last executing test programs: 6m33.439015368s ago: executing program 1 (id=322): mmap$auto(0x0, 0x2020009, 0x4000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x106) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0xfffffffffffffffe, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffff7, 0x8000) (async) getsockopt$auto(0xffffffffffffffff, 0x24, 0xfffffffd, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) (async) semctl$auto_SEM_STAT_ANY(0xe, 0xfffffffb, 0x14, 0x7) (async) sendmsg$auto_OVS_VPORT_CMD_GET(r1, 0x0, 0x20000004) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) (async) getpgid(0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket(0x22, 0x3, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 6m33.216461067s ago: executing program 1 (id=324): open(&(0x7f00000000c0)='./file0\x00', 0x16d142, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2, "24229ba6405fe4fc8b79b54d7e17"}, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xe6e00, 0x131) r0 = socket(0x1e, 0x2, 0x0) r1 = socket(0x1a, 0x5, 0x800) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0x56) getsockopt$auto(r1, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c3) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyu4\x00', 0x484081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) open(0x0, 0x1e7402, 0x167) r2 = gettid() move_pages$auto(r2, 0xfffffffffffffff6, &(0x7f0000000300)=&(0x7f0000000140)="f493ddb821200b7aeac02f834ef0b7d942cccc235a87f4f853ea57a6bd72c68ea2600f7471570ccb375a94b9b5e3db1869854222d56d6c03e83a46e6dd8c76ee3d88c55f70e4b12dcf5a5eed8ef49cd661513519eb0799e06a250fa0db31b30be12df53b6ae2425d4da0f304fdfed6c54fbb70398ec01674b168d996a3abff9c544cac890189867b5e4c072ba18ddd8b712f91de5bd1488a2630e6", &(0x7f0000000200)=0xdce0, &(0x7f0000000340)=0x80000001, 0x2ecb) prctl$auto(0xb63, 0xd, r2, 0xff, 0x0) prctl$auto(0x43, 0x5ff, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) tkill$auto(r2, 0x7) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r3 = socket(0xa, 0x2, 0x73) getsockname$auto(r3, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) 6m32.062019358s ago: executing program 1 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x26048001}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010001f00400ffdbdf251d6f097c08000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 6m31.474395096s ago: executing program 1 (id=332): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x1, 0x100000000003, 0x139, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) r2 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) write$auto_trace_clock_fops_trace(r2, 0x0, 0x0) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x1, @rand_addr=0x64010101}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x2, 0x9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, 0x0, 0x0, 0x40) r3 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) fsconfig$auto(r3, 0x9, &(0x7f0000000140)='/dev/kvm\x00', &(0x7f0000000180)="482ea4769fa41a8298a6097ff0d4eb8fc7410ec125fb7c654e4f2eeb4c58712d7b3903ab8d1577a63b8bbd33647723b7b0ef9cc8b00adcddccb90d67d593bae79c2730f3fd177c95056089", 0x0) shmctl$auto_SHM_LOCK(0x7fffffff, 0xb, &(0x7f0000000300)={{0x5, 0xffffffffffffffff, 0xee01, 0x0, 0x1000, 0x7, 0x1}, 0x5, 0x5, 0xc, 0x27ef, @inferred=0xffffffffffffffff, @raw=0x4, 0x7, 0x0, &(0x7f0000000440)="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", &(0x7f0000000200)="04649c2c119399000831bcfa59c63b5b4a0d6d84840aea2aad940e94c7c3772af3506757d6b521375b12cc6caed7ef5c74f84a268fb01673dedcfd3c6c7418887caee59bd12c5ffcd816895a5015fe447d02"}) fchown$auto(r1, 0x0, r4) read$auto(0x3, 0x0, 0x9) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) utime$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m29.929136173s ago: executing program 1 (id=343): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0) r1 = socket(0x21, 0x5, 0x7f) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="10002ca4"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004814) utimes$auto(0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r1) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040025bd7000fbdbdf250600000014002000fe8000000000000000000000001e0800170000001f6c2cac694e15b6b8f21261b04668c5ea5fbae4f004abd9de682dbb485fd3af54f5c5f3eff5f87fa187ae52fc2356dea71ceff8963ba83ca6cd03c5ad0c8c4a2d9bb97878d9ee8f1499cf76a39c749341aac59fa6a59ab79061c001985c0e9b63ee78ec2a6c7dd988828ceddef695ad8a02dd4e92a521dff2fa2a1a45ea158ab69fa37ef1bdcb4b71d4335f9d95e24c8f0716ae6d2e65090001c35a62d6778fabbf05f5798fdc6ebd07a49cd1f9a653873f746c3499b8ccfabadf235d5ed81e92fc6c", @ANYRES32=r0, @ANYBLOB="a10711d0552e5405ed8207bc64a9b66fedab75234b81fbe0bd362da9b5e5d326f79ceefb05eb87f679c42c05095159c368e9fd91a59f2a97a484098896422805ae9d111c1a28af7db1325d8ca6cfd344d9d62a712dca9bf5d76bbc1293665d4d504fcda1d9b8cc2eaa"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4001) setsockopt$auto(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) gettid() select$auto(0x5, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x700, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) syz_clone(0x5128400, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm$auto(0x7fb, 0x1, 0x4000007) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0xffff}, 0x1) semctl$auto(0x7, 0x1cd2, 0x13, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) 6m28.410100192s ago: executing program 1 (id=341): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x4}, 0x2, 0x5) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'gre0\x00'}) (async) mmap$auto(0x1000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (rerun: 32) read$auto(r4, 0x0, 0x20) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async, rerun: 64) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x20c3b9b9}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) accept$auto(0x3, 0x0, 0x0) 6m13.062258096s ago: executing program 32 (id=341): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x4}, 0x2, 0x5) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'gre0\x00'}) (async) mmap$auto(0x1000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (rerun: 32) read$auto(r4, 0x0, 0x20) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async, rerun: 64) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x20c3b9b9}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) accept$auto(0x3, 0x0, 0x0) 4m21.40793892s ago: executing program 4 (id=646): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x10b201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4m20.800074507s ago: executing program 4 (id=647): unshare$auto(0x40000080) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) open(0x0, 0x2002, 0x1) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/pagetypeinfo\x00', 0x56000, 0x0) r2 = prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x3, 0x0) mmap$auto(0x0, 0x3, 0x7fffffff, 0xeb1, r1, 0x6) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/236, 0xec) unshare$auto(0x40000080) fcntl$auto(0x0, 0x407, 0x100000) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mlock$auto(0x4, 0x0) unshare$auto(0x40000080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000882f88d06d174268119eba7341e432e34aaea0ed78e06cba459deeb39d6c4a2aa174e6f222cd57858353bdf13a96aa13b9a985c28ea82f5490de23a2e1c4a9bbe356aa4d4af7cd5a4a6dcebcd35efa7548257009c66d2bf6fcbd0ca2c7e000040c83c7b2fd5217be6ae1c23d541aea363f5e0d5ee5e2f00"/131, @ANYRES8=r4, @ANYBLOB="0f0026bd7000", @ANYRESOCT=r3], 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2], 0x1ac}}, 0x48080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYBLOB='V'], 0x1ac}}, 0x40800) socket(0x10, 0x2, 0x0) 4m18.185126542s ago: executing program 4 (id=653): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @broadcast}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="70b28a70c5dc"}, @HSR_A_IF1_AGE={0x8, 0x3, 0x36}, @HSR_A_IF2_SEQ={0x6, 0x7, 0xff}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r3, 0x5453, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r2) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r4, @ANYBLOB="000229bd7000fcdbdf2512000000e3c74265fc46948319c3f37d6e8a9a79dc3557b111f98dad43bb7851e85c6edd25ff2e5e66857d087593b0acdb6771e1b6419c56ce9aca14a11bef724018b01cc14037b81433734f688b95c01584da9bbacee5f4bfc69ab1f048df81beb2ac5152a40000"], 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x83, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40046201, 0x38) ioctl$auto(0x3, 0x40046201, 0x38) 4m16.827452628s ago: executing program 4 (id=656): mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/tty34\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) lsm_set_self_attr$auto(0xf, &(0x7f0000000480)={0x6, 0x9b, 0x4, 0x71, "3bec44683a00546ba66a6e0d3a8e2f6a007201a9fa6276505c77dfd68983cc8a7080740885b87c6315302f68c64e962090fecbb8b4092683e39967b4aff3ba4f001a692787714c59090a9704b0665bdb0a0a81553e2a73d94b1466f0c4b68011168661985bb14d01ecce1d1b9df0ca2c6c"}, 0x4, 0x462e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x2000, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffc) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x0, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5a4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x4, 0x3, 0x59fc8000, 0x6, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/connector_id\x00', 0x80000, 0x0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) open(&(0x7f0000000000)='./file0\x00', 0x28400, 0x82) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) socket(0x10, 0x3, 0x0) 4m15.670651182s ago: executing program 4 (id=659): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) tkill$auto(0x1, 0x7) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xf0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xcf, 0x1a, "12c3da3bde91de2da007116363858725b7b51d1d0ea9b3442b504779e4f997a0269964cbd5fd97564222f2ebef1e025089c27b346d4f5d213394d459eb11d4c56902d1241692d115213c482f9b8ebd4af26b0972b415ce3426e4af23a44f8f7dd553eada910b06200985d644ca89366045209277b00cdc83c232927dc8487b7de64ddcc60cbb5947aa608b2e4cdae7610a55f279bc912dd9870e4d6eafe36075f078108b887352ba7d0f132caf53406295284d0fa4cb152c23da74389edee6ab979520141c427313a0c449"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pn533_usb/version\x00', 0x210000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/234, 0xea) bpf$auto(0x0, &(0x7f00000003c0)=@bpf_attr_3={0x101, 0x0, 0x0, 0x96d3, 0x9, 0xa0f, 0x3eec, 0x1, 0x9, "b8e32d5408612f8d6dee86c572b764ba", 0x0, 0x4, r0, 0x8, 0xfffffffffffffffc, 0xfffffffd, 0x0, 0x2, 0xf8e, 0x4, @attach_btf_obj_fd=r1, 0x0, 0xb, 0x6, 0x33, 0x5, r0, r1}, 0x6f8) read$auto(0x3, 0x0, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, 0x0, 0x401) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x83) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000004040)) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x100000000005, 0x783, 0x3, 0x8000000008011, r2, 0x40) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m14.337321042s ago: executing program 4 (id=665): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x4, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x10b201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4m13.97182915s ago: executing program 33 (id=665): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x4, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x10b201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.943369831s ago: executing program 0 (id=1503): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) connect$auto(0x3, 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) (async) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x46) read$auto(0x3, 0x0, 0xf34) (async) read$auto(0x3, 0x0, 0xf34) r0 = io_uring_setup$auto(0x6, 0x0) memfd_create$auto(&(0x7f0000001080)='+\x00', 0x2) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) write$auto(r0, 0x0, 0xf1) 4.939258641s ago: executing program 5 (id=1504): sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x1ac}}, 0x810) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0x800}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) 4.835790179s ago: executing program 3 (id=1506): unshare$auto(0x40000080) mmap$auto(0x40000000007, 0x2000c, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x11, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000140)='/H\xce\xd6xy\xc4\x98\n\x00\x00\x00\x00\x00\x00\x00', 0x5, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) socket(0x18, 0x80003, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x6, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) socket(0x1e, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf25060000000b090000002d2d24252125000e0014002f4800"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) 4.05798161s ago: executing program 2 (id=1507): r0 = socket(0xa, 0x2, 0x88) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={0x0, 0x0, 0xfff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmat$auto(0x1, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x100000004, 0x100000002, 0x0, 0x6, 0x6) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x15, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) setsockopt$auto_SO_MARK(r0, 0x0, 0x24, &(0x7f0000000040)='/dev/ram9\x00', 0x1f) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5e", 0x5f) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"905bea93f6bc9263cd80b31389a1391d09ecab3a57ee09df7dd845f2660828f4", 0x2, 0x4, 0xaa, 0x9, 0x1ff, 0x0}) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 3.936441823s ago: executing program 0 (id=1508): r0 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, r0, 0x28000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x3, 0x0) getsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xfffffffe, 0x1d, 0x0, &(0x7f0000000080)=0x6) bind$auto(0x3, &(0x7f0000000300)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.898978202s ago: executing program 5 (id=1509): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x90004, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) ioctl$auto_FS_IOC_FIEMAP(r1, 0xc020660b, 0x1c) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="17") (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x6, 0x0, &(0x7f0000000040)='\x852tp\x04', 0x7) (async) bind$auto(0x3, &(0x7f0000000080), 0x6d) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r4, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) (async) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000240)=""/91, 0x5b) socket(0x2, 0x5, 0x0) (async) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) (async) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80000, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) writev$auto(r6, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 3.824234737s ago: executing program 3 (id=1510): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd5/requeue_list\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0xfdef) flock$auto(0xffffffffffffffff, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/244, 0xf4) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) 3.749980107s ago: executing program 0 (id=1511): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0xc0a00, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x20040000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) socket(0x2, 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "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"}) 3.532463455s ago: executing program 5 (id=1512): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0xffffffffffffffff, 0xe008ae67, r1) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nullb0/queue/physical_block_size\x00', 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/usb4-port1/quirks\x00', 0xa081, 0x0) (async) io_uring_setup$auto(0xfffffffe, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x2, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/buffer_percent\x00', 0x7c38c0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/irq_exits\x00', 0x22002, 0x0) (async) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0xd67f, 0x2, 0x7f) fcntl$auto(0x8000000000000001, 0x5, 0x8) (async) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) (async) readv$auto(r2, &(0x7f0000000040)={0x0, 0x2}, 0x5) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2a, 0x2, 0x1) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x6, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x1) sendmmsg$auto(r4, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) 3.345633806s ago: executing program 0 (id=1513): syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x6}]}, 0x1c}}, 0x8800) (async) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x6}]}, 0x1c}}, 0x8800) ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff) mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x89a0, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) (async) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r2, &(0x7f0000000140)=')-+\xa2\x00', 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r2, 0x7) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xe) (async) write$auto(r4, 0x0, 0xe) 3.206886532s ago: executing program 5 (id=1514): mmap$auto(0x0, 0x9, 0xdb, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) 3.026918253s ago: executing program 5 (id=1515): mmap$auto(0x8000002, 0x20009, 0x8000000400000003, 0xeb1, 0x401, 0x8001) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = epoll_create$auto(0x7) socketpair$auto(0x2001e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) r4 = socket(0x18, 0x2, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) pwrite64$auto(r5, 0x0, 0x3747, 0x100) r6 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r4, @ANYRES64=0x0], 0x28}}, 0x48010) fstat$auto(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0xc, 0x200, 0x3, 0xee01, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffff8, 0x5, 0xb, 0xfffffffffffffffc, 0x80000001, 0x9, 0x8, 0x2}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, r6, r7, 0x42) msgctl$auto_IPC_RMID(0xffffff4b, 0x0, &(0x7f00000001c0)={{0x7f28, 0xee01, 0x0, 0xb024, 0x9, 0x6, 0x2}, &(0x7f0000000140)=0x5f, &(0x7f0000000180)=0x80, 0xffffffffffffffff, 0x30ba, 0x2, 0x4, 0x4, 0xc, 0x2, 0x6, @raw=0x4, @inferred=0xffffffffffffffff}) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4a4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1fc, 0x1, 0x0, 0x1, [@nested={0x113, 0xc0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x7ff}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x3}]}, @typed={0x4, 0x99}, @nested={0xde, 0x11a, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="3d567f3ad5ff2298eb78b1a91ae146f9f775e981a756884c259a5923b56a8e3764545974985accc34b3f307d0384de5d23512080d2298a10b96373d130cdbb035ef18e9d2eb812e7151a629dfd35205cabcc966ac7f12a004ea5b711f7c4e0b4d72f934600f8a67d5130f6464c714fb5db05a2dc5f1225b137880c8670b4c0e4f966b1f909095e8c6a94b33074bd4f67ddac8115036dc584db9f01fe7b23b28913f0eb3901ed5daf967941fdad259dd4766da0c6613a6b913f852da0c7772ed2ee78dcd29dee", @typed={0x8, 0x70, 0x0, 0x0, @fd=r3}, @typed={0x6, 0xc1, 0x0, 0x0, @str='-\x00'}]}]}, @IPVS_CMD_ATTR_DEST={0x10d, 0x2, 0x0, 0x1, [@typed={0x5, 0xfe, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private2}, @generic="20b57827bf307625008836ebb3ac0dab97fa02a4aa99d9fbe9bbf807d278f067c7e8bb26412ad8df64245fba536339333773219403f4f503252d67b4befa162b5eedd0f2f156b323f4c9269ba69431364921d29bcaaadf9bc9b2cecabfdebefb38bbf09c0a0d7b2701a00d08284eb3b325f94346964c29d6421221f890cf4bd745ee04bab633adb0b55886575f5adcf1aec7ff5494edf248a3c9229540529c00a475ad18de8cf4b79be73a3a4903205eecdeb912743b8e6a0fa471a19fa5268887cfc370504879b0919472551c5df6f5f18e0fa34e12e838a022c602229bfe3c2cc4f2ea89", @typed={0x8, 