last executing test programs: 25.11802678s ago: executing program 1 (id=2440): write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xdf) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fadvise64$auto(0xffffffffffffffff, 0x80005, 0x9, 0xa1a0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc91}, 0x24040081) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x230, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x20c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13e, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x38}, {0x30}]}, @NL80211_PMSR_ATTR_PEERS={0x104, 0x5, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x0, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0x0, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb) 23.910983998s ago: executing program 1 (id=2443): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x5428, 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)="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", 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x205}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 23.671516066s ago: executing program 1 (id=2444): r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r1 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x12, 0x0, 0x26) write$auto(0x3, 0x0, 0x100082) lseek$auto(r1, 0x7fffffffffffffff, 0x3) writev$auto(r0, &(0x7f0000000480)={0x0, 0x3}, 0x3) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7}) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r2, &(0x7f0000000000)='\xf79', 0x2ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose0/tx_queue_len\x00', 0x123a01, 0x0) setresuid$auto(0x2, 0x7, 0x8080) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000027c0)='H', 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYRES16=r4], 0x1ac}}, 0x40000) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) 13.818044231s ago: executing program 0 (id=2464): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0xa0043, 0x0) mmap$auto(0x1, 0x400008, 0xdf, 0x9b7e, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) shutdown$auto(0xffffffffffffffff, 0x2) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = fcntl$auto(0x3, 0x4, 0xa553) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) io_uring_setup$auto(0x1, 0x0) r4 = socket(0x2, 0x6, 0x0) socket(0xa, 0x3, 0x3a) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SCOPE={0xd, 0x4, '/dev/sg1\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x100}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x1}, @NFSD_A_SERVER_SCOPE={0xd, 0x4, '/dev/sg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) write$auto_sg_fops_sg(r0, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) 12.327716876s ago: executing program 0 (id=2467): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5608, 0x7) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x800000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xc8, 0x0, 0x40f6) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0xffffffffffffffff, 0x2}, 0x0, 0xf4240, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x8, 0x1, 0x948b, 0x3, 0x15f4da0d, 0x3, 0x3, 0x262, 0x8000001c, 0x7, 0x6d3e, 0xc, 0x2, 0x5]}, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8014) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) 12.147889456s ago: executing program 2 (id=2468): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x1ac}}, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f]P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) fsopen$auto(0x0, 0x1) 10.330470839s ago: executing program 2 (id=2471): mmap$auto(0xfffffffffffffffd, 0x276, 0xe0, 0x91, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1ef543, 0x100) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x21c1, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xfffffffffffffffa, 0xbbf, 0x210, r1, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0) r4 = getpgid(0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x2a0002, 0x0) fcntl$auto(r3, 0x402, r4) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000000)={0xa02c, 0x40, 0xffffffffffffff80, 0xb, 0x6, r4}) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES64=r2], 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x11) ioctl$auto(0x3, 0xc1485544, 0xb551) pipe$auto(0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) socket(0x0, 0x2, 0x200) mmap$auto(0x401, 0x4000000000401, 0x603, 0x100000009b70, 0xffffffffffffffff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1d, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x1c00000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) 9.89378091s ago: executing program 2 (id=2472): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fddb9f250100000068005e7d61343f19b501681313b5addb465b743eb67bb6fd6ba6478a8ae0d1b7575e814bfc040cc2b227ef39d822"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x810000000000003a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) statmount$auto(0x0, 0x0, 0x400, 0x81) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) init_module$auto(0x0, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1e, 0x0, 0x0) 9.454345667s ago: executing program 2 (id=2473): close_range$auto(0x2, 0x8, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x121082, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r0 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) socket(0x23, 0x5, 0x2) setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000000)='\xe1', 0xbb) ioctl$auto(0x1, 0x541b, 0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x806) read$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x800) rseq$auto(&(0x7f0000000180)={0x2, 0x82d3, 0x0, 0x6, 0x7f, 0x6, "6421e5e1fd9d4305bfff1410bcea9cb6639ec98ed455ab3bec90d9a85ed060f036b47da7cd85baafda69cb04cf13a909e6024db64de3c6e2d0a993f2509b655cd89b39775b0e4c295c93ff8f1d04ea6a3a5292c0f2b3a650fdfd7bd48d140ad30d18341a137af868a620004165b17e5e244c290422a73af1ccf4747aabd5f44a83b8dfec345c43764e8422904bde42f0de781c2f414c8b16e90dd334f1d7c26810b72bde02dde1a14cb1200cf0776cd219061a84b7aec764424d14199346857fbf18ff5c908f7ac36498ad6fdec684"}, 0x9, 0x2, 0x8000) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 9.016686806s ago: executing program 2 (id=2474): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/:$]\x00', 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x100, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x60, 0x80000001, 0x4, 0x7fff, 0x9, 0x5, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x27ffd, 0x15a) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x4, 0x2a, 0xa4, 0x8000000009b7f, r3, 0x28003) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0x6, 0x80000001, 0x5) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82002, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x1) r6 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) 7.752560049s ago: executing program 0 (id=2477): ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0xdd) r0 = getpgrp(0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x5, 0x0, r0, 0x1, 0x6) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x200, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) socket(0xe, 0x5, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10000) prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0x4000005, 0x800000000000007) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy18/hwsim/ps\x00', 0x828182, 0x0) unshare$auto(0x3) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0x3, 0x541b, 0x10000000000402) open(0x0, 0x82082, 0x40) socket(0xa, 0x7, 0x84) socket(0x2a, 0x2, 0xdd2a) bpf$auto(0x0, 0x0, 0x11) socket(0x1a, 0x3, 0x6) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x104, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) 7.135907515s ago: executing program 2 (id=2479): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) bind$auto(0xffffffffffffffff, 0x0, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 6.046644718s ago: executing program 0 (id=2480): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) bind$auto(r2, 0x0, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 5.863166489s ago: executing program 3 (id=2481): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0x1a004}, 0x7, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r2, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x3, 0x6) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x7, 0x0, 0x4, 0xb}, 0x800}, 0x80005, 0x20000000) mmap$auto(0x0, 0x1a843f41, 0x0, 0x10010, r4, 0x80000001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb) write$auto(0x3, 0x0, 0xffd8) 5.648760404s ago: executing program 3 (id=2482): r0 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0xa2000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x80401, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) read$auto_ftrace_event_id_fops_trace_events(r0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x14480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x7fff) lseek$auto(r2, 0x7ff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x27, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(r2, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x58) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0x0, 0x80, 0x5, 0x7, 0x1, 0x5, 0x3, 0x100000000000062, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x68a540, 0x0) mprotect$auto(0x1000, 0x400003, 0x4) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, &(0x7f0000000080)=0x40000006) 4.235869559s ago: executing program 1 (id=2446): openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000440)='/\n\x10\x00\xb5p\x92 \x0f\x13it\xb5\xa6\xaa\xfbO\x17\xde\xa4\x89\xe6\x01\x13\xed\x1c\xc4\x9dt\xf0T\xb0\xe5\x9d\xef\xa9-\xf4\xc5\xef\x05\xb2\x9c\xeaz\xd8\xef}\xcc\r\xa5i\xe4\t\xb6\xd9>\x93\xc2\x18:BL\x8fe5\xf8x\xa5\xf6\xe1>\xa8\xb1<\xd3J\x9c\xa5\x9e\xe0y\xcd\xae\x89u\xb3\x8a\xa4', 0x6) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), r1) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES8=r4, @ANYBLOB="09002cbd0000000600b404f0818000"/27, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808) r6 = socket(0x2, 0x3, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getsockopt$auto(r6, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.idtoname/flush\x00', 0x1a1042, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000004c0)='\x00\x00\x00\x8f\xde\xa4\a\'V \x8e\x9b3\'4\x9b\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99\x96x\xd4\xa5D\xfa\xe5\xf9od^\xa6\x00\x00\x00\x00\x00\x00\x00\x0e\x87\xfa>\xbeaDs\xce,\xcfx\x89\xbc\xae\xcf\x83c\x1c\x90\xda\xbf\xad\xe0\xd6\xec-\x05\xcb\xee\x9f\xd2\xfat\x9a\xb65dFH\xa6\xbd[\xd2Ff\x7f?E\x9f(8\x88\x88\xeb\xcea\xea\x10\xc8\xf12-\x9c\xcd`\xb7WH\xa5\xccj\xc0\x03p>\xdd\xce\xaf_G9\x84L\r\x9e^>\x06\xca\xec', 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(r7, 0x0, 0x0) 4.025725477s ago: executing program 3 (id=2483): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r1, 0xc040564a, r0) mmap$auto(0x0, 0x80000000, 0x2000000000000df, 0x9b72, r1, 0x28000) socket(0x22, 0x80000, 0x2976) munmap$auto(0x8000, 0xfff) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x2, 0x0, 0x4) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x402000c, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x7) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) bpf$auto(0x4, &(0x7f0000000000)=@bpf_attr_4={0x9, r3, 0x5, r3}, 0xfffff815) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) bind$auto(r2, &(0x7f0000000140)=@can={0x1d, r6}, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.180649018s ago: executing program 3 (id=2485): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) bind$auto(r1, 0x0, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x0, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x1, 0x0, 0x0, 0x4, 0x0, [0x90, 0x0, 0x0, 0x0, 0x8000000000000000, 0x10000000000, 0x2, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) 2.934534064s ago: executing program 0 (id=2486): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) bind$auto(r1, 0x0, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x0, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x1, 0x0, 0x0, 0x4, 0x0, [0x90, 0x0, 0x0, 0x0, 0x8000000000000000, 0x10000000000, 0x2, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) 2.132024187s ago: executing program 1 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, '\x00\x00\x00\x00\b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 1.632357023s ago: executing program 1 (id=2488): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/vlan/config\x00', 0x41900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) r7 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r7, 0x8000) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000001180)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000, 0xdd6b, 0x1, 0x4}, 0x3, 0xd7e6, 0x4, 0x8, @raw=0x1, @raw=0x4, 0x81, 0x0, &(0x7f0000000140)="af8315759651119b13223eb0bea7e85f91630ce1fb75d27524193e5e812180614bc6966cd91345ec2c67dcc5d2ca73bd98c87c2f0b6cc1", &(0x7f0000000180)="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"}) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000003d40)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="010029bd7000fddbdf250a0000000c000600443f000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x4880) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_KEY_FLUSH(r5, &(0x7f0000004240)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004200)={&(0x7f0000004280)={0x360, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_UNSPEC={0xda, 0x0, "f64392b911970e5eec964a38535c584476813aad0e7c262ee7a42c78af0eaf9e686306e16fedb118bbe9a05848aeb94529749b61dd57d529d34ddb2ac94a4a7d893b03b9b1780649732847805a937f2e2ace8d04a0240e490d7ba3722bd23c3e415f0d8a54e797259fe34b754056d316434f4ed41152a5143079a322635246d12a959c1e3d2c41856b1cc372481d9bbcc687199efde1144aedb9cbaf2fb3cc258dda4ddc131f8be6d9242703964cbe9a0efbb9a2386c0e9a9d494f1b817c39691d370a30b0d592da58811a1c936721d8d272045c0f55"}, @TIPC_NLA_BEARER={0x1dc, 0x1, 0x0, 0x1, [@typed={0xc, 0xc3, 0x0, 0x0, @u64=0x6}, @typed={0xd, 0x67, 0x0, 0x0, @str=':.).