last executing test programs: 11m26.847129131s ago: executing program 1 (id=684): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x4, 0xffffffc0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x7, 0x3, 0x15f4da0a, 0x3, 0x9, 0x62, 0x80000001, 0x6, 0x1, 0x9, 0x1, 0xba]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/interface_authorized_default\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000280)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) setresuid$auto(0x2, 0x7, 0x8080) socket(0x10, 0x6, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x1000000000000000, 0x8000000261, 0x6, 0x14, r4, 0x3) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0xff075e1e4b3ebb33, {{0x41, 0x4}, 0x2}}, 0x6a) read$auto(0x3, 0x0, 0x80) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 11m25.745822006s ago: executing program 1 (id=688): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) socket(0x21, 0x2, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x6a200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) flock$auto(r2, 0x2) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x203, @local}, 0x406a) 11m25.071068807s ago: executing program 1 (id=692): ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={"632302d937fa9e1d1d832bb78864c959182ab0a61376254e6252b40f7fc9602f", 0x8, 0xfffffff7, 0x1, 0x48, 0x6, 0x0}) prctl$auto(0x2, 0x1, r0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/pp_hold\x00', 0x40000, 0x0) write$auto_proc_projid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, 0x0, 0x69) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mincore$auto(0x1000, 0x4000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 11m23.457030999s ago: executing program 1 (id=695): socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009800800018088"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/snd/pcmC1D0p\x00', 0x2001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f00000007c0)=0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x3, 0x0) 11m22.144411316s ago: executing program 1 (id=697): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x4, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x7ff, 0x0, 0x72, 0x697c}, 0xed71390}, 0x9a4, 0x1063903a) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x200, 0x0) ioctl$auto_EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r0, 0x0, 0x1fffffffffd, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) pread64$auto(r3, 0x0, 0xb69a, 0x5) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r2, 0x40047459, 0x0) read$auto(0x3, 0x0, 0x1f40) syz_clone(0x32048091, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x16b342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 11m18.966047426s ago: executing program 1 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0xe00a0100, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x6}, &(0x7f0000000380)=""/162, 0xa2, &(0x7f0000000440)=""/110, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred=r3, 0x1, 0x6, 0x5, "a2a8e85fc56865a60000cf9d2a010000008000000000000000000000000000001700", @inferred=r4}, 0x6, 0x0, 0x3, @inferred, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89b991805c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400000000000000000000000000000000000000000000000000000000000000000056", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 11m3.841958635s ago: executing program 32 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0xe00a0100, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x6}, &(0x7f0000000380)=""/162, 0xa2, &(0x7f0000000440)=""/110, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred=r3, 0x1, 0x6, 0x5, "a2a8e85fc56865a60000cf9d2a010000008000000000000000000000000000001700", @inferred=r4}, 0x6, 0x0, 0x3, @inferred, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89b991805c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400000000000000000000000000000000000000000000000000000000000000000056", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 3m9.013934649s ago: executing program 4 (id=1830): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x0, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) 3m8.56382445s ago: executing program 4 (id=1831): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x80302, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x1, 0x0) sendfile$auto(r2, r2, 0x0, 0x43) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/78, 0x4e) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) close_range$auto(0x2, r0, 0x0) 3m7.67487383s ago: executing program 4 (id=1834): openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/ethtool/ring/rx_jumbo_max_pending\x00', 0x1c9703, 0x0) (async) r0 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/ethtool/ring/rx_jumbo_max_pending\x00', 0x1c9703, 0x0) mmap$auto(0x0, 0x9, 0x100000000, 0x11, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x8, &(0x7f0000000280)={0x7, 0x1, 0x80, @inferred=r1}}) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x8, &(0x7f0000000280)={0x7, 0x1, 0x80, @inferred=r1}}) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x2}, 0x3, 0x100011, 0x1000003) read$auto(r3, &(0x7f0000000000)='%!(-)}[\xdb)g\x00', 0x8) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyue\x00', 0x400780, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@link_id=0x2, 0x6, 0x23}, 0x96) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x15, &(0x7f0000000240), 0x6) (async) io_uring_register$auto(0x2, 0x15, &(0x7f0000000240), 0x6) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) (async) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(r4, 0x8, 0x0) (async) close_range$auto(r4, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x163041, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x163041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3m7.337376071s ago: executing program 4 (id=1835): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r1 = socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) (async) socket(0x1, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') socket(0x80000000000000a, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@link_update={r1, @new_prog_fd=r0, 0x100, @old_map_fd=r0}, 0x10) bpf$auto(0x3, &(0x7f0000000340)=@enable_stats={0x5}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8b80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x10a, 0x400, 0x9}]}) 3m6.920702047s ago: executing program 4 (id=1836): openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) (async) gettid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x80000000) (async) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyx3\x00', 0x2200, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc81, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1000000000001, 0x948b, 0x3, 0x3ca6, 0xffffffffdfffffff, 0x3, 0x62, 0x84000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) msync$auto(0x0, 0xe0, 0x6) (async) socket(0x15, 0x5, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x2, &(0x7f0000000080)) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x7956, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) (async) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) 3m5.87958906s ago: executing program 4 (id=1838): r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x0, 0xffe, 0xffffbffd, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x9, 0x4, 0x7, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) (async) mlockall$auto(0x7) madvise$auto(0x0, 0x2000040080000004, 0xc) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) modify_ldt$auto(0x8, 0x0, 0x40100000000aa) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) getrandom$auto(0x0, 0x6000000, 0x8) (async) r2 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x80880, 0x0) read$auto_stat_fops_(r2, &(0x7f0000003340)=""/132, 0x84) (async) mmap$auto(0x800000000001002, 0x6000000, 0x9, 0x16, r1, 0x300000002800) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x20000000001, 0x7fff) (async) socket(0x2c, 0x80003, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4000884) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) 2m49.891876692s ago: executing program 33 (id=1838): r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x0, 0xffe, 0xffffbffd, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x9, 0x4, 0x7, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) (async) mlockall$auto(0x7) madvise$auto(0x0, 0x2000040080000004, 0xc) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) modify_ldt$auto(0x8, 0x0, 0x40100000000aa) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) getrandom$auto(0x0, 0x6000000, 0x8) (async) r2 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x80880, 0x0) read$auto_stat_fops_(r2, &(0x7f0000003340)=""/132, 0x84) (async) mmap$auto(0x800000000001002, 0x6000000, 0x9, 0x16, r1, 0x300000002800) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x20000000001, 0x7fff) (async) socket(0x2c, 0x80003, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4000884) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) 11.948696499s ago: executing program 0 (id=2179): socket(0x22, 0x1, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r2 = socket(0xa, 0x1, 0x10000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(r0, &(0x7f00000001c0)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x9, 0x5, 0xdf, 0x10, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x800, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xe0c842, 0x0) prctl$auto(0x3e, 0x800000000, 0x0, 0xfffffffffffffffd, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kpagecgroup\x00', 0x101000, 0x0) poll$auto(&(0x7f0000000180)={r2, 0x1, 0xfffd}, 0x4, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff004) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000200)='/\r\x1f\xb6S\xf9\xb2dev/0\x00', 0x100000a3d9) mmap$auto(0x6, 0x400008, 0xe2, 0x9b72, r3, 0x8000) r5 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0) pread64$auto(r5, 0x0, 0x0, 0xffff) 11.334871357s ago: executing program 2 (id=2181): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x2004100, &(0x7f0000000280)="a15147e5a44c282439a23f", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="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") prctl$auto(0x1000000003b, 0x2000000001, r1, 0x5, 0x7) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x17, &(0x7f0000000000), 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x4, 0x1000, 0x6, 0x3}, &(0x7f0000000040)=0x57, &(0x7f0000000080)=0x90, 0x58cd96a1, 0x1, 0xfffffffffffffffe, 0x0, 0x7, 0x2, 0xc972, 0x10, @inferred, @raw=0x3}) r4 = getuid() stat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80000000, 0x0, 0x8, 0x5, 0xee00, 0xee01, 0x0, 0xb0, 0x0, 0x6, 0xff, 0x1, 0x200, 0x6, 0x10, 0x3ff}) keyctl$auto(0x200, r3, r4, r5, 0x6) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) ioperm$auto(0x7, 0x6, 0x2) r6 = open(0x0, 0x22240, 0x154) fcntl$auto(r6, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x101) sigaltstack$auto(0x0, 0x0) pread64$auto(r0, 0x0, 0x800003, 0x800000000000e2a) 11.164725404s ago: executing program 3 (id=2182): socket(0x2, 0x1, 0x0) clone3$auto(0xfffffffffffffffe, 0x101) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = set_tid_address$auto(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10ba00, 0x114) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r2, 0xb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioperm$auto(0x2, 0x31c, 0x4) add_key$auto(0x0, 0x0, 0x0, 0x1, 0x8010) msgget$auto(0x0, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0xb1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x2020409, 0x100, 0xeb1, 0xffffffffffffffff, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x83, 0x68) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgctl$auto(0x0, 0x0, 0x0) getdents$auto(r1, 0x0, 0x3f1) getdents$auto(r1, 0x0, 0xa2b0) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) tkill$auto(r3, 0x9) sched_rr_get_interval$auto(r0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x282) 10.276761377s ago: executing program 3 (id=2183): fdatasync$auto(0xffffffffffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x8000) semctl$auto_GETZCNT(0x78d9, 0x8001, 0xf, 0x8001) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x8000000eb1, 0x401, 0xd) getsockopt$auto_SO_RESERVE_MEM(0xffffffffffffffff, 0x0, 0x49, &(0x7f00000000c0)='(*@]\\\x00', &(0x7f00000001c0)=0x6f9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x2, 0x103) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000000)={&(0x7f0000000140), 0x34, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x404c096) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x6a) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto(r2, 0x0, 0x8000833, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/028/001\x00', 0x40402, 0x0) 10.245024094s ago: executing program 0 (id=2184): memfd_secret$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) 9.963730378s ago: executing program 0 (id=2185): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0xfffffffd) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x3fffffffffd, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) bpf$auto(0x0, 0x0, 0x6f3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKIOMIN(r3, 0x1278, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="000226bd7000dedbdf25030002ff0000030004020000060007000000000300000020", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0800030001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) socket(0x2b, 0x3, 0x100) socket(0x2a, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="720100009cc34cd87d26557f9765d51394d4a916d63171cd4fecff3c70c85ef5973d847db53606e9b400eb0b4521baf0a30b124b654aaa7860b8ff7f7e41345656e8a4b00539f5fb1aaccaf4d38b3695f630a6739653f1e187ed31fd31e207fac6442b2429dba3801537d8", @ANYBLOB="13"], 0x1ac}}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) mlockall$auto(0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) 9.874309806s ago: executing program 2 (id=2187): r0 = socket(0xa, 0x2, 0x0) semtimedop$auto(0x7, &(0x7f0000000180)={0xffff, 0x7}, 0x1, &(0x7f00000001c0)={0x7, 0x80000000}) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x3ff) 9.301903941s ago: executing program 3 (id=2188): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/saved_cmdlines\x00', 0x8100, 0x0) read$auto_tracing_saved_cmdlines_fops_trace(r0, &(0x7f0000000340)=""/187, 0xbb) r1 = fcntl$auto_F_UNLCK(r0, 0x40000, 0x2) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000002cc0)={0x28e8, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x135d, 0x1, 0x0, 0x1, [@generic="3b0deb408f959a0809e1458f9052b0c0bf99531b716c240c5960e086fb", @typed={0x27, 0x13, 0x0, 0x0, @str='/sys/kernel/tracing/saved_cmdlines\x00'}, @typed={0x8, 0x100, 0x0, 0x0, @fd=r0}, @nested={0x140, 0x1c, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="2e36f65813e39f2baedd8d4cfb2c8fe10fb358bfdd8f494cfbc38e0e4093bb5627d7e3b0ed5f76b14be7b0639e9edaea6379f5e514981acec27e622119ef0be7dcc904a8e3ca8c9fefc7c178323aa88921b8f9cf1c7d7b877ba987a0cdcbb694589ac977b48f735a7edbe299c646ee151018a18fb6e669b2b9a410e4729d0d3aa72ee409045397034994bc8fcea7e15b371a70c6bcb2e9323c09a283cec63e6469a703e4f25e6595dc6956baeb33f336e9f5eb5a4e650a0874d643dee4b8245ebe06d0ca3f55261f1055c63359e5741d607be84dfe5e4c1c7c6ecdc93d44f1e313afb85dcc0d40c81ede5f845d68b069", @generic="79dce5da9fe676850aedb8b6ee4c83c607e75da6b16a9a58eeb93d3d9f26e53acd9b053131de62daed75cfb742b606e275767bebab388d07737bd1450e4ca461070c7184", @nested={0x4, 0x3e}]}, @generic="e8e4a1525fb34faa5aef273219f05f6b71fa16dece0aaf479af99c05c3566a7f669cad8018fafdb1f53ed702486f7a8ea435970309d5b7e66c02a48487f5af085b7b00a29564bc1d0b2cb1dd5062359a9dc79973ababa5b7ccc2cd4587fb600c7f13ece1e0bd15009dfcd9b9f859a3f4c404f5dffe8fbd3bab47a7ea", @nested={0x1145, 0xa0, 0x0, 0x1, [@nested={0x4, 0xae}, @nested={0xc, 0x124, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @u32=0xffffe88c}]}, @generic="af174b02404cbf42e94d877ab684e754dc8ecac311a5d6b8b12c0278bedf4cb067d874c0b1796eb165e8954ca20ef8e80a1e3939df3a1f045008c477537dc7eb2487d3df73ea28c01790b27dfa75f682067c86307670d68a49097258ec39ed856205b16f0f8deded04eefceb490e92310589a4f114319d8da77ea500957e2668df965a", @typed={0x4, 0x4c}, @generic="6dfe4f63bf928629df8333684fd449f4c031ead05e8826076da216e57c9a31cea4e5cb4e207915fb5a3d1539b3540775934ff3b24a2137180a0955397822e69ba34201dd1fba32d4ad88f66b3a63e2713da973827bc0b8f51b46ef4f0c3dc44b8587d89589d1f44a53896207ec576dbc921b434a9cbaa9386a", @generic="15c5356e7e5b967ffae06170a6beb77a74737cef9840855d25cd653493ff7267f19c941d0c83d2648c2c2f4dca974ed2c0", @generic="537b91f648375cd095f90f089c9c8502a8019dd4b55acc28af8e8fad9d68e289248ac5113540bc4e529e1534481b5b71ef83b305d99375d002939e50619e3e039e91bc466be77fab7d76f1c00bf077f624f1cb73981015a7b863b924f547896394e09c2ef6a8e7bc20a4f4791d91c5934c33555dc424bad9c7efff7435ab828e1202b4ec05f90eece52a780f9708e12eb1f0d6e35d93d56c0355ea89d6e150af2d28385a95a0712b9b7f3d117901fa73fdc3f4deb69ddaae6d6a3bb662bbe42e73fc80eb5bd6eed2bd517beda65133eb3a480f131823b4af9ed9e23504cad59d0999fd8de7e9391c3d269d925d9a164ca6ddfcca83b2a5c81e3d76eeaaaf3d65d2b067d9de3a6e7226257e048a36f8446c07f3b9d58be140db097dbe20e79ec54f684487213dd583ac96e36b3c682bf32efa43763d37b97a2d9f4e7d0cbcdb0ceb5d3518ed6fe018dffa7ca86e9bd71e3dbd950c4e305fd32944611648decfeae04cb2e3034b8d101daee6bfa17c77ffd46a6be5376901d4f60d29577ece00d4203a215a4bc10f03e8592105fed99d96bfaf905c6aabfaa46b0b9258a6f293d0db77fa6bc71803df12975936ba305bbdae7d8cf8ed1cc951afcfe88de5c2f6bba5e7935367dda54751834fb850938a88133e4aa06470d1490fd38b2f41aec6c73b2efa59354f3bbeb8f3135a57eb6579e00b761d4719bee7a43491d7f63f0c53f51a5f788b3ba8c10e0d8d822c6efbc3ecab46f0abd385c2fc892d6a5bf8f38b60af528f747ec44b56f33a938456551d20e5e83f6782ad7b41641158dfb857c434b4586943a36c4c7a9f064019a1d9e790bec2c1451dbdaaaf2ecd3c095cfc2a99cfb4dd44aa00f4cd384dfeb2cde178ec7e20683dd0733d9fac5c832784059b8a9a7ba026f4b753720c417272d940f057d43ffbedc192119787a982a33ddc3c277bf5fc43ea56771a5ccc9e481de8b7c2a7ea927bdcbfbb42cbbb4e7d4394ef9e4aab82a0d4d8eaf5a448061fab5643effa45587822b76c3751f88464d2219c8bc82a4f9a725cb77387e2233723dc78b8111258ed0abb3f14a37de93ca79a93a118660cbdb9455967e2450bd9f1b20917eaf9161665ea152b4ac4ef3d109d6ebf6c96a1c799a543147776d3bc8ee42ed370c26ab3282e622538283f5d59f35fb61e73cf29a09eeba2dff76ef2f504fea1317edb1be96b8b8af08eb1f05706ac98f797a1fcb490e4d02e32587301a168328d898a6925eadcfd4bf76ee5519230e0300642a5135420d4821898ec52773496cd10b9d8e06ee4f2c1894e2e4ee62c4d8ced2d6bcdd9720c142f181e7b5b1af9bd88432ca3be7fbc7c72157d1808c904758beedd09eddd6a298a5dcaf54269590930e3eca1a9cff71ffbc6d4207f767d1054911a88269fc65856f65e0169e14b1c2495fb9417c8c305df8815caf4b8efb27dd970f0eaced66ed9371a976548112e105428870af4294f702bcdcfac57f1ab3e60f3bcad3b987a021583c899b0ad0a0cfb1298e2b5169fa7b88283561f5dcdc9f8b9efe7e7563893802ac3d2d36b2d3bbae8e788431f34b7edadfe49fa1901aa0917c4aa7a981872ba20eb1bf257dfe8427582768c6dfd988d50678c0217841dfd082d7141d038de7cc43b6eb316c96f6dc5538f9685e5daf7514316ace9ef37545d452de884f901a3ef083676ea104e324b297889a0d95139751aa6f5eaae9bcded2d978cb8097a25e25e91f44825ddc9be51468c89c7acb2e1d091cd03d5aa57d7a3f41bdb39916ea01510d64bbd0b4152ad9abd2670dbf9343b3d915c40186880510c31248fa428a6fe82b75fd944f9b630ac2d9992bd577aaf860393bdb1b1290071ff9972558fd624139b513604b683ab29e48c91ff66e8a4642579d85aa76d6e4f553cf9c2dfdb5ffb0e306f25b603752efb8ad321cf27c55774ecd13af9742d41ef25653f90df5f0761e51318c06f01d9d5c45d07b0cbbd5ada5eed81afdb1bc58a04e4d1551c35956072daefd1253790967af9783cd5b89b25d28a98990e643e31757c53cded5642b8dd67ca533dc9d0b8d912abf1fbf5b4ce6e81b24ae6db0d48b7d331c53a1782d883733804f3d80a95d8af776077758f72244e6783dc12721b0fa16098045905279b148f82374687e7dd6487bfbc87415e6338eb770f2c1fa6d25688fa749055374fe584440c3fd0c8ae97a42141aec7862cebc72202a30d175623f0884cbd18e00dc4a09d52d2d0691e94392aaf569a90aca6c71e3fa94aef3de2875d685285b0419e6e553b8537125b1c82d8aacf17eac0ae4896a7ee430569640b3c668d0e68a2fd2562807e226a3e95910d608bb7f80c24730c7d1c3d7250c6738a78646e07e56ae89348bed0dc2aac9c53d87354f32e3cd2a9c00c1ee6ce0d79a200a88b06530e45808096a75e652c6a01cb36505bba8771e217e74369d04bcdcbdd16e70bae56c427cc5d687b465061822cc7199a5da0714132641adaceb62b3c9ce529a53b94bc2cd66ba8f700ea98b1dc1b05ee16d268ecc7642f0ce1de0877c7f2fd2b6eb26b36a088b5c07f238ffe141a8540e5eab27272a4cc88d128bd877fd3a210ac0ab48674493096de03d5d158dd8b1cb5b71b784047edaba2b003d93fc02de64eb8e81accd966715f19dcbc98a6e3e2f15a07eea647b65ba2ff4528d62c8677c305a7fec6541bdc9726bb86ebed90a12554ae4e63f17ebbdc932467317327092f10daf7b7a601c9034f2d5b2fdd8ae8e03f12560297130dd5ed8b77b3d382856253f3d51eee07a9baf0dda168571c78d88d07b9aec185ccc3a5bc4961d397366fd348e1e4f0bd07c6d7fc988937f145f92f06a04292e76d5f17a57eb7c2278b744d719678c2fa94d347f301f4380bfb30d32eca91149d1e7454b786071fd4e356e125a6b5971c081f8cd0036c7cc16bad21fc5212add06d94b0e8ca1597f308b41eeea54b7c3aa438498934fd0f45c75f138d9099e66440383e9cda2b5e052631443a53bec82fcb102a6fbf60811e901f392ff846eb7f39c7e813504ceedd32c8759f132e770f64f3472187d79eb3b3628b27aaa2d36b720087ae074304cd9e66c6f10120335a9c5015bed4bdcc04d3aff62f19a001963fac8bad96adb58dcb864e944ddc39aa6f2a58c53547cabe4233abea9ac462f4710dc62d442e76bfbf76fdef8737d12cc46254b31dd518cca45ae3dfc5fe21630dce396275fdf83ed6b0e2c24e5e136e1219fb6b7ef10bb556c846f632a397a9c9a24de9f3a9803e5e097554ae613873024ade5583bc587b8f6ac8c43c8ef800ec54ec58ad1953886fc27148c9af7a2917bdf53314912e3150a9255f200a6557085b6485251a26b4815c1b4063fc42de652ad1ef79f6314c1cf89a3101b7eed510a918a137b25eac8d438a70cf80fcacff5c57e6286bd22ec31c7be811b8fa00e18db0cfa15a7aae5fbd17119bf3d36a4975d65907e5cf208356813e32490edefc4c53effd94eab2528b9810fbf30773f6588847453c91987e268e3d3a9592954d6f6f809b62ce428247dbaab0efdf3f8b98c84c1831bf18e513254c5278b68d085786bce490fc21fbb535da966c00ea665cfc95915287e01e15c239c4e6722044ffa4731e51739117aabb1c1420aa4064ba7fee514bc6f817eb112e0370e60536a80727b756548eea62b3a9a82d4b00c7c45085e1e40a99819ec8128b5b97e7882f6373ead7b9baa69d1bbbd8e304f92b4f4e65795d2521e5558ae6d178996053bae257f798ca14a2fe1e40e699d4f6f49c791b0db473ca5aae3fdd827c516a40b04521fcbf5fdbe2e10b20338ef29e382a16e5ccb0a0420e734ba8aa825813a28812b18565eaf552c890d4fdfa78d9ef26bc13507eb37bd28cbb9057e772403bdf6bd994341ac460f4c5a16bb1a5f7889490f758391681a50d6f854c835a513f1347d0901cff5d7eab04266d86d352dd1e155b7ab195d0d1f2e44f7a98023f96f209924247e053676daa1015fd90e14a9cc5dabae910b6c5c39456e077141c4d2ae7c41dc80b856f15db9866d49caa678b5b24fccf22f9e8cd4178a7c99058cf0126c583d923e149646116709fcaa900839ae165f68c0f83ed944d5e6f8cce9b7839420ff99c832b5aa939470aeb9caa311065144f135a7f6bc25acede9ac14ae1f52735613ce38cccf6098cfca5682735e359b32af1b08408412c2a98e5fbfa9cb03cfff265229f2ab4aea4ed61be3e74788ba7b6b207eeecf9928ceccf888307c8f4c5af2b40be5dfc8a105493719c92c594446662dde1dbdcd75966b2868539633152d2e8763fbc1f0b7820eea4c7166d4eb55f3d82b4ffea366f7c64cf9f310e13f06564e85c6902e042810cf9971f3a4fcfd4df5f79f5aae4a5a893de51ba1d603c882b92fea06d4445c0b6a0b41676fff5dce0f09894612e111c61a402ee4740b5f9f11dae1da7d8e5a8b4f7b5cb96b8180aba42f60c9d25fce3bf0ea9a5f7b933d987a4b93e0aa86e09aff0881b678b8dd5f2b36f3c88ada92e0f2244b159c7bb69ddfdbc32146a8819df61859b66d60b40fabd8255de826423e42e978ba9cd316de5974ea0c3190f2f91104a49022a9924144a772a1086263e4db57820cb6f2372cb55050c2cdf2b60e2c425fd23d5a9397986eefe3a7f0761bed321e1b4c154a34145bfecfc0f654c05eab19c1e30e1f314f6ea8a64c98ed134912cd9c7f2b4a054904b44d4e831e85654f65c455f92a3e0367417fa5ac7b4c147d803f8ce83e99840533f9716964ba01b73e1b1759a530ad19f6e25b9c8a012f5b4fbe6061cf53a5e9c9dbbcfb4e46f3fc31849c2f24acac30f926c2171e8e74beabf5ed900f85e21afa01cb3238dc50aaa6e7fb1a343904d674e94ea1f8326fd1a6fdf8453985a61c84bd5ef8245d976ada0d65697de62c5cafeabbc331972ae62ac61e9b02e214422e36b4f212fcce5b2326c0fc3bd7d6885e2ed22889bfd2d89848b112336a840a42063589012daf7e78885dfbe36cc4ac0c767fbbec5222da51a245936e51d0652e508c67badcae609043b68ec4553c54d001827a84b47ff8761d81d224615b4209e3809b6f08f7205a4646ea967a7437c44d660d40170d95bbe510b0ebde49f9371a10aaf5a265eda9e973c34e6c6791b3016f07c48d12554d613044782c9498dbe799edab644da0b214a9c655a78ee5e87d32a4b19b40f71d22c3a275632262d1272aea27ee17e6a240e2daddf58d7165985c25cb66b16c5c7cebc3acfd58eedd492daabd624da13916fd5613489f3f62a79e70be3eadc64f5e18b5088fc10e371d79164e7112779f86579f46a701851c0096832e13d758aa9eb9fe94b6237a78f8b5c2c388c8649f11019e616e9187d2dce0d879f341fa9405041489b33887dd532f0159d26a7c80cf1309931a39f5b31676dea60db6172b3d26cd5d2dda16611192856395c9248898b724237908cde31245f4704a50893d01488e174bcac4fa92402c1b7c596d77f94fa458843d29ecef0a96c6d2e48408e5febe0752c866618407c3c813383c27307f4f75c79b3d4f28808700e4771b4d214ff3cb9eac333326f0512a26dab6cb631bede088da73d276d3a6364c5b98262f29216461fab17ad6f1c0efcd2dff7773c690f44a075fc138e5a7abecbd8d6f9978cca9b922590b1fa2ecb7b23aef5aeb7d4d61a4b0ca3509249794c32fbe6d8d26572528c20b96e732cf6f7ece7e40a5a8fe37998ca853b7aabdf5235a7f6297564b14178b263521c50526016e2c08097e720ab61fd87"]}, @typed={0x5, 