misc_reclaimable:0 [ 675.948690][T15162] free:1277037 free_pcp:21326 free_cma:0 [ 676.065712][T15162] Node 0 active_anon:123756kB inactive_anon:0kB active_file:55452kB inactive_file:162964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101792kB dirty:1564kB writeback:0kB shmem:77364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12292kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.109487][T15162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.237124][T15162] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.308511][T15162] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 676.318708][T15162] Node 0 DMA32 free:1200916kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118928kB inactive_anon:0kB active_file:56152kB inactive_file:161656kB unevictable:1536kB writepending:1568kB present:3129332kB managed:2540868kB mlocked:0kB bounce:0kB free_pcp:81792kB local_pcp:49196kB free_cma:0kB [ 676.443565][T15162] lowmem_reserve[]: 0 0 1 1 1 [ 676.459747][T15162] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 676.513535][T15162] lowmem_reserve[]: 0 0 0 0 0 [ 676.549405][T15162] Node 1 Normal free:3919160kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2908kB local_pcp:2908kB free_cma:0kB [ 676.585550][T15162] lowmem_reserve[]: 0 0 0 0 0 [ 676.592341][T15162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 676.616441][T15162] Node 0 DMA32: 13591*4kB (UME) 1873*8kB (UME) 1408*16kB (UM) 839*32kB (UME) 130*64kB (UME) 112*128kB (UME) 86*256kB (UME) 82*512kB (UME) 66*1024kB (UME) 22*2048kB (UME) 222*4096kB (UM) = 1227332kB [ 676.648318][T15162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.667184][T15162] Node 1 Normal: 170*4kB (UME) 42*8kB (UME) 38*16kB (UME) 201*32kB (UME) 101*64kB (UME) 33*128kB (UME) 20*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 947*4096kB (UM) = 3919160kB [ 676.699233][T15162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.715927][T15162] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.736276][T15162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.757853][T15162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.784117][T15162] 72325 total pagecache pages [ 676.789157][T15162] 0 pages in swap cache [ 676.794242][T15162] Free swap = 124996kB [ 676.798981][T15162] Total swap = 124996kB [ 676.804566][T15162] 2097051 pages RAM [ 676.808779][T15162] 0 pages HighMem/MovableOnly [ 676.814516][T15162] 429856 pages reserved [ 676.818886][T15162] 0 pages cma reserved [ 676.878403][T15157] kexec: Could not allocate control_code_buffer [ 677.123306][T15179] netlink: 'syz.4.1806': attribute type 16 has an invalid length. [ 677.146350][T15179] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1806'. [ 677.153066][T15183] FAULT_INJECTION: forcing a failure. [ 677.153066][T15183] name failslab, interval 1, probability 0, space 0, times 0 [ 677.177286][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.5.1805 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 677.177341][T15183] Tainted: [U]=USER [ 677.177352][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.177369][T15183] Call Trace: [ 677.177380][T15183] [ 677.177392][T15183] dump_stack_lvl+0x16c/0x1f0 [ 677.177441][T15183] should_fail_ex+0x512/0x640 [ 677.177483][T15183] ? __kmalloc_noprof+0xbf/0x510 [ 677.177527][T15183] ? constrain_params_by_rules+0x175/0xca0 [ 677.177560][T15183] should_failslab+0xc2/0x120 [ 677.177588][T15183] __kmalloc_noprof+0xd2/0x510 [ 677.177628][T15183] ? kasan_quarantine_put+0x10a/0x240 [ 677.177668][T15183] ? constrain_params_by_rules+0xa09/0xca0 [ 677.177710][T15183] constrain_params_by_rules+0x175/0xca0 [ 677.177764][T15183] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 677.177812][T15183] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 677.177848][T15183] ? __lock_acquire+0xb8a/0x1c90 [ 677.177906][T15183] ? snd_interval_refine+0x2fa/0x580 [ 677.177968][T15183] snd_pcm_hw_refine+0x7de/0xad0 [ 677.178012][T15183] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 677.178055][T15183] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 677.178099][T15183] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 677.178139][T15183] snd_pcm_hw_param_first+0x334/0x6f0 [ 677.178182][T15183] snd_pcm_hw_params+0x5ad/0x1b40 [ 677.178235][T15183] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 677.178277][T15183] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 677.178321][T15183] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 677.178357][T15183] ? __asan_memset+0x23/0x50 [ 677.178404][T15183] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 677.178447][T15183] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 677.178508][T15183] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 677.178548][T15183] ? __pfx___mutex_lock+0x10/0x10 [ 677.178629][T15183] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 677.178669][T15183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 677.178702][T15183] snd_pcm_oss_sync+0x1de/0x840 [ 677.178745][T15183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 677.178780][T15183] snd_pcm_oss_release+0x28b/0x310 [ 677.178819][T15183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 677.178853][T15183] __fput+0x402/0xb70 [ 677.178898][T15183] task_work_run+0x14d/0x240 [ 677.178955][T15183] ? __pfx_task_work_run+0x10/0x10 [ 677.179001][T15183] ? __pfx___do_sys_close_range+0x10/0x10 [ 677.179057][T15183] exit_to_user_mode_loop+0xeb/0x110 [ 677.179106][T15183] do_syscall_64+0x3f6/0x490 [ 677.179157][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.179188][T15183] RIP: 0033:0x7f88ac98e929 [ 677.179215][T15183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.179247][T15183] RSP: 002b:00007f88ad763038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 677.179279][T15183] RAX: 0000000000000000 RBX: 00007f88acbb5fa0 RCX: 00007f88ac98e929 [ 677.179301][T15183] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 677.179320][T15183] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 677.179339][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.179358][T15183] R13: 0000000000000000 R14: 00007f88acbb5fa0 R15: 00007ffc65eec5c8 [ 677.179401][T15183] [ 677.223397][T15186] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 677.547898][T15179] veth1_macvtap: left promiscuous mode [ 678.452738][T15202] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1811'. [ 680.574238][T15223] kexec: Could not allocate control_code_buffer [ 683.059706][T15251] kexec: Could not allocate control_code_buffer [ 683.510616][ T30] audit: type=1804 audit(4294967429.165:18): pid=15269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1825" name="/newroot/455/file0" dev="tmpfs" ino=2401 res=1 errno=0 [ 683.603461][ T30] audit: type=1804 audit(4294967429.235:19): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1824" name="/newroot/125/file0" dev="tmpfs" ino=682 res=1 errno=0 [ 684.083958][T15275] sp0: Synchronizing with TNC [ 685.137028][T15295] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1831'. [ 685.731564][T15283] kexec: Could not allocate control_code_buffer [ 685.832035][T15305] ubi0: attaching mtd0 [ 685.902547][T15305] ubi0: scanning is finished [ 685.914434][T15305] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 686.158390][T15305] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 689.631251][T15375] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1843'. [ 690.172532][ T30] audit: type=1804 audit(4294967435.821:20): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1844" name="/newroot/490/file0" dev="tmpfs" ino=2622 res=1 errno=0 [ 691.054124][ T30] audit: type=1804 audit(4294967436.701:21): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1855" name="/newroot/491/file0" dev="tmpfs" ino=2628 res=1 errno=0 [ 691.233032][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.239576][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.341085][T15383] kexec: Could not allocate control_code_buffer [ 691.676546][T15402] ubi0: attaching mtd0 [ 691.692327][T15402] ubi0: scanning is finished [ 691.698786][T15402] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 692.118631][T15402] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 693.611404][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 693.641924][T15425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1853'. [ 693.794614][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 694.019423][T15426] FAULT_INJECTION: forcing a failure. [ 694.019423][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 694.051851][T15426] CPU: 1 UID: 0 PID: 15426 Comm: syz.4.1854 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 694.051907][T15426] Tainted: [U]=USER [ 694.051918][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.051938][T15426] Call Trace: [ 694.051949][T15426] [ 694.051963][T15426] dump_stack_lvl+0x16c/0x1f0 [ 694.052016][T15426] should_fail_ex+0x512/0x640 [ 694.052060][T15426] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 694.052110][T15426] should_failslab+0xc2/0x120 [ 694.052139][T15426] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 694.052186][T15426] ? alloc_inode+0xc3/0x240 [ 694.052223][T15426] alloc_inode+0xc3/0x240 [ 694.052255][T15426] create_pipe_files+0x4c/0x930 [ 694.052309][T15426] do_pipe2+0xaf/0x1c0 [ 694.052354][T15426] ? __pfx_do_pipe2+0x10/0x10 [ 694.052402][T15426] ? xfd_validate_state+0x61/0x180 [ 694.052454][T15426] __x64_sys_pipe+0x33/0x50 [ 694.052500][T15426] do_syscall_64+0xcd/0x490 [ 694.052549][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.052580][T15426] RIP: 0033:0x7ff2f138e929 [ 694.052605][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.052635][T15426] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 694.052665][T15426] RAX: ffffffffffffffda RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 694.052686][T15426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.052705][T15426] RBP: 00007ff2f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 694.052724][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.052749][T15426] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 694.052794][T15426] [ 694.756291][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1858'. [ 694.805449][T15443] bond_slave_1: entered allmulticast mode [ 697.498977][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1873'. [ 698.539378][T15525] ubi0: attaching mtd0 [ 698.550883][T15525] ubi0: scanning is finished [ 698.555601][T15525] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 698.939879][T15525] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 699.780325][ T30] audit: type=1804 audit(4294967445.419:22): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1882" name="/newroot/92/file0" dev="tmpfs" ino=510 res=1 errno=0 [ 701.071220][T15566] ubi0: attaching mtd0 [ 701.105769][T15566] ubi0: scanning is finished [ 701.112505][T15566] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 701.314625][T15566] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 701.654350][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 701.924997][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1893'. [ 701.965453][T15592] ubi0: attaching mtd0 [ 701.972486][T15592] ubi0: scanning is finished [ 701.980700][T15592] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 702.110078][T15592] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 702.626149][T15608] FAULT_INJECTION: forcing a failure. [ 702.626149][T15608] name failslab, interval 1, probability 0, space 0, times 0 [ 702.681521][T15608] CPU: 0 UID: 0 PID: 15608 Comm: syz.1.1897 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 702.681576][T15608] Tainted: [U]=USER [ 702.681586][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.681607][T15608] Call Trace: [ 702.681617][T15608] [ 702.681631][T15608] dump_stack_lvl+0x16c/0x1f0 [ 702.681682][T15608] should_fail_ex+0x512/0x640 [ 702.681722][T15608] ? __kmalloc_noprof+0xbf/0x510 [ 702.681767][T15608] ? constrain_params_by_rules+0x175/0xca0 [ 702.681811][T15608] should_failslab+0xc2/0x120 [ 702.681843][T15608] __kmalloc_noprof+0xd2/0x510 [ 702.681887][T15608] ? unwind_get_return_address+0x59/0xa0 [ 702.681944][T15608] constrain_params_by_rules+0x175/0xca0 [ 702.681979][T15608] ? register_lock_class+0x41/0x4c0 [ 702.682035][T15608] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 702.682070][T15608] ? __lock_acquire+0xb8a/0x1c90 [ 702.682117][T15608] ? __mutex_trylock_common+0xe9/0x250 [ 702.682171][T15608] ? rcu_is_watching+0x12/0xc0 [ 702.682201][T15608] ? trace_contention_end+0xdd/0x130 [ 702.682240][T15608] ? snd_interval_refine+0x2fa/0x580 [ 702.682288][T15608] snd_pcm_hw_refine+0x7de/0xad0 [ 702.682332][T15608] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 702.682376][T15608] ? do_raw_spin_lock+0x12c/0x2b0 [ 702.682434][T15608] ? mark_held_locks+0x49/0x80 [ 702.682483][T15608] snd_pcm_hw_params+0x3e4/0x1b40 [ 702.682522][T15608] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 702.682553][T15608] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 702.682592][T15608] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 702.682631][T15608] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 702.682674][T15608] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 702.682710][T15608] ? __asan_memset+0x23/0x50 [ 702.682756][T15608] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 702.682807][T15608] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 702.682868][T15608] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 702.682906][T15608] ? __pfx___mutex_lock+0x10/0x10 [ 702.682987][T15608] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 702.683024][T15608] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 702.683056][T15608] snd_pcm_oss_sync+0x1de/0x840 [ 702.683096][T15608] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 702.683129][T15608] snd_pcm_oss_release+0x28b/0x310 [ 702.683167][T15608] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 702.683199][T15608] __fput+0x402/0xb70 [ 702.683243][T15608] task_work_run+0x14d/0x240 [ 702.683292][T15608] ? __pfx_task_work_run+0x10/0x10 [ 702.683339][T15608] ? __pfx___do_sys_close_range+0x10/0x10 [ 702.683396][T15608] exit_to_user_mode_loop+0xeb/0x110 [ 702.683444][T15608] do_syscall_64+0x3f6/0x490 [ 702.683493][T15608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.683523][T15608] RIP: 0033:0x7ff7c0f8e929 [ 702.683549][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.683577][T15608] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 702.683608][T15608] RAX: 0000000000000000 RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 702.683628][T15608] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 702.683646][T15608] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 702.683665][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.683684][T15608] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 702.683726][T15608] [ 703.231039][T15618] ubi0: attaching mtd0 [ 703.334786][T15617] FAULT_INJECTION: forcing a failure. [ 703.334786][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 703.335032][T15618] ubi0: scanning is finished [ 703.347756][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.1.1899 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 703.347802][T15617] Tainted: [U]=USER [ 703.347812][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.347829][T15617] Call Trace: [ 703.347839][T15617] [ 703.347849][T15617] dump_stack_lvl+0x16c/0x1f0 [ 703.347893][T15617] should_fail_ex+0x512/0x640 [ 703.347930][T15617] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 703.347976][T15617] should_failslab+0xc2/0x120 [ 703.348003][T15617] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 703.348044][T15617] ? alloc_inode+0xc3/0x240 [ 703.348076][T15617] alloc_inode+0xc3/0x240 [ 703.348105][T15617] path_from_stashed+0x2be/0xb00 [ 703.348150][T15617] ? __pfx_path_from_stashed+0x10/0x10 [ 703.348199][T15617] open_namespace+0x8d/0x190 [ 703.348234][T15617] ? __pfx_open_namespace+0x10/0x10 [ 703.348278][T15617] ns_ioctl+0x496/0xe50 [ 703.348312][T15617] ? __pfx_ns_ioctl+0x10/0x10 [ 703.348347][T15617] ? __fget_files+0x20e/0x3c0 [ 703.348387][T15617] ? __pfx_ns_ioctl+0x10/0x10 [ 703.348424][T15617] __x64_sys_ioctl+0x18b/0x210 [ 703.348463][T15617] do_syscall_64+0xcd/0x490 [ 703.348506][T15617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.348534][T15617] RIP: 0033:0x7ff7c0f8e929 [ 703.348556][T15617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.348581][T15617] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.348607][T15617] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 703.348625][T15617] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000005 [ 703.348642][T15617] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 703.348659][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.348682][T15617] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 703.348718][T15617] [ 703.567280][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 703.569143][T15618] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 703.741554][T15618] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 704.483687][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1904'. [ 704.589053][T15641] can: request_module (can-proto-0) failed. [ 704.623247][T15641] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input180 [ 704.716537][ T5185] ERROR: Out of memory at tomoyo_memory_ok. [ 705.793861][T15668] FAULT_INJECTION: forcing a failure. [ 705.793861][T15668] name failslab, interval 1, probability 0, space 0, times 0 [ 705.855879][T15668] CPU: 1 UID: 0 PID: 15668 Comm: syz.5.1908 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 705.855938][T15668] Tainted: [U]=USER [ 705.855948][T15668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.855967][T15668] Call Trace: [ 705.855978][T15668] [ 705.855990][T15668] dump_stack_lvl+0x16c/0x1f0 [ 705.856043][T15668] should_fail_ex+0x512/0x640 [ 705.856085][T15668] ? __kmalloc_noprof+0xbf/0x510 [ 705.856133][T15668] ? constrain_params_by_rules+0x175/0xca0 [ 705.856167][T15668] should_failslab+0xc2/0x120 [ 705.856199][T15668] __kmalloc_noprof+0xd2/0x510 [ 705.856241][T15668] ? kasan_quarantine_put+0x10a/0x240 [ 705.856283][T15668] ? constrain_params_by_rules+0xa09/0xca0 [ 705.856325][T15668] constrain_params_by_rules+0x175/0xca0 [ 705.856379][T15668] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 705.856419][T15668] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 705.856450][T15668] ? __lock_acquire+0xb8a/0x1c90 [ 705.856501][T15668] ? snd_interval_refine+0x2fa/0x580 [ 705.856549][T15668] snd_pcm_hw_refine+0x7de/0xad0 [ 705.856591][T15668] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 705.856634][T15668] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 705.856677][T15668] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 705.856712][T15668] snd_pcm_hw_param_first+0x334/0x6f0 [ 705.856766][T15668] snd_pcm_hw_params+0x5ad/0x1b40 [ 705.856812][T15668] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 705.856850][T15668] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 705.856889][T15668] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 705.856926][T15668] ? __asan_memset+0x23/0x50 [ 705.856972][T15668] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 705.857014][T15668] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 705.857075][T15668] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 705.857115][T15668] ? __pfx___mutex_lock+0x10/0x10 [ 705.857197][T15668] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 705.857236][T15668] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 705.857269][T15668] snd_pcm_oss_sync+0x1de/0x840 [ 705.857311][T15668] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 705.857346][T15668] snd_pcm_oss_release+0x28b/0x310 [ 705.857385][T15668] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 705.857419][T15668] __fput+0x402/0xb70 [ 705.857464][T15668] task_work_run+0x14d/0x240 [ 705.857514][T15668] ? __pfx_task_work_run+0x10/0x10 [ 705.857562][T15668] ? __pfx___do_sys_close_range+0x10/0x10 [ 705.857620][T15668] exit_to_user_mode_loop+0xeb/0x110 [ 705.857671][T15668] do_syscall_64+0x3f6/0x490 [ 705.857722][T15668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.857763][T15668] RIP: 0033:0x7f88ac98e929 [ 705.857791][T15668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.857821][T15668] RSP: 002b:00007f88ad763038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 705.857854][T15668] RAX: 0000000000000000 RBX: 00007f88acbb5fa0 RCX: 00007f88ac98e929 [ 705.857875][T15668] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 705.857895][T15668] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 705.857915][T15668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.857933][T15668] R13: 0000000000000000 R14: 00007f88acbb5fa0 R15: 00007ffc65eec5c8 [ 705.857974][T15668] [ 706.290894][T15676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 706.301798][T15676] bond_slave_1: entered allmulticast mode [ 706.361783][T15678] ubi0: attaching mtd0 [ 706.367126][T15678] ubi0: scanning is finished [ 706.436206][T15678] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 706.707656][T15678] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 707.085008][ T30] audit: type=1804 audit(4294967452.729:23): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1912" name="/newroot/144/file0" dev="tmpfs" ino=784 res=1 errno=0 [ 710.799266][ T30] audit: type=1804 audit(4294967456.369:24): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1925" name="/newroot/481/file0" dev="tmpfs" ino=2538 res=1 errno=0 [ 711.780662][T15782] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 712.080918][T15782] ERROR: Out of memory at tomoyo_memory_ok. [ 712.089482][T15774] ERROR: Out of memory at tomoyo_memory_ok. [ 712.115276][T15776] ERROR: Out of memory at tomoyo_memory_ok. [ 712.608062][T15800] FAULT_INJECTION: forcing a failure. [ 712.608062][T15800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.657917][T15800] CPU: 1 UID: 0 PID: 15800 Comm: syz.1.1933 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 712.657968][T15800] Tainted: [U]=USER [ 712.657978][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.657995][T15800] Call Trace: [ 712.658006][T15800] [ 712.658018][T15800] dump_stack_lvl+0x16c/0x1f0 [ 712.658067][T15800] should_fail_ex+0x512/0x640 [ 712.658114][T15800] _copy_from_user+0x2e/0xd0 [ 712.658147][T15800] write_ldt+0xfc/0xd20 [ 712.658177][T15800] ? __fget_files+0x20e/0x3c0 [ 712.658204][T15800] ? __pfx_write_ldt+0x10/0x10 [ 712.658232][T15800] ? fput+0x70/0xf0 [ 712.658250][T15800] ? ksys_write+0x1ac/0x250 [ 712.658356][T15800] ? __pfx_ksys_write+0x10/0x10 [ 712.658388][T15800] __x64_sys_modify_ldt+0xb1/0x170 [ 712.658420][T15800] do_syscall_64+0xcd/0x490 [ 712.658480][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.658509][T15800] RIP: 0033:0x7ff7c0f8e929 [ 712.658534][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.658562][T15800] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 712.658591][T15800] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 712.658611][T15800] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 712.658628][T15800] RBP: 00007ff7c1d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 712.658647][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.658664][T15800] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 712.658702][T15800] [ 713.473607][T15811] ERROR: Out of memory at tomoyo_memory_ok. [ 713.519924][T15811] FAULT_INJECTION: forcing a failure. [ 713.519924][T15811] name failslab, interval 1, probability 0, space 0, times 0 [ 713.555619][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.4.1936 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 713.555658][T15811] Tainted: [U]=USER [ 713.555665][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.555676][T15811] Call Trace: [ 713.555683][T15811] [ 713.555690][T15811] dump_stack_lvl+0x16c/0x1f0 [ 713.555732][T15811] should_fail_ex+0x512/0x640 [ 713.555759][T15811] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 713.555789][T15811] should_failslab+0xc2/0x120 [ 713.555807][T15811] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 713.555834][T15811] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 713.555863][T15811] ? vm_area_dup+0x27/0x8d0 [ 713.555890][T15811] vm_area_dup+0x27/0x8d0 [ 713.555916][T15811] __split_vma+0x18e/0x1070 [ 713.555944][T15811] ? __pfx___split_vma+0x10/0x10 [ 713.555984][T15811] vms_gather_munmap_vmas+0x392/0x1310 [ 713.556014][T15811] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 713.556047][T15811] ? mas_walk+0x6a6/0x910 [ 713.556080][T15811] __mmap_region+0x3c7/0x25e0 [ 713.556110][T15811] ? __pfx___mmap_region+0x10/0x10 [ 713.556137][T15811] ? rcu_is_watching+0x12/0xc0 [ 713.556159][T15811] ? rcu_is_watching+0x12/0xc0 [ 713.556177][T15811] ? trace_sched_exit_tp+0xde/0x130 [ 713.556199][T15811] ? __schedule+0x1181/0x5de0 [ 713.556230][T15811] ? __lock_acquire+0x622/0x1c90 [ 713.556256][T15811] ? __pfx___schedule+0x10/0x10 [ 713.556305][T15811] ? trace_cap_capable+0x18d/0x200 [ 713.556330][T15811] mmap_region+0x1ab/0x3f0 [ 713.556357][T15811] ? __get_unmapped_area+0x267/0x440 [ 713.556380][T15811] do_mmap+0xa3e/0x1210 [ 713.556404][T15811] ? __pfx_do_mmap+0x10/0x10 [ 713.556424][T15811] ? __pfx_down_write_killable+0x10/0x10 [ 713.556447][T15811] vm_mmap_pgoff+0x281/0x450 [ 713.556469][T15811] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 713.556489][T15811] ? fd_install+0x244/0x750 [ 713.556515][T15811] ? __x64_sys_futex+0x1e0/0x4c0 [ 713.556536][T15811] ? __x64_sys_futex+0x1e9/0x4c0 [ 713.556565][T15811] ksys_mmap_pgoff+0x7d/0x5c0 [ 713.556594][T15811] ? xfd_validate_state+0x61/0x180 [ 713.556629][T15811] ? do_execveat_common.isra.0+0x4c6/0x610 [ 713.556673][T15811] __x64_sys_mmap+0x125/0x190 [ 713.556722][T15811] do_syscall_64+0xcd/0x490 [ 713.556769][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.556800][T15811] RIP: 0033:0x7ff2f138e929 [ 713.556825][T15811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.556855][T15811] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 713.556883][T15811] RAX: ffffffffffffffda RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 713.556903][T15811] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 713.556922][T15811] RBP: 00007ff2f1410b39 R08: 0000000000000401 R09: 0000000000008000 [ 713.556940][T15811] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 713.556957][T15811] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 713.556997][T15811] [ 713.900998][T15813] [U] [ 713.903755][T15813] [U] [ 713.906481][T15813] [U] [ 713.909374][T15813] [U] [ 713.912290][T15813] [U] [ 713.915113][T15813] [U] [ 713.917832][T15813] [U] [ 713.920548][T15813] [U] [ 713.923619][T15813] [U] [ 713.926324][T15813] [U] [ 713.929022][T15813] [U] [ 713.931722][T15813] [U] [ 713.934550][T15813] [U] [ 713.937251][T15813] [U] [ 713.939960][T15813] [U] [ 713.942729][T15813] [U] [ 713.945862][T15813] [U] [ 713.948820][T15813] [U] [ 713.952221][T15813] [U] [ 713.955014][T15813] [U] [ 713.958124][T15813] [U] [ 713.960972][T15813] [U] [ 713.963791][T15813] [U] [ 713.966500][T15813] [U] [ 713.969393][T15813] [U] [ 713.972104][T15813] [U] [ 713.974800][T15813] [U] [ 713.977503][T15813] [U] [ 713.980581][T15813] [U] [ 713.983286][T15813] [U] [ 713.985986][T15813] [U] [ 713.988693][T15813] [U] [ 713.991740][T15813] [U] [ 713.994443][T15813] [U] [ 713.997314][T15813] [U] [ 714.000015][T15813] [U] [ 714.003008][T15813] [U] [ 714.005747][T15813] [U] [ 714.008482][T15813] [U] [ 714.011305][T15813] [U] [ 714.014177][T15813] [U] [ 714.016918][T15813] [U] [ 714.019628][T15813] [U] [ 714.022334][T15813] [U] [ 714.025497][T15813] [U] [ 714.028214][T15813] [U] [ 714.030919][T15813] [U] [ 714.033618][T15813] [U] [ 714.036526][T15813] [U] [ 714.039249][T15813] [U] [ 714.042162][T15813] [U] [ 714.045232][T15813] [U] [ 714.048195][T15813] [U] [ 714.051204][T15813] [U] [ 714.054232][T15813] [U] [ 714.057061][T15813] [U] [ 714.060043][T15813] [U] [ 714.062781][T15813] [U] [ 714.065507][T15813] [U] [ 714.068218][T15813] [U] [ 714.071101][T15813] [U] [ 714.074109][T15813] [U] [ 714.077340][T15813] [U] [ 714.080178][T15813] [U] [ 714.083365][T15813] [U] [ 714.086773][T15813] [U] [ 714.089708][T15813] [U] [ 714.092452][T15813] [U] [ 714.095512][T15813] [U] [ 714.098219][T15813] [U] [ 714.100969][T15813] [U] [ 714.103673][T15813] [U] [ 714.106659][T15813] [U] [ 714.109381][T15813] [U] [ 714.112083][T15813] [U] [ 714.114803][T15813] [U] [ 714.117682][T15813] [U] [ 714.120412][T15813] [U] [ 714.123136][T15813] [U] [ 714.125865][T15813] [U] [ 714.129045][T15813] [U] [ 714.131773][T15813] [U] [ 714.134501][T15813] [U] [ 714.137402][T15813] [U] [ 714.140279][T15813] [U] [ 714.143006][T15813] [U] [ 714.146061][T15813] [U] [ 714.148762][T15813] [U] [ 714.151674][T15813] [U] [ 714.154381][T15813] [U] [ 714.157079][T15813] [U] [ 714.159785][T15813] [U] [ 714.162628][T15813] [U] [ 714.165418][T15813] [U] [ 714.168139][T15813] [U] [ 714.170852][T15813] [U] [ 714.173794][T15813] [U] [ 714.176585][T15813] [U] [ 714.179725][T15813] [U] [ 714.182428][T15813] [U] [ 714.238041][T15813] [U] [ 714.240962][T15813] [U] [ 714.243745][T15813] [U] [ 714.246642][T15813] [U] [ 714.379162][T15813] [U] [ 714.382163][T15813] [U] [ 714.384930][T15813] [U] [ 714.387754][T15813] [U] [ 714.394150][T15813] [U] [ 714.397023][T15813] [U] [ 714.399862][T15813] [U] [ 714.402657][T15813] [U] [ 714.418900][T15813] [U] [ 714.421932][T15813] [U] [ 714.424809][T15813] [U] [ 714.427761][T15813] [U] [ 714.534987][T15813] [U] [ 714.537831][T15813] [U] [ 714.540617][T15813] [U] [ 714.543383][T15813] [U] [ 714.569306][T15813] [U] [ 714.572124][T15813] [U] [ 714.574826][T15813] [U] [ 714.577529][T15813] [U] [ 714.680615][T15813] [U] [ 714.683373][T15813] [U] [ 714.686083][T15813] [U] [ 714.688820][T15813] [U] [ 714.691581][T15813] [U] [ 714.807117][T15813] [U] [ 714.809974][T15813] [U] [ 714.812713][T15813] [U] [ 714.815431][T15813] [U] [ 714.874890][T15828] [U] [ 715.517577][T15835] FAULT_INJECTION: forcing a failure. [ 715.517577][T15835] name failslab, interval 1, probability 0, space 0, times 0 [ 715.538678][T15835] CPU: 0 UID: 0 PID: 15835 Comm: syz.1.1942 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 715.538713][T15835] Tainted: [U]=USER [ 715.538719][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.538731][T15835] Call Trace: [ 715.538737][T15835] [ 715.538746][T15835] dump_stack_lvl+0x16c/0x1f0 [ 715.538778][T15835] should_fail_ex+0x512/0x640 [ 715.538805][T15835] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 715.538836][T15835] should_failslab+0xc2/0x120 [ 715.538853][T15835] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 715.538881][T15835] ? sock_alloc_inode+0x25/0x1c0 [ 715.538904][T15835] ? __pfx_sock_alloc_inode+0x10/0x10 [ 715.538931][T15835] sock_alloc_inode+0x25/0x1c0 [ 715.538950][T15835] alloc_inode+0x64/0x240 [ 715.538969][T15835] sock_alloc+0x40/0x280 [ 715.538987][T15835] __sock_create+0xc1/0x8d0 [ 715.539013][T15835] __sys_socket+0x14d/0x260 [ 715.539034][T15835] ? __fget_files+0x20e/0x3c0 [ 715.539059][T15835] ? __pfx___sys_socket+0x10/0x10 [ 715.539081][T15835] ? xfd_validate_state+0x61/0x180 [ 715.539110][T15835] __x64_sys_socket+0x72/0xb0 [ 715.539130][T15835] ? lockdep_hardirqs_on+0x7c/0x110 [ 715.539156][T15835] do_syscall_64+0xcd/0x490 [ 715.539185][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.539205][T15835] RIP: 0033:0x7ff7c0f8e929 [ 715.539220][T15835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.539239][T15835] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 715.539257][T15835] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 715.539269][T15835] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 000000000000000c [ 715.539280][T15835] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 715.539291][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.539302][T15835] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 715.539323][T15835] [ 715.539333][T15835] socket: no more sockets [ 715.937053][T15840] FAULT_INJECTION: forcing a failure. [ 715.937053][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 715.958626][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.4.1943 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 715.958678][T15840] Tainted: [U]=USER [ 715.958688][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.958704][T15840] Call Trace: [ 715.958714][T15840] [ 715.958726][T15840] dump_stack_lvl+0x16c/0x1f0 [ 715.958775][T15840] should_fail_ex+0x512/0x640 [ 715.958815][T15840] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 715.958858][T15840] should_failslab+0xc2/0x120 [ 715.958887][T15840] __kmalloc_cache_noprof+0x6a/0x3e0 [ 715.958923][T15840] ? down_write_killable+0x154/0x250 [ 715.958963][T15840] ? alloc_ldt_struct+0x5d/0x1a0 [ 715.959014][T15840] alloc_ldt_struct+0x5d/0x1a0 [ 715.959058][T15840] write_ldt+0x3ca/0xd20 [ 715.959104][T15840] ? __fget_files+0x20e/0x3c0 [ 715.959149][T15840] ? __pfx_write_ldt+0x10/0x10 [ 715.959194][T15840] ? fput+0x70/0xf0 [ 715.959223][T15840] ? ksys_write+0x1ac/0x250 [ 715.959264][T15840] ? __pfx_ksys_write+0x10/0x10 [ 715.959316][T15840] __x64_sys_modify_ldt+0xb1/0x170 [ 715.959363][T15840] do_syscall_64+0xcd/0x490 [ 715.959410][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.959440][T15840] RIP: 0033:0x7ff2f138e929 [ 715.959465][T15840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.959491][T15840] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 715.959519][T15840] RAX: ffffffffffffffda RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 715.959536][T15840] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 715.959554][T15840] RBP: 00007ff2f2179090 R08: 0000000000000000 R09: 0000000000000000 [ 715.959572][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.959588][T15840] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 715.959627][T15840] [ 716.200514][T15842] FAULT_INJECTION: forcing a failure. [ 716.200514][T15842] name failslab, interval 1, probability 0, space 0, times 0 [ 716.215251][T15842] CPU: 1 UID: 0 PID: 15842 Comm: syz.5.1944 