0xf6, 0x0, 0x0, @uid=r6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r8}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@remote}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0x56}]}]}, @IPVS_CMD_ATTR_DAEMON={0x126, 0x3, 0x0, 0x1, [@generic="24be29d07957fcdf38104c0a91acce88886a9ca818e2964ebdfc661bb63cde28993c528b935e0d29b735cf4259f75a63dbca5b0e48916d4a6174e34150032d6dbb49c817180ce75251d3e12296d5985b01ecaeb314a51cb00a709b51136da6f111e1e94b5e6ea107", @typed={0xc, 0xd0, 0x0, 0x0, @str='&%#:*-:\x00'}, @generic="3824c40b070644eb1af810f7c0d3d60599866bd09c15e2395719c622762443541d618a3ba012fffa3a818996a92d96a06b5769c53df408abfd364e11fe1c003c985a6556d5c195d7a62236fc464a8ac3786115b0e8777ab469aad0f248f937c53ab89e20f73b81c5064185a72873a37f932c0d9f149ee58b0e78be0f8e212888f168b68638145c4d99f2a86e31f9e55a1118340371c7753fddeea1b558c6872e7355c6d500829418982fe3a3f878"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86de}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.804318091s ago: executing program 0 (id=1516): mmap$auto(0x8000002, 0x20009, 0x8000000400000003, 0xeb1, 0x401, 0x8001) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = epoll_create$auto(0x7) socketpair$auto(0x2001e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, 0x0, 0x81) write$auto(r3, 0x0, 0x98c7) r4 = socket(0x18, 0x2, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) pwrite64$auto(r5, 0x0, 0x3747, 0x100) r6 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000006e29dde9d4133de4a65c9f4128d007b253e8f3dde28a7bdd6b1adf98abcdf17e6f2058bf8032423413114043a48cdb04fb147abb3c0ffdc5b4647c5e87bdfceb1222cec5cfc2055243cee3b9dba3c0ad8ead2131e47a1230bb16239b652aa05be510f1c1dfb18397d17f10c8541ffd8eb28453140ea76043829487bf52a27b83ef33f4dc1c973388a596b6f649f3e7f13132c05d538b0bd61401d25de836e8944d877956318ac1bc72a5c98f11457d143babdbf5b79088496cc9b43a6449fae0a33d0b39b40199be03daa02df0ba78c0fe2a66f5e25ab00ace6c00309762dd5c50c5f876eb6608d6bdb7e26a8bcd39b0fe5c33aff20fb521063b88cfbe35744769fd065a841a8729f2e684cb8938e70446ed8acd0ca6fab7888aae4cd1511efb65541a4ea87166913cb0c1db04702f12229757eaa2df63b2cdc651e0a449daa7cc0f9c090a7a5f9f56036df40309c5a0e2f79c33178275e856ba7ab91271347c50550135b02675870adabddd7aa997518d66d6dfe479ddf937a6e066543943c7305b2be85880f9b1cfcfab7fbefad4451a58ab45d14a84cf8eed5cd96be168c1909ad84320e65e6de246d2ccb419cf33e5bbff4fd6646676986d7c9ff31f7e23640f74fc80f8fb80bd50b26dbe77cf9913285c67e47b8ec302f740b65091aa568da4dbd71ae31a37d3f5940a8a37cceba27c23882afa5a4d5043ae5cfadd7acadb5cbcfd50aa3f9bcb875d6bd105ed158ecd2f5905076428bb69e6834bcf3a0dbca9e688cdb060fc5d3772409a0b8127aa11cf7220b80bdf8d7d41aacdef33", @ANYRESOCT=r6, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r4, @ANYRES64=0x0], 0x28}}, 0x48010) fstat$auto(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0xc, 0x200, 0x3, 0xee01, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffff8, 0x5, 0xb, 0xfffffffffffffffc, 0x80000001, 0x9, 0x8, 0x2}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, r6, r7, 0x42) msgctl$auto_IPC_RMID(0xffffff4b, 0x0, &(0x7f00000001c0)={{0x7f28, 0xee01, 0x0, 0xb024, 0x9, 0x6, 0x2}, &(0x7f0000000140)=0x5f, &(0x7f0000000180)=0x80, 0xffffffffffffffff, 0x30ba, 0x2, 0x4, 0x4, 0xc, 0x2, 0x6, @raw=0x4, @inferred=0xffffffffffffffff}) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4a4, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1fc, 0x1, 0x0, 0x1, [@nested={0x113, 0xc0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x7ff}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x3}]}, @typed={0x4, 0x99}, @nested={0xde, 0x11a, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="3d567f3ad5ff2298eb78b1a91ae146f9f775e981a756884c259a5923b56a8e3764545974985accc34b3f307d0384de5d23512080d2298a10b96373d130cdbb035ef18e9d2eb812e7151a629dfd35205cabcc966ac7f12a004ea5b711f7c4e0b4d72f934600f8a67d5130f6464c714fb5db05a2dc5f1225b137880c8670b4c0e4f966b1f909095e8c6a94b33074bd4f67ddac8115036dc584db9f01fe7b23b28913f0eb3901ed5daf967941fdad259dd4766da0c6613a6b913f852da0c7772ed2ee78dcd29dee", @typed={0x8, 0x70, 0x0, 0x0, @fd=r3}, @typed={0x6, 0xc1, 0x0, 0x0, @str='-\x00'}]}]}, @IPVS_CMD_ATTR_DEST={0x10d, 0x2, 0x0, 0x1, [@typed={0x5, 0xfe, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private2}, @generic="20b57827bf307625008836ebb3ac0dab97fa02a4aa99d9fbe9bbf807d278f067c7e8bb26412ad8df64245fba536339333773219403f4f503252d67b4befa162b5eedd0f2f156b323f4c9269ba69431364921d29bcaaadf9bc9b2cecabfdebefb38bbf09c0a0d7b2701a00d08284eb3b325f94346964c29d6421221f890cf4bd745ee04bab633adb0b55886575f5adcf1aec7ff5494edf248a3c9229540529c00a475ad18de8cf4b79be73a3a4903205eecdeb912743b8e6a0fa471a19fa5268887cfc370504879b0919472551c5df6f5f18e0fa34e12e838a022c602229bfe3c2cc4f2ea89", @typed={0x8, 0xf6, 0x0, 0x0, @uid=r6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r8}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@remote}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0x56}]}]}, @IPVS_CMD_ATTR_DAEMON={0x126, 0x3, 0x0, 0x1, [@generic="24be29d07957fcdf38104c0a91acce88886a9ca818e2964ebdfc661bb63cde28993c528b935e0d29b735cf4259f75a63dbca5b0e48916d4a6174e34150032d6dbb49c817180ce75251d3e12296d5985b01ecaeb314a51cb00a709b51136da6f111e1e94b5e6ea107", @typed={0xc, 0xd0, 0x0, 0x0, @str='&%#:*-:\x00'}, @generic="3824c40b070644eb1af810f7c0d3d60599866bd09c15e2395719c622762443541d618a3ba012fffa3a818996a92d96a06b5769c53df408abfd364e11fe1c003c985a6556d5c195d7a62236fc464a8ac3786115b0e8777ab469aad0f248f937c53ab89e20f73b81c5064185a72873a37f932c0d9f149ee58b0e78be0f8e212888f168b68638145c4d99f2a86e31f9e55a1118340371c7753fddeea1b558c6872e7355c6d500829418982fe3a3f878"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86de}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) write$auto(0x3, 0x0, 0x7fffffff) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.739675339s ago: executing program 3 (id=1517): sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x1ac}}, 0x810) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0x800}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) 2.565362533s ago: executing program 2 (id=1518): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/psaux\x00', 0x341a40, 0x0) ioctl$auto_SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000040)="c6de08c4953aad4b4ec06ae2fc4d8122fb2d622f657a5328d7a6f0eaf28d3e337b51e29963fecd2151f1fd6a5477d5ba619fc0c49b6f52d28d33f5d2b16f47923fff05acf67f3e5471d8526a5090da1e21ee75ed7dca7e6801ff474be00ddb7bd5b62fbfb09f13c03845fadf6c525b2ffbee622449c664739721af0b8c905933eff6a4e0c9f32d2dccf48dd059273ff539ee21e23b9175cdceeb86ab34e7e7e233ac14d584e2bcae0778093627459c838d5f03063e9812887fea9c8e6e138029163e0fb0ec1407847a5af80ab5f9933d5b405a4f7f208c632570688c8c25357801b0bce6ef81b8") close_range$auto(0x2, 0xa, 0x0) 2.409519873s ago: executing program 2 (id=1519): write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x357000, 0x0) ioctl$auto_UI_SET_LEDBIT(r0, 0x40045569, &(0x7f0000000080)=0x5018) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8022, 0x0) r2 = ioctl$auto_TUNGETIFF2(r1, 0x800454d2, &(0x7f0000000100)=0x63) ioctl$auto(r0, 0x8, r0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r2) setns(r2, 0x4c000000) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x1, &(0x7f0000000180)="c09976fbda8af6a4b131b91d3d89cd72ab55b18655f305166664241c5699316cc48c36572d82567b") mq_getsetattr$auto(r1, &(0x7f00000001c0)={0x8000000000000000, 0x1, 0x3, 0x4}, &(0x7f0000000200)={0x9, 0xffc00000000, 0x4, 0x8}) writev$auto(r0, &(0x7f0000001240)={&(0x7f0000000240)="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", 0x8}, 0x93ea) inotify_rm_watch$auto(r1, 0x9f6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000012c0), r2) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x80, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x6a, 0xac, "7f75a8f85b5e719c2de2a6530cca979c8b86e18f50261acd7bad5ebdeef1e2d9c01ac6e9eae0ae085472c540bcc402e931237a3289033c45be2881a27fa005a1b339be27b7a70d8608498b820dfb0f5b8bef289aaaa319f4abe3461101b001f65ed0f23c0229"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000810) r4 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/debug/tracing/options/sym-addr\x00', 0x408000, 0x0) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001440)='/proc/thread-self/uid_map\x00', 0xc00, 0x0) epoll_ctl$auto(r4, 0xd, r5, &(0x7f0000001480)={0x1ff, 0x6}) r6 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x640340, 0x0) read$auto_event_inject_fops_trace(r6, &(0x7f0000001540)=""/186, 0xba) r7 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/loginuid\x00', 0xc4, 0x0) r8 = fcntl$auto_F_GETOWN(r2, 0x9, 0x6) ptrace$auto(0x8, r8, 0x0, 0x88d) getsockopt$auto_SO_PEERGROUPS(r7, 0xff, 0x3b, &(0x7f0000001640)='TIPCv2\x00', &(0x7f0000001680)=0xffff0001) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x218441, 0x0) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001740), r2) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f0000001800)={&(0x7f0000001700), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) bind$auto(r5, &(0x7f0000001840)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x1) close_range$auto(r7, r4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001880)='/sys/devices/virtual/net/ip6tnl0/carrier_up_count\x00', 0x440000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x62701, 0x0) 2.018453387s ago: executing program 2 (id=1520): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram9/queue/write_zeroes_max_bytes\x00', 0x20400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/255, 0xff) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) 1.712815935s ago: executing program 2 (id=1521): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x25, 0x1, 0x0) connect$auto(r0, &(0x7f0000000180), 0x4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x830) write$auto(r2, 0x0, 0x100) read$auto(0x3, 0x0, 0x80) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) 1.711198709s ago: executing program 3 (id=1522): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200041, 0x0) (async) r1 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x18000, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, r1, &(0x7f00000003c0)={0x8}) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) pkey_free$auto(0xfffffffd) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) (async) r2 = geteuid() setreuid$auto(r2, 0x0) (async) lstat$auto(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100)={0x5, 0x9, 0x1, 0x9, r2, 0xee00, 0x0, 0x203, 0x7a6, 0x7, 0xfffffffffffffff9, 0x8000000000000000, 0x5, 0x8000, 0x1, 0xe9c6, 0x6}) r4 = epoll_create$auto(0x3e) mount$auto(&(0x7f0000000400)='hsr0\x00', &(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000480)='\x00', 0x100000000, &(0x7f00000004c0)="e6") (async) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.io_serviced\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/64, 0x40) (async) statx$auto(r4, 0x0, 0x2002, 0x4, &(0x7f0000000280)={0x7, 0x201, 0x2, 0x7, r3, 0xffffffffffffffff, 0x803, 0x0, 0x401, 0x1, 0x5, 0x200, {0xfff, 0x1000008}, {0x5, 0x8}, {0x81, 0x1ff}, {0xffffffffffffff60, 0x5}, 0x4, 0x6, 0x7ffffffc, 0x17e9, 0x2, 0xff, 0x7fff, 0x938, 0x8, 0x5, 0xb6a, 0xdf9, [0x6, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffff8, 0xe]}) (async) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r7 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r7, 0x0, 0x3, 0x9, 0x8000000000000000) (async) r8 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bind$auto(r8, &(0x7f0000000080)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x7f) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r6) 1.488367532s ago: executing program 3 (id=1523): open(&(0x7f00000000c0)='./cgroup\x00', 0x678001, 0x183) (async) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x678001, 0x183) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) shmctl$auto(0x6, 0x3, 0x0) mmap$auto(0x0, 0x20007, 0xe6, 0xeb1, 0xffffffffffffffff, 0x0) close_range$auto(r0, r0, 0x0) socket(0xa, 0x801, 0x84) (async) r1 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) (async) r2 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) (async) r3 = getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x200000000000001, 0xc, 0x0, 0xebf, r3, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffff9c, 0x0, 0x801002, 0x827, 0x0) (async) statx$auto(0xffffff9c, 0x0, 0x801002, 0x827, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) 895.166273ms ago: executing program 3 (id=1524): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r1, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x1, 0xd796, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x4000, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x10000, 0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) fcntl$auto(r1, 0x8, 0x100000) madvise$auto(0x4, 0xffffffffffff0005, 0x19) mbind$auto(0x7f, 0x100000004, 0x1000000100000000, 0x0, 0x70000, 0x2) mbind$auto(0x9, 0x3ff, 0x6, 0x0, 0xd, 0x3) 481.726044ms ago: executing program 2 (id=1525): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x200000000006, 0x40eb1, 0x602, 0x300000000000) socket(0x3, 0xa, 0x3) ioctl$auto(0x3, 0x8914, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(0x68a3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20040894) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open(0x0, 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) write$auto(0x3, 0x0, 0x100082) madvise$auto(0xb1, 0x0, 0x80005) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r2, 0x90009427, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x400c014}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000091}, 0x40000) r4 = socket(0x10, 0x2, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x10000, &(0x7f0000000340)={{0x8000, 0x1a}, {0x81, 0x1}, 0xf4d, 0x2, 0x9e, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8000000000000001, 0x100000004, 0x8, 0x81, 0x7, 0xc, 0x1, 0x0, 0x7}) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r4, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x2004c0c4) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy16/hwflags\x00', 0x510400, 0x0) 170.55367ms ago: executing program 5 (id=1526): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/tty53/power/runtime_active_time\x00', 0x103042, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) pipe$auto(&(0x7f00000000c0)=0xffffffffffffffff) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x40000, 0x0, 0x3}, 0x1ff, 0x7d) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xc93, &(0x7f00000004c0)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xc2}, 0x4}, 0x807, 0x4008) (async) close_range$auto(0x2, 0xa, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="17a0cd0ae37ed9c4ecea006d476e0faf704fd350e527e5e49445bda87653bc1c1bba65054ab0a356e5f296836ad1739f267c43b1f6e1c819db59dfcf50faf590ad9bd5f72b006b107c0f0c", @ANYRES64=r0, @ANYBLOB="050725cf7000fbdbfc251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) (async) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000380)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0xd5, 0x8, 0x4) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) socket(0x2, 0x1, 0x100) (async) socket(0x2, 0x1, 0x0) 0s ago: executing program 0 (id=1527): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mknod$auto(&(0x7f00000001c0)='./file0\x00', 0x4, 0xfffffff9) keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f) mmap$auto(0x3, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0) r0 = epoll_create$auto(0x3a) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x8, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x4, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@generic={0x10, "49d8c9bd571e15614d825d3db260"}, 0x2006a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000080)={0x3, 0x26, 0x1c2, @inferred, 0x0, "9d4f8e1d3633c2e5a5ff69c61ed5c9546c1eadce39439cb9f7fe26fe87659c9dd52e80eb5a7b5bdce630726f940b393b8d24"}) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) r2 = socket(0x8, 0x2, 0x101) getsockopt$auto(r2, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) kernel console output (not intermixed with test programs): eth0 [ 356.239923][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 356.338386][ T9499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.450594][ T9499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.486448][ T9499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.795837][ T5139] Bluetooth: hci3: command tx timeout [ 356.911032][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.981403][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.024414][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.031700][ T9100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.152398][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.159687][ T7828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.633753][ T9640] ovs_: entered promiscuous mode [ 357.853240][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.773131][ T9668] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 358.799270][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.807382][ T9668] CIFS mount error: No usable UNC path provided in device string! [ 358.807382][ T9668] [ 358.817955][ T9668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.124690][ T9499] veth0_vlan: entered promiscuous mode [ 359.186553][ T9499] veth1_vlan: entered promiscuous mode [ 359.398190][ T9499] veth0_macvtap: entered promiscuous mode [ 359.493456][ T9499] veth1_macvtap: entered promiscuous mode [ 359.528025][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.539551][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.553263][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.574894][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.602562][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.849326][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 359.881239][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.917880][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.930053][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.941555][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.972042][ T9499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.993342][ T9499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.024337][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.064165][ T9499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.090769][ T9499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.104435][ T9499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.124206][ T9499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.579745][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 360.832664][ T7825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.883766][ T7825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.099811][ T7826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.137165][ T7826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.207086][ T9703] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 364.036415][ T9764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.053264][ T9764] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.065517][ T9764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.075652][ T9764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.091997][ T9764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 364.147101][ T9764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 364.489536][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 366.068178][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.068191][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.146036][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.146130][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.396468][ T9804] nbd: must specify a device to reconfigure [ 366.430326][ T9804] nbd: must specify a device to reconfigure [ 366.506788][ T9804] nbd: must specify a device to reconfigure [ 366.541238][ T9804] nbd: must specify a device to reconfigure [ 366.579586][ T9804] nbd: must specify a device to reconfigure [ 366.592140][ T9804] nbd: must specify a device to reconfigure [ 366.598929][ T9804] nbd: must specify a device to reconfigure [ 366.605865][ T9804] nbd: must specify a device to reconfigure [ 366.612139][ T9804] nbd: must specify a device to reconfigure [ 366.641554][ T9804] nbd: must specify a device to reconfigure [ 366.659000][ T9804] nbd: must specify a device to reconfigure [ 366.677938][ T9804] nbd: must specify a device to reconfigure [ 366.700498][ T9804] nbd: must specify a device to reconfigure [ 366.782568][ T9804] nbd: must specify a device to reconfigure [ 367.374306][ T9816] sd 0:0:1:0: PR command failed: 1026 [ 367.380064][ T9816] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 367.387096][ T9816] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 367.791956][ T9821] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 368.227637][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.306449][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.380623][ T9864] FAULT_INJECTION: forcing a failure. [ 370.380623][ T9864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.396376][ T9864] CPU: 0 UID: 0 PID: 9864 Comm: syz.0.717 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 370.396419][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 370.396439][ T9864] Call Trace: [ 370.396449][ T9864] [ 370.396460][ T9864] dump_stack_lvl+0x16c/0x1f0 [ 370.396508][ T9864] should_fail_ex+0x512/0x640 [ 370.396557][ T9864] should_fail_alloc_page+0xe7/0x130 [ 370.396598][ T9864] prepare_alloc_pages+0x3c2/0x610 [ 370.396652][ T9864] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 370.396689][ T9864] ? copy_splice_read+0x1a8/0xba0 [ 370.396734][ T9864] ? stack_trace_save+0x8e/0xc0 [ 370.396766][ T9864] ? __pfx_stack_trace_save+0x10/0x10 [ 370.396807][ T9864] ? stack_depot_save_flags+0x28/0xa50 [ 370.396853][ T9864] ? bpf_ksym_find+0x124/0x1c0 [ 370.396904][ T9864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.396938][ T9864] ? kasan_save_stack+0x33/0x60 [ 370.396970][ T9864] ? __kasan_kmalloc+0xaa/0xb0 [ 370.397000][ T9864] ? copy_splice_read+0x1a8/0xba0 [ 370.397040][ T9864] ? do_splice_read+0x282/0x370 [ 370.397088][ T9864] ? splice_direct_to_actor+0x2a1/0xa30 [ 370.397133][ T9864] ? do_splice_direct+0x174/0x240 [ 370.397176][ T9864] ? do_sendfile+0xafd/0xe50 [ 370.397222][ T9864] ? __x64_sys_sendfile64+0x1d8/0x220 [ 370.397257][ T9864] ? do_syscall_64+0xcd/0x230 [ 370.397328][ T9864] alloc_pages_bulk_noprof+0x703/0x13b0 [ 370.397378][ T9864] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 370.397423][ T9864] ? trace_kmalloc+0x2b/0xd0 [ 370.397460][ T9864] ? __kmalloc_noprof+0x242/0x510 [ 370.397504][ T9864] copy_splice_read+0x1e1/0xba0 [ 370.397560][ T9864] ? __pfx_copy_splice_read+0x10/0x10 [ 370.397609][ T9864] ? look_up_lock_class+0x59/0x150 [ 370.397656][ T9864] ? lockdep_init_map_type+0x5c/0x280 [ 370.397700][ T9864] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 370.397754][ T9864] ? __pfx_copy_splice_read+0x10/0x10 [ 370.397805][ T9864] do_splice_read+0x282/0x370 [ 370.397854][ T9864] splice_direct_to_actor+0x2a1/0xa30 [ 370.397903][ T9864] ? __pfx_direct_splice_actor+0x10/0x10 [ 370.397958][ T9864] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 370.398003][ T9864] ? get_pid_task+0xfc/0x250 [ 370.398057][ T9864] do_splice_direct+0x174/0x240 [ 370.398105][ T9864] ? __pfx_do_splice_direct+0x10/0x10 [ 370.398153][ T9864] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 370.398206][ T9864] ? rw_verify_area+0xcf/0x680 [ 370.398257][ T9864] do_sendfile+0xafd/0xe50 [ 370.398313][ T9864] ? __pfx_do_sendfile+0x10/0x10 [ 370.398365][ T9864] ? __fget_files+0x20e/0x3c0 [ 370.398425][ T9864] __x64_sys_sendfile64+0x1d8/0x220 [ 370.398460][ T9864] ? ksys_write+0x1b9/0x240 [ 370.398489][ T9864] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 370.398525][ T9864] ? rcu_is_watching+0x12/0xc0 [ 370.398574][ T9864] do_syscall_64+0xcd/0x230 [ 370.398620][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.398652][ T9864] RIP: 0033:0x7fb41878e969 [ 370.398677][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.398707][ T9864] RSP: 002b:00007fb41965a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 370.398735][ T9864] RAX: ffffffffffffffda RBX: 00007fb4189b5fa0 RCX: 00007fb41878e969 [ 370.398756][ T9864] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 370.398780][ T9864] RBP: 00007fb41965a090 R08: 0000000000000000 R09: 0000000000000000 [ 370.398799][ T9864] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 370.398818][ T9864] R13: 0000000000000000 R14: 00007fb4189b5fa0 R15: 00007ffc8a20f348 [ 370.398858][ T9864] [ 370.989318][ T9861] netlink: zone id is out of range [ 370.999271][ T9861] netlink: zone id is out of range [ 371.006278][ T9861] netlink: zone id is out of range [ 371.012055][ T9861] netlink: zone id is out of range [ 371.017551][ T9861] netlink: zone id is out of range [ 371.022720][ T9861] netlink: zone id is out of range [ 371.028127][ T9861] netlink: zone id is out of range [ 371.033474][ T9861] netlink: zone id is out of range [ 371.038790][ T9861] netlink: zone id is out of range [ 371.044738][ T9861] netlink: zone id is out of range [ 371.106066][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 373.554514][ T9922] FAULT_INJECTION: forcing a failure. [ 373.554514][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 373.582253][ T9922] CPU: 0 UID: 0 PID: 9922 Comm: syz.5.726 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 373.582300][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 373.582320][ T9922] Call Trace: [ 373.582331][ T9922] [ 373.582344][ T9922] dump_stack_lvl+0x16c/0x1f0 [ 373.582394][ T9922] should_fail_ex+0x512/0x640 [ 373.582439][ T9922] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 373.582497][ T9922] should_failslab+0xc2/0x120 [ 373.582537][ T9922] __kmalloc_cache_noprof+0x6a/0x3e0 [ 373.582593][ T9922] ? fuse_dev_alloc+0x8e/0x280 [ 373.582632][ T9922] ? kasan_save_track+0x14/0x30 [ 373.582670][ T9922] fuse_dev_alloc+0x8e/0x280 [ 373.582713][ T9922] fuse_dev_alloc_install+0x13/0x40 [ 373.582755][ T9922] cuse_channel_open+0x100/0x7f0 [ 373.582792][ T9922] ? __pfx_cuse_channel_open+0x10/0x10 [ 373.582841][ T9922] misc_open+0x35a/0x420 [ 373.582895][ T9922] ? __pfx_misc_open+0x10/0x10 [ 373.582943][ T9922] chrdev_open+0x231/0x6a0 [ 373.582975][ T9922] ? __pfx_apparmor_file_open+0x10/0x10 [ 373.583016][ T9922] ? __pfx_chrdev_open+0x10/0x10 [ 373.583055][ T9922] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 373.583112][ T9922] do_dentry_open+0x741/0x1c10 [ 373.583146][ T9922] ? __pfx_chrdev_open+0x10/0x10 [ 373.583189][ T9922] vfs_open+0x82/0x3f0 [ 373.583237][ T9922] path_openat+0x1e5e/0x2d40 [ 373.583285][ T9922] ? __pfx_path_openat+0x10/0x10 [ 373.583328][ T9922] do_filp_open+0x20b/0x470 [ 373.583360][ T9922] ? __pfx_do_filp_open+0x10/0x10 [ 373.583422][ T9922] ? alloc_fd+0x471/0x7d0 [ 373.583481][ T9922] do_sys_openat2+0x11b/0x1d0 [ 373.583522][ T9922] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.583578][ T9922] __x64_sys_openat+0x174/0x210 [ 373.583620][ T9922] ? __pfx___x64_sys_openat+0x10/0x10 [ 373.583664][ T9922] ? rcu_is_watching+0x12/0xc0 [ 373.583706][ T9922] do_syscall_64+0xcd/0x230 [ 373.583753][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.583786][ T9922] RIP: 0033:0x7f651158e969 [ 373.583812][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.583854][ T9922] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 373.583884][ T9922] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 373.583905][ T9922] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 373.583926][ T9922] RBP: 00007f6511610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 373.583947][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.583966][ T9922] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 373.584008][ T9922] [ 373.847877][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.943828][ T9929] FAULT_INJECTION: forcing a failure. [ 373.943828][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 373.964659][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.3.727 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 373.964703][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 373.964721][ T9929] Call Trace: [ 373.964732][ T9929] [ 373.964744][ T9929] dump_stack_lvl+0x16c/0x1f0 [ 373.964791][ T9929] should_fail_ex+0x512/0x640 [ 373.964835][ T9929] ? __kvmalloc_node_noprof+0x122/0x600 [ 373.964873][ T9929] should_failslab+0xc2/0x120 [ 373.964911][ T9929] __kvmalloc_node_noprof+0x135/0x600 [ 373.964945][ T9929] ? seq_read_iter+0x826/0x12c0 [ 373.964998][ T9929] ? seq_read_iter+0x826/0x12c0 [ 373.965039][ T9929] seq_read_iter+0x826/0x12c0 [ 373.965084][ T9929] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 373.965136][ T9929] kernfs_fop_read_iter+0x40f/0x5a0 [ 373.965187][ T9929] copy_splice_read+0x615/0xba0 [ 373.965239][ T9929] ? __pfx_copy_splice_read+0x10/0x10 [ 373.965288][ T9929] ? look_up_lock_class+0x59/0x150 [ 373.965334][ T9929] ? lockdep_init_map_type+0x5c/0x280 [ 373.965378][ T9929] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 373.965432][ T9929] ? __pfx_copy_splice_read+0x10/0x10 [ 373.965478][ T9929] do_splice_read+0x282/0x370 [ 373.965536][ T9929] splice_direct_to_actor+0x2a1/0xa30 [ 373.965586][ T9929] ? __pfx_direct_splice_actor+0x10/0x10 [ 373.965641][ T9929] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 373.965686][ T9929] ? get_pid_task+0xfc/0x250 [ 373.965739][ T9929] do_splice_direct+0x174/0x240 [ 373.965787][ T9929] ? __pfx_do_splice_direct+0x10/0x10 [ 373.965835][ T9929] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 373.965888][ T9929] ? rw_verify_area+0xcf/0x680 [ 373.965938][ T9929] do_sendfile+0xafd/0xe50 [ 373.965996][ T9929] ? __pfx_do_sendfile+0x10/0x10 [ 373.966046][ T9929] ? __fget_files+0x20e/0x3c0 [ 373.966106][ T9929] __x64_sys_sendfile64+0x1d8/0x220 [ 373.966142][ T9929] ? ksys_write+0x1b9/0x240 [ 373.966170][ T9929] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 373.966203][ T9929] ? rcu_is_watching+0x12/0xc0 [ 373.966243][ T9929] do_syscall_64+0xcd/0x230 [ 373.966289][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.966321][ T9929] RIP: 0033:0x7fead678e969 [ 373.966346][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.966377][ T9929] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 373.966406][ T9929] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 373.966427][ T9929] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 373.966446][ T9929] RBP: 00007fead75a3090 R08: 0000000000000000 R09: 0000000000000000 [ 373.966465][ T9929] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 373.966484][ T9929] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 373.966551][ T9929] [ 374.252811][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.234580][ T9964] FAULT_INJECTION: forcing a failure. [ 375.234580][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 375.277203][ T9964] CPU: 0 UID: 0 PID: 9964 Comm: syz.5.732 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 375.277241][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 375.277255][ T9964] Call Trace: [ 375.277263][ T9964] [ 375.277271][ T9964] dump_stack_lvl+0x16c/0x1f0 [ 375.277306][ T9964] should_fail_ex+0x512/0x640 [ 375.277338][ T9964] ? __kvmalloc_node_noprof+0x122/0x600 [ 375.277366][ T9964] should_failslab+0xc2/0x120 [ 375.277394][ T9964] __kvmalloc_node_noprof+0x135/0x600 [ 375.277419][ T9964] ? seq_read_iter+0x826/0x12c0 [ 375.277463][ T9964] ? seq_read_iter+0x826/0x12c0 [ 375.277494][ T9964] seq_read_iter+0x826/0x12c0 [ 375.277528][ T9964] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 375.277565][ T9964] kernfs_fop_read_iter+0x40f/0x5a0 [ 375.277600][ T9964] copy_splice_read+0x615/0xba0 [ 375.277640][ T9964] ? __pfx_copy_splice_read+0x10/0x10 [ 375.277677][ T9964] ? look_up_lock_class+0x59/0x150 [ 375.277711][ T9964] ? lockdep_init_map_type+0x5c/0x280 [ 375.277744][ T9964] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 375.277784][ T9964] ? __pfx_copy_splice_read+0x10/0x10 [ 375.277817][ T9964] do_splice_read+0x282/0x370 [ 375.277854][ T9964] splice_direct_to_actor+0x2a1/0xa30 [ 375.277890][ T9964] ? __pfx_direct_splice_actor+0x10/0x10 [ 375.277931][ T9964] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 375.277964][ T9964] ? get_pid_task+0xfc/0x250 [ 375.278003][ T9964] do_splice_direct+0x174/0x240 [ 375.278038][ T9964] ? __pfx_do_splice_direct+0x10/0x10 [ 375.278073][ T9964] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 375.278111][ T9964] ? rw_verify_area+0xcf/0x680 [ 375.278148][ T9964] do_sendfile+0xafd/0xe50 [ 375.278190][ T9964] ? __pfx_do_sendfile+0x10/0x10 [ 375.278227][ T9964] ? __fget_files+0x20e/0x3c0 [ 375.278271][ T9964] __x64_sys_sendfile64+0x1d8/0x220 [ 375.278297][ T9964] ? ksys_write+0x1b9/0x240 [ 375.278318][ T9964] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 375.278344][ T9964] ? rcu_is_watching+0x12/0xc0 [ 375.278373][ T9964] do_syscall_64+0xcd/0x230 [ 375.278407][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.278429][ T9964] RIP: 0033:0x7f651158e969 [ 375.278452][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.278475][ T9964] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.278496][ T9964] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 375.278512][ T9964] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 375.278526][ T9964] RBP: 00007f651232d090 R08: 0000000000000000 R09: 0000000000000000 [ 375.278540][ T9964] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 375.278553][ T9964] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 375.278583][ T9964] [ 375.563366][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.808184][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 375.847608][ T9971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.894940][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.935014][ T9971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.957682][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.260064][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 376.283721][ T9987] FAULT_INJECTION: forcing a failure. [ 376.283721][ T9987] name failslab, interval 1, probability 0, space 0, times 0 [ 376.312765][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.2.737 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 376.312807][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 376.312824][ T9987] Call Trace: [ 376.312835][ T9987] [ 376.312845][ T9987] dump_stack_lvl+0x16c/0x1f0 [ 376.312891][ T9987] should_fail_ex+0x512/0x640 [ 376.312934][ T9987] ? __kmalloc_noprof+0xbf/0x510 [ 376.312970][ T9987] ? iter_file_splice_write+0x1cc/0x1150 [ 376.313016][ T9987] should_failslab+0xc2/0x120 [ 376.313067][ T9987] __kmalloc_noprof+0xd2/0x510 [ 376.313109][ T9987] iter_file_splice_write+0x1cc/0x1150 [ 376.313165][ T9987] ? kfree+0x2b6/0x4d0 [ 376.313213][ T9987] ? copy_splice_read+0x897/0xba0 [ 376.313268][ T9987] ? __pfx_iter_file_splice_write+0x10/0x10 [ 376.313317][ T9987] ? __lock_acquire+0xaa4/0x1ba0 [ 376.313363][ T9987] ? __pfx_copy_splice_read+0x10/0x10 [ 376.313439][ T9987] ? __pfx_iter_file_splice_write+0x10/0x10 [ 376.313489][ T9987] direct_splice_actor+0x18f/0x6c0 [ 376.313543][ T9987] splice_direct_to_actor+0x342/0xa30 [ 376.313592][ T9987] ? __pfx_direct_splice_actor+0x10/0x10 [ 376.313648][ T9987] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 376.313694][ T9987] ? get_pid_task+0xfc/0x250 [ 376.313750][ T9987] do_splice_direct+0x174/0x240 [ 376.313797][ T9987] ? __pfx_do_splice_direct+0x10/0x10 [ 376.313846][ T9987] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 376.313899][ T9987] ? rw_verify_area+0xcf/0x680 [ 376.313951][ T9987] do_sendfile+0xafd/0xe50 [ 376.314008][ T9987] ? __pfx_do_sendfile+0x10/0x10 [ 376.314059][ T9987] ? __fget_files+0x20e/0x3c0 [ 376.314119][ T9987] __x64_sys_sendfile64+0x1d8/0x220 [ 376.314155][ T9987] ? ksys_write+0x1b9/0x240 [ 376.314184][ T9987] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 376.314220][ T9987] ? rcu_is_watching+0x12/0xc0 [ 376.314259][ T9987] do_syscall_64+0xcd/0x230 [ 376.314305][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.314337][ T9987] RIP: 0033:0x7f3bbf18e969 [ 376.314362][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.314399][ T9987] RSP: 002b:00007f3bc0004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 376.314429][ T9987] RAX: ffffffffffffffda RBX: 00007f3bbf3b5fa0 RCX: 00007f3bbf18e969 [ 376.314449][ T9987] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 376.314468][ T9987] RBP: 00007f3bc0004090 R08: 0000000000000000 R09: 0000000000000000 [ 376.314487][ T9987] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 376.314506][ T9987] R13: 0000000000000000 R14: 00007f3bbf3b5fa0 R15: 00007ffc7084a438 [ 376.314548][ T9987] [ 376.583602][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.684579][ T9978] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 376.998783][ T9995] FAULT_INJECTION: forcing a failure. [ 376.998783][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 377.034422][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.0.739 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 377.034470][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 377.034490][ T9995] Call Trace: [ 377.034501][ T9995] [ 377.034513][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 377.034565][ T9995] should_fail_ex+0x512/0x640 [ 377.034615][ T9995] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 377.034664][ T9995] should_failslab+0xc2/0x120 [ 377.034707][ T9995] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 377.034752][ T9995] ? register_net_sysctl_sz+0x228/0x3e0 [ 377.034800][ T9995] ? mpls_net_init+0xef/0x230 [ 377.034854][ T9995] ? __pfx_mpls_net_init+0x10/0x10 [ 377.034901][ T9995] kmemdup_noprof+0x29/0x60 [ 377.034946][ T9995] mpls_net_init+0xef/0x230 [ 377.034990][ T9995] ops_init+0x1df/0x5f0 [ 377.035034][ T9995] setup_net+0x21e/0x850 [ 377.035076][ T9995] ? __pfx_setup_net+0x10/0x10 [ 377.035112][ T9995] ? lockdep_init_map_type+0x5c/0x280 [ 377.035160][ T9995] ? __pfx_down_read_killable+0x10/0x10 [ 377.035220][ T9995] ? debug_mutex_init+0x37/0x70 [ 377.035278][ T9995] copy_net_ns+0x2a6/0x5f0 [ 377.035324][ T9995] create_new_namespaces+0x3ea/0xad0 [ 377.035379][ T9995] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 377.035422][ T9995] ksys_unshare+0x45b/0xa40 [ 377.035471][ T9995] ? __pfx_ksys_unshare+0x10/0x10 [ 377.035515][ T9995] ? xfd_validate_state+0x5d/0x180 [ 377.035571][ T9995] ? rcu_is_watching+0x12/0xc0 [ 377.035610][ T9995] __x64_sys_unshare+0x31/0x40 [ 377.035654][ T9995] do_syscall_64+0xcd/0x230 [ 377.035702][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.035734][ T9995] RIP: 0033:0x7fb41878e969 [ 377.035761][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.035794][ T9995] RSP: 002b:00007fb41965a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.035826][ T9995] RAX: ffffffffffffffda RBX: 00007fb4189b5fa0 RCX: 00007fb41878e969 [ 377.035848][ T9995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.035868][ T9995] RBP: 00007fb418810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 377.035889][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.035909][ T9995] R13: 0000000000000000 R14: 00007fb4189b5fa0 R15: 00007ffc8a20f348 [ 377.035954][ T9995] [ 377.277242][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.815580][T10082] random: crng reseeded on system resumption [ 383.765055][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.771653][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.766839][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 385.837857][T10177] sd 0:0:1:0: PR command failed: 1026 [ 385.854630][T10177] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 385.883329][T10177] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 386.319117][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.347960][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.404129][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.427984][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.464662][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.508085][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.597498][T10189] CIFS mount error: No usable UNC path provided in device string! [ 386.597498][T10189] [ 386.624270][T10189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 386.637477][T10189] CIFS mount error: No usable UNC path provided in device string! [ 386.637477][T10189] [ 386.650787][T10189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 386.724758][T10152] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10152] [ 386.806690][T10189] CIFS mount error: No usable UNC path provided in device string! [ 386.806690][T10189] [ 386.926412][T10189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 387.548467][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 388.355578][T10213] syz.0.768 (10213) used greatest stack depth: 21128 bytes left [ 389.610671][T10256] netlink: 334 bytes leftover after parsing attributes in process `syz.5.773'. [ 389.783901][T10253] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 396.217234][T10391] device-mapper: ioctl: Invalid ioctl structure: uuid i, name , dev 400008000010000 [ 396.401045][T10394] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 398.317912][T10407] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 399.532074][T10446] FAULT_INJECTION: forcing a failure. [ 399.532074][T10446] name failslab, interval 1, probability 0, space 0, times 0 [ 399.545158][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.5.806 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 399.545204][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 399.545221][T10446] Call Trace: [ 399.545232][T10446] [ 399.545243][T10446] dump_stack_lvl+0x16c/0x1f0 [ 399.545290][T10446] should_fail_ex+0x512/0x640 [ 399.545329][T10446] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 399.545366][T10446] should_failslab+0xc2/0x120 [ 399.545404][T10446] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 399.545437][T10446] ? __alloc_skb+0x2b2/0x380 [ 399.545475][T10446] __alloc_skb+0x2b2/0x380 [ 399.545505][T10446] ? __pfx___alloc_skb+0x10/0x10 [ 399.545531][T10446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.545570][T10446] ? __lock_acquire+0x5ca/0x1ba0 [ 399.545616][T10446] __ip_append_data+0x3102/0x41e0 [ 399.545662][T10446] ? __pfx_raw_getfrag+0x10/0x10 [ 399.545720][T10446] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 399.545765][T10446] ? __pfx___ip_append_data+0x10/0x10 [ 399.545812][T10446] ip_append_data+0x10f/0x1a0 [ 399.545853][T10446] ? __pfx_raw_getfrag+0x10/0x10 [ 399.545897][T10446] raw_sendmsg+0xeed/0x38b0 [ 399.545968][T10446] ? aa_profile_af_perm+0x470/0x510 [ 399.546007][T10446] ? __pfx_raw_sendmsg+0x10/0x10 [ 399.546082][T10446] ? __pfx___might_resched+0x10/0x10 [ 399.546116][T10446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.546165][T10446] ? aa_sk_perm+0x2f4/0xb10 [ 399.546208][T10446] ? __import_iovec+0x1c8/0x660 [ 399.546256][T10446] ? __might_fault+0xe3/0x190 [ 399.546289][T10446] ? __might_fault+0x13b/0x190 [ 399.546323][T10446] ? __pfx_raw_sendmsg+0x10/0x10 [ 399.546369][T10446] inet_sendmsg+0x119/0x140 [ 399.546413][T10446] ____sys_sendmsg+0x973/0xc70 [ 399.546457][T10446] ? copy_msghdr_from_user+0x10a/0x160 [ 399.546490][T10446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.546540][T10446] ? __pfx__kstrtoull+0x10/0x10 [ 399.546584][T10446] ___sys_sendmsg+0x134/0x1d0 [ 399.546620][T10446] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.546674][T10446] ? find_held_lock+0x2b/0x80 [ 399.546731][T10446] __sys_sendmmsg+0x200/0x420 [ 399.546770][T10446] ? __pfx___sys_sendmmsg+0x10/0x10 [ 399.546818][T10446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.546879][T10446] ? fput+0x70/0xf0 [ 399.546922][T10446] ? ksys_write+0x1b9/0x240 [ 399.546951][T10446] ? __pfx_ksys_write+0x10/0x10 [ 399.546978][T10446] ? rcu_is_watching+0x12/0xc0 [ 399.547025][T10446] __x64_sys_sendmmsg+0x9c/0x100 [ 399.547058][T10446] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.547096][T10446] do_syscall_64+0xcd/0x230 [ 399.547142][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.547172][T10446] RIP: 0033:0x7f651158e969 [ 399.547197][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.547228][T10446] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 399.547256][T10446] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 399.547277][T10446] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 399.547296][T10446] RBP: 00007f651232d090 R08: 0000000000000000 R09: 0000000000000000 [ 399.547315][T10446] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 399.547334][T10446] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 399.547376][T10446] [ 400.298845][T10452] netlink: 'syz.3.808': attribute type 22 has an invalid length. [ 400.334603][T10452] netlink: 330 bytes leftover after parsing attributes in process `syz.3.808'. [ 401.168622][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 401.684980][T10471] random: crng reseeded on system resumption [ 401.744966][T10471] FAULT_INJECTION: forcing a failure. [ 401.744966][T10471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.789046][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.2.813 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 401.789121][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 401.789142][T10471] Call Trace: [ 401.789152][T10471] [ 401.789169][T10471] dump_stack_lvl+0x16c/0x1f0 [ 401.789218][T10471] should_fail_ex+0x512/0x640 [ 401.789270][T10471] should_fail_alloc_page+0xe7/0x130 [ 401.789314][T10471] prepare_alloc_pages+0x3c2/0x610 [ 401.789366][T10471] ? rcu_is_watching+0x12/0xc0 [ 401.789400][T10471] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 401.789451][T10471] ? stack_trace_save+0x8e/0xc0 [ 401.789484][T10471] ? __pfx_stack_trace_save+0x10/0x10 [ 401.789517][T10471] ? stack_depot_save_flags+0x28/0xa50 [ 401.789567][T10471] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 401.789609][T10471] ? kasan_save_stack+0x42/0x60 [ 401.789641][T10471] ? kasan_save_stack+0x33/0x60 [ 401.789669][T10471] ? kasan_save_track+0x14/0x30 [ 401.789701][T10471] ? vfs_open+0x82/0x3f0 [ 401.789737][T10471] ? path_openat+0x1e5e/0x2d40 [ 401.789776][T10471] ? do_filp_open+0x20b/0x470 [ 401.789804][T10471] ? do_sys_openat2+0x11b/0x1d0 [ 401.789847][T10471] ? __x64_sys_openat+0x174/0x210 [ 401.789887][T10471] ? do_syscall_64+0xcd/0x230 [ 401.789929][T10471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.789967][T10471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.790009][T10471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.790053][T10471] ? policy_nodemask+0xea/0x4e0 [ 401.790094][T10471] alloc_pages_mpol+0x1fb/0x550 [ 401.790135][T10471] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 401.790187][T10471] alloc_pages_noprof+0x131/0x390 [ 401.790228][T10471] get_zeroed_page_noprof+0x14/0x50 [ 401.790274][T10471] get_image_page+0x18/0x190 [ 401.790327][T10471] alloc_rtree_node+0x3c/0xb0 [ 401.790380][T10471] memory_bm_create+0x515/0x810 [ 401.790451][T10471] create_basic_memory_bitmaps+0x10f/0x680 [ 401.790494][T10471] snapshot_open+0x235/0x2b0 [ 401.790529][T10471] ? __pfx_snapshot_open+0x10/0x10 [ 401.790564][T10471] misc_open+0x35a/0x420 [ 401.790621][T10471] ? __pfx_misc_open+0x10/0x10 [ 401.790668][T10471] chrdev_open+0x231/0x6a0 [ 401.790700][T10471] ? __pfx_apparmor_file_open+0x10/0x10 [ 401.790750][T10471] ? __pfx_chrdev_open+0x10/0x10 [ 401.790791][T10471] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 401.790852][T10471] do_dentry_open+0x741/0x1c10 [ 401.790886][T10471] ? __pfx_chrdev_open+0x10/0x10 [ 401.790942][T10471] vfs_open+0x82/0x3f0 [ 401.790993][T10471] path_openat+0x1e5e/0x2d40 [ 401.791041][T10471] ? __pfx_path_openat+0x10/0x10 [ 401.791085][T10471] do_filp_open+0x20b/0x470 [ 401.791117][T10471] ? __pfx_do_filp_open+0x10/0x10 [ 401.791182][T10471] ? alloc_fd+0x471/0x7d0 [ 401.791244][T10471] do_sys_openat2+0x11b/0x1d0 [ 401.791288][T10471] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.791349][T10471] __x64_sys_openat+0x174/0x210 [ 401.791393][T10471] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.791440][T10471] ? rcu_is_watching+0x12/0xc0 [ 401.791482][T10471] do_syscall_64+0xcd/0x230 [ 401.791532][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.791563][T10471] RIP: 0033:0x7f3bbf18e969 [ 401.791589][T10471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.791621][T10471] RSP: 002b:00007f3bc0004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.791652][T10471] RAX: ffffffffffffffda RBX: 00007f3bbf3b5fa0 RCX: 00007f3bbf18e969 [ 401.791675][T10471] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 401.791698][T10471] RBP: 00007f3bbf210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 401.791721][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.791750][T10471] R13: 0000000000000000 R14: 00007f3bbf3b5fa0 R15: 00007ffc7084a438 [ 401.791793][T10471] [ 402.349437][T10478] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 403.200909][T10501] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 404.205854][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 405.319624][T10534] netlink: 146 bytes leftover after parsing attributes in process `syz.0.827'. [ 407.013855][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.835'. [ 407.360148][T10560] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 408.166194][T10578] FAULT_INJECTION: forcing a failure. [ 408.166194][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.195505][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.5.836 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 408.195560][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 408.195579][T10578] Call Trace: [ 408.195590][T10578] [ 408.195602][T10578] dump_stack_lvl+0x16c/0x1f0 [ 408.195653][T10578] should_fail_ex+0x512/0x640 [ 408.195705][T10578] strncpy_from_user+0x3b/0x2e0 [ 408.195752][T10578] getname_flags.part.0+0x8f/0x550 [ 408.195802][T10578] __x64_sys_mkdir+0xd8/0x140 [ 408.195835][T10578] do_syscall_64+0xcd/0x230 [ 408.195884][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.195918][T10578] RIP: 0033:0x7f651158e969 [ 408.195944][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.195978][T10578] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 408.196009][T10578] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 408.196035][T10578] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0 [ 408.196055][T10578] RBP: 00007f6511610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 408.196075][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.196094][T10578] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 408.196136][T10578] [ 408.738762][T10579] HfR: entered promiscuous mode [ 411.182746][T10617] binder: 10615:10617 ioctl 400c620e 200000000300 returned -22 [ 411.206841][T10617] binder: 10615:10617 ioctl 541d 200000001c00 returned -22 [ 415.180351][ T30] audit: type=1804 audit(6041117875.602:4): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.853" name="/newroot/sys/kernel/debug/tracing/trace" dev="tracefs" ino=103 res=1 errno=0 [ 415.550890][T10667] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 417.220280][T10679] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 417.362400][T10691] [U]  [ 417.365876][T10691] [U] [ 417.368686][T10691] [U] [ 417.371472][T10691] [U] [ 417.385846][T10691] [U] [ 417.388673][T10691] [U] [ 417.391443][T10691] [U] [ 417.394378][T10691] [U] [ 417.403216][T10691] [U] [ 417.406060][T10691] [U] [ 417.408863][T10691] [U] [ 417.411657][T10691] [U] [ 417.417716][T10691] [U] [ 417.420808][T10691] [U] [ 417.423595][T10691] [U] [ 417.426412][T10691] [U] [ 417.429807][T10691] [U] [ 417.432700][T10691] [U] [ 417.435497][T10691] [U] [ 417.438377][T10691] [U] [ 417.533875][T10691] [U] [ 417.536809][T10691] [U] [ 417.539629][T10691] [U] [ 417.542422][T10691] [U] [ 417.563566][T10691] [U] [ 417.566429][T10691] [U] [ 417.569206][T10691] [U] [ 417.571996][T10691] [U] [ 417.588983][T10691] [U] [ 417.592109][T10691] [U] [ 417.594844][T10691] [U] [ 417.597586][T10691] [U] [ 417.631390][T10691] [U] [ 417.634232][T10691] [U] [ 417.637124][T10691] [U] [ 417.639914][T10691] [U] [ 417.655684][T10691] [U] [ 417.658971][T10691] [U] [ 417.661745][T10691] [U] [ 417.665029][T10691] [U] [ 417.745693][T10691] [U] [ 417.748596][T10691] [U] [ 417.751373][T10691] [U] [ 417.754247][T10691] [U] [ 417.785675][T10691] [U] [ 417.788533][T10691] [U] [ 417.791318][T10691] [U] [ 417.794100][T10691] [U] [ 417.808280][T10691] [U] [ 417.811130][T10691] [U] [ 417.813920][T10691] [U] [ 417.816704][T10691] [U] [ 417.823479][T10698] lo: entered allmulticast mode [ 417.857973][T10691] [U] [ 417.860831][T10691] [U] [ 417.864134][T10691] [U] [ 417.867095][T10691] [U] [ 417.894211][T10691] [U] [ 417.897130][T10691] [U] [ 417.899937][T10691] [U] [ 417.902707][T10691] [U] [ 418.011337][T10691] [U] [ 418.014180][T10691] [U] [ 418.016971][T10691] [U] [ 418.019849][T10691] [U] [ 418.055959][T10691] [U] [ 418.059567][T10691] [U] [ 418.062447][T10691] [U] [ 418.065219][T10691] [U] [ 418.078497][T10691] [U] [ 418.081578][T10691] [U] [ 418.084353][T10691] [U] [ 418.087127][T10691] [U] [ 418.154575][T10691] [U] [ 418.157411][T10691] [U] [ 418.160200][T10691] [U] [ 418.162984][T10691] [U] [ 418.186049][T10691] [U] [ 418.188979][T10691] [U] [ 418.191868][T10691] [U] [ 418.194876][T10691] [U] [ 418.200134][T10691] [U] [ 418.203341][T10691] [U] [ 418.206142][T10691] [U] [ 418.209725][T10691] [U] [ 418.229069][T10691] [U] [ 418.231890][T10691] [U] [ 418.234852][T10691] [U] [ 418.237629][T10691] [U] [ 418.259835][T10691] [U] [ 418.262684][T10691] [U] [ 418.265464][T10691] [U] [ 418.268443][T10691] [U] [ 418.304852][T10702] [U] [ 418.355523][T10699] lo: left allmulticast mode [ 418.554019][T10694] ima: policy update failed [ 418.571052][ T30] audit: type=1802 audit(6041117878.992:5): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.861" res=0 errno=0 [ 419.675113][T10720] netlink: 330 bytes leftover after parsing attributes in process `syz.5.865'. [ 419.918667][T10725] nfs: Bad value for 'source' [ 420.663216][T10745] can: request_module (can-proto-3) failed. [ 421.657531][T10762] zswap: compressor not available [ 422.372801][T10781] FAULT_INJECTION: forcing a failure. [ 422.372801][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 422.400617][T10781] CPU: 1 UID: 0 PID: 10781 Comm: syz.5.880 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 422.400668][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 422.400689][T10781] Call Trace: [ 422.400700][T10781] [ 422.400713][T10781] dump_stack_lvl+0x16c/0x1f0 [ 422.400763][T10781] should_fail_ex+0x512/0x640 [ 422.400809][T10781] ? fs_reclaim_acquire+0xae/0x150 [ 422.400864][T10781] ? tomoyo_encode2+0x100/0x3e0 [ 422.400904][T10781] should_failslab+0xc2/0x120 [ 422.400937][T10781] __kmalloc_noprof+0xd2/0x510 [ 422.400973][T10781] tomoyo_encode2+0x100/0x3e0 [ 422.401013][T10781] tomoyo_encode+0x29/0x50 [ 422.401047][T10781] tomoyo_realpath_from_path+0x18f/0x6e0 [ 422.401087][T10781] ? tomoyo_profile+0x47/0x60 [ 422.401130][T10781] tomoyo_path_number_perm+0x245/0x580 [ 422.401160][T10781] ? tomoyo_path_number_perm+0x237/0x580 [ 422.401192][T10781] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.401225][T10781] ? find_held_lock+0x2b/0x80 [ 422.401278][T10781] ? find_held_lock+0x2b/0x80 [ 422.401301][T10781] ? hook_file_ioctl_common+0x145/0x410 [ 422.401346][T10781] ? __fget_files+0x20e/0x3c0 [ 422.401392][T10781] security_file_ioctl+0x9b/0x240 [ 422.401433][T10781] __x64_sys_ioctl+0xb7/0x200 [ 422.401471][T10781] do_syscall_64+0xcd/0x230 [ 422.401509][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.401534][T10781] RIP: 0033:0x7f651158e969 [ 422.401552][T10781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.401577][T10781] RSP: 002b:00007f650f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.401600][T10781] RAX: ffffffffffffffda RBX: 00007f65117b6080 RCX: 00007f651158e969 [ 422.401617][T10781] RDX: 0000000000000005 RSI: 0000000040085400 RDI: 0000000000000003 [ 422.401631][T10781] RBP: 00007f650f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.401646][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.401663][T10781] R13: 0000000000000000 R14: 00007f65117b6080 R15: 00007ffe59d39cf8 [ 422.401696][T10781] [ 422.401719][T10781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 423.454796][T10783] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 424.254225][T10797] GUP no longer grows the stack in syz.3.884 (10797): 14000-401000 (4000) [ 424.436051][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.3.884 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 424.436096][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.436114][T10797] Call Trace: [ 424.436124][T10797] [ 424.436136][T10797] dump_stack_lvl+0x16c/0x1f0 [ 424.436183][T10797] gup_vma_lookup+0x1d2/0x220 [ 424.436239][T10797] __get_user_pages+0x234/0x36f0 [ 424.436303][T10797] ? process_vm_rw_core.constprop.0+0x181/0x9a0 [ 424.436341][T10797] ? look_up_lock_class+0x59/0x150 [ 424.436382][T10797] ? __pfx___get_user_pages+0x10/0x10 [ 424.436448][T10797] __gup_longterm_locked+0x20d/0x1850 [ 424.436520][T10797] ? __pfx___gup_longterm_locked+0x10/0x10 [ 424.436592][T10797] pin_user_pages_remote+0xed/0x140 [ 424.436645][T10797] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 424.436694][T10797] ? mm_access+0x22d/0x2e0 [ 424.436747][T10797] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 424.436796][T10797] ? futex_wait_queue+0x14c/0x220 [ 424.436834][T10797] ? futex_unqueue+0xba/0x140 [ 424.436873][T10797] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 424.436917][T10797] ? iovec_from_user+0xbb/0x140 [ 424.436992][T10797] ? iovec_from_user+0xbb/0x140 [ 424.437047][T10797] process_vm_rw+0x216/0x2c0 [ 424.437089][T10797] ? __pfx_process_vm_rw+0x10/0x10 [ 424.437180][T10797] ? xfd_validate_state+0x5d/0x180 [ 