0xbf, 0x0, 0x0, @str='\x00'}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1220, 0x1, 0x0, 0x1, [@generic="962a523b62845334a1c35467e616d39bafa8ea7735ad418ab57222fc8c9118b0d2beadbf7d74b7a4e2c7e3e46bb1fcd8cbe0628f96b7a7946c563654384d7bf64c31343b7a867f3fe8c88480bbe49a90293b0c1099520dfb3ff900804d161841bd66e4fc66080a934406837bc96abdc23f7bc2a72118df321c948ac29f571a9f2678ddbf3bdc2e9eeb65df2227b50a7b84ebd98e2d3376b26811bf98d7fa2096fce6428af0ac64dc4547808b958021e8de2a0840791f16fe35c75acb9d1ff5057f45", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @generic="b808869f17162581032d483866fed7983b346edddc3928343d3d7bd7a20ce76f1cbb456f5ebaf64d1baec582baa4eb0dd0d3c7858b30b36ad92cd0377f7eace18d89e2f20fb061d950dbb1d727ed82c69202f4627b4f1154a742a5cde15a", @nested={0x10f0, 0x22, 0x0, 0x1, [@nested={0x10ea, 0x1b, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="5ce079006c48339b2498c575886fe499002aa296503bbcccfa4c864a58c9e210ef1c144df4bfbfaa60c4551edbe3852f4fbb", @nested={0x10aa, 0xa5, 0x0, 0x1, [@generic="a9f3ac01aa02cf6dfc361be0f9e2eda8", @nested={0x20, 0x145, 0x0, 0x1, [@typed={0xc, 0x149, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r3}]}, @typed={0x8, 0xc2, 0x0, 0x0, @fd}, @generic="350ac1916c7f49eca996af07edcd96ef1335030d1fa2f7bc72ec18db7e39e66d1bafa44ac8fb9347397707acfcaab71f07211c8932f7befc9a7098b3b828", @generic="85a2c06cf66e6351bbcacd106271b149bbfde9a944f5d545c047ee5ea912752627953bb5ac304729fae1e537f0096e41cfb41b14fafbb9d0c296b04421d1ef468de227505b406dc0c79f1fb8d9389e99b2daa4f0f56613f2be673c58d564015d6a48870c2d883be6a510fbb02c6827e7686caf0163fc8eeb474194608c966312d3d0718dcd465e3079f7a48f7a66ccee6a2e415e36cdec158ffce25564f14dc55a3fa036c171f4d3baba310cd1fc4a7ff5aadf0855c11111e69c2a096e949c720e33120c77d99005f7714aca74bbb4827c62c2b9049dffeef63affd9fde72bfa54240bea2ac3ab80777ef2163322a8318a5fe84d2291f8dcc4e6cb733761dc01fa37d80d1ff891b9718feaca6e4ef6bcf3fbb168462fef24e5613451d903a60080d39dfe5017e39e738a22e677a84f7fea2fc8ba053bf23d21e77266ab45f8474e776c7b87bd2460950235b4e9355171ee3c57cd1068695bf0823b46a0e3bad92a3cc4986b2cee07eb478176ff7943bff3864a16985a46f625d7b6e06a2910a3c72c8cd4a14544d81fbf02a0574cb941dd4f7dad7d2ff015c26f66423b036e5c82329c45b2a41c0371caea79de65755e6e4deca2e1c44062cff1d51206b4e9f2cfffad4a4b4298ab4ca20d2913e91b99fe65b57a1430905c771eaa03ae453a64dfdb947576869c6503ba352893459cdde98ea4fe1c74befdef312aa036b3774c55666222c3d4b65a70f4626128813c1f69e9c3a384bd4948740e904175ac83017d846831b132d985d4ec4e01e8c816db048ef23ff50c89cfb64e095bcce5c4ff2335f8c44e4c756a44cde41d1ecb4c1a64d8aa633a835894f849ba5d963596d714aea84d3b73ba2426bd929db7522c76d713e6088e4171ae4fd9a52a8875a06b552e3bf747e08440d70b0ea6e9d86bdf57e34086cf5b15076fcf04237246924723049fd9eeebefb8b5e2283f7bd99d2036272391acc696db6bad22bfdee0c2e0a6f65a192a1caae672caa2027a2d9b525f7f001047da2ee0ede1029abf77fbee696ff283c173610a541cad246a7b33a592213aca42639b2c62e50f991ae00af61d8ac4656f114779b7213efc9c80326df7356fb7e4d4e59cf69afdd1f5c4f34b527bf53a7d14c240babed905fc292fff63403e6cceb120cfc0d4c64be814c36aff10781c02a08d014ea9653d7e75164e5e0b821b56462939500f401b7ffbcc46513ce6c95ccb3cc924e31329ab8df289d2c617ee7d2b989f855a0f6ba05e52ad4a7412361f71dfe53971bf1dd3d8f48b9b1ee94133391da5274a72b9ece21fba57c35ec844f3bbab0aa484ed59c3b880837bd2b0425747df3af028c82336b3c85dfabf8ebe9acd8222ed23223922a0b666f10cf2747112cfbd29ab0c2c8bd0637eeb53a2568cb34ea0f08259e679b8d83de61d6fb2b188237aba5fe928d8d7b6d72e67ed6e5e670cf64c5feefe8f3f7943092ca629af73176a8c3344b08673026ca480bafa7d7f323e04c410ba115df1b007f60a6b0d71395f64c2874a378d0fdbf7b5b5f26a16238af5fc599184f1acf8a40e9591c19e7d3278499bf0f6c16cb5c02e46ef0ca1992db370699cbb1a363014df6a86a514b1d7b42488d52f8f700e3af7c92157b06c8bd45bf734b73a573b3db30843a941963442cd8c0398d717c094e2378da8a362730b68908539fc84920127984b9c87b4f4c5021b23ef9acc2f2cc90e24fc7c6d9dcd8de01b4fac8adb43034ed030491c5bc818ac97d98ef6e5a1e853d3f8b1eadbcbd095e4976a2846bf7222fd6c93221ea413f4a078c0dcddddc00b5ba1693e05a2fadac2c5f90dddfac013b30539d3ba190b3dcec16fe56f9d2257c2d496e6e20c8fae724cd8d2816db4c794295e6d13409e8387b600c761a38ab77dcc18c5560d882c027edc203115c2f8188e9678099a8f163a9b7b0e37bd097da6d83a569e7075e61c2263b8a12478121ad5a898342a84662d90076cb1254f5c7f49e6ce6fb0ba21b2042ef2b14ca7c57a412771405120440cf7223968b35ab6a8d1ab903f997f4b0119e6362243b0387eb7e1f472b327e78b517f4ec078cb83648865ac9707eeaea815796d92461a473abc9c02c7ac392e3e6efcf6feee7a23c0b015828d1be6eb848b642a14cee21b8df19ed9354d85bd780451c1eca487b616b9179dc7a3916cb858f84357b08d0263a281a42e2e6b1d11768e57089d897fae81885cc0de3b45606f77d5d67c9097c8d4a354108d19bb3942af57bed5100b534777fe5d969a84fc408f3eae7e133d6906ef9280b5f6b104da34b44f98033156809a8dc568888ea67914bf186363332d19f0a5e3d2b5256c8f25d05d21df73909a07e69cf83b3f778b82b874a830ba6af083453231380558401409ea66019a2f9165b1663dabb1c9fda41bdd7649eb77474edd0889346f41c3869cf75089a0451f510ea7e21cc4a3a688b063a0e2512878393d61bc90c3dd388687a889103c9eea2927d623a36de578c53834b2f6bdcc014649c45aa8e9845ca225bef70670c3305311e59dde0bf67588e3c3133dd3529d6e0c62cabeb45c5324286f20bfb2ffdf0f1e71bc0f866dbd00699b0beb59aff79de424d88ad31eee655c77bed0648f7abf7f20e023fe52a36bf61631f70d77e66a95a2718b3afdbc1c6d1b6e8a6edfd344f5347b90b977fee712af10abb637905455a7d1a6574f155e845c3bbb2607c4ffd2b2728027724562a63d11e8749cee071b273b7cc3f67752e35bff5fad8683b6d952bb5e3b833560451fad5f1a28c60a6e4cf654e54c440cdbd8e7f4efc4b29ded4e7e6f5092a57c27c16f63a475edb886392c494a54aa1339d5b2fd629b0f47a9ee1bdd42c80c2a37d44f4e8a7ec55c6a79f668b06508b22deb8e689f8f779186e344a6aa036b92c5686f308528a525c5c50d846a5d76c3495c8e97a25cb8490614507867cad5c1b76f8a67f96e9be1d7caaaea4ef46ab4ff57152eac09c4792bff0bc40f5e8318792b5ada5d552e53f4cca59e9b03a465589b9ee70ec78f84323933de4493f600741da971ee1061777224a099a12f0555f0af388f5a37bfec1433e31607c6c7eb3400edd283fbab180f60cb2db96a229c217b4e1d3cbb14ec65b2c1c0790385b500626e3dc9b37615378e496d6215b8e9afdd22dfb59bc354cfd7d484fa5e6103253f3c1b2209b45780bf03a4dce0b775d949a0e3f33e7dd4557e756bc0d5d76287e1066c68521e557adb26203583dc16159ed6e97e1ce376c3a825a731ae092390a43579dfe6de559a0f17b4e86d89078916f20f75a579b4cca8e1d12710e52626e93fe0c01b96f5aac2a514569f505d69407fc605e498c3b8fa6e18d0c6b9a2e8b14ed3fbad500e3e86a8f4496b01a8d77131cb9d8ea93f3991aab194108c88296bd8713aab359be7fcf7e83a97b81e7095dd5b70ce1f7fe92f3326065e2f6ff0fb9b923e51d5a311edbeb634f52b2363f3d05262feba2a38f083c9805dd518b352735c942326a98fd63dfcbd3620f2d16feddc1c9cf76c4ab21e02e461fdca98bf89d91645ef18fba07e2cd30fbde66060fb6322e6098709f3402b1622435eb2eb32147fe14699fb90fb38613827babd8741b3f3eb09f8a8363962a46be32235c3fdf012452652c2b9fc0af475bbe5fc7898243e9184cba4197f68468de9b1c8f97a9684635dffedf8f12b26d2231ffcd8e7a17bcf623fe3c69fe8dd62ca8731b98f0a45cb40033dae621f7dd879e78e7619ed62733fd7f2822c52f7b4fdc71146a2b6f343b36f044616140e0ad3d5e4b7027acef2f53bb038755fb210596f8dfafdd6ca0cb0f74a9319811a70132fc7062a479c03cb00a31cb2cd15b80ea54ebecd2ea79052aff7de8e1ecc24c32db3523a812323a758e3c3b4818fb43695107be0dbed7d146a90ea4bbf31e9b7ed7ad14fe311d632044bdeb685f39afbf2e64e327f5ecefe18e8d420f99538bf64da00086ed093ceab4bbd51743be7ee281d2cc40a6769014087f1a39c775c5493ff58a2b38cd599f52a973df6695679e0253993ba2df3e8048ba8bd5c49fe02c2fb69dc6dd50237b27e6364b200fd35ab0002454ff49a24dd1a0ae6d56bb978e02608a30e26284103ab625694cd87fc0a8bc3f0f9d340c9dae60a3715bf81bb87dd0355175b6df78017e6183e25f330fabf2397c29564e8a0fe554ccbff026dc3b00cc103bb63cf68f2b9abea48d413fbe015d926f5ec120a874b10fb391761e517808a6bbc51d08b41a18f232f59acec998bc4742d59be8e55daabef1948d2a62aeed751a90cfdfd99c311521e6158a7e916638d35e77943f10995eb7b1ebe5fe5b7a0957d19f936096b9ea0566b5072b74d5d9c91f63d5d8189b90faa5cdac0970a08e1a75ed54cf3a5f387fd7526ed538932b8f97bed9596a9c41006263cd940219cb6a0367bf2f8cbd3d37e8d5cb5ae2d7d5b4f1b9b3342799bc6eb28b8f23342b5393bfd93cc13546d8a404edcaea323f9b5534d7b04bca76d4b0a886df88224e72e8a570c6df466727da2a9328480579ada7bb86de57809123e1149122cd2a6c41392f8a3cc669d3d292dc98a9f7d401606cefb660c1755d829c3c2bba172f9023c9935c3048db49d08af36de722cb9377eae70c0d5d257b69d2d022e90a39c06926723956fc7ca3a5dff72b75fa127c4a25d59044891b3452bc331901fae135dff9100e81c60a4d7aba389c40d1db3e54725cfc8f015988a6bc5199903c4f1cf80bf394f2020360a49c3e1f1ea3c78e5f65ebbc966373f652471b462a0bea26d438e2b7f39744c2fb7ab0118222772a0fb849f4f63c718c5690b3df236b6b69c4def1ec6e6f194eed7add951d51ff84d1ca23c3e1abeb6f0e5e795e2db0645d7858aec42a69cf99dd6a18368933115df1522735c9715b1c3bc7ca56c2ded5cc56fdcb36beb48ddbb133c46f5132e18f5b9aeb7d5bed64d73a9e3a6aab1a8204e3d2f10ff116f6de9a6b0bfcc476463f3d57d6210aa0ec4c95d896bbebc7682d192eba6f0d7bbea96dc915efcedb43b5f9cf64fc493c4139639606d36686c622b80052dc2f6013c9d8dffd62d7135873953eca40b6f68719f10c2046fdc8da71fa298f65b0a91a4bbb9c47105328f8966fdd97ec8a4fbcc25249195871cd813ca8f035cb8622a48918486ca5c4bb62130a22b086f71430937aad66961fedac8071d147dd659ce65b91cd45cb0a98413532e442d7b4870aba39933879ae8df28d9f47b788932c0b13eed5a0d82356539fed0017882d94f600aa4fcdd5da8b4cecc7f4b9d665463e8844149d95a1a5b6bb8158b77e6ad65e3a3a63bf4392855e45130b64184e81244d8b4f7bf544dd5a1d6a18aab14bcb9dcb8f32e1eb84e6b4c927e2d89cf041181426c06bcef3e14105c4c4b588b68e0cd28a725a38acf93794ff2949a1b2a31023dc403eb0db3a88369f97b6b3ad94bda66614fbb78a06b37c4d389afa89823057a4f47a1779b95c425cd1259cb2d624842e9bcf302a9cf951bcd206eed8f6f3529259749f529449db528e807a449166f7455b617ea0a5f1421c1a31325d0151ab4da349a767eb2c0102deddd6eebf159d17f366d5f759b54941268934d9c7f7af4667a2572d661c51e38af45dec07125d6afa2bcae41d7d27d8cfb81b1f6257f17b6a61500841b54c9501f9b002d6d2851907f3c1011d0f7b9a733525ed84254ba51808cc95820a201f46df55c429f0229bf4ad99b5b92ac26618ecd51b1b557b3597697b1ea644a61b4f18a21e5b5d43ebe1172eadd9a", @typed={0x8, 0xe1, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x107, 0x0, 0x0, @pid}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, @typed={0x4, 0xdc}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x354, 0x1, 0x0, 0x1, [@nested={0x18a, 0xa0, 0x0, 0x1, [@generic="e40cb140cc78e0d86e458b2d724984b247a8b03512bf2ba5aeb6131e5a725af5c0416bea890b2c9ce01fb5bcd7014631552bdf663f2b9a2ccefc5fd0f19f0504b40fd439e037cb4f22c9986957554ced8475dfd5dffb207e250337b4d71feaa59304735fed5447", @typed={0x8, 0x10b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@mcast2}, @generic="785de737dd19808690e3d6a2fe7a11872d047ac45ef760914bfe70a759a41a9659974bd2e5364bde5678c22b336842aee71eea7ee5ff041a2f939097ce916ac9947da48eb1fc407ec288bf67c253254d2affa105bb2b52869b5fc23b96d9f2fee62833f0aa1ceb0e1967a7bb8f2c7363084447570127971db6014da450d20f19940a40ee08dc0a20b3c40592d93ab4e9c1c46eb04303599665958a6ec4c73ab724e1f215bb83ed01d2bdd61f5116b525147091760fa7d93981c193a56984c8a1354f36189f15a7d3edc82ecadaf7", @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="beba3f31a6e5b9fca87be0c42024a0e2484a3377c00bf7bf23ddcb7cad3cef61aab691f66e9dab89078f93c86e"]}, @nested={0x1c2, 0xa9, 0x0, 0x1, [@typed={0x1d, 0x42, 0x0, 0x0, @str='/dev/dvb/adapter0/demux0\x00'}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @generic="d270523ea97d98ce519ee0b8b2122b9eee3641e3780763c17334fed75f293d9b37c74470ef8e1ab8b91d4f128de773daea85f6dddcbd8879eb6d1f928602436f653c41bf5bd8b6e51f3afbb16ada6e0bcb24c8817e2523e8528dd8c55188d7b3b98b2144714aea5e2470d19db299269ee64880de9fe252af25347318c9588abc10453833cab173ac37", @generic="03e73feb204edc495bc6a982b7fe350619b253a58c843330da57b916cb601934426a434758a775ddef1e546834e7c7aa56c8f795b97c2b4e1d50adc250ab7377b31ea6bd9f7d5168fcaf179a50ffdbf9366930878816632391beeb", @generic="0a7f7d28b75c1ca61817dab195e9e1af137655d7e7379b1ce4f991ea553fda9eaab319d4e5ca6be25f6e52f671588dfbfea50dd1ed0e231d86fc760ff2b04ee4fdc7e10594880ff651fff66fa1136f14ee73476312267100b4d70702e1149efe50adb45fee531c719a86c0c814f6a9b611b40f1936aab132437c893f5e88d747f1ed788adda84d052018be81c7a34492dc9d55c64ac9403ac2581f59025b0e3753f5d58fd8cd8248d7a699a9a1bbfb3b26a6"]}]}]}, 0x28e8}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0xe, 0x0, 0x4) getrandom$auto(&(0x7f0000000000)='+]#&,\x00', 0x2, 0x9) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x9}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x0, 0x3, 0xeb1, r6, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram7\x00', 0x60643, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 9.126399769s ago: executing program 2 (id=2189): socket(0x2, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) munmap$auto(0x20001000, 0x7) poll$auto(0x0, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24044011}, 0x800) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x380000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) umount2$auto(&(0x7f0000000200)='.\x00', 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.830920439s ago: executing program 3 (id=2190): socket(0x2, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) poll$auto(0x0, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24044011}, 0x800) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x380000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) umount2$auto(&(0x7f0000000200)='.\x00', 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.537226567s ago: executing program 5 (id=2191): mmap$auto(0x1, 0x2020009, 0x3, 0xebd, 0xfffffffffffffffa, 0xfffffffffffffffd) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0x100000001, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x5, 0x97b}, 0x2744, 0x200000001, 0xfd, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon30\x00', 0x20102, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r0, 0x9208, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x282900, 0x0) read$auto(r1, 0x0, 0x200039b8) capget$auto(0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8953, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1a9901, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() 6.722752629s ago: executing program 0 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0xb, 0x2, '\',\xa7[[]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000140)={0x6, 0x5, 0x6, 0x3, 0x1, 0xffffffffffffffff}) r3 = fcntl$auto(0xffffffffffffffff, 0x6, r2) sendmsg$auto_NLBL_MGMT_C_VERSION(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0xfffff000}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4005) (async) r4 = open(&(0x7f0000000280)='./file0\x00', 0x202080, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000300), r0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa48}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x4}, @BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @random="6fddfc317c2f"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x89d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FLAG_BEST={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10000010) (async) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000440)={0x1, 0x80, {0x5, 0xd3, 0x0, 0x0, 0x2, 0x3, 0x2, 0x2, 0x6}}) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x501000, 0x0) r7 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=@task_fd_query={r2, r0, 0x5, 0xfff, 0x5, 0x8000, r6, 0x6, 0xfffffffffffffffd}, 0x2) (async) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f0000001840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f00000005c0)={0x1220, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x6ad5}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1004, 0xe8, "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"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x57}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x52, 0xbb, "f821bea9b03fdbc571c2478d23abdb39f9cdc6c57f644d3938d0506c6e87c61476d44728f2024dc2557f8c8a68ea4b0f723d6f8729d544d2e5290e75e734657e3d1c4e5b5f3c2768b47856edcc9a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0xa3, 0x2c, 0x0, 0x1, [@generic="119c363d2a7313e3a1463a926ef8749de66f685aacb0fc749677b3ee24c6960742b31704484acb3c112b662ba2e3a3489cbb799da95a1d7d0fa455579bbb905c208d05e9c1b038c04017816a4a443dfc25819fb7e1e72c4f9ec40eeea8d0ee1771ea51a90e87310744bb37653affd41c6f14a1c84c64b9b60e3fd2aaf7df3a112c1a8ce438704ddd54f0298af63a4233b55da79e9d03468d7649eb4a493d46"]}, @NL80211_ATTR_PMKR0_NAME={0xef, 0x102, "f2b4cb4f9a0f6519a1039878e020276ebd62499c14ae644f1bdc357e84c4bf1a6556989941a4601e376a950745c5b92e99969b3210555ab3c0ce4878768bf6c7b096a4727c62231e849cef14d4aa6a7fe01046868cda6a36d0f911d007d777bc34199c1bc972cde61e85df7c84aeced47c6c517f51b48ce1a196a2c901407fd69bac44d617161097d5f73bbf5e4ebd35ff8e5692dff2a9ec0a356da6739d123ea48e9022c970c4b1757281df0256aefe6b5bef2e658344fe424469fceb63217f60dbd9d8aaa373d31526305ed1131f9ee34e38a654a94e3bc4da8d5004eb42f6c4a9269aa07b36946bef43"}]}, 0x1220}}, 0x4000400) (async) write$auto(r6, &(0x7f0000001880)='batadv\x00', 0x6de) r10 = fcntl$getown(r4, 0x9) (async) r11 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), r9) sendmsg$auto_TASKSTATS_CMD_GET(r7, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x34, r11, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x6, 0x4, '!('}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r10}, @TASKSTATS_CMD_ATTR_PID={0x8}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x8, 0x3, '.f/#'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4801) (async) socketpair$auto(0xf, 0x1, 0x0, &(0x7f0000001a00)=0x7) mmap$auto(0x0, 0xea8a, 0xc68, 0x18, r9, 0x8) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001a40), r7) (async) r12 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001ac0), r8) sendmsg$auto_IPVS_CMD_SET_DEST(r9, &(0x7f0000002f80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000001b00)={0x140c, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2c892c0}, @IPVS_CMD_ATTR_DEST={0x11d8, 0x2, 0x0, 0x1, [@generic="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", @nested={0x1c3, 0xd5, 0x0, 0x1, [@generic="722c17bfabf91295ae8d77de30625398ea2aed0b7496f64cdb11822b787a683261e9746ce629db8ed280c537a5ef82201a62acf3d81bdcfd81f6640b2b3254baa822c30f88f6e8ad4f991b28b98e624c4b29f1b791d7cb76fff1", @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @nested={0x4, 0x149}, @generic="d25931bea9ea779527bd699258e928d6b6393d4a70244d1facd82042077e99247fd92b32f9ab686369027226a284696487cb0ba3a2b90d96e3145c63d9118bdd71fd85e309c6a1bb86587b9d2b435e53b55904", @nested={0x4, 0xe2}, @nested={0x4, 0xa6}, @generic="62ef87c042e6ddb79f6ac7ca49e6414479cc2e2115ea9781f87012a97a12eaa4766281d6f88f00bc4f21f87bb6e8b6b055d3af2bcd1dd463d5ab42220010dd740b879a2106ee875ae64dd66ad322c01a906abda7bcdfd7f99427ca01fdeb61902dcefdeb1272755792e86d231cc5aba1c2fa90186a178f3246b43976768e4c6f664ebc20316a00f31c207a5f300dcffc40005ec8e326ff82df50a5e33f0d06d79ed0d8c1947b213b3d655ab22a8d89aa08bb12c47420b3086029e5f4a0a4b75a0e86cd45211854da67af65683eaa03e709f42f7ae0275cde012dde0909a9fa4a095688efadbf", @nested={0x4, 0xd6}, @nested={0x4, 0x102}, @nested={0x4, 0x12d}]}, @nested={0x10, 0x1e, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1f8, 0x1, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic, @nested={0xd5, 0xdb, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x125}, @nested={0x4, 0x22}, @nested={0x4, 0xa8}, @typed={0x8, 0xde, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x114, 0x0, 0x0, @pid=r10}, @generic="f069625e8f486d96c376301e915b4831dafccc37277fe4c916cd12d8ed05a8ae9eaa0aa3c67fe2a9ce252188b77e69d8ca45da428018b6eaf72329d0b2f072a9b23a97fca6ca315f552daa20dcc1318835ef655a255656506ce85ad7489eeaf8fa85c38c396e44ff19cc7926bbc01b2453c41009a15f5226ae7e81e6cfebeb7a4a7a7187c785506310960c79c36b4b2eaf35eb5445b768a694158b25e70f7e4607", @nested={0x4, 0x139}, @nested={0x4, 0x10c}, @nested={0x4, 0x1a}]}, @nested={0x106, 0x79, 0x0, 0x1, [@nested={0x4, 0x80}, @typed={0x81, 0x14d, 0x0, 0x0, @binary="c744f025fe09c00b20e4c44b101fa3f2cc3c636eaaa77d2dadef66dfcc2d4f1834dbb63cc7818f5f0b3109d379edc28e22cf39ecbf6a00c296eefa2d37371a9c044376fd1fa7ea46a90d668e31a2485e324fb1642e8f8e1d39b18bd95564bb551c44aa4db7595cf92ebc77aeb7b0ae2b5a444acd4fd737d0b8567b107e"}, @nested={0x4, 0xb9}, @nested={0x4, 0x2c}, @generic="ac4271cf8fcdad8ad8e908b5efe6453de9716a027bdb6a59c011c6f68b099abcfae6dc697e632ba59808f4279db8677fa02f781790619d0429b256822c9f10b97985bec3c176736be7bdcd58acd33ef18aca7f489402f373f0b6554c3aa3decd7338a791630d95bba3ad7a764fd558ac7b10"]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0x140c}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0) (async) sysfs$auto(0x2, 0x402, 0x6) r13 = io_uring_setup$auto(0x80, &(0x7f0000002fc0)={0x8, 0x800, 0x80, 0x7fa9b080, 0x922f, 0x800, r0, [0x9, 0x80000001, 0x3], {0x7, 0x1, 0x2, 0x4, 0x6, 0xb7, 0x63e, 0xfffffffd, 0x9}, {0x1dfaba23, 0x7ff, 0xffff, 0x29f7, 0x1, 0xe15d, 0x80000000, 0x9, 0x3}}) (async) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000003040)={0x2, 0x401}) (async) process_madvise$auto_MADV_POPULATE_WRITE(r8, &(0x7f0000003180)={&(0x7f0000003080)="5b0f3dac6f840d5526047433f7cc29fc391830e5bd275829ff74a59fd30ce5ee4b78cd127c1fc862a57ef526844fcedb8314f72410b99ecd5c1b71fde6d77021f4e5049e790f00cbb3752ff36b98c3018f401527bd35d35f6db657a4e25aea5299970d4bd0e755fe512decac1664ba76c9fe11f0fc2d3a1cbec4902091dbe9ad3e62fd4efbb912179f914d7026391ebff8067f0b54b909da8875e84bbcddf0027eda696db3f8ba6d6e65d8d66b4ea5c9f5473ed9a7c5fb180dba70a6ee591f2ecf9e750bf21e94838ad537fad6", 0x697}, 0x40, 0x17, 0x6) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS2(r9, 0xc080661a, &(0x7f00000031c0)={{0xffffff01, 0x0, @identifier="0b1e4b9fc9c68fa509dbeba6761e344e"}, '\x00', 0x8, 0x9, 0x7}) r15 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000003280), r14) ioctl$auto_XFS_IOC_ALLOCSP(r13, 0x4030580a, &(0x7f00000032c0)={0x7f, 0x566, 0x3fbc, 0x6, 0xfc7, r2}) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000004640)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004600)={&(0x7f0000003300)={0x1300, r15, 0x110, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x1273, 0x13, 0x0, 0x1, [@generic="a221077059b8b008010f8fff658de8ddd1c3289bdcbbee2e0a7382b30fb3662a5b4ef5023189a120e74c5ba89d56cb9b6363b89ad6269f44cd370e7d1589286c4664393c04e6d7f474b3642943322a0bfef4db83cc54ad311bc7023e4bb4ee0bee99b9718b34df3d85356686f7a271f62be04265e7744c77c5adc4f613824cb868e7cc795df9c5914674ab78b622ed2bb5e088df030cfe3f11031df7cb4f52", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x3}, @typed={0x1e, 0x30, 0x0, 