last executing test programs: 2m49.129338767s ago: executing program 2 (id=2375): close_range$auto(0x2, 0x8, 0x0) 2m49.00719508s ago: executing program 2 (id=2376): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x4, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x3}]}, 0x34}}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x40000, 0x8000000000000000, 0x15) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000000000) ioperm$auto(0x6, 0x6, 0xfffffffd) vmsplice$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) io_uring_setup$auto(0x401, 0x0) 2m47.462790858s ago: executing program 2 (id=2381): mmap$auto(0x0, 0x2020009, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000340)="bbc69f44294e96f44775c8ae2f799d5b6cd3299545567a43016b6aec10e08a4fbbdbbca984cc42f44cdd54990480d823053a2bcc30812de2cd2ad59a53569f780f1c90346687a38c9eeb864081f5aa5c16157d43f44f0da3d10bf57668fd3b292a2de512328f6200e4d3f59a1c09b3e471cc30600ae9a8f90cfca13648120bd3b503b9d275909b66ef32e4d61999fff4283c5e0199d8de3bea6b30e65c127e57926f31921272f38c5256594516799461c04b4960d6c23715f28db38250d479", 0x3}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex_requeue$auto(&(0x7f0000000080)={0x400, 0x39c3c00000000}, 0x80800001, 0xb, 0xc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x109042, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x149400, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x104, 0x80000001, 0x7, 0x1, 0x3, 0x15f4da0a, 0x6, 0x3, 0x62, 0x1, 0x7, 0x6d3f, 0x2, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) futex_requeue$auto(&(0x7f00000000c0)={0x5, 0x4, 0x9}, 0x3, 0x40, 0x496) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)={0x7, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x63f) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) init_module$auto(0x0, 0xffff9, 0x0) pidfd_open$auto(0x1, 0x0) 2m44.083846096s ago: executing program 2 (id=2388): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_HUGEPAGE(0x0, 0x80000001, 0xe) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x9, 0x0, 0x5, 0x8) madvise$auto_MADV_HUGEPAGE(0x0, 0x2, 0xe) socket(0x2c, 0x3, 0x0) bpf$auto(0x4, &(0x7f0000000280)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x5, 0xa, 0x1000009, r0, 0xfff, 0x3}, 0x6f6) fcntl$auto(0x3, 0x400, 0x1) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r2, 0x5509, 0x0) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000006200)={0x0, 0xfffffffffffffe47, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c000380050001800300000004000280080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/midi2\x00', 0x38b003, 0x0) socket(0x28, 0x1, 0x0) select$auto(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x1fb, 0x7, 0x80000001, 0x1, 0x9, 0x4460, 0x15f4da0c, 0x8000000000000001, 0x3, 0x300000000000000, 0x80000003, 0x4, 0x0, 0x9, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, r1, 0x4, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xffffffffffffffff, 0xa) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) 2m40.841362308s ago: executing program 2 (id=2392): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x4, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x3}]}, 0x34}}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x40000, 0x8000000000000000, 0x15) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000000000) ioperm$auto(0x6, 0x6, 0xfffffffd) vmsplice$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) io_uring_setup$auto(0x401, 0x0) 2m39.541251717s ago: executing program 2 (id=2398): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x51, 0x9, 0xeb1, 0x401, 0x800000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01172c9d7000ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x844) r3 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0x2) socket(0x2, 0x800, 0x4000100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) r4 = socket(0x2, 0x6, 0x0) getsockopt$auto(r4, 0x10d, 0xc, 0x0, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) mmap$auto(0x80000000c33, 0x40009, 0xdf, 0x17, r3, 0x28000) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) 2m33.567163071s ago: executing program 1 (id=2410): mmap$auto(0x0, 0x20009, 0x40000000005f, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0) write$auto(r0, &(0x7f00000000c0)=',.\\\x00', 0xd) socket(0xa, 0x6, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) getsockopt$auto(r1, 0x10d, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6) io_uring_setup$auto(0x1, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', 0x0) readlink$auto(0x0, 0x0, 0x800) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x8, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x16000000003}, 0x3) mmap$auto(0x1, 0x20006, 0x6, 0xe71, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_gettime$auto(0x3, 0x0) 2m32.359645857s ago: executing program 1 (id=2412): mmap$auto(0x7, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x21, 0x800, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x38, 0x2, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f00000001c0)='%\xf3%}\a\xa5\x9f3u\x16.>\xe7\xf1\xe9\xb5\xa1PNh4\xe0\xe4\x04\x06\xbaA\b\xf2\xbd\xe9\x05-\x05\xe7\xcc\x85\x94r\xffy\xf8\xfe\'`u\a8\xc4\xe49\x10\xb3\xc9`m\x1e\xa3\x17\x0eBc?', &(0x7f0000000140)=&(0x7f0000000100)='*::)\x00') openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x1d, "d39541ad365bfbd9e92c88bea955"}, 0x18) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x1, 0x4}, 0x6}, 0x10001, 0x300, 0x0) 2m32.224836728s ago: executing program 1 (id=2413): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x116, 0x15}, 0x18) listxattrat$auto(r0, &(0x7f0000000080)='./file0\x00', 0x90, &(0x7f00000000c0)=')!\x00', 0xffffffff7fffffff) r1 = seccomp$auto(0xf7c4, 0x80, &(0x7f0000000100)="03c03669d91a1c5e6687236bb3e17b66c74d2b1c049a329e5ee83c1f33b152315271157c02e01fd722e1a9c92cda4b4466113e5f0a6466489ad5cd55bfd867766a3a3130b2da90f8a3df0d8f5429a9c7247b2cda3798181633a2d9ec7eec2369aca4134459719df6d5a643f25583eb31bd2afad07998e1b0de983cdb7a130da842d4c613b680213d86d1890aec61261e9a66f3efede192ffedc676c021d00506b7143abe9c9a5423af2dc4f8220fc7346af8e27bff264e0cdd5984d65d409526a53b767eb826918c2ae4002488610fcadc4cca0ad110d3806c6708322ca7ed200c876f4fabf3e119b2f4ea3de2cb41824ef3be0c134982438d79e57d9834d2f1f2902de2b867721d970a171d4e485c0a6031a6538ae8d174a23e56a77ef5da025cd86d8ec427351789197a8737ae7fbe68141c8564f97ee16940759f428aef9dea8650af32eb1d535029695810d19379a0d0339a06040c11d9e435899c11b1ab67ddabcc20eaf91312e1aa95273630a3c1880e2d660c6ecfba7ff012af19f6fc4276861407393db1c4ab6567996dd74051e596dfeec5aaff370da02a953ff95e67e8bc6ae88392517c662f2cc15477483ad9f8c80deb9083a3cb685742b7be500f842ba7b383f79137a5fc649590337f6f922fdef2d978e52aabf0b7fcd1847992655c363509eaf60d32f95a5cf6f0267cb39b4af3be254088789222060661c0b91780b528469d42a29f029efb7391d3bdfcdd5f4bb3d17320061a324fc0defdd0549f9c6fa18d6dc3e951b5b4b6b701b93d71136de04d9cc45dfd7f277c3f68e60f8006e845ab71bafa267dba4b7728e32d1d6d35b9506fb4b5be93eb23ee9739d6390db423637398fd50e86b177879f893f9af66528958fb4f00de477a678214d604100d85e491b163481decfb5e5d0d81d691786d82d7879101254000e4417a821648ba7ebe4ede449df4533f071dda94c3f302009ac5f45552ad18e5bd24ec4e1e5139abe2652ae6bebedb2de87c7b0a54a43f9433d62a74817677a238755335a6e65e1317feb7b4b5dd1822f01ee085554a17c808d7bc84f21b2b62fda83ab77137e447e1d56d4d70b431cd3bccb89b9280db77537a9c26765fdf9099360e337b9585dd40fc58202aa3935e8aba499a5f71ad4322fad5cc1c7d5ca2d7c489288c1c074ff90090ae9ae04b69fe8e5ca51c934f6a8838ea9f77bfb28d3c69b81010d5d5a8d7e87acbd20ddc482e4ec8df29c3f6869805b1efa4cfdd4619d4516621bed79c69127176d6388cc638cf97315c690a8b674dd226028ba8db9848e35e30097c96c1d201f1ea12f6d4798411ae1c1d4cc78f973313ce3a0604ea6efa8560e3defc13ada79eea7ae449887fadfb7b845ea87a9ce51bf86dd8d12a2bf3011f5cde7d46f8818fdc1ae44fe2895ae91594ab09134e0c57de4b1d118158069df03dceaa19853decb0b36fa3aa388132807f2375cb84a1d6a4b26cf01d4a50e3424503d3098a20988b0bef120f08c93d116d6ffec26ba749d7277517d81d20a6d0957b97392f2cce2779744cc8547725727fda2c8f827823d1a0e7ad29b7a5dc5a45daecad2ad8ed3e72324360fa6695705b88a61cf7ef94fd21cdba45fea3687c996584f35bef02a459859548d211c2798e9f25382e6f6ff5feb4cc2e1fdf183744aeb6fd2247f8a4bdd71f047b7600cb66c2cd057587c084d635e46bb35a4abcd140af3a289583fb39517f7de301f435c73568540ffca87c32f44ccc9d55b10b880a42392b002e38e568362e38acc99297ca6055cd8a83b41c1bc8905d0b7131d0136a57f193aa4b328a242f5becc991f33d68700dda909ac9992dc797869f84b92a05dbf56b5f947fe0556d9855a58882da37a933fea10f03ae2888633e70246f8186fc791f5d26f0496536b9a375f0e85d846ff6b31eea52db71f4030ce95d57c7bc02fdcfe9d7026d2279e153385d36bc2e6749514f4c1d03cb7a6f2de12af638c8a375181938918058758f9902da2add877ec8280c8001fc5d5ad2fb9edf80dd9925c9dd0a4f4167b35a8bc4fcac86af36efe8c1beb7564b1488bc8b87d6a00f99b57f415acd601e64333492840eb258d8b5ec183952d9806b53cf4923b30c639f7ac585d3e109f92c1c63cfb21b1514718f0c5202bae0c1007f1196dcd20f2d8b3256be7495abf0954da20b288e7e97a2028a0461e4523674932ae04dac70f0501517acc50a7e1221ac74920124e262a5a1c01064cc6c510b80609a740266ff212f2bc3dbbcf45391b1e34c5304cf7894d509d0fea84402cabe3c5694b2be937709ade264d259f586a976358c6880cc9241a3d3749c43f38b6dcac5967d6009c5b988e2dd5a3c2f12d444ad3f4f9af4fa344abef041ada8587595366a9755c216b7aa974f85f44ec4b2d1f86d1db9ad6d1b9eecaeaa36ee906b00671f4187735c61c7d50030ea99ab0eef51fce35f472b90a4143e7c9a1a6462d69d0f1e73364b34a5eebd93d86ec83e6592c2b153319bcdea357bd196d5274bfc7b06f7c9cc1193d704f6c091ffc57bf512624395dc3301b916434acb8f5c48a8edc7face2dd2cb970e009b36d1b458951f1514e2d8446011bf29f7fecbdebf02269d8a2e259cd1a1ee494935a37f432c2a2d0cccc654eeb9af77f7d7bce4eebd547e23173ad08568b31c3032693225aa06e888ef270385e33d7c2d6b87bd1d2f15ba469385a788ac0368f47d996024c2704e185898b3f9b82af1e10964b77512b4d1afd020f07353a8e5e08a13df12190a2752f5d9310d6ac981a1606542c7bebb55c4e576b06aeb87c4b118586772be38c455feb5dba6b317221d34b5141b3cd07cf21b28eaa0a8be4ccffcf28ff4fbd8773afbfbb4145cb16ebe8f36c89b390371438fec5665aaf484bc39492fb210f8288da7ffbbfa5595bc4c0ba68881077ce803522e92b24214e4a3692fc390db2cfc7952a6e3bee3d161d91ba12583a1b8d3227781520ae5e4a132f02be7418eb541b39fa0b5a823a4a82a0a352291d909fd3d3a58f9aaad2d4422e86c0a86fae5e2fcbbba3c5a8ac9976e67a7fc5d06f8b35878403c1a32a848fb3f8d3431b0313a9da93827689810d0d4458819c1bf3772b41779c7dfbc93e6e5349a159ac266b9a12764f6f944525029e354d11b68adbce5e56de2def0cf9bdb97e70fb9fd4b23d69178b7533d5f2408a4a3c5313854b6255fc36f638890725e4d468a58c87c1f16e6165c355f98fff9785568252a6570cdfc12b25fabab37630c54e89a93a7212bf0fc08f552589ebaabcab4301a2f39af01046083cf56c6a6e6b7b577d3035f484b7ebf37c681907ebece92992eeb4b70b09eda89ada0643948e4df8a15646a2653134f3c3f61b637071877e3bd95ac0a80b1348cad1a653a2acfb117a43c4c92196d59b3c1f1780fb244b5b274c1e0b02a8e85d3688b65cd401bff927c1c0d9630bca04eda5ba047c61d4c36584ebc68c24509c957e1590577c5cb46eced443e7b6c68818e338bbea21888d3ef418ad1dbf8ea5ead60828393167a7c225135ac0de9f2c61c6dfc076354053fcfb792b65b39006457a554a1a105c888a1866c0fbe13bd288e79727bc305bc9d0d9a2bef37d78aafdd45798a0c5767812f51b866a72d201d282d4c97c84f1ca755e86b06a1a166f47d160ab713123d7369df853865dcaa139af173fa5cfbd3f2484ff57b70351f68f612518c714dc28d72a525466b64b2373a1c5ff470107f198e87a8fa12aa79f931c31ef08037cb87dce522530a3bab8a21696771e0b251b8948d3f9fc1ac1f9cc7a594e23f75d590df703b32570e4c69a4c964816f659ea14b4f3e851783c686337b8d9172ae5fdaec9a015c0878ed2c6eff0b643b9957a54fe92a7e97741716aed356732bac9f82b8d13d468b1752752845cfe92a8f738074d5a9aeec4903246f64683b949786b57009553bef83a19875277a992abac687c0143b848885f279bb755fa615d9a07f03c73b53542dd1cf012e6f5ddede73d02feb379ed38a0c10ecc409e47fd8091af379bffd7e59f5a453a11eae5ad94475c81f05e5fbd44032a40c4fc141e7549b6e6866dc92cc6b7e01f60ccae2da72edf3e37321591dc45ee2727f6c4858ab13c0b0b299f61b9fcb52cf7ec9ba3568e6b7169524576abf7be0e8104e28962a24bcf4d58a1d81e3e61e572452b0d10f037b2ae1ebd03297f90a0903ac654ff0b405b575929867c006e7e9b295aae9921d7098a4820e3d049a46d33a3534ecb1fbe19c7c44ebf127d80727e209b7e05f1344998268d411ebbb008d120f052a22f09c816bda6b8d98de7f10ab2f59e0cedf032d711780f84cf87acf2cf25ff501b2740453b6f0f10681ad463302bf9eac8fc08e98174b3f8b7e2f84b10274595a952165984487c650287de8cb6c398417d8d185301b367fbe4c49a843c0b42361e5fc352ec3f8b9fdceac168813c6fe8462369a589db31d7c49c47b801922495ca23fac491a4f793aed8b2f0a48bc650000fb2cb7543a5d0f1ce25c8692dbf7a9d1c63c4efa01027e596c54e26d49fc887374b26f45c03cead9f96fe496a0735f81a9a0714c508369d21569fd73bde5687e3badaf883c1261f1c906da33cd75716f0393ecaebdbac72604ae441be885a54688203b3df00b8def7e9b0a227f8d713e8480cbda76217a8f84640f8174a4cb6d3fdb06835e3113cb5a0da11edeb8bbba79058a7a8f6e25bbf88633688bb69b509c9f82ea2b0807b55403b95faf5e216560fed4232f9eb4b4c3fe6edc92e7d9ce6bcb13848e8bebc08de6236003bf3988e126c11f9ed7173373c4416d7b7baa21f937b9b749eb32b8430cbc9dec677d882972edacca84ec7e7833d95ff7951a8b8e774a1da45b8a26b194138920c57ff37abb2936ae2f0163be010be16b1f6d71f0cb214acf41352266bc1524549d97f6dbda8e02122bbbecd0053ac770136153641cc1ca6a14e14c4495d546cc68f8292fee47a6a3dcdeb3c148cf9469355c288598b744197c35a70e15fc6db113aa623a5dab59bfd4f2ab47a2eebbf38e90ec68656b9c0d0e1b8499881174d06559d122b56d9feb1f38fbb50da34b0871d52b531d8798b894086c8e32bb68543db17cec18e36edb52e00edd370d71400e7165fee367a8351a59b442d60d7306b4d77650d7a67e12266a6bd038167d40d19f3cb5533e4217ebd09202a0b6a1637c2e1f254ceeaaa8506cdfff770e7c3c98f63e16c18939eb56021c022a364db8512b3bf026bcd2e3f583080f7d014c0d379d5179aad65fb56c7b4b0b01c1c004cc0569a61f8f1a03cc10e238eecfdc22d900ce913377411f8e757f67501f5c10ccb5a1ffae371144a4026d7b4edd92accc69f455e6438104b2f9c01048daab8c12062265d393b84797d6a1fbf182456939861e14aaa36b95a9aeeb1b2c388e2f53103a8dd9b1bc1f76e031ee97fbcf5a39e4947fd23eaab24c1001018f4070c179e0d8be40cc44527fba0c1ad34ea4edfa833a9d2856d37a69425faae7598cfeb14cf5e6cabdddcaafaadd1951588218d1221752575b04b025f2c5787157f535fc8c184140ceceb03ca6c81836084257fecccabea83619b2b006c1e3b9d6bdda5dfd573deae5b8d79f0bc61a7106c9359220970704ab4a5eceb510ef33dd040c47bf7f783aca7437cca0ef0f4d6e3c3bafeeffa160d7d805358554eef58cbb439f6129407ee042c60c0cedb341af16f22b5743184accdc6ccfcbb3028fd7fd572bc0e3af7f1cf1b00515b7c11c2945cbf983f7ed") keyctl$auto_KEYCTL_UPDATE(0x2, 0x5, 0x29, 0x80, 0x1157) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x101c40, 0x0) ppoll$auto(&(0x7f0000001140)={r2, 0x401, 0x5}, 0x9, &(0x7f0000001180)={0x1, 0x1ff}, &(0x7f00000011c0)={0x1f9}, 0x8) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/clear_refs\x00', 0x2080, 0x0) connect$auto(r4, &(0x7f0000001240)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x2}, 0x0) keyctl$auto_KEYCTL_UPDATE(0x2, 0x5, 0x8, 0x5, 0x8) r5 = open_tree$auto(r0, &(0x7f0000001280)='./file0\x00', 0x3) keyctl$auto_KEYCTL_UPDATE(0x2, 0x1, 0xffff0000, 0x0, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r5, 0xfffffffffffffff8, 0xa8, 0x3) keyctl$auto_KEYCTL_UPDATE(0x2, 0x10000, 0x6, 0x6, 0x7) read$auto(r3, &(0x7f00000012c0)='/proc/self/clear_refs\x00', 0x101) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001300)="7da1202f0b5ef32b2ded37b0e3cfc19570e4cc430cd0fd") r6 = semctl$auto_GETPID(0x401, 0x400, 0xb, 0x2) r7 = getpgid(0x0) r8 = getsid$auto(0xffffffffffffffff) r9 = syz_clone3(&(0x7f00000014c0)={0x23180100, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0), {0x32}, &(0x7f0000001400)=""/63, 0x3f, &(0x7f0000001440)=""/4, &(0x7f0000001480)=[r6, r7, r8], 0x3, {r1}}, 0x58) bind$auto(r1, &(0x7f0000001540)=@sco={0x1f, @none}, 0x70) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp\x00', 0x0, 0x0) read$auto_u32_array_fops_file(r5, &(0x7f00000015c0)=""/202, 0xca) r10 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r3, 0x8004b706, &(0x7f00000016c0)=0x1) rt_tgsigqueueinfo$auto_SIGCONT(r7, r9, 0x12, &(0x7f0000001780)={@siginfo_0_0={0x3, 0x5e, 0x9, @_sigsys={&(0x7f0000001700)="2652921b62cf828e6ba48f0b000000000000006e4d151f7b7f8801c60e0f07e82cf4b06c7730cf4b3256f1115714f73273f47458fa169eff1b616d27c018dd00b55f4de8b700000000000000", 0xa21, 0x7}}}) socket(0x9, 0x800, 0x10001) r11 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000001800), 0x6000, 0x0) ioctl$auto_TIOCSSERIAL(r10, 0x541e, &(0x7f0000001840)="af1315f14b6854d44a86a8e4c963469f207a3228df8705f1dce6b9293273c5df89e890edf139920635f45abd319b7bac555ea4e9cfb32de6e7d949493024b3c1dc60644e1dfe9037f5036e9f96b966cd9cfb2dc36e43ffc17398651d936d81e5f21bbe10d61d040b60ceb50061f14342fa8e8e27e8e5c73ccb4b78f5884f4b40162ed2951451ef132ce769b98798e94ecdbff6ea56bfc0f22c6c642b31d104fa") ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000001900)={r11, 0x0, 0xfffffffffffffffc, 0x7f, 0xffff, 0x2}) sendmsg$auto_SEG6_CMD_DUMPHMAC(r12, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000001c40)=ANY=[@ANYBLOB="32d9d5ffce783b099078574d143f5c55188b7327a6e13ea8100245e9894ddf50fb496522945c027cd993638fa0d2060c58a2ae855e7865d08ec87da29935d758008b28381594aa4cd512d2ae40474525c115cb66bbb8f607b58e34e4e9a122daaf38fabb0cdb26ea7dfc85bf4cd9fd004eaf5f6a4970c1713fffac340c4675e0fdb85166728912d3799cc1bf1490dd26bcb8e47d85d3dadc94366ada984ddfd00095325355", @ANYRES16=0x0, @ANYBLOB="000101000000fbdbdf2502000000a20007800a727d1a0c69baaa2f779635a62b01b421072d237b2c351ff7e235583951a25b39ac592194ebc3afda1be9b2f64365803d43bed3ba7ed9502f0d81718aa3205a710a79dddb82e5598d706768dd4fa18c35f3836fdb242a18147c0d7356c1ed302b413fc183915ba909b4053b59219dd59386806073a3fcfd8567a20a082742735b33d9a7d52b62fd9bb92d05ab8a4415c4044d8b94620800c700", @ANYRES32=r6, @ANYBLOB="0000080002008800000008000200030000000800020002000000b800040039d09f3d539eae4d6278cd05a6a68ffdd0edc65c87adf00245df302192e1197705631a3d891fc5bd5675c87b925dcb1626036a772d84163e3638185622507eea11f4a900d6ce4b94f314b99d52de3f2f8c6dabd2a1bb8652be902183dddc27bcdfdcb31ba7d3763a6611b121eaf91457b1b6ee0827902aa89dd164c5bab4b98008103cc0b7b99f3d64837109749fee0f8a373f0a5fe56247a1489614f4a48561a40c8ed2e93c0a2c360856fec5f94640fd8b8dea"], 0x188}, 0x1, 0x0, 0x0, 0xc800}, 0x810) utimes$auto(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x4, 0xe1}) 2m31.847170181s ago: executing program 1 (id=2415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000240)="ca2aa92f10", 0x5) nanosleep$auto(0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000001380)={0x38c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@typed={0x6, 0xcf, 0x0, 0x0, @str='{\x00'}, @nested={0x51, 0x11e, 0x0, 0x1, [@typed={0x14, 0x47, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @typed={0x8, 0x116, 0x0, 0x0, @uid}, @typed={0x8, 0xe0, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="5a233508cbfef89eaebc46573b1fded02cf29db989ce0367a103976fbeb8ae292c"]}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r1}]}, @TIPC_NLA_NAME_TABLE={0x1d6, 0x8, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x29, 0x69, 0x0, 0x1, [@typed={0xc, 0x141, 0x0, 0x0, @u64=0x80000000}, @generic="47ecd710c86c262e5fe10382f0cb64ec163aa66f3d9c4949b1"]}, @nested={0xc8, 0x12d, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x91}, @generic="b3c26ea279ef97ce55c7b5be92cdb710d89ffad9ca780e83dbf2a198c41e7b5a604b549e47bcdd95333f6858dce38841a3e7a04bfb1b31aa5667ffd447d732e3d3a0c4e540d7ad419b500ba67fd6a508413d23663798ddce6f1437e8b7bb5a8637a05e9c98dd193f2a898198410244d25fe46ded45fe1611eabb1eed53e1d4d6181746a78e35862aa477ecd2431bbc33f98a4061b0361b64da8c7e5ab553ffc99a7c69587b0730f72c87fca6d87fea83", @nested={0x4, 0x14f}, @nested={0x4, 0x4a}]}, @typed={0xd, 0x113, 0x0, 0x0, @str='/dev/dsp\x00'}, @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x3}, @generic="3bfa8204dd2f8a38dcc685f3b7b094882ddd9e9f85769746f76e238dda9cb6d129743edad2d948a8ab267e0b61af0ac835d42714dd6a238f077e575a3be9fd7c8a38ab2f51d2efdf8e66ea33923019da4cebae018577b1e2611fdc83b13bfde844d46c4514e4572446900fb8d1a7b73c53997a6a5b9c06554f3aaaf21d92d0d898fd2d933c07d1a0b677a661ba9d0ab47fb9008b57396532d0dad8d1c0c3f7d0250fc35fe5b42b8252d1971601b6ae53626746effb11", @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@local}]}, @TIPC_NLA_UNSPEC={0xb3, 0x0, "b0b7260ec859799960614deeea368597059c3cef7b86cb56cb09e758ab7aa9de8ae67b239640d471831b12f3667bcd903ced6be8559971426c1947e76e4a89d39d557efe8e55ac728e396b68bb81f1b2854e78b5f8092af2100b728892c6513276a266f9a722898ee1f1e1650831ba4b2b9bf2e2f877eab1377270715d8e7cf1536d74dc9e626b00b36401bc255996d52037c6a1ca5c78b3fc3555fed96829d17a9a2c2e02a8de7d63278420078287"}, @TIPC_NLA_UNSPEC={0x83, 0x0, "86664a090aaa53095575d1cd5dbe86e4be2b94f613578ddf91a6185d930ddaa022f5e69708fba373f885614e01852e38bf983ea757f396ffaa996c59001332660d5c2e2a0870872d1e78fb42c58d6b4bbe1e6870bd088a98c6e5d18dc9f751974af2bb9ca434add25823cb951bad26aa9a741f37a0dfff6ff1213814101020"}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4000}, 0x48002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyc2/power/runtime_active_time\x00', 0x0, 0x0) 2m30.411638836s ago: executing program 1 (id=2418): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = fanotify_init$auto(0x401, 0x1) fchown$auto(r0, 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, &(0x7f0000000000)="d31029adbfbb574c1ccbbae295772059acec418b14da4adc2ec2eb5bd01c2d20bc981312d6ddbf3e326028d1dada78e7a535d6ebc271159b4151fdbceb68252d6ebc1c441c7a63a1b1a9b5468a6f084955b876133aeaaffc260dd3562690635c68e15e0ecfbe51d5951ebe4d4d68c1a2dc1c4fe354124269d44f6a2f0391569fdfbe7cb8bc422451467af7cd7681acb5b7befe9a5588cc0ba834d915") r1 = socket(0x22, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r0) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000140)={"73c71b962f4b52dc82fb10d549a34d239f5bea6e639de12a89104b15d453e160", 0x2, 0x7, 0x5, 0x10, 0x9, 0x0}) shmctl$auto_SHM_STAT(0xea4, 0xd, &(0x7f0000000300)={{0x8, 0x0, 0xee01, 0xd59, 0x1, 0x2, 0x594}, 0x9, 0xc, 0x4000000, 0x3, @raw=0x7, @inferred, 0x2, 