424.437243][T10797] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 424.437284][T10797] ? do_syscall_64+0x91/0x230 [ 424.437325][T10797] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.437365][T10797] do_syscall_64+0xcd/0x230 [ 424.437411][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.437442][T10797] RIP: 0033:0x7fead678e969 [ 424.437477][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.437508][T10797] RSP: 002b:00007fead7582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 424.437537][T10797] RAX: ffffffffffffffda RBX: 00007fead69b6080 RCX: 00007fead678e969 [ 424.437558][T10797] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 00000000000003b3 [ 424.437578][T10797] RBP: 00007fead6810ab1 R08: 0000000000000003 R09: 0000000000000000 [ 424.437597][T10797] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 424.437625][T10797] R13: 0000000000000000 R14: 00007fead69b6080 R15: 00007fff1c751688 [ 424.437680][T10797] [ 426.620863][T10822] Invalid ELF header magic: != ELF [ 426.985667][T10839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'. [ 427.113063][T10844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 427.217207][T10844] ipvlan1: entered allmulticast mode [ 427.222715][T10844] veth0_vlan: entered allmulticast mode [ 427.327513][T10848] netlink: 330 bytes leftover after parsing attributes in process `syz.3.893'. [ 427.419045][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'. [ 428.228246][T10852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.896'. [ 429.234375][T10865] netlink: 342 bytes leftover after parsing attributes in process `syz.3.899'. [ 429.746385][T10856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.766544][T10856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.783459][T10856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.800973][T10856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 430.300057][T10884] kernel read not supported for file /\*)A (pid: 10884 comm: syz.3.901) [ 430.361780][ T30] audit: type=1800 audit(6041117894.782:6): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="\*)A" dev="mqueue" ino=21223 res=0 errno=0 [ 431.515360][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.827699][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.827731][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.827789][ T5139] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.395392][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 440.817397][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 445.107276][T11122] netlink: 338 bytes leftover after parsing attributes in process `syz.3.949'. [ 445.191856][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.199494][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.352037][T11116] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.283016][T11116] can: request_module (can-proto-3) failed. [ 448.323259][T11167] FAULT_INJECTION: forcing a failure. [ 448.323259][T11167] name failslab, interval 1, probability 0, space 0, times 0 [ 448.342876][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.0.957 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 448.342933][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 448.342955][T11167] Call Trace: [ 448.342968][T11167] [ 448.342982][T11167] dump_stack_lvl+0x16c/0x1f0 [ 448.343040][T11167] should_fail_ex+0x512/0x640 [ 448.343108][T11167] ? fs_reclaim_acquire+0xae/0x150 [ 448.343165][T11167] should_failslab+0xc2/0x120 [ 448.343205][T11167] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 448.343245][T11167] ? security_inode_alloc+0x3b/0x2b0 [ 448.343288][T11167] security_inode_alloc+0x3b/0x2b0 [ 448.343325][T11167] inode_init_always_gfp+0xce4/0x1030 [ 448.343387][T11167] alloc_inode+0x86/0x240 [ 448.343428][T11167] new_inode+0x22/0x1c0 [ 448.343470][T11167] shmem_get_inode+0x19a/0xfb0 [ 448.343533][T11167] shmem_mknod+0x1a8/0x450 [ 448.343589][T11167] ? __pfx_shmem_create+0x10/0x10 [ 448.343638][T11167] lookup_open.isra.0+0x11d0/0x1580 [ 448.343699][T11167] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 448.343772][T11167] ? __pfx_down_write+0x10/0x10 [ 448.343817][T11167] ? mnt_get_write_access+0x20c/0x300 [ 448.343868][T11167] path_openat+0x905/0x2d40 [ 448.343916][T11167] ? __pfx_path_openat+0x10/0x10 [ 448.343950][T11167] ? __lock_acquire+0xaa4/0x1ba0 [ 448.343999][T11167] do_filp_open+0x20b/0x470 [ 448.344031][T11167] ? __pfx_do_filp_open+0x10/0x10 [ 448.344106][T11167] ? _raw_spin_unlock+0x28/0x50 [ 448.344146][T11167] ? alloc_fd+0x471/0x7d0 [ 448.344215][T11167] do_sys_openat2+0x11b/0x1d0 [ 448.344258][T11167] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.344315][T11167] __x64_sys_open+0x153/0x1e0 [ 448.344360][T11167] ? __pfx___x64_sys_open+0x10/0x10 [ 448.344414][T11167] ? rcu_is_watching+0x12/0xc0 [ 448.344449][T11167] do_syscall_64+0xcd/0x230 [ 448.344498][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.344533][T11167] RIP: 0033:0x7fb41878e969 [ 448.344561][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.344594][T11167] RSP: 002b:00007fb41965a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 448.344627][T11167] RAX: ffffffffffffffda RBX: 00007fb4189b5fa0 RCX: 00007fb41878e969 [ 448.344648][T11167] RDX: 0000000000000000 RSI: 0000000000149443 RDI: 0000200000000040 [ 448.344669][T11167] RBP: 00007fb418810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.344689][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.344710][T11167] R13: 0000000000000000 R14: 00007fb4189b5fa0 R15: 00007ffc8a20f348 [ 448.344754][T11167] [ 448.678223][T11170] Invalid ELF header magic: != ELF [ 449.011458][T11176] FAULT_INJECTION: forcing a failure. [ 449.011458][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 449.024393][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.5.960 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 449.024440][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 449.024459][T11176] Call Trace: [ 449.024470][T11176] [ 449.024482][T11176] dump_stack_lvl+0x16c/0x1f0 [ 449.024535][T11176] should_fail_ex+0x512/0x640 [ 449.024584][T11176] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 449.024628][T11176] should_failslab+0xc2/0x120 [ 449.024671][T11176] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.024708][T11176] ? d_instantiate+0x77/0x90 [ 449.024743][T11176] ? alloc_empty_file+0x55/0x1e0 [ 449.024790][T11176] alloc_empty_file+0x55/0x1e0 [ 449.024831][T11176] alloc_file_pseudo+0x13a/0x230 [ 449.024877][T11176] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 449.024932][T11176] __shmem_file_setup+0x210/0x300 [ 449.024971][T11176] shmem_zero_setup+0x93/0x1a0 [ 449.025013][T11176] __mmap_region+0x2036/0x27c0 [ 449.025068][T11176] ? __pfx___mmap_region+0x10/0x10 [ 449.025107][T11176] ? finish_task_switch.isra.0+0x221/0xc10 [ 449.025155][T11176] ? __schedule+0x1186/0x5de0 [ 449.025190][T11176] ? kvm_sched_clock_read+0x11/0x20 [ 449.025227][T11176] ? sched_clock+0x38/0x60 [ 449.025333][T11176] ? trace_cap_capable+0x18d/0x200 [ 449.025370][T11176] ? cap_capable+0xb3/0x250 [ 449.025407][T11176] mmap_region+0x1ab/0x3f0 [ 449.025452][T11176] do_mmap+0xd8e/0x11b0 [ 449.025506][T11176] ? __pfx_do_mmap+0x10/0x10 [ 449.025554][T11176] ? __pfx_down_write_killable+0x10/0x10 [ 449.025608][T11176] vm_mmap_pgoff+0x281/0x450 [ 449.025662][T11176] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 449.025710][T11176] ? find_held_lock+0x2b/0x80 [ 449.025748][T11176] ? __x64_sys_futex+0x1e0/0x4c0 [ 449.025782][T11176] ? __x64_sys_futex+0x1e9/0x4c0 [ 449.025822][T11176] ksys_mmap_pgoff+0x7d/0x5c0 [ 449.025871][T11176] ? rcu_is_watching+0x12/0xc0 [ 449.025906][T11176] __x64_sys_mmap+0x125/0x190 [ 449.025942][T11176] do_syscall_64+0xcd/0x230 [ 449.025991][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.026035][T11176] RIP: 0033:0x7f651158e969 [ 449.026066][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.026101][T11176] RSP: 002b:00007f650f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 449.026134][T11176] RAX: ffffffffffffffda RBX: 00007f65117b6080 RCX: 00007f651158e969 [ 449.026157][T11176] RDX: ffffffffffffffff RSI: 0000000002020009 RDI: 0000000000000000 [ 449.026180][T11176] RBP: 00007f6511610ab1 R08: fffffffffffffffa R09: 0000000000000000 [ 449.026203][T11176] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 449.026225][T11176] R13: 0000000000000000 R14: 00007f65117b6080 R15: 00007ffe59d39cf8 [ 449.026270][T11176] [ 449.392538][T11179] netlink: 342 bytes leftover after parsing attributes in process `syz.0.961'. [ 449.610091][T11173] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 450.108064][T11190] FAULT_INJECTION: forcing a failure. [ 450.108064][T11190] name failslab, interval 1, probability 0, space 0, times 0 [ 450.150730][T11190] CPU: 1 UID: 0 PID: 11190 Comm: syz.3.965 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 450.150783][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 450.150802][T11190] Call Trace: [ 450.150812][T11190] [ 450.150824][T11190] dump_stack_lvl+0x16c/0x1f0 [ 450.150876][T11190] should_fail_ex+0x512/0x640 [ 450.150922][T11190] ? fs_reclaim_acquire+0xae/0x150 [ 450.150975][T11190] ? tomoyo_encode2+0x100/0x3e0 [ 450.151010][T11190] should_failslab+0xc2/0x120 [ 450.151043][T11190] __kmalloc_noprof+0xd2/0x510 [ 450.151080][T11190] tomoyo_encode2+0x100/0x3e0 [ 450.151121][T11190] tomoyo_encode+0x29/0x50 [ 450.151155][T11190] tomoyo_realpath_from_path+0x18f/0x6e0 [ 450.151201][T11190] tomoyo_check_open_permission+0x2ab/0x3c0 [ 450.151235][T11190] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 450.151300][T11190] ? do_raw_spin_lock+0x12c/0x2b0 [ 450.151351][T11190] tomoyo_file_open+0x6b/0x90 [ 450.151394][T11190] security_file_open+0x84/0x1e0 [ 450.151431][T11190] do_dentry_open+0x596/0x1c10 [ 450.151468][T11190] vfs_open+0x82/0x3f0 [ 450.151508][T11190] path_openat+0x1e5e/0x2d40 [ 450.151546][T11190] ? __pfx_path_openat+0x10/0x10 [ 450.151579][T11190] do_filp_open+0x20b/0x470 [ 450.151604][T11190] ? __pfx_do_filp_open+0x10/0x10 [ 450.151640][T11190] ? __pfx_kfree_link+0x10/0x10 [ 450.151685][T11190] ? alloc_fd+0x471/0x7d0 [ 450.151743][T11190] do_sys_openat2+0x11b/0x1d0 [ 450.151779][T11190] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.151828][T11190] __x64_sys_openat+0x174/0x210 [ 450.151866][T11190] ? __pfx___x64_sys_openat+0x10/0x10 [ 450.151905][T11190] ? rcu_is_watching+0x12/0xc0 [ 450.151940][T11190] do_syscall_64+0xcd/0x230 [ 450.151981][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.152008][T11190] RIP: 0033:0x7fead678e969 [ 450.152029][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.152057][T11190] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.152083][T11190] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 450.152101][T11190] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 450.152119][T11190] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 450.152135][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.152152][T11190] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 450.152187][T11190] [ 450.152226][T11190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 451.239047][T11210] erspan0: entered allmulticast mode [ 453.096707][T11248] FAULT_INJECTION: forcing a failure. [ 453.096707][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 453.174433][T11248] CPU: 1 UID: 0 PID: 11248 Comm: syz.3.977 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 453.174472][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 453.174503][T11248] Call Trace: [ 453.174512][T11248] [ 453.174521][T11248] dump_stack_lvl+0x16c/0x1f0 [ 453.174562][T11248] should_fail_ex+0x512/0x640 [ 453.174597][T11248] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 453.174629][T11248] should_failslab+0xc2/0x120 [ 453.174659][T11248] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 453.174686][T11248] ? lockdep_init_map_type+0x5c/0x280 [ 453.174719][T11248] ? __d_alloc+0x31/0xaa0 [ 453.174757][T11248] __d_alloc+0x31/0xaa0 [ 453.174793][T11248] d_alloc_pseudo+0x1c/0xc0 [ 453.174829][T11248] alloc_file_pseudo+0xcf/0x230 [ 453.174861][T11248] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 453.174892][T11248] ? alloc_fd+0x471/0x7d0 [ 453.174933][T11248] sock_alloc_file+0x50/0x210 [ 453.174964][T11248] __sys_socket+0x1c0/0x260 [ 453.174999][T11248] ? __pfx___sys_socket+0x10/0x10 [ 453.175035][T11248] ? rcu_is_watching+0x12/0xc0 [ 453.175062][T11248] __x64_sys_socket+0x72/0xb0 [ 453.175095][T11248] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.175126][T11248] do_syscall_64+0xcd/0x230 [ 453.175175][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.175209][T11248] RIP: 0033:0x7fead678e969 [ 453.175346][T11248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.175387][T11248] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 453.175416][T11248] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 453.175438][T11248] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 453.175459][T11248] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 453.175480][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.175500][T11248] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 453.175544][T11248] [ 454.410961][T11268] netlink: 186 bytes leftover after parsing attributes in process `syz.2.980'. [ 454.510647][T11268] netlink: 186 bytes leftover after parsing attributes in process `syz.2.980'. [ 454.899645][ T5139] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 454.899700][ T5139] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 454.976507][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.985'. [ 458.162323][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 460.928933][T11374] .SR: entered promiscuous mode [ 462.292654][T11400] kernel read not supported for file /set_event_notrace_pid (pid: 11400 comm: syz.0.1011) [ 462.430004][ T30] audit: type=1800 audit(6041117939.832:7): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="set_event_notrace_pid" dev="tracefs" ino=1061 res=0 errno=0 [ 463.052281][T11403] FAULT_INJECTION: forcing a failure. [ 463.052281][T11403] name failslab, interval 1, probability 0, space 0, times 0 [ 463.065749][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.2.1012 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 463.065799][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 463.065833][T11403] Call Trace: [ 463.065844][T11403] [ 463.065857][T11403] dump_stack_lvl+0x16c/0x1f0 [ 463.065914][T11403] should_fail_ex+0x512/0x640 [ 463.065961][T11403] ? __kmalloc_noprof+0xbf/0x510 [ 463.066001][T11403] ? ops_init+0x77/0x5f0 [ 463.066035][T11403] should_failslab+0xc2/0x120 [ 463.066076][T11403] __kmalloc_noprof+0xd2/0x510 [ 463.066122][T11403] ops_init+0x77/0x5f0 [ 463.066164][T11403] setup_net+0x21e/0x850 [ 463.066204][T11403] ? __pfx_setup_net+0x10/0x10 [ 463.066241][T11403] ? lockdep_init_map_type+0x5c/0x280 [ 463.066286][T11403] ? __pfx_down_read_killable+0x10/0x10 [ 463.066343][T11403] ? debug_mutex_init+0x37/0x70 [ 463.066399][T11403] copy_net_ns+0x2a6/0x5f0 [ 463.066445][T11403] create_new_namespaces+0x3ea/0xad0 [ 463.066492][T11403] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 463.066534][T11403] ksys_unshare+0x45b/0xa40 [ 463.066579][T11403] ? __pfx_ksys_unshare+0x10/0x10 [ 463.066621][T11403] ? xfd_validate_state+0x5d/0x180 [ 463.066677][T11403] ? rcu_is_watching+0x12/0xc0 [ 463.066717][T11403] __x64_sys_unshare+0x31/0x40 [ 463.066761][T11403] do_syscall_64+0xcd/0x230 [ 463.066807][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.066853][T11403] RIP: 0033:0x7f3bbf18e969 [ 463.066882][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.066915][T11403] RSP: 002b:00007f3bc0004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 463.066948][T11403] RAX: ffffffffffffffda RBX: 00007f3bbf3b5fa0 RCX: 00007f3bbf18e969 [ 463.066971][T11403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 463.066991][T11403] RBP: 00007f3bbf210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 463.067011][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.067031][T11403] R13: 0000000000000000 R14: 00007f3bbf3b5fa0 R15: 00007ffc7084a438 [ 463.067073][T11403] [ 463.299289][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.967384][T11433] nvme_fcloop: unknown parameter or missing value '7' [ 464.007793][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 464.446161][T11433] team0 (unregistering): Port device team_slave_0 removed [ 464.523421][T11433] team0 (unregistering): Port device team_slave_1 removed [ 465.542860][T11452] TCP: TCP_TX_DELAY enabled [ 466.676936][ T5139] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 466.676984][ T5139] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 467.043575][T11478] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1031'. [ 467.290387][T11487] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 467.673771][ T5139] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 467.856251][ T30] audit: type=1800 audit(6041117966.255:8): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1033" name="dbroot" dev="configfs" ino=33919 res=0 errno=0 [ 470.693754][T11512] vivid-003: ================= START STATUS ================= [ 470.743920][T11512] vivid-003: Radio HW Seek Mode: Bounded [ 470.781606][T11512] vivid-003: Radio Programmable HW Seek: false [ 470.836789][T11512] vivid-003: RDS Rx I/O Mode: Block I/O [ 470.842520][T11512] vivid-003: Generate RBDS Instead of RDS: false [ 470.867712][T11512] vivid-003: RDS Reception: true [ 470.872948][T11512] vivid-003: RDS Program Type: 0 inactive [ 470.886440][T11512] vivid-003: RDS PS Name: inactive [ 470.891835][T11512] vivid-003: RDS Radio Text: inactive [ 470.909889][T11512] vivid-003: RDS Traffic Announcement: false inactive [ 470.945594][T11512] vivid-003: RDS Traffic Program: false inactive [ 470.953968][T11512] vivid-003: RDS Music: false inactive [ 470.965421][T11512] vivid-003: ================== END STATUS ================== [ 474.056005][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1050'. [ 478.904674][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1064'. [ 479.598881][T11651] Invalid ELF header magic: != ELF [ 480.340311][T11676] FAULT_INJECTION: forcing a failure. [ 480.340311][T11676] name failslab, interval 1, probability 0, space 0, times 0 [ 480.399684][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.3.1067 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 480.399771][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 480.399791][T11676] Call Trace: [ 480.399801][T11676] [ 480.399814][T11676] dump_stack_lvl+0x16c/0x1f0 [ 480.399862][T11676] should_fail_ex+0x512/0x640 [ 480.399907][T11676] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 480.399962][T11676] should_failslab+0xc2/0x120 [ 480.399999][T11676] __kmalloc_cache_noprof+0x6a/0x3e0 [ 480.400044][T11676] ? __mark_inode_dirty+0x64d/0xe50 [ 480.400083][T11676] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 480.400122][T11676] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 480.400155][T11676] hugetlb_reserve_pages+0x149/0xd90 [ 480.400203][T11676] ? do_raw_spin_unlock+0x172/0x230 [ 480.400254][T11676] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 480.400317][T11676] hugetlbfs_file_mmap+0x4a1/0x730 [ 480.400364][T11676] __mmap_region+0x1485/0x27c0 [ 480.400403][T11676] ? __pfx___mmap_region+0x10/0x10 [ 480.400438][T11676] ? finish_task_switch.isra.0+0x221/0xc10 [ 480.400479][T11676] ? trace_sched_exit_tp+0xde/0x130 [ 480.400585][T11676] ? trace_cap_capable+0x18d/0x200 [ 480.400620][T11676] ? cap_capable+0xb3/0x250 [ 480.400656][T11676] mmap_region+0x32b/0x3f0 [ 480.400704][T11676] do_mmap+0xd8e/0x11b0 [ 480.400764][T11676] ? __pfx_do_mmap+0x10/0x10 [ 480.400812][T11676] ? __pfx_down_write_killable+0x10/0x10 [ 480.400869][T11676] vm_mmap_pgoff+0x281/0x450 [ 480.400923][T11676] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 480.400965][T11676] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 480.401009][T11676] ? hugetlbfs_get_inode+0x31f/0x730 [ 480.401060][T11676] ksys_mmap_pgoff+0x1c8/0x5c0 [ 480.401105][T11676] ? rcu_is_watching+0x12/0xc0 [ 480.401139][T11676] __x64_sys_mmap+0x125/0x190 [ 480.401176][T11676] do_syscall_64+0xcd/0x230 [ 480.401222][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.401254][T11676] RIP: 0033:0x7fead678e969 [ 480.401280][T11676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.401310][T11676] RSP: 002b:00007fead7540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 480.401339][T11676] RAX: ffffffffffffffda RBX: 00007fead69b6240 RCX: 00007fead678e969 [ 480.401359][T11676] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 480.401378][T11676] RBP: 00007fead6810ab1 R08: 0000000000000602 R09: 0000300000000000 [ 480.401398][T11676] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 480.401417][T11676] R13: 0000000000000000 R14: 00007fead69b6240 R15: 00007fff1c751688 [ 480.401459][T11676] [ 480.403764][T11676] HugeTLB: unable to allocate vma specific lock [ 481.098115][T11685] Invalid ELF header magic: != ELF [ 481.545460][T11672] ptrace attach of "./syz-executor exec"[9499] was attempted by "./syz-executor exec"[11672] [ 481.587836][T11672] program syz.5.