0x0, @binary="bb78e684d008bb43f9056974c3d9fd231c744383c2f6d839c7d0"}, @generic="c2b9434ae11fdf1ef31aafbce02df5d20c023d1f9125b6c719869a45b8a207fff602528e8554dd09c22d9f8d2946cc43b23f82dd691b076bcb1e40898a9d6d305a388f730a2cbceab6b27413aacd6b4dd2d6273105daeb792a2a781628adb2d9851ab8c40e54b273d484ac80dac41853cd02c1f2457d93040a66c87d1a0e94294813d2e09bd70d66e947741bd99f7d1970c6536b37610570a90f826f9c25db6ac052254a88c202d2158e80c8e4c24731", @nested={0x6c, 0x7d, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @pid=r16}, @nested={0x4, 0x24}, @nested={0x4, 0x117}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@remote}, @typed={0x31, 0x1, 0x0, 0x0, @binary="49ee4d7607158dd1ed6e8d1c4888016373755516f5909b02b0364668fda0a688bb3b63c173a0d0a909f0df436d"}, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x112}, @nested={0x4, 0xcf}]}, @nested={0x1008, 0xe7, 0x0, 0x1, [@generic="78a9d08f84232f0a07aaf19c23d607d262bd5466ab400c10bc0c28c669f07b162326658aaf64a66829907e3f54dbedb0cd3ad82ac3abab57d279ceaf79936719aa6d9ee429af5c679f94793a0bbb404bb014572861f2b9f5ebe97dc3962a9fd9355398c5df3cf6a492cf76f3a55285097434c687897a376e2d1e1e9d58f5ea747aecb62a231b516a77ff8f6117a8f5e227bba876e56f791f47324e90e4e7a252e8b512f827c9605bfc497cb434b21af609b9011bf746b1488b4064fd45e6366c2e4fbd6196ed6bfc3318bf5ae9d29c5a43e066bb8065ea1ed4157a6136ebb56bd2b07a902ef6e36c498536aed46ffe2f9031ce3f56e0998ca9dd1c41318461c40b50ebd34c054a1e9a536adc48bb838c85625f830398cdfd75557cc7c454dbe2bedce77edec269bac39692427e2dfecfc996faea37303e6b807d5d800147206a44d1453ef341c6baebfbc1e1815a2e3f261156e5594488fbe4b905408e76f3a15121bd67abd18eded056aad0e8e1b262db08692646a720b8ebc4a73c572db3797c65ba6d4c08573c88786e6ed14794581e84919931de89cb1caecb00ed744d1ba096ac10fbfa1ddd67a443808e4c27ca096c2e677a80e46a242af7bbb7f06ee6d5c4c91d5a9fe189f27d20a4c4cb366e41cf93d4a60325588977389c017ad90d652bf767a9ff160753754d9381bfaa1056191e9ef2b4e2122e84d364f7c2bd7436a5bf9f2dc56eb5d532df7fb5a7da78ba9bebed83824bb21b3bf9f298831f44ff2532088cf477106bd54d48eb0970c443c77098a8a804effb6f1873ba59e027dadb4d4d5a7d0dd8d5822c0478aa4b058af9ddc0fe746fe9ca8fb40959e123a6e8f7a0db08894f90a5d55528179549565ea58769a8b7e24beaf91c13c063f7d6884193198bed1049486a03fc1744dd80b354907e18f76029b55628e80139603fc5bd68bb498e45286096e9d6bc2dc0fd2ff8be0d02b4f009c7e567daab2e255d1ea2320da4712477399a1d9d0d3dfae21a9b4b5398920e0fa8111a7899ae3fb05af8f9b7f0f76d9c5719d94f44f75c01c90da2dcd7231e5e3aa206327b241193c5681146675210de5baa39081612b8c72e38c1b6e5de0ef9f63a302466ec1308c877fc82dbee7f7fcbdb95e3c534dd622565e0b26e77124c26e6368334a0754375bd589f8e8b154d75311dece3b9887058a81aa42df30ab7b6f1c45e89da6e565575cc2ac64992093c356cfdc5dc6da809487aa374d686c5e5229d1a7df37707324523662b1272a5e17d3b9b40bf33c06d822bca49ca5990c6a6eb054338af2152f89284c0deb24b257737aa422f7886501ca2c100d2892ae265d7774dafce111fed5f69de9192c15f71b54fbb5d90016587c978b5c42a103ce1d675cac0b67648d509975cf0ce96871780ecbf2e075e35ec922b9679c28a4b2319c6c49112fd97751d9dd7f40186037d23947ea2ee1b00f3d08cc64cbd34095366f0f985f88e8bf8561b56c768007716def4f09d5a54d75c4ca285004708f60377975d9f42428e1ccd8ab1857e66c17379b843dfb1cb5c945c4a54719d43d2499615afa02ebf16174847699ba9dfea95717a05635228f241634fad12fcae4536280480e4216dce3c510797ece6f29a336a8924eeb7bbcfa3decc0f30016d14f9f0f6f520e60e9bbbcf864756a22e13f3ab63af8f3d391a30b991f92fc87ddbda80918b65d6607df0f8ab4a4f622f00388eee0d97062cb6a6560821c0dc7cba7c8476b3b3341843f8a05466c50e727a40ddeeb9a8416acad953228fbc1a84edafff81251f6dcd1b9da7dbb9dba2222134fad5f4848f42f556832051c7fdc86c6a57cec3a4ff0dbd320174fdeac4f7ce27f0732ef368122ad64beead64d61112918f78a3304eb54dd1143c9af39c9f21cf53bc8ebaa00b5030f9a4aed0e3b808c7a6f4dc547277346edac39c644ff9ee0c51ad2768675cf7d7ce2d2677949f191abad866186c1aa0eec33e3e2d91c789db19ed395d4646d3afefbf7eaa380dd8d0b79f2a99312d7927436d58247d779f32e6d3af7d913eb7b65ffc79520e5820d851343e1ee692aee75b7fda8b3904b248d7466ef90ee0a8f7936c81d11448519d520be1859e3972da0c821a9466bef9f518c535e774a19b6ec2ea1ebf56d5196545212669c993625d5e130141083ffb255a42b19ea5bdeabe5fa8ad42058488f8ab4885c396ae3054c062b2e3885d3a22ba132b53a5649587abb63928fb00d8a59cbb34e469b0e7336da7de7cfb5d28937e4ea6aa8e83a1dffcaab65d7de8c33b96184ea1b737806dced199af56e6352b5c2496cb6f736b04fba1105a98594c54fc4b3220f6f3554df325f58e780cb6f80eab75c06d4377ec91493e863687cb0072778c7ba0d463a03aa045fc10f9815189fa7edb648ec1d57197def66750c036479674dd3ca756fffdc9982331f8ee925257989047d8d412370891d73a7e3ada4d582a9066dc1cfaff2b5868c3af7cbc2676fa99406edc51a61bb21b027ab7eaec0de61cf5105c6bf50a40c1ed69c9c4c9f4b063a2e4c31cee5742c9bee31a7cb6e6a788ff23aee269aaf7107205bd16e6b9df8bf04c55865ce1228f6042d9be986ec65f6ce85d36dc117b489a7540b5935663764e348a3b55fd63f800e80d2815a46e1478aa2049bab58558809f1cbd108a9cdde4ac8e038e1f989678c3518df91fc895d92da66c78f98bd45167813dc82b3e9a3321c9a13ba189cba08b9d4570b2dbc376ba148b292c3cdb2558561fbc00312d87f0055d44e87128b518c12746664ef05398fc9c980efc2eef565c11e36ffedc3a337f242d23412dc34b12a86ab86f04abe7c797507536239ec35a54c887b671d63a8b0bb97dd591769c80335b500f2cc6b99520befe402f93a1ac9ebe9b8a775aacc6bb676f5c4f1a0e421af9071396f651cb1e9bc9e37ccd702cf2c324dfb568a81b424feb7b0c58c3a30f22c83e7ec4632761087776894d5a38f284ce553a0107572020fbd1d21db4db86d7b9bf2d09b191e84f563e6b38fc0e686ac64314d2626880f167f88add0897c806954d328c14014e65400321f4b2e50ba025736efa6eb45222b22187d5290c1df8fd0fa84b1b5437481a1d8529c81f1c94165d6a46179a1135df89bac3e993ec370aa2e864085ed32edd98c80feb431e4cdc31be63be9df73da86895873caa595d158ff5cf8f81734922b2ba3979432154e079dd4723d458e08ffc6daa6ac4cccb550256463adac5acfe7ae58bf7ed092dd92c74ba888e07b79df4a88053d7f4343279c71fb1acc38400928e4709a0947291985a6fca6302272da01dfa084b794aedb4469284a21a6da8543fbbd47fc9861c617eeca0b4cd7dbb937803054424ff6aea4a4b5d724c2a61bcbe3be679a57a871c6211cdcd8040921ffd4f5279c44e114f42388044d22ae9776a8f9a1e7d81e6203d7fe19b5e3088cf6464ce717d796685df5757a590649efabbfd16dfa0745c735dddd556aa34ac131e6e37f034c1032ad514676154c6ba380959e0a6a377d4e88694f30cedf3c774108b61783d3e15720aeb0a2a15f0c97db9fc087973849bafc2169930bd14d3ed5245d7bfb4d430a3ef985caefd841d6b22c5018981cdfd828a474b981fad1d272ffe4c1e336f7cca7f0cb6252716b4cbe4fedc65bb63320fb3fb9ed5d9e7c62d55da59b20a4de19544413662b4785e503fe1545c1400005f8b811d905c974339cadb3b08db1a9548283882c073ccbdea261ab0a302c08ae144f71119dabb87b0d7cd7d0172ac8e1e12b3ddeb694a230eed6d7c443ce92ec7b7ea53c394bda6f5d02e32aa4045bf64e4a0a642a3d5a6121dbf9dc0f54bcea186e7ae77c58c35701770d89cb65933897d0e6ebea60073184c1b7c9f5bfb0417fd387ce753bcbf451611f0a8ad39c507749a9641722df7e969c2706c1962b1836c79a05c4dc7115052e3092672709344fbdd6ad179d83258171b64f353ca319aea07326ee3dd0ed72e0b59eec18b6fe5e792a51fc7fc46e6371a426b6a10a13b2e3eaaae63d07e495220a935c2d0f227df437c111ffb9a8066cf1e7b06eac6bfdd67158f434375cbfba9a52128690357a5c65be23c5a1129c4c1c94536b4470902b1c78a7810c1656a79f2a4d7353a5100f5a3d59edb4e16f7e06d12730445e88ddd17e01397eb4009f5b9f68f2a9e75593c8c6d303c12e5b1a5adfc305da73e51855574c05f681f162203c2bf5f3519ece35afba22648f4acfee97e173e76969a4adceffe392070689f9440ee6c4a464f7d7c4f113c3429d5b0306e29935902865535f471fafd5b4d3734ede680e791dac41e31c0ecc2cd4e68c2a99acee4f121d134140626eb50c74e0c99b457f507af516986359e1617310eb1fd659574f67ada9e92128e71567199937fa97f82ab273868c09e2c4d38465b991cb95e80b53e78743a26f2e9edc63d8ed24f368eb6573a15131460ae9790fc3326ef25eb8e9ef15e7a905a82402711e0fcb5b37ec716b9d6eea02ddba56447dfad080a44ed4d9fcb7cbc6408a3f15192785f55998a2ac43fcb5971e82a225e52cef78f8a2af677cde8047475dcc0edad8817c6a6cf77d446c8417d498e39c6c506834a417a10fefd35b72ad720c12a005c2ba55c89497836453a21470ddee4e3d12a1c340230a340100cb7320457085b71b4e9f83ea32d98d9c9180d1a1aebf72a39b5216e79883ce3bdf55cd93d27047903ce576100908fdb15793e386b43ee6794b86ff23f2c39bc42f4e32c2921b75f362a9ce890101b10c00978da19e106ace15b03ef25c794b688b07da01c50810c8d4da27b93a94aee12584b01082a31e29d81d079be89a8f9f12237dda2eaeaf5b25f0ad22044102577d640ba5b6a7d4b0d56eeac05c16739be1e772ec50d7ca17efb322331cab1eb7856e46e730fcd9862261477f13f53820ece3de3d4c77f7a37fae72ff151590a43169d3a9e8933e33d5fd0a9803e5ebfd802e3b4082b6b9c3cbd9c4270b4d39b100540cf002e3c7460708dea66615849dc2562510298db73fcc9928e3fbd10714d1f9de3a905048ccf5b2849c4f9a259383237233d1eadb7896ecf0e52d484de0a06e909d827a51bb77964f2acdc7f8e1435eaa7d70084dcd4deffbf70bc7b4bf9761eb8dd5a90e0f28f2d233ec6058d0bbe65c5114dcfec2cc9edddb443f954a24a7dcb09dffa1cda713ec34dc8bd5014fea8125015c4e539938880cb270fdd97083a68ec54e7508a265585adbfd723b4e82db253eee926cb900215e56e8106660c57be895f2a36fffeb0709ca504d7de6144aaac01e11ccff1dc6bb1075368e2bd65cddf08ee6f9f2389852150ccea64c656c54b7e86e896bc26e762572dfeedb4a747fce7d973a781abe9e23c3090ff19a9312193a69cc9fafab7aea52cb1bbc55084af5566d20286f388050ca614e6c2fb5ed1568e1c52752ba01e0bc1e3d682c170e902253001cbe9e00c4f0a3b08e226aa34d884d0c11302ae6ae222bab05c43c98cbbd2aef909e02f62b1cd88032b7b76c039cc45caeaced151d7a0cea618d980b1097709a24d376766f027b749ff23bbf30d58fdea31d33f54dca3d3ca533614563e7d589ea885c7ac04e452d27b35648aa3b31d7b270fe695c8cf972c2cc24694599acb82ce8027dd792409b6e4ac730e0b6bb783a17a4419e69317302a624dd5dde47f9ea06b9bf45a01458a1a9a07b8cafda0ceaaf6a9ca327643c1a581b12fc8ca943e84682ca8ca90eb1d64e26c557889576fd9a4dcb49327", @nested={0x4, 0x39}]}, @generic="f8a8254c2fcf9dcdeab6e4da5f16ea2b83fd99e7043acc7b231eacde7cca9ae5ba37c99c559f61ed9d0e5994e0ea1b4049b127d8704de5414efe690fc32cffdf13ad4661672ece788b971fed72231aa7a00f247cc5c59ba1f33493caf330d901dd3b169e5ec00177715c893beace32bd3308fce398290f774f247f1bd46bb809"]}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'batadv\x00'}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x9}, @NFC_ATTR_VENDOR_DATA={0x5a, 0x1f, "db5692f2d4946446c69470ac346ad6cdc65333b0b55208274529c265c70cd736a815d93cb36299c21e12262036c20438994dc583865c9f1b88c7232fa368a1552a2cef58d4a019ef9524409a4d9a29d0f7f874226ccb"}]}, 0x1300}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 6.46568539s ago: executing program 0 (id=2193): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x1f40) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xffc00000) prctl$auto_PR_SET_NAME(0xf, 0x5, 0x0, 0x8, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002140)=""/64, 0x40) (async, rerun: 64) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async, rerun: 64) read$auto(r1, 0x0, 0x0) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x300) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, 0x0, 0x300) (async, rerun: 64) init_module$auto(0x0, 0xffff9, 0x0) (async, rerun: 64) lsm_list_modules$auto(0x0, 0x0, 0x0) mlock$auto(0xc, 0x87) (async) gettid() (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) 6.459939843s ago: executing program 2 (id=2194): socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5cedd98d0f0000000000000e9bfa4e0000000053ca9aee370a", 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) r1 = pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x3ff, 0x2}, 0x8, 0x20df) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x13, 0x70bd2c, 0x25dfdbdd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040804) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0xc0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) 6.250231121s ago: executing program 5 (id=2195): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) write$auto(r0, &(0x7f0000000080)='\x00\x00\xdcLS~\x01\x00`\x95\x1d\xc4\xe4\x01\tl\xf2\xd4DBq\xf0L\xeb9\xbd\x1b\x01\xb2D\xa1\x00\x00', 0xc8) getsockopt$auto_SO_RCVBUF(r0, 0x5, 0x8, &(0x7f0000000000)='}}#\xaf+&^+\'!+\x00', &(0x7f0000000040)=0x2) mmap$auto(0x0, 0x7, 0x3, 0xeb1, r0, 0x8006) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x0, 0x66) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xc0, 0x0) write$auto(r2, &(0x7f0000000100)='\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(0x0, 0x41a001, 0x409) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0xec7, 0xc, 0x0, &(0x7f0000000240)=0x10009b) 5.878111932s ago: executing program 5 (id=2196): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) sendmsg$auto_NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xb38d}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mmap$auto(0x100400000000000, 0x8001, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) sendmsg$auto_NCSI_CMD_PKG_INFO(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x44088) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0x1fc000, 0xfee0, 0x3fd8, 0x3, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb0/napi_defer_hard_irqs\x00', 0x8a401, 0x0) 5.639255299s ago: executing program 2 (id=2197): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd2, 0x3, 0xfffff000) mmap$auto(0x4, 0x400006, 0x4, 0x15, 0xffffffffffffffff, 0x8000000000008001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x501000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xfffe, 0x0) mq_unlink$auto(0x0) 1.792615349s ago: executing program 0 (id=2198): r0 = socket(0x27, 0x3, 0x0) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x2, 0x2, 0x0, 0x50b301a, 0x2c, 0x2c, 0x4}) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0xc02, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2b, 0x1, 0x1) socket(0x8, 0x80805, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r3, 0xa, &(0x7f00000000c0)="2e77beee922e81cbce34c1f2f2b2b655759bb24d80ec8be3432c0ca5b540c23f4d057a36254cb67594e7df93f36c56aa388eee371b082465a13ebcc08dfea05b9932431b97b2e9c4b04e61ce01965a052231fad74295c5e94f312fdaed5118f3d37255ce06149ee8", 0x216) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) r4 = socket(0x2, 0x2, 0x88) setsockopt$auto(r4, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000000c0)={0x0, 0xc4}, 0x80000000400, 0x0}, 0x7}, 0x3, 0x0) readv$auto(r4, &(0x7f0000000100)={0x0, 0x100000001}, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) ioctl$auto_TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000000)="7204883064b9") 1.682950803s ago: executing program 5 (id=2199): sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto_PR_SET_ENDIAN(0x14, 0x5a4, 0xfffffffffffffffd, 0x5, 0x6) prctl$auto_PR_SET_MDWE(0x41, 0x5, 0x0, 0x4, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = mq_open$auto(0x0, 0x5, 0x3, 0x0) socket(0x15, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4c, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x801, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x1) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x4, 0x0, 0x4, 0x0, 0x8}, 0x1000}, 0xffffffff, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) 1.571528737s ago: executing program 2 (id=2200): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x20c0880, &(0x7f0000000440)="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", 0x107, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000340)="b0ee17bb1587584126e461af766dc771c4bcef98b8a953bd000000000000006c894c4a43b083c6d1a5938a21234b3c2607b7e213d27e1fd4c970daca978163ef8768d6712b75a829196da82bc3058ce5dbc43d2544b797f7ffbc72548e791b6cd3b275817c24e18f63b5f6526223d57e32f9a78f06d75dd942e883a9cc2e2c28a23ebc35d9a624a0d8fd3e25216b26331347aab7c02101c9f5eae3d651cdfd3290a3f6eeeaec9c4b9777dc5557df177490d2a052aad97d4fe3f2faa2e1d97a5cf05451a76e41b9d5770f5407459c65043b8d33fc89c681334ebd401873ffe9570989bce30b26de555a8078350843ec5bf20f357145") r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) r2 = epoll_create$auto(0x4) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x20000, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f0000000040)={0xfffffff8, 0x10001, 0x2}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) mmap$auto(0x0, 0x7, 0x2, 0x40ebd, r2, 0x1686) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) fstatfs$auto(0x0, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) write$auto(r3, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6\x11\x9eC\xe0\xdf\xc5y#\x01\x1c\xea\xe5\xfa\xa4/\xe1\x85}M\x98g58\xab\x84\xe7>k;qw\xd7\xd3)\xfc&\xda>@Fq\x8d\xd2E/2f\xe4j\xfd\xa8\x16fW\xba\xe8\xad\xba\xe0>\xcc\x95\f,{\xa0K\xbe\xf95\xde\xab\x10gOSN\x03L\x03i\x7f\x9c\xd9\x9b!i\x9f\xa1\x1a\x9b\xd7\x84,\x9b\x8c\xc8x\xd0\x86\xb4\xbc\x83d`\x1d\xec\xeboO\xae\xa6\xd3Z\xa0\x1dFe\xb9aQ7\xee8\x00\x00\x00\x00\x00\x00', 0x1c26) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x300}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6}) epoll_ctl$auto(r2, 0x1, r1, 0x0) kcmp$auto(r0, 0x0, 0x10, r1, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x1) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) 1.067440586s ago: executing program 5 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x169003, 0x40) rt_sigqueueinfo$auto(0x0, 0x2, &(0x7f0000000240)={@siginfo_0_0={0xf9, 0x14, 0xfffffffe, @_rt={0x0, 0xffffffffffffffff, @sival_int=0x43}}}) r2 = socket(0x1d, 0xa, 0x9) sendmmsg$auto(r2, &(0x7f0000000040)={{&(0x7f0000000180)="9112cd06cf8d", 0x9, &(0x7f0000000100)={&(0x7f00000002c0)="a33a87a129233f8fc1bdff8ecd596384464564eb3866094c253de7e43d5db5000166f552efdf57c7f4bbddcec1abaad03f5ea0cffdbaa9b5505100000000564820bd1dd499b6841e4280a4c3580b742888edb09931257b3cc1acf575abdc45d6bcb339110000000000000000fd364ddc5bdfdc82ee0a31cc2f310e963c3d1d876260d21a119c878377de1ea9e39a229d062a2bd63cb3c56830788712e79eff0f85dbaa11f5a69267c9d8b62847c25aee18467d97a16d89b522e86ae5a82651fd69d42d63280a6eaf6e3ba4a02c1952560d31de858b76bc9d611af47f6870eed8f6fbea158a3d94d1a08b1998b5fa55bca5", 0x49}, 0x5, &(0x7f00000001c0), 0x5, 0x11}, 0x4e1}, 0x40006, 0x100) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x7, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x8, 0x0, 0xeb) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttya7/power/runtime_suspended_time\x00', 0x2c6443, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0xffb3, 0x8, 0xdf, 0x9b72, 0x2, 0xfff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0xa, 0x6, 0x8000000004000000, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x0, 0x0) readv$auto(r5, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8) io_uring_setup$auto(0x9, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20842, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub7/info\x00', 0x6080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, 0x0, 0x0) mmap$auto(0x100000000000, 0x40000e, 0xdf, 0x9b72, r0, 0xfffffffffffffffe) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x802) 858.429399ms ago: executing program 3 (id=2202): acct$auto(&(0x7f0000000340)='/dgv/bus/usb/001\x00\xed\x8cG\xc7f\x94\xc4Pe\xa2\xb3\xe4\x8f\x97\xf4\xda\x00\xe5\xd7\xd5\xf3\x83}\xc5\xadUg\xc2\x16]-\xa9u\xf3\xf51\xackb2\xf2\xac\x92\x90^,\xfc\xc9~x}{\x1b\x84F\xda>T\xa05\xb5)\xc4\xed$\x83\xb4O\f\xc8\a\xd7ZH\xc3\xec\xa2\xb2q\xcc\xb36\xb1Gw-\xdb\x88\x96GOV\xb1\xeb7z$\x86k\x84\xcb\xe9\x81\xc5i\x9d\xd5\x8aE\xb7\xa9\xf1\x89#\x9f\xd4\xc1\x80oHR\xa1`\xf4\xdd\x87\xb4\x87\xad\xc2\x0f\x1f\x9c\f;\xc8\x9f]\xff2X\xfa\xbe\xe1\xbb\xaa\xe0\xbb\x83%\xcc\x80l\a\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x98\xa2\x80\xad\x96\xf5\xa3.\n\x8c\xc9\xcd\t\x84Z`\x85P\x907\x12\"K\b\xc5\x05\x7f\x87\x8eC\xb5\x14\xf0\v=\x91\xc4\xac\xc1\x97\xf7\x0e\x83\xdb\x12\x10X\a\xc9W\x90\x0f\xdc\xd3\xe6\xe8f\xbf\xf1c\xab\x01]2\xd6\x93\xea\x95\xa0\xdf\xcbc\x021\xc3\xdc\x03\xe9P\x19.\xd0\x01\x80\xff\xffT0#\xfe\xf2\xad\xb6\fK\x84\xb7\xc4F\xa6\xec[\xae\x80i5)\x9c [ 608.098035][T12031] dump_stack_lvl+0x16c/0x1f0 [ 608.098076][T12031] should_fail_ex+0x512/0x640 [ 608.098113][T12031] ? __kvmalloc_node_noprof+0x122/0x600 [ 608.098142][T12031] should_failslab+0xc2/0x120 [ 608.098173][T12031] __kvmalloc_node_noprof+0x135/0x600 [ 608.098201][T12031] ? seq_read_iter+0x826/0x12c0 [ 608.098241][T12031] ? seq_read_iter+0x826/0x12c0 [ 608.098274][T12031] seq_read_iter+0x826/0x12c0 [ 608.098312][T12031] ? __mutex_trylock_common+0xe9/0x250 [ 608.098356][T12031] kernfs_fop_read_iter+0x40f/0x5a0 [ 608.098388][T12031] ? rw_verify_area+0xcf/0x680 [ 608.098429][T12031] vfs_read+0x8c8/0xc70 [ 608.098456][T12031] ? __pfx___mutex_lock+0x10/0x10 [ 608.098494][T12031] ? __pfx_vfs_read+0x10/0x10 [ 608.098538][T12031] ksys_read+0x12a/0x240 [ 608.098560][T12031] ? __pfx_ksys_read+0x10/0x10 [ 608.098582][T12031] ? rcu_is_watching+0x12/0xc0 [ 608.098613][T12031] do_syscall_64+0xcd/0x230 [ 608.098650][T12031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.098690][T12031] RIP: 0033:0x7f1d2158e969 [ 608.098708][T12031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.098731][T12031] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 608.098754][T12031] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 608.098770][T12031] RDX: 000000000000100e RSI: 0000200000002100 RDI: 0000000000000003 [ 608.098784][T12031] RBP: 00007f1d223a4090 R08: 0000000000000000 R09: 0000000000000000 [ 608.098805][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.098819][T12031] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 608.098849][T12031] [ 609.573522][T12048] FAULT_INJECTION: forcing a failure. [ 609.573522][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.587805][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.0.1094 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 609.587841][T12048] Tainted: [U]=USER [ 609.587848][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.587860][T12048] Call Trace: [ 609.587867][T12048] [ 609.587875][T12048] dump_stack_lvl+0x16c/0x1f0 [ 609.587912][T12048] should_fail_ex+0x512/0x640 [ 609.587945][T12048] ? page_copy_sane+0xcd/0x2d0 [ 609.587980][T12048] copy_page_from_iter_atomic+0x3ad/0x1950 [ 609.588016][T12048] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 609.588038][T12048] ? shmem_write_begin+0x176/0x300 [ 609.588066][T12048] ? __pfx_fault_in_readable+0x10/0x10 [ 609.588099][T12048] ? __pfx_shmem_write_begin+0x10/0x10 [ 609.588129][T12048] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 609.588173][T12048] generic_perform_write+0x22c/0x930 [ 609.588210][T12048] ? __pfx_generic_perform_write+0x10/0x10 [ 609.588238][T12048] ? inode_needs_update_time.part.0+0x191/0x270 [ 609.588272][T12048] shmem_file_write_iter+0x10e/0x140 [ 609.588306][T12048] vfs_write+0x5bd/0x1180 [ 609.588329][T12048] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 609.588363][T12048] ? __pfx___mutex_lock+0x10/0x10 [ 609.588397][T12048] ? __pfx_vfs_write+0x10/0x10 [ 609.588437][T12048] ksys_write+0x12a/0x240 [ 609.588476][T12048] ? __pfx_ksys_write+0x10/0x10 [ 609.588496][T12048] ? rcu_is_watching+0x12/0xc0 [ 609.588527][T12048] do_syscall_64+0xcd/0x230 [ 609.588564][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.588587][T12048] RIP: 0033:0x7f7b6858e969 [ 609.588605][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.588627][T12048] RSP: 002b:00007f7b693bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.588647][T12048] RAX: ffffffffffffffda RBX: 00007f7b687b6080 RCX: 00007f7b6858e969 [ 609.588663][T12048] RDX: 000000000000b8c5 RSI: 0000200000000280 RDI: 0000000000000007 [ 609.588676][T12048] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 609.588690][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.588710][T12048] R13: 0000000000000000 R14: 00007f7b687b6080 R15: 00007ffe8065c108 [ 609.588739][T12048] [ 612.011145][ T5949] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 612.314025][T12073] FAULT_INJECTION: forcing a failure. [ 612.314025][T12073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.409817][T12073] CPU: 0 UID: 0 PID: 12073 Comm: syz.4.1100 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 612.409855][T12073] Tainted: [U]=USER [ 612.409862][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.409875][T12073] Call Trace: [ 612.409883][T12073] [ 612.409892][T12073] dump_stack_lvl+0x16c/0x1f0 [ 612.409933][T12073] should_fail_ex+0x512/0x640 [ 