@$*[\x00'}, @typed={0x8, 0x21, 0x0, 0x0, @uid=r9}, @nested={0x29, 0xec, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @u32=0x2}, @generic="7c58277e8ac736f8e5b2f5422bd2af4aa9aa92a16a35e7d92a7b6baa8e"]}, @typed={0x8, 0xcc, 0x0, 0x0, @u32=0x7fffffff}, @nested={0x17e, 0x89, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @u32=0x7}, @generic="a89dc607456515fa2efcb075ea890fe116f56aaf472ad576618872fccbcddaaed5d19801247762e53d0fefa662782d53e7903f90342e99f250a1a1bf8774f3c8819146ab2ca280019e9b0c9d323bdc1afc66a3a3c17c1cce653cc7", @generic="4bdd691e2148aa99e51dfe3094f0072b7f6758e76a795a80660f3dc02a6c8a63adef5aae32a28ed68145908be20afeb93dff3b4da6f054562fedc9e6f44b019133131446b95fd64bfb18d05ad14f071474a2b30f52a608233d72d809ce33181c1f0a13b1b5ed2b077faa2d5b70f3d0044d9cde81a1824f99d5961922164104ba41a0ff57cb32117ed7c4ee0453ed96626f5ffdbbd051eaa95b62e96b635b820f8075d357cb4961bf1a69588f352b0e7472d73d09efdb3ae9ca56d9724e1757b411a9591496a62527010aff178e017770d9bc6be3a360441f383c4bcbf985aa95eea03ef8adea1413f70eaecc497d62afd2f2d8b98426fdd48fde0940ec9765d21b63aad8450f53e49fee9fe398888121f19249", @nested={0x4, 0x6}, @generic]}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x1e, 0x0, 0x0, @uid}, @nested={0x80, 0x75, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="d571aab591b8f9365f490338d68e3132f7088c2f839acdb1cf06e8edf043afeb8da75b79c8fdef079a959433faae437cb84b25d64b6ece5b330266af0681e3d55a01405d440da8f398f1b270869bef2067745692d7db8656acf54d4124fad0428fcf73f86ce914998c6c32455ea95b65832a94ccef0a74be"]}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x24044405}, 0x880) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r13, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r12, &(0x7f0000003cc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003c80)={&(0x7f0000003b40)=ANY=[@ANYBLOB="20010000", @ANYRES16=r13, @ANYBLOB="00022dbd7000ffdbdf257e0000000b017a809922759a9bb13ebd54d94391eba0a84184c6c194f042890d0049006e6caae7b1a9353400000000140030002001000000000400", @ANYRES32=r9, @ANYBLOB="b154ef4865ea35748f445f741fcd6151c44197addb7956dc017fd1ab93e2440024a1cc0725bdd3afd729eaf408bcc6a133f20d2597d7cb79e18731c06da6d9eff22e9d650234eb4ffa5384be8565342eaf1ddb647fa93f1f30c33a52045d8edcbff21145def5abb46982a43445a96e1c8e1db9ffd1a939454a80351bd078dcf0d06ff07e6c4c6ecdd8cff381a3bbd763a65eb1dd140effa61ecbdc969c140929f064bf8854064f514481f62532e04f18349225ea2ba4ad00140c410e6a75d0edc579c3dabac2fe68fe81cbef0917725500"], 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x2114) r15 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000003ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a80)={&(0x7f0000004600)={0x2858, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x1030, 0x30, 0x0, 0x1, [@nested={0x1018, 0x65, 0x0, 0x1, [@generic="6e0521d7599d1834abae32be59ee168d5891b63396792458d9167444945ca628113d6de9151cf640d49a3ff2041f37f81333a82a4aabfad32f5b8192664cc901741731b799daf115e7b1ddc8e1e19a3a6cb75cb731b75b1deabb7fca601cb8571c7e5ee840c73d59721b3274688e8b0f040db2c1031f2c0e2db36b70f4d1869d8ade3d57ab995f0588eb2cc8b52eda45e63c5679092b018d14a0e6f779a1da4b6cfc2995d77b7f0ea135bbd0a1d73e8bd05698f7309d952b80cef1e617b7ea3733d703711c32f802a8188ecd73af9293c35e9d95667960fd86a396349b146a55251b97f33f1256de33b578cc92f74197eabc66749a4f8fc1192a063eb54a814f7676c4c8905f815180afc5fbf2dbbe990d82a99c9adc0fd529afdb6d3b5f729737fe0fd2720fa66fec28734153c9f5976ea28e3feec1fd33b865947febce8032b3e15aa93362afe610b165849bb06c734cee68c3824751487d73720e5fbee3ca04caf9b6abe17e63e1953d664201b8ced068a11c508830e01039ca7cead0fcbae88c82230ead2d8ce8e527cf246264a5b4966e629e3e768ab7757a7198e75fe59884e5e0a91c8f19a92d281bbc06b8ff8c5611a0d6f8e41b1c8205537ce52d3714717955f0fbdbd74127da69bda02f461665922013386f0508ceb16e93c7e99bef894a927a9f837b6596e13051187258cc50cb6c9b29fc0a7e0e1d07e5e38d1c6a5de068930d56ca396c79840e182a8225874fbd63b2521d22e39608f2a58e55f99b38d1a52672ae1d3e5a74da0ce1e8a2feb96b9a88601c58e0cf148c38dc566856f7b7c38002d533aeb056c6b34da910d2a2d1c06afd78d130799d8f861dda786ec5c2609b7cfcf6b032cbfc764b3c5bbafd8f30cf3a587a55dad1c2e92ac90b3e51b73946c8057a502cce9b21c910ed90b7cdce08815de869788d1bee64d9bde54d083d90545e3c943e5b533321cb9df43c169804397ad428f78838745ed47eea3e5168145257374ff66de108f53144c6337c751c09098bac97cf3b433eb92454bd3db9733df7f13496679d6e0dcfd7460353bd7c2c981b4c8e5ad12b63df55f5e5a2e81a389d3f3adfbfdf246e5d73025410062939d7982b53903cf9505e5a28f86bef5cb4fa35b0b10ab7853951b496309f4a0524f951b473f6884561060439f2f97df16794d2d1ac620bced0c613cfca920752421c003aed66a04703c41fd49b323041bb7e27962b6c784d1f2a5d210a609e7070a6acd11d6d2a6f0d823a6a8d6f9fd63f2781ed972d9bb880986c9a7d4079367a806a0fd0189d1c547df14839eb2f7def910e4eee143e8861b1c726a9d0508ed8d2d2aea39e1936fd269596abe8f817681b0f128f3a8af0422e3d1f078eda98f4639102cce03eddc2ddbec6e9412aa2a9f2eeb27bbc329fe9f34f93b65b7c30fdf56d6ba62f4ffc54a554bd26ac6f4d96d6c544674a61892bf0356696bc9bcc36551f448d5ca50d5b83cfec58450ce1007afe739410316b3f67c4ec480ca35f62bcc8e71e45d1a02028dbfe28aa3ece81898f33e4c50efb9d2e57cfa68d227afbe5a2efd9924598ea3b23f3385e9f5e1c7b8979befb7fcbca284b6f91ffe5825fdd62be9f1e1207a319c595f3b086111e8ee40646f7790c57af81f3d628f8fff3970850022466770ee9ef635140c17b0cad2f1b6596ccebc5644f9419f9552df6c0c188eb7d9b5b63d91f8de8096bcc8bcf82047a9f14647359e09226dbb8336fe271e9e35223b4ba4d6d8fd740d5a39d6eb3bdd0670207eeb06e7694b84aab00915b663f97aa9678a7d99d9bf3ecd08e3a89abc6f96271c8f19990d3bfb1a9c76affbdcc9fbebf5eaadb74b8fed0ed246ea415b26e649a3e9f490369cd6115ea8c269542cf546f2563bb812a0280e15654f15e4fbcb3de70f86fde52e6276b679cd61d8eb6f172daf2233d728fa85b173b2081afb9b6b4f65e3e78033e87d835b5a6dc09fbf5cf2a245144da815c997c948e14c856a34b5858aff6353db5aa0a704257fdcf3cdb125be974ed54195f93c569b5b30df2363d22b8b9f6589303970ce71d8106ddcfafe539ebc74a3a11ab1e57edf563cbba86c0fb2aed867adb7237a19f71a50e22e7adc36e02c5b1f75bf1d008177e0aa44d27e8ead050775023087d83d66e845784dff8a761c336393d0fdf497b7e1f0b4840cd826dec82c4a361e82c49df3060975d874478ccd619c5d77c8ef7569001ee9bcae2039296c450b57070f6f04c2678fd66334594700b07d93ea252756f3e6275f671dda6337dd6c4bf978e9eb80783c4b5968bc134bd412de03e68f0401c621058b9f90e5cdeb03780addd54c61237c54b96bd0f1f885333283bed3a673436ee1199517ee1be56457cac599af7c3743356d8a0730c36349aa4271c0bcada096a2a900210ce154535b54248f8a6dd726115f11795b6af7e2085a61800d1a8f8fb54caebaccc9aef0edcf60c076a6fd34c56eeda7497986a573ee797ebb166d269a19a96fac4a58f6442d22c7df6198d3c8a392b91cc83fd5324e319a25949bbd47312a1b6f02cfaff98cbc716d982e567cdb58bd8b80d94256563cc5e44a3b978f0ad1f30ff45fc36c060e11b0b4b4f5b2aa122d9353433047340d8f9f73ad7e673faeb8f40719c633f7e39fc0be8e53b129265c977c2b860708691f01080f81d5588553c6bfb2840eaadde27af9ec73e8511b8cafb804d544d321c41ef05b181c9b4641f250a1479c96b0b42aa8c98f1703c9cd160371247a4cc680c7867bce312a8bec8df73d30bb832dd0d7ea5cc2da79d1faa6be65065b765fbffad9c3bb0da192f9f6eec6525fd8fa20ed0fccd493f2f4c4745492f7d22a54caf52c3c783428b2c8f1fa209acae3bb7d4c6c4c1bcde8eeeaf59586bf819f5e01fb4343b46f68192be95638fe571a5e9f771082ef4c03a5cdbc89c4a51ed8d2f92d16043e191bb3c06b42b4435c5d708db802c517de6f373d1285b37cc3ed7dfecbf59723746fbf19a29593db18849af5c507c19cf8ed4be21c97d807cadbbfc59085328b2bd7f7ee78e1a23a08cba66c150a7de8062cd552b5630d3a5cfe1046e289e3a912089a34e8e4c35bdc544226868670218b40e49d52a2de3521c1be07a800c028e634ee3cf4f36fcd2df326b2114fc2c71799e6af28520a0b44920221e2ae1b625e7a0ab7c891b1dd01295b9c211e562874797294f27c21f8e60ebca094207eadee390ad2d059c8fab2a7b3f4373c6f71d5ce3ff38c6543cadd3cb4781aed02eec4ce09fbcc59e8e213b62ee86fc269551370d16496e1484158c89a6bb9f690382bfabe62975b7aa2748f9949902a5ac99cf6b2fd39e1e82831d5cc2b9415295f3177ced3777b7bf799f6b55d6054d95fd71718cbd1d27ad6194a1eb08a60c518de22f8bae4ec47d184874d1d6dcedbbf667495837f4224089045818aa650a20cf2e82fe557152669305b0fd10ba78f965324362d983c251a8fe9d3d1aa33f4e7512a09e8946c79023d15617ec6265481421c9175b9107966c5870237ba20d1a81facfdad5eead618a622747d2bcf11f3c369f6aa7fcd6706a032fd6a8c7c3662b3cabb74e593b3ce9fa6c2d7496dbf95b1b7f620d6518e333789388b7ab2fa90ac61babdeab9a5ff4e0b1d9c6277bfdd6896c8b0aa21503458637619b2338d66f6a67ac8535d33982a52e9877b76cb243b10cf22c73a535cccc94a8e65dc928ee24fcfb4f76a7ca31bed431897e030e7482052c4690e3b0d96f7f8b090a41948c7e032f2221ad0d1e077e995c11d40111c83f0b534a99166aa67707a2361fce4db1a34f0c62395705600c3499d7b68707c2a15426b0a81fa56be59dbc692daf3f6024dd8c32c073d9f2adfa8e97bd0fdd4ad0c16807c7443ddeceaf1f408b1706949fb1a575b5a82326bf327323818d7c4f4ffa3106c152306c66967070f6833fc5daeef9f3329435af25973f10c9db1a3a8581e27b3d8e5804dae7ad8198695da9fe4fb14462eac365e3b59cb4d7a023a8300e30ff4b4ea81502cf04a7dea0e47635e81525c0e616da40f9728085bf1e0793b7d44755619a6d7038da7ea24b95d45f3af8c902505f470bd81cac54e784d12435c2a3b3559efd0656df5aadef5b5421c2f1e51e04ec3b5d058830a092cb99954c9d36a6c399a8ad3939c61457c1bdaf68810bf5c05e643a110947e2b89eb8e177ee2ae5bc756223c675ec6daa9e84b0d9cbde6f22bf11c0bba209ff2a20b1ede1fab4e021077bddb5a09be84af20cd57f0f2c84e08cb2afa48c0dfb817f50ecd7a6c8b63eac7c3f6a977d4350bbff4da46b846d5558e1697650e86a5cb58328b371bc45db92d3ec403a7f5f3fedbad80fc7a90c6060ae1cc74912caad8a26c059e1b8dbce4333895e57a9cf599bf28306fcde60d6b0cf5cd58cf6c71ad783e1dce5ec952be945b1e9c036e7b1fccabfe2100f833e5b079ae4ceb677fd6615366d9f10ac35c8f3cfc3844b565fada07d02e05c02a83550d7cc7d5a588379c7e02b6507e8648a239cf929c00710fd33461b8271702868c84024f0a6795809cdafdcdb2640c18df30d216ed370d1dd9bb430ee96f5177b4993ad4578fbe12ca3b0f669ae8f48913f9ccac6e49e8ba923e00f03a7c1fe29861439c6759cfa13311729caa842ef8603ba52daabdc493323a0f83adf20bb9eb8b0d8414e054a135c53745514a412c13e7e26df7d97aabcd960b5e6322f1ecd40ce7bd7f88e3c89be7c41168fee4a3f2e5e3c08d52ad0422ad866cf9660fef50266fc82d8364ba9ebedb40cbe3090421765cc46837907e0b172dbd01780cbda0fddf1f98a1102ec814ba15e4e9edc4336ee4766671fd4a66564e8b201fb709baca86c785cec7907ddaead012cabaabd3820db745bfb3cfaaeb0f55125eeff3fca1d0f79ae80251791ea1b63d7d30b96d8011ba392f20f2c6807a8a5dd77a00998cc29cdc3baf5a301d077d3a1eb9414819f7307f26856354e66a2dc88b37b83ee4525fa667769253e707e45a96a5ba7d6bf4e00dbcc5db7c2999934bf69a154c014c49abd647a01159b8f231f9c951dc27f26c5aef8a3cec3361f53c536632482f92130dfa8b85ba9bb5a69c6543799aaf66e16c04280495f3d8c6d9b6f7afdefd2ea490457a9212e017e2f85d40c7a356dfd7ac629f24bf78f583979148972ac8db6b4b0df2f8a0965e49715f3139ec74f187059caffbdc490134b6baefe8a5ffe385a3015aafb67be46a08dd03fa4240a001647b5876c8ae4aa8b61035c7a1a0dacd23b76d2c0dc8b95e2e750d745f1b3de4561607defd673fb2be7152f1230bdcfd11a90582463d6a7b852134093d95c5075242267952003b1d4d64920e4ec4e1dce5f75e21e167acbaac5ec3e9e20e76ee60176749d6c5af2efb6d2d324e7fbb0f47934d52b679e75bf7481f69461e183970a8e4215b6468925183717deb06fc49fc08f25477fba9fcee20ec7a2c14cc005ce6a51dc3cb8be022bc57dbdaee4bde3b3ba55b261880835b08bf57eb741ad96254d8acdc1273c5e4f4072c52b0eae4c7f113d4f9f6be56ddd8cd5c7f0d26d344c5a9c08eabe4b16c733c0536c422710ff9653bd3906a7a239b5ed2de99b070d840158d5d3ce8ddc018cc6420a218dd94c935f72593ff169bcf24673dfe653304b42578432b75bad62b22ae623e2ad6856634cfe3a78d249c9c3586600782337f1ef37be894b88a9b4c2afec3c45d5ac629e294543ce05de7f81065804c7c279c99c7091ce0bcbf098c42b09bc2f611c67278e05", @nested={0x4, 0xd2}, @typed={0x4, 0x80}, @nested={0x4, 0x84}, @typed={0x8, 0x86, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@local}]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x355, 0x2d, 0x0, 0x1, [@typed={0x14, 0x150, 0x0, 0x0, @ipv6=@private2}, @nested={0x207, 0x5d, 0x0, 0x1, [@generic="11024ddc05b545c34527116bfecd6b49db59e75380dfb3fbc6734211b4b2dcffd3e50b642e2286d752fd13b00e07fbaf079c53033fde5602b2786b7d4564f201969b030f7acc60e9164f70a07650f2363c5207325520118f4ec33df7c84eb86438d2544d9cea9f7ccfec1679f366d4f73c5b1c62e90ab429ee5a67e1dcfb2066b199feef9c5d4c1c64eeb2416f0a1cbc9a75c37de416647982b2a4dff2d39969f5d5b9d33fadc414dac8956776a864ecb000d469b89551479701f074319138e79b", @generic="ea35dbee79cc5c14c0fcb29e56cc499cf1d5fcea3faab43a41ab534f2df15ecd853cdab6c1ba314995e54198", @generic="f93db606e6f276639311c30fa409f193ec6a6b5fbc258da1b96be473a48117d1b82ee1f2fe824752d6e8bc7b4f06be0da2a932403b03fb24cd07326a1eac6a0b58effbe4ae13b04d5423d432095d531c64408e7dc1e81f55f8530c54c56fcae85eab83b61e342d16a460c9bd345d4c519d86135a1736f0fcf2e5f537546b465755a571be6d0aabeea23f3570f58415a8afc15c64f31a5716592750db07bae1e54046209004771150646c562dff6a02cc26c9e251dd4bcc7b673858d4118d2dc6a80afd36109d837c571662e4aac15d627293fdd81f4c7581717b8a9600aa14bb739c7b04e7ba", @generic="40c9b8e2007233702af65d83a8096d76a3edd057ee70d8e62ec46feafa14f047", @nested={0x4, 0x5f}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @pid=r8}]}]}, @generic="331bbff9abb1df1882534c0fff4b22cc59eca7940948bf2eadfceab5d9423c3978349f6f1e15c17d3af8cb9a75adbec6e5fa1765aca88f6435f96faa32b2581984", @generic="3f4442143c8093c397a9abcd66c8bca6ed14f147fc4646981571cb13988e44a0d17c390f208b7802b1a5c2f50a3a77aa85782c49106b1d5cfda93ae47792d718e88e175f166b86d55cbd1a5271a3bef1600da609a754e8b1c7b55e8c695171352246da719fa088c444b5f0bc0de4e17b6292aa7a05fdb3fd70bdeb5a2106ddc04c7d4727c67ab3565e6c9cf1479aa80458d0e89769d56dab", @generic="865258c3f017868f6fe0354ce8604a3d56c52ca7441894f3d949b28f7b67ef3810f7cd1cc71c7b7cc83336f091b9a11893dc25f2ece3e08dcd914eaf60cffbfdc02226354485de44a96e58b125f684968c6669926cf45bef783ff42a"]}, @NL802154_ATTR_SEC_DEVKEY={0xe3, 0x2f, 0x0, 0x1, [@generic="10a262ae7556ab5c03bcf5c2fd227570a603aaa3fe39ca224c2f7b1c504f7e9974d5ce06efc944981d81d1ed1b19579be74a03bc75131baf460ae40fe0a27545cf9a805cdb5cc0b9717fd1dc4342cbae3b59770cd94836c17e296912dfc13b8b1c9de3c4c53ed46a8c12907393e9b6a30ebc35a0f2a7909d7aa939ec4528533b3620d4501785b1ec563da52ee0de36af8d82a9e13a421e900d7eae48a4ab297fe94b7860ed0f7a26d1182b595cf05524e9b9fad86dbaacb1b421b81e4fe3f2f24f4e16ca0476cd2fe792cad4e2d154308f5a19549c15a8b7610d4337183df1"]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0x3}, @nested={0x14, 0x65, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@loopback}, @generic, @nested={0x4, 0xf7}]}, @typed={0xc, 0x11a, 0x0, 0x0, @u64=0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0x1380, 0x2e, 0x0, 0x1, [@nested={0x17c, 0xa, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="6aeb24d8ea6020fc64ee7f9b8c495adbfa5927d43779a87ee278318e2bc00b856d80fedda30b212e57758bf545c17d20924f206b2ff77f9ffec1ae4d1d6083a30de900788aa673b54f971b9909f8a6c8f4edcb9900b947691ae0f6f2820741f72ced8776b7c2ad628b4630946c770d4270f56a11752b33c46d55e1f991d0012aca9fa57d24f5e8af157d0ca2411a16c9ff15cea9347fb2e6f5393671f64e4af5a788fbfd1e07388485712cffeb1bfd9e602672063a1a1a211b5a0d8e91158c02cf4d6120659889bc027842b7", @typed={0x8, 0xe6, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@private1}, @generic="c1ec99f3e580e32087edbbca7d53269f3b3d31cf27e1e6d50cd690a368992399c5137d2729d4442486f741f3b747377ef404a4a2ee51ecf9bd63bd15a179476b58dd2c679c332f4cd16dc46f98420b287a213c148dbadcbbcc7122f1a80f2873512e68461e56dd79c2f5d286b7c4bbb7c1dcac843e7efa0aa1795171477cd1861407abbd"]}, @nested={0x1170, 0xec, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="8339a7d77ec4164edfa832cf40b2965e06c971c7bfb354590f5c5d6d3e6c046ca6c7af5381de90551e0d0d706a71d89208e2bce96218360236edb94b5c92965402dad0c7122f46133805fc7056b1e15b385128d18842d175d300f617ab14bcc98fe2d2c6a2d44ce4c448115cc073e1c5f714d10adb3a219ec0c2488205a1520915af6f9eb28e18dceeee45abfb4a5c49eb4bed9ebf7b1dbb617d09e4b04b44eb6ba9fe1702ac5c514876297811adfa3fd93793515b65de24278a47b6e8c2279dfd478b283965a43ddcc9d61071449b71ce2d28c16ef28d572140d84bb7", @typed={0x1004, 0xc2, 0x0, 0x0, @binary="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"}, @generic="5cda2a78e973e97119f8f69cc061527fc044ad16ec22197c644b5c4e446b16b8bb08d44fd4303d406c8a03028aa88f8b0e949bba8f77f5efc04d6ad20eeebbfdb8bf93", @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="9a8d0d70", @generic="d51b8709fdc4ea965699d6fdf50b7b720454007d", @typed={0x8, 0x142, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r9}]}, @nested={0x90, 0x43, 0x0, 0x1, [@generic="145c598b5ae8be0662da591c7f97d1348d20f68a3f454e21a0ae213bd9cf3a3fb868cd9e86f6440e551f7687ec5d60b75040051635d674a7a66e25736e45a9fe71fb1b82764c19e75e5446f27fe48a19edeb2a9c06203c931b4a837707d0fa428038d9e3c16c2464fb85af00b0c31c8d4f869747e0ed985a", @typed={0x5, 