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.804020][T11720] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 484.260268][T11722] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 486.242424][T11743] FAULT_INJECTION: forcing a failure. [ 486.242424][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 486.255569][T11743] CPU: 0 UID: 0 PID: 11743 Comm: syz.3.1085 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 486.255602][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 486.255617][T11743] Call Trace: [ 486.255625][T11743] [ 486.255633][T11743] dump_stack_lvl+0x16c/0x1f0 [ 486.255670][T11743] should_fail_ex+0x512/0x640 [ 486.255703][T11743] ? fs_reclaim_acquire+0xae/0x150 [ 486.255742][T11743] should_failslab+0xc2/0x120 [ 486.255771][T11743] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 486.255798][T11743] ? security_inode_alloc+0x3b/0x2b0 [ 486.255829][T11743] security_inode_alloc+0x3b/0x2b0 [ 486.255855][T11743] inode_init_always_gfp+0xce4/0x1030 [ 486.255899][T11743] alloc_inode+0x86/0x240 [ 486.255932][T11743] path_from_stashed+0x2be/0xb00 [ 486.255955][T11743] ? do_raw_spin_lock+0x12c/0x2b0 [ 486.255995][T11743] ? __pfx_path_from_stashed+0x10/0x10 [ 486.256019][T11743] ? do_raw_spin_unlock+0x172/0x230 [ 486.256061][T11743] ns_get_path+0x5f/0x80 [ 486.256096][T11743] proc_ns_get_link+0x121/0x260 [ 486.256135][T11743] ? __pfx_proc_ns_get_link+0x10/0x10 [ 486.256179][T11743] ? __pfx___might_resched+0x10/0x10 [ 486.256210][T11743] ? __pfx_proc_ns_get_link+0x10/0x10 [ 486.256249][T11743] step_into+0x1b22/0x2270 [ 486.256291][T11743] ? __pfx_step_into+0x10/0x10 [ 486.256325][T11743] ? find_held_lock+0x2b/0x80 [ 486.256356][T11743] path_openat+0x749/0x2d40 [ 486.256388][T11743] ? __pfx_path_openat+0x10/0x10 [ 486.256420][T11743] do_filp_open+0x20b/0x470 [ 486.256442][T11743] ? __pfx_do_filp_open+0x10/0x10 [ 486.256484][T11743] ? alloc_fd+0x471/0x7d0 [ 486.256529][T11743] do_sys_openat2+0x11b/0x1d0 [ 486.256560][T11743] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.256603][T11743] __x64_sys_openat+0x174/0x210 [ 486.256635][T11743] ? __pfx___x64_sys_openat+0x10/0x10 [ 486.256670][T11743] ? rcu_is_watching+0x12/0xc0 [ 486.256699][T11743] do_syscall_64+0xcd/0x230 [ 486.256733][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.256757][T11743] RIP: 0033:0x7fead678d2d0 [ 486.256776][T11743] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 486.256800][T11743] RSP: 002b:00007fead75a2f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 486.256821][T11743] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fead678d2d0 [ 486.256837][T11743] RDX: 0000000000000002 RSI: 00007fead75a2fa0 RDI: 00000000ffffff9c [ 486.256852][T11743] RBP: 00007fead75a2fa0 R08: 0000000000000000 R09: 0000000000000000 [ 486.256866][T11743] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.256880][T11743] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 486.256910][T11743] [ 487.189204][ T5139] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 487.189253][ T5139] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 488.034339][T11777] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 489.417093][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 490.692322][T11796] FAULT_INJECTION: forcing a failure. [ 490.692322][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 490.791540][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.3.1097 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 490.791586][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 490.791607][T11796] Call Trace: [ 490.791617][T11796] [ 490.791629][T11796] dump_stack_lvl+0x16c/0x1f0 [ 490.791678][T11796] should_fail_ex+0x512/0x640 [ 490.791722][T11796] ? fs_reclaim_acquire+0xae/0x150 [ 490.791785][T11796] should_failslab+0xc2/0x120 [ 490.791825][T11796] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 490.791864][T11796] ? security_inode_alloc+0x3b/0x2b0 [ 490.791908][T11796] security_inode_alloc+0x3b/0x2b0 [ 490.791944][T11796] inode_init_always_gfp+0xce4/0x1030 [ 490.792005][T11796] alloc_inode+0x86/0x240 [ 490.792043][T11796] new_inode+0x22/0x1c0 [ 490.792088][T11796] __rpc_create_common+0x57/0x2f0 [ 490.792137][T11796] rpc_populate.constprop.0+0x153/0x5d0 [ 490.792194][T11796] rpc_fill_super+0x345/0x840 [ 490.792238][T11796] ? sget_fc+0x808/0xc20 [ 490.792294][T11796] ? __pfx_rpc_fill_super+0x10/0x10 [ 490.792336][T11796] get_tree_keyed+0x10b/0x1d0 [ 490.792390][T11796] vfs_get_tree+0x8b/0x340 [ 490.792435][T11796] vfs_cmd_create+0xd7/0x2a0 [ 490.792474][T11796] __do_sys_fsconfig+0x7b8/0xbe0 [ 490.792524][T11796] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 490.792563][T11796] ? xfd_validate_state+0x5d/0x180 [ 490.792620][T11796] ? rcu_is_watching+0x12/0xc0 [ 490.792663][T11796] do_syscall_64+0xcd/0x230 [ 490.792711][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.792745][T11796] RIP: 0033:0x7fead678e969 [ 490.792777][T11796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.792810][T11796] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 490.792841][T11796] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 490.792862][T11796] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 490.792881][T11796] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 490.792902][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.792921][T11796] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 490.792966][T11796] [ 490.793012][T11796] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX [ 491.079750][T11796] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 492.580514][T11830] FAULT_INJECTION: forcing a failure. [ 492.580514][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 492.599573][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.5.1105 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 492.599609][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 492.599625][T11830] Call Trace: [ 492.599632][T11830] [ 492.599642][T11830] dump_stack_lvl+0x16c/0x1f0 [ 492.599679][T11830] should_fail_ex+0x512/0x640 [ 492.599713][T11830] ? __kvmalloc_node_noprof+0x122/0x600 [ 492.599748][T11830] should_failslab+0xc2/0x120 [ 492.599779][T11830] __kvmalloc_node_noprof+0x135/0x600 [ 492.599803][T11830] ? rcu_is_watching+0x12/0xc0 [ 492.599824][T11830] ? kfree+0x252/0x4d0 [ 492.599859][T11830] ? snd_pcm_oss_change_params_locked+0x1d18/0x3b40 [ 492.599902][T11830] ? snd_pcm_oss_change_params_locked+0x1d18/0x3b40 [ 492.599936][T11830] snd_pcm_oss_change_params_locked+0x1d18/0x3b40 [ 492.599986][T11830] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 492.600023][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 492.600074][T11830] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 492.600110][T11830] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 492.600145][T11830] ? lockdep_hardirqs_on+0x7c/0x110 [ 492.600179][T11830] snd_pcm_oss_poll+0x549/0xaf0 [ 492.600211][T11830] ? __pfx___pollwait+0x10/0x10 [ 492.600248][T11830] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 492.600280][T11830] ? __fget_files+0x20e/0x3c0 [ 492.600323][T11830] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 492.600356][T11830] do_select+0xd67/0x17d0 [ 492.600413][T11830] ? __pfx_do_select+0x10/0x10 [ 492.600447][T11830] ? find_held_lock+0x2b/0x80 [ 492.600470][T11830] ? finish_task_switch.isra.0+0x21c/0xc10 [ 492.600492][T11830] ? __pfx___pollwait+0x10/0x10 [ 492.600531][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600568][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600605][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600642][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600679][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600716][T11830] ? __pfx_pollwake+0x10/0x10 [ 492.600775][T11830] ? find_held_lock+0x2b/0x80 [ 492.600796][T11830] ? __might_fault+0xe3/0x190 [ 492.600821][T11830] ? __might_fault+0xe3/0x190 [ 492.600845][T11830] ? __might_fault+0x13b/0x190 [ 492.600881][T11830] ? core_sys_select+0x440/0xbe0 [ 492.600917][T11830] core_sys_select+0x440/0xbe0 [ 492.600961][T11830] ? __pfx_core_sys_select+0x10/0x10 [ 492.601004][T11830] ? futex_wait+0x120/0x380 [ 492.601058][T11830] ? __pfx_do_futex+0x10/0x10 [ 492.601091][T11830] kern_select+0x15d/0x1e0 [ 492.601127][T11830] ? __pfx_kern_select+0x10/0x10 [ 492.601164][T11830] ? xfd_validate_state+0x5d/0x180 [ 492.601204][T11830] ? rcu_is_watching+0x12/0xc0 [ 492.601229][T11830] __x64_sys_select+0xbd/0x160 [ 492.601264][T11830] ? do_syscall_64+0x91/0x230 [ 492.601296][T11830] ? lockdep_hardirqs_on+0x7c/0x110 [ 492.601325][T11830] do_syscall_64+0xcd/0x230 [ 492.601359][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.601383][T11830] RIP: 0033:0x7f651158e969 [ 492.601402][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.601427][T11830] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 492.601449][T11830] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 492.601465][T11830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 492.601479][T11830] RBP: 00007f6511610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 492.601494][T11830] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 492.601509][T11830] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 492.601540][T11830] [ 496.487758][ T5139] Bluetooth: hci0: unexpected subevent 0x01 length: 5 < 18 [ 497.482645][T11884] Invalid ELF header magic: != ELF [ 500.303109][T11929] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 503.164920][ T5139] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 503.164969][ T5139] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 503.184668][ T5139] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 503.184758][ T5139] Bluetooth: hci1: Malformed LE Event: 0x0d [ 503.194037][T11993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.568287][T12011] bond0: no command found in slaves file - use +ifname or -ifname [ 506.635970][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.642745][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.004643][T12062] kernel read not supported for file /set_event_notrace_pid (pid: 12062 comm: syz.2.1149) [ 507.151985][ T30] audit: type=1800 audit(6041118018.542:9): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1149" name="set_event_notrace_pid" dev="tracefs" ino=1061 res=0 errno=0 [ 508.603797][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030c68000: rx timeout, send abort [ 509.113486][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030c68000: abort rx timeout. Force session deactivation [ 511.500219][T12147] FAULT_INJECTION: forcing a failure. [ 511.500219][T12147] name failslab, interval 1, probability 0, space 0, times 0 [ 511.521157][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.3.1163 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 511.521207][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 511.521228][T12147] Call Trace: [ 511.521240][T12147] [ 511.521253][T12147] dump_stack_lvl+0x16c/0x1f0 [ 511.521304][T12147] should_fail_ex+0x512/0x640 [ 511.521350][T12147] ? __kmalloc_noprof+0xbf/0x510 [ 511.521389][T12147] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 511.521439][T12147] should_failslab+0xc2/0x120 [ 511.521487][T12147] __kmalloc_noprof+0xd2/0x510 [ 511.521533][T12147] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 511.521585][T12147] acpi_ex_start_trace_method+0x30/0x480 [ 511.521640][T12147] acpi_ds_begin_method_execution+0x3c/0x980 [ 511.521696][T12147] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 511.521761][T12147] acpi_ps_execute_method+0x94/0xb30 [ 511.521807][T12147] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 511.521859][T12147] acpi_ns_evaluate+0x76c/0xca0 [ 511.521905][T12147] ? kasan_save_track+0x14/0x30 [ 511.521944][T12147] acpi_evaluate_object+0x1fa/0xa90 [ 511.521981][T12147] ? do_syscall_64+0xcd/0x230 [ 511.522024][T12147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.522060][T12147] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 511.522098][T12147] ? __mutex_trylock_common+0xe9/0x250 [ 511.522149][T12147] acpi_evaluate_integer+0xdd/0x200 [ 511.522204][T12147] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 511.522275][T12147] ? __pfx_status_show+0x10/0x10 [ 511.522310][T12147] status_show+0xa0/0x120 [ 511.522346][T12147] ? __pfx_status_show+0x10/0x10 [ 511.522393][T12147] dev_attr_show+0x53/0xe0 [ 511.522437][T12147] ? __pfx_dev_attr_show+0x10/0x10 [ 511.522473][T12147] sysfs_kf_seq_show+0x213/0x3e0 [ 511.522537][T12147] seq_read_iter+0x506/0x12c0 [ 511.522613][T12147] kernfs_fop_read_iter+0x40f/0x5a0 [ 511.522655][T12147] ? rw_verify_area+0xcf/0x680 [ 511.522706][T12147] vfs_read+0x8c8/0xc70 [ 511.522741][T12147] ? __pfx___mutex_lock+0x10/0x10 [ 511.522786][T12147] ? __pfx_vfs_read+0x10/0x10 [ 511.522845][T12147] ksys_read+0x12a/0x240 [ 511.522875][T12147] ? __pfx_ksys_read+0x10/0x10 [ 511.522900][T12147] ? rcu_is_watching+0x12/0xc0 [ 511.522943][T12147] do_syscall_64+0xcd/0x230 [ 511.522989][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.523022][T12147] RIP: 0033:0x7fead678e969 [ 511.523049][T12147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.523082][T12147] RSP: 002b:00007fead7582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.523116][T12147] RAX: ffffffffffffffda RBX: 00007fead69b6080 RCX: 00007fead678e969 [ 511.523138][T12147] RDX: 0000000000000070 RSI: 0000200000000000 RDI: 0000000000000009 [ 511.523158][T12147] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.523180][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.523200][T12147] R13: 0000000000000000 R14: 00007fead69b6080 R15: 00007fff1c751688 [ 511.523252][T12147] [ 511.524136][T12147] ACPI Error: Could not allocate 15 bytes (20240827/nsnames-308) [ 512.100360][T12160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1165'. [ 512.601947][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1167'. [ 513.198054][T12193] team0: Port device team_slave_0 removed [ 513.706403][T12204] random: crng reseeded on system resumption [ 514.378086][T12226] FAULT_INJECTION: forcing a failure. [ 514.378086][T12226] name failslab, interval 1, probability 0, space 0, times 0 [ 514.436263][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.3.1175 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 514.436324][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 514.436343][T12226] Call Trace: [ 514.436353][T12226] [ 514.436365][T12226] dump_stack_lvl+0x16c/0x1f0 [ 514.436411][T12226] should_fail_ex+0x512/0x640 [ 514.436453][T12226] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 514.436493][T12226] should_failslab+0xc2/0x120 [ 514.436531][T12226] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 514.436568][T12226] ? vm_area_dup+0x25/0x760 [ 514.436611][T12226] vm_area_dup+0x25/0x760 [ 514.436648][T12226] __split_vma+0x17f/0x1030 [ 514.436686][T12226] ? __pfx___split_vma+0x10/0x10 [ 514.436738][T12226] vms_gather_munmap_vmas+0x392/0x1310 [ 514.436781][T12226] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 514.436820][T12226] ? mas_walk+0x6a6/0x910 [ 514.436873][T12226] __mmap_region+0x314/0x27c0 [ 514.436910][T12226] ? rcu_is_watching+0x12/0xc0 [ 514.436940][T12226] ? __pfx___mmap_region+0x10/0x10 [ 514.436974][T12226] ? finish_task_switch.isra.0+0x221/0xc10 [ 514.437019][T12226] ? __schedule+0x1186/0x5de0 [ 514.437053][T12226] ? kvm_sched_clock_read+0x11/0x20 [ 514.437089][T12226] ? sched_clock+0x38/0x60 [ 514.437223][T12226] ? trace_cap_capable+0x18d/0x200 [ 514.437257][T12226] ? cap_capable+0xb3/0x250 [ 514.437299][T12226] mmap_region+0x1ab/0x3f0 [ 514.437344][T12226] do_mmap+0xd8e/0x11b0 [ 514.437398][T12226] ? __pfx_do_mmap+0x10/0x10 [ 514.437445][T12226] ? __pfx_down_write_killable+0x10/0x10 [ 514.437500][T12226] vm_mmap_pgoff+0x281/0x450 [ 514.437552][T12226] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 514.437607][T12226] ? __x64_sys_futex+0x1e0/0x4c0 [ 514.437640][T12226] ? __x64_sys_futex+0x1e9/0x4c0 [ 514.437679][T12226] ksys_mmap_pgoff+0x7d/0x5c0 [ 514.437725][T12226] ? rcu_is_watching+0x12/0xc0 [ 514.437757][T12226] __x64_sys_mmap+0x125/0x190 [ 514.437793][T12226] do_syscall_64+0xcd/0x230 [ 514.437838][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.437868][T12226] RIP: 0033:0x7fead678e969 [ 514.437892][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.437922][T12226] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 514.437950][T12226] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 514.437970][T12226] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 514.437989][T12226] RBP: 00007fead6810ab1 R08: 0000000000000401 R09: 2000000000000000 [ 514.438009][T12226] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 514.438028][T12226] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 514.438070][T12226] [ 519.777723][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 521.196791][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1198'. [ 521.536960][T12353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 521.582807][T12357] device-mapper: ioctl: Unable to rename non-existent device,  to [ 525.282867][T12476] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 525.401691][ T30] audit: type=1804 audit(6041118036.812:10): pid=12472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1222" name=2F6E6577726F6F742F3331352F09 dev="tmpfs" ino=1674 res=1 errno=0 [ 525.613733][T12461] Invalid ELF header magic: != ELF [ 526.730688][T12523] syz.5.1231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 526.899025][T12522] snd_dummy snd_dummy.0: control 16781581:65533:2:'x?F/zF˷fC:0 is already present [ 528.391163][T12565] FAULT_INJECTION: forcing a failure. [ 528.391163][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 528.415004][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.0.1240 