0x0, &(0x7f00000001c0)="512151748b993b", &(0x7f0000000200)="f4e0259919f5a461c9e4ec1f5997cba68da7eb5733f572239f58b4c0e463912fcbeb0995209adba31c85c4b846f363b79d0fcdf769bb57532782a71ac1a096d203cbdaff0fdafc7dec3cd980ef0751cb921997616cf4c266895a7c5a41a9ba19fc3d657153fe1a4f539588cc096d09e45b2bf460eb2af9c4cc79741e95729f4712717eba39b477b5c33b633a5b2433c6ebf277851bf6c70a26284dc68f8550cf7e310169f5252cbff51ea829d935f0b0fff6fc19312fd2749f6c38fc2f48e3dd5bd44fb659906aa63bf42715b080791eabb05f1655a6308980"}) r6 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000380)=0x8) statx$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xffffffca, 0x7, &(0x7f0000000400)={0x0, 0x5, 0x4, 0xef58, 0xee01, 0xee00, 0x1, 0x9, 0x4, 0x6, 0x3, 0x96, {0x800, 0x5}, {0x1ff, 0x3}, {0x9}, {0x10001, 0x5}, 0x1, 0x5, 0x8, 0x2, 0xfffffffffffffffb, 0x7, 0x5, 0x9, 0xd, 0x4, 0x4d3d93ee, 0x101, [0x9, 0x7, 0x0, 0x9, 0x5, 0x7, 0x5, 0x1ff, 0x4]}) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000003240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f0000000500)={0x2ccc, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8d9}, @IPVS_CMD_ATTR_DEST={0x442, 0x2, 0x0, 0x1, [@nested={0x15d, 0xaa, 0x0, 0x1, [@generic="e874ee7717e93acf7976c1d6bab448a46ba2ba82436106be7d01cd4acd3fcb1eb172b3d36b880422604bae3943805d1b2dc82c41a103e7c4e052c18d74ebf35bc678ed4cfe3ac9f894f5e1b776e662b99160c96a02775fcd6d0507f8fc528e4b026ce8324238c3c9d1abbf66b241716d495f8248b82efb859575b3f659c8df43c574c76cbad2783346c5741789373905a6a044bc4e602de300ce15edf3fdb01500dbcf718f3fb63c9b476caa47ab06cdb96023e6c8f81a1a691f00f7dc700b3690148462", @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@broadcast}, @generic="5312ba7f01fad636f9a1641144ac325c2b898a56c89b6374425b57533a99accaa1360b2107f4ffffc4243ccf17d872f211c3cdb890fba464cda9d8c9b4d9fe2305df71610202b788988be0002699a8207262d8fa57747257b74cf4e39ef29b36a142f47687a6a82d034ba13e8e9ae4a9e220d611fcf3ab23fb84a4d3acbcd32896abb199b68242bc17e7d5049a"]}, @nested={0xe8, 0x85, 0x0, 0x1, [@typed={0xbd, 0xd2, 0x0, 0x0, @binary="7d79f8295b3ac36b1f2c05b7cf6584e9de1a0d950ca345096b579fbea49a7cbdd40462f294d3224a4bdb845f83eeaf88febedb46fc9328d49cd772f06ab3e13d7328046c991904c74ae933c3c49872ad60a5d928494c95e61f707ac4808811fb9419b4b067ea8172e161de1162e93178cd4f6297d8d5bdb3f499be75c600d9f585cb2cb9132219d40bf7dbd11be7b102ef7d76acb47be33a6a6c613ffdbaf7a6cdc5ad35422d6a4c7fe6fd31665dee75b33eaf9c81cbee5a23"}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x7fffffffffffffff}, @typed={0x8, 0x64, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x118}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x100}]}, @typed={0xc, 0x109, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x140}, @generic="4f2273d608bfa433a376ab0e1ee86b1fdb8b7111aa6c7b7bf393f743d659cf81122bd8ab9338e77e520145415a8ecc399f23871882a69b60c21615789b64508ad686", @nested={0x191, 0x2a, 0x0, 0x1, [@generic="38d701bf28e78e6b1ac19a1402cc6c0e7e6d89248719cb7ef1c44325f8eaca1ad02ed65501fc6d3f74514420dcf06f8a74a83de5dc320656fcbd13e490be03964e06742821296f6dc4f6a72a1bf9bf2befe1ef197039a5236af409e64b5f961607294d06250942ba44b12ab1e1e782c9b5dda357cc5613195e441a8b9f938cc62f9290d592e24ababbb6ed75b7f9fcc2f62a7d0e1b25797c913b6830e3493b7454d81eafca435da30bdb986e771bf89386fd013e80d1f2121be824bbd1248bf0", @typed={0x8, 0x7, 0x0, 0x0, @pid=r4}, @generic="1e0ba6894542724c55208d047fca381858c7e25e4c51d73b7599a93fd2224c7efb99d1ccc5cbc3bdedda1589305062288dfc2d204a3fe0de592d0a7736d8a45dd353daa6066367ae008d1825444c4a57b853a4ef40ebaa0e19269526326536a892b1eff6a5a3b87f0ff3d26d51dfff617eab53dc9f2bd9afe03fe3ea1a8dd2cb9fdbcc9d5cc2abce37cb55ed981882347317876508ee4a5b7def89483dabfcc931b8f00fc5cacf8c60d425fb6634f7e691d3dbb7e9599db984", @nested={0x4, 0x50}, @typed={0x8, 0xca, 0x0, 0x0, @uid=0xee01}]}, @typed={0x8, 0x107, 0x0, 0x0, @uid=r5}]}, @IPVS_CMD_ATTR_DEST={0x14a5, 0x2, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @str=')(!\x00'}, @nested={0x2ad, 0x113, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x18}, @generic="cda56494486842e7599eb557917e11b721a477255727ba1e80e124b0c8640080752b30d55136e77e59503f178087526f00cc1f32bca6b93e191edc", @generic="2d54c83222d38ba3b934c3e105857f72ad2588f44ffe61b2cb295a4377cd50bec04b4f28525469d4c78743559f0700961ed001feb748651d3478fb7d3dafb2cf7ed0ac4d6dbb4aa6a122f6f1ae0fb8eea4047d10d31cf77f6526b8067347f0e589e69c61184c0d0291458ae4fcd3ba0d0e3c884cf4560205411d8e93e9e1f59c399b58952e38c213c3eb54c29689c44c0a8a5349502680fa8d4a", @typed={0x4, 0xfd}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r0}, @typed={0xd3, 0x12d, 0x0, 0x0, @binary="66960f1c83220206c75b48a017f3e7d51f3176d9ec8aef0a5e6c02f8c574e28196a7e208192f0b3fd256af4a0370d9745551caef47da49483e3d5e711752f9fda7b77766b218dcde72d39ce3cf2c5c20b43bb8f3267f5d5148a6becb72d564c398c246681d091e50ddeb918ef154934f1a02526343d045737f2f1ff708e8ea621b9518b559e09a0256f997f15c8997cceab3de0f48c1f1758c797a1925f88860a904340822782af3327a91dc6285d1f90de0d386c1794709c647362fdf40d5287bc47971f8cd4b43b6e1af717bed09"}, @generic="4082e0736abf63f93cba8a4a456958afcc02ea2144837e9bc81cb15485feba78d2a7b0359ce3f165fda81f9eb3000f24937f8a8dbf9e8d50d6401aa5897a1551390e62c8729ec6e74664a9ba8690dcfff1904fd885e6765bce4f989035e9e325ad2863e8989bfc121ed6bf299ae8aa3f0438c91cc9b3c30d226af5aadda74f64e0a45746ade6a9190af90284498420350ed8fb069f373cdd2af6093abe196e223b8a00758eb4f58e71c9bf80f054884bc22a96b397afa74978e8b6824e52be6e98fab9de5565321eb152caefbd3f82c87d84d27b11f8edc74b817dafa866e6d34cd36e6affcb509d"]}, @typed={0xd1, 0x8, 0x0, 0x0, @binary="4db042d4dfc42997a571c8c88066937eef4b99568745e23ecf0a37748e8322ae07febacb5d663de8bed685085d6835690882657ecaa193004cbd5d8cad0857f0ffa186f413f4b50650412112746fb53ac6ec2ed648dd4c8ed93d8ed0f85236ead17199adf9e1068b6a49a69cd626d7cbb6b14d85e0f11c51e49bee9d31297c1f86860c29a8e4184ba0499b7c41a78eec556af1d08bbafa2b7267e66cb28f4dfd9d01df1833fb2270ab241936680998fdb1bfac8cb11dc7329d2e7b5d5624d8b76568e61f104adf9b63940a69d3"}, @typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@local}, @generic="355e7bd10605a8b0650125cecd7839dd6bc22c0e1a3ff61083f0f29db05afb8dbca431feeefc9fc68d7893bc3cccc8c450b537125d6af8", @generic="731fc11857f0088718840a66542bffc080c3ed099c48a7905e63d0926f5f61e8c9b782ef4497eed97c735f9e27557993c623d3e3373731d5c902b98d66aed39c", @nested={0x1008, 0xce, 0x0, 0x1, [@generic="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", @nested={0x4, 0x54}]}, @generic="2d7a1406efa67015c750368c65ecf9cb5987d5ca1a3e0e4005f069c5f46dfc5087c7537e40cf169ad6f45cad83723103a15f2a18e78e6e5dfb5bb7147ded17c464469d0ec8e553616eba2c69e84401187e618513f61bac49fcc95a3636d13a814e9b14ed45746f31b842c08431d126380c033cf6605b3610a66c08ccd2b7cbc97d2ef5aac6c146799a6d31606af8"]}, @IPVS_CMD_ATTR_SERVICE={0x1bf, 0x1, 0x0, 0x1, [@generic="80069903bb053cbb3c800bcc32aba85376ae13d6bb78760b8a4e2b942de3102d4b18f1902432d9c87a9431b42f8aab13d57c5041f26f503a6faf5ae94b1164d8b693d8da8037089d93aa272ff0a1ff0c76fb64ccdb92143c5dca89b535c0c866566a63a924eab258e082f4c9c3d1e45932c26511a4afce040a4172f14082ad31dc98495fd5013e86d952aa38d5f943876704f8cc0cb68e4d1f3a4ca0f76126cac0155cd2ea2c47b32b163d", @nested={0x10f, 0x40, 0x0, 0x1, [@nested={0x4, 0x3b}, @nested={0x4, 0xc8}, @nested={0x4, 0xc7}, @typed={0xc, 0x79, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0xe8, 0x0, 0x0, @uid=r7}, @generic="3ebd36467af937127f67c19fa6b796c2dde6c80d430400cfa0438a68fc9011e79a1992591c540101153496050b3d06608833e50e01f7a9be29a56fb87c6bf25443d8be74f2021ec7b2b07781a1ec3c563ebf5eb405332256b143203e01d0f433cd656edb96849539fb858cad618c507d71e15f2e0bea4d85711e43a3b1c7ed86068fcef6cc8f06b6818f2cdde3146893f32ffcecdd41e616bb76a724a26e05eae031bbdda83111898d27db74dffcdd9fef68eef87f20d05026fb8b61d7eb867dce4ab9fde9a36607ec1e00f7106c566ba09f650f4b045a8e678d2947753d9d73b9c09a7eab760eeb3ecc84"]}]}, @IPVS_CMD_ATTR_DAEMON={0x1201, 0x3, 0x0, 0x1, [@generic="f9d646673bca083be6de5779731a55571803437640d26df730a4c491686f1b743dbf7a845f8dac5d45e3e117326904a42bcb90b5a05c5329d7c512b056bcafe7c3c3921d30ca00e1e4795b21f34af1c1658a697064d4707ab0e432017dec91c773448361ed6923f5ccd39784afe57405bdcb0a26e403cb77390a24c756aaf5082a6cd4a6d9b537d4fcbefd3945490fe3c092866f6e45adc109adc61afcbd1e78956c3239d6e1e46818a6a40c2042c9", @generic="7db7b7f3e70515324cb98b481186f6866ece809bf2a5a3f581ef7d2e7f434b75f95c7bf2e36519bf920604cd88f4a4f09ac6460f23e823055bc04bfa4c0f492221b5741fd654938003023ae87e07b81ed421874eda442f5cc187e7fd4abc007912654cb7014c9a803e6b17061c848ca32b600676203a0425e2a3eccbca9d65ce84f51e0b16e3b93bf5a98de8af898b8decbdff7133fe8ced376f6b34d12cfb68994b81bde2db2f1c798436c7b5c3274281dc085ac68e66efa26847f8e6c9daf3ab44019320b9b7a9b96092f2ea74d55e0f948fe193dd5ed323b72173fef70940a16bace4f33e3585f1e3484741b9a1ea37f527eab09f164c", @generic="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", @nested={0x14, 0xea, 0x0, 0x1, [@typed={0x4, 0xe4}, @typed={0xc, 0xc7, 0x0, 0x0, @u64=0x1}]}, @nested={0x8, 0x76, 0x0, 0x1, [@typed={0x4, 0x137, 0x0, 0x0, @str}]}, @generic="f70e414b830d40c9130e3cbaabd7ace67c4875e7e66dc4ef8cf779386bf8d86e4fd4d09a4d0e904bd5d726d8315d68598c5d75399031487feae0"]}]}, 0x2ccc}, 0x1, 0x0, 0x0, 0x10000}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r8 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x121342, 0x1c9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r9 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r9, 0x0, 0x1) write$auto(r8, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r10, 0x4b6a, 0x1) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/stride\x00', 0x40740, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r12, &(0x7f0000003480)=""/247, 0xf7) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) 2m29.820141733s ago: executing program 1 (id=2419): socket$nl_generic(0x10, 0x3, 0x10) gettid() msgctl$auto(0x2f, 0x1, &(0x7f0000000080)={{0x67, 0xee01, 0xffffffffffffffff, 0x100, 0x7, 0x6}, &(0x7f0000000000)=0x4e, &(0x7f0000000040)=0x4, 0x8000000000000000, 0x609, 0x10001, 0x80, 0x3, 0x55d, 0xc, 0x0, @raw=0xfffffff7, @raw}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8009, 0x400000072, 0x8b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x2, 0x1, 0x201, 0x1, 0x8, 0x7181, 0x3ffde, 0x7, 0x3, 0xc, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0xb3, 0xffffffffffffffff, 0x9, 0x10007, 0x7c, 0x80000002a0, 0xfffffffd, 0xa, 0x1, 0x202, 0x9, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000200)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4000000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000004000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/attr/prev\x00', 0x860800, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5a8, r7, 0x50c, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x7}, @NL80211_ATTR_PMKID={0xa1, 0x55, "ecd1b85e02ceb792943dba875f156a21d7a96ec598e0bd2a94c8fe7822b6c5af4bb0bd6a17bc33bbcd61db4babf46abe389cead0021a8f20acf556c703bf77ec2a8ceac10a677508bead173a185a8abd8280b8f16a6ef2de6f662d3cb0ced0de0e5e793c22b5a1537b9ba8ec959ec27aca82d242c536fce20f44423d4555dd12573693751df7c08c13e40505c4725d2fedf86b37a35a3836555ea423ee"}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x200}, @NL80211_ATTR_TX_RATES={0x3bb, 0x5a, 0x0, 0x1, [@typed={0x1f, 0x92, 0x0, 0x0, @str='/proc/thread-self/fail-nth\x00'}, @nested={0x2f0, 0xc5, 0x0, 0x1, [@generic="263df1fdd48feb6c5ee69291a99d4a77c84a721f5a6bc2ce568303fb6369ea3d90b6789d2b6aa6abf86f771dc0a5b1525b1dbfeabc95a885c44254ea85bb578667fa23eacf428527d4a3261874ea1421da5eb236342920e5a8799b103629", @typed={0x4, 0x58}, @generic="51cede18b9978ace059034d15ebf7d4b51cf2b630b5f3b74b3fa5ea44f239e5f7b3e48f8b66465f7cbe5a4958535e6dc44217d0e20dabd9da98c8599c0ff7aa4c0034c5fbdb92f7f9d0a8e5075ec62a30516955ad0e524e560d331d69fa183702342066f143f315ec6e9f5ec1b2ad3cd99bdaeec796da2df6712f7b0266e86dc0f7ceb1a4045653ed31d0198a88ac91e07155531691ee3b7bb690cb8441ee163eab04e2cc28857a30140cac8fefbef9bb7cafade4cfb55", @typed={0x4, 0x88}, @generic="a4f7dc81e482acb0102dee1b9f84a69287ecc275ef9baa28bffd8ed61209c0b8ad9f94c25b9ed87f359b12e990c499c430511f0767d48433c53f9c91f611137c2227a1b0efd9e8cb46060143064f15873909c7001cfce1efc755ef6317dd2d40f9a227fbc9612f9011ffe798e0e67214acca62106237c653c39443a3282dd50af76cac60a1b31aaaeae108c7cbe109f2d5134f71a63e41ca3522dde696508c738d18b976bead4dfa", @generic="4673374532da62d47e4c3e85f792d8ecac0072304505954f808395beb002085fefe0553d03e7f8a3838c1f3b75bcae6b8c754e74884900247a28c8e09c420ea52ee4d2a710ed8d6e8fe4de79c5350807ef40b1500aa2e92bf7e1a68d2f59f16cde96da235b41", @generic="44a4facbc2f87d30b910d0d2c4c1c8209b2c8ca8fc4fe9fb35f89b51624bea0b8ba511f7d9a05ee13f13c894279a3b5d981e4c225e2fe647896688303cc7d9f30b0d98d288dbaf860749a4ff0df5604e68171fccbf0adb1737ba0346b4e4b748d6271366c53a20cd415a82834ad5a2dc1321a4e00e6408c807790edd444cab4618f281f9c2a3799396d0723ec333d3cdbdf70e6c2e4081195b4a4beb18dc3b58d639eb96f3d726cb3d3e1deac75f97bb5a90600206b2b2aa4aa9feb5de", @nested={0x4, 0x79}]}, @generic="9136d0cf8d948f71d521a55ee9a2a8ea4c0ae60b564ed78dabbb9cfd08b8415c7d9c27b2ae76aa", @typed={0x4, 0x119}, @typed={0x8, 0xf4, 0x0, 0x0, @u32=0x9}, @generic="79dc8b09dfa98485dcdad5bed7409e3739661a6146d9a742700bd5269bb3daec0bdfe22f0103c227017bfb40b7d9662f0f2c281849bd76b7bea80076f74e0baedb2becd06a4fe9133fdfc94de1ed20f773b1e649a712e7aea64801d823b092db1eb3d46add0ab197546920aaf6ffd91af53104e5"]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfffffffc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x40805}, 0x4000000) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/178, 0xb2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x0, 0x0, 0x0, 0x9}, 0x7fff}, 0x3, 0x0) 2m14.681510252s ago: executing program 32 (id=2419): socket$nl_generic(0x10, 0x3, 0x10) gettid() msgctl$auto(0x2f, 0x1, &(0x7f0000000080)={{0x67, 0xee01, 0xffffffffffffffff, 0x100, 0x7, 0x6}, &(0x7f0000000000)=0x4e, &(0x7f0000000040)=0x4, 0x8000000000000000, 0x609, 0x10001, 0x80, 0x3, 0x55d, 0xc, 0x0, @raw=0xfffffff7, @raw}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8009, 0x400000072, 0x8b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x2, 0x1, 0x201, 0x1, 0x8, 0x7181, 0x3ffde, 0x7, 0x3, 0xc, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0xb3, 0xffffffffffffffff, 0x9, 0x10007, 0x7c, 0x80000002a0, 0xfffffffd, 0xa, 0x1, 0x202, 0x9, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000200)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4000000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000004000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/attr/prev\x00', 0x860800, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5a8, r7, 0x50c, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x7}, @NL80211_ATTR_PMKID={0xa1, 0x55, "ecd1b85e02ceb792943dba875f156a21d7a96ec598e0bd2a94c8fe7822b6c5af4bb0bd6a17bc33bbcd61db4babf46abe389cead0021a8f20acf556c703bf77ec2a8ceac10a677508bead173a185a8abd8280b8f16a6ef2de6f662d3cb0ced0de0e5e793c22b5a1537b9ba8ec959ec27aca82d242c536fce20f44423d4555dd12573693751df7c08c13e40505c4725d2fedf86b37a35a3836555ea423ee"}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x200}, @NL80211_ATTR_TX_RATES={0x3bb, 0x5a, 0x0, 0x1, [@typed={0x1f, 0x92, 0x0, 0x0, @str='/proc/thread-self/fail-nth\x00'}, @nested={0x2f0, 0xc5, 0x0, 0x1, [@generic="263df1fdd48feb6c5ee69291a99d4a77c84a721f5a6bc2ce568303fb6369ea3d90b6789d2b6aa6abf86f771dc0a5b1525b1dbfeabc95a885c44254ea85bb578667fa23eacf428527d4a3261874ea1421da5eb236342920e5a8799b103629", @typed={0x4, 0x58}, @generic="51cede18b9978ace059034d15ebf7d4b51cf2b630b5f3b74b3fa5ea44f239e5f7b3e48f8b66465f7cbe5a4958535e6dc44217d0e20dabd9da98c8599c0ff7aa4c0034c5fbdb92f7f9d0a8e5075ec62a30516955ad0e524e560d331d69fa183702342066f143f315ec6e9f5ec1b2ad3cd99bdaeec796da2df6712f7b0266e86dc0f7ceb1a4045653ed31d0198a88ac91e07155531691ee3b7bb690cb8441ee163eab04e2cc28857a30140cac8fefbef9bb7cafade4cfb55", @typed={0x4, 0x88}, @generic="a4f7dc81e482acb0102dee1b9f84a69287ecc275ef9baa28bffd8ed61209c0b8ad9f94c25b9ed87f359b12e990c499c430511f0767d48433c53f9c91f611137c2227a1b0efd9e8cb46060143064f15873909c7001cfce1efc755ef6317dd2d40f9a227fbc9612f9011ffe798e0e67214acca62106237c653c39443a3282dd50af76cac60a1b31aaaeae108c7cbe109f2d5134f71a63e41ca3522dde696508c738d18b976bead4dfa", @generic="4673374532da62d47e4c3e85f792d8ecac0072304505954f808395beb002085fefe0553d03e7f8a3838c1f3b75bcae6b8c754e74884900247a28c8e09c420ea52ee4d2a710ed8d6e8fe4de79c5350807ef40b1500aa2e92bf7e1a68d2f59f16cde96da235b41", @generic="44a4facbc2f87d30b910d0d2c4c1c8209b2c8ca8fc4fe9fb35f89b51624bea0b8ba511f7d9a05ee13f13c894279a3b5d981e4c225e2fe647896688303cc7d9f30b0d98d288dbaf860749a4ff0df5604e68171fccbf0adb1737ba0346b4e4b748d6271366c53a20cd415a82834ad5a2dc1321a4e00e6408c807790edd444cab4618f281f9c2a3799396d0723ec333d3cdbdf70e6c2e4081195b4a4beb18dc3b58d639eb96f3d726cb3d3e1deac75f97bb5a90600206b2b2aa4aa9feb5de", @nested={0x4, 0x79}]}, @generic="9136d0cf8d948f71d521a55ee9a2a8ea4c0ae60b564ed78dabbb9cfd08b8415c7d9c27b2ae76aa", @typed={0x4, 0x119}, @typed={0x8, 0xf4, 0x0, 0x0, @u32=0x9}, @generic="79dc8b09dfa98485dcdad5bed7409e3739661a6146d9a742700bd5269bb3daec0bdfe22f0103c227017bfb40b7d9662f0f2c281849bd76b7bea80076f74e0baedb2becd06a4fe9133fdfc94de1ed20f773b1e649a712e7aea64801d823b092db1eb3d46add0ab197546920aaf6ffd91af53104e5"]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfffffffc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x40805}, 0x4000000) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/178, 0xb2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x0, 0x0, 0x0, 0x9}, 0x7fff}, 0x3, 0x0) 6.868288626s ago: executing program 0 (id=2853): mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) fsopen$auto(0x0, 0x1) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x7, 0x0, 0x4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r1, 0x4143, 0x0) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x100002) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(0x3, &(0x7f0000000100)=@phonet={0x23, 0x3, 0x2, 0x9}, 0x6a) sendto$auto(r2, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) madvise$auto(0xfffffffffffffffd, 0x7fffffefffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 6.73398089s ago: executing program 0 (id=2854): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x4, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x3}]}, 0x34}}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x40000, 0x8000000000000000, 0x15) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000000000) ioperm$auto(0x6, 0x6, 0xfffffffd) vmsplice$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) io_uring_setup$auto(0x401, 0x0) 5.652581619s ago: executing program 0 (id=2855): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000240)="ca2aa9", 0x3) nanosleep$auto(0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x48002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyc2/power/runtime_active_time\x00', 0x0, 0x0) 5.087804838s ago: executing program 3 (id=2856): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_IMADDTIMER(r2, 0x80044940, &(0x7f0000000140)) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x10, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) ioctl$auto_TIOCSWINSZ(r3, 0x5414, &(0x7f0000000840)="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") r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0xa821, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) signalfd4$auto(r4, &(0x7f0000000180)={0x1}, 0x8000, 0x8) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121482, 0x0) pwrite64$auto(r6, &(0x7f0000000200)='/proc\'sis/ne4/ipv4/tcp^\xff\xf7\x00\x00', 0x4bf, 0x200) ioctl$auto_SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302, 0x0) socket(0x23, 0x2, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00045db988f760da2bbd7000ffdb00"/27], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40440d1) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4b", 0x3a) fchdir$auto(r0) open(&(0x7f0000000080)='./cgroup\x00', 0x501540, 0xc0) exit$auto(0x7) creat$auto(&(0x7f0000000000)='./cgroup\x00', 0x721e) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 4.622977348s ago: executing program 0 (id=2857): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000240)="ca2aa9", 0x3) nanosleep$auto(0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x48002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyc2/power/runtime_active_time\x00', 0x0, 0x0) 3.325016644s ago: executing program 3 (id=2858): sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x20081, 0x0) write$auto(r0, &(0x7f0000000000)='/dev/\xe9nput/event0\x00', 0x7fe) (fail_nth: 21) 3.244710477s ago: executing program 0 (id=2859): mmap$auto(0x0, 0x2020009, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000340)="bbc69f44294e96f44775c8ae2f799d5b6cd3299545567a43016b6aec10e08a4fbbdbbca984cc42f44cdd54990480d823053a2bcc30812de2cd2ad59a53569f780f1c90346687a38c9eeb864081f5aa5c16157d43f44f0da3d10bf57668fd3b292a2de512328f6200e4d3f59a1c09b3e471cc30600ae9a8f90cfca13648120bd3b503b9d275909b66ef32e4d61999fff4283c5e0199d8de3bea6b30e65c127e57926f31921272f38c5256594516799461c04b4960d6c23715f28db38250d479", 0x3}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex_requeue$auto(&(0x7f0000000080)={0x400, 0x39c3c00000000}, 0x80800001, 0xb, 0xc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x109042, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x149400, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x104, 0x80000001, 0x7, 0x1, 0x3, 0x15f4da0a, 0x6, 0x3, 0x62, 0x1, 0x7, 0x6d3f, 0x2, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) futex_requeue$auto(&(0x7f00000000c0)={0x5, 0x4, 0x9}, 0x3, 0x40, 0x496) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)={0x7, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x63f) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) init_module$auto(0x0, 0xffff9, 0x0) pidfd_open$auto(0x1, 0x0) 2.90601407s ago: executing program 3 (id=2860): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) (async) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x6, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) listen$auto(r2, 0x81) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) writev$auto(r0, &(0x7f0000000040)={&(0x7f0000000180)="22828733a103750313ecfce2df66464556951a26d68fc7111571bba11321f2c9abdeeecab369f0bcf5e5246d18b55573c5a101f056030000001d8a6be37754dd5414be13e8b7773df93d9a00", 0x7114}, 0x8) 2.33504918s ago: executing program 3 (id=2861): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="1200", @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0xc885}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x61, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) fsopen$auto(0x0, 0x1) socket(0x29, 0x80000, 0x94) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto(0x3, 0x5401, 0x1) 600.308289ms ago: executing program 0 (id=2862): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x5, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) fstat$auto(r1, 0x0) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db6263c64300000528bd7000fcdbdf2500000000080001000a0000000600060006000000060006000a000000080007", @ANYRES32=r1, @ANYBLOB="14000c00ff010000000000000000000000000001080001000500000014000c0020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, &(0x7f00000003c0)='\x00*\xbc\xf5\'\xde\xf1\xd2`{\x87e\xf1\x9e\xba\x10X\xe3r\x82\x81e\xaal\x8f\xcf\xed~0c\xeb\xd5|\xffB\xf1\xc0?