0xa3, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xf7, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x35}]}]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x2858}, 0x1, 0x0, 0x0, 0x9b3bec57c387f9ea}, 0x20040000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x1, 0x2) kill$auto(r1, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x5], {0x6, 0x3, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x4e, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) 1.555069404s ago: executing program 3 (id=2489): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop2\x00', 0x82, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c0a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) msgget$auto(0x0, 0x77d9) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\xff'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x1, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x1fa, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd05, &(0x7f00000001c0)) 1.070814265s ago: executing program 3 (id=2490): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x1a080, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto_SO_ERROR(r0, 0x11e, 0x4, 0x0, 0x0) (async) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/stations\x00', 0x6108c1, 0x0) (async) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r1, &(0x7f0000000080), 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (async) ioperm$auto(0x8, 0x100000000000004, 0xc) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x21, 0x3, 0x9) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0xc8101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0xd, 0x200000000001, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x7f, 0x5e, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x5, 0x6]}, 0x0) (async) write$auto(r2, 0x0, 0x6) (async) futimesat$auto(r4, &(0x7f0000000180)='./file0\x00', 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x103a40, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/pp_hold\x00', 0x400000, 0x0) (async) r5 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r5, 0x11, 0x67, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=2491): write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xdf) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fadvise64$auto(0xffffffffffffffff, 0x80005, 0x9, 0xa1a0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x230, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x20c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13e, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x38}, {0x30}]}, @NL80211_PMSR_ATTR_PEERS={0x104, 0x5, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x0, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0x0, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb) kernel console output (not intermixed with test programs): ? __pfx_do_sys_openat2+0x10/0x10 [ 533.633254][T12380] __x64_sys_openat+0x174/0x210 [ 533.633288][T12380] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.633342][T12380] do_syscall_64+0xcd/0x490 [ 533.633392][T12380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.633434][T12380] RIP: 0033:0x7fe33638e929 [ 533.633460][T12380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.633491][T12380] RSP: 002b:00007fe337216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.633521][T12380] RAX: ffffffffffffffda RBX: 00007fe3365b6080 RCX: 00007fe33638e929 [ 533.633543][T12380] RDX: 00000000000206a1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 533.633563][T12380] RBP: 00007fe336410b39 R08: 0000000000000000 R09: 0000000000000000 [ 533.633581][T12380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.633599][T12380] R13: 0000000000000000 R14: 00007fe3365b6080 R15: 00007ffe41eb3538 [ 533.633641][T12380] [ 534.004229][T12380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.397625][T12435] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1527'. [ 539.017104][T12433] zswap: compressor not available [ 541.032511][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1536'. [ 541.297610][T12464] FAULT_INJECTION: forcing a failure. [ 541.297610][T12464] name failslab, interval 1, probability 0, space 0, times 0 [ 541.411280][T12464] CPU: 1 UID: 0 PID: 12464 Comm: syz.0.1537 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 541.411335][T12464] Tainted: [U]=USER [ 541.411345][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.411362][T12464] Call Trace: [ 541.411372][T12464] [ 541.411384][T12464] dump_stack_lvl+0x16c/0x1f0 [ 541.411437][T12464] should_fail_ex+0x512/0x640 [ 541.411477][T12464] ? fs_reclaim_acquire+0xae/0x150 [ 541.411513][T12464] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 541.411551][T12464] should_failslab+0xc2/0x120 [ 541.411580][T12464] __kmalloc_noprof+0xd2/0x510 [ 541.411634][T12464] tomoyo_realpath_from_path+0xc2/0x6e0 [ 541.411679][T12464] ? tomoyo_profile+0x47/0x60 [ 541.411727][T12464] tomoyo_path_perm+0x274/0x460 [ 541.411756][T12464] ? tomoyo_path_perm+0x260/0x460 [ 541.411793][T12464] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 541.411874][T12464] ? __pfx_ima_file_check+0x10/0x10 [ 541.411937][T12464] ? hook_file_truncate+0xc7/0x250 [ 541.411986][T12464] security_file_truncate+0x84/0x1e0 [ 541.412025][T12464] path_openat+0xc10/0x2cb0 [ 541.412099][T12464] ? __pfx_path_openat+0x10/0x10 [ 541.412148][T12464] ? __lock_acquire+0xb8a/0x1c90 [ 541.412195][T12464] do_filp_open+0x20b/0x470 [ 541.412239][T12464] ? __pfx_do_filp_open+0x10/0x10 [ 541.412322][T12464] ? alloc_fd+0x471/0x7d0 [ 541.412373][T12464] do_sys_openat2+0x11b/0x1d0 [ 541.412405][T12464] ? __pfx_do_sys_openat2+0x10/0x10 [ 541.412456][T12464] __x64_sys_openat+0x174/0x210 [ 541.412491][T12464] ? __pfx___x64_sys_openat+0x10/0x10 [ 541.412547][T12464] do_syscall_64+0xcd/0x490 [ 541.412600][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.412633][T12464] RIP: 0033:0x7f769098e929 [ 541.412659][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.412687][T12464] RSP: 002b:00007f76918c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.412718][T12464] RAX: ffffffffffffffda RBX: 00007f7690bb5fa0 RCX: 00007f769098e929 [ 541.412739][T12464] RDX: 00000000000206a1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 541.412758][T12464] RBP: 00007f7690a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 541.412775][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.412792][T12464] R13: 0000000000000000 R14: 00007f7690bb5fa0 R15: 00007ffdc643ca68 [ 541.412832][T12464] [ 541.424784][T12464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.668138][T12490] random: crng reseeded on system resumption [ 543.676251][ T8564] ERROR: Out of memory at tomoyo_memory_ok. [ 543.714184][ T8565] ERROR: Out of memory at tomoyo_memory_ok. [ 549.753405][T12559] ERROR: Out of memory at tomoyo_memory_ok. [ 552.060417][T12581] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 552.980525][T12604] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 553.205686][T12609] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1578'. [ 553.981717][T12624] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 554.982761][T12651] random: crng reseeded on system resumption [ 555.003400][ T8565] ERROR: Out of memory at tomoyo_memory_ok. [ 555.020077][ T2910] ERROR: Out of memory at tomoyo_memory_ok. [ 555.020830][T12652] FAULT_INJECTION: forcing a failure. [ 555.020830][T12652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.064171][T12652] CPU: 1 UID: 0 PID: 12652 Comm: syz.0.1591 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 555.064231][T12652] Tainted: [U]=USER [ 555.064241][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.064256][T12652] Call Trace: [ 555.064266][T12652] [ 555.064276][T12652] dump_stack_lvl+0x16c/0x1f0 [ 555.064325][T12652] should_fail_ex+0x512/0x640 [ 555.064372][T12652] _copy_from_user+0x2e/0xd0 [ 555.064416][T12652] snd_seq_oss_write+0x397/0x7d0 [ 555.064463][T12652] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 555.064498][T12652] ? futex_private_hash_put+0xc7/0x240 [ 555.064537][T12652] ? apparmor_file_permission+0x251/0x400 [ 555.064572][T12652] ? bpf_lsm_file_permission+0x9/0x10 [ 555.064607][T12652] ? __pfx_odev_write+0x10/0x10 [ 555.064633][T12652] odev_write+0x51/0xa0 [ 555.064661][T12652] vfs_write+0x29d/0x1150 [ 555.064713][T12652] ? __pfx_vfs_write+0x10/0x10 [ 555.064751][T12652] ? find_held_lock+0x2b/0x80 [ 555.064781][T12652] ? __fget_files+0x204/0x3c0 [ 555.064829][T12652] ? __fget_files+0x20e/0x3c0 [ 555.064882][T12652] ksys_write+0x12a/0x250 [ 555.064922][T12652] ? __pfx_ksys_write+0x10/0x10 [ 555.064975][T12652] do_syscall_64+0xcd/0x490 [ 555.065025][T12652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.065055][T12652] RIP: 0033:0x7f769098e929 [ 555.065079][T12652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.065108][T12652] RSP: 002b:00007f76918c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.065137][T12652] RAX: ffffffffffffffda RBX: 00007f7690bb5fa0 RCX: 00007f769098e929 [ 555.065157][T12652] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 555.065175][T12652] RBP: 00007f7690a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 555.065192][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.065217][T12652] R13: 0000000000000000 R14: 00007f7690bb5fa0 R15: 00007ffdc643ca68 [ 555.065254][T12652] [ 558.085226][T12682] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 559.546243][T12705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 560.553117][T12720] can: request_module (can-proto-3) failed. [ 560.719550][T12730] FAULT_INJECTION: forcing a failure. [ 560.719550][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.794325][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.3.1609 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 560.794373][T12730] Tainted: [U]=USER [ 560.794382][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.794398][T12730] Call Trace: [ 560.794406][T12730] [ 560.794416][T12730] dump_stack_lvl+0x16c/0x1f0 [ 560.794463][T12730] should_fail_ex+0x512/0x640 [ 560.794507][T12730] _copy_to_user+0x32/0xd0 [ 560.794552][T12730] simple_read_from_buffer+0xcb/0x170 [ 560.794591][T12730] proc_fail_nth_read+0x197/0x270 [ 560.794625][T12730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.794658][T12730] ? rw_verify_area+0xcf/0x680 [ 560.794693][T12730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.794727][T12730] vfs_read+0x1e4/0xc60 [ 560.794770][T12730] ? __pfx___mutex_lock+0x10/0x10 [ 560.794811][T12730] ? __pfx_vfs_read+0x10/0x10 [ 560.794856][T12730] ? __fget_files+0x20e/0x3c0 [ 560.794906][T12730] ksys_read+0x12a/0x250 [ 560.794942][T12730] ? __pfx_ksys_read+0x10/0x10 [ 560.795001][T12730] do_syscall_64+0xcd/0x490 [ 560.795049][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.795077][T12730] RIP: 0033:0x7fe33638d33c [ 560.795100][T12730] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 560.795125][T12730] RSP: 002b:00007fe337237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.795152][T12730] RAX: ffffffffffffffda RBX: 00007fe3365b5fa0 RCX: 00007fe33638d33c [ 560.795169][T12730] RDX: 000000000000000f RSI: 00007fe3372370a0 RDI: 0000000000000004 [ 560.795185][T12730] RBP: 00007fe337237090 R08: 0000000000000000 R09: 0000000000000000 [ 560.795201][T12730] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 560.795218][T12730] R13: 0000000000000000 R14: 00007fe3365b5fa0 R15: 00007ffe41eb3538 [ 560.795252][T12730] [ 561.625459][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1613'. [ 563.219377][T12772] ubi0: attaching mtd0 [ 563.267232][T12772] ubi0: scanning is finished [ 563.283494][T12772] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 563.590150][T12772] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 564.518115][T12800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 564.542850][T12800] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1628'. [ 564.568831][T12800] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1628'. [ 564.707554][T12804] FAULT_INJECTION: forcing a failure. [ 564.707554][T12804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.744692][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.2.1629 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 564.744740][T12804] Tainted: [U]=USER [ 564.744749][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.744765][T12804] Call Trace: [ 564.744774][T12804] [ 564.744785][T12804] dump_stack_lvl+0x16c/0x1f0 [ 564.744834][T12804] should_fail_ex+0x512/0x640 [ 564.744877][T12804] _copy_to_user+0x32/0xd0 [ 564.744916][T12804] simple_read_from_buffer+0xcb/0x170 [ 564.744949][T12804] proc_fail_nth_read+0x197/0x270 [ 564.744981][T12804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.745017][T12804] ? rw_verify_area+0xcf/0x680 [ 564.745051][T12804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.745085][T12804] vfs_read+0x1e4/0xc60 [ 564.745130][T12804] ? __pfx___mutex_lock+0x10/0x10 [ 564.745196][T12804] ? __pfx_vfs_read+0x10/0x10 [ 564.745248][T12804] ? __fget_files+0x20e/0x3c0 [ 564.745301][T12804] ksys_read+0x12a/0x250 [ 564.745339][T12804] ? __pfx_ksys_read+0x10/0x10 [ 564.745393][T12804] do_syscall_64+0xcd/0x490 [ 564.745440][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.745468][T12804] RIP: 0033:0x7fe242f8d33c [ 564.745490][T12804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.745517][T12804] RSP: 002b:00007fe243ec3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.745544][T12804] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8d33c [ 564.745562][T12804] RDX: 000000000000000f RSI: 00007fe243ec30a0 RDI: 0000000000000004 [ 564.745578][T12804] RBP: 00007fe243ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 564.745595][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.745611][T12804] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 564.745650][T12804] [ 565.289595][T12819] FAULT_INJECTION: forcing a failure. [ 565.289595][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 565.324452][T12819] CPU: 1 UID: 0 PID: 12819 Comm: syz.1.1636 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 565.324504][T12819] Tainted: [U]=USER [ 565.324514][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.324531][T12819] Call Trace: [ 565.324541][T12819] [ 565.324553][T12819] dump_stack_lvl+0x16c/0x1f0 [ 565.324602][T12819] should_fail_ex+0x512/0x640 [ 565.324644][T12819] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 565.324704][T12819] should_failslab+0xc2/0x120 [ 565.324732][T12819] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 565.324778][T12819] ? new_userfaultfd+0x79/0x3d0 [ 565.324815][T12819] new_userfaultfd+0x79/0x3d0 [ 565.324846][T12819] __x64_sys_userfaultfd+0x4b/0xb0 [ 565.324876][T12819] do_syscall_64+0xcd/0x490 [ 565.324921][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.324949][T12819] RIP: 0033:0x7f58b598e929 [ 565.324971][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.324996][T12819] RSP: 002b:00007f58b68a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 565.325023][T12819] RAX: ffffffffffffffda RBX: 00007f58b5bb6080 RCX: 00007f58b598e929 [ 565.325041][T12819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 