612.409973][T12073] _copy_to_iter+0x2a4/0x15a0 [ 612.409997][T12073] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 612.410039][T12073] ? __pfx__copy_to_iter+0x10/0x10 [ 612.410063][T12073] ? kernfs_seq_stop+0xcd/0x120 [ 612.410099][T12073] ? kernfs_put_active+0x86/0xe0 [ 612.410129][T12073] seq_read_iter+0xcf8/0x12c0 [ 612.410179][T12073] kernfs_fop_read_iter+0x40f/0x5a0 [ 612.410209][T12073] ? rw_verify_area+0xcf/0x680 [ 612.410249][T12073] vfs_read+0x8c8/0xc70 [ 612.410276][T12073] ? __pfx___mutex_lock+0x10/0x10 [ 612.410312][T12073] ? __pfx_vfs_read+0x10/0x10 [ 612.410355][T12073] ksys_read+0x12a/0x240 [ 612.410377][T12073] ? __pfx_ksys_read+0x10/0x10 [ 612.410398][T12073] ? rcu_is_watching+0x12/0xc0 [ 612.410430][T12073] do_syscall_64+0xcd/0x230 [ 612.410467][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.410491][T12073] RIP: 0033:0x7f6af878e969 [ 612.410508][T12073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.410531][T12073] RSP: 002b:00007f6af9660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.410559][T12073] RAX: ffffffffffffffda RBX: 00007f6af89b5fa0 RCX: 00007f6af878e969 [ 612.410575][T12073] RDX: 000000000000100e RSI: 0000200000002100 RDI: 0000000000000003 [ 612.410589][T12073] RBP: 00007f6af9660090 R08: 0000000000000000 R09: 0000000000000000 [ 612.410604][T12073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.410618][T12073] R13: 0000000000000000 R14: 00007f6af89b5fa0 R15: 00007ffd666ecd28 [ 612.410648][T12073] [ 613.032771][T12086] Invalid ELF header magic: != ELF [ 613.778834][T12095] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1106'. [ 613.814925][T12093] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1105'. [ 614.646615][T12116] FAULT_INJECTION: forcing a failure. [ 614.646615][T12116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.646752][T12116] CPU: 0 UID: 0 PID: 12116 Comm: syz.4.1114 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 614.646787][T12116] Tainted: [U]=USER [ 614.646794][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.646807][T12116] Call Trace: [ 614.646814][T12116] [ 614.646823][T12116] dump_stack_lvl+0x16c/0x1f0 [ 614.646863][T12116] should_fail_ex+0x512/0x640 [ 614.646906][T12116] should_fail_alloc_page+0xe7/0x130 [ 614.646940][T12116] prepare_alloc_pages+0x3c2/0x610 [ 614.646984][T12116] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 614.647017][T12116] ? kernel_text_address+0x8d/0x100 [ 614.647040][T12116] ? __kernel_text_address+0xd/0x40 [ 614.647061][T12116] ? unwind_get_return_address+0x59/0xa0 [ 614.647089][T12116] ? arch_stack_walk+0xa6/0x100 [ 614.647122][T12116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.647150][T12116] ? __lock_acquire+0x5ca/0x1ba0 [ 614.647183][T12116] ? stack_trace_save+0x8e/0xc0 [ 614.647210][T12116] ? __lock_acquire+0xaa4/0x1ba0 [ 614.647246][T12116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 614.647288][T12116] ? policy_nodemask+0xea/0x4e0 [ 614.647321][T12116] alloc_pages_mpol+0x1fb/0x550 [ 614.647353][T12116] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 614.647385][T12116] ? __lock_acquire+0x5ca/0x1ba0 [ 614.647426][T12116] folio_alloc_mpol_noprof+0x36/0x2f0 [ 614.647463][T12116] vma_alloc_folio_noprof+0xed/0x1e0 [ 614.647499][T12116] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 614.647547][T12116] do_pte_missing+0x223d/0x3fb0 [ 614.647582][T12116] __handle_mm_fault+0x103d/0x2a40 [ 614.647617][T12116] ? __pfx___handle_mm_fault+0x10/0x10 [ 614.647662][T12116] ? find_vma+0xbf/0x140 [ 614.647695][T12116] ? __pfx_find_vma+0x10/0x10 [ 614.647734][T12116] handle_mm_fault+0x3fe/0xad0 [ 614.647765][T12116] do_user_addr_fault+0x7a6/0x1370 [ 614.647793][T12116] ? rcu_is_watching+0x12/0xc0 [ 614.647819][T12116] exc_page_fault+0x5c/0xc0 [ 614.647852][T12116] asm_exc_page_fault+0x26/0x30 [ 614.647874][T12116] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 614.647903][T12116] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 614.647926][T12116] RSP: 0018:ffffc9000b5ffaf8 EFLAGS: 00050206 [ 614.647944][T12116] RAX: 725f6f6974726976 RBX: 000000000000000e RCX: 000000000000000e [ 614.647959][T12116] RDX: ffffed100fb3d402 RSI: ffff88807d9ea000 RDI: 0000200000002100 [ 614.647974][T12116] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100fb3d401 [ 614.647988][T12116] R10: ffff88807d9ea00d R11: 0000000000000000 R12: 0000200000002100 [ 614.648003][T12116] R13: ffffc9000b5ffda0 R14: 000020000000210e R15: ffff88807d9ea000 [ 614.648034][T12116] _copy_to_iter+0x391/0x15a0 [ 614.648065][T12116] ? __pfx__copy_to_iter+0x10/0x10 [ 614.648088][T12116] ? kernfs_seq_stop+0xcd/0x120 [ 614.648124][T12116] ? kernfs_put_active+0x86/0xe0 [ 614.648154][T12116] seq_read_iter+0xcf8/0x12c0 [ 614.648203][T12116] kernfs_fop_read_iter+0x40f/0x5a0 [ 614.648233][T12116] ? rw_verify_area+0xcf/0x680 [ 614.648278][T12116] vfs_read+0x8c8/0xc70 [ 614.648305][T12116] ? __pfx___mutex_lock+0x10/0x10 [ 614.648343][T12116] ? __pfx_vfs_read+0x10/0x10 [ 614.648387][T12116] ksys_read+0x12a/0x240 [ 614.648409][T12116] ? __pfx_ksys_read+0x10/0x10 [ 614.648431][T12116] ? rcu_is_watching+0x12/0xc0 [ 614.648462][T12116] do_syscall_64+0xcd/0x230 [ 614.648502][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.648527][T12116] RIP: 0033:0x7f6af878e969 [ 614.648544][T12116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.648566][T12116] RSP: 002b:00007f6af9660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.648586][T12116] RAX: ffffffffffffffda RBX: 00007f6af89b5fa0 RCX: 00007f6af878e969 [ 614.648601][T12116] RDX: 000000000000100e RSI: 0000200000002100 RDI: 0000000000000003 [ 614.648615][T12116] RBP: 00007f6af9660090 R08: 0000000000000000 R09: 0000000000000000 [ 614.648629][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.648643][T12116] R13: 0000000000000000 R14: 00007f6af89b5fa0 R15: 00007ffd666ecd28 [ 614.648673][T12116] [ 617.694174][T12117] tty tty34: ldisc open failed (-12), clearing slot 33 [ 617.713483][T12137] tty tty12: ldisc open failed (-12), clearing slot 11 [ 618.366116][T12152] FAULT_INJECTION: forcing a failure. [ 618.366116][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 618.585789][T12157] FAULT_INJECTION: forcing a failure. [ 618.585789][T12157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.607275][T12152] CPU: 0 UID: 0 PID: 12152 Comm: syz.0.1119 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 618.607318][T12152] Tainted: [U]=USER [ 618.607326][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.607340][T12152] Call Trace: [ 618.607347][T12152] [ 618.607357][T12152] dump_stack_lvl+0x16c/0x1f0 [ 618.607409][T12152] should_fail_ex+0x512/0x640 [ 618.607444][T12152] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 618.607470][T12152] should_failslab+0xc2/0x120 [ 618.607500][T12152] __kmalloc_cache_noprof+0x6a/0x3e0 [ 618.607523][T12152] ? input_allocate_device+0x44/0x350 [ 618.607558][T12152] input_allocate_device+0x44/0x350 [ 618.607590][T12152] uinput_ioctl_handler.isra.0+0x8bb/0x1df0 [ 618.607618][T12152] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 618.607648][T12152] ? find_held_lock+0x2b/0x80 [ 618.607685][T12152] ? __pfx_uinput_ioctl+0x10/0x10 [ 618.607708][T12152] __x64_sys_ioctl+0x190/0x200 [ 618.607743][T12152] do_syscall_64+0xcd/0x230 [ 618.607781][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.607803][T12152] RIP: 0033:0x7f7b6858e969 [ 618.607821][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.607843][T12152] RSP: 002b:00007f7b6939e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.607864][T12152] RAX: ffffffffffffffda RBX: 00007f7b687b6160 RCX: 00007f7b6858e969 [ 618.607878][T12152] RDX: 0000200000000300 RSI: 00000000405c5503 RDI: 0000000000000008 [ 618.607892][T12152] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 618.607905][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.607919][T12152] R13: 0000000000000000 R14: 00007f7b687b6160 R15: 00007ffe8065c108 [ 618.607957][T12152] [ 618.796055][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.024643][T12157] CPU: 0 UID: 0 PID: 12157 Comm: syz.4.1123 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 619.024685][T12157] Tainted: [U]=USER [ 619.024693][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.024707][T12157] Call Trace: [ 619.024716][T12157] [ 619.024725][T12157] dump_stack_lvl+0x16c/0x1f0 [ 619.024766][T12157] should_fail_ex+0x512/0x640 [ 619.024805][T12157] _copy_to_user+0x32/0xd0 [ 619.024829][T12157] simple_read_from_buffer+0xcb/0x170 [ 619.024867][T12157] proc_fail_nth_read+0x197/0x270 [ 619.024908][T12157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.024944][T12157] ? rw_verify_area+0xcf/0x680 [ 619.024980][T12157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 619.025015][T12157] vfs_read+0x1de/0xc70 [ 619.025041][T12157] ? __pfx___mutex_lock+0x10/0x10 [ 619.025078][T12157] ? __pfx_vfs_read+0x10/0x10 [ 619.025109][T12157] ? __fget_files+0x20e/0x3c0 [ 619.025149][T12157] ksys_read+0x12a/0x240 [ 619.025172][T12157] ? __pfx_ksys_read+0x10/0x10 [ 619.025194][T12157] ? rcu_is_watching+0x12/0xc0 [ 619.025225][T12157] do_syscall_64+0xcd/0x230 [ 619.025263][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.025287][T12157] RIP: 0033:0x7f6af878d37c [ 619.025304][T12157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 619.025328][T12157] RSP: 002b:00007f6af9660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.025350][T12157] RAX: ffffffffffffffda RBX: 00007f6af89b5fa0 RCX: 00007f6af878d37c [ 619.025366][T12157] RDX: 000000000000000f RSI: 00007f6af96600a0 RDI: 0000000000000004 [ 619.025381][T12157] RBP: 00007f6af9660090 R08: 0000000000000000 R09: 0000000000000000 [ 619.025395][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.025409][T12157] R13: 0000000000000000 R14: 00007f6af89b5fa0 R15: 00007ffd666ecd28 [ 619.025439][T12157] [ 619.224429][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.187509][T12179] random: crng reseeded on system resumption [ 623.122973][T12203] nfs4: Unknown parameter 'nfsd' [ 628.090188][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.114967][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.724802][T12275] syz.2.1146 (12275) used greatest stack depth: 19160 bytes left [ 632.194377][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 632.746369][T12300] team0: Port device team_slave_0 removed [ 633.547274][T12326] sctp: [Deprecated]: syz.4.1156 (pid 12326) Use of int in max_burst socket option. [ 633.547274][T12326] Use struct sctp_assoc_value instead [ 633.722904][T12331] ubi0: attaching mtd0 [ 633.760530][T12331] ubi0: scanning is finished [ 634.212649][T12334] FAULT_INJECTION: forcing a failure. [ 634.212649][T12334] name failslab, interval 1, probability 0, space 0, times 0 [ 634.346094][T12331] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 634.435964][T12334] CPU: 0 UID: 0 PID: 12334 Comm: syz.3.1158 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 634.436007][T12334] Tainted: [U]=USER [ 634.436014][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.436029][T12334] Call Trace: [ 634.436036][T12334] [ 634.436046][T12334] dump_stack_lvl+0x16c/0x1f0 [ 634.436088][T12334] should_fail_ex+0x512/0x640 [ 634.436138][T12334] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 634.436171][T12334] should_failslab+0xc2/0x120 [ 634.436201][T12334] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 634.436228][T12334] ? __proc_create+0xc3/0x8c0 [ 634.436255][T12334] ? __proc_create+0x2ce/0x8c0 [ 634.436285][T12334] __proc_create+0x2ce/0x8c0 [ 634.436314][T12334] ? __pfx___proc_create+0x10/0x10 [ 634.436364][T12334] ? _raw_write_unlock+0x28/0x50 [ 634.436397][T12334] ? proc_register+0x314/0x5f0 [ 634.436428][T12334] proc_create_reg+0x7d/0x180 [ 634.436458][T12334] ? __pfx_can_rcvlist_sff_proc_show+0x10/0x10 [ 634.436506][T12334] proc_create_net_single+0x86/0x170 [ 634.436537][T12334] ? __pfx_proc_create_net_single+0x10/0x10 [ 634.436577][T12334] can_init_proc+0x37f/0x4d0 [ 634.436607][T12334] can_pernet_init+0x1e4/0x370 [ 634.436641][T12334] ? __pfx_can_pernet_init+0x10/0x10 [ 634.436669][T12334] ops_init+0x1e2/0x5f0 [ 634.436705][T12334] setup_net+0x21e/0x850 [ 634.436742][T12334] ? __pfx_setup_net+0x10/0x10 [ 634.436773][T12334] ? lockdep_init_map_type+0x5c/0x280 [ 634.436808][T12334] ? __pfx_down_read_killable+0x10/0x10 [ 634.436836][T12334] ? debug_mutex_init+0x37/0x70 [ 634.436863][T12334] copy_net_ns+0x2a6/0x5f0 [ 634.436902][T12334] create_new_namespaces+0x3ea/0xad0 [ 634.436938][T12334] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 634.436970][T12334] ksys_unshare+0x45b/0xa40 [ 634.437005][T12334] ? __pfx_ksys_unshare+0x10/0x10 [ 634.437038][T12334] ? xfd_validate_state+0x5d/0x180 [ 634.437063][T12334] ? rcu_is_watching+0x12/0xc0 [ 634.437093][T12334] __x64_sys_unshare+0x31/0x40 [ 634.437127][T12334] do_syscall_64+0xcd/0x230 [ 634.437168][T12334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.437193][T12334] RIP: 0033:0x7f1d2158e969 [ 634.437212][T12334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.437236][T12334] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 634.437259][T12334] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 634.437275][T12334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 634.437290][T12334] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 634.437305][T12334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.437319][T12334] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 634.437350][T12334] [ 635.069237][T12331] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 635.076494][T12331] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 635.319855][T12331] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 635.327302][T12331] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 635.646283][T12331] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 635.654324][T12331] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 888932494 [ 635.864975][T12331] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 636.076464][T12337] ubi0: background thread "ubi_bgt0d" started, PID 12337 [ 637.475348][T12353] blkio.reset_stats is deprecated [ 641.296280][T12371] warning: `syz.0.1165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 643.294728][T12394] FAULT_INJECTION: forcing a failure. [ 643.294728][T12394] name failslab, interval 1, probability 0, space 0, times 0 [ 643.392375][T12394] CPU: 0 UID: 0 PID: 12394 Comm: syz.0.1169 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 643.392418][T12394] Tainted: [U]=USER [ 643.392425][T12394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.392440][T12394] Call Trace: [ 643.392448][T12394] [ 643.392456][T12394] dump_stack_lvl+0x16c/0x1f0 [ 643.392499][T12394] should_fail_ex+0x512/0x640 [ 643.392537][T12394] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 643.392569][T12394] should_failslab+0xc2/0x120 [ 643.392601][T12394] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 643.392628][T12394] ? __proc_create+0xc3/0x8c0 [ 643.392656][T12394] ? __proc_create+0x2ce/0x8c0 [ 643.392688][T12394] __proc_create+0x2ce/0x8c0 [ 643.392717][T12394] ? __pfx___proc_create+0x10/0x10 [ 643.392751][T12394] ? _raw_write_unlock+0x28/0x50 [ 643.392785][T12394] ? proc_register+0x314/0x5f0 [ 643.392816][T12394] proc_create_reg+0x7d/0x180 [ 643.392847][T12394] ? __pfx_can_rcvlist_sff_proc_show+0x10/0x10 [ 643.392878][T12394] proc_create_net_single+0x86/0x170 [ 643.392908][T12394] ? __pfx_proc_create_net_single+0x10/0x10 [ 643.392960][T12394] can_init_proc+0x37f/0x4d0 [ 643.392989][T12394] can_pernet_init+0x1e4/0x370 [ 643.393017][T12394] ? __pfx_can_pernet_init+0x10/0x10 [ 643.393042][T12394] ops_init+0x1e2/0x5f0 [ 643.393080][T12394] setup_net+0x21e/0x850 [ 643.393120][T12394] ? __pfx_setup_net+0x10/0x10 [ 643.393151][T12394] ? lockdep_init_map_type+0x5c/0x280 [ 643.393186][T12394] ? __pfx_down_read_killable+0x10/0x10 [ 643.393214][T12394] ? debug_mutex_init+0x37/0x70 [ 643.393241][T12394] copy_net_ns+0x2a6/0x5f0 [ 643.393280][T12394] create_new_namespaces+0x3ea/0xad0 [ 643.393315][T12394] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 643.393347][T12394] ksys_unshare+0x45b/0xa40 [ 643.393383][T12394] ? __pfx_ksys_unshare+0x10/0x10 [ 643.393417][T12394] ? xfd_validate_state+0x5d/0x180 [ 643.393442][T12394] ? rcu_is_watching+0x12/0xc0 [ 643.393471][T12394] __x64_sys_unshare+0x31/0x40 [ 643.393505][T12394] do_syscall_64+0xcd/0x230 [ 643.393544][T12394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.393568][T12394] RIP: 0033:0x7f7b6858e969 [ 643.393587][T12394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.393611][T12394] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 643.393633][T12394] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 643.393648][T12394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 643.393662][T12394] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 643.393677][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.393690][T12394] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 643.393720][T12394] [ 645.816882][T12396] netlink: 222 bytes leftover after parsing attributes in process `syz.2.1168'. [ 646.064209][T12397] netlink: 222 bytes leftover after parsing attributes in process `syz.2.1168'. [ 649.862630][T12444] blktrace: Concurrent blktraces are not allowed on loop2 [ 650.952125][T11608] syz.2.1000 (11608) used greatest stack depth: 19128 bytes left [ 651.064697][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 651.100067][T12459] openvswitch: netlink: IPv4 tunnel dst address is zero [ 652.643135][T12470] queue_state_write: unsupported operation '' [ 652.782656][T12470] queue_state_write: use 'run', 'start' or 'kick' [ 652.904228][T12476] Setting dangerous option i915.mitigations - tainting kernel [ 654.748546][ T30] audit: type=1800 audit(4294969596.105:11): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1188" name="lu_gp_id" dev="configfs" ino=36727 res=0 errno=0 [ 661.367916][T12578] lo: entered allmulticast mode [ 661.631025][T12578] lo: left allmulticast mode [ 663.105316][ T30] audit: type=1800 audit(4294969604.508:12): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1205" name="members" dev="configfs" ino=37203 res=0 errno=0 [ 663.390176][T12606] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1206'. [ 664.211914][T12618] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 664.211914][T12618] The task syz.4.1210 (12618) triggered the difference, watch for misbehavior. [ 666.953708][T12663] FAULT_INJECTION: forcing a failure. [ 666.953708][T12663] name failslab, interval 1, probability 0, space 0, times 0 [ 667.009348][T12663] CPU: 0 UID: 0 PID: 12663 Comm: syz.4.1219 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 667.009390][T12663] Tainted: [U]=USER [ 667.009399][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.009413][T12663] Call Trace: [ 667.009420][T12663] [ 667.009429][T12663] dump_stack_lvl+0x16c/0x1f0 [ 667.009470][T12663] should_fail_ex+0x512/0x640 [ 667.009507][T12663] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 667.009541][T12663] should_failslab+0xc2/0x120 [ 667.009572][T12663] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 667.009600][T12663] ? find_held_lock+0x2b/0x80 [ 667.009623][T12663] ? alloc_vfsmnt+0x23/0x6f0 [ 667.009656][T12663] alloc_vfsmnt+0x23/0x6f0 [ 667.009687][T12663] clone_mnt+0x6d/0xff0 [ 667.009720][T12663] ? copy_tree+0x50d/0xa20 [ 667.009742][T12663] ? copy_mnt_ns+0x1ac/0xac0 [ 667.009772][T12663] copy_tree+0x38d/0xa20 [ 667.009806][T12663] copy_mnt_ns+0x1ac/0xac0 [ 667.009832][T12663] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 667.009859][T12663] ? trace_cap_capable+0x18d/0x200 [ 667.009885][T12663] ? create_new_namespaces+0x30/0xad0 [ 667.009923][T12663] create_new_namespaces+0xd3/0xad0 [ 667.009950][T12663] ? bpf_lsm_capable+0x9/0x10 [ 667.009976][T12663] ? security_capable+0x7e/0x260 [ 667.010009][T12663] copy_namespaces+0x468/0x560 [ 667.010039][T12663] copy_process+0x29ff/0x91b0 [ 667.010093][T12663] ? __pfx_copy_process+0x10/0x10 [ 667.010124][T12663] ? __pfx___futex_wait+0x10/0x10 [ 667.010184][T12663] kernel_clone+0xfc/0x960 [ 667.010218][T12663] ? __pfx_kernel_clone+0x10/0x10 [ 667.010268][T12663] __do_sys_clone+0xce/0x120 [ 667.010300][T12663] ? __pfx___do_sys_clone+0x10/0x10 [ 667.010349][T12663] ? ksys_unshare+0x687/0xa40 [ 667.010394][T12663] ? rcu_is_watching+0x12/0xc0 [ 667.010424][T12663] do_syscall_64+0xcd/0x230 [ 667.010462][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.010485][T12663] RIP: 0033:0x7f6af878e969 [ 667.010502][T12663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.010525][T12663] RSP: 002b:00007f6af965ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 667.010546][T12663] RAX: ffffffffffffffda RBX: 00007f6af89b5fa0 RCX: 00007f6af878e969 [ 667.010561][T12663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 667.010574][T12663] RBP: 00007f6af8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 667.010587][T12663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 667.010601][T12663] R13: 0000000000000000 R14: 00007f6af89b5fa0 R15: 00007ffd666ecd28 [ 667.010629][T12663] [ 668.302965][T12688] sysfs_service_op_show: Client not running :-5: [ 669.108145][ T30] audit: type=1800 audit(4294969610.540:13): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1226" name="members" dev="configfs" ino=37552 res=0 errno=0 [ 669.783834][T12714] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 669.783834][T12714] [ 673.288516][T12738] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 673.998191][T12743] could not allocate digest TFM handle [ 674.850713][T12753] Invalid ELF header magic: != ELF [ 675.960619][T12774] can: request_module (can-proto-0) failed. [ 679.905551][T12828] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1255'. [ 680.250276][T12831] can: request_module (can-proto-0) failed. [ 681.917499][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 682.202349][ T30] audit: type=1804 audit(4294969623.698:14): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1259" name="/newroot/119/file0" dev="tmpfs" ino=655 res=1 errno=0 [ 682.243517][T12852] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 682.257744][T12852] audit: out of memory in audit_log_start [ 682.964377][ T30] audit: type=1107 audit(4294969624.452:15): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 686.805556][T12899] FAULT_INJECTION: forcing a failure. [ 686.805556][T12899] name failslab, interval 1, probability 0, space 0, times 0 [ 686.880380][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.4.1269 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 686.880421][T12899] Tainted: [U]=USER [ 686.880429][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 686.880443][T12899] Call Trace: [ 686.880451][T12899] [ 686.880460][T12899] dump_stack_lvl+0x16c/0x1f0 [ 686.880501][T12899] should_fail_ex+0x512/0x640 [ 686.880537][T12899] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 686.880569][T12899] should_failslab+0xc2/0x120 [ 686.880600][T12899] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 686.880628][T12899] ? __kernfs_new_node+0xd2/0x8a0 [ 686.880656][T12899] __kernfs_new_node+0xd2/0x8a0 [ 686.880679][T12899] ? kernfs_add_one+0x14e/0x840 [ 686.880705][T12899] ? __pfx___kernfs_new_node+0x10/0x10 [ 686.880736][T12899] ? find_held_lock+0x2b/0x80 [ 686.880760][T12899] ? kernfs_root+0xee/0x2a0 [ 686.880788][T12899] kernfs_new_node+0x13c/0x1e0 [ 