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 716.215305][T15842] Tainted: [U]=USER [ 716.215317][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.215335][T15842] Call Trace: [ 716.215345][T15842] [ 716.215357][T15842] dump_stack_lvl+0x16c/0x1f0 [ 716.215406][T15842] should_fail_ex+0x512/0x640 [ 716.215448][T15842] ? __kmalloc_noprof+0xbf/0x510 [ 716.215494][T15842] ? lsm_blob_alloc+0x68/0x90 [ 716.215535][T15842] should_failslab+0xc2/0x120 [ 716.215565][T15842] __kmalloc_noprof+0xd2/0x510 [ 716.215654][T15842] lsm_blob_alloc+0x68/0x90 [ 716.215698][T15842] security_sk_alloc+0x30/0x270 [ 716.215730][T15842] sk_prot_alloc+0xfb/0x2a0 [ 716.215765][T15842] sk_alloc+0x36/0xc20 [ 716.215808][T15842] inet_create+0x3a1/0x1090 [ 716.215849][T15842] ? inet_create+0x93/0x1090 [ 716.215895][T15842] __sock_create+0x338/0x8d0 [ 716.215937][T15842] smc_create_clcsk+0x37/0xd0 [ 716.215974][T15842] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 716.216005][T15842] inet_create+0x936/0x1090 [ 716.216046][T15842] ? inet_create+0x93/0x1090 [ 716.216095][T15842] __sock_create+0x338/0x8d0 [ 716.216138][T15842] __sys_socket+0x14d/0x260 [ 716.216172][T15842] ? __pfx___sys_socket+0x10/0x10 [ 716.216203][T15842] ? xfd_validate_state+0x61/0x180 [ 716.216232][T15842] ? __pfx_do_writev+0x10/0x10 [ 716.216279][T15842] __x64_sys_socket+0x72/0xb0 [ 716.216311][T15842] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.216353][T15842] do_syscall_64+0xcd/0x490 [ 716.216401][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.216432][T15842] RIP: 0033:0x7f88ac98e929 [ 716.216458][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.216488][T15842] RSP: 002b:00007f88ad763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 716.216518][T15842] RAX: ffffffffffffffda RBX: 00007f88acbb5fa0 RCX: 00007f88ac98e929 [ 716.216538][T15842] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 716.216557][T15842] RBP: 00007f88aca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 716.216576][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.216605][T15842] R13: 0000000000000000 R14: 00007f88acbb5fa0 R15: 00007ffc65eec5c8 [ 716.216647][T15842] [ 716.744292][T15851] ubi0: attaching mtd0 [ 716.754659][T15851] ubi0: scanning is finished [ 716.841717][T15851] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 717.191814][T15851] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 717.650821][T15860] zswap: compressor not available [ 718.001642][ T30] audit: type=1804 audit(4294967463.649:25): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1952" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 718.040457][T15875] FAULT_INJECTION: forcing a failure. [ 718.040457][T15875] name failslab, interval 1, probability 0, space 0, times 0 [ 718.068707][T15875] CPU: 0 UID: 0 PID: 15875 Comm: syz.1.1951 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 718.068763][T15875] Tainted: [U]=USER [ 718.068775][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.068793][T15875] Call Trace: [ 718.068803][T15875] [ 718.068816][T15875] dump_stack_lvl+0x16c/0x1f0 [ 718.068866][T15875] should_fail_ex+0x512/0x640 [ 718.068906][T15875] ? __kvmalloc_node_noprof+0x124/0x620 [ 718.068966][T15875] should_failslab+0xc2/0x120 [ 718.068996][T15875] __kvmalloc_node_noprof+0x137/0x620 [ 718.069034][T15875] ? rcu_is_watching+0x12/0xc0 [ 718.069065][T15875] ? kfree+0x24f/0x4d0 [ 718.069099][T15875] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 718.069146][T15875] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 718.069183][T15875] snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 718.069240][T15875] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 718.069280][T15875] ? __pfx___mutex_lock+0x10/0x10 [ 718.069358][T15875] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 718.069397][T15875] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 718.069431][T15875] snd_pcm_oss_sync+0x1de/0x840 [ 718.069471][T15875] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 718.069505][T15875] snd_pcm_oss_release+0x28b/0x310 [ 718.069543][T15875] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 718.069577][T15875] __fput+0x402/0xb70 [ 718.069620][T15875] task_work_run+0x14d/0x240 [ 718.069669][T15875] ? __pfx_task_work_run+0x10/0x10 [ 718.069714][T15875] ? __pfx___do_sys_close_range+0x10/0x10 [ 718.069770][T15875] exit_to_user_mode_loop+0xeb/0x110 [ 718.069819][T15875] do_syscall_64+0x3f6/0x490 [ 718.069871][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.069905][T15875] RIP: 0033:0x7ff7c0f8e929 [ 718.069939][T15875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.069970][T15875] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 718.070002][T15875] RAX: 0000000000000000 RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 718.070023][T15875] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 718.070042][T15875] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.070073][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.070093][T15875] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 718.070139][T15875] [ 718.656018][T15888] FAULT_INJECTION: forcing a failure. [ 718.656018][T15888] name failslab, interval 1, probability 0, space 0, times 0 [ 718.715516][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.3.1954 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 718.715590][T15888] Tainted: [U]=USER [ 718.715601][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.715627][T15888] Call Trace: [ 718.715638][T15888] [ 718.715651][T15888] dump_stack_lvl+0x16c/0x1f0 [ 718.715701][T15888] should_fail_ex+0x512/0x640 [ 718.715741][T15888] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 718.715789][T15888] should_failslab+0xc2/0x120 [ 718.715820][T15888] __kmalloc_cache_node_noprof+0x6d/0x420 [ 718.715863][T15888] ? __get_vm_area_node+0x101/0x330 [ 718.715907][T15888] __get_vm_area_node+0x101/0x330 [ 718.715941][T15888] ? alloc_ldt_struct+0x5d/0x1a0 [ 718.715990][T15888] __vmalloc_node_range_noprof+0x271/0x14b0 [ 718.716030][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.716088][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.716145][T15888] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.716203][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.716244][T15888] __vmalloc_node_noprof+0xad/0xf0 [ 718.716281][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.716331][T15888] alloc_ldt_struct+0x14f/0x1a0 [ 718.716375][T15888] write_ldt+0x3ca/0xd20 [ 718.716421][T15888] ? __fget_files+0x20e/0x3c0 [ 718.716465][T15888] ? __pfx_write_ldt+0x10/0x10 [ 718.716509][T15888] ? fput+0x70/0xf0 [ 718.716537][T15888] ? ksys_write+0x1ac/0x250 [ 718.716579][T15888] ? __pfx_ksys_write+0x10/0x10 [ 718.716637][T15888] __x64_sys_modify_ldt+0xb1/0x170 [ 718.716684][T15888] do_syscall_64+0xcd/0x490 [ 718.716731][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.716762][T15888] RIP: 0033:0x7ff92358e929 [ 718.716785][T15888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.716813][T15888] RSP: 002b:00007ff9243b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 718.716843][T15888] RAX: ffffffffffffffda RBX: 00007ff9237b5fa0 RCX: 00007ff92358e929 [ 718.716863][T15888] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 718.716881][T15888] RBP: 00007ff9243b7090 R08: 0000000000000000 R09: 0000000000000000 [ 718.716898][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.716916][T15888] R13: 0000000000000000 R14: 00007ff9237b5fa0 R15: 00007ffff0350f98 [ 718.716957][T15888] [ 718.716970][T15888] warn_alloc: 1 callbacks suppressed [ 718.716985][T15888] syz.3.1954: vmalloc error: size 32776, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 718.992976][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.3.1954 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 718.993031][T15888] Tainted: [U]=USER [ 718.993042][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.993060][T15888] Call Trace: [ 718.993070][T15888] [ 718.993083][T15888] dump_stack_lvl+0x16c/0x1f0 [ 718.993132][T15888] warn_alloc+0x248/0x3a0 [ 718.993179][T15888] ? __pfx_warn_alloc+0x10/0x10 [ 718.993224][T15888] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 718.993273][T15888] ? __kasan_kmalloc+0x8a/0xb0 [ 718.993317][T15888] ? __get_vm_area_node+0x208/0x330 [ 718.993363][T15888] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 718.993416][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.993470][T15888] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.993525][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.993566][T15888] __vmalloc_node_noprof+0xad/0xf0 [ 718.993603][T15888] ? alloc_ldt_struct+0x14f/0x1a0 [ 718.993650][T15888] alloc_ldt_struct+0x14f/0x1a0 [ 718.993695][T15888] write_ldt+0x3ca/0xd20 [ 718.993740][T15888] ? __fget_files+0x20e/0x3c0 [ 718.993784][T15888] ? __pfx_write_ldt+0x10/0x10 [ 718.993828][T15888] ? fput+0x70/0xf0 [ 718.993856][T15888] ? ksys_write+0x1ac/0x250 [ 718.993909][T15888] ? __pfx_ksys_write+0x10/0x10 [ 718.993959][T15888] __x64_sys_modify_ldt+0xb1/0x170 [ 718.994004][T15888] do_syscall_64+0xcd/0x490 [ 718.994051][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.994082][T15888] RIP: 0033:0x7ff92358e929 [ 718.994105][T15888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.994135][T15888] RSP: 002b:00007ff9243b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 718.994164][T15888] RAX: ffffffffffffffda RBX: 00007ff9237b5fa0 RCX: 00007ff92358e929 [ 718.994184][T15888] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 718.994202][T15888] RBP: 00007ff9243b7090 R08: 0000000000000000 R09: 0000000000000000 [ 718.994221][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.994240][T15888] R13: 0000000000000000 R14: 00007ff9237b5fa0 R15: 00007ffff0350f98 [ 718.994281][T15888] [ 718.995089][T15888] Mem-Info: [ 719.036189][ T30] audit: type=1804 audit(4294967464.679:26): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1955" name="/newroot/156/file0" dev="tmpfs" ino=850 res=1 errno=0 [ 719.058552][T15888] active_anon:14301 inactive_anon:0 isolated_anon:23 [ 719.058552][T15888] active_file:19917 inactive_file:40929 isolated_file:0 [ 719.058552][T15888] unevictable:768 dirty:837 writeback:0 [ 719.058552][T15888] slab_reclaimable:11539 slab_unreclaimable:98114 [ 719.058552][T15888] mapped:25589 shmem:2611 pagetables:1455 [ 719.058552][T15888] sec_pagetables:0 bounce:0 [ 719.058552][T15888] kernel_misc_reclaimable:0 [ 719.058552][T15888] free:1314884 free_pcp:8900 free_cma:0 [ 719.299001][T15888] Node 0 active_anon:57268kB inactive_anon:0kB active_file:79668kB inactive_file:163580kB unevictable:1536kB isolated(anon):72kB isolated(file):0kB mapped:102308kB dirty:3364kB writeback:0kB shmem:8920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12524kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.348687][T15888] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.388743][T15888] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.421785][T15888] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 719.427959][T15888] Node 0 DMA32 free:1322408kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57248kB inactive_anon:0kB active_file:79668kB inactive_file:162272kB unevictable:1536kB writepending:3368kB present:3129332kB managed:2540868kB mlocked:0kB bounce:0kB free_pcp:34612kB local_pcp:17844kB free_cma:0kB [ 719.482700][T15888] lowmem_reserve[]: 0 0 1 1 1 [ 719.487643][T15888] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 