565.325058][T12819] RBP: 00007f58b5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 565.325074][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.325090][T12819] R13: 0000000000000000 R14: 00007f58b5bb6080 R15: 00007ffebf2a0e08 [ 565.325134][T12819] [ 565.495355][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.453159][T12840] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 566.473518][T12840] CPU: 1 UID: 0 PID: 12840 Comm: syz.2.1639 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 566.473568][T12840] Tainted: [U]=USER [ 566.473577][T12840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.473592][T12840] Call Trace: [ 566.473602][T12840] [ 566.473613][T12840] dump_stack_lvl+0x16c/0x1f0 [ 566.473657][T12840] sysfs_warn_dup+0x7f/0xa0 [ 566.473694][T12840] sysfs_do_create_link_sd+0x124/0x140 [ 566.473735][T12840] sysfs_create_link+0x61/0xc0 [ 566.473770][T12840] device_add+0x62c/0x1a70 [ 566.473803][T12840] ? __pfx_device_add+0x10/0x10 [ 566.473829][T12840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.473872][T12840] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 566.473933][T12840] wiphy_register+0x1c9c/0x2850 [ 566.473963][T12840] ? netdev_run_todo+0x864/0x1320 [ 566.474005][T12840] ? __pfx_wiphy_register+0x10/0x10 [ 566.474057][T12840] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 566.474093][T12840] ieee80211_register_hw+0x24ac/0x4140 [ 566.474141][T12840] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 566.474177][T12840] ? find_held_lock+0x2b/0x80 [ 566.474209][T12840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.474254][T12840] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 566.474285][T12840] ? __hrtimer_setup+0x176/0x280 [ 566.474333][T12840] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 566.474397][T12840] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 566.474443][T12840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 566.474482][T12840] ? __asan_memcpy+0x3c/0x60 [ 566.474524][T12840] hwsim_new_radio_nl+0xb51/0x12c0 [ 566.474569][T12840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 566.474623][T12840] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 566.474659][T12840] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 566.474703][T12840] genl_family_rcv_msg_doit+0x209/0x2f0 [ 566.474740][T12840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 566.474773][T12840] ? trace_cap_capable+0x18d/0x200 [ 566.474812][T12840] ? bpf_lsm_capable+0x9/0x10 [ 566.474844][T12840] ? security_capable+0x7e/0x260 [ 566.474889][T12840] ? ns_capable+0xd7/0x110 [ 566.474929][T12840] genl_rcv_msg+0x55c/0x800 [ 566.474970][T12840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.475004][T12840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 566.475060][T12840] netlink_rcv_skb+0x158/0x420 [ 566.475088][T12840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.475123][T12840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.475174][T12840] ? netlink_deliver_tap+0x1ae/0xd30 [ 566.475210][T12840] genl_rcv+0x28/0x40 [ 566.475239][T12840] netlink_unicast+0x53d/0x7f0 [ 566.475276][T12840] ? __pfx_netlink_unicast+0x10/0x10 [ 566.475319][T12840] netlink_sendmsg+0x8d1/0xdd0 [ 566.475357][T12840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.475404][T12840] ____sys_sendmsg+0xa98/0xc70 [ 566.475438][T12840] ? copy_msghdr_from_user+0x10a/0x160 [ 566.475479][T12840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.475507][T12840] ? preempt_schedule_thunk+0x16/0x30 [ 566.475549][T12840] ? try_to_wake_up+0xa2f/0x1680 [ 566.475584][T12840] ___sys_sendmsg+0x134/0x1d0 [ 566.475627][T12840] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.475668][T12840] ? futex_private_hash_put+0xc7/0x240 [ 566.475739][T12840] ? do_futex+0x122/0x350 [ 566.475781][T12840] __sys_sendmsg+0x16d/0x220 [ 566.475824][T12840] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.475865][T12840] ? __x64_sys_futex+0x1e0/0x4c0 [ 566.475936][T12840] do_syscall_64+0xcd/0x490 [ 566.475986][T12840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.476014][T12840] RIP: 0033:0x7fe242f8e929 [ 566.476037][T12840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.476065][T12840] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.476090][T12840] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 566.476108][T12840] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 566.476126][T12840] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.476142][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.476159][T12840] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 566.476198][T12840] [ 566.588207][T12818] FAULT_INJECTION: forcing a failure. [ 566.588207][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 566.589636][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.597374][T12818] CPU: 0 UID: 0 PID: 12818 Comm: syz.0.1632 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 566.597420][T12818] Tainted: [U]=USER [ 566.597429][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.597444][T12818] Call Trace: [ 566.597454][T12818] [ 566.597465][T12818] dump_stack_lvl+0x16c/0x1f0 [ 566.597509][T12818] should_fail_ex+0x512/0x640 [ 566.597546][T12818] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 566.597588][T12818] should_failslab+0xc2/0x120 [ 566.597613][T12818] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 566.597651][T12818] ? anon_vma_fork+0xe6/0x620 [ 566.597692][T12818] anon_vma_fork+0xe6/0x620 [ 566.597725][T12818] ? vm_area_dup+0x5a1/0x8d0 [ 566.597762][T12818] dup_mmap+0x152e/0x21d0 [ 566.597809][T12818] ? __pfx_dup_mmap+0x10/0x10 [ 566.597869][T12818] copy_process+0x4081/0x76a0 [ 566.597901][T12818] ? __pfx___futex_wait+0x10/0x10 [ 566.597964][T12818] ? __pfx_copy_process+0x10/0x10 [ 566.598019][T12818] kernel_clone+0xfc/0x960 [ 566.598054][T12818] ? __pfx_kernel_clone+0x10/0x10 [ 566.598111][T12818] __do_sys_clone+0xce/0x120 [ 566.598143][T12818] ? __pfx___do_sys_clone+0x10/0x10 [ 566.598175][T12818] ? ksys_unshare+0x687/0xa40 [ 566.598225][T12818] ? xfd_validate_state+0x61/0x180 [ 566.598272][T12818] do_syscall_64+0xcd/0x490 [ 566.598313][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.598339][T12818] RIP: 0033:0x7f769098e929 [ 566.598361][T12818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.598386][T12818] RSP: 002b:00007f76918a0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 566.598411][T12818] RAX: ffffffffffffffda RBX: 00007f7690bb6080 RCX: 00007f769098e929 [ 566.598430][T12818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 566.598445][T12818] RBP: 00007f7690a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.598460][T12818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.598476][T12818] R13: 0000000000000000 R14: 00007f7690bb6080 R15: 00007ffdc643ca68 [ 566.598512][T12818] [ 567.133386][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.139466][ C1] hrtimer: interrupt took 663245071 ns [ 567.239488][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.279798][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.286313][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.592020][T12883] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 570.138539][T12898] FAULT_INJECTION: forcing a failure. [ 570.138539][T12898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.167350][T12898] CPU: 0 UID: 0 PID: 12898 Comm: syz.3.1652 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 570.167396][T12898] Tainted: [U]=USER [ 570.167404][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.167419][T12898] Call Trace: [ 570.167428][T12898] [ 570.167438][T12898] dump_stack_lvl+0x16c/0x1f0 [ 570.167485][T12898] should_fail_ex+0x512/0x640 [ 570.167530][T12898] _copy_to_iter+0x29f/0x16f0 [ 570.167579][T12898] ? osq_unlock+0x8a/0x290 [ 570.167621][T12898] ? __pfx__copy_to_iter+0x10/0x10 [ 570.167659][T12898] ? rcu_is_watching+0x12/0xc0 [ 570.167690][T12898] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 570.167749][T12898] simple_copy_to_iter+0x46/0x90 [ 570.167785][T12898] __skb_datagram_iter+0x129/0x900 [ 570.167816][T12898] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 570.167866][T12898] skb_copy_datagram_iter+0x40/0x50 [ 570.167906][T12898] unix_stream_read_actor+0x7b/0xc0 [ 570.167942][T12898] unix_stream_read_generic+0x1dc0/0x28a0 [ 570.167988][T12898] ? _kstrtoull+0x145/0x200 [ 570.168017][T12898] ? __pfx__kstrtoull+0x10/0x10 [ 570.168060][T12898] ? find_held_lock+0x2b/0x80 [ 570.168087][T12898] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 570.168144][T12898] ? __pfx___might_resched+0x10/0x10 [ 570.168200][T12898] unix_stream_recvmsg+0x190/0x1c0 [ 570.168241][T12898] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 570.168279][T12898] ? __pfx_aa_sk_perm+0x10/0x10 [ 570.168310][T12898] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 570.168365][T12898] sock_recvmsg+0x1f6/0x250 [ 570.168400][T12898] __sys_recvfrom+0x203/0x310 [ 570.168444][T12898] ? __pfx___sys_recvfrom+0x10/0x10 [ 570.168530][T12898] ? ksys_write+0x1ac/0x250 [ 570.168570][T12898] ? __pfx_ksys_write+0x10/0x10 [ 570.168617][T12898] __x64_sys_recvfrom+0xe0/0x1c0 [ 570.168655][T12898] ? do_syscall_64+0x91/0x490 [ 570.168698][T12898] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.168739][T12898] do_syscall_64+0xcd/0x490 [ 570.168786][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.168816][T12898] RIP: 0033:0x7fe33638e929 [ 570.168841][T12898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.168868][T12898] RSP: 002b:00007fe337216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 570.168896][T12898] RAX: ffffffffffffffda RBX: 00007fe3365b6080 RCX: 00007fe33638e929 [ 570.168915][T12898] RDX: 00000000000101d0 RSI: 0000000000000000 RDI: 0000000000000004 [ 570.168931][T12898] RBP: 00007fe337216090 R08: 0000000000000000 R09: 0000000000000000 [ 570.168947][T12898] R10: 00000000003ffffd R11: 0000000000000246 R12: 0000000000000001 [ 570.168964][T12898] R13: 0000000000000001 R14: 00007fe3365b6080 R15: 00007ffe41eb3538 [ 570.169004][T12898] [ 570.715427][T12902] random: crng reseeded on system resumption [ 570.821959][ T13] ERROR: Out of memory at tomoyo_memory_ok. [ 571.550011][T12919] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 572.340130][T12930] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 575.750089][T13007] sctp: [Deprecated]: syz.3.1684 (pid 13007) Use of int in maxseg socket option. [ 575.750089][T13007] Use struct sctp_assoc_value instead [ 575.960129][T13017] Invalid ELF header magic: != ELF [ 576.891981][T13028] < [ 576.894579][ T30] audit: type=1800 audit(4294971158.761:9): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1686" name="dbroot" dev="configfs" ino=42336 res=0 errno=0 [ 576.917649][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.185068][T13045] FAULT_INJECTION: forcing a failure. [ 578.185068][T13045] name failslab, interval 1, probability 0, space 0, times 0 [ 578.224866][T13045] CPU: 1 UID: 0 PID: 13045 Comm: syz.1.1691 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 578.224913][T13045] Tainted: [U]=USER [ 578.224922][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.224937][T13045] Call Trace: [ 578.224946][T13045] [ 578.224956][T13045] dump_stack_lvl+0x16c/0x1f0 [ 578.225004][T13045] should_fail_ex+0x512/0x640 [ 578.225042][T13045] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 578.225088][T13045] should_failslab+0xc2/0x120 [ 578.225115][T13045] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 578.225167][T13045] ? lockdep_init_map_type+0x5c/0x280 [ 578.225203][T13045] ? __d_alloc+0x31/0xaa0 [ 578.225250][T13045] __d_alloc+0x31/0xaa0 [ 578.225295][T13045] d_alloc_pseudo+0x1c/0xc0 [ 578.225327][T13045] alloc_file_pseudo+0xcf/0x230 [ 578.225360][T13045] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 578.225391][T13045] ? alloc_fd+0x471/0x7d0 [ 578.225434][T13045] sock_alloc_file+0x50/0x210 [ 578.225464][T13045] __sys_socket+0x1c0/0x260 [ 578.225494][T13045] ? fput+0x70/0xf0 [ 578.225519][T13045] ? __pfx___sys_socket+0x10/0x10 [ 578.225552][T13045] ? xfd_validate_state+0x61/0x180 [ 578.225588][T13045] ? __pfx_ksys_write+0x10/0x10 [ 578.225635][T13045] __x64_sys_socket+0x72/0xb0 [ 578.225666][T13045] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.225707][T13045] do_syscall_64+0xcd/0x490 [ 578.225752][T13045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.225791][T13045] RIP: 0033:0x7f58b598e929 [ 578.225814][T13045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.225841][T13045] RSP: 002b:00007f58b68a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 578.225868][T13045] RAX: ffffffffffffffda RBX: 00007f58b5bb6080 RCX: 00007f58b598e929 [ 578.225886][T13045] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 578.225901][T13045] RBP: 00007f58b5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 578.225918][T13045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.225934][T13045] R13: 0000000000000000 R14: 00007f58b5bb6080 R15: 00007ffebf2a0e08 [ 578.225984][T13045] [ 578.452176][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.117569][T13052] zswap: compressor not available [ 579.220347][T13079] FAULT_INJECTION: forcing a failure. [ 579.220347][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.268755][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.3.1697 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 579.268804][T13079] Tainted: [U]=USER [ 579.268822][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.268839][T13079] Call Trace: [ 579.268848][T13079] [ 579.268859][T13079] dump_stack_lvl+0x16c/0x1f0 [ 579.268908][T13079] should_fail_ex+0x512/0x640 [ 579.268956][T13079] _copy_to_user+0x32/0xd0 [ 579.269002][T13079] simple_read_from_buffer+0xcb/0x170 [ 579.269039][T13079] proc_fail_nth_read+0x197/0x270 [ 579.269074][T13079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.269109][T13079] ? rw_verify_area+0xcf/0x680 [ 579.269144][T13079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.269178][T13079] vfs_read+0x1e4/0xc60 [ 579.269223][T13079] ? __pfx___mutex_lock+0x10/0x10 [ 579.269269][T13079] ? __pfx_vfs_read+0x10/0x10 [ 579.269320][T13079] ? __fget_files+0x20e/0x3c0 [ 579.269372][T13079] ksys_read+0x12a/0x250 [ 579.269411][T13079] ? __pfx_ksys_read+0x10/0x10 [ 579.269463][T13079] do_syscall_64+0xcd/0x490 [ 579.269511][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.269540][T13079] RIP: 0033:0x7fe33638d33c [ 579.269563][T13079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 579.269590][T13079] RSP: 002b:00007fe337216030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 579.269617][T13079] RAX: ffffffffffffffda RBX: 00007fe3365b6080 RCX: 00007fe33638d33c [ 579.269635][T13079] RDX: 000000000000000f RSI: 00007fe3372160a0 RDI: 0000000000000005 [ 579.269653][T13079] RBP: 00007fe337216090 R08: 0000000000000000 R09: 0000000000000000 [ 579.269669][T13079] R10: 00000000003ffffd R11: 0000000000000246 R12: 0000000000000001 [ 579.269686][T13079] R13: 0000000000000001 R14: 00007fe3365b6080 R15: 00007ffe41eb3538 [ 