686.880820][T12899] kernfs_create_link+0xcc/0x240 [ 686.880856][T12899] sysfs_do_create_link_sd+0x90/0x140 [ 686.880897][T12899] sysfs_create_link+0x61/0xc0 [ 686.880935][T12899] device_add+0x50a/0x1a70 [ 686.880973][T12899] ? __pfx_device_add+0x10/0x10 [ 686.881007][T12899] ? lockdep_init_map_type+0x5c/0x280 [ 686.881040][T12899] ? __init_waitqueue_head+0xca/0x150 [ 686.881069][T12899] netdev_register_kobject+0x182/0x3a0 [ 686.881108][T12899] register_netdevice+0x13dc/0x2270 [ 686.881147][T12899] ? __pfx_register_netdevice+0x10/0x10 [ 686.881182][T12899] ? alloc_netdev_mqs+0xe7e/0x1570 [ 686.881216][T12899] ? __pfx_loopback_net_init+0x10/0x10 [ 686.881249][T12899] register_netdev+0x34/0x50 [ 686.881281][T12899] loopback_net_init+0x7a/0x170 [ 686.881313][T12899] ? __pfx_loopback_net_init+0x10/0x10 [ 686.881344][T12899] ops_init+0x1e2/0x5f0 [ 686.881387][T12899] setup_net+0x21e/0x850 [ 686.881425][T12899] ? __pfx_setup_net+0x10/0x10 [ 686.881455][T12899] ? lockdep_init_map_type+0x5c/0x280 [ 686.881488][T12899] ? __pfx_down_read_killable+0x10/0x10 [ 686.881516][T12899] ? debug_mutex_init+0x37/0x70 [ 686.881541][T12899] copy_net_ns+0x2a6/0x5f0 [ 686.881579][T12899] create_new_namespaces+0x3ea/0xad0 [ 686.881615][T12899] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 686.881646][T12899] ksys_unshare+0x45b/0xa40 [ 686.881680][T12899] ? __pfx_ksys_unshare+0x10/0x10 [ 686.881712][T12899] ? xfd_validate_state+0x5d/0x180 [ 686.881736][T12899] ? rcu_is_watching+0x12/0xc0 [ 686.881766][T12899] __x64_sys_unshare+0x31/0x40 [ 686.881799][T12899] do_syscall_64+0xcd/0x230 [ 686.881839][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.881863][T12899] RIP: 0033:0x7f6af878e969 [ 686.881882][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.881905][T12899] RSP: 002b:00007f6af9660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.881927][T12899] RAX: ffffffffffffffda RBX: 00007f6af89b5fa0 RCX: 00007f6af878e969 [ 686.881943][T12899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 686.881957][T12899] RBP: 00007f6af8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 686.881971][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.881985][T12899] R13: 0000000000000000 R14: 00007f6af89b5fa0 R15: 00007ffd666ecd28 [ 686.882015][T12899] [ 687.964333][T12884] can: request_module (can-proto-3) failed. [ 688.552870][T12918] WARNING! power/level is deprecated; use power/control instead [ 688.596953][T12918] ICMPv6: process `syz.0.1275' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 689.229259][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.247067][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.530561][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 694.065304][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 694.369203][T12962] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 699.563905][T13012] can: request_module (can-proto-3) failed. [ 700.592385][T13047] sd 0:0:1:0: PR command failed: 1026 [ 700.597953][T13047] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 700.640002][T13047] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 703.078828][T13088] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 703.579336][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 703.747501][T13104] netlink: 'syz.2.1313': attribute type 32 has an invalid length. [ 703.845453][T13104] netlink: 'syz.2.1313': attribute type 33 has an invalid length. [ 703.963782][T13104] netlink: 'syz.2.1313': attribute type 35 has an invalid length. [ 704.083137][T13104] netlink: 242 bytes leftover after parsing attributes in process `syz.2.1313'. [ 704.866595][T13130] tipc: Can't bind to reserved service type 1 [ 709.559932][T13193] i2c i2c-0: new_device: Invalid device name [ 712.569198][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 712.603963][T13232] can: request_module (can-proto-0) failed. [ 712.897491][T13232] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 712.930883][ T5949] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 716.936212][T13291] random: crng reseeded on system resumption [ 720.652081][T13360] [U] FL pnL png&GiDCh+Z&i#eL png&GiDCh+Z&i#e [ 720.662754][T13360] [U] [ 720.665472][T13360] [U] [ 720.668185][T13360] [U] [ 720.763771][T13360] [U] [ 720.766524][T13360] [U] [ 720.769283][T13360] [U] [ 720.772001][T13360] [U] [ 720.807537][T13360] [U] [ 720.810290][T13360] [U] [ 720.812998][T13360] [U] [ 720.815714][T13360] [U] [ 720.864164][T13360] [U] [ 720.866930][T13360] [U] [ 720.869666][T13360] [U] [ 720.872379][T13360] [U] [ 720.914606][T13360] [U] [ 720.917357][T13360] [U] [ 720.920082][T13360] [U] [ 720.922789][T13360] [U] [ 720.996401][T13360] [U] [ 720.999196][T13360] [U] [ 721.001925][T13360] [U] [ 721.004639][T13360] [U] [ 721.067281][T13360] [U] [ 721.070060][T13360] [U] [ 721.072796][T13360] [U] [ 721.075535][T13360] [U] [ 721.134942][T13360] [U] [ 721.137698][T13360] [U] [ 721.140409][T13360] [U] [ 721.143139][T13360] [U] [ 721.193135][T13360] [U] [ 721.195866][T13360] [U] [ 721.198598][T13360] [U] [ 721.201326][T13360] [U] [ 721.254938][T13360] [U] [ 721.257689][T13360] [U] [ 721.260417][T13360] [U] [ 721.263128][T13360] [U] [ 721.314769][T13360] [U] [ 721.317555][T13360] [U] [ 721.320270][T13360] [U] [ 721.323003][T13360] [U] [ 721.372574][T13360] [U] [ 721.375332][T13360] [U] [ 721.378041][T13360] [U] [ 721.380752][T13360] [U] [ 722.061021][T13375] Invalid ELF header magic: != ELF [ 723.086158][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 723.292647][ T5949] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 724.129928][T13409] kvm: kvm [13408]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000025) = 0x2 [ 724.745848][T13414] can: request_module (can-proto-3) failed. [ 725.142049][T13427] random: crng reseeded on system resumption [ 727.208853][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1384'. [ 728.789877][T13460] Malformed UNC in devname [ 728.789877][T13460] [ 728.820157][T13460] CIFS: VFS: Malformed UNC in devname [ 735.577323][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 735.822294][T13533] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1400'. [ 737.270470][T13545] sctp: [Deprecated]: syz.2.1402 (pid 13545) Use of int in maxseg socket option. [ 737.270470][T13545] Use struct sctp_assoc_value instead [ 740.717136][T13588] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 742.875785][T13626] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1419'. [ 742.982569][T13620] lo: entered allmulticast mode [ 743.181512][T13625] lo: left allmulticast mode [ 744.140966][T13647] Invalid ELF header magic: != ELF [ 744.299664][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 744.412011][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 747.076859][T13709] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1435'. [ 747.123665][T13709] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1435'. [ 750.337759][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.344352][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.365105][T13808] Invalid ELF header magic: != ELF [ 757.938811][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 761.836221][T13877] FAULT_INJECTION: forcing a failure. [ 761.836221][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 762.085510][T13877] CPU: 0 UID: 0 PID: 13877 Comm: syz.3.1466 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 762.085556][T13877] Tainted: [U]=USER [ 762.085564][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.085578][T13877] Call Trace: [ 762.085586][T13877] [ 762.085595][T13877] dump_stack_lvl+0x16c/0x1f0 [ 762.085638][T13877] should_fail_ex+0x512/0x640 [ 762.085676][T13877] ? __kmalloc_noprof+0xbf/0x510 [ 762.085707][T13877] ? __register_sysctl_table+0xb3/0x1900 [ 762.085736][T13877] should_failslab+0xc2/0x120 [ 762.085767][T13877] __kmalloc_noprof+0xd2/0x510 [ 762.085802][T13877] __register_sysctl_table+0xb3/0x1900 [ 762.085832][T13877] ? is_module_address+0x5f/0xf0 [ 762.085870][T13877] ? __pfx___register_sysctl_table+0x10/0x10 [ 762.085917][T13877] ? is_module_address+0x69/0xf0 [ 762.085950][T13877] ? register_net_sysctl_sz+0x228/0x3e0 [ 762.085976][T13877] ? __asan_memcpy+0x3c/0x60 [ 762.086002][T13877] sysctl_core_net_init+0xe3/0x280 [ 762.086028][T13877] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 762.086057][T13877] ops_init+0x1e2/0x5f0 [ 762.086094][T13877] setup_net+0x21e/0x850 [ 762.086130][T13877] ? __pfx_setup_net+0x10/0x10 [ 762.086162][T13877] ? lockdep_init_map_type+0x5c/0x280 [ 762.086197][T13877] ? __pfx_down_read_killable+0x10/0x10 [ 762.086225][T13877] ? debug_mutex_init+0x37/0x70 [ 762.086259][T13877] copy_net_ns+0x2a6/0x5f0 [ 762.086298][T13877] create_new_namespaces+0x3ea/0xad0 [ 762.086334][T13877] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 762.086366][T13877] ksys_unshare+0x45b/0xa40 [ 762.086402][T13877] ? __pfx_ksys_unshare+0x10/0x10 [ 762.086435][T13877] ? xfd_validate_state+0x5d/0x180 [ 762.086460][T13877] ? rcu_is_watching+0x12/0xc0 [ 762.086491][T13877] __x64_sys_unshare+0x31/0x40 [ 762.086525][T13877] do_syscall_64+0xcd/0x230 [ 762.086565][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.086591][T13877] RIP: 0033:0x7f1d2158e969 [ 762.086610][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.086634][T13877] RSP: 002b:00007f1d22383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 762.086658][T13877] RAX: ffffffffffffffda RBX: 00007f1d217b6080 RCX: 00007f1d2158e969 [ 762.086674][T13877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 762.086688][T13877] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 762.086703][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.086718][T13877] R13: 0000000000000000 R14: 00007f1d217b6080 R15: 00007fff12e2cad8 [ 762.086748][T13877] [ 763.968987][ T5949] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 763.976940][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 763.986682][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/u11:0 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 763.986721][ T5949] Tainted: [U]=USER [ 763.986729][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.986745][ T5949] Workqueue: hci2 hci_rx_work [ 763.986772][ T5949] Call Trace: [ 763.986780][ T5949] [ 763.986788][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 763.986827][ T5949] sysfs_warn_dup+0x7f/0xa0 [ 763.986868][ T5949] sysfs_create_dir_ns+0x24b/0x2b0 [ 763.986908][ T5949] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 763.986954][ T5949] ? find_held_lock+0x2b/0x80 [ 763.986984][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 763.987026][ T5949] kobject_add_internal+0x2c4/0x9b0 [ 763.987055][ T5949] kobject_add+0x16e/0x240 [ 763.987079][ T5949] ? __pfx_kobject_add+0x10/0x10 [ 763.987105][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 763.987145][ T5949] ? kobject_put+0xab/0x5a0 [ 763.987176][ T5949] device_add+0x288/0x1a70 [ 763.987211][ T5949] ? __pfx_dev_set_name+0x10/0x10 [ 763.987251][ T5949] ? __pfx_device_add+0x10/0x10 [ 763.987287][ T5949] ? mgmt_send_event_skb+0x2fb/0x460 [ 763.987336][ T5949] hci_conn_add_sysfs+0x17e/0x230 [ 763.987365][ T5949] le_conn_complete_evt+0x1075/0x1d70 [ 763.987413][ T5949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 763.987453][ T5949] ? bt_warn+0xe4/0x120 [ 763.987488][ T5949] ? __pfx_bt_warn+0x10/0x10 [ 763.987532][ T5949] hci_le_conn_complete_evt+0x23c/0x370 [ 763.987580][ T5949] hci_le_meta_evt+0x2f6/0x5e0 [ 763.987605][ T5949] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 763.987650][ T5949] hci_event_packet+0x66c/0x1190 [ 763.987690][ T5949] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 763.987717][ T5949] ? __pfx_hci_event_packet+0x10/0x10 [ 763.987761][ T5949] ? kcov_remote_start+0x3c9/0x6d0 [ 763.987794][ T5949] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.987837][ T5949] hci_rx_work+0x2c5/0x16b0 [ 763.987864][ T5949] ? rcu_is_watching+0x12/0xc0 [ 763.987892][ T5949] process_one_work+0x9cf/0x1b70 [ 763.987950][ T5949] ? __pfx_process_one_work+0x10/0x10 [ 763.988000][ T5949] ? assign_work+0x1a0/0x250 [ 763.988039][ T5949] worker_thread+0x6c8/0xf10 [ 763.988093][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 763.988134][ T5949] kthread+0x3c2/0x780 [ 763.988171][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988205][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988240][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988276][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988312][ T5949] ? rcu_is_watching+0x12/0xc0 [ 763.988336][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988373][ T5949] ret_from_fork+0x48/0x80 [ 763.988394][ T5949] ? __pfx_kthread+0x10/0x10 [ 763.988431][ T5949] ret_from_fork_asm+0x1a/0x30 [ 763.988481][ T5949] [ 763.988508][ T5949] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 764.301258][ T5949] Bluetooth: hci2: failed to register connection device [ 767.643451][T13928] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 768.169353][T13941] input: f as /devices/virtual/input/input25 [ 768.669227][T13926] kexec: Could not allocate control_code_buffer [ 769.521130][ T5949] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 771.836757][T13963] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1486'. [ 772.214488][T13963] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1486'. [ 772.794371][T13977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 772.828865][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 773.652806][T13992] bridge0: port 3(hsr_slave_1) entered blocking state [ 773.682874][T13992] bridge0: port 3(hsr_slave_1) entered disabled state [ 773.703506][T13992] hsr_slave_1: entered allmulticast mode [ 773.743082][T13992] hsr_slave_1: left allmulticast mode [ 774.793765][ T5949] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 777.416367][T14043] [U] [ 777.419137][T14043] [U] [ 777.421852][T14043] [U] [ 777.424560][T14043] [U] [ 777.827230][T14043] [U] [ 777.830020][T14043] [U] [ 777.832735][T14043] [U] [ 777.835448][T14043] [U] [ 778.261395][T14043] [U] [ 778.264170][T14043] [U] [ 778.266883][T14043] [U] [ 778.269602][T14043] [U] [ 786.907161][T14108] HfR: entered promiscuous mode [ 787.792053][T14123] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1518'. [ 788.240386][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'. [ 788.312356][T14131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.348978][T14131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.746629][T14131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.778340][T14131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.347070][T14152] program syz.4.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.805213][T14162] netlink: 'syz.3.1528': attribute type 11 has an invalid length. [ 790.870238][T14162] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 791.028627][T14153] Invalid ELF header magic: != ELF [ 791.900382][T14176] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 792.732457][T14181] can: request_module (can-proto-3) failed. [ 794.546263][T14202] bdi 1:11: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 794.632398][T14197] can: request_module (can-proto-0) failed. [ 795.726671][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 799.891513][T14264] bond0: option arp_validate: invalid value () [ 799.974108][T14270] bond0: option arp_validate: invalid value () [ 800.031347][T14271] sd 0:0:1:0: PR command failed: 1026 [ 800.036795][T14271] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 800.103012][T14276] Setting dangerous option i915.mitigations - tainting kernel [ 800.215787][T14271] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 801.502799][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 803.205550][T14330] Invalid ELF header magic: != ELF [ 803.594536][T14350] netlink: 'syz.4.1556': attribute type 11 has an invalid length. [ 811.470600][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.477010][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.962588][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 813.135673][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 813.351703][T14481] FAULT_INJECTION: forcing a failure. [ 813.351703][T14481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.461384][T14481] CPU: 0 UID: 0 PID: 14481 Comm: syz.4.1582 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 813.461426][T14481] Tainted: [U]=USER [ 813.461434][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.461449][T14481] Call Trace: [ 813.461457][T14481] [ 813.461466][T14481] dump_stack_lvl+0x16c/0x1f0 [ 813.461508][T14481] should_fail_ex+0x512/0x640 [ 813.461551][T14481] _copy_from_iter+0x2a4/0x15b0 [ 813.461596][T14481] ? policy_nodemask+0xea/0x4e0 [ 813.461626][T14481] ? __pfx__copy_from_iter+0x10/0x10 [ 813.461685][T14481] ? alloc_pages_mpol+0x25a/0x550 [ 813.461717][T14481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 813.461756][T14481] copy_page_from_iter+0xa5/0x120 [ 813.461804][T14481] anon_pipe_write+0xbe7/0x1a70 [ 813.461835][T14481] ? __print_lock_name+0xd1/0xe0 [ 813.461866][T14481] ? __pfx_anon_pipe_write+0x10/0x10 [ 813.461895][T14481] ? apparmor_file_permission+0x251/0x400 [ 813.461927][T14481] ? bpf_lsm_file_permission+0x9/0x10 [ 813.461949][T14481] ? security_file_permission+0x71/0x210 [ 813.461985][T14481] ? rw_verify_area+0xcf/0x680 [ 813.462027][T14481] vfs_write+0x5bd/0x1180 [ 813.462052][T14481] ? __pfx_anon_pipe_write+0x10/0x10 [ 813.462081][T14481] ? __pfx_vfs_write+0x10/0x10 [ 813.462104][T14481] ? find_held_lock+0x2b/0x80 [ 813.462147][T14481] ksys_write+0x205/0x240 [ 813.462171][T14481] ? __pfx_ksys_write+0x10/0x10 [ 813.462194][T14481] ? rcu_is_watching+0x12/0xc0 [ 813.462226][T14481] do_syscall_64+0xcd/0x230 [ 813.462267][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.462292][T14481] RIP: 0033:0x7f6af878e969 [ 813.462311][T14481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.462335][T14481] RSP: 002b:00007f6af961e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.462358][T14481] RAX: ffffffffffffffda RBX: 00007f6af89b6160 RCX: 00007f6af878e969 [ 813.462375][T14481] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000006 [ 813.462390][T14481] RBP: 00007f6af8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 813.462405][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.462419][T14481] R13: 0000000000000000 R14: 00007f6af89b6160 R15: 00007ffd666ecd28 [ 813.462450][T14481] [ 813.699853][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.485283][T14472] team_slave_0 (unregistering): left promiscuous mode [ 814.493352][T14472] team_slave_0 (unregistering): left allmulticast mode [ 814.524299][T14472] team0: Port device team_slave_0 removed [ 814.805312][T14488] HfR: entered promiscuous mode [ 814.874547][T14492] device-mapper: ioctl: Unable to rename non-existent device,  to [ 816.186908][T14515] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 816.447818][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 817.176209][T14518] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 817.582858][ T5949] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 817.592561][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 817.605617][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/u11:0 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 817.605671][ T5949] Tainted: [U]=USER [ 817.605682][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.605708][ T5949] Workqueue: hci3 hci_rx_work [ 817.605745][ T5949] Call Trace: [ 817.605756][ T5949] [ 817.605768][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 817.605820][ T5949] sysfs_warn_dup+0x7f/0xa0 [ 817.605874][ T5949] sysfs_create_dir_ns+0x24b/0x2b0 [ 817.605930][ T5949] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 817.605995][ T5949] ? find_held_lock+0x2b/0x80 [ 817.606036][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 817.606091][ T5949] kobject_add_internal+0x2c4/0x9b0 [ 817.606132][ T5949] kobject_add+0x16e/0x240 [ 817.606165][ T5949] ? __pfx_kobject_add+0x10/0x10 [ 817.606210][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 817.606283][ T5949] ? kobject_put+0xab/0x5a0 [ 817.606327][ T5949] device_add+0x288/0x1a70 [ 817.606377][ T5949] ? __pfx_dev_set_name+0x10/0x10 [ 817.606432][ T5949] ? __pfx_device_add+0x10/0x10 [ 817.606494][ T5949] ? mgmt_send_event_skb+0x2fb/0x460 [ 817.606562][ T5949] hci_conn_add_sysfs+0x17e/0x230 [ 817.606604][ T5949] le_conn_complete_evt+0x1075/0x1d70 [ 817.606673][ T5949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 817.606728][ T5949] ? bt_warn+0xe4/0x120 [ 817.606777][ T5949] ? __pfx_bt_warn+0x10/0x10 [ 817.606839][ T5949] hci_le_conn_complete_evt+0x23c/0x370 [ 817.606905][ T5949] hci_le_meta_evt+0x2f6/0x5e0 [ 817.606940][ T5949] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 817.607002][ T5949] hci_event_packet+0x66c/0x1190 [ 817.607055][ T5949] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 817.607093][ T5949] ? __pfx_hci_event_packet+0x10/0x10 [ 817.607150][ T5949] ? kcov_remote_start+0x3c9/0x6d0 [ 817.607196][ T5949] ? lockdep_hardirqs_on+0x7c/0x110 [ 817.607256][ T5949] hci_rx_work+0x2c5/0x16b0 [ 817.607294][ T5949] ? rcu_is_watching+0x12/0xc0 [ 817.607334][ T5949] process_one_work+0x9cf/0x1b70 [ 817.607406][ T5949] ? __pfx_process_one_work+0x10/0x10 [ 817.607485][ T5949] ? assign_work+0x1a0/0x250 [ 817.607541][ T5949] worker_thread+0x6c8/0xf10 [ 817.607618][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 817.607672][ T5949] kthread+0x3c2/0x780 [ 817.607723][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.607768][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.607816][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.607864][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.607911][ T5949] ? rcu_is_watching+0x12/0xc0 [ 817.607944][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.607994][ T5949] ret_from_fork+0x48/0x80 [ 817.608024][ T5949] ? __pfx_kthread+0x10/0x10 [ 817.608075][ T5949] ret_from_fork_asm+0x1a/0x30 [ 817.608146][ T5949] [ 817.608216][ T5949] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 817.908321][ T5949] Bluetooth: hci3: failed to register connection device [ 818.953919][T14547] binder: 14545:14547 ioctl c018620c 0 returned -22 [ 819.196030][T14548] mkiss: ax0: crc mode is auto. [ 820.463733][T14577] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1606'. [ 821.842980][T14601] binder: 14595:14601 ioctl 40046210 0 returned -14 [ 822.972342][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 823.904840][T14632] ima: policy update failed [ 823.921029][ T30] audit: type=1802 audit(4294967325.618:16): pid=14632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1617" res=0 errno=0 [ 824.110303][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1620'. [ 825.732795][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 828.226264][T14711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 828.752263][T14715] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1636'. [ 829.005005][T14717] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 829.700038][T14734] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1639'. [ 830.110107][T14744] FAULT_INJECTION: forcing a failure. [ 830.110107][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 830.123540][T14744] CPU: 1 UID: 7 PID: 14744 Comm: syz.3.1642 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 