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 528.415044][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 528.415061][T12565] Call Trace: [ 528.415068][T12565] [ 528.415077][T12565] dump_stack_lvl+0x16c/0x1f0 [ 528.415119][T12565] should_fail_ex+0x512/0x640 [ 528.415162][T12565] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 528.415204][T12565] should_failslab+0xc2/0x120 [ 528.415234][T12565] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 528.415258][T12565] ? d_instantiate+0x77/0x90 [ 528.415283][T12565] ? alloc_empty_file+0x55/0x1e0 [ 528.415316][T12565] alloc_empty_file+0x55/0x1e0 [ 528.415353][T12565] alloc_file_pseudo+0x13a/0x230 [ 528.415385][T12565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 528.415423][T12565] __shmem_file_setup+0x210/0x300 [ 528.415450][T12565] shmem_zero_setup+0x93/0x1a0 [ 528.415481][T12565] __mmap_region+0x2036/0x27c0 [ 528.415510][T12565] ? __pfx___mmap_region+0x10/0x10 [ 528.415536][T12565] ? trace_sched_exit_tp+0xde/0x130 [ 528.415586][T12565] ? __pfx___schedule+0x10/0x10 [ 528.415646][T12565] ? trace_cap_capable+0x18d/0x200 [ 528.415670][T12565] ? cap_capable+0xb3/0x250 [ 528.415696][T12565] mmap_region+0x1ab/0x3f0 [ 528.415728][T12565] do_mmap+0xd8e/0x11b0 [ 528.415768][T12565] ? __pfx_do_mmap+0x10/0x10 [ 528.415802][T12565] ? __pfx_down_write_killable+0x10/0x10 [ 528.415843][T12565] vm_mmap_pgoff+0x281/0x450 [ 528.415880][T12565] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 528.415918][T12565] ? __x64_sys_futex+0x1e0/0x4c0 [ 528.415940][T12565] ? __x64_sys_futex+0x1e9/0x4c0 [ 528.415967][T12565] ksys_mmap_pgoff+0x7d/0x5c0 [ 528.415998][T12565] ? rcu_is_watching+0x12/0xc0 [ 528.416020][T12565] __x64_sys_mmap+0x125/0x190 [ 528.416045][T12565] do_syscall_64+0xcd/0x230 [ 528.416089][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.416123][T12565] RIP: 0033:0x7fb41878e969 [ 528.416141][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.416164][T12565] RSP: 002b:00007fb41965a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 528.416186][T12565] RAX: ffffffffffffffda RBX: 00007fb4189b5fa0 RCX: 00007fb41878e969 [ 528.416201][T12565] RDX: 20004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 528.416216][T12565] RBP: 00007fb418810ab1 R08: 0000000000000401 R09: 0000000000008000 [ 528.416230][T12565] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 528.416244][T12565] R13: 0000000000000000 R14: 00007fb4189b5fa0 R15: 00007ffc8a20f348 [ 528.416292][T12565] [ 530.467375][T12598] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 530.613716][T12612] ima: policy update failed [ 530.697116][ T30] audit: type=1802 audit(6041118042.122:11): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1251" res=0 errno=0 [ 531.906378][T12626] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 532.028174][T12651] FAULT_INJECTION: forcing a failure. [ 532.028174][T12651] name fail_futex, interval 1, probability 0, space 0, times 0 [ 532.189648][T12651] CPU: 1 UID: 0 PID: 12651 Comm: syz.2.1255 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 532.189688][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 532.189705][T12651] Call Trace: [ 532.189714][T12651] [ 532.189724][T12651] dump_stack_lvl+0x16c/0x1f0 [ 532.189764][T12651] should_fail_ex+0x512/0x640 [ 532.189806][T12651] get_futex_key+0x49e/0x1000 [ 532.189836][T12651] ? __pfx_get_futex_key+0x10/0x10 [ 532.189873][T12651] futex_wake+0xe7/0x4e0 [ 532.189913][T12651] ? __pfx_futex_wake+0x10/0x10 [ 532.189950][T12651] ? percpu_counter_add_batch+0xb8/0x1f0 [ 532.189983][T12651] ? errseq_sample+0x53/0x70 [ 532.190023][T12651] ? file_init_path+0x4fe/0x760 [ 532.190064][T12651] do_futex+0x1e3/0x350 [ 532.190092][T12651] ? __pfx_do_futex+0x10/0x10 [ 532.190120][T12651] ? fd_install+0x225/0x750 [ 532.190167][T12651] __x64_sys_futex+0x1e0/0x4c0 [ 532.190197][T12651] ? __sys_socket+0xac/0x260 [ 532.190237][T12651] ? __pfx___x64_sys_futex+0x10/0x10 [ 532.190267][T12651] ? rcu_is_watching+0x12/0xc0 [ 532.190308][T12651] do_syscall_64+0xcd/0x230 [ 532.190346][T12651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.190374][T12651] RIP: 0033:0x7f3bbf18e969 [ 532.190394][T12651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.190420][T12651] RSP: 002b:00007f3bc00040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.190445][T12651] RAX: ffffffffffffffda RBX: 00007f3bbf3b5fa8 RCX: 00007f3bbf18e969 [ 532.190462][T12651] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3bbf3b5fac [ 532.190479][T12651] RBP: 00007f3bbf3b5fa0 R08: 00007f3bc0005000 R09: 0000000000000000 [ 532.190496][T12651] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f3bbf3b5fac [ 532.190512][T12651] R13: 0000000000000000 R14: 00007ffc7084a350 R15: 00007ffc7084a438 [ 532.190545][T12651] [ 532.881428][T12686] nbd: must specify an index to disconnect [ 533.098280][T12689] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1261'. [ 533.355534][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 534.597069][T12724] FAULT_INJECTION: forcing a failure. [ 534.597069][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 534.619716][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.3.1269 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 534.619762][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 534.619781][T12724] Call Trace: [ 534.619799][T12724] [ 534.619812][T12724] dump_stack_lvl+0x16c/0x1f0 [ 534.619859][T12724] should_fail_ex+0x512/0x640 [ 534.619904][T12724] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 534.619945][T12724] should_failslab+0xc2/0x120 [ 534.619985][T12724] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 534.620023][T12724] ? __pmd_alloc+0xc3/0x870 [ 534.620076][T12724] __pmd_alloc+0xc3/0x870 [ 534.620150][T12724] ? find_held_lock+0x2b/0x80 [ 534.620186][T12724] __handle_mm_fault+0x948/0x2a40 [ 534.620232][T12724] ? __pfx___handle_mm_fault+0x10/0x10 [ 534.620291][T12724] ? find_vma+0xbf/0x140 [ 534.620334][T12724] ? __pfx_find_vma+0x10/0x10 [ 534.620385][T12724] handle_mm_fault+0x3fe/0xad0 [ 534.620426][T12724] do_user_addr_fault+0x7a6/0x1370 [ 534.620462][T12724] ? rcu_is_watching+0x12/0xc0 [ 534.620495][T12724] exc_page_fault+0x5c/0xc0 [ 534.620537][T12724] asm_exc_page_fault+0x26/0x30 [ 534.620568][T12724] RIP: 0010:__get_user_4+0x14/0x20 [ 534.620601][T12724] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 534.620633][T12724] RSP: 0018:ffffc90003917dd8 EFLAGS: 00050287 [ 534.620659][T12724] RAX: 0000000000000000 RBX: ffff888027cf46c0 RCX: ffffc9000cc19000 [ 534.620681][T12724] RDX: 00007ffffffff000 RSI: ffffffff890a49f6 RDI: ffffffff8bf467e0 [ 534.620703][T12724] RBP: 0000000000000000 R08: e7151b5d2ecc2001 R09: 0000000000000001 [ 534.620724][T12724] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000722fc3 [ 534.620744][T12724] R13: 00000000c0045005 R14: ffff8880353a1880 R15: 0000000000000050 [ 534.620778][T12724] ? snd_pcm_oss_ioctl+0x2eb6/0x37a0 [ 534.620834][T12724] snd_pcm_oss_ioctl+0x2ebe/0x37a0 [ 534.620883][T12724] ? find_held_lock+0x2b/0x80 [ 534.620913][T12724] ? hook_file_ioctl_common+0x145/0x410 [ 534.620950][T12724] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 534.621003][T12724] ? __fget_files+0x20e/0x3c0 [ 534.621059][T12724] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 534.621117][T12724] __x64_sys_ioctl+0x190/0x200 [ 534.621166][T12724] do_syscall_64+0xcd/0x230 [ 534.621214][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.621247][T12724] RIP: 0033:0x7fead678e969 [ 534.621272][T12724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.621304][T12724] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.621334][T12724] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 534.621356][T12724] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004 [ 534.621376][T12724] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 534.621397][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.621417][T12724] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 534.621459][T12724] [ 534.632447][T12718] FAULT_INJECTION: forcing a failure. [ 534.632447][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 534.971174][T12718] CPU: 0 UID: 0 PID: 12718 Comm: syz.5.1266 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 534.971220][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 534.971239][T12718] Call Trace: [ 534.971249][T12718] [ 534.971261][T12718] dump_stack_lvl+0x16c/0x1f0 [ 534.971311][T12718] should_fail_ex+0x512/0x640 [ 534.971355][T12718] ? __kmalloc_noprof+0xbf/0x510 [ 534.971393][T12718] ? sk_prot_alloc+0x1a8/0x2a0 [ 534.971433][T12718] should_failslab+0xc2/0x120 [ 534.971472][T12718] __kmalloc_noprof+0xd2/0x510 [ 534.971506][T12718] ? evm_inode_alloc_security+0x49/0xc0 [ 534.971567][T12718] ? security_inode_alloc+0xcf/0x2b0 [ 534.971609][T12718] sk_prot_alloc+0x1a8/0x2a0 [ 534.971654][T12718] sk_alloc+0x36/0xc20 [ 534.971686][T12718] __netlink_create+0x5e/0x2c0 [ 534.971744][T12718] __netlink_kernel_create+0xed/0x750 [ 534.971785][T12718] ? __pfx___netlink_kernel_create+0x10/0x10 [ 534.971832][T12718] ? __pfx_crypto_netlink_init+0x10/0x10 [ 534.971887][T12718] crypto_netlink_init+0xb7/0x140 [ 534.971931][T12718] ? cpus_read_unlock+0x83/0x150 [ 534.971967][T12718] ? __pfx_crypto_netlink_init+0x10/0x10 [ 534.972008][T12718] ? __nf_register_net_hook+0x371/0x730 [ 534.972063][T12718] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 534.972110][T12718] ? nf_register_net_hook+0x117/0x160 [ 534.972164][T12718] ? nf_register_net_hooks+0xb1/0xd0 [ 534.972198][T12718] ops_init+0x1df/0x5f0 [ 534.972240][T12718] setup_net+0x21e/0x850 [ 534.972282][T12718] ? __pfx_setup_net+0x10/0x10 [ 534.972316][T12718] ? lockdep_init_map_type+0x5c/0x280 [ 534.972360][T12718] ? __pfx_down_read_killable+0x10/0x10 [ 534.972415][T12718] ? debug_mutex_init+0x37/0x70 [ 534.972471][T12718] copy_net_ns+0x2a6/0x5f0 [ 534.972515][T12718] create_new_namespaces+0x3ea/0xad0 [ 534.972562][T12718] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 534.972602][T12718] ksys_unshare+0x45b/0xa40 [ 534.972647][T12718] ? __pfx_ksys_unshare+0x10/0x10 [ 534.972687][T12718] ? xfd_validate_state+0x5d/0x180 [ 534.972742][T12718] ? rcu_is_watching+0x12/0xc0 [ 534.972781][T12718] __x64_sys_unshare+0x31/0x40 [ 534.972823][T12718] do_syscall_64+0xcd/0x230 [ 534.972877][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.972909][T12718] RIP: 0033:0x7f651158e969 [ 534.972934][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.973050][T12718] RSP: 002b:00007f650f3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 534.973080][T12718] RAX: ffffffffffffffda RBX: 00007f65117b6160 RCX: 00007f651158e969 [ 534.973102][T12718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 534.973122][T12718] RBP: 00007f6511610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 534.973141][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.973160][T12718] R13: 0000000000000000 R14: 00007f65117b6160 R15: 00007ffe59d39cf8 [ 534.973205][T12718] [ 535.801505][T12736] FAULT_INJECTION: forcing a failure. [ 535.801505][T12736] name failslab, interval 1, probability 0, space 0, times 0 [ 535.855795][T12736] CPU: 0 UID: 0 PID: 12736 Comm: syz.3.1271 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 535.855843][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 535.855862][T12736] Call Trace: [ 535.855874][T12736] [ 535.855887][T12736] dump_stack_lvl+0x16c/0x1f0 [ 535.855937][T12736] should_fail_ex+0x512/0x640 [ 535.855981][T12736] ? __kmalloc_noprof+0xbf/0x510 [ 535.856019][T12736] ? lsm_blob_alloc+0x68/0x90 [ 535.856075][T12736] should_failslab+0xc2/0x120 [ 535.856164][T12736] __kmalloc_noprof+0xd2/0x510 [ 535.856215][T12736] lsm_blob_alloc+0x68/0x90 [ 535.856267][T12736] security_sk_alloc+0x30/0x270 [ 535.856305][T12736] sk_prot_alloc+0x1c7/0x2a0 [ 535.856353][T12736] sk_alloc+0x36/0xc20 [ 535.856389][T12736] __netlink_create+0x5e/0x2c0 [ 535.856452][T12736] __netlink_kernel_create+0xed/0x750 [ 535.856495][T12736] ? __pfx___netlink_kernel_create+0x10/0x10 [ 535.856548][T12736] fib_net_init+0x26d/0x3f0 [ 535.856584][T12736] ? __pfx___register_sysctl_table+0x10/0x10 [ 535.856624][T12736] ? __pfx_fib_net_init+0x10/0x10 [ 535.856659][T12736] ? lockdep_init_map_type+0x5c/0x280 [ 535.856702][T12736] ? __pfx_nl_fib_input+0x10/0x10 [ 535.856743][T12736] ? devinet_init_net+0x5c2/0x910 [ 535.856787][T12736] ? __pfx_fib_net_init+0x10/0x10 [ 535.856819][T12736] ops_init+0x1df/0x5f0 [ 535.856862][T12736] setup_net+0x21e/0x850 [ 535.856904][T12736] ? __pfx_setup_net+0x10/0x10 [ 535.856940][T12736] ? lockdep_init_map_type+0x5c/0x280 [ 535.856984][T12736] ? __pfx_down_read_killable+0x10/0x10 [ 535.857048][T12736] ? debug_mutex_init+0x37/0x70 [ 535.857107][T12736] copy_net_ns+0x2a6/0x5f0 [ 535.857161][T12736] create_new_namespaces+0x3ea/0xad0 [ 535.857210][T12736] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 535.857252][T12736] ksys_unshare+0x45b/0xa40 [ 535.857297][T12736] ? __pfx_ksys_unshare+0x10/0x10 [ 535.857336][T12736] ? xfd_validate_state+0x5d/0x180 [ 535.857389][T12736] ? rcu_is_watching+0x12/0xc0 [ 535.857429][T12736] __x64_sys_unshare+0x31/0x40 [ 535.857473][T12736] do_syscall_64+0xcd/0x230 [ 535.857521][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.857555][T12736] RIP: 0033:0x7fead678e969 [ 535.857583][T12736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.857615][T12736] RSP: 002b:00007fead75a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 535.857647][T12736] RAX: ffffffffffffffda RBX: 00007fead69b5fa0 RCX: 00007fead678e969 [ 535.857669][T12736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 535.857690][T12736] RBP: 00007fead6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 535.857711][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.857731][T12736] R13: 0000000000000000 R14: 00007fead69b5fa0 R15: 00007fff1c751688 [ 535.857774][T12736] [ 541.210674][T12826] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 541.273179][T12826] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 544.569427][T12871] Invalid ELF header magic: != ELF [ 545.352617][T12887] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x0 pfn:0x7a400 [ 545.406913][T12887] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 545.454720][T12887] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 545.508658][T12887] raw: 0000000000000000 0000000000000000 0000000700000005 0000000000000000 [ 545.538734][T12887] page dumped because: unmovable page [ 545.544825][T12887] page_owner tracks the page as allocated [ 545.565229][T12887] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5822, tgid 5822 (syz-executor), ts 94410945149, free_ts 36560451505 [ 545.637329][T12887] post_alloc_hook+0x181/0x1b0 [ 545.642194][T12887] get_page_from_freelist+0x135c/0x3920 [ 545.735316][T12887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 545.741532][T12887] alloc_pages_mpol+0x1fb/0x550 [ 545.887793][T12887] alloc_pages_noprof+0x131/0x390 [ 545.910589][T12887] __vmalloc_node_range_noprof+0x732/0x1540 [ 545.933074][T12887] vmalloc_user_noprof+0x6b/0x90 [ 545.939523][T12887] kcov_ioctl+0x4c/0x730 [ 545.943861][T12887] __x64_sys_ioctl+0x190/0x200 [ 545.951566][T12887] do_syscall_64+0xcd/0x230 [ 545.956214][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.962372][T12887] page last free pid 1 tgid 1 stack trace: [ 545.968347][T12887] __free_frozen_pages+0x69d/0xff0 [ 545.973777][T12887] free_contig_range+0x135/0x3f0 [ 545.978971][T12887] destroy_args+0x66f/0x830 [ 545.983561][T12887] debug_vm_pgtable+0x130e/0x2d50 [ 545.988929][T12887] do_one_initcall+0x120/0x6e0 [ 545.993776][T12887] kernel_init_freeable+0x5c2/0x900 [ 545.999802][T12887] kernel_init+0x1c/0x2b0 [ 546.004207][T12887] ret_from_fork+0x45/0x80 [ 546.008877][T12887] ret_from_fork_asm+0x1a/0x30 [ 546.540960][T12909] ICMPv6: process `syz.3.1311' is using deprecated sysctl (syscall) net.ipv6.neigh.nlmon0.retrans_time - use net.ipv6.neigh.nlmon0.retrans_time_ms instead [ 546.648053][T12907] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 547.531732][ T5139] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 547.531775][ T5139] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 548.069324][T12942] netlink: 1492 bytes leftover after parsing attributes in process `syz.0.1318'. [ 548.934526][ T30] audit: type=1326 audit(6041118081.349:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.0.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41878e969 code=0x0 [ 549.705495][T12965] input: f as /devices/virtual/input/input47 [ 549.977506][T12969] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 550.711872][ T30] audit: type=1326 audit(6041118083.129:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.2.1329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bbf18e969 code=0x0 [ 551.173465][T12996] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1331'. [ 551.325753][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 551.512704][T13002] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 552.710115][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 553.033506][T13029] Ignoring unsupported numa_zonelist_order value: [ 553.033506][T13029] [ 554.868238][T13064] ubi0: attaching mtd0 [ 554.904761][ T5139] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 554.904804][ T5139] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 554.946036][T13064] ubi0: scanning is finished [ 554.950786][T13064] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 555.881747][T13064] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 555.998820][T13080] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1349'. [ 556.372612][T13090] FAULT_INJECTION: forcing a failure. [ 556.372612][T13090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 556.471242][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.3.1351 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 556.471290][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 556.471310][T13090] Call Trace: [ 556.471321][T13090] [ 556.471334][T13090] dump_stack_lvl+0x16c/0x1f0 [ 556.471385][T13090] should_fail_ex+0x512/0x640 [ 556.471437][T13090] get_futex_key+0x49e/0x1000 [ 556.471476][T13090] ? __pfx_get_futex_key+0x10/0x10 [ 556.471506][T13090] ? stack_trace_save+0x8e/0xc0 [ 556.471540][T13090] ? __pfx_stack_trace_save+0x10/0x10 [ 556.471572][T13090] ? stack_depot_save_flags+0x28/0xa50 [ 556.471621][T13090] ? __lock_acquire+0xaa4/0x1ba0 [ 556.471670][T13090] futex_wait_setup+0x78/0x290 [ 556.471711][T13090] ? kasan_save_free_info+0x3b/0x60 [ 556.471770][T13090] ? __x64_sys_openat+0x174/0x210 [ 556.471817][T13090] __futex_wait+0x266/0x3c0 [ 556.471863][T13090] ? __pfx___futex_wait+0x10/0x10 [ 556.471915][T13090] ? __pfx_futex_wake_mark+0x10/0x10 [ 556.471977][T13090] futex_wait+0xe8/0x380 [ 556.472018][T13090] ? __pfx_futex_wait+0x10/0x10 [ 556.472069][T13090] ? kmem_cache_free+0x2d4/0x4d0 [ 556.472100][T13090] ? fd_install+0x225/0x750 [ 556.472148][T13090] ? putname+0x154/0x1a0 [ 556.472190][T13090] do_futex+0x229/0x350 [ 556.472225][T13090] ? __pfx_do_futex+0x10/0x10 [ 556.472272][T13090] __x64_sys_futex+0x1e0/0x4c0 [ 556.472310][T13090] ? __x64_sys_openat+0x174/0x210 [ 556.472354][T13090] ? __pfx___x64_sys_futex+0x10/0x10 [ 556.472392][T13090] ? rcu_is_watching+0x12/0xc0 [ 556.472434][T13090] do_syscall_64+0xcd/0x230 [ 556.472481][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.472514][T13090] RIP: 0033:0x7fead678e969 [ 