@\x16\xed\x8a\xfbm\xbf\x00\x99\xb1\xd4:s]\xccs\xc5\xe6\x8c\x9b\x85\xdc\xd2\tIP\x90L\x9bo\xe1}u\t\xe1.C\f\xe5\x1cb\xd0|\x8f\xb1LB\xfa\xcf>N\xac\xe9\xf6\x9e\x83p\xff\xe8\x8d\xbf\xe6>\xd5sG\x8c\xdb\xe6J@\x93?z\xb36\xb8H\xd2\xc7J\x8d\x9d5\xdc\x03xS\xe4\xfc,\x11<\xb3a\xbe\x8d1\x9cu\xcdt\xe9\x7f\r\tXb\x94\xb5\xb0\x17\nT\x15\xd8\x15\xe2\xda,B\xe5)\xd4\x99e\xac\x1d\xf9\x84m{\xea_Y\x1d\xedD\a\x9f\xae\xd3\x05\x9aA\x96\x12Q+', &(0x7f00000002c0)="ccbe28c7e6fe0387d2afa160a010b6c39491faf1347cc720f16fe22a75a19a49b4b7b21cb60cb72ef82f18b2ca9d92808dd8690cb7b370b62af49b47c67a58f6e64ee40e715cda689d56515de044d05bf33769eafb0d5f7369857173a386e14b31053c5be5d08cb8a15406fba232eee55f9747f936be8e511239e77695de1c3c173d025df63789b321c9c7584159424b", 0x0) read$auto_ftrace_enable_fops_trace_events(r3, &(0x7f0000000200)=""/34, 0x22) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x1000000, 0x2003f0, 0x15) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x6, 0x0) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a25, 0x1000, 0x0, 0x3, 0x0) 481.973467ms ago: executing program 3 (id=2863): socket(0x2, 0x1, 0x106) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x2, 0x2, 0x0, 0x50b301a, 0x2c, 0x2c, 0x4}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x7, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)="12915fb9d5") sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 0s ago: executing program 3 (id=2864): mmap$auto(0x0, 0x2020009, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000340)="bbc69f44294e96f44775c8ae2f799d5b6cd3299545567a43016b6aec10e08a4fbbdbbca984cc42f44cdd54990480d823053a2bcc30812de2cd2ad59a53569f780f1c90346687a38c9eeb864081f5aa5c16157d43f44f0da3d10bf57668fd3b292a2de512328f6200e4d3f59a1c09b3e471cc30600ae9a8f90cfca13648120bd3b503b9d275909b66ef32e4d61999fff4283c5e0199d8de3bea6b30e65c127e57926f31921272f38c5256594516799461c04b4960d6c23715f28db38250d479", 0x3}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex_requeue$auto(&(0x7f0000000080)={0x400, 0x39c3c00000000}, 0x80800001, 0xb, 0xc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x109042, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x149400, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x104, 0x80000001, 0x7, 0x1, 0x3, 0x15f4da0a, 0x6, 0x3, 0x62, 0x1, 0x7, 0x6d3f, 0x2, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) futex_requeue$auto(&(0x7f00000000c0)={0x5, 0x4, 0x9}, 0x3, 0x40, 0x496) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)={0x7, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x63f) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) init_module$auto(0x0, 0xffff9, 0x0) pidfd_open$auto(0x1, 0x0) kernel console output (not intermixed with test programs): 604.074460][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 604.074480][T14475] Call Trace: [ 604.074492][T14475] [ 604.074505][T14475] dump_stack_lvl+0x16c/0x1f0 [ 604.074558][T14475] should_fail_ex+0x512/0x640 [ 604.074597][T14475] ? __kmalloc_noprof+0xbf/0x510 [ 604.074640][T14475] ? lsm_blob_alloc+0x68/0x90 [ 604.074668][T14475] should_failslab+0xc2/0x120 [ 604.074712][T14475] __kmalloc_noprof+0xd2/0x510 [ 604.074761][T14475] lsm_blob_alloc+0x68/0x90 [ 604.074791][T14475] security_sk_alloc+0x30/0x270 [ 604.074831][T14475] sk_prot_alloc+0xfb/0x2a0 [ 604.074887][T14475] sk_alloc+0x36/0xc20 [ 604.074929][T14475] inet6_create+0x381/0x1300 [ 604.074973][T14475] ? inet6_create+0x7f/0x1300 [ 604.075021][T14475] __sock_create+0x335/0x8d0 [ 604.075062][T14475] inet_ctl_sock_create+0x94/0x230 [ 604.075138][T14475] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 604.075194][T14475] ? __pfx_dccp_v6_init_net+0x10/0x10 [ 604.075238][T14475] dccp_v6_init_net+0x63/0x90 [ 604.075273][T14475] ops_init+0x1df/0x5f0 [ 604.075324][T14475] setup_net+0x21e/0x850 [ 604.075370][T14475] ? __pfx_setup_net+0x10/0x10 [ 604.075410][T14475] ? lockdep_init_map_type+0x5c/0x280 [ 604.075454][T14475] ? __pfx_down_read_killable+0x10/0x10 [ 604.075488][T14475] ? debug_mutex_init+0x37/0x70 [ 604.075523][T14475] copy_net_ns+0x2a6/0x5f0 [ 604.075573][T14475] create_new_namespaces+0x3ea/0xad0 [ 604.075618][T14475] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 604.075659][T14475] ksys_unshare+0x45b/0xa40 [ 604.075703][T14475] ? __pfx_ksys_unshare+0x10/0x10 [ 604.075744][T14475] ? xfd_validate_state+0x5d/0x180 [ 604.075777][T14475] ? rcu_is_watching+0x12/0xc0 [ 604.075817][T14475] __x64_sys_unshare+0x31/0x40 [ 604.075859][T14475] do_syscall_64+0xcd/0x230 [ 604.075906][T14475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.075937][T14475] RIP: 0033:0x7fc48538e169 [ 604.075961][T14475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.075988][T14475] RSP: 002b:00007fc4862c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 604.076026][T14475] RAX: ffffffffffffffda RBX: 00007fc4855b5fa0 RCX: 00007fc48538e169 [ 604.076045][T14475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 604.076062][T14475] RBP: 00007fc485410a68 R08: 0000000000000000 R09: 0000000000000000 [ 604.076080][T14475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.076097][T14475] R13: 0000000000000000 R14: 00007fc4855b5fa0 R15: 00007ffe435abfa8 [ 604.076133][T14475] [ 604.781010][T14501] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2217'. [ 608.685699][T14570] FAULT_INJECTION: forcing a failure. [ 608.685699][T14570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 608.748223][T14570] CPU: 1 UID: 0 PID: 14570 Comm: syz.1.2236 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 608.748278][T14570] Tainted: [U]=USER [ 608.748289][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 608.748308][T14570] Call Trace: [ 608.748320][T14570] [ 608.748333][T14570] dump_stack_lvl+0x16c/0x1f0 [ 608.748388][T14570] should_fail_ex+0x512/0x640 [ 608.748434][T14570] should_fail_alloc_page+0xe7/0x130 [ 608.748481][T14570] prepare_alloc_pages+0x3c2/0x610 [ 608.748553][T14570] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 608.748620][T14570] ? __lock_acquire+0xaa4/0x1ba0 [ 608.748665][T14570] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 608.748758][T14570] ? mas_next_slot+0x12d3/0x21b0 [ 608.748806][T14570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 608.748853][T14570] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 608.748894][T14570] ? policy_nodemask+0xea/0x4e0 [ 608.748937][T14570] alloc_pages_mpol+0x1fb/0x550 [ 608.748981][T14570] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 608.749025][T14570] ? validate_mm+0x40a/0x570 [ 608.749067][T14570] alloc_pages_noprof+0x131/0x390 [ 608.749112][T14570] pte_alloc_one+0x19/0x380 [ 608.749152][T14570] __pte_alloc+0x6d/0x3c0 [ 608.749198][T14570] ? __pfx___pte_alloc+0x10/0x10 [ 608.749254][T14570] do_pte_missing+0x2925/0x3fb0 [ 608.749289][T14570] ? mtree_range_walk+0x718/0xc00 [ 608.749333][T14570] ? find_held_lock+0x2b/0x80 [ 608.749370][T14570] __handle_mm_fault+0x103d/0x2a40 [ 608.749419][T14570] ? __pfx___handle_mm_fault+0x10/0x10 [ 608.749490][T14570] handle_mm_fault+0x3fe/0xad0 [ 608.749533][T14570] __get_user_pages+0x771/0x36f0 [ 608.749575][T14570] ? __pfx_mt_find+0x10/0x10 [ 608.749626][T14570] ? __pfx___get_user_pages+0x10/0x10 [ 608.749672][T14570] populate_vma_page_range+0x278/0x3a0 [ 608.749718][T14570] ? __pfx_populate_vma_page_range+0x10/0x10 [ 608.749751][T14570] ? __pfx_find_vma_intersection+0x10/0x10 [ 608.749804][T14570] ? do_mmap+0x69c/0x11b0 [ 608.749858][T14570] __mm_populate+0x1d8/0x380 [ 608.749893][T14570] ? __pfx___mm_populate+0x10/0x10 [ 608.749930][T14570] ? up_write+0x1b2/0x520 [ 608.749985][T14570] vm_mmap_pgoff+0x362/0x450 [ 608.750040][T14570] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 608.750089][T14570] ? do_set_mempolicy+0x220/0x480 [ 608.750139][T14570] ? __x64_sys_futex+0x1e0/0x4c0 [ 608.750175][T14570] ? __x64_sys_futex+0x1e9/0x4c0 [ 608.750220][T14570] ksys_mmap_pgoff+0x7d/0x5c0 [ 608.750269][T14570] ? rcu_is_watching+0x12/0xc0 [ 608.750306][T14570] __x64_sys_mmap+0x125/0x190 [ 608.750345][T14570] do_syscall_64+0xcd/0x230 [ 608.750396][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.750429][T14570] RIP: 0033:0x7f231238e169 [ 608.750453][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.750485][T14570] RSP: 002b:00007f23101f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 608.750515][T14570] RAX: ffffffffffffffda RBX: 00007f23125b5fa0 RCX: 00007f231238e169 [ 608.750537][T14570] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000400000 [ 608.750558][T14570] RBP: 00007f2312410a68 R08: 0000000000000002 R09: 0000000000108000 [ 608.750578][T14570] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 608.750598][T14570] R13: 0000000000000000 R14: 00007f23125b5fa0 R15: 00007ffc99ad0958 [ 608.750640][T14570] [ 609.337781][T14560] Invalid ELF header magic: != ELF [ 609.637635][T14586] UHID_CREATE from different security context by process 1820 (syz.0.2239), this is not allowed. [ 610.064248][T14572] FAULT_INJECTION: forcing a failure. [ 610.064248][T14572] name failslab, interval 1, probability 0, space 0, times 0 [ 610.086297][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.2.2237 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 610.086346][T14572] Tainted: [U]=USER [ 610.086356][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 610.086373][T14572] Call Trace: [ 610.086383][T14572] [ 610.086394][T14572] dump_stack_lvl+0x16c/0x1f0 [ 610.086442][T14572] should_fail_ex+0x512/0x640 [ 610.086477][T14572] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 610.086512][T14572] should_failslab+0xc2/0x120 [ 610.086551][T14572] __kmalloc_cache_noprof+0x6a/0x3e0 [ 610.086581][T14572] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 610.086622][T14572] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.086661][T14572] ? __request_module+0x2ad/0x690 [ 610.086711][T14572] __request_module+0x2ad/0x690 [ 610.086757][T14572] ? __pfx___request_module+0x10/0x10 [ 610.086821][T14572] ? find_held_lock+0x2b/0x80 [ 610.086870][T14572] inet_create+0xa7b/0x1090 [ 610.086899][T14572] ? inet_create+0x93/0x1090 [ 610.086934][T14572] __sock_create+0x335/0x8d0 [ 610.086969][T14572] __sys_socket+0x14d/0x260 [ 610.087000][T14572] ? __pfx___sys_socket+0x10/0x10 [ 610.087030][T14572] ? rcu_is_watching+0x12/0xc0 [ 610.087066][T14572] __x64_sys_socket+0x72/0xb0 [ 610.087094][T14572] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.087133][T14572] do_syscall_64+0xcd/0x230 [ 610.087177][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.087206][T14572] RIP: 0033:0x7fc48538e169 [ 610.087228][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.087256][T14572] RSP: 002b:00007fc4862c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 610.087287][T14572] RAX: ffffffffffffffda RBX: 00007fc4855b5fa0 RCX: 00007fc48538e169 [ 610.087307][T14572] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000002 [ 610.087324][T14572] RBP: 00007fc485410a68 R08: 0000000000000000 R09: 0000000000000000 [ 610.087342][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.087359][T14572] R13: 0000000000000000 R14: 00007fc4855b5fa0 R15: 00007ffe435abfa8 [ 610.087395][T14572] [ 614.015715][T14660] Invalid ELF header magic: != ELF [ 616.395355][T14719] ubi0: attaching mtd0 [ 616.411316][T14719] ubi0: scanning is finished [ 616.421600][T14719] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 616.477845][T14723] Invalid ELF header magic: != ELF [ 616.551676][T14719] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 616.887219][T14722] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 618.310397][T14755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2279'. [ 619.136513][T14761] Invalid ELF header magic: != ELF [ 619.458368][T14755] bond0: (slave bond_slave_0): Releasing backup interface [ 619.704761][T14762] Invalid ELF header magic: != ELF [ 620.606147][T14779] FAULT_INJECTION: forcing a failure. [ 620.606147][T14779] name failslab, interval 1, probability 0, space 0, times 0 [ 620.622223][T14779] CPU: 0 UID: 8 PID: 14779 Comm: syz.2.2284 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 620.622257][T14779] Tainted: [U]=USER [ 620.622264][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 620.622277][T14779] Call Trace: [ 620.622283][T14779] [ 620.622292][T14779] dump_stack_lvl+0x16c/0x1f0 [ 620.622326][T14779] should_fail_ex+0x512/0x640 [ 620.622351][T14779] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 620.622379][T14779] should_failslab+0xc2/0x120 [ 620.622426][T14779] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 620.622453][T14779] ? __pmd_alloc+0xc3/0x870 [ 620.622493][T14779] __pmd_alloc+0xc3/0x870 [ 620.622529][T14779] copy_page_range+0x411a/0x5ec0 [ 620.622578][T14779] ? __pfx_copy_page_range+0x10/0x10 [ 620.622616][T14779] ? mas_store+0x93a/0x10c0 [ 620.622635][T14779] ? __pfx___might_resched+0x10/0x10 [ 620.622667][T14779] ? __pfx_mas_store+0x10/0x10 [ 620.622684][T14779] ? __vma_enter_locked+0x163/0x3f0 [ 620.622711][T14779] ? down_write+0x14d/0x200 [ 620.622760][T14779] copy_process+0x862b/0x91a0 [ 620.622809][T14779] ? __pfx_copy_process+0x10/0x10 [ 620.622837][T14779] ? __pfx___futex_wait+0x10/0x10 [ 620.622900][T14779] kernel_clone+0xfc/0x960 [ 620.622933][T14779] ? __pfx_kernel_clone+0x10/0x10 [ 620.622979][T14779] __do_sys_clone+0xce/0x120 [ 620.623009][T14779] ? __pfx___do_sys_clone+0x10/0x10 [ 620.623054][T14779] ? rcu_is_watching+0x12/0xc0 [ 620.623085][T14779] do_syscall_64+0xcd/0x230 [ 620.623130][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.623169][T14779] RIP: 0033:0x7fc48538e169 [ 620.623186][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.623208][T14779] RSP: 002b:00007fc4862c7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 620.623228][T14779] RAX: ffffffffffffffda RBX: 00007fc4855b5fa0 RCX: 00007fc48538e169 [ 620.623243][T14779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000005000400 [ 620.623257][T14779] RBP: 00007fc485410a68 R08: 0000000000000000 R09: 0000000000000000 [ 620.623270][T14779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.623284][T14779] R13: 0000000000000000 R14: 00007fc4855b5fa0 R15: 00007ffe435abfa8 [ 620.623312][T14779] [ 620.915753][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 621.390847][T14786] FAULT_INJECTION: forcing a failure. [ 621.390847][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 621.490740][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.1.2286 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 621.490793][T14786] Tainted: [U]=USER [ 621.490804][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 621.490822][T14786] Call Trace: [ 621.490833][T14786] [ 621.490845][T14786] dump_stack_lvl+0x16c/0x1f0 [ 621.490894][T14786] should_fail_ex+0x512/0x640 [ 621.490930][T14786] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 621.490972][T14786] should_failslab+0xc2/0x120 [ 621.491012][T14786] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 621.491057][T14786] ? __kernfs_new_node+0xd2/0x8a0 [ 621.491106][T14786] __kernfs_new_node+0xd2/0x8a0 [ 621.491138][T14786] ? __pfx___kernfs_new_node+0x10/0x10 [ 621.491177][T14786] ? find_held_lock+0x2b/0x80 [ 621.491208][T14786] ? kernfs_root+0xee/0x2a0 [ 621.491243][T14786] kernfs_new_node+0x13c/0x1e0 [ 621.491284][T14786] __kernfs_create_file+0x53/0x350 [ 621.491327][T14786] sysfs_add_file_mode_ns+0x207/0x3c0 [ 621.491382][T14786] internal_create_group+0x578/0xf30 [ 621.491422][T14786] ? __pfx_internal_create_group+0x10/0x10 [ 621.491477][T14786] ? kernfs_create_link+0x1bd/0x240 [ 621.491527][T14786] internal_create_groups+0x9d/0x150 [ 621.491563][T14786] device_add+0x731/0x1a70 [ 621.491598][T14786] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 621.491638][T14786] ? __pfx_device_add+0x10/0x10 [ 621.491673][T14786] ? sprintf+0xcc/0x100 [ 621.491713][T14786] ? __pfx_sprintf+0x10/0x10 [ 621.491758][T14786] add_disk_fwnode+0x468/0x13a0 [ 621.491807][T14786] loop_add+0x909/0xb70 [ 621.491840][T14786] ? do_vfs_ioctl+0x512/0x1990 [ 621.491885][T14786] ? __pfx_loop_add+0x10/0x10 [ 621.491916][T14786] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 621.491987][T14786] ? find_held_lock+0x2b/0x80 [ 621.492023][T14786] loop_control_ioctl+0x13c/0x630 [ 621.492069][T14786] ? __pfx_loop_control_ioctl+0x10/0x10 [ 621.492110][T14786] ? __pfx_loop_control_ioctl+0x10/0x10 [ 621.492148][T14786] __x64_sys_ioctl+0x190/0x200 [ 621.492196][T14786] do_syscall_64+0xcd/0x230 [ 621.492243][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.492274][T14786] RIP: 0033:0x7f231238e169 [ 621.492299][T14786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.492329][T14786] RSP: 002b:00007f23101f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.492359][T14786] RAX: ffffffffffffffda RBX: 00007f23125b5fa0 RCX: 00007f231238e169 [ 621.492379][T14786] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 621.492398][T14786] RBP: 00007f2312410a68 R08: 0000000000000000 R09: 0000000000000000 [ 621.492417][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.492434][T14786] R13: 0000000000000000 R14: 00007f23125b5fa0 R15: 00007ffc99ad0958 [ 621.492473][T14786] [ 623.279834][ T30] audit: type=1800 audit(6040113442.931:9): pid=14822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2296" name="lu_gp_id" dev="configfs" ino=56619 res=0 errno=0 [ 623.283060][T14822] ALUA LU Group already has a valid ID, ignoring request [ 624.026332][T14834] Invalid ELF header magic: != ELF [ 625.269921][T14856] kAFS: Invalid Command on /proc/fs/afs/cells file [ 626.066584][T14869] FAULT_INJECTION: forcing a failure. [ 626.066584][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 626.123362][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.2.2307 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 626.123397][T14869] Tainted: [U]=USER [ 626.123403][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 626.123414][T14869] Call Trace: [ 626.123422][T14869] [ 626.123430][T14869] dump_stack_lvl+0x16c/0x1f0 [ 626.123462][T14869] should_fail_ex+0x512/0x640 [ 626.123497][T14869] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 626.123544][T14869] should_failslab+0xc2/0x120 [ 626.123592][T14869] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 626.123622][T14869] ? getname_flags.part.0+0x4c/0x550 [ 626.123659][T14869] getname_flags.part.0+0x4c/0x550 [ 626.123695][T14869] getname_flags+0x93/0xf0 [ 626.123724][T14869] do_sys_openat2+0xb8/0x1d0 [ 626.123757][T14869] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.123794][T14869] ? __fget_files+0x20e/0x3c0 [ 626.123822][T14869] __x64_sys_openat+0x174/0x210 [ 626.123858][T14869] ? __pfx___x64_sys_openat+0x10/0x10 [ 626.123891][T14869] ? ksys_write+0x1b9/0x240 [ 626.123916][T14869] ? rcu_is_watching+0x12/0xc0 [ 626.123949][T14869] do_syscall_64+0xcd/0x230 [ 626.123985][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.124008][T14869] RIP: 0033:0x7fc48538e169 [ 626.124025][T14869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.124046][T14869] RSP: 002b:00007fc4862a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.124067][T14869] RAX: ffffffffffffffda RBX: 00007fc4855b6080 RCX: 00007fc48538e169 [ 626.124082][T14869] RDX: 0000000000000a80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 626.124097][T14869] RBP: 00007fc4862a7090 R08: 0000000000000000 R09: 0000000000000000 [ 626.124111][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.124124][T14869] R13: 0000000000000000 R14: 00007fc4855b6080 R15: 00007ffe435abfa8 [ 626.124152][T14869] [ 629.366488][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.373413][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.703651][ T30] audit: type=1804 audit(6040113449.341:10): pid=14932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2322" name=08 dev="tmpfs" ino=3133 res=1 errno=0 [ 631.011090][T14959] Invalid ELF header magic: != ELF [ 