719.526406][T15888] lowmem_reserve[]: 0 0 0 0 0 [ 719.532072][T15888] Node 1 Normal free:3921784kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:284kB free_cma:0kB [ 719.565361][T15888] lowmem_reserve[]: 0 0 0 0 0 [ 719.572317][T15888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 719.634485][T15897] FAULT_INJECTION: forcing a failure. [ 719.634485][T15897] name failslab, interval 1, probability 0, space 0, times 0 [ 719.648074][T15888] Node 0 DMA32: 2172*4kB (UME) 2555*8kB (UM) 2263*16kB (UME) 1205*32kB (UME) 852*64kB (UME) 363*128kB (UM) 170*256kB (UM) 87*512kB (UME) 67*1024kB (UME) 24*2048kB (UME) 223*4096kB (UM) = 1324120kB [ 719.684645][T15897] CPU: 1 UID: 0 PID: 15897 Comm: syz.1.1958 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 719.684699][T15897] Tainted: [U]=USER [ 719.684711][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.684728][T15897] Call Trace: [ 719.684739][T15897] [ 719.684752][T15897] dump_stack_lvl+0x16c/0x1f0 [ 719.684803][T15897] should_fail_ex+0x512/0x640 [ 719.684845][T15897] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 719.684893][T15897] should_failslab+0xc2/0x120 [ 719.684923][T15897] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 719.684970][T15897] ? shmem_alloc_inode+0x25/0x50 [ 719.685006][T15897] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 719.685034][T15897] shmem_alloc_inode+0x25/0x50 [ 719.685062][T15897] alloc_inode+0x64/0x240 [ 719.685093][T15897] new_inode+0x22/0x1c0 [ 719.685122][T15897] ? trace_cap_capable+0x18d/0x200 [ 719.685155][T15897] shmem_get_inode+0x19a/0xfb0 [ 719.685193][T15897] ? __vm_enough_memory+0x184/0x3f0 [ 719.685228][T15897] __shmem_file_setup+0x279/0x330 [ 719.685271][T15897] shmem_zero_setup+0x93/0x1a0 [ 719.685315][T15897] __mmap_region+0x1ece/0x25e0 [ 719.685366][T15897] ? __pfx___mmap_region+0x10/0x10 [ 719.685409][T15897] ? rcu_is_watching+0x12/0xc0 [ 719.685450][T15897] ? rcu_is_watching+0x12/0xc0 [ 719.685480][T15897] ? trace_sched_exit_tp+0xde/0x130 [ 719.685517][T15897] ? __schedule+0x1181/0x5de0 [ 719.685587][T15897] ? __pfx___schedule+0x10/0x10 [ 719.685691][T15897] ? trace_cap_capable+0x18d/0x200 [ 719.685736][T15897] mmap_region+0x1ab/0x3f0 [ 719.685779][T15897] ? __get_unmapped_area+0x267/0x440 [ 719.685819][T15897] do_mmap+0xa3e/0x1210 [ 719.685861][T15897] ? __pfx_do_mmap+0x10/0x10 [ 719.685891][T15897] ? __pfx_down_write_killable+0x10/0x10 [ 719.685919][T15897] ? __pfx___might_resched+0x10/0x10 [ 719.685955][T15897] vm_mmap_pgoff+0x281/0x450 [ 719.685991][T15897] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 719.686022][T15897] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 719.686074][T15897] ? __x64_sys_futex+0x1e0/0x4c0 [ 719.686110][T15897] ? __x64_sys_futex+0x1e9/0x4c0 [ 719.686152][T15897] ksys_mmap_pgoff+0x7d/0x5c0 [ 719.686184][T15897] ? xfd_validate_state+0x61/0x180 [ 719.686232][T15897] __x64_sys_mmap+0x125/0x190 [ 719.686278][T15897] do_syscall_64+0xcd/0x490 [ 719.686324][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.686353][T15897] RIP: 0033:0x7ff7c0f8e929 [ 719.686377][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.686406][T15897] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 719.686436][T15897] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 719.686457][T15897] RDX: 000000007fffffff RSI: 0000000000020009 RDI: 0000000000000000 [ 719.686477][T15897] RBP: 00007ff7c1010b39 R08: 0000000000000401 R09: 0000000000008000 [ 719.686496][T15897] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 719.686514][T15897] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 719.686554][T15897] [ 719.749628][T15888] Node 0 [ 720.012718][T15897] ERROR: Out of memory at tomoyo_memory_ok. [ 720.065379][T15888] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 720.082358][T15897] HfR: entered promiscuous mode [ 720.135795][T15888] Node 1 Normal: 178*4kB (UME) 46*8kB (UME) 42*16kB (UME) 209*32kB (UME) 106*64kB (UME) 34*128kB (UME) 19*256kB (UME) 8*512kB (UM) 2*1024kB (UE) 4*2048kB (UME) 948*4096kB (UM) = 3921784kB [ 720.201297][T15888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.211711][T15888] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 720.231656][T15888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.267828][T15888] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 720.348782][T15888] 62251 total pagecache pages [ 720.366265][T15888] 0 pages in swap cache [ 720.394525][T15888] Free swap = 124996kB [ 720.407634][T15888] Total swap = 124996kB [ 720.418708][T15888] 2097051 pages RAM [ 720.427349][T15888] 0 pages HighMem/MovableOnly [ 720.440619][T15888] 429856 pages reserved [ 720.447104][T15888] 0 pages cma reserved [ 720.885155][T15918] FAULT_INJECTION: forcing a failure. [ 720.885155][T15918] name failslab, interval 1, probability 0, space 0, times 0 [ 720.955647][T15918] CPU: 0 UID: 0 PID: 15918 Comm: syz.4.1962 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 720.955709][T15918] Tainted: [U]=USER [ 720.955721][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.955739][T15918] Call Trace: [ 720.955751][T15918] [ 720.955764][T15918] dump_stack_lvl+0x16c/0x1f0 [ 720.955814][T15918] should_fail_ex+0x512/0x640 [ 720.955857][T15918] ? __kmalloc_noprof+0xbf/0x510 [ 720.955905][T15918] ? constrain_params_by_rules+0x175/0xca0 [ 720.955938][T15918] should_failslab+0xc2/0x120 [ 720.955968][T15918] __kmalloc_noprof+0xd2/0x510 [ 720.956010][T15918] ? kasan_quarantine_put+0x10a/0x240 [ 720.956053][T15918] ? constrain_params_by_rules+0xa09/0xca0 [ 720.956097][T15918] constrain_params_by_rules+0x175/0xca0 [ 720.956154][T15918] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 720.956201][T15918] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 720.956237][T15918] ? __lock_acquire+0xb8a/0x1c90 [ 720.956296][T15918] ? snd_interval_refine+0x2fa/0x580 [ 720.956346][T15918] snd_pcm_hw_refine+0x7de/0xad0 [ 720.956391][T15918] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 720.956436][T15918] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 720.956482][T15918] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 720.956521][T15918] snd_pcm_hw_param_first+0x334/0x6f0 [ 720.956566][T15918] snd_pcm_hw_params+0x5ad/0x1b40 [ 720.956615][T15918] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 720.956663][T15918] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 720.956706][T15918] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 720.956743][T15918] ? __asan_memset+0x23/0x50 [ 720.956788][T15918] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 720.956831][T15918] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 720.956893][T15918] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 720.956931][T15918] ? __pfx___mutex_lock+0x10/0x10 [ 720.957012][T15918] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 720.957050][T15918] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 720.957082][T15918] snd_pcm_oss_sync+0x1de/0x840 [ 720.957123][T15918] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 720.957157][T15918] snd_pcm_oss_release+0x28b/0x310 [ 720.957195][T15918] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 720.957224][T15918] __fput+0x402/0xb70 [ 720.957263][T15918] task_work_run+0x14d/0x240 [ 720.957308][T15918] ? __pfx_task_work_run+0x10/0x10 [ 720.957352][T15918] ? __pfx___do_sys_close_range+0x10/0x10 [ 720.957406][T15918] exit_to_user_mode_loop+0xeb/0x110 [ 720.957453][T15918] do_syscall_64+0x3f6/0x490 [ 720.957502][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.957533][T15918] RIP: 0033:0x7ff2f138e929 [ 720.957558][T15918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.957589][T15918] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 720.957619][T15918] RAX: 0000000000000000 RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 720.957639][T15918] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 720.957667][T15918] RBP: 00007ff2f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 720.957686][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.957704][T15918] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 720.957747][T15918] [ 721.535620][T15928] mkiss: ax0: crc mode is auto. [ 721.572274][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 722.130667][ T30] audit: type=1804 audit(4294967467.769:27): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1966" name="/newroot/110/file0" dev="tmpfs" ino=606 res=1 errno=0 [ 722.969404][T15965] FAULT_INJECTION: forcing a failure. [ 722.969404][T15965] name failslab, interval 1, probability 0, space 0, times 0 [ 722.982564][T15965] CPU: 0 UID: 0 PID: 15965 Comm: syz.1.1974 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 722.982623][T15965] Tainted: [U]=USER [ 722.982634][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.982666][T15965] Call Trace: [ 722.982678][T15965] [ 722.982692][T15965] dump_stack_lvl+0x16c/0x1f0 [ 722.982749][T15965] should_fail_ex+0x512/0x640 [ 722.982798][T15965] ? __kmalloc_noprof+0xbf/0x510 [ 722.982849][T15965] ? constrain_params_by_rules+0x175/0xca0 [ 722.982885][T15965] should_failslab+0xc2/0x120 [ 722.982916][T15965] __kmalloc_noprof+0xd2/0x510 [ 722.982961][T15965] ? kasan_quarantine_put+0x10a/0x240 [ 722.983008][T15965] ? lockdep_hardirqs_on+0x7c/0x110 [ 722.983064][T15965] constrain_params_by_rules+0x175/0xca0 [ 722.983102][T15965] ? constrain_params_by_rules+0xa09/0xca0 [ 722.983148][T15965] ? constrain_params_by_rules+0xa0e/0xca0 [ 722.983193][T15965] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 722.983243][T15965] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 722.983280][T15965] ? __lock_acquire+0xb8a/0x1c90 [ 722.983351][T15965] snd_pcm_hw_refine+0x7de/0xad0 [ 722.983398][T15965] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 722.983446][T15965] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 722.983494][T15965] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 722.983535][T15965] snd_pcm_hw_param_first+0x334/0x6f0 [ 722.983573][T15965] ? trace_hw_mask_param+0x18b/0x200 [ 722.983630][T15965] snd_pcm_hw_params+0x5ad/0x1b40 [ 722.983690][T15965] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 722.983731][T15965] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 722.983774][T15965] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 722.983810][T15965] ? __asan_memset+0x23/0x50 [ 722.983856][T15965] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 722.983898][T15965] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 722.983957][T15965] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 722.983997][T15965] ? __pfx___mutex_lock+0x10/0x10 [ 722.984069][T15965] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 722.984105][T15965] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 722.984133][T15965] snd_pcm_oss_sync+0x1de/0x840 [ 722.984172][T15965] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 722.984205][T15965] snd_pcm_oss_release+0x28b/0x310 [ 722.984244][T15965] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 722.984275][T15965] __fput+0x402/0xb70 [ 722.984320][T15965] task_work_run+0x14d/0x240 [ 722.984372][T15965] ? __pfx_task_work_run+0x10/0x10 [ 722.984420][T15965] ? __pfx___do_sys_close_range+0x10/0x10 [ 722.984478][T15965] exit_to_user_mode_loop+0xeb/0x110 [ 722.984531][T15965] do_syscall_64+0x3f6/0x490 [ 722.984585][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.984618][T15965] RIP: 