830.123589][T14744] Tainted: [U]=USER [ 830.123599][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.123616][T14744] Call Trace: [ 830.123625][T14744] [ 830.123636][T14744] dump_stack_lvl+0x16c/0x1f0 [ 830.123689][T14744] should_fail_ex+0x512/0x640 [ 830.123754][T14744] ? __kmalloc_noprof+0xbf/0x510 [ 830.123787][T14744] ? lsm_blob_alloc+0x68/0x90 [ 830.123810][T14744] should_failslab+0xc2/0x120 [ 830.123844][T14744] __kmalloc_noprof+0xd2/0x510 [ 830.123881][T14744] lsm_blob_alloc+0x68/0x90 [ 830.123906][T14744] security_sk_alloc+0x30/0x270 [ 830.123939][T14744] sk_prot_alloc+0xfb/0x2a0 [ 830.123982][T14744] sk_alloc+0x36/0xc20 [ 830.124013][T14744] kcm_create+0xfc/0x690 [ 830.124052][T14744] __sock_create+0x338/0x8d0 [ 830.124100][T14744] __sys_socket+0x14d/0x260 [ 830.124124][T14744] ? __pfx___sys_socket+0x10/0x10 [ 830.124150][T14744] ? rcu_is_watching+0x12/0xc0 [ 830.124182][T14744] __x64_sys_socket+0x72/0xb0 [ 830.124206][T14744] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.124244][T14744] do_syscall_64+0xcd/0x230 [ 830.124293][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.124320][T14744] RIP: 0033:0x7f1d2158e969 [ 830.124340][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.124367][T14744] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 830.124411][T14744] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 830.124428][T14744] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 830.124443][T14744] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 830.124459][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.124474][T14744] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 830.124506][T14744] [ 830.525000][T14749] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 830.839872][T14750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 831.187640][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 833.524429][T14793] ovs_: entered promiscuous mode [ 834.088030][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1657'. [ 839.922061][T14859] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[14859] [ 840.674527][T14877] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1671'. [ 845.509845][T14965] zram: Removed device: zram0 [ 845.564502][T14966] vmstat_refresh: nr_hugetlb -7680 [ 847.041204][T14982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'. [ 847.097364][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.105041][T14982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.154465][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.162073][T14982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.289272][ T30] audit: type=1800 audit(4294969397.089:17): pid=14974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1690" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 847.602299][T14986] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1694'. [ 847.860046][T15000] FAULT_INJECTION: forcing a failure. [ 847.860046][T15000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 847.884146][T15000] CPU: 1 UID: 0 PID: 15000 Comm: syz.3.1698 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 847.884209][T15000] Tainted: [U]=USER [ 847.884220][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 847.884239][T15000] Call Trace: [ 847.884250][T15000] [ 847.884263][T15000] dump_stack_lvl+0x16c/0x1f0 [ 847.884320][T15000] should_fail_ex+0x512/0x640 [ 847.884377][T15000] should_fail_alloc_page+0xe7/0x130 [ 847.884422][T15000] prepare_alloc_pages+0x3c2/0x610 [ 847.884473][T15000] ? rcu_is_watching+0x12/0xc0 [ 847.884509][T15000] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 847.884552][T15000] ? is_bpf_text_address+0x94/0x1a0 [ 847.884593][T15000] ? kernel_text_address+0x8d/0x100 [ 847.884625][T15000] ? __kernel_text_address+0xd/0x40 [ 847.884654][T15000] ? unwind_get_return_address+0x59/0xa0 [ 847.884693][T15000] ? arch_stack_walk+0xa6/0x100 [ 847.884736][T15000] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 847.884791][T15000] ? stack_depot_save_flags+0x28/0xa50 [ 847.884843][T15000] ? stack_trace_save+0x8e/0xc0 [ 847.884878][T15000] ? __pfx_stack_trace_save+0x10/0x10 [ 847.884916][T15000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 847.884965][T15000] ? policy_nodemask+0xea/0x4e0 [ 847.885010][T15000] alloc_pages_mpol+0x1fb/0x550 [ 847.885054][T15000] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 847.885108][T15000] alloc_pages_noprof+0x131/0x390 [ 847.885150][T15000] kimage_alloc_pages+0x75/0x300 [ 847.885211][T15000] kimage_alloc_control_pages+0x15d/0x910 [ 847.885272][T15000] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 847.885334][T15000] do_kexec_load+0x480/0x8d0 [ 847.885388][T15000] ? __pfx_do_kexec_load+0x10/0x10 [ 847.885444][T15000] ? _copy_from_user+0x59/0xd0 [ 847.885480][T15000] __x64_sys_kexec_load+0x1bf/0x230 [ 847.885535][T15000] do_syscall_64+0xcd/0x230 [ 847.885589][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.885622][T15000] RIP: 0033:0x7f1d2158e969 [ 847.885649][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.885680][T15000] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 847.885711][T15000] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 847.885732][T15000] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 847.885752][T15000] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 847.885772][T15000] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 847.885792][T15000] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 847.885834][T15000] [ 847.887034][T15000] kexec: Could not allocate control_code_buffer [ 848.185045][T15006] vmstat_refresh: nr_hugetlb -7680 [ 848.870273][ T976] smpboot: CPU 1 is now offline [ 849.874936][T15033] sctp: [Deprecated]: syz.2.1703 (pid 15033) Use of int in maxseg socket option. [ 849.874936][T15033] Use struct sctp_assoc_value instead [ 850.107779][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1704'. [ 850.196218][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.509886][T15037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.867199][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.021225][T15037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.544617][T15071] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.682872][T15068] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 856.567332][T15066] ubi0: detaching mtd0 [ 856.852330][T15066] ubi0: mtd0 is detached [ 858.273694][T15099] : Can't lookup blockdev [ 858.524370][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.586760][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.595806][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.633464][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.719597][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.719654][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.722090][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.722137][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 859.538434][T15095] tty tty26: ldisc open failed (-12), clearing slot 25 [ 860.906119][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 861.584963][T15125] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1720'. [ 863.860700][T15147] : Can't lookup blockdev [ 871.055734][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 871.364996][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 872.047531][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 872.166450][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.172801][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.228823][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.228881][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.231438][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.231487][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.447655][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.447711][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.606314][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.606370][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.228992][T15245] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 880.014493][ T30] audit: type=1800 audit(4294969429.999:18): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1748" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 885.148719][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 887.463377][T15347] nbd0: detected capacity change from 0 to 68719476736 [ 887.554217][T15046] block nbd0: Send control failed (result -22) [ 887.812248][T15046] block nbd0: Request send failed, requeueing [ 887.980690][ T5949] block nbd0: Receive control failed (result -32) [ 887.997899][T13513] block nbd0: Dead connection, failed to find a fallback [ 888.006040][T13513] block nbd0: shutting down sockets [ 888.011787][T13513] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 888.022134][T13513] Buffer I/O error on dev nbd0, logical block 0, async page read [ 888.032110][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 888.145958][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 888.312437][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 888.452059][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 888.560916][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 888.570156][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 888.875611][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 888.965648][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.025955][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.098710][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.106655][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.234960][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.309430][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.371477][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.421304][T15046] ldm_validate_partition_table(): Disk read failed. [ 889.478450][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.536724][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.594810][T15046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 889.657351][T15046] Buffer I/O error on dev nbd0, logical block 0, async page read [ 889.706958][T15046] Dev nbd0: unable to read RDB block 0 [ 889.757467][T15046] nbd0: unable to read partition table [ 889.823510][T15046] ldm_validate_partition_table(): Disk read failed. [ 889.875437][T15046] Dev nbd0: unable to read RDB block 0 [ 889.932012][T15046] nbd0: unable to read partition table [ 890.805182][ T30] audit: type=1326 audit(4294969440.845:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15378 comm="syz.2.1772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07a378e969 code=0x0 [ 890.885197][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1771'. [ 891.248698][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 895.334814][T15406] netlink: 'syz.4.1775': attribute type 2 has an invalid length. [ 898.001152][T15429] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1779'. [ 899.940144][ T5949] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14 [ 900.236559][ T5949] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 900.726054][ T30] audit: type=1800 audit(4294969458.813:20): pid=15458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1786" name="dbroot" dev="configfs" ino=51231 res=0 errno=0 [ 906.148804][T15518] FAULT_INJECTION: forcing a failure. [ 906.148804][T15518] name failslab, interval 1, probability 0, space 0, times 0 [ 906.423808][T15518] CPU: 0 UID: 0 PID: 15518 Comm: syz.3.1795 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 906.423868][T15518] Tainted: [U]=USER [ 906.423876][T15518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.423890][T15518] Call Trace: [ 906.423900][T15518] [ 906.423909][T15518] dump_stack_lvl+0x16c/0x1f0 [ 906.423952][T15518] should_fail_ex+0x512/0x640 [ 906.423991][T15518] ? __kmalloc_noprof+0xbf/0x510 [ 906.424021][T15518] ? constrain_params_by_rules+0x175/0xca0 [ 906.424061][T15518] should_failslab+0xc2/0x120 [ 906.424093][T15518] __kmalloc_noprof+0xd2/0x510 [ 906.424119][T15518] ? kasan_quarantine_put+0x10a/0x240 [ 906.424144][T15518] ? lockdep_hardirqs_on+0x7c/0x110 [ 906.424197][T15518] constrain_params_by_rules+0x175/0xca0 [ 906.424236][T15518] ? constrain_params_by_rules+0xa09/0xca0 [ 906.424282][T15518] ? constrain_params_by_rules+0xa0e/0xca0 [ 906.424326][T15518] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 906.424374][T15518] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 906.424413][T15518] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 906.424452][T15518] ? snd_pcm_oss_change_params_locked+0x9cd/0x3a30 [ 906.424500][T15518] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 906.424540][T15518] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 906.424582][T15518] ? snd_interval_refine+0x2fa/0x580 [ 906.424616][T15518] snd_pcm_hw_refine+0x7de/0xad0 [ 906.424661][T15518] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 906.424707][T15518] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 906.424758][T15518] snd_pcm_hw_param_first+0x334/0x6f0 [ 906.424803][T15518] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 906.424849][T15518] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 906.424890][T15518] ? __asan_memset+0x23/0x50 [ 906.424911][T15518] ? calc_src_frames.isra.0+0x187/0x1d0 [ 906.424941][T15518] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 906.424997][T15518] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 906.425062][T15518] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 906.425120][T15518] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 906.425161][T15518] ? hook_file_ioctl_common+0x145/0x410 [ 906.425196][T15518] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 906.425239][T15518] ? __fget_files+0x20e/0x3c0 [ 906.425266][T15518] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 906.425307][T15518] __x64_sys_ioctl+0x190/0x200 [ 906.425344][T15518] do_syscall_64+0xcd/0x230 [ 906.425383][T15518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.425408][T15518] RIP: 0033:0x7f1d2158e969 [ 906.425426][T15518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.425449][T15518] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.425471][T15518] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 906.425486][T15518] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000b [ 906.425501][T15518] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 906.425515][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.425529][T15518] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 906.425559][T15518] [ 909.019481][T15544] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1799'. [ 912.182464][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 919.148958][T15684] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1826'. [ 919.188642][T15684] openvswitch: netlink: IP tunnel dst address not specified [ 919.968333][T15696] [U] [ 919.971096][T15696] [U] [ 919.973808][T15696] [U] [ 919.976518][T15696] [U] [ 920.187985][T15696] [U] [ 920.190735][T15696] [U] [ 920.193464][T15696] [U] [ 920.196174][T15696] [U] [ 920.376305][T15696] [U] [ 920.379064][T15696] [U] [ 920.381865][T15696] [U] [ 920.384577][T15696] [U] [ 920.713243][T15696] [U] [ 920.716012][T15696] [U] [ 920.718743][T15696] [U] [ 920.721453][T15696] [U] [ 920.910464][T15703] zswap: compressor not available [ 921.213172][T15716] [U] [ 921.215944][T15716] [U] [ 921.218682][T15716] [U] [ 921.221410][T15716] [U] [ 921.324734][T15716] [U] [ 921.327489][T15716] [U] [ 921.330203][T15716] [U] [ 921.332913][T15716] [U] [ 921.430255][T15716] [U] [ 921.433031][T15716] [U] [ 921.435758][T15716] [U] [ 921.438568][T15716] [U] [ 921.552531][T15716] [U] [ 921.555399][T15716] [U] [ 921.558113][T15716] [U] [ 921.560839][T15716] [U] [ 921.685086][T15716] [U] [ 921.687857][T15716] [U] [ 921.690573][T15716] [U] [ 921.693288][T15716] [U] [ 921.792187][T15716] [U] [ 921.794949][T15716] [U] [ 921.797673][T15716] [U] [ 921.800381][T15716] [U] [ 921.963519][T15716] [U] [ 921.966275][T15716] [U] [ 921.968986][T15716] [U] [ 921.971693][T15716] [U] [ 921.974403][T15716] [U] [ 924.028412][T15765] netlink: 'syz.3.1843': attribute type 3 has an invalid length. [ 924.167335][T15771] netlink: 'syz.3.1843': attribute type 3 has an invalid length. [ 925.759958][T15796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 931.198211][T15829] FAULT_INJECTION: forcing a failure. [ 931.198211][T15829] name failslab, interval 1, probability 0, space 0, times 0 [ 931.330140][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.0.1855 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 931.330183][T15829] Tainted: [U]=USER [ 931.330191][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 931.330206][T15829] Call Trace: [ 931.330214][T15829] [ 931.330223][T15829] dump_stack_lvl+0x16c/0x1f0 [ 931.330265][T15829] should_fail_ex+0x512/0x640 [ 931.330303][T15829] ? fs_reclaim_acquire+0xae/0x150 [ 931.330344][T15829] ? tomoyo_encode2+0x100/0x3e0 [ 931.330380][T15829] should_failslab+0xc2/0x120 [ 931.330412][T15829] __kmalloc_noprof+0xd2/0x510 [ 931.330439][T15829] ? d_absolute_path+0x136/0x1a0 [ 931.330488][T15829] tomoyo_encode2+0x100/0x3e0 [ 931.330528][T15829] tomoyo_encode+0x29/0x50 [ 931.330562][T15829] tomoyo_realpath_from_path+0x18f/0x6e0 [ 931.330608][T15829] tomoyo_get_exe+0x63/0xa0 [ 931.330634][T15829] tomoyo_write_control+0x689/0x1430 [ 931.330671][T15829] ? __pfx_tomoyo_write_control+0x10/0x10 [ 931.330705][T15829] vfs_write+0x25c/0x1180 [ 931.330727][T15829] ? __pfx_tomoyo_write+0x10/0x10 [ 931.330786][T15829] ? __pfx___mutex_lock+0x10/0x10 [ 931.330823][T15829] ? __pfx_vfs_write+0x10/0x10 [ 931.330856][T15829] ? __fget_files+0x20e/0x3c0 [ 931.330887][T15829] ksys_write+0x12a/0x240 [ 931.330911][T15829] ? __pfx_ksys_write+0x10/0x10 [ 931.330933][T15829] ? rcu_is_watching+0x12/0xc0 [ 931.330965][T15829] do_syscall_64+0xcd/0x230 [ 931.331006][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.331030][T15829] RIP: 0033:0x7f7b6858e969 [ 931.331056][T15829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.331080][T15829] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.331103][T15829] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 931.331119][T15829] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 931.331134][T15829] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 931.331149][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.331167][T15829] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 931.331198][T15829] [ 931.332357][T15829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.869897][T15839] ERROR: Out of memory at tomoyo_memory_ok. [ 932.034872][T15839] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/390/file0' not defined. [ 933.703241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.711013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.813190][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 939.019111][T15887] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 939.118613][T15887] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 939.218409][T15887] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 940.728771][T15322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.738012][T15322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.747812][T15322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.762742][T15322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.774458][T15322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.449665][ T5973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.788693][ T5973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.959565][ T5973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.143901][ T5973] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.436513][T15907] FAULT_INJECTION: forcing a failure. [ 942.436513][T15907] name failslab, interval 1, probability 0, space 0, times 0 [ 942.488184][T15907] CPU: 0 UID: 0 PID: 15907 Comm: syz.3.1871 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 942.488224][T15907] Tainted: [U]=USER [ 942.488232][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.488247][T15907] Call Trace: [ 942.488254][T15907] [ 942.488262][T15907] dump_stack_lvl+0x16c/0x1f0 [ 942.488303][T15907] should_fail_ex+0x512/0x640 [ 942.488340][T15907] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 942.488372][T15907] should_failslab+0xc2/0x120 [ 942.488403][T15907] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 942.488432][T15907] ? ptlock_alloc+0x1f/0x70 [ 942.488460][T15907] ptlock_alloc+0x1f/0x70 [ 942.488483][T15907] pte_alloc_one+0x6d/0x380 [ 942.488512][T15907] __pte_alloc+0x6d/0x3c0 [ 942.488545][T15907] ? __pfx___pte_alloc+0x10/0x10 [ 942.488582][T15907] ? _raw_spin_unlock+0x28/0x50 [ 942.488623][T15907] ? __pmd_alloc+0x3c2/0x870 [ 942.488660][T15907] copy_page_range+0x3a29/0x5fe0 [ 942.488743][T15907] ? __pfx_copy_page_range+0x10/0x10 [ 942.488784][T15907] ? mas_store+0x93a/0x10c0 [ 942.488807][T15907] ? __pfx___might_resched+0x10/0x10 [ 942.488840][T15907] ? __pfx_mas_store+0x10/0x10 [ 942.488861][T15907] ? __vma_enter_locked+0x163/0x3f0 [ 942.488889][T15907] ? down_write+0x14d/0x200 [ 942.488927][T15907] copy_process+0x8644/0x91b0 [ 942.488981][T15907] ? __pfx_copy_process+0x10/0x10 [ 942.489010][T15907] ? __pfx___futex_wait+0x10/0x10 [ 942.489069][T15907] kernel_clone+0xfc/0x960 [ 942.489108][T15907] ? __pfx_kernel_clone+0x10/0x10 [ 942.489162][T15907] __do_sys_clone+0xce/0x120 [ 942.489193][T15907] ? __pfx___do_sys_clone+0x10/0x10 [ 942.489259][T15907] ? rcu_is_watching+0x12/0xc0 [ 942.489292][T15907] do_syscall_64+0xcd/0x230 [ 942.489332][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.489356][T15907] RIP: 0033:0x7f1d2158e969 [ 942.489375][T15907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.489399][T15907] RSP: 002b:00007f1d223a3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 942.489421][T15907] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 942.489438][T15907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 942.489452][T15907] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 942.489467][T15907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 942.489481][T15907] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 942.489512][T15907] [ 943.094379][T15322] Bluetooth: hci0: command tx timeout [ 943.251980][T15907] zram: Added device: zram0 [ 943.349347][T15890] chnl_net:caif_netlink_parms(): no params data found [ 943.845072][T15928] ERROR: Out of memory at tomoyo_memory_ok. [ 944.205717][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.241513][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.248761][T15890] bridge_slave_0: entered allmulticast mode [ 944.308177][T15890] bridge_slave_0: entered promiscuous mode [ 944.389791][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.415652][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.443160][T15890] bridge_slave_1: entered allmulticast mode [ 944.469814][T15890] bridge_slave_1: entered promiscuous mode [ 944.852111][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.910647][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.164112][T15322] Bluetooth: hci0: command tx timeout [ 945.268468][T15890] team0: Port device team_slave_0 added [ 945.292383][ T5973] bridge_slave_1: left allmulticast mode [ 945.318846][ T5973] bridge_slave_1: left promiscuous mode [ 945.349163][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.387978][ T5973] bridge_slave_0: left allmulticast mode [ 945.406930][ T5973] bridge_slave_0: left promiscuous mode [ 945.412741][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.522293][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.556884][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.593037][ T5973] bond0 (unregistering): Released all slaves [ 946.708168][T15890] team0: Port device team_slave_1 added [ 946.804213][ T5973] HfR: left promiscuous mode [ 947.023952][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.046758][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.138133][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.220252][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.232924][T15322] Bluetooth: hci0: command tx timeout [ 947.247918][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.305186][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.510657][T15890] hsr_slave_0: entered promiscuous mode [ 947.525500][T15890] hsr_slave_1: entered promiscuous mode [ 947.553178][T15890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.585042][T15890] Cannot create hsr debugfs directory [ 948.486659][ T5973] hsr_slave_0: left promiscuous mode [ 948.527665][ T5973] hsr_slave_1: left promiscuous mode [ 948.595309][ T5973] veth1_macvtap: left promiscuous mode [ 948.623191][ T5973] veth0_macvtap: left promiscuous mode [ 948.647300][ T5973] veth1_vlan: left promiscuous mode [ 948.671328][ T5973] veth0_vlan: left promiscuous mode [ 949.295621][T15322] Bluetooth: hci0: command tx timeout [ 950.159638][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 950.254345][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 952.026541][T15890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 952.389544][T15890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 952.492354][T15890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 952.566038][T15890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 952.993846][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.127388][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.240746][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.247958][T15601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.377434][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.384645][T15601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.703935][T15890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.057698][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.440095][T15890] veth0_vlan: entered promiscuous mode [ 956.510913][T15890] veth1_vlan: entered promiscuous mode [ 956.669029][T15890] veth0_macvtap: entered promiscuous mode [ 956.752189][T15890] veth1_macvtap: entered promiscuous mode [ 956.883650][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.957236][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.033219][T15890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.101891][T15890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.148758][T15890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.210394][T15890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.274620][T15601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.336310][T15601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.559291][ T9177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.746440][ T9177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.085193][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 959.164753][T16057] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1888'. [ 961.033662][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 961.142010][T16090] netlink: 354 bytes leftover after parsing attributes in process `syz.5.1867'. [ 963.577760][T16130] blk_print_req_error: 24 callbacks suppressed [ 963.577781][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.234005][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 964.714860][T16130] buffer_io_error: 23 callbacks suppressed [ 964.714879][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 964.829458][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.900730][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 964.935528][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.994902][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.046807][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.118863][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.171332][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.252207][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.260595][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.360055][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.415908][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.462450][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.507372][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.559552][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.595940][T16130] ldm_validate_partition_table(): Disk read failed. [ 965.636519][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.701928][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.751797][T16130] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.800428][T16130] Buffer I/O error on dev nbd0, logical block 0, async page read [ 965.837844][T16130] Dev nbd0: unable to read RDB block 0 [ 965.881355][T16130] nbd0: unable to read partition table [ 973.074559][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 977.804930][T16302] FAULT_INJECTION: forcing a failure. [ 977.804930][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 977.881272][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.0.1917 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 977.881310][T16302] Tainted: [U]=USER [ 977.881318][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 977.881332][T16302] Call Trace: [ 977.881339][T16302] [ 977.881347][T16302] dump_stack_lvl+0x16c/0x1f0 [ 977.881387][T16302] should_fail_ex+0x512/0x640 [ 977.881421][T16302] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 977.881447][T16302] should_failslab+0xc2/0x120 [ 977.881476][T16302] __kmalloc_cache_noprof+0x6a/0x3e0 [ 977.881499][T16302] ? alloc_pipe_info+0x10e/0x590 [ 977.881528][T16302] alloc_pipe_info+0x10e/0x590 [ 977.881556][T16302] splice_direct_to_actor+0x77d/0xa30 [ 977.881594][T16302] ? __pfx_direct_splice_actor+0x10/0x10 [ 977.881633][T16302] ? __pfx_aa_file_perm+0x10/0x10 [ 977.881667][T16302] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 977.881701][T16302] ? get_pid_task+0xfc/0x250 [ 977.881742][T16302] do_splice_direct+0x174/0x240 [ 977.881778][T16302] ? __pfx_do_splice_direct+0x10/0x10 [ 977.881815][T16302] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 977.881855][T16302] ? rw_verify_area+0xcf/0x680 [ 977.881894][T16302] do_sendfile+0xafd/0xe50 [ 977.881920][T16302] ? __pfx_do_sendfile+0x10/0x10 [ 977.881942][T16302] ? __fget_files+0x20e/0x3c0 [ 977.881971][T16302] __x64_sys_sendfile64+0x1d8/0x220 [ 977.881998][T16302] ? ksys_write+0x1b9/0x240 [ 977.882021][T16302] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 977.882049][T16302] ? rcu_is_watching+0x12/0xc0 [ 977.882078][T16302] do_syscall_64+0xcd/0x230 [ 977.882114][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.882136][T16302] RIP: 0033:0x7f7b6858e969 [ 977.882158][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.882181][T16302] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 977.882202][T16302] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 977.882217][T16302] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 977.882231][T16302] RBP: 00007f7b693e0090 R08: 0000000000000000 R09: 0000000000000000 [ 977.882245][T16302] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 977.882258][T16302] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 977.882291][T16302] [ 986.855447][T16384] FAULT_INJECTION: forcing a failure. [ 986.855447][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 986.937187][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.0.1930 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 986.937228][T16384] Tainted: [U]=USER [ 986.937235][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 986.937249][T16384] Call Trace: [ 986.937257][T16384] [ 986.937265][T16384] dump_stack_lvl+0x16c/0x1f0 [ 986.937306][T16384] should_fail_ex+0x512/0x640 [ 986.937342][T16384] ? __kmalloc_noprof+0xbf/0x510 [ 986.937371][T16384] ? copy_splice_read+0x1a8/0xba0 [ 986.937413][T16384] should_failslab+0xc2/0x120 [ 986.937443][T16384] __kmalloc_noprof+0xd2/0x510 [ 986.937477][T16384] copy_splice_read+0x1a8/0xba0 [ 986.937520][T16384] ? __pfx_copy_splice_read+0x10/0x10 [ 986.937559][T16384] ? look_up_lock_class+0x59/0x150 [ 986.937599][T16384] ? lockdep_init_map_type+0x5c/0x280 [ 986.937634][T16384] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 986.937660][T16384] ? __pfx_copy_splice_read+0x10/0x10 [ 986.937696][T16384] do_splice_read+0x285/0x370 [ 986.937735][T16384] splice_direct_to_actor+0x2a1/0xa30 [ 986.937774][T16384] ? __pfx_direct_splice_actor+0x10/0x10 [ 986.937818][T16384] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 986.937854][T16384] ? get_pid_task+0xfc/0x250 [ 986.937909][T16384] do_splice_direct+0x174/0x240 [ 986.937944][T16384] ? __pfx_do_splice_direct+0x10/0x10 [ 986.937981][T16384] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 986.938038][T16384] ? rw_verify_area+0xcf/0x680 [ 986.938077][T16384] do_sendfile+0xafd/0xe50 [ 986.938103][T16384] ? __pfx_do_sendfile+0x10/0x10 [ 986.938125][T16384] ? __fget_files+0x20e/0x3c0 [ 986.938156][T16384] __x64_sys_sendfile64+0x1d8/0x220 [ 986.938184][T16384] ? ksys_write+0x1b9/0x240 [ 986.938207][T16384] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 986.938236][T16384] ? rcu_is_watching+0x12/0xc0 [ 986.938269][T16384] do_syscall_64+0xcd/0x230 [ 986.938309][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.938333][T16384] RIP: 0033:0x7f7b6858e969 [ 986.938351][T16384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.938375][T16384] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 986.938401][T16384] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 986.938417][T16384] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 986.938431][T16384] RBP: 00007f7b693e0090 R08: 0000000000000000 R09: 0000000000000000 [ 986.938445][T16384] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 986.938459][T16384] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 986.938488][T16384] [ 988.485328][T16385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 988.495295][T16385] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 988.526915][T16385] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 988.570441][T16385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 988.640632][T16385] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 988.747857][T16385] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 988.810934][T16385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.839016][T16385] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 988.908327][T16385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.942809][T16385] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 989.017301][T16385] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 990.520689][T15322] Bluetooth: hci2: command 0x0c1a tx timeout [ 990.601715][T15322] Bluetooth: hci3: command 0x0c1a tx timeout [ 990.851764][T15322] Bluetooth: hci1: command 0x0c1a tx timeout [ 990.920656][T15322] Bluetooth: hci0: command 0x0c1a tx timeout [ 991.220615][T16444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1938'. [ 992.590159][T15322] Bluetooth: hci2: command 0x0c1a tx timeout [ 992.670868][T15322] Bluetooth: hci3: command 0x0c1a tx timeout [ 992.680887][T16471] usbcore.quirks: string doesn't fit in 127 chars. [ 992.914613][T15322] Bluetooth: hci1: command 0x0c1a tx timeout [ 992.987840][T15322] Bluetooth: hci0: command 0x0c1a tx timeout [ 994.659743][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 994.739811][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 994.824848][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.836506][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.057093][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 995.858993][T15322] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 996.809640][T16534] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1948'. [ 996.898790][T16535] blktrace: Concurrent blktraces are not allowed on ram7 [ 997.558851][T16548] ERROR: Out of memory at tomoyo_memory_ok. [ 999.527619][T16577] CIFS: VFS: Invalid SecurityFlags: [ 1000.057797][T16579] size and base must be multiples of 4 kiB [ 1000.090987][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.3.1955 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1000.091030][T16579] Tainted: [U]=USER [ 1000.091038][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.091053][T16579] Call Trace: [ 1000.091060][T16579] [ 1000.091069][T16579] dump_stack_lvl+0x16c/0x1f0 [ 1000.091111][T16579] mtrr_add+0xdf/0x110 [ 1000.091150][T16579] mtrr_ioctl+0x7ef/0xcf0 [ 1000.091190][T16579] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1000.091234][T16579] ? find_held_lock+0x2b/0x80 [ 1000.091267][T16579] ? __fget_files+0x20e/0x3c0 [ 1000.091290][T16579] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1000.091342][T16579] proc_reg_unlocked_ioctl+0x229/0x320 [ 1000.091368][T16579] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1000.091398][T16579] __x64_sys_ioctl+0x190/0x200 [ 1000.091437][T16579] do_syscall_64+0xcd/0x230 [ 1000.091477][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.091503][T16579] RIP: 0033:0x7f1d2158e969 [ 1000.091521][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.091545][T16579] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.091567][T16579] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 1000.091583][T16579] RDX: 0000000000000003 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 1000.091598][T16579] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1000.091613][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.091627][T16579] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 1000.091657][T16579] [ 1000.094753][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 1001.447345][T16595] scsi_dev_info_list_add_str: bad dev info string ';u tS;Q3Is`qģBg]' '' '' [ 1012.552050][T16719] scsi_dev_info_list_add_str: bad dev info string ';u tS;Q3Is`qģBg]' '' '' [ 1012.576219][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1974'. [ 1012.995353][T16717] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 1013.610927][T16726] blk_print_req_error: 6 callbacks suppressed [ 1013.610948][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1013.968945][T16726] buffer_io_error: 6 callbacks suppressed [ 1013.968964][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1014.371672][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.950148][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.274345][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.342312][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.350277][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.539819][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.622822][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.690411][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.744121][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.386393][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.394439][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1016.912045][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1017.161427][T16736] FAULT_INJECTION: forcing a failure. [ 1017.161427][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.180648][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1017.438678][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.0.1976 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1017.438721][T16736] Tainted: [U]=USER [ 1017.438729][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1017.438743][T16736] Call Trace: [ 1017.438751][T16736] [ 1017.438760][T16736] dump_stack_lvl+0x16c/0x1f0 [ 1017.438803][T16736] should_fail_ex+0x512/0x640 [ 1017.438841][T16736] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1017.438879][T16736] should_failslab+0xc2/0x120 [ 1017.438911][T16736] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1017.438938][T16736] ? __proc_create+0xc3/0x8c0 [ 1017.438966][T16736] ? __proc_create+0x2ce/0x8c0 [ 1017.438998][T16736] __proc_create+0x2ce/0x8c0 [ 1017.439027][T16736] ? __pfx___proc_create+0x10/0x10 [ 1017.439067][T16736] proc_create_reg+0x7d/0x180 [ 1017.439099][T16736] proc_create_net_data+0x8e/0x1b0 [ 1017.439130][T16736] ? __pfx_proc_create_net_data+0x10/0x10 [ 1017.439161][T16736] ? __kasan_kmalloc+0xaa/0xb0 [ 1017.439195][T16736] ip_vs_app_net_init+0xc8/0x110 [ 1017.439224][T16736] __ip_vs_init+0x25b/0x520 [ 1017.439250][T16736] ? __pfx___ip_vs_init+0x10/0x10 [ 1017.439274][T16736] ops_init+0x1e2/0x5f0 [ 1017.439310][T16736] setup_net+0x21e/0x850 [ 1017.439346][T16736] ? __pfx_setup_net+0x10/0x10 [ 1017.439377][T16736] ? lockdep_init_map_type+0x5c/0x280 [ 1017.439412][T16736] ? __pfx_down_read_killable+0x10/0x10 [ 1017.439440][T16736] ? debug_mutex_init+0x37/0x70 [ 1017.439467][T16736] copy_net_ns+0x2a6/0x5f0 [ 1017.439506][T16736] create_new_namespaces+0x3ea/0xad0 [ 1017.439542][T16736] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1017.439573][T16736] ksys_unshare+0x45b/0xa40 [ 1017.439609][T16736] ? __pfx_ksys_unshare+0x10/0x10 [ 1017.439642][T16736] ? xfd_validate_state+0x5d/0x180 [ 1017.439669][T16736] ? rcu_is_watching+0x12/0xc0 [ 1017.439704][T16736] __x64_sys_unshare+0x31/0x40 [ 1017.439738][T16736] do_syscall_64+0xcd/0x230 [ 1017.439779][T16736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.439806][T16736] RIP: 0033:0x7f7b6858e969 [ 1017.439826][T16736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.439850][T16736] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1017.439879][T16736] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 1017.439895][T16736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1017.439911][T16736] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1017.439926][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.439942][T16736] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 1017.439972][T16736] [ 1018.481522][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1980'. [ 1018.541044][T16755] delete_channel: no stack [ 1018.655655][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1018.685381][T16726] ldm_validate_partition_table(): Disk read failed. [ 1018.700082][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.741668][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1018.766368][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.824304][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1018.858521][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.891118][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.922102][T16726] Dev nbd0: unable to read RDB block 0 [ 1018.942222][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.983309][T16726] buffer_io_error: 2 callbacks suppressed [ 1018.983327][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.027998][T16726] I/O error, dev nbd0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1019.058553][T16726] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1019.089300][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1019.126301][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.149344][T16762] zram: Added device: zram1 [ 1019.251865][T16726] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1019.331616][T16726] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.360803][T16726] nbd0: unable to read partition table [ 1021.311586][T16796] futex_wake_op: syz.2.1990 tries to shift op by 64; fix this program [ 1022.685093][T16814] bridge0: port 3(team0) entered blocking state [ 1022.706983][T16814] bridge0: port 3(team0) entered disabled state [ 1022.770945][T16814] team0: entered allmulticast mode [ 1022.802299][T16814] team_slave_1: entered allmulticast mode [ 1022.834571][T16814] team0: entered promiscuous mode [ 1022.864122][T16814] team_slave_1: entered promiscuous mode [ 1022.907462][T16814] bridge0: port 3(team0) entered blocking state [ 1022.913895][T16814] bridge0: port 3(team0) entered forwarding state [ 1023.521905][T16824] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1997'. [ 1025.292465][T16858] ubi0: attaching mtd0 [ 1025.402085][T16858] ubi0: scanning is finished [ 1025.406766][T16858] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1025.942027][T16858] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1029.185463][T16901] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1032.398279][T16942] ERROR: Out of memory at tomoyo_memory_ok. [ 1036.954414][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 1037.293888][T16999] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 1040.769503][T17042] dump_stack_lvl+0x16c/0x1f0 [ 1040.769546][T17042] should_fail_ex+0x512/0x640 [ 1040.769583][T17042] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1040.769612][T17042] should_failslab+0xc2/0x120 [ 1040.769643][T17042] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1040.769667][T17042] ? __mutex_lock+0x1ca/0xb90 [ 1040.769704][T17042] ? alloc_tty_struct+0x96/0x8c0 [ 1040.769743][T17042] alloc_tty_struct+0x96/0x8c0 [ 1040.769776][T17042] ? __pfx___mutex_lock+0x10/0x10 [ 1040.769815][T17042] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1040.769849][T17042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1040.769896][T17042] tty_init_dev.part.0+0x1e/0x500 [ 1040.769933][T17042] tty_init_dev+0x60/0x80 [ 1040.769966][T17042] ? __pfx_ptmx_open+0x10/0x10 [ 1040.769996][T17042] ptmx_open+0x10d/0x360 [ 1040.770021][T17042] ? __pfx_ptmx_open+0x10/0x10 [ 1040.770045][T17042] chrdev_open+0x234/0x6a0 [ 1040.770073][T17042] ? __pfx_apparmor_file_open+0x10/0x10 [ 1040.770108][T17042] ? __pfx_chrdev_open+0x10/0x10 [ 1040.770138][T17042] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1040.770183][T17042] do_dentry_open+0x741/0x1c10 [ 1040.770210][T17042] ? __pfx_chrdev_open+0x10/0x10 [ 1040.770244][T17042] vfs_open+0x82/0x3f0 [ 1040.770280][T17042] path_openat+0x1e5e/0x2d40 [ 1040.770317][T17042] ? __pfx_path_openat+0x10/0x10 [ 1040.770349][T17042] do_filp_open+0x20b/0x470 [ 1040.770375][T17042] ? __pfx_do_filp_open+0x10/0x10 [ 1040.770422][T17042] ? alloc_fd+0x471/0x7d0 [ 1040.770479][T17042] do_sys_openat2+0x11b/0x1d0 [ 1040.770522][T17042] ? __pfx_do_sys_openat2+0x10/0x10 [ 1040.770564][T17042] __x64_sys_openat+0x174/0x210 [ 1040.770595][T17042] ? __pfx___x64_sys_openat+0x10/0x10 [ 1040.770629][T17042] ? rcu_is_watching+0x12/0xc0 [ 1040.770658][T17042] do_syscall_64+0xcd/0x230 [ 1040.770695][T17042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.770718][T17042] RIP: 0033:0x7f372b38e969 [ 1040.770735][T17042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.770757][T17042] RSP: 002b:00007f372c18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1040.770778][T17042] RAX: ffffffffffffffda RBX: 00007f372b5b5fa0 RCX: 00007f372b38e969 [ 1040.770793][T17042] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1040.770807][T17042] RBP: 