631.966450][T13140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.979744][T13140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.996520][T13140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.005307][T13140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.015164][T13140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.456242][T14971] chnl_net:caif_netlink_parms(): no params data found [ 632.480603][T14978] netlink: 'syz.2.2332': attribute type 15 has an invalid length. [ 632.498610][T14978] netlink: 'syz.2.2332': attribute type 16 has an invalid length. [ 632.516512][T14978] netlink: 'syz.2.2332': attribute type 17 has an invalid length. [ 632.528946][T14978] netlink: 'syz.2.2332': attribute type 19 has an invalid length. [ 632.564310][T14978] netlink: 238 bytes leftover after parsing attributes in process `syz.2.2332'. [ 632.954878][ T4513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.000029][T14971] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.012828][T14971] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.028194][T14971] bridge_slave_0: entered allmulticast mode [ 633.040946][T14971] bridge_slave_0: entered promiscuous mode [ 633.049930][T14971] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.057733][T14971] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.065024][T14971] bridge_slave_1: entered allmulticast mode [ 633.073866][T14971] bridge_slave_1: entered promiscuous mode [ 633.081056][T14993] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2335'. [ 633.244309][ T4513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.406239][ T4513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.440866][T14971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.453706][T14971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.516690][T14971] team0: Port device team_slave_0 added [ 633.556954][ T4513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.591837][T14971] team0: Port device team_slave_1 added [ 633.729003][T14971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.747167][T14971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.888068][T14971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.908255][T14971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.915244][T14971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.078273][ T8093] Bluetooth: hci4: command tx timeout [ 634.093126][T14971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.520296][T14971] hsr_slave_0: entered promiscuous mode [ 634.596824][T14971] hsr_slave_1: entered promiscuous mode [ 634.614046][T14971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.636423][T14971] Cannot create hsr debugfs directory [ 634.684100][T15006] Invalid ELF header magic: != ELF [ 634.922325][ T4513] hsr0: left allmulticast mode [ 634.927646][ T4513] hsr_slave_0: left allmulticast mode [ 634.940646][ T4513] hsr_slave_1: left allmulticast mode [ 634.952102][ T4513] hsr0: left promiscuous mode [ 634.958049][ T4513] bridge0: port 3(hsr0) entered disabled state [ 634.982772][ T4513] bridge_slave_0: left allmulticast mode [ 634.988674][ T4513] bridge_slave_0: left promiscuous mode [ 634.994484][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.319019][ T4513] erspan0 (unregistering): left allmulticast mode [ 635.741350][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.759335][ T4513] bond0 (unregistering): Released all slaves [ 635.908298][ T4513] HfR: left promiscuous mode [ 636.159240][ T8093] Bluetooth: hci4: command tx timeout [ 637.513075][T15037] Invalid ELF header magic: != ELF [ 638.156546][ T4513] hsr_slave_0: left promiscuous mode [ 638.162728][ T4513] hsr_slave_1: left promiscuous mode [ 638.171798][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.179358][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.187518][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.195145][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.220879][ T4513] veth0_macvtap: left promiscuous mode [ 638.226943][ T4513] veth1_vlan: left promiscuous mode [ 638.232558][ T4513] veth0_vlan: left promiscuous mode [ 638.238367][ T8093] Bluetooth: hci4: command tx timeout [ 638.806692][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 638.870639][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 639.606370][T14971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 639.651898][T14971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.705275][T14971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.745405][T14971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 640.321069][ T8093] Bluetooth: hci4: command tx timeout [ 640.577704][T14971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.628822][T14971] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.656880][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.664124][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.710671][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.717856][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.800135][T15103] FAULT_INJECTION: forcing a failure. [ 640.800135][T15103] name failslab, interval 1, probability 0, space 0, times 0 [ 640.817155][T15103] CPU: 0 UID: 0 PID: 15103 Comm: syz.2.2356 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 640.817202][T15103] Tainted: [U]=USER [ 640.817213][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 640.817230][T15103] Call Trace: [ 640.817239][T15103] [ 640.817250][T15103] dump_stack_lvl+0x16c/0x1f0 [ 640.817297][T15103] should_fail_ex+0x512/0x640 [ 640.817331][T15103] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 640.817371][T15103] should_failslab+0xc2/0x120 [ 640.817410][T15103] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 640.817446][T15103] ? ptlock_alloc+0x1f/0x70 [ 640.817481][T15103] ptlock_alloc+0x1f/0x70 [ 640.817511][T15103] pte_alloc_one+0x6d/0x380 [ 640.817546][T15103] __pte_alloc+0x6d/0x3c0 [ 640.817587][T15103] ? __pfx___pte_alloc+0x10/0x10 [ 640.817638][T15103] do_pte_missing+0x2925/0x3fb0 [ 640.817668][T15103] ? mtree_range_walk+0x718/0xc00 [ 640.817708][T15103] ? find_held_lock+0x2b/0x80 [ 640.817751][T15103] __handle_mm_fault+0x103d/0x2a40 [ 640.817794][T15103] ? __pfx___handle_mm_fault+0x10/0x10 [ 640.817858][T15103] handle_mm_fault+0x3fe/0xad0 [ 640.817897][T15103] __get_user_pages+0x771/0x36f0 [ 640.817939][T15103] ? __pfx_mt_find+0x10/0x10 [ 640.817985][T15103] ? __pfx___get_user_pages+0x10/0x10 [ 640.818025][T15103] populate_vma_page_range+0x278/0x3a0 [ 640.818058][T15103] ? __pfx_populate_vma_page_range+0x10/0x10 [ 640.818087][T15103] ? __pfx_find_vma_intersection+0x10/0x10 [ 640.818133][T15103] ? do_mmap+0x69c/0x11b0 [ 640.818181][T15103] __mm_populate+0x1d8/0x380 [ 640.818212][T15103] ? __pfx___mm_populate+0x10/0x10 [ 640.818244][T15103] ? up_write+0x1b2/0x520 [ 640.818291][T15103] vm_mmap_pgoff+0x362/0x450 [ 640.818339][T15103] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 640.818382][T15103] ? do_set_mempolicy+0x220/0x480 [ 640.818424][T15103] ? __x64_sys_futex+0x1e0/0x4c0 [ 640.818457][T15103] ? __x64_sys_futex+0x1e9/0x4c0 [ 640.818494][T15103] ksys_mmap_pgoff+0x7d/0x5c0 [ 640.818537][T15103] ? rcu_is_watching+0x12/0xc0 [ 640.818570][T15103] __x64_sys_mmap+0x125/0x190 [ 640.818606][T15103] do_syscall_64+0xcd/0x230 [ 640.818651][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.818680][T15103] RIP: 0033:0x7fc48538e169 [ 640.818703][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.818740][T15103] RSP: 002b:00007fc4862c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 640.818767][T15103] RAX: ffffffffffffffda RBX: 00007fc4855b5fa0 RCX: 00007fc48538e169 [ 640.818786][T15103] RDX: 00000000000000df RSI: 0000000000400409 RDI: 0000000000000000 [ 640.818804][T15103] RBP: 00007fc485410a68 R08: 0000000000000002 R09: 0000000000008000 [ 640.818822][T15103] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 640.818840][T15103] R13: 0000000000000000 R14: 00007fc4855b5fa0 R15: 00007ffe435abfa8 [ 640.818877][T15103] [ 641.933139][T15106] Invalid ELF header magic: != ELF [ 642.521880][T14971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.768696][T14971] veth0_vlan: entered promiscuous mode [ 642.795681][T14971] veth1_vlan: entered promiscuous mode [ 642.905160][T14971] veth0_macvtap: entered promiscuous mode [ 642.965278][T14971] veth1_macvtap: entered promiscuous mode [ 642.997840][T14971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.026835][T14971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.055368][T14971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.075898][T14971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.099257][T14971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.152461][T14971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.169403][T14971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.179442][T14971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.190248][T14971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.212194][T14971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.230200][T14971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.245357][T14971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.265137][T14971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.275708][T14971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.285713][T14971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.294841][T14971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.849293][T15158] FAULT_INJECTION: forcing a failure. [ 643.849293][T15158] name failslab, interval 1, probability 0, space 0, times 0 [ 643.862014][T15158] CPU: 0 UID: 0 PID: 15158 Comm: syz.0.2365 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 643.862059][T15158] Tainted: [U]=USER [ 643.862069][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.862085][T15158] Call Trace: [ 643.862094][T15158] [ 643.862104][T15158] dump_stack_lvl+0x16c/0x1f0 [ 643.862149][T15158] should_fail_ex+0x512/0x640 [ 643.862183][T15158] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 643.862233][T15158] should_failslab+0xc2/0x120 [ 643.862295][T15158] __kmalloc_cache_noprof+0x6a/0x3e0 [ 643.862329][T15158] ? ring_buffer_read_prepare+0x101/0x320 [ 643.862385][T15158] ? lockdep_init_map_type+0x5c/0x280 [ 643.862436][T15158] ring_buffer_read_prepare+0x101/0x320 [ 643.862477][T15158] tracing_open+0x925/0xf90 [ 643.862525][T15158] do_dentry_open+0x741/0x1c10 [ 643.862563][T15158] ? __pfx_tracing_open+0x10/0x10 [ 643.862606][T15158] vfs_open+0x82/0x3f0 [ 643.862655][T15158] path_openat+0x1e5e/0x2d40 [ 643.862706][T15158] ? __pfx_path_openat+0x10/0x10 [ 643.862754][T15158] do_filp_open+0x20b/0x470 [ 643.862791][T15158] ? __pfx_do_filp_open+0x10/0x10 [ 643.862857][T15158] ? alloc_fd+0x471/0x7d0 [ 643.862900][T15158] do_sys_openat2+0x11b/0x1d0 [ 643.862944][T15158] ? __pfx_do_sys_openat2+0x10/0x10 [ 643.863009][T15158] __x64_sys_openat+0x174/0x210 [ 643.863057][T15158] ? __pfx___x64_sys_openat+0x10/0x10 [ 643.863108][T15158] ? rcu_is_watching+0x12/0xc0 [ 643.863154][T15158] do_syscall_64+0xcd/0x230 [ 643.863206][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.863239][T15158] RIP: 0033:0x7fdd6cb8e169 [ 643.863265][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.863299][T15158] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 643.863330][T15158] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 643.863353][T15158] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 643.863376][T15158] RBP: 00007fdd6cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 643.863397][T15158] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 643.863417][T15158] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 643.863472][T15158] [ 644.136609][T13448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.144784][T13448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.185305][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.193210][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.340126][T15144] could not allocate digest TFM handle [ 646.507105][T13140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.522678][T13140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.532982][T13140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.553524][T13140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.578886][T13140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 647.563016][T15205] Invalid ELF header magic: != ELF [ 647.906259][T15185] chnl_net:caif_netlink_parms(): no params data found [ 648.331673][T15215] svc: failed to register nfsdv3 RPC service (errno 111). [ 648.359582][T15215] svc: failed to register nfsaclv3 RPC service (errno 111). [ 648.598122][T15185] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.622648][T15185] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.631784][T15185] bridge_slave_0: entered allmulticast mode [ 648.638103][ T8093] Bluetooth: hci2: command tx timeout [ 648.641987][T15185] bridge_slave_0: entered promiscuous mode [ 648.669149][T15185] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.691576][T15185] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.708178][T15185] bridge_slave_1: entered allmulticast mode [ 648.715973][T15185] bridge_slave_1: entered promiscuous mode [ 648.802873][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.829659][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.060835][T13448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.122566][T15185] team0: Port device team_slave_0 added [ 649.131950][T15185] team0: Port device team_slave_1 added [ 649.283053][T13448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.385987][T15185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.404353][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.457999][T15185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.480158][T15185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.487134][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.531437][T15185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.556943][T15236] FAULT_INJECTION: forcing a failure. [ 649.556943][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 649.700932][T13448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.731541][T15236] CPU: 0 UID: 0 PID: 15236 Comm: syz.1.2379 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 649.731594][T15236] Tainted: [U]=USER [ 649.731605][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.731623][T15236] Call Trace: [ 649.731634][T15236] [ 649.731647][T15236] dump_stack_lvl+0x16c/0x1f0 [ 649.731695][T15236] should_fail_ex+0x512/0x640 [ 649.731731][T15236] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 649.731775][T15236] should_failslab+0xc2/0x120 [ 649.731816][T15236] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 649.731853][T15236] ? __proc_create+0xc3/0x8c0 [ 649.731888][T15236] ? __proc_create+0x2ce/0x8c0 [ 649.731930][T15236] __proc_create+0x2ce/0x8c0 [ 649.731968][T15236] ? __pfx___proc_create+0x10/0x10 [ 649.732008][T15236] ? __pfx_netdev_run_todo+0x10/0x10 [ 649.732054][T15236] ? __pfx___mutex_lock+0x10/0x10 [ 649.732104][T15236] proc_create_reg+0x7d/0x180 [ 649.732150][T15236] ? __pfx_psched_show+0x10/0x10 [ 649.732197][T15236] proc_create_single_data+0x86/0x190 [ 649.732239][T15236] ? __pfx_proc_create_single_data+0x10/0x10 [ 649.732279][T15236] ? __pfx_netdev_debug_event+0x10/0x10 [ 649.732328][T15236] ? __pfx_psched_net_init+0x10/0x10 [ 649.732375][T15236] psched_net_init+0x4a/0x70 [ 649.732420][T15236] ops_init+0x1df/0x5f0 [ 649.732472][T15236] setup_net+0x21e/0x850 [ 649.732520][T15236] ? __pfx_setup_net+0x10/0x10 [ 649.732561][T15236] ? lockdep_init_map_type+0x5c/0x280 [ 649.732606][T15236] ? __pfx_down_read_killable+0x10/0x10 [ 649.732640][T15236] ? debug_mutex_init+0x37/0x70 [ 649.732676][T15236] copy_net_ns+0x2a6/0x5f0 [ 649.732727][T15236] create_new_namespaces+0x3ea/0xad0 [ 649.732774][T15236] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 649.732826][T15236] ksys_unshare+0x45b/0xa40 [ 649.732869][T15236] ? __pfx_ksys_unshare+0x10/0x10 [ 649.732909][T15236] ? xfd_validate_state+0x5d/0x180 [ 649.732942][T15236] ? rcu_is_watching+0x12/0xc0 [ 649.732979][T15236] __x64_sys_unshare+0x31/0x40 [ 649.733021][T15236] do_syscall_64+0xcd/0x230 [ 649.733066][T15236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.733094][T15236] RIP: 0033:0x7f7c8438e169 [ 649.733117][T15236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.733152][T15236] RSP: 002b:00007f7c821f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 649.733180][T15236] RAX: ffffffffffffffda RBX: 00007f7c845b5fa0 RCX: 00007f7c8438e169 [ 649.733200][T15236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 649.733217][T15236] RBP: 00007f7c84410a68 R08: 0000000000000000 R09: 0000000000000000 [ 649.733234][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.733251][T15236] R13: 0000000000000000 R14: 00007f7c845b5fa0 R15: 00007ffc3be83638 [ 649.733288][T15236] [ 650.180575][T15185] hsr_slave_0: entered promiscuous mode [ 650.187493][T15185] hsr_slave_1: entered promiscuous mode [ 650.195058][T15185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.202721][T15185] Cannot create hsr debugfs directory [ 650.273728][T13448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.747951][ T8093] Bluetooth: hci2: command tx timeout [ 651.608595][T13448] bridge_slave_1: left allmulticast mode [ 651.626666][T13448] bridge_slave_1: left promiscuous mode [ 651.636674][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.652894][T13448] bridge_slave_0: left allmulticast mode [ 651.663973][T15244] Invalid ELF header magic: != ELF [ 651.670296][T13448] bridge_slave_0: left promiscuous mode [ 651.693084][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.125593][T13448] erspan0 (unregistering): left allmulticast mode [ 652.363264][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.374283][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.386177][T13448] bond0 (unregistering): Released all slaves [ 652.510560][T13448] HfR: left promiscuous mode [ 652.583923][T13448] ovs_: left promiscuous mode [ 652.800075][ T8093] Bluetooth: hci2: command tx timeout [ 653.226443][T15185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.269121][T15185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 653.444342][T15185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 653.474625][T15185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.580368][T13448] hsr_slave_0: left promiscuous mode [ 653.587185][T13448] hsr_slave_1: left promiscuous mode [ 653.599967][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.607786][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.617343][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.625114][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.658334][T13448] veth1_macvtap: left promiscuous mode [ 653.663918][T13448] veth0_macvtap: left promiscuous mode [ 653.670485][T13448] veth1_vlan: left promiscuous mode [ 653.687478][T13448] veth0_vlan: left promiscuous mode [ 654.871258][T15291] Invalid ELF header magic: != ELF [ 654.878038][ T8093] Bluetooth: hci2: command tx timeout [ 655.288135][T13448] team0 (unregistering): Port device team_slave_1 removed [ 655.362946][T13448] team0 (unregistering): Port device team_slave_0 removed [ 656.352693][T15185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.411794][T15185] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.453889][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.461102][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.517775][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.524959][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.906175][T15329] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 656.914663][T15329] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 657.216861][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.360975][T15185] veth0_vlan: entered promiscuous mode [ 657.383600][T15185] veth1_vlan: entered promiscuous mode [ 657.449999][T15185] veth0_macvtap: entered promiscuous mode [ 657.465976][T15185] veth1_macvtap: entered promiscuous mode [ 657.503892][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.519614][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.538037][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.557956][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.579472][T15185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.605058][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.636188][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.649065][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.678329][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.690889][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.712757][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.734067][T15185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.759813][T15185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.777973][T15185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.796949][T15185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.805762][T15185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.986255][T13427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.997527][T13427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.087725][T13427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.112899][T13427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.298698][T15355] nbd: socks must be embedded in a SOCK_ITEM attr [ 