579.269725][T13079] [ 580.001989][T13092] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1700'. [ 581.947423][T13125] program syz.3.1707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.073741][ T10] Process accounting resumed [ 585.547293][T13172] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 586.014590][T13184] random: crng reseeded on system resumption [ 589.782099][T13234] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 591.400600][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1739'. [ 592.957588][T13293] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.812180][T13310] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.724888][T13353] Process accounting resumed [ 595.907105][T13350] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 597.566427][T13380] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 598.470299][T13396] FAULT_INJECTION: forcing a failure. [ 598.470299][T13396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.501379][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.2.1776 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 598.501434][T13396] Tainted: [U]=USER [ 598.501445][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.501463][T13396] Call Trace: [ 598.501473][T13396] [ 598.501486][T13396] dump_stack_lvl+0x16c/0x1f0 [ 598.501538][T13396] should_fail_ex+0x512/0x640 [ 598.501588][T13396] _copy_from_user+0x2e/0xd0 [ 598.501637][T13396] snd_seq_oss_write+0x397/0x7d0 [ 598.501695][T13396] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 598.501737][T13396] ? apparmor_file_permission+0x251/0x400 [ 598.501774][T13396] ? bpf_lsm_file_permission+0x9/0x10 [ 598.501814][T13396] ? __pfx_odev_write+0x10/0x10 [ 598.501841][T13396] odev_write+0x51/0xa0 [ 598.501871][T13396] vfs_write+0x29d/0x1150 [ 598.501921][T13396] ? __pfx_vfs_write+0x10/0x10 [ 598.501959][T13396] ? find_held_lock+0x2b/0x80 [ 598.501990][T13396] ? __fget_files+0x204/0x3c0 [ 598.502038][T13396] ? __fget_files+0x20e/0x3c0 [ 598.502090][T13396] ksys_write+0x12a/0x250 [ 598.502133][T13396] ? __pfx_ksys_write+0x10/0x10 [ 598.502187][T13396] do_syscall_64+0xcd/0x490 [ 598.502237][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.502268][T13396] RIP: 0033:0x7fe242f8e929 [ 598.502293][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.502321][T13396] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.502350][T13396] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 598.502371][T13396] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 598.502388][T13396] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 598.502407][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.502424][T13396] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 598.502463][T13396] [ 599.432972][T13415] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1781'. [ 599.608423][T13409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.134443][T13438] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 604.443821][T13486] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 604.593672][T13492] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[13492] [ 605.149780][T13495] could not allocate digest TFM handle binfmt_misc [ 605.717033][T13511] ERROR: Out of memory at tomoyo_memory_ok. [ 606.462772][T13519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 607.076179][T13533] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 610.622132][T13579] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.176283][T13614] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.253904][T13621] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 613.626992][T11411] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 613.627035][T11411] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 613.642567][T11411] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 613.642639][T11411] Bluetooth: hci1: Malformed LE Event: 0x0d [ 613.727701][T13643] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 613.829528][T13635] Invalid ELF header magic: != ELF [ 613.973537][T13645] random: crng reseeded on system resumption [ 613.990532][ T2910] ERROR: Out of memory at tomoyo_memory_ok. [ 614.011856][ T12] ERROR: Out of memory at tomoyo_memory_ok. [ 614.323942][T13645] netlink: 294 bytes leftover after parsing attributes in process `syz.0.1829'. [ 614.597280][T13650] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1830'. [ 617.541151][T13693] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1839'. [ 617.986339][T13700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.018215][T13700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.158850][T13705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.220643][T13705] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1842'. [ 618.380747][T13711] random: crng reseeded on system resumption [ 619.009194][T13718] ERROR: Out of memory at tomoyo_memory_ok. [ 620.925712][T13754] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 621.222234][T13761] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1852'. [ 621.595974][T13766] ERROR: Out of memory at tomoyo_memory_ok. [ 622.734243][T13776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1856'. [ 622.775339][T13776] veth0_macvtap: left promiscuous mode [ 623.316210][T13792] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1859'. [ 625.936048][T13828] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 626.166582][T13836] FAULT_INJECTION: forcing a failure. [ 626.166582][T13836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.200807][T13836] CPU: 1 UID: 0 PID: 13836 Comm: syz.2.1868 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 626.200860][T13836] Tainted: [U]=USER [ 626.200870][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.200888][T13836] Call Trace: [ 626.200898][T13836] [ 626.200910][T13836] dump_stack_lvl+0x16c/0x1f0 [ 626.200960][T13836] should_fail_ex+0x512/0x640 [ 626.201003][T13836] _copy_from_user+0x2e/0xd0 [ 626.201029][T13836] snd_seq_oss_write+0x397/0x7d0 [ 626.201055][T13836] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 626.201090][T13836] ? apparmor_file_permission+0x251/0x400 [ 626.201125][T13836] ? bpf_lsm_file_permission+0x9/0x10 [ 626.201161][T13836] ? __pfx_odev_write+0x10/0x10 [ 626.201187][T13836] odev_write+0x51/0xa0 [ 626.201216][T13836] vfs_write+0x29d/0x1150 [ 626.201275][T13836] ? __pfx_vfs_write+0x10/0x10 [ 626.201313][T13836] ? find_held_lock+0x2b/0x80 [ 626.201342][T13836] ? __fget_files+0x204/0x3c0 [ 626.201371][T13836] ? __fget_files+0x20e/0x3c0 [ 626.201399][T13836] ksys_write+0x12a/0x250 [ 626.201421][T13836] ? __pfx_ksys_write+0x10/0x10 [ 626.201451][T13836] do_syscall_64+0xcd/0x490 [ 626.201478][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.201499][T13836] RIP: 0033:0x7fe242f8e929 [ 626.201532][T13836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.201560][T13836] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 626.201588][T13836] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 626.201606][T13836] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 626.201624][T13836] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 626.201641][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.201659][T13836] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 626.201701][T13836] [ 626.842713][T13843] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 626.950822][T13839] openvswitch: HfR: Dropping previously announced user features [ 627.901139][T13869] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 627.978990][T13868] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 628.131782][T13872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 629.494556][T13905] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 629.722704][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.729267][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.537322][T13934] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 632.615079][T13953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1898'. [ 634.150779][T13979] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1905'. [ 637.618671][T14030] FAULT_INJECTION: forcing a failure. [ 637.618671][T14030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.685433][T14030] CPU: 1 UID: 0 PID: 14030 Comm: syz.2.1920 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 637.685485][T14030] Tainted: [U]=USER [ 637.685495][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.685512][T14030] Call Trace: [ 637.685522][T14030] [ 637.685534][T14030] dump_stack_lvl+0x16c/0x1f0 [ 637.685584][T14030] should_fail_ex+0x512/0x640 [ 637.685632][T14030] _copy_from_user+0x2e/0xd0 [ 637.685676][T14030] snd_seq_oss_write+0x397/0x7d0 [ 637.685719][T14030] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 637.685752][T14030] ? futex_private_hash_put+0xc7/0x240 [ 637.685791][T14030] ? apparmor_file_permission+0x251/0x400 [ 637.685826][T14030] ? bpf_lsm_file_permission+0x9/0x10 [ 637.685864][T14030] ? __pfx_odev_write+0x10/0x10 [ 637.685890][T14030] odev_write+0x51/0xa0 [ 637.685918][T14030] vfs_write+0x29d/0x1150 [ 637.685968][T14030] ? __pfx_vfs_write+0x10/0x10 [ 637.686003][T14030] ? find_held_lock+0x2b/0x80 [ 637.686030][T14030] ? __fget_files+0x204/0x3c0 [ 637.686075][T14030] ? __fget_files+0x20e/0x3c0 [ 637.686120][T14030] ksys_write+0x12a/0x250 [ 637.686157][T14030] ? __pfx_ksys_write+0x10/0x10 [ 637.686210][T14030] do_syscall_64+0xcd/0x490 [ 637.686257][T14030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.686287][T14030] RIP: 0033:0x7fe242f8e929 [ 637.686311][T14030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.686340][T14030] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.686368][T14030] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 637.686387][T14030] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 637.686404][T14030] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 637.686435][T14030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.686459][T14030] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 637.686497][T14030] [ 638.435451][T14041] ERROR: Out of memory at tomoyo_memory_ok. [ 638.510539][T14043] ERROR: Out of memory at tomoyo_memory_ok. [ 638.683684][T14041] ERROR: Out of memory at tomoyo_memory_ok. [ 639.086763][T14047] ERROR: Out of memory at tomoyo_memory_ok. [ 639.303102][T14053] ERROR: Out of memory at tomoyo_memory_ok. [ 639.522691][T14047] ERROR: Out of memory at tomoyo_memory_ok. [ 640.561019][T14066] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 644.707510][T14128] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1940'. [ 645.137670][T14125] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 645.987897][T14142] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 647.061003][T14152] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 650.119863][T14189] ERROR: Out of memory at tomoyo_memory_ok. [ 651.083760][T14199] ERROR: Out of memory at tomoyo_memory_ok. [ 651.480770][T14204] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 652.644945][T14217] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.643142][T14239] FAULT_INJECTION: forcing a failure. [ 653.643142][T14239] name failslab, interval 1, probability 0, space 0, times 0 [ 653.664550][T14239] CPU: 1 UID: 0 PID: 14239 Comm: syz.2.1962 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 653.664599][T14239] Tainted: [U]=USER [ 653.664608][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.664625][T14239] Call Trace: [ 653.664645][T14239] [ 653.664657][T14239] dump_stack_lvl+0x16c/0x1f0 [ 653.664708][T14239] should_fail_ex+0x512/0x640 [ 653.664750][T14239] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 653.664798][T14239] should_failslab+0xc2/0x120 [ 653.664824][T14239] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 653.664866][T14239] ? __alloc_skb+0x2b2/0x380 [ 653.664909][T14239] ? bpf_lsm_capable+0x9/0x10 [ 653.664949][T14239] __alloc_skb+0x2b2/0x380 [ 653.664992][T14239] ? __pfx___alloc_skb+0x10/0x10 [ 653.665034][T14239] ? genl_rcv_msg+0x4bb/0x800 [ 653.665080][T14239] netlink_ack+0x15d/0xb80 [ 653.665123][T14239] netlink_rcv_skb+0x332/0x420 [ 653.665156][T14239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.665196][T14239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.665245][T14239] ? netlink_deliver_tap+0x1ae/0xd30 [ 653.665280][T14239] genl_rcv+0x28/0x40 [ 653.665310][T14239] netlink_unicast+0x53d/0x7f0 [ 653.665345][T14239] ? __pfx_netlink_unicast+0x10/0x10 [ 653.665386][T14239] netlink_sendmsg+0x8d1/0xdd0 [ 653.665423][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.665469][T14239] ____sys_sendmsg+0xa98/0xc70 [ 653.665504][T14239] ? copy_msghdr_from_user+0x10a/0x160 [ 653.665546][T14239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.665589][T14239] ? __pfx_futex_wake_mark+0x10/0x10 [ 653.665650][T14239] ___sys_sendmsg+0x134/0x1d0 [ 653.665697][T14239] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.665738][T14239] ? __lock_acquire+0x622/0x1c90 [ 653.665835][T14239] __sys_sendmsg+0x16d/0x220 [ 653.665875][T14239] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.665916][T14239] ? __x64_sys_futex+0x1e0/0x4c0 [ 653.665977][T14239] do_syscall_64+0xcd/0x490 [ 653.666021][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.666048][T14239] RIP: 0033:0x7fe242f8e929 [ 653.666073][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.666098][T14239] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.666125][T14239] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 653.666143][T14239] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000002 [ 653.666160][T14239] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 653.666176][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.666192][T14239] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 653.666229][T14239] [ 654.268084][T14242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 655.766330][T14255] random: crng reseeded on system resumption [ 655.815517][ T1162] ERROR: Out of memory at tomoyo_memory_ok. [ 655.824965][ T8564] ERROR: Out of memory at tomoyo_memory_ok. [ 657.544409][T14281] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 658.400465][T14293] random: crng reseeded on system resumption [ 659.795308][T14307] ubi0: attaching mtd0 [ 659.837847][T14307] ubi0: scanning is finished [ 659.843144][T14307] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 660.181082][T14307] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 661.584196][ T30] audit: type=1804 audit(4294971243.441:10): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1980" name="/newroot/478/file0" dev="tmpfs" ino=2538 res=1 errno=0 [ 661.702210][ T30] audit: type=1800 audit(4294971243.441:11): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1980" name="file0" dev="tmpfs" ino=2538 res=0 errno=0 [ 662.634352][T14347] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1983'. [ 663.260002][T14357] random: crng reseeded on system resumption [ 663.358075][T14354] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.478657][T14371] random: crng reseeded