556.472541][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.472574][T13090] RSP: 002b:00007fead75a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.472605][T13090] RAX: ffffffffffffffda RBX: 00007fead69b5fa8 RCX: 00007fead678e969 [ 556.472627][T13090] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fead69b5fa8 [ 556.472647][T13090] RBP: 00007fead69b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 556.472668][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fead69b5fac [ 556.472688][T13090] R13: 0000000000000000 R14: 00007fff1c7515a0 R15: 00007fff1c751688 [ 556.472729][T13090] [ 558.637445][T13139] bridge0: port 3(team0) entered blocking state [ 558.645029][T13139] bridge0: port 3(team0) entered disabled state [ 558.660854][T13139] team0: entered allmulticast mode [ 558.669048][T13139] team_slave_1: entered allmulticast mode [ 558.682523][T13139] team0: entered promiscuous mode [ 558.693817][T13139] team_slave_1: entered promiscuous mode [ 558.703053][T13139] bridge0: port 3(team0) entered blocking state [ 558.709559][T13139] bridge0: port 3(team0) entered forwarding state [ 560.539507][T13174] CIFS mount error: No usable UNC path provided in device string! [ 560.539507][T13174] [ 560.662877][T13174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 563.405658][ T5139] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 563.405701][ T5139] Bluetooth: hci1: unexpected subevent 0x03 length: 727 > 9 [ 564.039907][T13215] EXT4-fs error (device sda1): ext4_lookup:1789: inode #248: comm syz.0.1374: iget: checksum invalid [ 564.069361][T13215] platform regulatory.0: loading /lib/firmware/updates/6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac/regulatory.db failed with error -74 [ 564.135592][T13215] EXT4-fs error (device sda1): ext4_lookup:1789: inode #248: comm syz.0.1374: iget: checksum invalid [ 564.207276][T13215] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 564.242375][T13215] EXT4-fs error (device sda1): ext4_lookup:1789: inode #248: comm syz.0.1374: iget: checksum invalid [ 564.283341][T13215] platform regulatory.0: loading /lib/firmware/6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac/regulatory.db failed with error -74 [ 564.332695][T13215] EXT4-fs error (device sda1): ext4_lookup:1789: inode #248: comm syz.0.1374: iget: checksum invalid [ 564.418692][T13215] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 564.445399][T13215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 564.465512][T13215] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 565.359421][T13236] openvswitch: HfR: Dropping previously announced user features [ 565.801227][T13248] netlink: 'syz.5.1383': attribute type 5 has an invalid length. [ 568.083111][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.089978][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.342036][T13290] ubi0: attaching mtd0 [ 568.352389][T13290] ubi0: scanning is finished [ 568.357195][T13290] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 568.776602][T13290] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 570.667703][ T5139] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 570.667747][ T5139] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 572.645271][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 572.894820][T13366] team_slave_0: entered allmulticast mode [ 572.990539][T13369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1402'. [ 573.166598][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1402'. [ 574.971863][T13408] FAULT_INJECTION: forcing a failure. [ 574.971863][T13408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.986045][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.5.1412 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 574.986090][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.986114][T13408] Call Trace: [ 574.986124][T13408] [ 574.986134][T13408] dump_stack_lvl+0x16c/0x1f0 [ 574.986181][T13408] should_fail_ex+0x512/0x640 [ 574.986245][T13408] _copy_from_user+0x2e/0xd0 [ 574.986294][T13408] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 574.986360][T13408] snd_rawmidi_write+0x26e/0xc10 [ 574.986418][T13408] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 574.986468][T13408] ? __pfx_default_wake_function+0x10/0x10 [ 574.986503][T13408] ? bpf_lsm_file_permission+0x9/0x10 [ 574.986551][T13408] ? security_file_permission+0x71/0x210 [ 574.986593][T13408] ? rw_verify_area+0xcf/0x680 [ 574.986644][T13408] vfs_write+0x25c/0x1180 [ 574.986671][T13408] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 574.986728][T13408] ? __pfx_vfs_write+0x10/0x10 [ 574.986754][T13408] ? find_held_lock+0x2b/0x80 [ 574.986784][T13408] ? __fget_files+0x204/0x3c0 [ 574.986836][T13408] ? __fget_files+0x20e/0x3c0 [ 574.986897][T13408] ksys_write+0x205/0x240 [ 574.986926][T13408] ? __pfx_ksys_write+0x10/0x10 [ 574.986954][T13408] ? rcu_is_watching+0x12/0xc0 [ 574.986992][T13408] do_syscall_64+0xcd/0x230 [ 574.987043][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.987073][T13408] RIP: 0033:0x7f651158e969 [ 574.987098][T13408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.987128][T13408] RSP: 002b:00007f651232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.987157][T13408] RAX: ffffffffffffffda RBX: 00007f65117b5fa0 RCX: 00007f651158e969 [ 574.987178][T13408] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 574.987204][T13408] RBP: 00007f6511610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 574.987224][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.987243][T13408] R13: 0000000000000000 R14: 00007f65117b5fa0 R15: 00007ffe59d39cf8 [ 574.987283][T13408] [ 575.466460][T13410] zram: Added device: zram3 [ 575.719599][T13419] Process accounting resumed [ 576.700518][T13438] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 577.026440][T13442] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 578.226493][T13471] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1427'. [ 578.827112][T13469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.227733][ T5139] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 579.227775][ T5139] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 580.069006][T13483] Process accounting resumed [ 582.111120][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 582.369991][ T5139] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 582.370036][ T5139] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 584.733103][T13555] Malformed UNC in devname [ 584.733103][T13555] [ 584.749065][T13555] CIFS: VFS: Malformed UNC in devname [ 585.566903][T13570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.597979][T13570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 585.604348][T13570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 585.611928][T13570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.993541][T13588] sctp: [Deprecated]: syz.5.1456 (pid 13588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.993541][T13588] Use struct sctp_sack_info instead [ 586.461589][T13598] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 586.498308][T13598] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 586.581597][T13604] netlink: 346 bytes leftover after parsing attributes in process `syz.5.1461'. [ 586.844613][ T30] audit: type=1800 audit(6041119217.266:14): pid=13614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="members" dev="configfs" ino=44135 res=0 errno=0 [ 587.586526][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.665821][ T5139] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.665842][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.665890][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.428844][T13641] ima: policy update failed [ 588.501028][ T30] audit: type=1802 audit(6041119218.916:15): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1470" res=0 errno=0 [ 588.768153][ T5826] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 588.768196][ T5826] Bluetooth: hci0: unexpected subevent 0x03 length: 727 > 9 [ 589.628738][T13663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 589.684216][T13663] tc_dump_action: action bad kind [ 593.510895][T13729] FAULT_INJECTION: forcing a failure. [ 593.510895][T13729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.537253][T13729] CPU: 1 UID: 0 PID: 13729 Comm: syz.2.1489 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 593.537299][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 593.537317][T13729] Call Trace: [ 593.537328][T13729] [ 593.537339][T13729] dump_stack_lvl+0x16c/0x1f0 [ 593.537385][T13729] should_fail_ex+0x512/0x640 [ 593.537435][T13729] _copy_from_user+0x2e/0xd0 [ 593.537481][T13729] io_register_pbuf_ring+0x122/0x830 [ 593.537526][T13729] ? __pfx_io_register_pbuf_ring+0x10/0x10 [ 593.537588][T13729] ? __mutex_trylock_common+0xe9/0x250 [ 593.537632][T13729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 593.537678][T13729] __io_uring_register+0xe76/0x2310 [ 593.537728][T13729] ? trace_contention_end+0xdd/0x130 [ 593.537767][T13729] ? __pfx___io_uring_register+0x10/0x10 [ 593.537811][T13729] ? __mutex_lock+0x1ca/0xb90 [ 593.537853][T13729] ? __x64_sys_io_uring_register+0x159/0x280 [ 593.537904][T13729] ? __pfx___mutex_lock+0x10/0x10 [ 593.537962][T13729] ? __fget_files+0x20e/0x3c0 [ 593.538005][T13729] ? fput+0x70/0xf0 [ 593.538050][T13729] __x64_sys_io_uring_register+0x169/0x280 [ 593.538106][T13729] do_syscall_64+0xcd/0x230 [ 593.538149][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.538179][T13729] RIP: 0033:0x7f3bbf18e969 [ 593.538205][T13729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.538234][T13729] RSP: 002b:00007f3bc0004038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 593.538262][T13729] RAX: ffffffffffffffda RBX: 00007f3bbf3b5fa0 RCX: 00007f3bbf18e969 [ 593.538282][T13729] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000002 [ 593.538301][T13729] RBP: 00007f3bc0004090 R08: 0000000000000000 R09: 0000000000000000 [ 593.538320][T13729] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 593.538337][T13729] R13: 0000000000000000 R14: 00007f3bbf3b5fa0 R15: 00007ffc7084a438 [ 593.538376][T13729] [ 594.814701][T13762] FAULT_INJECTION: forcing a failure. [ 594.814701][T13762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.828653][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.0.1500 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 594.828692][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 594.828710][T13762] Call Trace: [ 594.828720][T13762] [ 594.828731][T13762] dump_stack_lvl+0x16c/0x1f0 [ 594.828777][T13762] should_fail_ex+0x512/0x640 [ 594.828825][T13762] should_fail_alloc_page+0xe7/0x130 [ 594.828865][T13762] prepare_alloc_pages+0x3c2/0x610 [ 594.828909][T13762] ? find_held_lock+0x2b/0x80 [ 594.828940][T13762] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 594.828974][T13762] ? __lock_acquire+0xaa4/0x1ba0 [ 594.829022][T13762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.829062][T13762] ? __pfx___might_resched+0x10/0x10 [ 594.829114][T13762] ? process_measurement+0x4a6/0x23e0 [ 594.829160][T13762] ? down_write+0x14d/0x200 [ 594.829208][T13762] ? up_write+0x1b2/0x520 [ 594.829248][T13762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.829291][T13762] ? policy_nodemask+0xea/0x4e0 [ 594.829331][T13762] alloc_pages_mpol+0x1fb/0x550 [ 594.829370][T13762] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 594.829420][T13762] alloc_pages_noprof+0x131/0x390 [ 594.829457][T13762] __pud_alloc+0x39/0x690 [ 594.829507][T13762] __handle_mm_fault+0x996/0x2a40 [ 594.829550][T13762] ? __pfx___handle_mm_fault+0x10/0x10 [ 594.829603][T13762] ? find_vma+0xbf/0x140 [ 594.829644][T13762] ? __pfx_find_vma+0x10/0x10 [ 594.829687][T13762] handle_mm_fault+0x3fe/0xad0 [ 594.829721][T13762] do_user_addr_fault+0x7a6/0x1370 [ 594.829752][T13762] ? rcu_is_watching+0x12/0xc0 [ 594.829786][T13762] exc_page_fault+0x5c/0xc0 [ 594.829825][T13762] asm_exc_page_fault+0x26/0x30 [ 594.829855][T13762] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 594.829888][T13762] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 594.829917][T13762] RSP: 0018:ffffc9000bcb7bd8 EFLAGS: 00050202 [ 594.829941][T13762] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000028 [ 594.829960][T13762] RDX: fffff52001796f8d RSI: 0000200000000040 RDI: ffffc9000bcb7c40 [ 594.829980][T13762] RBP: 0000000000000028 R08: 0000000000000001 R09: fffff52001796f8c [ 594.830000][T13762] R10: ffffc9000bcb7c67 R11: 0000000000000000 R12: 0000000000000000 [ 594.830019][T13762] R13: ffffc9000bcb7c40 R14: 0000200000000040 R15: 0000000000000001 [ 594.830062][T13762] _copy_from_user+0x98/0xd0 [ 594.830116][T13762] io_register_pbuf_ring+0x122/0x830 [ 594.830161][T13762] ? __pfx_io_register_pbuf_ring+0x10/0x10 [ 594.830225][T13762] ? __mutex_trylock_common+0xe9/0x250 [ 594.830268][T13762] ? __pfx___mutex_trylock_common+0x10/0x10 [ 594.830315][T13762] __io_uring_register+0xe76/0x2310 [ 594.830367][T13762] ? trace_contention_end+0xdd/0x130 [ 594.830409][T13762] ? __pfx___io_uring_register+0x10/0x10 [ 594.830456][T13762] ? __mutex_lock+0x1ca/0xb90 [ 594.830499][T13762] ? __x64_sys_io_uring_register+0x159/0x280 [ 594.830554][T13762] ? __pfx___mutex_lock+0x10/0x10 [ 594.830606][T13762] ? __fget_files+0x20e/0x3c0 [ 594.830652][T13762] ? fput+0x70/0xf0 [ 594.830695][T13762] __x64_sys_io_uring_register+0x169/0x280 [ 594.830746][T13762] do_syscall_64+0xcd/0x230 [ 594.830793][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.830821][T13762] RIP: 0033:0x7fb41878e969 [ 594.830844][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.830873][T13762] RSP: 002b:00007fb41965a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 594.830901][T13762] RAX: ffffffffffffffda RBX: 00007fb4189b5fa0 RCX: 00007fb41878e969 [ 594.830922][T13762] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000002 [ 594.830942][T13762] RBP: 00007fb41965a090 R08: 0000000000000000 R09: 0000000000000000 [ 594.830961][T13762] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.830980][T13762] R13: 0000000000000000 R14: 00007fb4189b5fa0 R15: 00007ffc8a20f348 [ 594.831022][T13762] [ 595.401754][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'. [ 595.844396][T13771] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1502'. [ 595.962058][T13771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.557902][T13831] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input57 [ 598.837423][T13834] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 601.188753][ T5826] ================================================================== [ 601.196889][ T5826] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 601.204760][ T5826] Read of size 140 at addr ffffc90007661000 by task kworker/u9:2/5826 [ 601.212951][ T5826] [ 601.215305][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 601.215345][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 601.215366][ T5826] Workqueue: hci0 hci_devcd_timeout [ 601.215408][ T5826] Call Trace: [ 601.215418][ T5826] [ 601.215431][ T5826] dump_stack_lvl+0x116/0x1f0 [ 601.215473][ T5826] print_report+0xc3/0x670 [ 601.215509][ T5826] ? __virt_addr_valid+0x5e/0x590 [ 601.215552][ T5826] ? hci_devcd_dump+0x142/0x240 [ 601.215589][ T5826] kasan_report+0xe0/0x110 [ 601.215634][ T5826] ? hci_devcd_dump+0x142/0x240 [ 601.215676][ T5826] kasan_check_range+0xef/0x1a0 [ 601.215726][ T5826] __asan_memcpy+0x23/0x60 [ 601.215753][ T5826] hci_devcd_dump+0x142/0x240 [ 601.215792][ T5826] hci_devcd_timeout+0xb5/0x2e0 [ 601.215835][ T5826] ? rcu_is_watching+0x12/0xc0 [ 601.215867][ T5826] process_one_work+0x9cc/0x1b70 [ 601.215922][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 601.215977][ T5826] ? assign_work+0x1a0/0x250 [ 601.216022][ T5826] worker_thread+0x6c8/0xf10 [ 601.216075][ T5826] ? __kthread_parkme+0x19e/0x250 [ 601.216113][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 601.216173][ T5826] kthread+0x3c2/0x780 [ 601.216217][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216263][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216324][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216371][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216413][ T5826] ? rcu_is_watching+0x12/0xc0 [ 601.216446][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216501][ T5826] ret_from_fork+0x45/0x80 [ 601.216548][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.216591][ T5826] ret_from_fork_asm+0x1a/0x30 [ 601.216646][ T5826] [ 601.216657][ T5826] [ 601.382980][ T5826] The buggy address ffffc90007661000 belongs to a vmalloc virtual mapping [ 601.391530][ T5826] Memory state around the buggy address: [ 601.397212][ T5826] ffffc90007660f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 601.405332][ T5826] ffffc90007660f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 601.413450][ T5826] >ffffc90007661000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 601.421562][ T5826] ^ [ 601.425681][ T5826] ffffc90007661080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 601.433796][ T5826] ffffc90007661100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 601.441916][ T5826] ================================================================== [ 601.453517][ T5826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 601.460776][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 601.472984][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 601.483078][ T5826] Workqueue: hci0 hci_devcd_timeout [ 601.488325][ T5826] Call Trace: [ 601.491635][ T5826] [ 601.494592][ T5826] dump_stack_lvl+0x3d/0x1f0 [ 601.499234][ T5826] panic+0x71c/0x800 [ 601.503172][ T5826] ? __pfx_panic+0x10/0x10 [ 601.507640][ T5826] ? irqentry_exit+0x3b/0x90 [ 601.512283][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 601.517524][ T5826] ? preempt_schedule_thunk+0x16/0x30 [ 601.522946][ T5826] ? hci_devcd_dump+0x142/0x240 [ 601.527834][ T5826] ? preempt_schedule_common+0x44/0xc0 [ 601.533335][ T5826] ? check_panic_on_warn+0x1f/0xb0 [ 601.538492][ T5826] ? hci_devcd_dump+0x142/0x240 [ 601.543377][ T5826] check_panic_on_warn+0xab/0xb0 [ 601.548366][ T5826] end_report+0x107/0x170 [ 601.552734][ T5826] kasan_report+0xee/0x110 [ 601.557193][ T5826] ? hci_devcd_dump+0x142/0x240 [ 601.562092][ T5826] kasan_check_range+0xef/0x1a0 [ 601.566985][ T5826] __asan_memcpy+0x23/0x60 [ 601.571439][ T5826] hci_devcd_dump+0x142/0x240 [ 601.576156][ T5826] hci_devcd_timeout+0xb5/0x2e0 [ 601.581044][ T5826] ? rcu_is_watching+0x12/0xc0 [ 601.585840][ T5826] process_one_work+0x9cc/0x1b70 [ 601.590835][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 601.596257][ T5826] ? assign_work+0x1a0/0x250 [ 601.600892][ T5826] worker_thread+0x6c8/0xf10 [ 601.605536][ T5826] ? __kthread_parkme+0x19e/0x250 [ 601.610601][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 601.615764][ T5826] kthread+0x3c2/0x780 [ 601.619880][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.624511][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.629143][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.633777][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.638410][ T5826] ? rcu_is_watching+0x12/0xc0 [ 601.643207][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.647841][ T5826] ret_from_fork+0x45/0x80 [ 601.652311][ T5826] ? __pfx_kthread+0x10/0x10 [ 601.656943][ T5826] ret_from_fork_asm+0x1a/0x30 [ 601.661763][ T5826] [ 601.665047][ T5826] Kernel Offset: disabled [ 601.669388][ T5826] Rebooting in 86400 seconds..