0033:0x7ff7c0f8e929 [ 722.984645][T15965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.984689][T15965] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 722.984721][T15965] RAX: 0000000000000000 RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 722.984744][T15965] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 722.984764][T15965] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 722.984785][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.984807][T15965] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 722.984852][T15965] [ 725.134536][T15983] nbd: socks must be embedded in a SOCK_ITEM attr [ 725.377510][T15971] kexec: Could not allocate control_code_buffer [ 725.680341][T15983] tipc: Started in network mode [ 725.685275][T15983] tipc: Node identity ee00, cluster identity 4711 [ 725.772507][T15983] tipc: Node number set to 60928 [ 728.120270][T16028] ubi0: attaching mtd0 [ 728.126960][T16028] ubi0: scanning is finished [ 728.148639][T16028] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 728.305787][T16028] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 728.349648][ T30] audit: type=1804 audit(4294967473.989:28): pid=16027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1992" name="/newroot/527/file0" dev="tmpfs" ino=2820 res=1 errno=0 [ 730.674173][T16070] FAULT_INJECTION: forcing a failure. [ 730.674173][T16070] name failslab, interval 1, probability 0, space 0, times 0 [ 730.687818][T16070] CPU: 1 UID: 0 PID: 16070 Comm: syz.4.1996 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 730.687882][T16070] Tainted: [U]=USER [ 730.687893][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.687913][T16070] Call Trace: [ 730.687925][T16070] [ 730.687938][T16070] dump_stack_lvl+0x16c/0x1f0 [ 730.687991][T16070] should_fail_ex+0x512/0x640 [ 730.688035][T16070] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 730.688086][T16070] should_failslab+0xc2/0x120 [ 730.688116][T16070] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 730.688163][T16070] ? alloc_empty_file+0x55/0x1e0 [ 730.688201][T16070] alloc_empty_file+0x55/0x1e0 [ 730.688235][T16070] path_openat+0xda/0x2cb0 [ 730.688276][T16070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.688322][T16070] ? __pfx_path_openat+0x10/0x10 [ 730.688378][T16070] do_filp_open+0x20b/0x470 [ 730.688429][T16070] ? __pfx_do_filp_open+0x10/0x10 [ 730.688502][T16070] ? _raw_spin_unlock+0x28/0x50 [ 730.688541][T16070] ? alloc_fd+0x471/0x7d0 [ 730.688595][T16070] do_sys_openat2+0x11b/0x1d0 [ 730.688630][T16070] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.688662][T16070] ? fput+0x70/0xf0 [ 730.688692][T16070] ? __sys_sendmsg+0x18c/0x220 [ 730.688749][T16070] __x64_sys_open+0x153/0x1e0 [ 730.688782][T16070] ? __pfx___x64_sys_open+0x10/0x10 [ 730.688826][T16070] ? rcu_is_watching+0x12/0xc0 [ 730.688870][T16070] do_syscall_64+0xcd/0x490 [ 730.688920][T16070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.688950][T16070] RIP: 0033:0x7ff2f138e929 [ 730.688976][T16070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.689008][T16070] RSP: 002b:00007ff2f2179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 730.689039][T16070] RAX: ffffffffffffffda RBX: 00007ff2f15b5fa0 RCX: 00007ff2f138e929 [ 730.689060][T16070] RDX: 0000000000000031 RSI: 00000000000eee00 RDI: 0000200000000080 [ 730.689081][T16070] RBP: 00007ff2f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.689102][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.689122][T16070] R13: 0000000000000000 R14: 00007ff2f15b5fa0 R15: 00007ffd50c21e38 [ 730.689163][T16070] [ 731.082529][T16078] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1999'. [ 731.122765][T16078] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1999'. [ 731.255522][ T30] audit: type=1800 audit(4294967476.899:29): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2001" name="version" dev="configfs" ino=51239 res=0 errno=0 [ 731.518236][T16080] ERROR: Out of memory at tomoyo_memory_ok. [ 731.639274][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2004'. [ 731.770500][T16097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2004'. [ 732.346615][T12770] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 733.178559][T16128] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2010'. [ 733.193411][T16128] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2010'. [ 734.038858][T12770] Bluetooth: hci2: command 0x0406 tx timeout [ 734.050202][T16096] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 734.707709][T16096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.714881][T16096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 734.722988][T16096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.730997][T16096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 734.741274][T16096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 734.748865][T16096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 734.767099][T16120] FAULT_INJECTION: forcing a failure. [ 734.767099][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 734.791412][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.1.2009 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 734.791446][T16120] Tainted: [U]=USER [ 734.791453][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.791464][T16120] Call Trace: [ 734.791471][T16120] [ 734.791486][T16120] dump_stack_lvl+0x16c/0x1f0 [ 734.791520][T16120] should_fail_ex+0x512/0x640 [ 734.791547][T16120] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 734.791575][T16120] should_failslab+0xc2/0x120 [ 734.791593][T16120] __kmalloc_cache_noprof+0x6a/0x3e0 [ 734.791618][T16120] ? nfc_allocate_device+0x15b/0x5e0 [ 734.791639][T16120] nfc_allocate_device+0x15b/0x5e0 [ 734.791656][T16120] ? __init_swait_queue_head+0xca/0x150 [ 734.791690][T16120] nci_allocate_device+0x23b/0x430 [ 734.791729][T16120] virtual_ncidev_open+0x6f/0x220 [ 734.791766][T16120] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 734.791803][T16120] misc_open+0x35d/0x420 [ 734.791833][T16120] ? __pfx_misc_open+0x10/0x10 [ 734.791856][T16120] chrdev_open+0x231/0x6a0 [ 734.791883][T16120] ? __pfx_apparmor_file_open+0x10/0x10 [ 734.791906][T16120] ? __pfx_chrdev_open+0x10/0x10 [ 734.791935][T16120] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 734.791964][T16120] do_dentry_open+0x744/0x1c10 [ 734.791992][T16120] ? __pfx_chrdev_open+0x10/0x10 [ 734.792024][T16120] vfs_open+0x82/0x3f0 [ 734.792046][T16120] path_openat+0x1de4/0x2cb0 [ 734.792079][T16120] ? __pfx_path_openat+0x10/0x10 [ 734.792108][T16120] ? __lock_acquire+0xb8a/0x1c90 [ 734.792135][T16120] do_filp_open+0x20b/0x470 [ 734.792161][T16120] ? __pfx_do_filp_open+0x10/0x10 [ 734.792203][T16120] ? alloc_fd+0x471/0x7d0 [ 734.792233][T16120] do_sys_openat2+0x11b/0x1d0 [ 734.792253][T16120] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.792282][T16120] __x64_sys_openat+0x174/0x210 [ 734.792303][T16120] ? __pfx___x64_sys_openat+0x10/0x10 [ 734.792333][T16120] do_syscall_64+0xcd/0x490 [ 734.792363][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.792382][T16120] RIP: 0033:0x7ff7c0f8e929 [ 734.792399][T16120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.792417][T16120] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.792436][T16120] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 734.792448][T16120] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 734.792460][T16120] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 734.792471][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.792491][T16120] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 734.792514][T16120] [ 735.855796][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 735.868044][T16166] ipvlan0: entered allmulticast mode [ 735.875984][T16166] veth0_vlan: entered allmulticast mode [ 736.133516][T12770] Bluetooth: hci3: command 0x0406 tx timeout [ 736.758591][T12770] Bluetooth: hci0: command 0x0406 tx timeout [ 736.758603][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 737.378169][T16194] FAULT_INJECTION: forcing a failure. [ 737.378169][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 737.404614][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.4.2024 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 737.404664][T16194] Tainted: [U]=USER [ 737.404675][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.404692][T16194] Call Trace: [ 737.404713][T16194] [ 737.404726][T16194] dump_stack_lvl+0x16c/0x1f0 [ 737.404776][T16194] should_fail_ex+0x512/0x640 [ 737.404825][T16194] should_failslab+0xc2/0x120 [ 737.404854][T16194] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 737.404899][T16194] ? skb_clone+0x190/0x3f0 [ 737.404950][T16194] skb_clone+0x190/0x3f0 [ 737.404997][T16194] netlink_deliver_tap+0xabd/0xd30 [ 737.405037][T16194] netlink_unicast+0x5df/0x7f0 [ 737.405074][T16194] ? __pfx_netlink_unicast+0x10/0x10 [ 737.405119][T16194] netlink_sendmsg+0x8d1/0xdd0 [ 737.405158][T16194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.405207][T16194] __sys_sendto+0x4a0/0x520 [ 737.405248][T16194] ? __pfx___sys_sendto+0x10/0x10 [ 737.405314][T16194] ? find_held_lock+0x2b/0x80 [ 737.405383][T16194] __x64_sys_sendto+0xe0/0x1c0 [ 737.405422][T16194] ? do_syscall_64+0x91/0x490 [ 737.405463][T16194] ? lockdep_hardirqs_on+0x7c/0x110 [ 737.405504][T16194] do_syscall_64+0xcd/0x490 [ 737.405552][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.405583][T16194] RIP: 0033:0x7ff2f13907bc [ 737.405608][T16194] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 737.405637][T16194] RSP: 002b:00007ff2f2177ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 737.405667][T16194] RAX: ffffffffffffffda RBX: 00007ff2f2177fc0 RCX: 00007ff2f13907bc [ 737.405688][T16194] RDX: 0000000000000020 RSI: 00007ff2f2178010 RDI: 0000000000000006 [ 737.405715][T16194] RBP: 0000000000000000 R08: 00007ff2f2177f14 R09: 000000000000000c [ 737.405734][T16194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 737.405752][T16194] R13: 00007ff2f2177f68 R14: 00007ff2f2178010 R15: 0000000000000000 [ 737.405797][T16194] [ 737.705577][T16200] ima: policy update failed [ 737.713018][ T30] audit: type=1802 audit(4294967483.359:30): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2025" res=0 errno=0 [ 737.809526][T16197] FAULT_INJECTION: forcing a failure. [ 737.809526][T16197] name failslab, interval 1, probability 0, space 0, times 0 [ 737.833136][T16207] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2026'. [ 737.860162][T16197] CPU: 1 UID: 0 PID: 16197 Comm: syz.1.2023 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 737.860217][T16197] Tainted: [U]=USER [ 737.860228][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.860246][T16197] Call Trace: [ 737.860257][T16197] [ 737.860270][T16197] dump_stack_lvl+0x16c/0x1f0 [ 737.860323][T16197] should_fail_ex+0x512/0x640 [ 737.860366][T16197] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 737.860412][T16197] ? __pfx_worker_thread+0x10/0x10 [ 737.860455][T16197] should_failslab+0xc2/0x120 [ 737.860484][T16197] __kmalloc_cache_noprof+0x6a/0x3e0 [ 737.860524][T16197] ? lockdep_init_map_type+0x5c/0x280 [ 737.860571][T16197] ? __kthread_create_on_node+0xce/0x3f0 [ 737.860610][T16197] ? __init_swait_queue_head+0xca/0x150 [ 737.860664][T16197] ? __pfx_worker_thread+0x10/0x10 [ 737.860705][T16197] __kthread_create_on_node+0xce/0x3f0 [ 737.860742][T16197] ? __pfx___kthread_create_on_node+0x10/0x10 [ 737.860800][T16197] ? __pfx_worker_thread+0x10/0x10 [ 737.860848][T16197] kthread_create_on_node+0xc7/0x100 [ 737.860885][T16197] ? __pfx_kthread_create_on_node+0x10/0x10 [ 737.860941][T16197] create_worker+0x416/0x7e0 [ 737.860973][T16197] ? __pfx_create_worker+0x10/0x10 [ 737.861003][T16197] ? idr_alloc+0xdd/0x130 [ 737.861050][T16197] alloc_unbound_pwq+0xb94/0xe10 [ 737.861079][T16197] ? kasan_save_track+0x14/0x30 [ 737.861117][T16197] apply_wqattrs_prepare+0x3af/0xbd0 [ 737.861156][T16197] workqueue_apply_unbound_cpumask+0x17e/0x4f0 [ 737.861186][T16197] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 737.861212][T16197] ? bitmap_parse+0x327/0x410 [ 737.861244][T16197] cpumask_store+0x1ad/0x220 [ 737.861269][T16197] ? __pfx_cpumask_store+0x10/0x10 [ 737.861293][T16197] ? find_held_lock+0x2b/0x80 [ 737.861317][T16197] ? sysfs_file_kobj+0xe4/0x290 [ 737.861347][T16197] ? __pfx_cpumask_store+0x10/0x10 [ 737.861370][T16197] dev_attr_store+0x55/0x80 [ 737.861392][T16197] ? __pfx_dev_attr_store+0x10/0x10 [ 737.861414][T16197] sysfs_kf_write+0xef/0x150 [ 737.861446][T16197] kernfs_fop_write_iter+0x351/0x510 [ 737.861470][T16197] ? __pfx_sysfs_kf_write+0x10/0x10 [ 737.861502][T16197] vfs_write+0x6c4/0x1150 [ 737.861536][T16197] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 737.861572][T16197] ? __pfx___mutex_lock+0x10/0x10 [ 737.861607][T16197] ? __pfx_vfs_write+0x10/0x10 [ 737.861668][T16197] ksys_write+0x12a/0x250 [ 737.861701][T16197] ? __pfx_ksys_write+0x10/0x10 [ 737.861747][T16197] do_syscall_64+0xcd/0x490 [ 737.861786][T16197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.861811][T16197] RIP: 0033:0x7ff7c0f8e929 [ 737.861832][T16197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.861856][T16197] RSP: 002b:00007ff7c1d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.861880][T16197] RAX: ffffffffffffffda RBX: 00007ff7c11b6080 RCX: 00007ff7c0f8e929 [ 737.861896][T16197] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000004 [ 737.861910][T16197] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 737.861925][T16197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.861939][T16197] R13: 0000000000000000 R14: 00007ff7c11b6080 R15: 00007ffef72fad68 [ 737.861972][T16197] [ 737.864633][T16207] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2026'. [ 738.102345][T16197] workqueue: Failed to create a worker thread: -ENOMEM [ 738.191336][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 738.416787][T16218] FAULT_INJECTION: forcing a failure. [ 738.416787][T16218] name fail_futex, interval 1, probability 0, space 0, times 0 [ 738.500190][T16218] CPU: 1 UID: 0 PID: 16218 Comm: syz.1.2029 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 738.500241][T16218] Tainted: [U]=USER [ 738.500252][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.500270][T16218] Call Trace: [ 738.500279][T16218] [ 738.500292][T16218] dump_stack_lvl+0x16c/0x1f0 [ 738.500341][T16218] should_fail_ex+0x512/0x640 [ 738.500388][T16218] get_futex_key+0x1d0/0x1540 [ 738.500427][T16218] ? __pfx_get_futex_key+0x10/0x10 [ 738.500462][T16218] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.500500][T16218] ? __lock_acquire+0x622/0x1c90 [ 738.500540][T16218] futex_wake+0xea/0x530 [ 738.500581][T16218] ? __pfx_futex_wake+0x10/0x10 [ 738.500637][T16218] do_futex+0x1e3/0x350 [ 738.500677][T16218] ? __pfx_do_futex+0x10/0x10 [ 738.500710][T16218] ? fput+0x70/0xf0 [ 738.500766][T16218] ? __sys_sendmsg+0x18c/0x220 [ 738.500810][T16218] __x64_sys_futex+0x1e0/0x4c0 [ 738.500849][T16218] ? __pfx___x64_sys_futex+0x10/0x10 [ 738.500900][T16218] do_syscall_64+0xcd/0x490 [ 738.500944][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.500972][T16218] RIP: 0033:0x7ff7c0f8e929 [ 738.500996][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.501024][T16218] RSP: 002b:00007ff7c1d5d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 738.501052][T16218] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa8 RCX: 00007ff7c0f8e929 [ 738.501072][T16218] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff7c11b5fac [ 738.501090][T16218] RBP: 00007ff7c11b5fa0 R08: 00007ff7c1d5e000 R09: 0000000000000000 [ 738.501108][T16218] R10: 0000000000000050 R11: 0000000000000246 R12: 00007ff7c11b5fac [ 738.501126][T16218] R13: 0000000000000000 R14: 00007ffef72fac80 R15: 00007ffef72fad68 [ 738.501165][T16218] [ 738.830551][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 738.838661][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 739.061124][T16223] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2031'. [ 739.101357][T16223] netlink: 102 bytes leftover after parsing attributes in process `syz.3.2031'. [ 739.786454][T16240] zswap: compressor 000 not available [ 740.420979][T16257] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2037'. [ 740.524990][T16257] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2037'. [ 740.844161][T16262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2039'. [ 741.566690][T16280] ubi0: attaching mtd0 [ 741.592680][T16280] ubi0: scanning is finished [ 741.603850][T16280] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 741.771512][T16280] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 744.275719][T16340] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 744.356295][ T30] audit: type=1804 audit(4294967489.999:31): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2054" name="/newroot/129/file0" dev="tmpfs" ino=705 res=1 errno=0 [ 744.400583][T16343] ubi0: attaching mtd0 [ 744.413703][T16343] ubi0: scanning is finished [ 744.438520][T16343] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 744.497427][T16346] ERROR: Out of memory at tomoyo_memory_ok. [ 744.615229][T16343] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 744.635948][T16340] ERROR: Out of memory at tomoyo_memory_ok. [ 744.706491][T16329] ERROR: Out of memory at tomoyo_memory_ok. [ 745.603993][T16374] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2058'. [ 745.707999][T16374] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2058'. [ 747.527939][T16407] ERROR: Out of memory at tomoyo_memory_ok. [ 749.021123][T16440] netlink: 'syz.1.2069': attribute type 4 has an invalid length. [ 749.055707][T16440] netlink: 'syz.1.2069': attribute type 5 has an invalid length. [ 749.093875][T16440] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2069'. [ 749.832577][T16457] queue_state_write: unsupported operation '' [ 749.879930][T16457] queue_state_write: use 'run', 'start' or 'kick' [ 749.978955][T16437] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2068'. [ 752.694094][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.706261][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.555637][T16518] Falling back ldisc for ttyS2. [ 755.118125][T16571] FAULT_INJECTION: forcing a failure. [ 755.118125][T16571] name failslab, interval 1, probability 0, space 0, times 0 [ 755.173404][T16571] CPU: 1 UID: 0 PID: 16571 Comm: syz.3.2092 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 755.173453][T16571] Tainted: [U]=USER [ 755.173463][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.173481][T16571] Call Trace: [ 755.173492][T16571] [ 755.173504][T16571] dump_stack_lvl+0x16c/0x1f0 [ 755.173552][T16571] should_fail_ex+0x512/0x640 [ 755.173594][T16571] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 755.173637][T16571] should_failslab+0xc2/0x120 [ 755.173668][T16571] __kmalloc_cache_noprof+0x6a/0x3e0 [ 755.173722][T16571] ? snd_card_file_add+0x52/0x330 [ 755.173757][T16571] snd_card_file_add+0x52/0x330 [ 755.173792][T16571] snd_rawmidi_open+0x2cc/0xbf0 [ 755.173840][T16571] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 755.173886][T16571] ? kobject_get_unless_zero+0x156/0x1e0 [ 755.173938][T16571] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 755.173974][T16571] snd_open+0x1fe/0x450 [ 755.174003][T16571] ? __pfx_snd_open+0x10/0x10 [ 755.174029][T16571] chrdev_open+0x231/0x6a0 [ 755.174071][T16571] ? __pfx_apparmor_file_open+0x10/0x10 [ 755.174110][T16571] ? __pfx_chrdev_open+0x10/0x10 [ 755.174158][T16571] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 755.174206][T16571] do_dentry_open+0x744/0x1c10 [ 755.174249][T16571] ? __pfx_chrdev_open+0x10/0x10 [ 755.174299][T16571] vfs_open+0x82/0x3f0 [ 755.174337][T16571] path_openat+0x1de4/0x2cb0 [ 755.174395][T16571] ? __pfx_path_openat+0x10/0x10 [ 755.174437][T16571] ? __lock_acquire+0xb8a/0x1c90 [ 755.174481][T16571] do_filp_open+0x20b/0x470 [ 755.174524][T16571] ? __pfx_do_filp_open+0x10/0x10 [ 755.174592][T16571] ? alloc_fd+0x471/0x7d0 [ 755.174642][T16571] do_sys_openat2+0x11b/0x1d0 [ 755.174675][T16571] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.174735][T16571] __x64_sys_openat+0x174/0x210 [ 755.174770][T16571] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.174822][T16571] do_syscall_64+0xcd/0x490 [ 755.174872][T16571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.174904][T16571] RIP: 0033:0x7ff92358e929 [ 755.174931][T16571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.174958][T16571] RSP: 002b:00007ff9243b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.174989][T16571] RAX: ffffffffffffffda RBX: 00007ff9237b5fa0 RCX: 00007ff92358e929 [ 755.175008][T16571] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 755.175025][T16571] RBP: 00007ff923610b39 R08: 0000000000000000 R09: 0000000000000000 [ 755.175043][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.175061][T16571] R13: 0000000000000000 R14: 00007ff9237b5fa0 R15: 00007ffff0350f98 [ 755.175101][T16571] [ 758.283958][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2097'. [ 758.319819][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2097'. [ 760.398162][T16681] sg_write: process 2179 (syz.3.2106) changed security contexts after opening file descriptor, this is not allowed. [ 763.265790][T16740] ubi0: attaching mtd0 [ 763.277546][T16740] ubi0: scanning is finished [ 763.313272][T16740] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 763.562092][T16740] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 765.411633][T16772] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2119'. [ 767.115473][T16817] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 769.354808][ T5843] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 769.354854][ T5843] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 769.378181][ T5843] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 769.378226][ T5843] Bluetooth: hci3: adv larger than maximum supported [ 769.388004][ T5843] Bluetooth: hci3: Malformed LE Event: 0x0d [ 771.079923][T16908] ALSA: mixer_oss: invalid OSS volume '0' [ 771.138675][T16908] ALSA: mixer_oss: invalid OSS volume '' [ 771.947554][T16928] ERROR: Out of memory at tomoyo_memory_ok. [ 771.962242][T16927] ERROR: Out of memory at tomoyo_memory_ok. [ 772.376543][ T30] audit: type=1804 audit(4294967526.021:32): pid=16936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2151" name="/newroot/535/file0" dev="tmpfs" ino=2820 res=1 errno=0 [ 773.131147][T16955] ERROR: Out of memory at tomoyo_memory_ok. [ 774.142430][T16968] FAULT_INJECTION: forcing a failure. [ 774.142430][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 774.168315][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.1.2158 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 774.168366][T16968] Tainted: [U]=USER [ 