on system resumption [ 665.180323][T14381] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 666.295048][T14395] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 667.576512][T14414] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.922084][T14432] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 668.968988][T14433] random: crng reseeded on system resumption [ 669.910757][T14441] FAULT_INJECTION: forcing a failure. [ 669.910757][T14441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.984953][T14441] CPU: 0 UID: 0 PID: 14441 Comm: syz.3.2003 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 669.985005][T14441] Tainted: [U]=USER [ 669.985015][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.985033][T14441] Call Trace: [ 669.985043][T14441] [ 669.985054][T14441] dump_stack_lvl+0x16c/0x1f0 [ 669.985104][T14441] should_fail_ex+0x512/0x640 [ 669.985153][T14441] should_fail_alloc_page+0xe7/0x130 [ 669.985185][T14441] prepare_alloc_pages+0x3c2/0x610 [ 669.985237][T14441] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 669.985293][T14441] ? kasan_save_stack+0x42/0x60 [ 669.985333][T14441] ? kasan_save_stack+0x33/0x60 [ 669.985372][T14441] ? kasan_save_track+0x14/0x30 [ 669.985411][T14441] ? __kasan_slab_alloc+0x89/0x90 [ 669.985452][T14441] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 669.985502][T14441] ? security_inode_alloc+0x3b/0x2b0 [ 669.985529][T14441] ? inode_init_always_gfp+0xce4/0x1030 [ 669.985564][T14441] ? alloc_inode+0x86/0x240 [ 669.985587][T14441] ? sock_alloc+0x40/0x280 [ 669.985615][T14441] ? __sock_create+0xc1/0x8d0 [ 669.985649][T14441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 669.985693][T14441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.985763][T14441] ? sk_prot_alloc+0x1a8/0x2a0 [ 669.985791][T14441] __alloc_pages_noprof+0xb/0x1b0 [ 669.985835][T14441] ___kmalloc_large_node+0x84/0x1e0 [ 669.985868][T14441] ? __lock_acquire+0x622/0x1c90 [ 669.985910][T14441] ? sk_prot_alloc+0x1a8/0x2a0 [ 669.985939][T14441] __kmalloc_large_node_noprof+0x1c/0x70 [ 669.985973][T14441] __kmalloc_noprof.cold+0xc/0x61 [ 669.986017][T14441] sk_prot_alloc+0x1a8/0x2a0 [ 669.986049][T14441] sk_alloc+0x36/0xc20 [ 669.986086][T14441] can_create+0x1e5/0x600 [ 669.986117][T14441] __sock_create+0x338/0x8d0 [ 669.986156][T14441] __sys_socket+0x14d/0x260 [ 669.986191][T14441] ? __pfx___sys_socket+0x10/0x10 [ 669.986221][T14441] ? xfd_validate_state+0x61/0x180 [ 669.986253][T14441] ? __pfx_ksys_write+0x10/0x10 [ 669.986295][T14441] __x64_sys_socket+0x72/0xb0 [ 669.986323][T14441] ? lockdep_hardirqs_on+0x7c/0x110 [ 669.986361][T14441] do_syscall_64+0xcd/0x490 [ 669.986407][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.986436][T14441] RIP: 0033:0x7fe33638e929 [ 669.986468][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.986498][T14441] RSP: 002b:00007fe337237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 669.986528][T14441] RAX: ffffffffffffffda RBX: 00007fe3365b5fa0 RCX: 00007fe33638e929 [ 669.986548][T14441] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 669.986566][T14441] RBP: 00007fe336410b39 R08: 0000000000000000 R09: 0000000000000000 [ 669.986584][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.986603][T14441] R13: 0000000000000000 R14: 00007fe3365b5fa0 R15: 00007ffe41eb3538 [ 669.986647][T14441] [ 670.319201][T14446] FAULT_INJECTION: forcing a failure. [ 670.319201][T14446] name failslab, interval 1, probability 0, space 0, times 0 [ 670.332752][T14446] CPU: 0 UID: 0 PID: 14446 Comm: syz.2.2007 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 670.332783][T14446] Tainted: [U]=USER [ 670.332789][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.332799][T14446] Call Trace: [ 670.332805][T14446] [ 670.332812][T14446] dump_stack_lvl+0x16c/0x1f0 [ 670.332842][T14446] should_fail_ex+0x512/0x640 [ 670.332865][T14446] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 670.332893][T14446] should_failslab+0xc2/0x120 [ 670.332910][T14446] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 670.332934][T14446] ? __alloc_skb+0x2b2/0x380 [ 670.332959][T14446] ? bpf_lsm_capable+0x9/0x10 [ 670.332982][T14446] __alloc_skb+0x2b2/0x380 [ 670.333005][T14446] ? __pfx___alloc_skb+0x10/0x10 [ 670.333028][T14446] ? genl_rcv_msg+0x4bb/0x800 [ 670.333055][T14446] netlink_ack+0x15d/0xb80 [ 670.333079][T14446] netlink_rcv_skb+0x332/0x420 [ 670.333096][T14446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.333117][T14446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.333144][T14446] ? netlink_deliver_tap+0x1ae/0xd30 [ 670.333164][T14446] genl_rcv+0x28/0x40 [ 670.333181][T14446] netlink_unicast+0x53d/0x7f0 [ 670.333201][T14446] ? __pfx_netlink_unicast+0x10/0x10 [ 670.333233][T14446] netlink_sendmsg+0x8d1/0xdd0 [ 670.333255][T14446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.333281][T14446] ____sys_sendmsg+0xa98/0xc70 [ 670.333300][T14446] ? copy_msghdr_from_user+0x10a/0x160 [ 670.333325][T14446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.333349][T14446] ? __pfx_futex_wake_mark+0x10/0x10 [ 670.333380][T14446] ___sys_sendmsg+0x134/0x1d0 [ 670.333406][T14446] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.333429][T14446] ? __lock_acquire+0x622/0x1c90 [ 670.333477][T14446] __sys_sendmsg+0x16d/0x220 [ 670.333505][T14446] ? __pfx___sys_sendmsg+0x10/0x10 [ 670.333529][T14446] ? __x64_sys_futex+0x1e0/0x4c0 [ 670.333561][T14446] do_syscall_64+0xcd/0x490 [ 670.333588][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.333605][T14446] RIP: 0033:0x7fe242f8e929 [ 670.333620][T14446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.333637][T14446] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.333654][T14446] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 670.333664][T14446] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000002 [ 670.333674][T14446] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 670.333684][T14446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.333694][T14446] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 670.333722][T14446] [ 673.913427][T14510] openvswitch: HfR: Dropping previously announced user features [ 673.936018][T14510] openvswitch: HfR: Dropping previously announced user features [ 673.992221][T14512] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 674.283511][T14515] FAULT_INJECTION: forcing a failure. [ 674.283511][T14515] name failslab, interval 1, probability 0, space 0, times 0 [ 674.316604][T14522] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 674.367095][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.0.2020 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 674.367146][T14515] Tainted: [U]=USER [ 674.367155][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.367173][T14515] Call Trace: [ 674.367182][T14515] [ 674.367194][T14515] dump_stack_lvl+0x16c/0x1f0 [ 674.367245][T14515] should_fail_ex+0x512/0x640 [ 674.367283][T14515] ? fs_reclaim_acquire+0xae/0x150 [ 674.367321][T14515] ? tomoyo_init_log+0x1385/0x2140 [ 674.367359][T14515] should_failslab+0xc2/0x120 [ 674.367389][T14515] __kmalloc_noprof+0xd2/0x510 [ 674.367439][T14515] tomoyo_init_log+0x1385/0x2140 [ 674.367495][T14515] ? __pfx_tomoyo_init_log+0x10/0x10 [ 674.367553][T14515] tomoyo_write_log2+0x2f7/0xc10 [ 674.367594][T14515] tomoyo_supervisor+0x15e/0x13b0 [ 674.367624][T14515] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 674.367659][T14515] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.367688][T14515] ? tomoyo_check_path_acl+0xad/0x210 [ 674.367708][T14515] ? tomoyo_check_acl+0x1f7/0x410 [ 674.367728][T14515] tomoyo_path_permission+0x270/0x3b0 [ 674.367750][T14515] tomoyo_check_open_permission+0x37b/0x3c0 [ 674.367771][T14515] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 674.367814][T14515] ? do_raw_spin_lock+0x12c/0x2b0 [ 674.367845][T14515] tomoyo_file_open+0x6b/0x90 [ 674.367871][T14515] security_file_open+0x84/0x1e0 [ 674.367894][T14515] do_dentry_open+0x596/0x1c10 [ 674.367924][T14515] vfs_open+0x82/0x3f0 [ 674.367945][T14515] path_openat+0x1de4/0x2cb0 [ 674.367975][T14515] ? __pfx_path_openat+0x10/0x10 [ 674.368000][T14515] ? __lock_acquire+0xb8a/0x1c90 [ 674.368023][T14515] do_filp_open+0x20b/0x470 [ 674.368047][T14515] ? __pfx_do_filp_open+0x10/0x10 [ 674.368087][T14515] ? alloc_fd+0x471/0x7d0 [ 674.368116][T14515] do_sys_openat2+0x11b/0x1d0 [ 674.368134][T14515] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.368160][T14515] __x64_sys_openat+0x174/0x210 [ 674.368179][T14515] ? __pfx___x64_sys_openat+0x10/0x10 [ 674.368199][T14515] ? syscall_user_dispatch+0x78/0x140 [ 674.368231][T14515] do_syscall_64+0xcd/0x490 [ 674.368257][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.368274][T14515] RIP: 0033:0x7f769098e929 [ 674.368289][T14515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.368305][T14515] RSP: 002b:00007f76918c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.368321][T14515] RAX: ffffffffffffffda RBX: 00007f7690bb5fa0 RCX: 00007f769098e929 [ 674.368332][T14515] RDX: 0000000000060000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 674.368342][T14515] RBP: 00007f7690a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 674.368352][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.368361][T14515] R13: 0000000000000000 R14: 00007f7690bb5fa0 R15: 00007ffdc643ca68 [ 674.368383][T14515] [ 677.964515][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'. [ 678.038319][T14557] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 678.072798][T14557] random: crng reseeded on system resumption [ 679.266576][T14570] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.332967][T14635] ubi0: attaching mtd0 [ 682.345962][T14635] ubi0: scanning is finished [ 682.350801][T14635] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 682.907300][T14635] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 683.573582][T11411] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 683.573627][T11411] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 683.589997][T11411] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 683.590035][T11411] Bluetooth: hci2: adv larger than maximum supported [ 683.597626][T11411] Bluetooth: hci2: adv larger than maximum supported [ 683.605461][T11411] Bluetooth: hci2: Malformed LE Event: 0x0d [ 684.226130][T14653] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 685.916502][T14683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 687.484551][T14698] ubi0: attaching mtd0 [ 687.500368][T14698] ubi0: scanning is finished [ 687.514370][T14698] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 688.119642][T14698] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 689.311888][T14737] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 690.192598][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 691.224939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.231344][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.428831][T14780] FAULT_INJECTION: forcing a failure. [ 691.428831][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.461556][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.1.2077 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 691.461609][T14780] Tainted: [U]=USER [ 691.461620][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.461636][T14780] Call Trace: [ 691.461647][T14780] [ 691.461659][T14780] dump_stack_lvl+0x16c/0x1f0 [ 691.461708][T14780] should_fail_ex+0x512/0x640 [ 691.461756][T14780] _copy_from_user+0x2e/0xd0 [ 691.461803][T14780] snd_seq_oss_write+0x397/0x7d0 [ 691.461845][T14780] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 691.461889][T14780] ? apparmor_file_permission+0x251/0x400 [ 691.461924][T14780] ? bpf_lsm_file_permission+0x9/0x10 [ 691.461960][T14780] ? __pfx_odev_write+0x10/0x10 [ 691.461986][T14780] odev_write+0x51/0xa0 [ 691.462013][T14780] vfs_write+0x29d/0x1150 [ 691.462062][T14780] ? __pfx_vfs_write+0x10/0x10 [ 691.462098][T14780] ? find_held_lock+0x2b/0x80 [ 691.462125][T14780] ? __fget_files+0x204/0x3c0 [ 691.462170][T14780] ? __fget_files+0x20e/0x3c0 [ 691.462220][T14780] ksys_write+0x12a/0x250 [ 691.462262][T14780] ? __pfx_ksys_write+0x10/0x10 [ 691.462316][T14780] do_syscall_64+0xcd/0x490 [ 691.462375][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.462403][T14780] RIP: 0033:0x7f58b598e929 [ 691.462427][T14780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.462456][T14780] RSP: 002b:00007f58b68c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.462491][T14780] RAX: ffffffffffffffda RBX: 00007f58b5bb5fa0 RCX: 00007f58b598e929 [ 691.462509][T14780] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000003 [ 691.462527][T14780] RBP: 00007f58b5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 691.462544][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.462561][T14780] R13: 0000000000000000 R14: 00007f58b5bb5fa0 R15: 00007ffebf2a0e08 [ 691.462601][T14780] [ 692.223260][T14794] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 694.785083][T14840] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 695.572869][T14842] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.801557][T14851] ubi0: attaching mtd0 [ 696.808178][T14851] ubi0: scanning is finished [ 696.812820][T14851] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 696.960708][T14861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.849353][T14851] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 698.781047][T14884] random: crng reseeded on system resumption [ 698.840551][ T12] ERROR: Out of memory at tomoyo_memory_ok. [ 698.931819][ T1162] ERROR: Out of memory at tomoyo_memory_ok. [ 701.173188][T14915] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2105'. [ 702.447658][T14925] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 703.534672][T14933] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 709.029305][T15014] ubi0: attaching mtd0 [ 709.042759][T15014] ubi0: scanning is finished [ 709.071003][T15014] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 709.635796][T15014] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 709.676678][T15006] ubi0: attaching mtd0 [ 709.686970][T15006] ubi0: scanning is finished [ 709.862507][T15006] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 710.024666][T15021] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 710.341692][T15006] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 711.786668][T15042] ubi0: attaching mtd0 [ 711.810063][T15042] ubi0: scanning is finished [ 711.847041][T15042] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 712.428167][T15042] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 716.076810][T15093] msr: Write to unrecognized MSR 0x0 by syz.3.2137 (pid: 15093). [ 716.134464][T15093] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 718.403013][T15111] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.379261][T15155] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 722.130463][T15169] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2153'. [ 723.162686][T15180] FAULT_INJECTION: forcing