659.782914][T13140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.798720][T13140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.808874][T13140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.828305][T13140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.836009][T13140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 661.311696][T15395] Invalid ELF header magic: != ELF [ 661.661231][T15381] chnl_net:caif_netlink_parms(): no params data found [ 661.918035][ T8093] Bluetooth: hci3: command tx timeout [ 662.096563][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.128127][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.135332][T15381] bridge_slave_0: entered allmulticast mode [ 662.163541][T15381] bridge_slave_0: entered promiscuous mode [ 662.197613][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.215426][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.228559][T15381] bridge_slave_1: entered allmulticast mode [ 662.264170][T15381] bridge_slave_1: entered promiscuous mode [ 662.389882][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.714494][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.741009][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.897744][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.277102][T15413] Invalid ELF header magic: != ELF [ 663.427832][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.487836][T15381] team0: Port device team_slave_0 added [ 663.501205][T15381] team0: Port device team_slave_1 added [ 663.543400][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.591608][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.627381][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.661084][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.675223][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.683233][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.709412][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.004633][ T8093] Bluetooth: hci3: command tx timeout [ 664.131715][T15381] hsr_slave_0: entered promiscuous mode [ 664.153063][T15381] hsr_slave_1: entered promiscuous mode [ 664.168830][T15381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.187471][T15381] Cannot create hsr debugfs directory [ 664.198086][ T36] team0: left allmulticast mode [ 664.203000][ T36] team_slave_0: left allmulticast mode [ 664.220348][ T36] team_slave_1: left allmulticast mode [ 664.237503][ T36] team0: left promiscuous mode [ 664.268171][ T36] team_slave_0: left promiscuous mode [ 664.304460][ T36] team_slave_1: left promiscuous mode [ 664.319563][ T36] bridge0: port 3(team0) entered disabled state [ 664.345624][ T36] bridge_slave_1: left allmulticast mode [ 664.364936][ T36] bridge_slave_1: left promiscuous mode [ 664.416710][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.455871][ T36] bridge_slave_0: left allmulticast mode [ 664.488183][ T36] bridge_slave_0: left promiscuous mode [ 664.508913][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.766237][T15435] Invalid ELF header magic: != ELF [ 665.063572][ T36] ip_vti0 (unregistering): left allmulticast mode [ 665.294555][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.316594][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.333758][ T36] bond0 (unregistering): Released all slaves [ 665.453373][ T36] HfR: left promiscuous mode [ 666.081096][ T8093] Bluetooth: hci3: command tx timeout [ 666.417385][ T36] hsr_slave_0: left promiscuous mode [ 666.432642][ T36] hsr_slave_1: left promiscuous mode [ 666.461230][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.472005][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.506355][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.552528][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.611832][ T8093] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 666.611868][ T8093] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 666.627354][ T8093] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 666.627403][ T8093] Bluetooth: hci1: adv larger than maximum supported [ 666.634594][ T8093] Bluetooth: hci1: Malformed LE Event: 0x0d [ 666.663338][ T36] veth0_macvtap: left promiscuous mode [ 667.566754][ T36] team0 (unregistering): Port device team_slave_1 removed [ 667.640015][ T36] team0 (unregistering): Port device team_slave_0 removed [ 667.837983][T15479] FAULT_INJECTION: forcing a failure. [ 667.837983][T15479] name failslab, interval 1, probability 0, space 0, times 0 [ 667.860985][T15479] CPU: 1 UID: 0 PID: 15479 Comm: syz.1.2419 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 667.861042][T15479] Tainted: [U]=USER [ 667.861054][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 667.861073][T15479] Call Trace: [ 667.861085][T15479] [ 667.861097][T15479] dump_stack_lvl+0x16c/0x1f0 [ 667.861151][T15479] should_fail_ex+0x512/0x640 [ 667.861191][T15479] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 667.861238][T15479] should_failslab+0xc2/0x120 [ 667.861281][T15479] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 667.861324][T15479] ? mas_alloc_nodes+0x18b/0x8b0 [ 667.861370][T15479] mas_alloc_nodes+0x18b/0x8b0 [ 667.861420][T15479] mas_node_count_gfp+0x105/0x130 [ 667.861465][T15479] mas_preallocate+0x53e/0xcd0 [ 667.861503][T15479] ? __pfx_mas_preallocate+0x10/0x10 [ 667.861544][T15479] ? vm_area_alloc+0x1f/0x160 [ 667.861585][T15479] ? lockdep_init_map_type+0x5c/0x280 [ 667.861639][T15479] __mmap_region+0x139b/0x27c0 [ 667.861686][T15479] ? __pfx___mmap_region+0x10/0x10 [ 667.861726][T15479] ? kernel_text_address+0x8d/0x100 [ 667.861792][T15479] ? stack_depot_save_flags+0x28/0xa50 [ 667.861903][T15479] ? trace_cap_capable+0x18d/0x200 [ 667.861937][T15479] ? cap_capable+0xb3/0x250 [ 667.861965][T15479] mmap_region+0x1ab/0x3f0 [ 667.862008][T15479] do_mmap+0xd8e/0x11b0 [ 667.862063][T15479] ? __pfx_do_mmap+0x10/0x10 [ 667.862110][T15479] ? __pfx_down_write_killable+0x10/0x10 [ 667.862168][T15479] vm_mmap_pgoff+0x281/0x450 [ 667.862224][T15479] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 667.862269][T15479] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 667.862315][T15479] ? hugetlbfs_get_inode+0x31f/0x730 [ 667.862366][T15479] ksys_mmap_pgoff+0x1c8/0x5c0 [ 667.862414][T15479] ? rcu_is_watching+0x12/0xc0 [ 667.862450][T15479] __x64_sys_mmap+0x125/0x190 [ 667.862488][T15479] do_syscall_64+0xcd/0x230 [ 667.862536][T15479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.862565][T15479] RIP: 0033:0x7f7c8438e169 [ 667.862590][T15479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.862625][T15479] RSP: 002b:00007f7c821d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 667.862655][T15479] RAX: ffffffffffffffda RBX: 00007f7c845b6080 RCX: 00007f7c8438e169 [ 667.862678][T15479] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 667.862699][T15479] RBP: 00007f7c84410a68 R08: 000000000000000d R09: 0000300000004000 [ 667.862721][T15479] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 667.862741][T15479] R13: 0000000000000000 R14: 00007f7c845b6080 R15: 00007ffc3be83638 [ 667.862779][T15479] [ 668.158096][ T8093] Bluetooth: hci3: command tx timeout [ 669.634327][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 670.266631][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2421'. [ 670.608381][T15521] openvswitch: HfR: Dropping previously announced user features [ 671.112037][T15532] HfR: entered promiscuous mode [ 674.355920][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'. [ 674.369581][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 678.126888][T15619] FAULT_INJECTION: forcing a failure. [ 678.126888][T15619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.140412][T15619] CPU: 0 UID: 0 PID: 15619 Comm: syz.0.2445 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 678.140447][T15619] Tainted: [U]=USER [ 678.140455][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 678.140468][T15619] Call Trace: [ 678.140475][T15619] [ 678.140483][T15619] dump_stack_lvl+0x16c/0x1f0 [ 678.140520][T15619] should_fail_ex+0x512/0x640 [ 678.140551][T15619] _copy_from_user+0x2e/0xd0 [ 678.140581][T15619] input_event_from_user+0xb9/0x290 [ 678.140606][T15619] ? __pfx_input_event_from_user+0x10/0x10 [ 678.140630][T15619] ? __pfx___might_resched+0x10/0x10 [ 678.140657][T15619] ? input_inject_event+0x51/0x390 [ 678.140683][T15619] evdev_write+0x26b/0x440 [ 678.140722][T15619] ? __pfx_evdev_write+0x10/0x10 [ 678.140759][T15619] ? bpf_lsm_file_permission+0x9/0x10 [ 678.140782][T15619] ? security_file_permission+0x71/0x210 [ 678.140814][T15619] ? rw_verify_area+0xcf/0x680 [ 678.140853][T15619] vfs_write+0x25c/0x1180 [ 678.140874][T15619] ? __pfx_evdev_write+0x10/0x10 [ 678.140921][T15619] ? __pfx_vfs_write+0x10/0x10 [ 678.140943][T15619] ? find_held_lock+0x2b/0x80 [ 678.140967][T15619] ? __fget_files+0x204/0x3c0 [ 678.140993][T15619] ? __fget_files+0x20e/0x3c0 [ 678.141022][T15619] ksys_write+0x205/0x240 [ 678.141045][T15619] ? __pfx_ksys_write+0x10/0x10 [ 678.141077][T15619] do_syscall_64+0xcd/0x230 [ 678.141124][T15619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.141145][T15619] RIP: 0033:0x7fdd6cb8e169 [ 678.141161][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.141193][T15619] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.141212][T15619] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 678.141226][T15619] RDX: 00000000000007fe RSI: 0000200000000000 RDI: 0000000000000003 [ 678.141239][T15619] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 678.141271][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.141283][T15619] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 678.141309][T15619] [ 679.065301][ T30] audit: type=1804 audit(6040113498.711:11): pid=15640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2454" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=1247 res=1 errno=0 [ 681.726466][T15675] FAULT_INJECTION: forcing a failure. [ 681.726466][T15675] name failslab, interval 1, probability 0, space 0, times 0 [ 681.739843][T15675] CPU: 1 UID: 0 PID: 15675 Comm: syz.0.2463 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 681.739897][T15675] Tainted: [U]=USER [ 681.739909][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 681.739929][T15675] Call Trace: [ 681.739941][T15675] [ 681.739960][T15675] dump_stack_lvl+0x16c/0x1f0 [ 681.740014][T15675] should_fail_ex+0x512/0x640 [ 681.740053][T15675] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 681.740093][T15675] should_failslab+0xc2/0x120 [ 681.740137][T15675] __kmalloc_cache_noprof+0x6a/0x3e0 [ 681.740173][T15675] ? ring_buffer_read_prepare+0x101/0x320 [ 681.740211][T15675] ? kasan_save_track+0x14/0x30 [ 681.740254][T15675] ring_buffer_read_prepare+0x101/0x320 [ 681.740298][T15675] tracing_open+0x925/0xf90 [ 681.740340][T15675] do_dentry_open+0x741/0x1c10 [ 681.740378][T15675] ? __pfx_tracing_open+0x10/0x10 [ 681.740421][T15675] vfs_open+0x82/0x3f0 [ 681.740471][T15675] path_openat+0x1e5e/0x2d40 [ 681.740522][T15675] ? __pfx_path_openat+0x10/0x10 [ 681.740569][T15675] do_filp_open+0x20b/0x470 [ 681.740606][T15675] ? __pfx_do_filp_open+0x10/0x10 [ 681.740673][T15675] ? alloc_fd+0x471/0x7d0 [ 681.740716][T15675] do_sys_openat2+0x11b/0x1d0 [ 681.740764][T15675] ? __pfx_do_sys_openat2+0x10/0x10 [ 681.740842][T15675] __x64_sys_openat+0x174/0x210 [ 681.740890][T15675] ? __pfx___x64_sys_openat+0x10/0x10 [ 681.740966][T15675] ? rcu_is_watching+0x12/0xc0 [ 681.741008][T15675] do_syscall_64+0xcd/0x230 [ 681.741054][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.741082][T15675] RIP: 0033:0x7fdd6cb8e169 [ 681.741104][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.741134][T15675] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 681.741161][T15675] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 681.741180][T15675] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 681.741198][T15675] RBP: 00007fdd6cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 681.741215][T15675] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 681.741231][T15675] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 681.741267][T15675] [ 683.367303][T13140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.376543][T13140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.385139][T13140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.393651][T13140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.401725][T13140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.404485][T15690] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 684.151303][T15698] chnl_net:caif_netlink_parms(): no params data found [ 684.414940][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.422827][T15698] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.435019][T15698] bridge_slave_0: entered allmulticast mode [ 684.444194][T15698] bridge_slave_0: entered promiscuous mode [ 684.477742][T15698] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.485432][T15698] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.492816][T15698] bridge_slave_1: entered allmulticast mode [ 684.502247][T15698] bridge_slave_1: entered promiscuous mode [ 684.547227][T15698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.565795][T15698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.616476][T15698] team0: Port device team_slave_0 added [ 684.626344][T15698] team0: Port device team_slave_1 added [ 684.657818][T15698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.664828][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.690954][T15698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.703748][T15698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.710818][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.737180][T15698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.785820][T15698] hsr_slave_0: entered promiscuous mode [ 684.792198][T15698] hsr_slave_1: entered promiscuous mode [ 685.410438][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012d6f000: rx timeout, send abort [ 685.438131][T13140] Bluetooth: hci0: command tx timeout [ 685.919762][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012d6f000: abort rx timeout. Force session deactivation [ 687.518044][T13140] Bluetooth: hci0: command tx timeout [ 689.602647][T13140] Bluetooth: hci0: command tx timeout [ 690.053422][T15749] Invalid ELF header magic: != ELF [ 690.802637][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.814713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.571972][T15786] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2484'. [ 691.606748][T15786] SÎ: renamed from vlan1 (while UP) [ 691.665406][T13140] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 691.678099][ T8093] Bluetooth: hci0: command tx timeout [ 695.782408][T15832] FAULT_INJECTION: forcing a failure. [ 695.782408][T15832] name failslab, interval 1, probability 0, space 0, times 0 [ 695.799673][T15832] CPU: 0 UID: 0 PID: 15832 Comm: syz.0.2495 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 695.799723][T15832] Tainted: [U]=USER [ 695.799735][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 695.799754][T15832] Call Trace: [ 695.799765][T15832] [ 695.799778][T15832] dump_stack_lvl+0x16c/0x1f0 [ 695.799828][T15832] should_fail_ex+0x512/0x640 [ 695.799866][T15832] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 695.799911][T15832] should_failslab+0xc2/0x120 [ 695.799953][T15832] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 695.800012][T15832] ? __lock_acquire+0x5ca/0x1ba0 [ 695.800054][T15832] ? __alloc_skb+0x2b2/0x380 [ 695.800101][T15832] __alloc_skb+0x2b2/0x380 [ 695.800140][T15832] ? __pfx___alloc_skb+0x10/0x10 [ 695.800185][T15832] ? find_held_lock+0x2b/0x80 [ 695.800225][T15832] alloc_skb_with_frags+0xe0/0x860 [ 695.800285][T15832] sock_alloc_send_pskb+0x7fb/0x990 [ 695.800339][T15832] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 695.800377][T15832] ? find_held_lock+0x2b/0x80 [ 695.800418][T15832] ? __lock_acquire+0x5ca/0x1ba0 [ 695.800467][T15832] __ip_append_data+0x21a2/0x41e0 [ 695.800522][T15832] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 695.800578][T15832] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 695.800635][T15832] ? __pfx___ip_append_data+0x10/0x10 [ 695.800692][T15832] ip_append_data+0x10f/0x1a0 [ 695.800741][T15832] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 695.800790][T15832] udp_sendmsg+0x11f0/0x29e0 [ 695.800841][T15832] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 695.800892][T15832] ? __pfx_udp_sendmsg+0x10/0x10 [ 695.800958][T15832] ? __pfx___might_resched+0x10/0x10 [ 695.801003][T15832] ? trace_kmalloc+0x2b/0xd0 [ 695.801045][T15832] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 695.801097][T15832] ? aa_sk_perm+0x2f4/0xb10 [ 695.801149][T15832] ? __pfx_udp_sendmsg+0x10/0x10 [ 695.801194][T15832] inet_sendmsg+0x105/0x140 [ 695.801226][T15832] ____sys_sendmsg+0x973/0xc70 [ 695.801261][T15832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.801299][T15832] ? __pfx__kstrtoull+0x10/0x10 [ 695.801358][T15832] ___sys_sendmsg+0x134/0x1d0 [ 695.801402][T15832] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.801465][T15832] ? find_held_lock+0x2b/0x80 [ 695.801524][T15832] __sys_sendmmsg+0x200/0x420 [ 695.801573][T15832] ? __pfx___sys_sendmmsg+0x10/0x10 [ 695.801628][T15832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.801693][T15832] ? fput+0x70/0xf0 [ 695.801734][T15832] ? ksys_write+0x1b9/0x240 [ 695.801766][T15832] ? __pfx_ksys_write+0x10/0x10 [ 695.801797][T15832] ? rcu_is_watching+0x12/0xc0 [ 695.801845][T15832] __x64_sys_sendmmsg+0x9c/0x100 [ 695.801884][T15832] ? lockdep_hardirqs_on+0x7c/0x110 [ 695.801925][T15832] do_syscall_64+0xcd/0x230 [ 695.801970][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.802006][T15832] RIP: 0033:0x7fdd6cb8e169 [ 695.802028][T15832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.802056][T15832] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 695.802083][T15832] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 695.802103][T15832] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 695.802121][T15832] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 695.802138][T15832] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 695.802157][T15832] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 695.802195][T15832] [ 699.810740][T15871] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2506'. [ 700.416847][T15883] FAULT_INJECTION: forcing a failure. [ 700.416847][T15883] name failslab, interval 1, probability 0, space 0, times 0 [ 700.442918][T15883] CPU: 0 UID: 0 PID: 15883 Comm: syz.0.2511 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 700.442969][T15883] Tainted: [U]=USER [ 700.442980][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 700.442998][T15883] Call Trace: [ 700.443009][T15883] [ 700.443021][T15883] dump_stack_lvl+0x16c/0x1f0 [ 700.443069][T15883] should_fail_ex+0x512/0x640 [ 700.443105][T15883] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 700.443146][T15883] should_failslab+0xc2/0x120 [ 700.443187][T15883] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 700.443225][T15883] ? getname_flags.part.0+0x4c/0x550 [ 700.443275][T15883] getname_flags.part.0+0x4c/0x550 [ 700.443322][T15883] getname_flags+0x93/0xf0 [ 700.443352][T15883] do_sys_openat2+0xb8/0x1d0 [ 700.443395][T15883] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.443452][T15883] __x64_sys_openat+0x174/0x210 [ 700.443498][T15883] ? __pfx___x64_sys_openat+0x10/0x10 [ 700.443544][T15883] ? rcu_is_watching+0x12/0xc0 [ 700.443587][T15883] do_syscall_64+0xcd/0x230 [ 700.443634][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.443671][T15883] RIP: 0033:0x7fdd6cb8e169 [ 700.443696][T15883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.443729][T15883] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.443758][T15883] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 700.443778][T15883] RDX: 0000000000008001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 700.443796][T15883] RBP: 00007fdd6cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 700.443813][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.443830][T15883] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 700.443868][T15883] [ 701.067514][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 701.326022][T15893] FAULT_INJECTION: forcing a failure. [ 701.326022][T15893] name fail_futex, interval 1, probability 0, space 0, times 0 [ 701.358118][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.3.2515 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 701.358166][T15893] Tainted: [U]=USER [ 701.358176][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 701.358194][T15893] Call Trace: [ 701.358204][T15893] [ 701.358216][T15893] dump_stack_lvl+0x16c/0x1f0 [ 701.358262][T15893] should_fail_ex+0x512/0x640 [ 701.358301][T15893] get_futex_key+0x49e/0x1000 [ 701.358358][T15893] ? __pfx_get_futex_key+0x10/0x10 [ 701.358410][T15893] ? __pfx_map_create+0x10/0x10 [ 701.358454][T15893] ? __might_fault+0xe3/0x190 [ 701.358493][T15893] ? __might_fault+0xe3/0x190 [ 701.358532][T15893] ? __might_fault+0x13b/0x190 [ 701.358584][T15893] futex_wake+0xe7/0x4e0 [ 701.358633][T15893] ? __pfx_futex_wake+0x10/0x10 [ 701.358687][T15893] ? do_writev+0x218/0x330 [ 701.358727][T15893] do_futex+0x1e3/0x350 [ 701.358767][T15893] ? __pfx_do_futex+0x10/0x10 [ 701.358818][T15893] __x64_sys_futex+0x1e0/0x4c0 [ 701.358866][T15893] ? __pfx___x64_sys_futex+0x10/0x10 [ 701.358910][T15893] ? rcu_is_watching+0x12/0xc0 [ 701.358958][T15893] do_syscall_64+0xcd/0x230 [ 