774.168378][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.168397][T16968] Call Trace: [ 774.168413][T16968] [ 774.168425][T16968] dump_stack_lvl+0x16c/0x1f0 [ 774.168474][T16968] should_fail_ex+0x512/0x640 [ 774.168517][T16968] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 774.168574][T16968] should_failslab+0xc2/0x120 [ 774.168605][T16968] __kmalloc_cache_noprof+0x6a/0x3e0 [ 774.168647][T16968] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x319/0x480 [ 774.168701][T16968] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x36d/0x480 [ 774.168751][T16968] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x9c/0x480 [ 774.168807][T16968] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x9c/0x480 [ 774.168858][T16968] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 774.168898][T16968] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 774.168949][T16968] snd_mixer_oss_ioctl1+0x1883/0x1cf0 [ 774.168984][T16968] ? lockdep_hardirqs_on+0x7c/0x110 [ 774.169019][T16968] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 774.169058][T16968] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 774.169094][T16968] ? tomoyo_path_number_perm+0x295/0x580 [ 774.169127][T16968] ? tomoyo_path_number_perm+0x18d/0x580 [ 774.169157][T16968] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 774.169183][T16968] ? futex_wake+0x1ad/0x530 [ 774.169214][T16968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.169252][T16968] ? do_vfs_ioctl+0x523/0x1a60 [ 774.169280][T16968] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 774.169313][T16968] snd_mixer_oss_ioctl_card+0x102/0x170 [ 774.169351][T16968] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 774.169398][T16968] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 774.169425][T16968] ? find_held_lock+0x2b/0x80 [ 774.169448][T16968] ? hook_file_ioctl_common+0x145/0x410 [ 774.169474][T16968] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 774.169504][T16968] ? __fget_files+0x20e/0x3c0 [ 774.169541][T16968] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 774.169578][T16968] __x64_sys_ioctl+0x18b/0x210 [ 774.169609][T16968] do_syscall_64+0xcd/0x490 [ 774.169647][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.169672][T16968] RIP: 0033:0x7ff7c0f8e929 [ 774.169693][T16968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.169719][T16968] RSP: 002b:00007ff7c1d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.169744][T16968] RAX: ffffffffffffffda RBX: 00007ff7c11b5fa0 RCX: 00007ff7c0f8e929 [ 774.169761][T16968] RDX: 0000200000000140 RSI: 0000000080044dff RDI: 000000000000000d [ 774.169776][T16968] RBP: 00007ff7c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 774.169791][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.169805][T16968] R13: 0000000000000000 R14: 00007ff7c11b5fa0 R15: 00007ffef72fad68 [ 774.169838][T16968] [ 775.156970][T16985] ubi0: attaching mtd0 [ 775.183213][T16985] ubi0: scanning is finished [ 775.204768][T16985] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 775.229296][T16988] FAULT_INJECTION: forcing a failure. [ 775.229296][T16988] name failslab, interval 1, probability 0, space 0, times 0 [ 775.257622][T16988] CPU: 1 UID: 0 PID: 16988 Comm: syz.1.2162 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 775.257674][T16988] Tainted: [U]=USER [ 775.257685][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.257704][T16988] Call Trace: [ 775.257716][T16988] [ 775.257728][T16988] dump_stack_lvl+0x16c/0x1f0 [ 775.257778][T16988] should_fail_ex+0x512/0x640 [ 775.257820][T16988] ? fs_reclaim_acquire+0xae/0x150 [ 775.257859][T16988] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 775.257899][T16988] should_failslab+0xc2/0x120 [ 775.257929][T16988] __kmalloc_noprof+0xd2/0x510 [ 775.257983][T16988] tomoyo_realpath_from_path+0xc2/0x6e0 [ 775.258030][T16988] ? tomoyo_profile+0x47/0x60 [ 775.258078][T16988] tomoyo_path_number_perm+0x245/0x580 [ 775.258112][T16988] ? tomoyo_path_number_perm+0x237/0x580 [ 775.258150][T16988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.258187][T16988] ? find_held_lock+0x2b/0x80 [ 775.258255][T16988] ? find_held_lock+0x2b/0x80 [ 775.258284][T16988] ? hook_file_ioctl_common+0x145/0x410 [ 775.258325][T16988] ? __fget_files+0x20e/0x3c0 [ 775.258372][T16988] security_file_ioctl+0x9b/0x240 [ 775.258419][T16988] __x64_sys_ioctl+0xb7/0x210 [ 775.258458][T16988] do_syscall_64+0xcd/0x490 [ 775.258503][T16988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.258532][T16988] RIP: 0033:0x7ff7c0f8e929 [ 775.258563][T16988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.258591][T16988] RSP: 002b:00007ff7c1d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.258620][T16988] RAX: ffffffffffffffda RBX: 00007ff7c11b6080 RCX: 00007ff7c0f8e929 [ 775.258640][T16988] RDX: 0000000000000000 RSI: 0000000040046f41 RDI: 0000000000000002 [ 775.258658][T16988] RBP: 00007ff7c1d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 775.258675][T16988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.258693][T16988] R13: 0000000000000001 R14: 00007ff7c11b6080 R15: 00007ffef72fad68 [ 775.258734][T16988] [ 775.609235][T16988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 775.649299][T16986] program syz.5.2161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.920200][T16985] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 776.479046][ T30] audit: type=1804 audit(4294967530.111:33): pid=17009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2164" name="/newroot/161/file0" dev="tmpfs" ino=875 res=1 errno=0 [ 777.454830][T16962] delete_channel: no stack [ 777.478613][ T5898] ================================================================== [ 777.478634][ T5898] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 777.478678][ T5898] Write of size 8 at addr ffffc90003c89be0 by task kworker/1:5/5898 [ 777.478703][ T5898] [ 777.478720][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: kworker/1:5 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 777.478764][ T5898] Tainted: [U]=USER [ 777.478775][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.478796][ T5898] Workqueue: events_power_efficient fb_flashcursor [ 777.478837][ T5898] Call Trace: [ 777.478847][ T5898] [ 777.478859][ T5898] dump_stack_lvl+0x116/0x1f0 [ 777.478902][ T5898] print_report+0xcd/0x680 [ 777.478928][ T5898] ? __virt_addr_valid+0x81/0x610 [ 777.478961][ T5898] ? sys_imageblit+0x1a6f/0x1e60 [ 777.478993][ T5898] kasan_report+0xe0/0x110 [ 777.479019][ T5898] ? sys_imageblit+0x1a6f/0x1e60 [ 777.479057][ T5898] sys_imageblit+0x1a6f/0x1e60 [ 777.479092][ T5898] ? __lock_acquire+0xb8a/0x1c90 [ 777.479131][ T5898] ? __pfx_sys_imageblit+0x10/0x10 [ 777.479169][ T5898] ? do_raw_spin_lock+0x12c/0x2b0 [ 777.479213][ T5898] ? find_held_lock+0x2b/0x80 [ 777.479244][ T5898] ? __lock_acquire+0xb8a/0x1c90 [ 777.479284][ T5898] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 777.479334][ T5898] soft_cursor+0x524/0xa10 [ 777.479364][ T5898] ? fb_get_color_depth+0x120/0x250 [ 777.479407][ T5898] bit_cursor+0xe8c/0x17e0 [ 777.479456][ T5898] ? __pfx_bit_cursor+0x10/0x10 [ 777.479506][ T5898] ? fb_get_color_depth+0x120/0x250 [ 777.479547][ T5898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.479590][ T5898] ? get_color+0x1ce/0x440 [ 777.479624][ T5898] ? __pfx_bit_cursor+0x10/0x10 [ 777.479660][ T5898] fb_flashcursor+0x310/0x400 [ 777.479694][ T5898] process_one_work+0x9cc/0x1b70 [ 777.479735][ T5898] ? __pfx_process_one_work+0x10/0x10 [ 777.479775][ T5898] ? assign_work+0x1a0/0x250 [ 777.479808][ T5898] worker_thread+0x6c8/0xf10 [ 777.479847][ T5898] ? __kthread_parkme+0x19e/0x250 [ 777.479875][ T5898] ? __pfx_worker_thread+0x10/0x10 [ 777.479911][ T5898] kthread+0x3c5/0x780 [ 777.479942][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.479976][ T5898] ? rcu_is_watching+0x12/0xc0 [ 777.480000][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.480032][ T5898] ret_from_fork+0x5d4/0x6f0 [ 777.480064][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.480096][ T5898] ret_from_fork_asm+0x1a/0x30 [ 777.480128][ T5898] [ 777.480136][ T5898] [ 777.480148][ T5898] The buggy address ffffc90003c89be0 belongs to a vmalloc virtual mapping [ 777.480160][ T5898] Memory state around the buggy address: [ 777.480172][ T5898] ffffc90003c89a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 777.480189][ T5898] ffffc90003c89b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 777.480206][ T5898] >ffffc90003c89b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 777.480219][ T5898] ^ [ 777.480234][ T5898] ffffc90003c89c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 777.480250][ T5898] ffffc90003c89c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 777.480263][ T5898] ================================================================== [ 777.480281][ T5898] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 777.480310][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: kworker/1:5 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 777.480350][ T5898] Tainted: [U]=USER [ 777.480358][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.480374][ T5898] Workqueue: events_power_efficient fb_flashcursor [ 777.480407][ T5898] Call Trace: [ 777.480415][ T5898] [ 777.480425][ T5898] dump_stack_lvl+0x3d/0x1f0 [ 777.480459][ T5898] panic+0x71c/0x800 [ 777.480491][ T5898] ? __pfx_panic+0x10/0x10 [ 777.480523][ T5898] ? irqentry_exit+0x3b/0x90 [ 777.480558][ T5898] ? lockdep_hardirqs_on+0x7c/0x110 [ 777.480593][ T5898] ? sys_imageblit+0x1a6f/0x1e60 [ 777.480623][ T5898] ? check_panic_on_warn+0x1f/0xb0 [ 777.480658][ T5898] ? sys_imageblit+0x1a6f/0x1e60 [ 777.480685][ T5898] check_panic_on_warn+0xab/0xb0 [ 777.480719][ T5898] end_report+0x107/0x170 [ 777.480757][ T5898] kasan_report+0xee/0x110 [ 777.480779][ T5898] ? sys_imageblit+0x1a6f/0x1e60 [ 777.480809][ T5898] sys_imageblit+0x1a6f/0x1e60 [ 777.480838][ T5898] ? __lock_acquire+0xb8a/0x1c90 [ 777.480870][ T5898] ? __pfx_sys_imageblit+0x10/0x10 [ 777.480901][ T5898] ? do_raw_spin_lock+0x12c/0x2b0 [ 777.480937][ T5898] ? find_held_lock+0x2b/0x80 [ 777.480962][ T5898] ? __lock_acquire+0xb8a/0x1c90 [ 777.480995][ T5898] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 777.481026][ T5898] soft_cursor+0x524/0xa10 [ 777.481050][ T5898] ? fb_get_color_depth+0x120/0x250 [ 777.481086][ T5898] bit_cursor+0xe8c/0x17e0 [ 777.481131][ T5898] ? __pfx_bit_cursor+0x10/0x10 [ 777.481173][ T5898] ? fb_get_color_depth+0x120/0x250 [ 777.481207][ T5898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.481243][ T5898] ? get_color+0x1ce/0x440 [ 777.481275][ T5898] ? __pfx_bit_cursor+0x10/0x10 [ 777.481321][ T5898] fb_flashcursor+0x310/0x400 [ 777.481355][ T5898] process_one_work+0x9cc/0x1b70 [ 777.481398][ T5898] ? __pfx_process_one_work+0x10/0x10 [ 777.481440][ T5898] ? assign_work+0x1a0/0x250 [ 777.481475][ T5898] worker_thread+0x6c8/0xf10 [ 777.481517][ T5898] ? __kthread_parkme+0x19e/0x250 [ 777.481547][ T5898] ? __pfx_worker_thread+0x10/0x10 [ 777.481583][ T5898] kthread+0x3c5/0x780 [ 777.481616][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.481650][ T5898] ? rcu_is_watching+0x12/0xc0 [ 777.481673][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.481707][ T5898] ret_from_fork+0x5d4/0x6f0 [ 777.481738][ T5898] ? __pfx_kthread+0x10/0x10 [ 777.481771][ T5898] ret_from_fork_asm+0x1a/0x30 [ 777.481805][ T5898] [ 777.482186][ T5898] Kernel Offset: disabled