a failure. [ 723.162686][T15180] name failslab, interval 1, probability 0, space 0, times 0 [ 723.237618][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.0.2155 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 723.237668][T15180] Tainted: [U]=USER [ 723.237677][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.237694][T15180] Call Trace: [ 723.237704][T15180] [ 723.237716][T15180] dump_stack_lvl+0x16c/0x1f0 [ 723.237766][T15180] should_fail_ex+0x512/0x640 [ 723.237805][T15180] ? __kmalloc_noprof+0xbf/0x510 [ 723.237847][T15180] ? lsm_blob_alloc+0x68/0x90 [ 723.237887][T15180] should_failslab+0xc2/0x120 [ 723.237914][T15180] __kmalloc_noprof+0xd2/0x510 [ 723.237965][T15180] lsm_blob_alloc+0x68/0x90 [ 723.238011][T15180] security_prepare_creds+0x30/0x270 [ 723.238055][T15180] prepare_creds+0x56f/0x7d0 [ 723.238100][T15180] __do_sys_landlock_restrict_self+0x13e/0x910 [ 723.238147][T15180] ? rcu_is_watching+0x12/0xc0 [ 723.238191][T15180] do_syscall_64+0xcd/0x490 [ 723.238241][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.238272][T15180] RIP: 0033:0x7f769098e929 [ 723.238297][T15180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.238327][T15180] RSP: 002b:00007f76918a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 723.238355][T15180] RAX: ffffffffffffffda RBX: 00007f7690bb6080 RCX: 00007f769098e929 [ 723.238376][T15180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 723.238394][T15180] RBP: 00007f7690a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 723.238411][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.238428][T15180] R13: 0000000000000000 R14: 00007f7690bb6080 R15: 00007ffdc643ca68 [ 723.238467][T15180] [ 725.381604][T15164] syz.1.2152 (15164) used greatest stack depth: 19592 bytes left [ 729.033932][T15243] ERROR: Out of memory at tomoyo_memory_ok. [ 729.043650][T15213] syz.1.2162 (15213) used greatest stack depth: 19336 bytes left [ 729.894132][T15244] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.721144][T15314] FAULT_INJECTION: forcing a failure. [ 733.721144][T15314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 733.789838][T15314] CPU: 0 UID: 0 PID: 15314 Comm: syz.2.2183 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 733.789888][T15314] Tainted: [U]=USER [ 733.789897][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.789913][T15314] Call Trace: [ 733.789922][T15314] [ 733.789934][T15314] dump_stack_lvl+0x16c/0x1f0 [ 733.789982][T15314] should_fail_ex+0x512/0x640 [ 733.790028][T15314] should_fail_alloc_page+0xe7/0x130 [ 733.790060][T15314] prepare_alloc_pages+0x3c2/0x610 [ 733.790101][T15314] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 733.790140][T15314] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 733.790185][T15314] ? arch_stack_walk+0xa6/0x100 [ 733.790244][T15314] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 733.790313][T15314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 733.790358][T15314] ? policy_nodemask+0xea/0x4e0 [ 733.790405][T15314] alloc_pages_mpol+0x1fb/0x550 [ 733.790435][T15314] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 733.790474][T15314] alloc_pages_noprof+0x131/0x390 [ 733.790503][T15314] __pmd_alloc+0x3b/0x930 [ 733.790532][T15314] ? find_held_lock+0x2b/0x80 [ 733.790565][T15314] __handle_mm_fault+0xaac/0x5490 [ 733.790614][T15314] ? __pfx___handle_mm_fault+0x10/0x10 [ 733.790650][T15314] ? __pfx_mt_find+0x10/0x10 [ 733.790720][T15314] ? find_vma+0xbf/0x140 [ 733.790747][T15314] ? __pfx_find_vma+0x10/0x10 [ 733.790800][T15314] handle_mm_fault+0x589/0xd10 [ 733.790840][T15314] ? __pkru_allows_pkey+0x41/0xb0 [ 733.790874][T15314] do_user_addr_fault+0x7a6/0x1370 [ 733.790915][T15314] ? rcu_is_watching+0x12/0xc0 [ 733.790950][T15314] exc_page_fault+0x5c/0xb0 [ 733.790991][T15314] asm_exc_page_fault+0x26/0x30 [ 733.791019][T15314] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 733.791052][T15314] Code: 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 10 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 733.791078][T15314] RSP: 0018:ffffc9000455f7d0 EFLAGS: 00050206 [ 733.791120][T15314] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 733.791138][T15314] RDX: ffffed10070875c9 RSI: 0000000000000000 RDI: ffff88803843ad80 [ 733.791155][T15314] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10070875c8 [ 733.791172][T15314] R10: ffff88803843ae43 R11: 0000000000000000 R12: ffffc9000455fd60 [ 733.791189][T15314] R13: 00000000000000c4 R14: ffff88803843ad80 R15: 00007ffffffff000 [ 733.791233][T15314] _copy_from_iter+0x383/0x16f0 [ 733.791284][T15314] ? __alloc_skb+0x200/0x380 [ 733.791325][T15314] ? __pfx__copy_from_iter+0x10/0x10 [ 733.791373][T15314] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 733.791420][T15314] netlink_sendmsg+0x829/0xdd0 [ 733.791462][T15314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.791514][T15314] ____sys_sendmsg+0xa98/0xc70 [ 733.791550][T15314] ? copy_msghdr_from_user+0x10a/0x160 [ 733.791593][T15314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.791636][T15314] ? __pfx__kstrtoull+0x10/0x10 [ 733.791680][T15314] ___sys_sendmsg+0x134/0x1d0 [ 733.791727][T15314] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.791796][T15314] ? find_held_lock+0x2b/0x80 [ 733.791856][T15314] __sys_sendmmsg+0x200/0x420 [ 733.791906][T15314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 733.791967][T15314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.792033][T15314] ? fput+0x70/0xf0 [ 733.792059][T15314] ? ksys_write+0x1ac/0x250 [ 733.792107][T15314] ? __pfx_ksys_write+0x10/0x10 [ 733.792155][T15314] __x64_sys_sendmmsg+0x9c/0x100 [ 733.792198][T15314] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.792237][T15314] do_syscall_64+0xcd/0x490 [ 733.792284][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.792311][T15314] RIP: 0033:0x7fe242f8e929 [ 733.792334][T15314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.792361][T15314] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.792386][T15314] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 733.792405][T15314] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 733.792421][T15314] RBP: 00007fe243ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 733.792438][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.792455][T15314] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 733.792494][T15314] [ 734.879500][T15319] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2186'. [ 734.893201][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 734.937353][T15319] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 735.244113][T14982] syz.1.2113 (14982) used greatest stack depth: 18584 bytes left [ 735.566017][T15039] syz.1.2124 (15039) used greatest stack depth: 18568 bytes left [ 738.680299][T15364] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 740.639227][T15387] netlink: 'syz.0.2197': attribute type 11 has an invalid length. [ 740.652033][T15387] netlink: 'syz.0.2197': attribute type 11 has an invalid length. [ 740.662749][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 740.679864][T15387] netlink: 'syz.0.2197': attribute type 11 has an invalid length. [ 740.689126][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2197'. [ 740.760877][T15387] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2197'. [ 742.665253][T15427] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.089416][T15441] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.834084][T15458] ERROR: Out of memory at tomoyo_memory_ok. [ 748.196082][T15503] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 749.313830][T15515] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.901856][T15544] FAULT_INJECTION: forcing a failure. [ 750.901856][T15544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.955503][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.0.2223 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 750.955550][T15544] Tainted: [U]=USER [ 750.955558][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.955574][T15544] Call Trace: [ 750.955583][T15544] [ 750.955594][T15544] dump_stack_lvl+0x16c/0x1f0 [ 750.955637][T15544] should_fail_ex+0x512/0x640 [ 750.955679][T15544] _copy_to_user+0x32/0xd0 [ 750.955721][T15544] simple_read_from_buffer+0xcb/0x170 [ 750.955756][T15544] proc_fail_nth_read+0x197/0x270 [ 750.955787][T15544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.955819][T15544] ? rw_verify_area+0xcf/0x680 [ 750.955849][T15544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.955878][T15544] vfs_read+0x1e4/0xc60 [ 750.955917][T15544] ? __pfx___mutex_lock+0x10/0x10 [ 750.955954][T15544] ? __pfx_vfs_read+0x10/0x10 [ 750.956008][T15544] ? __fget_files+0x20e/0x3c0 [ 750.956064][T15544] ksys_read+0x12a/0x250 [ 750.956100][T15544] ? __pfx_ksys_read+0x10/0x10 [ 750.956136][T15544] ? fput+0x70/0xf0 [ 750.956171][T15544] do_syscall_64+0xcd/0x490 [ 750.956211][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.956236][T15544] RIP: 0033:0x7f769098d33c [ 750.956258][T15544] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 750.956283][T15544] RSP: 002b:00007f76918c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 750.956308][T15544] RAX: ffffffffffffffda RBX: 00007f7690bb5fa0 RCX: 00007f769098d33c [ 750.956348][T15544] RDX: 000000000000000f RSI: 00007f76918c20a0 RDI: 0000000000000004 [ 750.956364][T15544] RBP: 00007f76918c2090 R08: 0000000000000000 R09: 0000000000000000 [ 750.956379][T15544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.956394][T15544] R13: 0000000000000000 R14: 00007f7690bb5fa0 R15: 00007ffdc643ca68 [ 750.956434][T15544] [ 752.602321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.677458][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.046716][T15582] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 759.018530][T15648] ubi0: attaching mtd0 [ 759.042700][T15648] ubi0: scanning is finished [ 759.048803][T15648] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 759.315336][T15648] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 760.526432][T15674] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 760.594741][T15669] HfR: entered promiscuous mode [ 760.602926][T15672] openvswitch: HfR: Dropping previously announced user features [ 770.239973][T15783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 770.260302][T15783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 770.271280][T15783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 770.281442][T15783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.296671][T15783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 772.183349][ T8567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.355462][T15783] Bluetooth: hci4: command tx timeout [ 772.713792][ T8567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.916237][ T8567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.189445][ T8567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.601164][T15781] chnl_net:caif_netlink_parms(): no params data found [ 773.887386][ T8567] bridge_slave_0: left allmulticast mode [ 773.893932][ T8567] bridge_slave_0: left promiscuous mode [ 773.923595][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.444052][T15783] Bluetooth: hci4: command tx timeout [ 774.490380][T15821] ubi0: attaching mtd0 [ 774.508680][T15821] ubi0: scanning is finished [ 774.513374][T15821] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 774.977650][T15821] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 775.486732][ T8567] ip_vti0 (unregistering): left allmulticast mode [ 775.751722][T15844] filter_write: 4 callbacks suppressed [ 775.751740][T15844] msr: Write to unrecognized MSR 0x0 by syz.3.2271 (pid: 15844). [ 775.781253][T15844] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 776.458119][ T8567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.485623][ T8567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.498486][ T8567] bond0 (unregistering): Released all slaves [ 776.517540][T15783] Bluetooth: hci4: command tx timeout [ 776.762745][ T8567] HfR: left promiscuous mode [ 777.485876][T15781] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.493113][T15781] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.534327][T15781] bridge_slave_0: entered allmulticast mode [ 777.555255][T15781] bridge_slave_0: entered promiscuous mode [ 777.618902][T15781] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.642128][T15781] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.674278][T15781] bridge_slave_1: entered allmulticast mode [ 777.682557][T15781] bridge_slave_1: entered promiscuous mode [ 778.051164][T15781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.091923][T15781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.594627][T15783] Bluetooth: hci4: command tx timeout [ 779.056944][T15881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 779.121962][T15781] team0: Port device team_slave_0 added [ 779.176517][T15781] team0: Port device team_slave_1 added [ 779.643542][T15781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.674309][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.751707][T15781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.807364][T15781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.834300][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.975602][T15781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.393125][T15781] hsr_slave_0: entered promiscuous mode [ 781.415342][T15781] hsr_slave_1: entered promiscuous mode [ 781.432232][T15781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.454638][T15781] Cannot create hsr debugfs directory [ 782.938984][T15916] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 783.504381][T15920] ubi0: attaching mtd0 [ 783.509704][T15920] ubi0: scanning is finished [ 783.520534][T15920] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 784.153337][T15920] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 784.613651][T15939] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 785.262647][ T8567] hsr_slave_0: left promiscuous mode [ 785.300946][ T8567] hsr_slave_1: left promiscuous mode [ 785.311672][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.344651][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.391594][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.433081][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.548023][ T8567] veth1_macvtap: left promiscuous mode [ 785.556269][ T8567] veth0_macvtap: left promiscuous mode [ 785.570766][ T8567] veth1_vlan: left promiscuous mode [ 785.586720][ T8567] veth0_vlan: left promiscuous mode [ 785.879776][T15947] ubi0: attaching mtd0 [ 785.910998][T15947] ubi0: scanning is finished [ 785.931010][T15947] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 786.243239][T15947] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 787.587631][ T8567] team0 (unregistering): Port device team_slave_1 removed [ 787.975827][ T8567] team0 (unregistering): Port device team_slave_0 removed [ 790.411322][T15781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 