701.359010][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.359044][T15893] RIP: 0033:0x7f73ec78e169 [ 701.359070][T15893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.359105][T15893] RSP: 002b:00007f73ed5560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 701.359138][T15893] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa8 RCX: 00007f73ec78e169 [ 701.359160][T15893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73ec9b5fac [ 701.359182][T15893] RBP: 00007f73ec9b5fa0 R08: 00007f73ed557000 R09: 0000000000000000 [ 701.359203][T15893] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f73ec9b5fac [ 701.359225][T15893] R13: 0000000000000000 R14: 00007fff30d6a3a0 R15: 00007fff30d6a488 [ 701.359266][T15893] [ 702.894557][T15909] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 702.919320][T15909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 709.819935][T15985] bond0: option mode: unable to set because the bond device is up [ 709.830517][T15986] bond0: option mode: unable to set because the bond device is up [ 711.605682][ T8093] Bluetooth: hci1: unexpected subevent 0x01 length: 122 > 18 [ 711.613683][ T8093] Bluetooth: hci1: Invalid handle: 0x1e1a > 0x0eff [ 711.688693][T16029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 711.694790][T16029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 711.741335][T16029] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 711.757041][T16029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 711.776893][T16029] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 711.802786][T16029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 711.809104][T16029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 711.826313][T16029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 711.849524][T16029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 711.855603][T16029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 711.865484][T16029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 711.874304][T16029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 711.881378][T16029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 711.893553][T16029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 712.888298][T16048] lo: entered allmulticast mode [ 713.006009][T16051] lo: left allmulticast mode [ 713.209159][T16051] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 713.215986][T16051] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 713.768297][ T8093] Bluetooth: hci4: command 0x0c1a tx timeout [ 713.768303][T13140] Bluetooth: hci1: command 0x0406 tx timeout [ 713.839650][T13140] Bluetooth: hci2: command 0x0c1a tx timeout [ 713.927987][T13140] Bluetooth: hci0: command 0x0c1a tx timeout [ 713.928215][ T8093] Bluetooth: hci3: command 0x0c1a tx timeout [ 715.848061][ T8093] Bluetooth: hci1: command 0x0406 tx timeout [ 715.848379][T13140] Bluetooth: hci4: command 0x0c1a tx timeout [ 715.918440][T13140] Bluetooth: hci2: command 0x0c1a tx timeout [ 715.998165][T13140] Bluetooth: hci3: command 0x0c1a tx timeout [ 716.003106][ T8093] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.036425][T16106] FAULT_INJECTION: forcing a failure. [ 717.036425][T16106] name failslab, interval 1, probability 0, space 0, times 0 [ 717.049702][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.0.2570 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 717.049734][T16106] Tainted: [U]=USER [ 717.049741][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 717.049753][T16106] Call Trace: [ 717.049760][T16106] [ 717.049767][T16106] dump_stack_lvl+0x16c/0x1f0 [ 717.049801][T16106] should_fail_ex+0x512/0x640 [ 717.049824][T16106] ? __kmalloc_noprof+0xbf/0x510 [ 717.049850][T16106] ? iovec_from_user+0x108/0x140 [ 717.049875][T16106] should_failslab+0xc2/0x120 [ 717.049902][T16106] __kmalloc_noprof+0xd2/0x510 [ 717.049931][T16106] iovec_from_user+0x108/0x140 [ 717.049959][T16106] __import_iovec+0x88/0x660 [ 717.049984][T16106] ? __might_fault+0xe3/0x190 [ 717.050007][T16106] ? __might_fault+0x13b/0x190 [ 717.050035][T16106] import_iovec+0x86/0xb0 [ 717.050064][T16106] copy_msghdr_from_user+0xf9/0x160 [ 717.050091][T16106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 717.050117][T16106] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.050147][T16106] ? kfree+0x2b6/0x4d0 [ 717.050163][T16106] ? __pfx__kstrtoull+0x10/0x10 [ 717.050194][T16106] ? ___sys_sendmsg+0x141/0x1d0 [ 717.050223][T16106] ___sys_sendmsg+0xfe/0x1d0 [ 717.050250][T16106] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.050298][T16106] ? __pfx___might_resched+0x10/0x10 [ 717.050327][T16106] __sys_sendmmsg+0x200/0x420 [ 717.050357][T16106] ? __pfx___sys_sendmmsg+0x10/0x10 [ 717.050391][T16106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 717.050430][T16106] ? fput+0x70/0xf0 [ 717.050455][T16106] ? ksys_write+0x1b9/0x240 [ 717.050475][T16106] ? __pfx_ksys_write+0x10/0x10 [ 717.050495][T16106] ? rcu_is_watching+0x12/0xc0 [ 717.050527][T16106] __x64_sys_sendmmsg+0x9c/0x100 [ 717.050553][T16106] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.050580][T16106] do_syscall_64+0xcd/0x230 [ 717.050611][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.050632][T16106] RIP: 0033:0x7fdd6cb8e169 [ 717.050648][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.050668][T16106] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 717.050687][T16106] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 717.050701][T16106] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 717.050714][T16106] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 717.050726][T16106] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 717.050739][T16106] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 717.050763][T16106] [ 717.919717][ T8093] Bluetooth: hci4: command 0x0c1a tx timeout [ 718.007861][ T8093] Bluetooth: hci2: command 0x0c1a tx timeout [ 718.084999][T13140] Bluetooth: hci3: command 0x0c1a tx timeout [ 718.086274][ T8093] Bluetooth: hci0: command 0x0c1a tx timeout [ 719.991897][T13140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 720.006590][T13140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 720.015122][T13140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 720.058156][T13140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 720.072033][T13140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 720.334707][T16142] FAULT_INJECTION: forcing a failure. [ 720.334707][T16142] name failslab, interval 1, probability 0, space 0, times 0 [ 720.386245][T16142] CPU: 1 UID: 0 PID: 16142 Comm: syz.0.2580 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 720.386295][T16142] Tainted: [U]=USER [ 720.386304][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 720.386320][T16142] Call Trace: [ 720.386330][T16142] [ 720.386341][T16142] dump_stack_lvl+0x16c/0x1f0 [ 720.386387][T16142] should_fail_ex+0x512/0x640 [ 720.386422][T16142] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 720.386462][T16142] should_failslab+0xc2/0x120 [ 720.386501][T16142] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 720.386536][T16142] ? __kernfs_new_node+0xd2/0x8a0 [ 720.386570][T16142] __kernfs_new_node+0xd2/0x8a0 [ 720.386603][T16142] ? __pfx___kernfs_new_node+0x10/0x10 [ 720.386642][T16142] ? find_held_lock+0x2b/0x80 [ 720.386675][T16142] ? kernfs_root+0xee/0x2a0 [ 720.386711][T16142] kernfs_new_node+0x13c/0x1e0 [ 720.386751][T16142] __kernfs_create_file+0x53/0x350 [ 720.386797][T16142] sysfs_add_file_mode_ns+0x207/0x3c0 [ 720.386853][T16142] sysfs_merge_group+0x1aa/0x340 [ 720.386885][T16142] ? __pfx_sysfs_merge_group+0x10/0x10 [ 720.386922][T16142] ? __pfx_dev_add_physical_location+0x10/0x10 [ 720.386969][T16142] ? bus_to_subsys+0x12d/0x160 [ 720.387010][T16142] dpm_sysfs_add+0x237/0x280 [ 720.387041][T16142] device_add+0x9a6/0x1a70 [ 720.387085][T16142] ? __pfx_device_add+0x10/0x10 [ 720.387130][T16142] nfc_register_device+0x41/0x3c0 [ 720.387179][T16142] nci_register_device+0x7f1/0xb80 [ 720.387217][T16142] ? __pfx_nci_register_device+0x10/0x10 [ 720.387259][T16142] ? lockdep_init_map_type+0x5c/0x280 [ 720.387308][T16142] virtual_ncidev_open+0x141/0x220 [ 720.387343][T16142] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 720.387377][T16142] misc_open+0x35a/0x420 [ 720.387416][T16142] ? __pfx_misc_open+0x10/0x10 [ 720.387453][T16142] chrdev_open+0x231/0x6a0 [ 720.387486][T16142] ? __pfx_apparmor_file_open+0x10/0x10 [ 720.387525][T16142] ? __pfx_chrdev_open+0x10/0x10 [ 720.387560][T16142] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 720.387612][T16142] do_dentry_open+0x741/0x1c10 [ 720.387645][T16142] ? __pfx_chrdev_open+0x10/0x10 [ 720.387687][T16142] vfs_open+0x82/0x3f0 [ 720.387751][T16142] path_openat+0x1e5e/0x2d40 [ 720.387798][T16142] ? __pfx_path_openat+0x10/0x10 [ 720.387840][T16142] do_filp_open+0x20b/0x470 [ 720.387872][T16142] ? __pfx_do_filp_open+0x10/0x10 [ 720.387937][T16142] ? alloc_fd+0x471/0x7d0 [ 720.387977][T16142] do_sys_openat2+0x11b/0x1d0 [ 720.388020][T16142] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.388088][T16142] __x64_sys_openat+0x174/0x210 [ 720.388131][T16142] ? __pfx___x64_sys_openat+0x10/0x10 [ 720.388180][T16142] ? rcu_is_watching+0x12/0xc0 [ 720.388222][T16142] do_syscall_64+0xcd/0x230 [ 720.388269][T16142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.388301][T16142] RIP: 0033:0x7fdd6cb8e169 [ 720.388325][T16142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.388355][T16142] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.388385][T16142] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 720.388405][T16142] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 720.388425][T16142] RBP: 00007fdd6cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 720.388443][T16142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.388460][T16142] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 720.388498][T16142] [ 721.035975][T16137] chnl_net:caif_netlink_parms(): no params data found [ 721.329500][T16137] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.348021][T16137] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.355279][T16137] bridge_slave_0: entered allmulticast mode [ 721.365005][T16137] bridge_slave_0: entered promiscuous mode [ 721.374234][T16137] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.381637][T16137] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.389055][T16137] bridge_slave_1: entered allmulticast mode [ 721.396811][T16137] bridge_slave_1: entered promiscuous mode [ 721.535106][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.592733][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.833924][T16137] team0: Port device team_slave_0 added [ 721.901035][T16137] team0: Port device team_slave_1 added [ 722.159436][ T8093] Bluetooth: hci5: command tx timeout [ 722.313233][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.340600][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.383065][T16165] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2584'. [ 722.458521][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.471255][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.479104][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.506585][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.597457][T16137] hsr_slave_0: entered promiscuous mode [ 722.604392][T16137] hsr_slave_1: entered promiscuous mode [ 722.610944][T16137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.628131][T16137] Cannot create hsr debugfs directory [ 723.433297][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2591'. [ 723.506785][T16182] openvswitch: HfR: Dropping previously announced user features [ 723.742252][T13140] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 724.238557][T13140] Bluetooth: hci5: command tx timeout [ 726.318697][T13140] Bluetooth: hci5: command tx timeout [ 726.891077][T16214] openvswitch: HfR: Dropping previously announced user features [ 728.398192][T13140] Bluetooth: hci5: command tx timeout [ 728.629413][T16253] capability: warning: `syz.0.2605' uses deprecated v2 capabilities in a way that may be insecure [ 731.191050][T16288] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[16288] [ 732.394537][T16306] Invalid ELF header magic: != ELF [ 733.243522][T16312] FAULT_INJECTION: forcing a failure. [ 733.243522][T16312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.277937][T16312] CPU: 0 UID: 0 PID: 16312 Comm: syz.0.2619 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 733.277988][T16312] Tainted: [U]=USER [ 733.277998][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 733.278018][T16312] Call Trace: [ 733.278029][T16312] [ 733.278042][T16312] dump_stack_lvl+0x16c/0x1f0 [ 733.278090][T16312] should_fail_ex+0x512/0x640 [ 733.278135][T16312] _copy_to_user+0x32/0xd0 [ 733.278189][T16312] simple_read_from_buffer+0xcb/0x170 [ 733.278244][T16312] proc_fail_nth_read+0x197/0x270 [ 733.278294][T16312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.278346][T16312] ? rw_verify_area+0xcf/0x680 [ 733.278395][T16312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.278445][T16312] vfs_read+0x1de/0xc70 [ 733.278483][T16312] ? __pfx___mutex_lock+0x10/0x10 [ 733.278532][T16312] ? __pfx_vfs_read+0x10/0x10 [ 733.278577][T16312] ? __fget_files+0x20e/0x3c0 [ 733.278621][T16312] ksys_read+0x12a/0x240 [ 733.278655][T16312] ? __pfx_ksys_read+0x10/0x10 [ 733.278685][T16312] ? rcu_is_watching+0x12/0xc0 [ 733.278731][T16312] do_syscall_64+0xcd/0x230 [ 733.278781][T16312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.278814][T16312] RIP: 0033:0x7fdd6cb8cb7c [ 733.278839][T16312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 733.278870][T16312] RSP: 002b:00007fdd6d942030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 733.278900][T16312] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8cb7c [ 733.278921][T16312] RDX: 000000000000000f RSI: 00007fdd6d9420a0 RDI: 0000000000000003 [ 733.278940][T16312] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 733.278958][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.278976][T16312] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 733.279018][T16312] [ 736.196656][T16341] FAULT_INJECTION: forcing a failure. [ 736.196656][T16341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.211372][T16341] CPU: 1 UID: 0 PID: 16341 Comm: syz.0.2624 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 736.211417][T16341] Tainted: [U]=USER [ 736.211426][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 736.211443][T16341] Call Trace: [ 736.211453][T16341] [ 736.211464][T16341] dump_stack_lvl+0x16c/0x1f0 [ 736.211509][T16341] should_fail_ex+0x512/0x640 [ 736.211549][T16341] should_fail_alloc_page+0xe7/0x130 [ 736.211608][T16341] prepare_alloc_pages+0x3c2/0x610 [ 736.211658][T16341] ? rcu_is_watching+0x12/0xc0 [ 736.211693][T16341] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 736.211734][T16341] ? unwind_get_return_address+0x59/0xa0 [ 736.211773][T16341] ? arch_stack_walk+0xa6/0x100 [ 736.211824][T16341] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.211867][T16341] ? __pfx_stack_trace_save+0x10/0x10 [ 736.211911][T16341] ? stack_depot_save_flags+0x28/0xa50 [ 736.211964][T16341] ? kasan_save_stack+0x42/0x60 [ 736.212002][T16341] ? __lock_acquire+0xaa4/0x1ba0 [ 736.212041][T16341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.212086][T16341] ? policy_nodemask+0xea/0x4e0 [ 736.212130][T16341] alloc_pages_mpol+0x1fb/0x550 [ 736.212171][T16341] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 736.212206][T16341] ? __page_table_check_ptes_set+0x1ae/0x420 [ 736.212245][T16341] ? find_held_lock+0x2b/0x80 [ 736.212281][T16341] alloc_pages_noprof+0x131/0x390 [ 736.212319][T16341] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 736.212357][T16341] get_free_pages_noprof+0xc/0x40 [ 736.212397][T16341] kasan_populate_vmalloc_pte+0x2d/0x160 [ 736.212430][T16341] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 736.212463][T16341] __apply_to_page_range+0x617/0xd60 [ 736.212494][T16341] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 736.212532][T16341] ? __pfx___apply_to_page_range+0x10/0x10 [ 736.212561][T16341] ? alloc_vmap_area+0x872/0x2970 [ 736.212629][T16341] alloc_vmap_area+0x919/0x2970 [ 736.212691][T16341] ? __pfx_alloc_vmap_area+0x10/0x10 [ 736.212747][T16341] __get_vm_area_node+0x1a7/0x300 [ 736.212810][T16341] __vmalloc_node_range_noprof+0x277/0x1540 [ 736.212840][T16341] ? pcpu_mem_zalloc+0x54/0xb0 [ 736.212882][T16341] ? pcpu_mem_zalloc+0x54/0xb0 [ 736.212922][T16341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 736.212966][T16341] ? rcu_is_watching+0x12/0xc0 [ 736.212999][T16341] ? pcpu_mem_zalloc+0x54/0xb0 [ 736.213028][T16341] __vmalloc_noprof+0x6d/0x90 [ 736.213056][T16341] ? pcpu_mem_zalloc+0x54/0xb0 [ 736.213087][T16341] pcpu_mem_zalloc+0x54/0xb0 [ 736.213117][T16341] pcpu_create_chunk+0x432/0x730 [ 736.213155][T16341] pcpu_alloc_noprof+0x11e1/0x1470 [ 736.213206][T16341] bpf_map_alloc_percpu+0x9a/0x4b0 [ 736.213249][T16341] htab_map_alloc+0x10be/0x1540 [ 736.213300][T16341] ? ns_capable+0xd7/0x110 [ 736.213336][T16341] map_create+0x58f/0x1db0 [ 736.213385][T16341] ? __pfx_map_create+0x10/0x10 [ 736.213417][T16341] ? __might_fault+0xe3/0x190 [ 736.213449][T16341] ? __might_fault+0xe3/0x190 [ 736.213478][T16341] ? __might_fault+0x13b/0x190 [ 736.213522][T16341] __sys_bpf+0x47cc/0x4d80 [ 736.213559][T16341] ? __pfx_futex_wake+0x10/0x10 [ 736.213598][T16341] ? __pfx___sys_bpf+0x10/0x10 [ 736.213636][T16341] ? do_writev+0x218/0x330 [ 736.213667][T16341] ? do_futex+0x122/0x350 [ 736.213697][T16341] ? __pfx_do_futex+0x10/0x10 [ 736.213747][T16341] ? xfd_validate_state+0x5d/0x180 [ 736.213778][T16341] ? rcu_is_watching+0x12/0xc0 [ 736.213813][T16341] __x64_sys_bpf+0x78/0xc0 [ 736.213855][T16341] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.213895][T16341] do_syscall_64+0xcd/0x230 [ 736.213970][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.214005][T16341] RIP: 0033:0x7fdd6cb8e169 [ 736.214031][T16341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.214064][T16341] RSP: 002b:00007fdd6a5d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.214096][T16341] RAX: ffffffffffffffda RBX: 00007fdd6cdb6240 RCX: 00007fdd6cb8e169 [ 736.214118][T16341] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 736.214138][T16341] RBP: 00007fdd6cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 736.214158][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.214177][T16341] R13: 0000000000000000 R14: 00007fdd6cdb6240 R15: 00007ffc3af5aa28 [ 736.214218][T16341] [ 736.642338][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.220792][T16383] nfs: Bad value for 'source' [ 740.250833][T16393] Invalid ELF header magic: != ELF [ 740.985144][T16406] syz.0.2640 (16406): attempted to duplicate a private mapping with mremap. This is not supported. [ 741.752741][T16410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2641'. [ 742.085065][T16419] FAULT_INJECTION: forcing a failure. [ 742.085065][T16419] name fail_futex, interval 1, probability 0, space 0, times 0 [ 742.098033][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.0.2643 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 742.098084][T16419] Tainted: [U]=USER [ 742.098097][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.098113][T16419] Call Trace: [ 742.098122][T16419] [ 742.098131][T16419] dump_stack_lvl+0x16c/0x1f0 [ 742.098171][T16419] should_fail_ex+0x512/0x640 [ 742.098204][T16419] get_futex_key+0x49e/0x1000 [ 742.098235][T16419] ? __pfx_get_futex_key+0x10/0x10 [ 742.098267][T16419] ? llist_add_batch+0x103/0x170 [ 742.098307][T16419] futex_wait_setup+0x78/0x290 [ 742.098348][T16419] __futex_wait+0x266/0x3c0 [ 742.098385][T16419] ? __pfx___futex_wait+0x10/0x10 [ 742.098418][T16419] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 742.098456][T16419] ? __pfx_futex_wake_mark+0x10/0x10 [ 742.098502][T16419] futex_wait+0xe8/0x380 [ 742.098535][T16419] ? __pfx_futex_wait+0x10/0x10 [ 742.098575][T16419] ? percpu_counter_add_batch+0xb8/0x1f0 [ 742.098600][T16419] ? errseq_sample+0x53/0x70 [ 742.098630][T16419] ? file_init_path+0x4fe/0x760 [ 742.098668][T16419] do_futex+0x229/0x350 [ 742.098697][T16419] ? __pfx_do_futex+0x10/0x10 [ 742.098725][T16419] ? __fget_files+0x204/0x3c0 [ 742.098754][T16419] __x64_sys_futex+0x1e0/0x4c0 [ 742.098786][T16419] ? __pfx___x64_sys_futex+0x10/0x10 [ 742.098823][T16419] ? __sys_setsockopt+0x14d/0x1a0 [ 742.098854][T16419] ? rcu_is_watching+0x12/0xc0 [ 742.098887][T16419] do_syscall_64+0xcd/0x230 [ 742.098927][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.098952][T16419] RIP: 0033:0x7fdd6cb8e169 [ 742.098972][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.098997][T16419] RSP: 002b:00007fdd6d9420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.099019][T16419] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa8 RCX: 00007fdd6cb8e169 [ 742.099035][T16419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd6cdb5fa8 [ 742.099050][T16419] RBP: 00007fdd6cdb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 742.099065][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6cdb5fac [ 742.099080][T16419] R13: 0000000000000000 R14: 00007ffc3af5a940 R15: 00007ffc3af5aa28 [ 742.099109][T16419] [ 743.995637][ T8093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 744.021814][ T8093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 744.032715][ T8093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 744.050471][ T8093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 744.067756][ T8093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 745.031493][T16435] chnl_net:caif_netlink_parms(): no params data found [ 745.187381][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.197637][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.206846][T16435] bridge_slave_0: entered allmulticast mode [ 745.215079][T16435] bridge_slave_0: entered promiscuous mode [ 745.235529][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.242863][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.250269][T16435] bridge_slave_1: entered allmulticast mode [ 745.257467][T16435] bridge_slave_1: entered promiscuous mode [ 745.320282][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.337624][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.380873][T16435] team0: Port device team_slave_0 added [ 745.390186][T16435] team0: Port device team_slave_1 added [ 745.431819][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.439386][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.465474][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.478670][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.485698][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.513051][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.577567][T16435] hsr_slave_0: entered promiscuous mode [ 745.584119][T16435] hsr_slave_1: entered promiscuous mode [ 745.590615][T16435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.599352][T16435] Cannot create hsr debugfs directory [ 745.807999][T16464] FAULT_INJECTION: forcing a failure. [ 745.807999][T16464] name failslab, interval 1, probability 0, space 0, times 0 [ 745.821260][T16464] CPU: 1 UID: 0 PID: 16464 Comm: syz.3.2649 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 745.821314][T16464] Tainted: [U]=USER [ 745.821324][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 745.821342][T16464] Call Trace: [ 745.821351][T16464] [ 745.821362][T16464] dump_stack_lvl+0x16c/0x1f0 [ 745.821407][T16464] should_fail_ex+0x512/0x640 [ 745.821441][T16464] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 745.821476][T16464] should_failslab+0xc2/0x120 [ 745.821514][T16464] __kmalloc_cache_noprof+0x6a/0x3e0 [ 745.821546][T16464] ? alloc_pipe_info+0x10e/0x590 [ 745.821585][T16464] alloc_pipe_info+0x10e/0x590 [ 745.821623][T16464] splice_direct_to_actor+0x77d/0xa30 [ 745.821672][T16464] ? __pfx_direct_splice_actor+0x10/0x10 [ 745.821723][T16464] ? __pfx_aa_file_perm+0x10/0x10 [ 745.821764][T16464] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 745.821809][T16464] ? get_pid_task+0xfc/0x250 [ 745.821854][T16464] ? rcu_is_watching+0x12/0xc0 [ 745.821890][T16464] do_splice_direct+0x174/0x240 [ 745.821936][T16464] ? __pfx_do_splice_direct+0x10/0x10 [ 745.821983][T16464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 745.822036][T16464] ? rw_verify_area+0xcf/0x680 [ 745.822085][T16464] do_sendfile+0xafd/0xe50 [ 745.822120][T16464] ? __pfx_do_sendfile+0x10/0x10 [ 745.822150][T16464] ? __fget_files+0x20e/0x3c0 [ 745.822188][T16464] __x64_sys_sendfile64+0x1d8/0x220 [ 745.822224][T16464] ? ksys_write+0x1b9/0x240 [ 745.822254][T16464] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 745.822290][T16464] ? rcu_is_watching+0x12/0xc0 [ 745.822336][T16464] do_syscall_64+0xcd/0x230 [ 745.822382][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.822411][T16464] RIP: 0033:0x7f73ec78e169 [ 745.822434][T16464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.822463][T16464] RSP: 002b:00007f73ed556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 745.822490][T16464] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa0 RCX: 00007f73ec78e169 [ 745.822509][T16464] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 745.822526][T16464] RBP: 00007f73ed556090 R08: 0000000000000000 R09: 0000000000000000 [ 745.822544][T16464] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 745.822562][T16464] R13: 0000000000000000 R14: 00007f73ec9b5fa0 R15: 00007fff30d6a488 [ 745.822599][T16464] [ 746.163723][ T8093] Bluetooth: hci6: command tx timeout [ 747.445953][T16468] Invalid ELF header magic: != ELF [ 748.242878][ T8093] Bluetooth: hci6: command tx timeout [ 749.869090][T16518] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 749.877218][T16518] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 750.318104][ T8093] Bluetooth: hci6: command tx timeout [ 750.775206][T16511] Invalid ELF header magic: != ELF [ 752.243800][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.256509][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.403646][ T8093] Bluetooth: hci6: command tx timeout [ 757.956076][T16624] FAULT_INJECTION: forcing a failure. [ 757.956076][T16624] name failslab, interval 1, probability 0, space 0, times 0 [ 757.969267][T16624] CPU: 1 UID: 0 PID: 16624 Comm: syz.0.2690 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 757.969315][T16624] Tainted: [U]=USER [ 757.969326][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 757.969343][T16624] Call Trace: [ 757.969354][T16624] [ 757.969366][T16624] dump_stack_lvl+0x16c/0x1f0 [ 757.969414][T16624] should_fail_ex+0x512/0x640 [ 757.969449][T16624] ? __kmalloc_noprof+0xbf/0x510 [ 757.969488][T16624] ? alloc_pipe_info+0x1ec/0x590 [ 757.969522][T16624] should_failslab+0xc2/0x120 [ 757.969561][T16624] __kmalloc_noprof+0xd2/0x510 [ 757.969606][T16624] alloc_pipe_info+0x1ec/0x590 [ 757.969645][T16624] splice_direct_to_actor+0x77d/0xa30 [ 757.969697][T16624] ? __pfx_direct_splice_actor+0x10/0x10 [ 757.969759][T16624] ? __pfx_aa_file_perm+0x10/0x10 [ 757.969804][T16624] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 757.969851][T16624] ? get_pid_task+0xfc/0x250 [ 757.969906][T16624] do_splice_direct+0x174/0x240 [ 757.969954][T16624] ? __pfx_do_splice_direct+0x10/0x10 [ 757.970003][T16624] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 757.970056][T16624] ? rw_verify_area+0xcf/0x680 [ 757.970108][T16624] do_sendfile+0xafd/0xe50 [ 757.970145][T16624] ? __pfx_do_sendfile+0x10/0x10 [ 757.970176][T16624] ? __fget_files+0x20e/0x3c0 [ 757.970215][T16624] __x64_sys_sendfile64+0x1d8/0x220 [ 757.970251][T16624] ? ksys_write+0x1b9/0x240 [ 757.970283][T16624] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 757.970321][T16624] ? rcu_is_watching+0x12/0xc0 [ 757.970363][T16624] do_syscall_64+0xcd/0x230 [ 757.970412][T16624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.970443][T16624] RIP: 0033:0x7fdd6cb8e169 [ 757.970467][T16624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.970498][T16624] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.970522][T16624] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 757.970540][T16624] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 757.970555][T16624] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 757.970571][T16624] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 757.970587][T16624] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 757.970618][T16624] [ 759.703791][T16645] Invalid ELF header magic: != ELF [ 761.293891][T16661] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 761.303058][T16661] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 762.890199][T16675] Invalid ELF header magic: != ELF [ 765.494927][T16712] openvswitch: HfR: Dropping previously announced user features [ 767.739717][T16753] Invalid ELF header magic: != ELF [ 769.019669][T16765] netlink: 'syz.3.2721': attribute type 1 has an invalid length. [ 769.046500][T16768] openvswitch: HfR: Dropping previously announced user features [ 770.933838][T16790] Invalid ELF header magic: != ELF [ 771.616553][T16779] Invalid ELF header magic: != ELF [ 772.951393][T16803] openvswitch: HfR: Dropping previously announced user features [ 773.242124][T16811] FAULT_INJECTION: forcing a failure. [ 773.242124][T16811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.263012][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.0.2732 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 773.263056][T16811] Tainted: [U]=USER [ 773.263065][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 773.263081][T16811] Call Trace: [ 773.263091][T16811] [ 773.263101][T16811] dump_stack_lvl+0x16c/0x1f0 [ 773.263144][T16811] should_fail_ex+0x512/0x640 [ 773.263183][T16811] _copy_from_user+0x2e/0xd0 [ 773.263221][T16811] input_event_from_user+0xb9/0x290 [ 773.263251][T16811] ? __pfx_input_event_from_user+0x10/0x10 [ 773.263280][T16811] ? __pfx___might_resched+0x10/0x10 [ 773.263313][T16811] ? input_inject_event+0x82/0x390 [ 773.263345][T16811] evdev_write+0x26b/0x440 [ 773.263393][T16811] ? __pfx_evdev_write+0x10/0x10 [ 773.263467][T16811] ? bpf_lsm_file_permission+0x9/0x10 [ 773.263495][T16811] ? security_file_permission+0x71/0x210 [ 773.263537][T16811] ? rw_verify_area+0xcf/0x680 [ 773.263589][T16811] vfs_write+0x25c/0x1180 [ 773.263617][T16811] ? __pfx_evdev_write+0x10/0x10 [ 773.263672][T16811] ? __pfx_vfs_write+0x10/0x10 [ 773.263700][T16811] ? find_held_lock+0x2b/0x80 [ 773.263732][T16811] ? __fget_files+0x204/0x3c0 [ 773.263766][T16811] ? __fget_files+0x20e/0x3c0 [ 773.263806][T16811] ksys_write+0x205/0x240 [ 773.263836][T16811] ? __pfx_ksys_write+0x10/0x10 [ 773.263865][T16811] ? rcu_is_watching+0x12/0xc0 [ 773.263905][T16811] do_syscall_64+0xcd/0x230 [ 773.263976][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.264007][T16811] RIP: 0033:0x7fdd6cb8e169 [ 773.264031][T16811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.264061][T16811] RSP: 002b:00007fdd6d942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.264089][T16811] RAX: ffffffffffffffda RBX: 00007fdd6cdb5fa0 RCX: 00007fdd6cb8e169 [ 773.264110][T16811] RDX: 00000000000007fe RSI: 0000200000000000 RDI: 0000000000000003 [ 773.264129][T16811] RBP: 00007fdd6d942090 R08: 0000000000000000 R09: 0000000000000000 [ 773.264147][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.264166][T16811] R13: 0000000000000000 R14: 00007fdd6cdb5fa0 R15: 00007ffc3af5aa28 [ 773.264205][T16811] [ 775.126883][T16828] Invalid ELF header magic: != ELF [ 775.358870][T16818] Invalid ELF header magic: != ELF [ 776.143683][T16836] openvswitch: HfR: Dropping previously announced user features [ 778.979533][T16870] FAULT_INJECTION: forcing a failure. [ 778.979533][T16870] name fail_futex, interval 1, probability 0, space 0, times 0 [ 779.003302][T16870] CPU: 0 UID: 0 PID: 16870 Comm: syz.3.2745 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 779.003348][T16870] Tainted: [U]=USER [ 779.003359][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 779.003377][T16870] Call Trace: [ 779.003387][T16870] [ 779.003398][T16870] dump_stack_lvl+0x16c/0x1f0 [ 779.003445][T16870] should_fail_ex+0x512/0x640 [ 779.003484][T16870] get_futex_key+0x49e/0x1000 [ 779.003517][T16870] ? vma_set_page_prot+0xb1/0x120 [ 779.003565][T16870] ? __pfx_get_futex_key+0x10/0x10 [ 779.003600][T16870] ? find_held_lock+0x2b/0x80 [ 779.003629][T16870] ? do_mprotect_pkey+0x4c3/0xd50 [ 779.003666][T16870] futex_wake+0xe7/0x4e0 [ 779.003702][T16870] ? up_write+0x1b2/0x520 [ 779.003746][T16870] ? __pfx_futex_wake+0x10/0x10 [ 779.003800][T16870] do_futex+0x1e3/0x350 [ 779.003833][T16870] ? __pfx_do_futex+0x10/0x10 [ 779.003876][T16870] __x64_sys_futex+0x1e0/0x4c0 [ 779.003918][T16870] ? __pfx___x64_sys_futex+0x10/0x10 [ 779.003972][T16870] ? rcu_is_watching+0x12/0xc0 [ 779.004019][T16870] do_syscall_64+0xcd/0x230 [ 779.004070][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.004105][T16870] RIP: 0033:0x7f73ec78e169 [ 779.004131][T16870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.004164][T16870] RSP: 002b:00007f73ed5560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 779.004195][T16870] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa8 RCX: 00007f73ec78e169 [ 779.004217][T16870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73ec9b5fac [ 779.004238][T16870] RBP: 00007f73ec9b5fa0 R08: 00007f73ed557000 R09: 0000000000000000 [ 779.004258][T16870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73ec9b5fac [ 779.004289][T16870] R13: 0000000000000000 R14: 00007fff30d6a3a0 R15: 00007fff30d6a488 [ 779.004332][T16870] [ 779.745350][T16865] Invalid ELF header magic: != ELF [ 780.397402][T13140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 780.407955][T13140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 780.416992][T13140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 780.426396][T13140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 780.435491][T13140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 781.243867][T16885] chnl_net:caif_netlink_parms(): no params data found [ 781.909934][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.919857][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.927047][T16885] bridge_slave_0: entered allmulticast mode [ 781.981804][T16885] bridge_slave_0: entered promiscuous mode [ 782.038633][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.048094][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.059907][T16885] bridge_slave_1: entered allmulticast mode [ 782.087504][T16885] bridge_slave_1: entered promiscuous mode [ 782.277068][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.332540][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.440211][T16885] team0: Port device team_slave_0 added [ 782.472251][T16885] team0: Port device team_slave_1 added [ 782.483360][ T8093] Bluetooth: hci7: command tx timeout [ 782.590143][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.607989][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.679480][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.716487][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.728181][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.806938][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.000869][T16885] hsr_slave_0: entered promiscuous mode [ 783.022125][T16885] hsr_slave_1: entered promiscuous mode [ 783.034440][T16885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.043232][T16885] Cannot create hsr debugfs directory [ 784.563819][ T8093] Bluetooth: hci7: command tx timeout [ 786.638170][ T8093] Bluetooth: hci7: command tx timeout [ 788.718044][ T8093] Bluetooth: hci7: command tx timeout [ 789.576659][T16990] tipc: Can't bind to reserved service type 1 [ 789.621692][T16989] openvswitch: HfR: Dropping previously announced user features [ 790.564426][T16999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 790.574142][T16999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 791.473395][T17023] FAULT_INJECTION: forcing a failure. [ 791.473395][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 791.487453][T17023] CPU: 1 UID: 0 PID: 17023 Comm: syz.3.2781 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 791.487498][T17023] Tainted: [U]=USER [ 791.487508][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 791.487525][T17023] Call Trace: [ 791.487534][T17023] [ 791.487545][T17023] dump_stack_lvl+0x16c/0x1f0 [ 791.487587][T17023] should_fail_ex+0x512/0x640 [ 791.487619][T17023] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 791.487657][T17023] should_failslab+0xc2/0x120 [ 791.487692][T17023] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 791.487724][T17023] ? __pfx_acct_collect+0x10/0x10 [ 791.487763][T17023] ? taskstats_exit+0x654/0xbe0 [ 791.487805][T17023] taskstats_exit+0x654/0xbe0 [ 791.487850][T17023] ? __pfx_taskstats_exit+0x10/0x10 [ 791.487896][T17023] do_exit+0x85f/0x2c30 [ 791.487935][T17023] ? __pfx_futex_wake_mark+0x10/0x10 [ 791.487978][T17023] ? __pfx_do_exit+0x10/0x10 [ 791.488018][T17023] ? do_raw_spin_lock+0x12c/0x2b0 [ 791.488042][T17023] ? find_held_lock+0x2b/0x80 [ 791.488077][T17023] do_group_exit+0xd3/0x2a0 [ 791.488140][T17023] get_signal+0x2673/0x26d0 [ 791.488190][T17023] ? __pfx_get_signal+0x10/0x10 [ 791.488226][T17023] ? do_futex+0x122/0x350 [ 791.488259][T17023] ? __pfx_do_futex+0x10/0x10 [ 791.488297][T17023] arch_do_signal_or_restart+0x8f/0x7a0 [ 791.488343][T17023] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 791.488401][T17023] ? rcu_is_watching+0x12/0xc0 [ 791.488446][T17023] syscall_exit_to_user_mode+0x150/0x2a0 [ 791.488491][T17023] do_syscall_64+0xda/0x230 [ 791.488536][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.488565][T17023] RIP: 0033:0x7f73ec78e169 [ 791.488586][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.488615][T17023] RSP: 002b:00007f73ed5560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 791.488643][T17023] RAX: fffffffffffffe00 RBX: 00007f73ec9b5fa8 RCX: 00007f73ec78e169 [ 791.488663][T17023] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f73ec9b5fa8 [ 791.488680][T17023] RBP: 00007f73ec9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 791.488696][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73ec9b5fac [ 791.488713][T17023] R13: 0000000000000000 R14: 00007fff30d6a3a0 R15: 00007fff30d6a488 [ 791.488749][T17023] [ 792.080828][T17021] Invalid ELF header magic: != ELF [ 793.306563][T17028] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(4095.0.0), cmd(2) [ 794.144706][T17059] FAULT_INJECTION: forcing a failure. [ 794.144706][T17059] name failslab, interval 1, probability 0, space 0, times 0 [ 794.194336][T17059] CPU: 0 UID: 0 PID: 17059 Comm: syz.0.2788 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 794.194386][T17059] Tainted: [U]=USER [ 794.194397][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.194414][T17059] Call Trace: [ 794.194425][T17059] [ 794.194437][T17059] dump_stack_lvl+0x16c/0x1f0 [ 794.194486][T17059] should_fail_ex+0x512/0x640 [ 794.194524][T17059] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 794.194566][T17059] should_failslab+0xc2/0x120 [ 794.194610][T17059] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 794.194647][T17059] ? __pfx_acct_collect+0x10/0x10 [ 794.194693][T17059] ? taskstats_exit+0x654/0xbe0 [ 794.194741][T17059] taskstats_exit+0x654/0xbe0 [ 794.194787][T17059] ? __pfx_taskstats_exit+0x10/0x10 [ 794.194842][T17059] do_exit+0x85f/0x2c30 [ 794.194888][T17059] ? __pfx_futex_wake_mark+0x10/0x10 [ 794.194940][T17059] ? __pfx_do_exit+0x10/0x10 [ 794.194987][T17059] ? do_raw_spin_lock+0x12c/0x2b0 [ 794.195017][T17059] ? find_held_lock+0x2b/0x80 [ 794.195058][T17059] do_group_exit+0xd3/0x2a0 [ 794.195122][T17059] get_signal+0x2673/0x26d0 [ 794.195185][T17059] ? __pfx_get_signal+0x10/0x10 [ 794.195218][T17059] ? do_futex+0x122/0x350 [ 794.195254][T17059] ? __pfx_do_futex+0x10/0x10 [ 794.195290][T17059] arch_do_signal_or_restart+0x8f/0x7a0 [ 794.195334][T17059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 794.195387][T17059] ? rcu_is_watching+0x12/0xc0 [ 794.195422][T17059] syscall_exit_to_user_mode+0x150/0x2a0 [ 794.195464][T17059] do_syscall_64+0xda/0x230 [ 794.195505][T17059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.195534][T17059] RIP: 0033:0x7fdd6cb8e169 [ 794.195555][T17059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.195582][T17059] RSP: 002b:00007fdd6d9420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 794.195607][T17059] RAX: fffffffffffffe00 RBX: 00007fdd6cdb5fa8 RCX: 00007fdd6cb8e169 [ 794.195625][T17059] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd6cdb5fa8 [ 794.195642][T17059] RBP: 00007fdd6cdb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 794.195659][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6cdb5fac [ 794.195675][T17059] R13: 0000000000000000 R14: 00007ffc3af5a940 R15: 00007ffc3af5aa28 [ 794.195710][T17059] [ 794.449383][T17054] Invalid ELF header magic: != ELF [ 795.661190][T17077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2794'. [ 795.725705][T17079] FAULT_INJECTION: forcing a failure. [ 795.725705][T17079] name failslab, interval 1, probability 0, space 0, times 0 [ 795.757817][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.3.2795 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 795.757869][T17079] Tainted: [U]=USER [ 795.757879][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 795.757898][T17079] Call Trace: [ 795.757916][T17079] [ 795.757927][T17079] dump_stack_lvl+0x16c/0x1f0 [ 795.757972][T17079] should_fail_ex+0x512/0x640 [ 795.758006][T17079] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 795.758046][T17079] should_failslab+0xc2/0x120 [ 795.758085][T17079] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 795.758121][T17079] ? security_file_alloc+0x34/0x2b0 [ 795.758166][T17079] security_file_alloc+0x34/0x2b0 [ 795.758205][T17079] init_file+0x93/0x4c0 [ 795.758243][T17079] alloc_empty_file+0x73/0x1e0 [ 795.758283][T17079] path_openat+0xe0/0x2d40 [ 795.758311][T17079] ? __x64_sys_openat+0x174/0x210 [ 795.758350][T17079] ? do_syscall_64+0xcd/0x230 [ 795.758389][T17079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.758431][T17079] ? __pfx_path_openat+0x10/0x10 [ 795.758470][T17079] do_filp_open+0x20b/0x470 [ 795.758501][T17079] ? __pfx_do_filp_open+0x10/0x10 [ 795.758556][T17079] ? alloc_fd+0x471/0x7d0 [ 795.758591][T17079] do_sys_openat2+0x11b/0x1d0 [ 795.758631][T17079] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.758683][T17079] __x64_sys_openat+0x174/0x210 [ 795.758724][T17079] ? __pfx___x64_sys_openat+0x10/0x10 [ 795.758768][T17079] ? rcu_is_watching+0x12/0xc0 [ 795.758807][T17079] do_syscall_64+0xcd/0x230 [ 795.758850][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.758878][T17079] RIP: 0033:0x7f73ec78e169 [ 795.758906][T17079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.758936][T17079] RSP: 