00007f372b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1040.770820][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.770833][T17042] R13: 0000000000000000 R14: 00007f372b5b5fa0 R15: 00007fff57636ba8 [ 1040.770861][T17042] [ 1042.043747][T17055] FAULT_INJECTION: forcing a failure. [ 1042.043747][T17055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.092135][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.5.2046 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1042.092176][T17055] Tainted: [U]=USER [ 1042.092184][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.092198][T17055] Call Trace: [ 1042.092205][T17055] [ 1042.092214][T17055] dump_stack_lvl+0x16c/0x1f0 [ 1042.092255][T17055] should_fail_ex+0x512/0x640 [ 1042.092308][T17055] _copy_from_user+0x2e/0xd0 [ 1042.092333][T17055] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 1042.092372][T17055] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1042.092409][T17055] ? trace_kmalloc+0x2b/0xd0 [ 1042.092443][T17055] ? __pfx___local_bh_enable_ip+0x1/0x10 [ 1042.092471][T17055] ? ip_setsockopt+0x59/0xf0 [ 1042.092511][T17055] do_ip_setsockopt+0x23e7/0x3130 [ 1042.092551][T17055] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1042.092594][T17055] ? __pfx___might_resched+0x10/0x10 [ 1042.092631][T17055] ip_setsockopt+0x59/0xf0 [ 1042.092689][T17055] ipv6_setsockopt+0x155/0x170 [ 1042.092722][T17055] udpv6_setsockopt+0x7d/0xd0 [ 1042.092760][T17055] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1042.092796][T17055] do_sock_setsockopt+0x221/0x470 [ 1042.092830][T17055] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1042.092892][T17055] __sys_setsockopt+0x120/0x1a0 [ 1042.092925][T17055] __x64_sys_setsockopt+0xbd/0x160 [ 1042.092952][T17055] ? do_syscall_64+0x91/0x230 [ 1042.092990][T17055] ? lockdep_hardirqs_on+0x7c/0x110 [ 1042.093025][T17055] do_syscall_64+0xcd/0x230 [ 1042.093065][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.093090][T17055] RIP: 0033:0x7f372b38e969 [ 1042.093108][T17055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.093131][T17055] RSP: 002b:00007f372c18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1042.093153][T17055] RAX: ffffffffffffffda RBX: 00007f372b5b5fa0 RCX: 00007f372b38e969 [ 1042.093169][T17055] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 1042.093183][T17055] RBP: 00007f372c18d090 R08: 00000000000003ff R09: 0000000000000000 [ 1042.093198][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.093212][T17055] R13: 0000000000000000 R14: 00007f372b5b5fa0 R15: 00007fff57636ba8 [ 1042.093242][T17055] [ 1043.153475][T17065] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 1046.375996][T17101] FAULT_INJECTION: forcing a failure. [ 1046.375996][T17101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.428802][T17101] CPU: 0 UID: 0 PID: 17101 Comm: syz.0.2055 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1046.428840][T17101] Tainted: [U]=USER [ 1046.428846][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.428859][T17101] Call Trace: [ 1046.428866][T17101] [ 1046.428874][T17101] dump_stack_lvl+0x16c/0x1f0 [ 1046.428913][T17101] should_fail_ex+0x512/0x640 [ 1046.428952][T17101] _copy_to_user+0x32/0xd0 [ 1046.428976][T17101] simple_read_from_buffer+0xcb/0x170 [ 1046.429013][T17101] proc_fail_nth_read+0x197/0x270 [ 1046.429047][T17101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1046.429082][T17101] ? rw_verify_area+0xcf/0x680 [ 1046.429116][T17101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1046.429149][T17101] vfs_read+0x1de/0xc70 [ 1046.429175][T17101] ? __pfx___mutex_lock+0x10/0x10 [ 1046.429212][T17101] ? __pfx_vfs_read+0x10/0x10 [ 1046.429260][T17101] ? __fget_files+0x20e/0x3c0 [ 1046.429290][T17101] ksys_read+0x12a/0x240 [ 1046.429313][T17101] ? __pfx_ksys_read+0x10/0x10 [ 1046.429334][T17101] ? rcu_is_watching+0x12/0xc0 [ 1046.429365][T17101] do_syscall_64+0xcd/0x230 [ 1046.429402][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.429425][T17101] RIP: 0033:0x7f7b6858d37c [ 1046.429443][T17101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1046.429477][T17101] RSP: 002b:00007f7b693e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1046.429499][T17101] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858d37c [ 1046.429515][T17101] RDX: 000000000000000f RSI: 00007f7b693e00a0 RDI: 0000000000000004 [ 1046.429530][T17101] RBP: 00007f7b693e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.429544][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.429558][T17101] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 1046.429588][T17101] [ 1052.523845][T17153] [U] [ 1054.408268][T17192] syz.2.2074(17192): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1055.948134][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.956699][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.919481][T17228] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 1056.919481][T17228] program syz.3.2079 not setting count and/or reply_len properly [ 1058.302997][T17248] FAULT_INJECTION: forcing a failure. [ 1058.302997][T17248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.449680][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.3.2084 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1058.449720][T17248] Tainted: [U]=USER [ 1058.449727][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.449740][T17248] Call Trace: [ 1058.449748][T17248] [ 1058.449757][T17248] dump_stack_lvl+0x16c/0x1f0 [ 1058.449798][T17248] should_fail_ex+0x512/0x640 [ 1058.449839][T17248] _copy_from_user+0x2e/0xd0 [ 1058.449862][T17248] __x64_sys_epoll_ctl+0x131/0x1e0 [ 1058.449900][T17248] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1058.449935][T17248] ? rcu_is_watching+0x12/0xc0 [ 1058.449966][T17248] do_syscall_64+0xcd/0x230 [ 1058.450003][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.450027][T17248] RIP: 0033:0x7f1d2158e969 [ 1058.450045][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.450068][T17248] RSP: 002b:00007f1d223a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1058.450091][T17248] RAX: ffffffffffffffda RBX: 00007f1d217b5fa0 RCX: 00007f1d2158e969 [ 1058.450106][T17248] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1058.450120][T17248] RBP: 00007f1d223a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.450135][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.450149][T17248] R13: 0000000000000000 R14: 00007f1d217b5fa0 R15: 00007fff12e2cad8 [ 1058.450179][T17248] [ 1061.197357][T17259] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1061.492740][T17260] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 1062.377196][ T5187] ERROR: Out of memory at tomoyo_memory_ok. [ 1065.062300][T17296] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 1068.184344][T17330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1068.218277][T17330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1068.260623][T17330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.280886][T17330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1069.392153][T15322] Bluetooth: hci2: command 0x0c1a tx timeout [ 1069.710172][T17356] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 1070.266372][T15322] Bluetooth: hci1: command 0x0c1a tx timeout [ 1070.273625][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 1070.345757][T15322] Bluetooth: hci0: command 0x0c1a tx timeout [ 1070.370166][T17359] vivid-007: ================= START STATUS ================= [ 1070.425339][T17359] vivid-007: Generate PTS: true [ 1070.456369][T17359] vivid-007: Generate SCR: true [ 1070.482570][T17359] tpg source WxH: 640x360 (Y'CbCr) [ 1070.523372][T17359] tpg field: 1 [ 1070.542522][T17359] tpg crop: (0,0)/640x360 [ 1070.574395][T17359] tpg compose: (0,0)/640x360 [ 1070.605650][T17359] tpg colorspace: 8 [ 1070.623921][T17359] tpg transfer function: 0/0 [ 1070.677709][T17359] tpg Y'CbCr encoding: 0/0 [ 1070.682179][T17359] tpg quantization: 0/0 [ 1070.719267][T17359] tpg RGB range: 0/2 [ 1070.723242][T17359] vivid-007: ================== END STATUS ================== [ 1071.186258][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2114'. [ 1073.644256][T17423] could not allocate digest TFM handle [ 1077.545543][T17469] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2132'. [ 1077.958067][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2134'. [ 1079.389414][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 1080.663759][T17503] FAULT_INJECTION: forcing a failure. [ 1080.663759][T17503] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.745542][T17503] CPU: 0 UID: 0 PID: 17503 Comm: syz.0.2141 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1080.745585][T17503] Tainted: [U]=USER [ 1080.745593][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1080.745607][T17503] Call Trace: [ 1080.745620][T17503] [ 1080.745630][T17503] dump_stack_lvl+0x16c/0x1f0 [ 1080.745672][T17503] should_fail_ex+0x512/0x640 [ 1080.745710][T17503] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1080.745738][T17503] should_failslab+0xc2/0x120 [ 1080.745770][T17503] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1080.745795][T17503] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 1080.745830][T17503] ? fscontext_alloc_log+0x4a/0x1b0 [ 1080.745864][T17503] fscontext_alloc_log+0x4a/0x1b0 [ 1080.745895][T17503] __x64_sys_fsopen+0x157/0x240 [ 1080.745925][T17503] do_syscall_64+0xcd/0x230 [ 1080.745966][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.745991][T17503] RIP: 0033:0x7f7b6858e969 [ 1080.746010][T17503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.746034][T17503] RSP: 002b:00007f7b693e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1080.746057][T17503] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858e969 [ 1080.746073][T17503] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1080.746088][T17503] RBP: 00007f7b68610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1080.746103][T17503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.746117][T17503] R13: 0000000000000000 R14: 00007f7b687b5fa0 R15: 00007ffe8065c108 [ 1080.746147][T17503] [ 1082.143064][T17509] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 1087.374851][T17571] ERROR: Out of memory at tomoyo_memory_ok. [ 1087.447818][T17571] FAULT_INJECTION: forcing a failure. [ 1087.447818][T17571] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.526258][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.3.2155 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1087.526301][T17571] Tainted: [U]=USER [ 1087.526310][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1087.526325][T17571] Call Trace: [ 1087.526332][T17571] [ 1087.526342][T17571] dump_stack_lvl+0x16c/0x1f0 [ 1087.526384][T17571] should_fail_ex+0x512/0x640 [ 1087.526421][T17571] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1087.526450][T17571] should_failslab+0xc2/0x120 [ 1087.526481][T17571] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1087.526506][T17571] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 1087.526553][T17571] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 1087.526595][T17571] ? preempt_count_sub+0xe5/0x160 [ 1087.526628][T17571] ? trace_contention_end+0xdd/0x130 [ 1087.526663][T17571] ? __mutex_lock+0x1ca/0xb90 [ 1087.526703][T17571] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1087.526747][T17571] ? __pfx___mutex_lock+0x10/0x10 [ 1087.526796][T17571] ? find_held_lock+0x2b/0x80 [ 1087.526826][T17571] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1087.526872][T17571] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 1087.526913][T17571] ? find_held_lock+0x2b/0x80 [ 1087.526936][T17571] ? hook_file_ioctl_common+0x145/0x410 [ 1087.526967][T17571] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1087.527011][T17571] ? __fget_files+0x20e/0x3c0 [ 1087.527037][T17571] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1087.527087][T17571] __x64_sys_ioctl+0x190/0x200 [ 1087.527125][T17571] do_syscall_64+0xcd/0x230 [ 1087.527166][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.527191][T17571] RIP: 0033:0x7f1d2158e969 [ 1087.527210][T17571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.527234][T17571] RSP: 002b:00007f1d22383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.527257][T17571] RAX: ffffffffffffffda RBX: 00007f1d217b6080 RCX: 00007f1d2158e969 [ 1087.527273][T17571] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 000000000000000a [ 1087.527288][T17571] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1087.527303][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.527317][T17571] R13: 0000000000000000 R14: 00007f1d217b6080 R15: 00007fff12e2cad8 [ 1087.527348][T17571] [ 1090.091361][ T30] audit: type=1326 audit(4294967359.543:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.0.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b6858e969 code=0x0 [ 1090.258932][T17585] sctp: [Deprecated]: syz.0.2158 (pid 17585) Use of int in maxseg socket option. [ 1090.258932][T17585] Use struct sctp_assoc_value instead [ 1093.068902][T17618] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1095.100394][T17650] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1095.507857][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2173'. [ 1096.169488][T17653] netlink: 'syz.3.2171': attribute type 1 has an invalid length. [ 1096.850968][T17683] tipc: Started in network mode [ 1096.885654][T17683] tipc: Node identity ee00, cluster identity 4711 [ 1096.908071][T17683] tipc: Node number set to 60928 [ 1097.252972][T17706] random: crng reseeded on system resumption [ 1103.153724][T17774] Invalid ELF header magic: != ELF [ 1108.743479][T17815] ================================================================== [ 1108.743496][T17815] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1108.743535][T17815] Read of size 2 at addr ffff888034d59972 by task syz.3.2203/17815 [ 1108.743555][T17815] [ 1108.743569][T17815] CPU: 0 UID: 0 PID: 17815 Comm: syz.3.2203 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1108.743606][T17815] Tainted: [U]=USER [ 1108.743614][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.743629][T17815] Call Trace: [ 1108.743637][T17815] [ 1108.743645][T17815] dump_stack_lvl+0x116/0x1f0 [ 1108.743683][T17815] print_report+0xc3/0x670 [ 1108.743713][T17815] ? __virt_addr_valid+0x5e/0x590 [ 1108.743747][T17815] ? __phys_addr+0xc6/0x150 [ 1108.743779][T17815] ? fbcon_prepare_logo+0xa03/0xc70 [ 1108.743811][T17815] kasan_report+0xe0/0x110 [ 1108.743842][T17815] ? fbcon_prepare_logo+0xa03/0xc70 [ 1108.743878][T17815] kasan_check_range+0xef/0x1a0 [ 1108.743914][T17815] __asan_memcpy+0x23/0x60 [ 1108.743937][T17815] fbcon_prepare_logo+0xa03/0xc70 [ 1108.743975][T17815] fbcon_init+0xd77/0x1900 [ 1108.744007][T17815] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1108.744039][T17815] visual_init+0x31d/0x620 [ 1108.744063][T17815] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1108.744097][T17815] store_bind+0x61d/0x760 [ 1108.744128][T17815] ? sysfs_file_kobj+0xe4/0x290 [ 1108.744164][T17815] ? __pfx_store_bind+0x10/0x10 [ 1108.744192][T17815] dev_attr_store+0x55/0x80 [ 1108.744224][T17815] ? __pfx_dev_attr_store+0x10/0x10 [ 1108.744257][T17815] sysfs_kf_write+0xef/0x150 [ 1108.744301][T17815] kernfs_fop_write_iter+0x351/0x510 [ 1108.744333][T17815] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1108.744370][T17815] vfs_write+0x5bd/0x1180 [ 1108.744398][T17815] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1108.744432][T17815] ? __pfx___mutex_lock+0x10/0x10 [ 1108.744470][T17815] ? __pfx_vfs_write+0x10/0x10 [ 1108.744503][T17815] ksys_write+0x12a/0x240 [ 1108.744527][T17815] ? __pfx_ksys_write+0x10/0x10 [ 1108.744550][T17815] ? rcu_is_watching+0x12/0xc0 [ 1108.744578][T17815] do_syscall_64+0xcd/0x230 [ 1108.744616][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.744641][T17815] RIP: 0033:0x7f1d2158e969 [ 1108.744660][T17815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.744684][T17815] RSP: 002b:00007f1d22383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1108.744707][T17815] RAX: ffffffffffffffda RBX: 00007f1d217b6080 RCX: 00007f1d2158e969 [ 1108.744724][T17815] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1108.744739][T17815] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1108.744754][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.744769][T17815] R13: 0000000000000000 R14: 00007f1d217b6080 R15: 00007fff12e2cad8 [ 1108.744792][T17815] [ 1108.744800][T17815] [ 1108.744806][T17815] Allocated by task 9626: [ 1108.744817][T17815] kasan_save_stack+0x33/0x60 [ 1108.744843][T17815] kasan_save_track+0x14/0x30 [ 1108.744867][T17815] __kasan_kmalloc+0xaa/0xb0 [ 1108.744890][T17815] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 1108.744921][T17815] kstrdup+0x53/0x100 [ 1108.744949][T17815] kstrdup_const+0x63/0x80 [ 1108.744978][T17815] __kernfs_new_node+0x9b/0x8a0 [ 1108.744998][T17815] kernfs_new_node+0x13c/0x1e0 [ 1108.745023][T17815] kernfs_create_link+0xcc/0x240 [ 1108.745055][T17815] sysfs_do_create_link_sd+0x90/0x140 [ 1108.745093][T17815] sysfs_create_link+0x61/0xc0 [ 1108.745130][T17815] add_disk_fwnode+0x6bd/0x13a0 [ 1108.745164][T17815] loop_add+0x909/0xb70 [ 1108.745196][T17815] loop_control_ioctl+0x13c/0x630 [ 1108.745230][T17815] __x64_sys_ioctl+0x190/0x200 [ 1108.745262][T17815] do_syscall_64+0xcd/0x230 [ 1108.745317][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.745340][T17815] [ 1108.745345][T17815] The buggy address belongs to the object at ffff888034d59960 [ 1108.745345][T17815] which belongs to the cache kmalloc-8 of size 8 [ 1108.745363][T17815] The buggy address is located 11 bytes to the right of [ 1108.745363][T17815] allocated 7-byte region [ffff888034d59960, ffff888034d59967) [ 1108.745387][T17815] [ 1108.745393][T17815] The buggy address belongs to the physical page: [ 1108.745427][T17815] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34d59 [ 1108.745449][T17815] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1108.745468][T17815] page_type: f5(slab) [ 1108.745488][T17815] raw: 00fff00000000000 ffff88801b441500 0000000000000000 dead000000000001 [ 1108.745510][T17815] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 1108.745525][T17815] page dumped because: kasan: bad access detected [ 1108.745542][T17815] page_owner tracks the page as allocated [ 1108.745550][T17815] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8344, tgid 8343 (syz.0.435), ts 307656881813, free_ts 307612578818 [ 1108.745592][T17815] post_alloc_hook+0x181/0x1b0 [ 1108.745615][T17815] get_page_from_freelist+0x135c/0x3920 [ 1108.745643][T17815] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1108.745670][T17815] alloc_pages_mpol+0x1fb/0x550 [ 1108.745699][T17815] new_slab+0x244/0x340 [ 1108.745718][T17815] ___slab_alloc+0xd9c/0x1940 [ 1108.745737][T17815] __slab_alloc.constprop.0+0x56/0xb0 [ 1108.745759][T17815] __kvmalloc_node_noprof+0x3a6/0x600 [ 1108.745783][T17815] proc_sys_call_handler+0x2a6/0x5c0 [ 1108.745808][T17815] vfs_write+0x5bd/0x1180 [ 1108.745829][T17815] __x64_sys_pwrite64+0x1f4/0x250 [ 1108.745853][T17815] do_syscall_64+0xcd/0x230 [ 1108.745888][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.745911][T17815] page last free pid 15 tgid 15 stack trace: [ 1108.745937][T17815] __free_frozen_pages+0x69d/0xff0 [ 1108.745957][T17815] rcu_core+0x79c/0x14e0 [ 1108.745991][T17815] handle_softirqs+0x216/0x8e0 [ 1108.746016][T17815] run_ksoftirqd+0x3a/0x60 [ 1108.746040][T17815] smpboot_thread_fn+0x3f7/0xae0 [ 1108.746066][T17815] kthread+0x3c2/0x780 [ 1108.746098][T17815] ret_from_fork+0x48/0x80 [ 1108.746118][T17815] ret_from_fork_asm+0x1a/0x30 [ 1108.746151][T17815] [ 1108.746156][T17815] Memory state around the buggy address: [ 1108.746167][T17815] ffff888034d59800: 00 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 1108.746183][T17815] ffff888034d59880: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 1108.746200][T17815] >ffff888034d59900: 00 fc fc fc fa fc fc fc 06 fc fc fc 07 fc fc fc [ 1108.746213][T17815] ^ [ 1108.746226][T17815] ffff888034d59980: 06 fc fc fc 05 fc fc fc 00 fc fc fc 06 fc fc fc [ 1108.746243][T17815] ffff888034d59a00: 05 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc [ 1108.746255][T17815] ================================================================== [ 1108.808249][T17815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1108.808274][T17815] CPU: 0 UID: 0 PID: 17815 Comm: syz.3.2203 Tainted: G U 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1108.808330][T17815] Tainted: [U]=USER [ 1108.808338][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.808353][T17815] Call Trace: [ 1108.808361][T17815] [ 1108.808370][T17815] dump_stack_lvl+0x3d/0x1f0 [ 1108.808409][T17815] panic+0x71c/0x800 [ 1108.808445][T17815] ? __pfx_panic+0x10/0x10 [ 1108.808479][T17815] ? irqentry_exit+0x3b/0x90 [ 1108.808514][T17815] ? lockdep_hardirqs_on+0x7c/0x110 [ 1108.808550][T17815] ? preempt_schedule_thunk+0x16/0x30 [ 1108.808609][T17815] ? fbcon_prepare_logo+0xa03/0xc70 [ 1108.808641][T17815] ? preempt_schedule_common+0x44/0xc0 [ 1108.808680][T17815] ? fbcon_prepare_logo+0xa03/0xc70 [ 1108.808712][T17815] check_panic_on_warn+0xab/0xb0 [ 1108.808750][T17815] end_report+0x107/0x170 [ 1108.808780][T17815] kasan_report+0xee/0x110 [ 1108.808811][T17815] ? fbcon_prepare_logo+0xa03/0xc70 [ 1108.808848][T17815] kasan_check_range+0xef/0x1a0 [ 1108.808883][T17815] __asan_memcpy+0x23/0x60 [ 1108.808907][T17815] fbcon_prepare_logo+0xa03/0xc70 [ 1108.808945][T17815] fbcon_init+0xd77/0x1900 [ 1108.808978][T17815] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1108.809010][T17815] visual_init+0x31d/0x620 [ 1108.809035][T17815] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1108.809070][T17815] store_bind+0x61d/0x760 [ 1108.809100][T17815] ? sysfs_file_kobj+0xe4/0x290 [ 1108.809136][T17815] ? __pfx_store_bind+0x10/0x10 [ 1108.809164][T17815] dev_attr_store+0x55/0x80 [ 1108.809198][T17815] ? __pfx_dev_attr_store+0x10/0x10 [ 1108.809232][T17815] sysfs_kf_write+0xef/0x150 [ 1108.809269][T17815] kernfs_fop_write_iter+0x351/0x510 [ 1108.809318][T17815] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1108.809356][T17815] vfs_write+0x5bd/0x1180 [ 1108.809381][T17815] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1108.809416][T17815] ? __pfx___mutex_lock+0x10/0x10 [ 1108.809454][T17815] ? __pfx_vfs_write+0x10/0x10 [ 1108.809488][T17815] ksys_write+0x12a/0x240 [ 1108.809512][T17815] ? __pfx_ksys_write+0x10/0x10 [ 1108.809535][T17815] ? rcu_is_watching+0x12/0xc0 [ 1108.809563][T17815] do_syscall_64+0xcd/0x230 [ 1108.809603][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.809628][T17815] RIP: 0033:0x7f1d2158e969 [ 1108.809646][T17815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.809671][T17815] RSP: 002b:00007f1d22383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1108.809694][T17815] RAX: ffffffffffffffda RBX: 00007f1d217b6080 RCX: 00007f1d2158e969 [ 1108.809712][T17815] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1108.809727][T17815] RBP: 00007f1d21610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1108.809743][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.809759][T17815] R13: 0000000000000000 R14: 00007f1d217b6080 R15: 00007fff12e2cad8 [ 1108.809783][T17815] [ 1108.809838][T17815] Kernel Offset: disabled