002b:00007f73ed556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.758963][T17079] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa0 RCX: 00007f73ec78e169 [ 795.758983][T17079] RDX: 000000000021a0c2 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 795.759001][T17079] RBP: 00007f73ec810a68 R08: 0000000000000000 R09: 0000000000000000 [ 795.759017][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.759033][T17079] R13: 0000000000000000 R14: 00007f73ec9b5fa0 R15: 00007fff30d6a488 [ 795.759068][T17079] [ 796.775777][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 797.578894][T17102] openvswitch: HfR: Dropping previously announced user features [ 797.719849][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 797.729957][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 798.544687][T17122] Invalid ELF header magic: != ELF [ 799.291987][T17131] openvswitch: HfR: Dropping previously announced user features [ 800.640060][T17159] FAULT_INJECTION: forcing a failure. [ 800.640060][T17159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.653507][T17159] CPU: 0 UID: 0 PID: 17159 Comm: syz.3.2818 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 800.653550][T17159] Tainted: [U]=USER [ 800.653560][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 800.653575][T17159] Call Trace: [ 800.653584][T17159] [ 800.653595][T17159] dump_stack_lvl+0x16c/0x1f0 [ 800.653638][T17159] should_fail_ex+0x512/0x640 [ 800.653676][T17159] _copy_from_user+0x2e/0xd0 [ 800.653714][T17159] input_event_from_user+0xb9/0x290 [ 800.653743][T17159] ? __pfx_input_event_from_user+0x10/0x10 [ 800.653771][T17159] ? __pfx___might_resched+0x10/0x10 [ 800.653807][T17159] ? input_inject_event+0x1a5/0x390 [ 800.653839][T17159] evdev_write+0x26b/0x440 [ 800.653886][T17159] ? __pfx_evdev_write+0x10/0x10 [ 800.653931][T17159] ? bpf_lsm_file_permission+0x9/0x10 [ 800.653957][T17159] ? security_file_permission+0x71/0x210 [ 800.654017][T17159] ? rw_verify_area+0xcf/0x680 [ 800.654073][T17159] vfs_write+0x25c/0x1180 [ 800.654104][T17159] ? __pfx_evdev_write+0x10/0x10 [ 800.654162][T17159] ? __pfx_vfs_write+0x10/0x10 [ 800.654192][T17159] ? find_held_lock+0x2b/0x80 [ 800.654228][T17159] ? __fget_files+0x204/0x3c0 [ 800.654265][T17159] ? __fget_files+0x20e/0x3c0 [ 800.654308][T17159] ksys_write+0x205/0x240 [ 800.654339][T17159] ? __pfx_ksys_write+0x10/0x10 [ 800.654370][T17159] ? rcu_is_watching+0x12/0xc0 [ 800.654416][T17159] do_syscall_64+0xcd/0x230 [ 800.654468][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.654500][T17159] RIP: 0033:0x7f73ec78e169 [ 800.654525][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.654557][T17159] RSP: 002b:00007f73ed556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.654585][T17159] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa0 RCX: 00007f73ec78e169 [ 800.654606][T17159] RDX: 00000000000007fe RSI: 0000200000000000 RDI: 0000000000000003 [ 800.654626][T17159] RBP: 00007f73ed556090 R08: 0000000000000000 R09: 0000000000000000 [ 800.654645][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.654663][T17159] R13: 0000000000000000 R14: 00007f73ec9b5fa0 R15: 00007fff30d6a488 [ 800.654704][T17159] [ 801.045605][T17161] openvswitch: HfR: Dropping previously announced user features [ 802.693448][T17189] Invalid ELF header magic: != ELF [ 803.540188][T13140] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 803.553198][T13140] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 803.565205][T13140] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 803.573508][T13140] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 803.582368][T13140] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 803.786318][T17199] chnl_net:caif_netlink_parms(): no params data found [ 803.877800][T17199] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.885426][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.894100][T17199] bridge_slave_0: entered allmulticast mode [ 803.902639][T17199] bridge_slave_0: entered promiscuous mode [ 803.911324][T17199] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.918612][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.925752][T17199] bridge_slave_1: entered allmulticast mode [ 803.933880][T17199] bridge_slave_1: entered promiscuous mode [ 803.975101][T17199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.987309][T17199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.030129][T17199] team0: Port device team_slave_0 added [ 804.039896][T17199] team0: Port device team_slave_1 added [ 804.072842][T17199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.081048][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.107633][T17199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.120292][T17199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.127247][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.153785][T17199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.206971][T17199] hsr_slave_0: entered promiscuous mode [ 804.213432][T17199] hsr_slave_1: entered promiscuous mode [ 804.220040][T17199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.228050][T17199] Cannot create hsr debugfs directory [ 805.598014][T13140] Bluetooth: hci8: command tx timeout [ 807.678071][T13140] Bluetooth: hci8: command tx timeout [ 808.860042][T17263] Invalid ELF header magic: != ELF [ 809.768011][T13140] Bluetooth: hci8: command tx timeout [ 810.114807][ T30] audit: type=1806 audit(6040113701.761:12): xattr="0" res=-22 [ 811.847941][T13140] Bluetooth: hci8: command tx timeout [ 813.681915][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.688319][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.300363][T17310] FAULT_INJECTION: forcing a failure. [ 814.300363][T17310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.326259][T17310] CPU: 1 UID: 0 PID: 17310 Comm: syz.3.2858 Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 814.326303][T17310] Tainted: [U]=USER [ 814.326313][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 814.326330][T17310] Call Trace: [ 814.326340][T17310] [ 814.326352][T17310] dump_stack_lvl+0x16c/0x1f0 [ 814.326406][T17310] should_fail_ex+0x512/0x640 [ 814.326447][T17310] _copy_from_user+0x2e/0xd0 [ 814.326487][T17310] input_event_from_user+0xb9/0x290 [ 814.326518][T17310] ? __pfx_input_event_from_user+0x10/0x10 [ 814.326549][T17310] ? __pfx___might_resched+0x10/0x10 [ 814.326584][T17310] ? input_inject_event+0x1a5/0x390 [ 814.326626][T17310] evdev_write+0x26b/0x440 [ 814.326677][T17310] ? __pfx_evdev_write+0x10/0x10 [ 814.326726][T17310] ? bpf_lsm_file_permission+0x9/0x10 [ 814.326755][T17310] ? security_file_permission+0x71/0x210 [ 814.326797][T17310] ? rw_verify_area+0xcf/0x680 [ 814.326847][T17310] vfs_write+0x25c/0x1180 [ 814.326876][T17310] ? __pfx_evdev_write+0x10/0x10 [ 814.326929][T17310] ? __pfx_vfs_write+0x10/0x10 [ 814.326956][T17310] ? find_held_lock+0x2b/0x80 [ 814.326988][T17310] ? __fget_files+0x204/0x3c0 [ 814.327021][T17310] ? __fget_files+0x20e/0x3c0 [ 814.327060][T17310] ksys_write+0x205/0x240 [ 814.327090][T17310] ? __pfx_ksys_write+0x10/0x10 [ 814.327119][T17310] ? rcu_is_watching+0x12/0xc0 [ 814.327159][T17310] do_syscall_64+0xcd/0x230 [ 814.327204][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.327234][T17310] RIP: 0033:0x7f73ec78e169 [ 814.327256][T17310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.327285][T17310] RSP: 002b:00007f73ed556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.327312][T17310] RAX: ffffffffffffffda RBX: 00007f73ec9b5fa0 RCX: 00007f73ec78e169 [ 814.327331][T17310] RDX: 00000000000007fe RSI: 0000200000000000 RDI: 0000000000000003 [ 814.327349][T17310] RBP: 00007f73ed556090 R08: 0000000000000000 R09: 0000000000000000 [ 814.327366][T17310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 814.327383][T17310] R13: 0000000000000000 R14: 00007f73ec9b5fa0 R15: 00007fff30d6a488 [ 814.327421][T17310] [ 816.046014][T17318] Invalid ELF header magic: != ELF [ 820.222675][T17346] Invalid ELF header magic: != ELF [ 820.718328][ T31] INFO: task syz-executor:15381 blocked for more than 143 seconds. [ 820.726289][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 [ 820.780321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.862650][ T31] task:syz-executor state:D stack:24088 pid:15381 tgid:15381 ppid:1 task_flags:0x480140 flags:0x00004006 [ 820.878177][ T31] Call Trace: [ 820.882771][ T31] [ 820.885894][ T31] __schedule+0x116f/0x5de0 [ 820.895276][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 821.015517][ T31] ? __pfx___schedule+0x10/0x10 [ 821.029321][ T31] ? find_held_lock+0x2b/0x80 [ 821.038011][ T31] ? schedule+0x2d7/0x3a0 [ 821.042396][ T31] schedule+0xe7/0x3a0 [ 821.046553][ T31] schedule_timeout+0x257/0x290 [ 821.051588][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 821.057078][ T31] ? mark_held_locks+0x49/0x80 [ 821.062050][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.067548][ T31] __wait_for_common+0x2fc/0x4e0 [ 821.072798][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 821.078692][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 821.084300][ T31] remove_one+0x312/0x420 [ 821.088805][ T31] ? __pfx_remove_one+0x10/0x10 [ 821.093789][ T31] simple_recursive_removal+0x4e2/0x8e0 [ 821.100147][ T31] ? __pfx_remove_one+0x10/0x10 [ 821.105169][ T31] debugfs_remove+0x5d/0x80 [ 821.130087][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 821.135215][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 821.178572][ T31] nsim_drv_remove+0x52/0x1d0 [ 821.205735][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 821.211354][ T31] device_remove+0xc8/0x170 [ 821.216037][ T31] device_release_driver_internal+0x44b/0x620 [ 821.224709][ T31] bus_remove_device+0x22f/0x420 [ 821.230340][ T31] device_del+0x396/0x9f0 [ 821.234821][ T31] ? __pfx_device_del+0x10/0x10 [ 821.239850][ T31] device_unregister+0x1d/0xc0 [ 821.244768][ T31] del_device_store+0x355/0x4a0 [ 821.256072][ T31] ? __pfx_del_device_store+0x10/0x10 [ 821.267963][ T31] ? find_held_lock+0x2b/0x80 [ 821.272780][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 821.288641][ T31] ? __pfx_del_device_store+0x10/0x10 [ 821.294165][ T31] bus_attr_store+0x71/0xb0 [ 821.300041][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 821.310183][ T31] sysfs_kf_write+0xef/0x150 [ 821.314900][ T31] kernfs_fop_write_iter+0x351/0x510 [ 821.334582][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 821.343890][ T31] vfs_write+0x5ba/0x1180 [ 821.353404][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 821.363940][ T31] ? __pfx_vfs_write+0x10/0x10 [ 821.371630][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 821.378257][ T31] ksys_write+0x12a/0x240 [ 821.389269][ T31] ? __pfx_ksys_write+0x10/0x10 [ 821.405362][ T31] ? rcu_is_watching+0x12/0xc0 [ 821.411097][ T31] do_syscall_64+0xcd/0x230 [ 821.415778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.422002][ T31] RIP: 0033:0x7fe543d8cc1f [ 821.426535][ T31] RSP: 002b:00007ffe6552caa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 821.435186][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe543d8cc1f [ 821.443814][ T31] RDX: 0000000000000001 RSI: 00007ffe6552caf0 RDI: 0000000000000005 [ 821.451947][ T31] RBP: 00007fe543e11cc5 R08: 0000000000000000 R09: 00007ffe6552c8f7 [ 821.460124][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 821.468329][ T31] R13: 00007ffe6552caf0 R14: 00007fe544ae4620 R15: 0000000000000003 [ 821.476458][ T31] [ 821.481081][ T31] INFO: task syz.1.2419:15478 blocked for more than 144 seconds. [ 821.499816][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 [ 821.525529][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.551401][ T31] task:syz.1.2419 state:D stack:27672 pid:15478 tgid:15477 ppid:14971 task_flags:0x400140 flags:0x00004004 [ 821.589089][ T31] Call Trace: [ 821.595823][ T31] [ 821.603403][ T31] __schedule+0x116f/0x5de0 [ 821.608077][ T31] ? save_trace+0x4e/0x380 [ 821.613106][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 821.618223][ T31] ? __pfx___schedule+0x10/0x10 [ 821.623197][ T31] ? find_held_lock+0x2b/0x80 [ 821.628265][ T31] ? schedule+0x2d7/0x3a0 [ 821.633798][ T31] schedule+0xe7/0x3a0 [ 821.638055][ T31] schedule_preempt_disabled+0x13/0x30 [ 821.643629][ T31] __mutex_lock+0x6c7/0xb90 [ 821.648605][ T31] ? netlink_has_listeners+0x219/0x430 [ 821.654758][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 821.661549][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 821.666727][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 821.672662][ T31] devlink_health_report+0x3ba/0x9c0 [ 821.680049][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 821.687081][ T31] ? _copy_from_user+0x59/0xd0 [ 821.693474][ T31] nsim_dev_health_break_write+0x166/0x210 [ 821.699655][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 821.706129][ T31] full_proxy_write+0x13c/0x200 [ 821.712267][ T31] vfs_write+0x25c/0x1180 [ 821.717246][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 821.723094][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 821.728541][ T31] ? __pfx_vfs_write+0x10/0x10 [ 821.733446][ T31] ? __fget_files+0x20e/0x3c0 [ 821.742852][ T31] ksys_write+0x12a/0x240 [ 821.747305][ T31] ? __pfx_ksys_write+0x10/0x10 [ 821.755758][ T31] ? rcu_is_watching+0x12/0xc0 [ 821.761097][ T31] do_syscall_64+0xcd/0x230 [ 821.765744][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.774723][ T31] RIP: 0033:0x7f7c8438e169 [ 821.790398][ T31] RSP: 002b:00007f7c821f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.804730][ T31] RAX: ffffffffffffffda RBX: 00007f7c845b5fa0 RCX: 00007f7c8438e169 [ 821.821569][ T31] RDX: 00000000000001ff RSI: 0000200000005900 RDI: 0000000000000005 [ 821.878047][ T31] RBP: 00007f7c84410a68 R08: 0000000000000000 R09: 0000000000000000 [ 821.909685][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.918055][ T31] R13: 0000000000000000 R14: 00007f7c845b5fa0 R15: 00007ffc3be83638 [ 821.926682][ T31] [ 821.930151][ T31] [ 821.930151][ T31] Showing all locks held in the system: [ 821.940124][ T31] 1 lock held by khungtaskd/31: [ 821.945018][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 821.961466][ T31] 2 locks held by getty/5596: [ 821.968752][ T31] #0: ffff88803610a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 821.979305][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 821.995211][ T31] 4 locks held by kworker/u8:39/13448: [ 822.001672][ T31] #0: ffff88801c2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 822.012733][ T31] #1: ffffc90004907d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 822.026096][ T31] #2: ffffffff90116710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 822.044224][ T31] #3: ffffffff8e3ca840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 822.055424][ T31] 7 locks held by syz-executor/15381: [ 822.061465][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.070908][ T31] #1: ffff88805c447088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.081299][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.095308][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.106778][ T31] #4: ffff8880608ac0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 822.117951][ T31] #5: ffff8880608ad250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 822.130903][ T31] #6: ffff888045735fd8 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0 [ 822.143592][ T31] 3 locks held by syz.1.2419/15478: [ 822.150361][ T31] #0: ffff888034e775f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 822.164704][ T31] #1: ffff888141ac4420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.177027][ T31] #2: ffff8880608ad250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x3ba/0x9c0 [ 822.199077][ T31] 4 locks held by syz-executor/15698: [ 822.204835][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.215269][ T31] #1: ffff888035e22088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.225340][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.236940][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.247963][ T31] 4 locks held by syz-executor/16137: [ 822.253364][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.263648][ T31] #1: ffff8880121f1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.279057][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.296872][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.308981][ T31] 4 locks held by syz-executor/16435: [ 822.315542][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.327289][ T31] #1: ffff88807c45d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.338125][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.350201][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.367444][ T31] 4 locks held by syz-executor/16885: [ 822.374112][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.389146][ T31] #1: ffff8881417af888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.401036][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.518034][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.534003][ T31] 4 locks held by syz-executor/17199: [ 822.539780][ T31] #0: ffff888036632420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 822.549129][ T31] #1: ffff88809d9d6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 822.559639][ T31] #2: ffff888027f17698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 822.570054][ T31] #3: ffffffff8f6c6bc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 822.597483][ T31] 1 lock held by syz.3.2863/17341: [ 822.612703][ T31] [ 822.618228][ T31] ============================================= [ 822.618228][ T31] [ 822.637952][ T31] NMI backtrace for cpu 1 [ 822.637975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 822.638013][ T31] Tainted: [U]=USER [ 822.638022][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.638038][ T31] Call Trace: [ 822.638048][ T31] [ 822.638058][ T31] dump_stack_lvl+0x116/0x1f0 [ 822.638100][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 822.638132][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.638161][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 822.638196][ T31] watchdog+0xf70/0x12c0 [ 822.638241][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.638277][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.638317][ T31] ? __kthread_parkme+0x19e/0x250 [ 822.638355][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.638396][ T31] kthread+0x3c2/0x780 [ 822.638427][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638455][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638484][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638513][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638542][ T31] ? rcu_is_watching+0x12/0xc0 [ 822.638563][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638594][ T31] ret_from_fork+0x45/0x80 [ 822.638613][ T31] ? __pfx_kthread+0x10/0x10 [ 822.638643][ T31] ret_from_fork_asm+0x1a/0x30 [ 822.638685][ T31] [ 822.638693][ T31] Sending NMI from CPU 1 to CPUs 0: [ 822.776850][ C0] NMI backtrace for cpu 0 [ 822.776870][ C0] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 822.776904][ C0] Tainted: [U]=USER [ 822.776912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.776925][ C0] RIP: 0033:0x7fa1a5d844a0 [ 822.776943][ C0] Code: 24 18 64 48 2b 14 25 28 00 00 00 75 12 48 83 c4 28 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 eb de e8 36 cf 00 00 66 0f 1f 44 00 00 <48> 83 ec 08 48 89 fa 48 89 f1 31 ff 31 f6 e8 0d c5 03 00 85 c0 75 [ 822.776965][ C0] RSP: 002b:00007ffc9bcb8218 EFLAGS: 00000202 [ 822.776982][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 822.776996][ C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00007ffc9bcb8220 [ 822.777010][ C0] RBP: 0000000000000000 R08: 0000000000026fc6 R09: 00007fa1a6c40000 [ 822.777023][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9bcb8670 [ 822.777036][ C0] R13: 0000000000000004 R14: 00007ffc9bcb825c R15: 00007ffc9bcb82f0 [ 822.777050][ C0] FS: 000055558cd17500 GS: 0000000000000000 [ 822.920177][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 822.927066][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 822.940441][ T31] Tainted: [U]=USER [ 822.944252][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.954324][ T31] Call Trace: [ 822.957608][ T31] [ 822.960556][ T31] dump_stack_lvl+0x3d/0x1f0 [ 822.965190][ T31] panic+0x71c/0x800 [ 822.969108][ T31] ? __pfx_panic+0x10/0x10 [ 822.973560][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 822.978963][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.984964][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 822.990376][ T31] ? watchdog+0xdda/0x12c0 [ 822.994815][ T31] ? watchdog+0xdcd/0x12c0 [ 822.999252][ T31] watchdog+0xdeb/0x12c0 [ 823.003513][ T31] ? __pfx_watchdog+0x10/0x10 [ 823.008211][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.013438][ T31] ? __kthread_parkme+0x19e/0x250 [ 823.018644][ T31] ? __pfx_watchdog+0x10/0x10 [ 823.023330][ T31] kthread+0x3c2/0x780 [ 823.027412][ T31] ? __pfx_kthread+0x10/0x10 [ 823.032015][ T31] ? __pfx_kthread+0x10/0x10 [ 823.036642][ T31] ? __pfx_kthread+0x10/0x10 [ 823.041242][ T31] ? __pfx_kthread+0x10/0x10 [ 823.045857][ T31] ? rcu_is_watching+0x12/0xc0 [ 823.050626][ T31] ? __pfx_kthread+0x10/0x10 [ 823.055240][ T31] ret_from_fork+0x45/0x80 [ 823.059661][ T31] ? __pfx_kthread+0x10/0x10 [ 823.064272][ T31] ret_from_fork_asm+0x1a/0x30 [ 823.069114][ T31] [ 823.072445][ T31] Kernel Offset: disabled [ 823.076800][ T31] Rebooting in 86400 seconds..