790.446358][T15781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 790.581472][T15781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 790.663934][T15781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 791.092307][T15781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.207190][T15781] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.271584][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.280279][ T8567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.330779][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.337990][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.731446][T15781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.299899][T16015] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 793.406747][T15781] veth0_vlan: entered promiscuous mode [ 793.860559][T15781] veth1_vlan: entered promiscuous mode [ 794.440445][T15781] veth0_macvtap: entered promiscuous mode [ 794.500570][T15781] veth1_macvtap: entered promiscuous mode [ 794.573844][T15781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.667062][T15781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.719225][T15781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.754082][T15781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.785748][T15781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.810695][T15781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.468208][ T8556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.538647][ T8556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.730108][ T8565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.754512][ T8565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.667683][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2294'. [ 796.695636][T16073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.729567][T16073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.898667][T16073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.964166][T16073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.314873][T16044] netlink: 'syz.2.2289': attribute type 11 has an invalid length. [ 797.322803][T16044] netlink: 'syz.2.2289': attribute type 11 has an invalid length. [ 797.377811][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 797.438116][T16044] netlink: 'syz.2.2289': attribute type 11 has an invalid length. [ 797.502319][T16090] FAULT_INJECTION: forcing a failure. [ 797.502319][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 797.519922][T16044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2289'. [ 797.595311][T16044] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2289'. [ 797.596913][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.3.2295 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 797.596956][T16090] Tainted: [U]=USER [ 797.596965][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.596980][T16090] Call Trace: [ 797.596990][T16090] [ 797.597000][T16090] dump_stack_lvl+0x16c/0x1f0 [ 797.597044][T16090] should_fail_ex+0x512/0x640 [ 797.597080][T16090] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 797.597121][T16090] should_failslab+0xc2/0x120 [ 797.597145][T16090] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 797.597181][T16090] ? lockdep_init_map_type+0x5c/0x280 [ 797.597215][T16090] ? __d_alloc+0x31/0xaa0 [ 797.597256][T16090] __d_alloc+0x31/0xaa0 [ 797.597296][T16090] d_alloc_pseudo+0x1c/0xc0 [ 797.597324][T16090] alloc_file_pseudo+0xcf/0x230 [ 797.597353][T16090] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 797.597380][T16090] ? alloc_fd+0x471/0x7d0 [ 797.597418][T16090] sock_alloc_file+0x50/0x210 [ 797.597444][T16090] __sys_socket+0x1c0/0x260 [ 797.597475][T16090] ? __pfx___sys_socket+0x10/0x10 [ 797.597507][T16090] ? do_user_addr_fault+0x843/0x1370 [ 797.597547][T16090] __x64_sys_socket+0x72/0xb0 [ 797.597574][T16090] ? lockdep_hardirqs_on+0x7c/0x110 [ 797.597609][T16090] do_syscall_64+0xcd/0x490 [ 797.597649][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.597674][T16090] RIP: 0033:0x7fe336390847 [ 797.597695][T16090] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.597719][T16090] RSP: 002b:00007fe337214fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 797.597751][T16090] RAX: ffffffffffffffda RBX: 00007fe3365b6080 RCX: 00007fe336390847 [ 797.597769][T16090] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 797.597784][T16090] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 797.597799][T16090] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 797.597814][T16090] R13: 0000000000000000 R14: 00007fe3365b6080 R15: 00007ffe41eb3538 [ 797.597851][T16090] [ 802.505375][T16176] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 802.833205][T16141] netlink: 'syz.3.2300': attribute type 11 has an invalid length. [ 802.974180][T16141] netlink: 'syz.3.2300': attribute type 11 has an invalid length. [ 803.098741][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 803.253322][T16141] netlink: 'syz.3.2300': attribute type 11 has an invalid length. [ 803.324451][T16141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2300'. [ 803.333555][T16141] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2300'. [ 804.745342][T16195] FAULT_INJECTION: forcing a failure. [ 804.745342][T16195] name failslab, interval 1, probability 0, space 0, times 0 [ 804.823044][T16195] CPU: 1 UID: 0 PID: 16195 Comm: syz.2.2308 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 804.823081][T16195] Tainted: [U]=USER [ 804.823087][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.823096][T16195] Call Trace: [ 804.823103][T16195] [ 804.823110][T16195] dump_stack_lvl+0x16c/0x1f0 [ 804.823141][T16195] should_fail_ex+0x512/0x640 [ 804.823168][T16195] should_failslab+0xc2/0x120 [ 804.823186][T16195] __kmalloc_cache_noprof+0x6a/0x3e0 [ 804.823209][T16195] ? proc_self_get_link+0x1a9/0x230 [ 804.823235][T16195] proc_self_get_link+0x1a9/0x230 [ 804.823258][T16195] ? __pfx_proc_self_get_link+0x10/0x10 [ 804.823279][T16195] step_into+0x195b/0x2270 [ 804.823305][T16195] ? __pfx_step_into+0x10/0x10 [ 804.823329][T16195] ? lookup_fast+0x156/0x610 [ 804.823353][T16195] walk_component+0xfc/0x5b0 [ 804.823377][T16195] link_path_walk+0x627/0xe20 [ 804.823406][T16195] path_openat+0x1b0/0x2cb0 [ 804.823427][T16195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.823452][T16195] ? __pfx_path_openat+0x10/0x10 [ 804.823476][T16195] ? __lock_acquire+0xb8a/0x1c90 [ 804.823501][T16195] do_filp_open+0x20b/0x470 [ 804.823524][T16195] ? __pfx_do_filp_open+0x10/0x10 [ 804.823563][T16195] ? alloc_fd+0x471/0x7d0 [ 804.823590][T16195] do_sys_openat2+0x11b/0x1d0 [ 804.823615][T16195] ? __pfx_do_sys_openat2+0x10/0x10 [ 804.823642][T16195] __x64_sys_openat+0x174/0x210 [ 804.823660][T16195] ? __pfx___x64_sys_openat+0x10/0x10 [ 804.823688][T16195] do_syscall_64+0xcd/0x490 [ 804.823715][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.823732][T16195] RIP: 0033:0x7fe242f8e929 [ 804.823747][T16195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.823763][T16195] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 804.823781][T16195] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 804.823791][T16195] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 804.823802][T16195] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 804.823827][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.823838][T16195] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 804.823859][T16195] [ 808.833808][T16203] netlink: 'syz.3.2311': attribute type 11 has an invalid length. [ 808.915980][T16203] netlink: 'syz.3.2311': attribute type 11 has an invalid length. [ 808.924402][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 808.933525][T16203] netlink: 'syz.3.2311': attribute type 11 has an invalid length. [ 808.942165][T16203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2311'. [ 808.952570][T16203] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2311'. [ 813.844901][T16303] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 814.046597][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.053081][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.882774][T16305] netlink: 'syz.0.2328': attribute type 11 has an invalid length. [ 815.937939][T16305] netlink: 'syz.0.2328': attribute type 11 has an invalid length. [ 815.994208][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'. [ 816.050246][T16305] netlink: 'syz.0.2328': attribute type 11 has an invalid length. [ 816.121468][T16305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2328'. [ 816.178996][T16305] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2328'. [ 817.558304][T16354] FAULT_INJECTION: forcing a failure. [ 817.558304][T16354] name failslab, interval 1, probability 0, space 0, times 0 [ 817.659368][T16354] CPU: 0 UID: 0 PID: 16354 Comm: syz.0.2341 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 817.659417][T16354] Tainted: [U]=USER [ 817.659428][T16354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.659445][T16354] Call Trace: [ 817.659455][T16354] [ 817.659466][T16354] dump_stack_lvl+0x16c/0x1f0 [ 817.659517][T16354] should_fail_ex+0x512/0x640 [ 817.659558][T16354] ? __kmalloc_noprof+0xbf/0x510 [ 817.659616][T16354] ? lsm_blob_alloc+0x68/0x90 [ 817.659660][T16354] should_failslab+0xc2/0x120 [ 817.659690][T16354] __kmalloc_noprof+0xd2/0x510 [ 817.659746][T16354] lsm_blob_alloc+0x68/0x90 [ 817.659792][T16354] security_prepare_creds+0x30/0x270 [ 817.659837][T16354] prepare_creds+0x56f/0x7d0 [ 817.659883][T16354] __sys_setresuid+0x46d/0x1160 [ 817.659924][T16354] do_syscall_64+0xcd/0x490 [ 817.659974][T16354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.660003][T16354] RIP: 0033:0x7f1016d8e929 [ 817.660027][T16354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.660055][T16354] RSP: 002b:00007f1017bad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 817.660083][T16354] RAX: ffffffffffffffda RBX: 00007f1016fb5fa0 RCX: 00007f1016d8e929 [ 817.660103][T16354] RDX: 0000000000008000 RSI: 0000000000001000 RDI: 0000000000000060 [ 817.660120][T16354] RBP: 00007f1016e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.660138][T16354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.660156][T16354] R13: 0000000000000000 R14: 00007f1016fb5fa0 R15: 00007ffe7a313878 [ 817.660194][T16354] [ 819.132904][T16371] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 819.730834][T15783] Bluetooth: hci4: Malformed LE Event: 0x1b [ 819.766258][T16381] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 821.000879][T16408] filter_write: 1 callbacks suppressed [ 821.000904][T16408] msr: Write to unrecognized MSR 0x0 by syz.0.2353 (pid: 16408). [ 821.129727][T16408] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 821.843108][T16423] FAULT_INJECTION: forcing a failure. [ 821.843108][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 821.932524][T16423] CPU: 1 UID: 0 PID: 16423 Comm: syz.2.2355 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 821.932578][T16423] Tainted: [U]=USER [ 821.932598][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.932616][T16423] Call Trace: [ 821.932626][T16423] [ 821.932638][T16423] dump_stack_lvl+0x16c/0x1f0 [ 821.932692][T16423] should_fail_ex+0x512/0x640 [ 821.932735][T16423] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 821.932787][T16423] should_failslab+0xc2/0x120 [ 821.932817][T16423] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 821.932862][T16423] ? __alloc_skb+0x2b2/0x380 [ 821.932907][T16423] ? bpf_lsm_capable+0x9/0x10 [ 821.932949][T16423] __alloc_skb+0x2b2/0x380 [ 821.932998][T16423] ? __pfx___alloc_skb+0x10/0x10 [ 821.933043][T16423] ? genl_rcv_msg+0x4bb/0x800 [ 821.933095][T16423] netlink_ack+0x15d/0xb80 [ 821.933143][T16423] netlink_rcv_skb+0x332/0x420 [ 821.933177][T16423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.933219][T16423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.933273][T16423] ? netlink_deliver_tap+0x1ae/0xd30 [ 821.933313][T16423] genl_rcv+0x28/0x40 [ 821.933344][T16423] netlink_unicast+0x53d/0x7f0 [ 821.933381][T16423] ? __pfx_netlink_unicast+0x10/0x10 [ 821.933426][T16423] netlink_sendmsg+0x8d1/0xdd0 [ 821.933466][T16423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.933514][T16423] ____sys_sendmsg+0xa98/0xc70 [ 821.933551][T16423] ? copy_msghdr_from_user+0x10a/0x160 [ 821.933605][T16423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.933659][T16423] ___sys_sendmsg+0x134/0x1d0 [ 821.933708][T16423] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.933749][T16423] ? __lock_acquire+0x622/0x1c90 [ 821.933840][T16423] __sys_sendmsg+0x16d/0x220 [ 821.933890][T16423] ? __pfx___sys_sendmsg+0x10/0x10 [ 821.933933][T16423] ? __x64_sys_futex+0x1e0/0x4c0 [ 821.933988][T16423] do_syscall_64+0xcd/0x490 [ 821.934034][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.934065][T16423] RIP: 0033:0x7fe242f8e929 [ 821.934092][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.934121][T16423] RSP: 002b:00007fe243ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.934151][T16423] RAX: ffffffffffffffda RBX: 00007fe2431b5fa0 RCX: 00007fe242f8e929 [ 821.934171][T16423] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000002 [ 821.934190][T16423] RBP: 00007fe243010b39 R08: 0000000000000000 R09: 0000000000000000 [ 821.934208][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.934225][T16423] R13: 0000000000000000 R14: 00007fe2431b5fa0 R15: 00007ffda91b3128 [ 821.934265][T16423] [ 825.749035][T16480] ERROR: Out of memory at tomoyo_memory_ok. [ 830.269831][T16525] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 831.512574][T16538] Invalid ELF header magic: != ELF [ 833.272765][T16558] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:1 is already present [ 833.641248][T16565] vhci_hcd: invalid port number 16 [ 833.686772][T16565] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 833.989202][T16574] ERROR: Out of memory at tomoyo_memory_ok. [ 834.111531][T16576] FAULT_INJECTION: forcing a failure. [ 834.111531][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 834.261624][T16576] CPU: 1 UID: 0 PID: 16576 Comm: syz.0.2383 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 834.261680][T16576] Tainted: [U]=USER [ 834.261695][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 834.261713][T16576] Call Trace: [ 834.261723][T16576] [ 834.261735][T16576] dump_stack_lvl+0x16c/0x1f0 [ 834.261788][T16576] should_fail_ex+0x512/0x640 [ 834.261831][T16576] ? fs_reclaim_acquire+0xae/0x150 [ 834.261869][T16576] should_failslab+0xc2/0x120 [ 834.261899][T16576] __kmalloc_cache_noprof+0x6a/0x3e0 [ 834.261940][T16576] ? tomoyo_write_log2+0x33d/0xc10 [ 834.261987][T16576] tomoyo_write_log2+0x33d/0xc10 [ 834.262034][T16576] tomoyo_supervisor+0x15e/0x13b0 [ 834.262089][T16576] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 834.262152][T16576] ? lockdep_hardirqs_on+0x7c/0x110 [ 834.262205][T16576] ? tomoyo_check_path_acl+0xad/0x210 [ 834.262240][T16576] ? tomoyo_check_acl+0x1f7/0x410 [ 834.262277][T16576] tomoyo_path_permission+0x270/0x3b0 [ 834.262317][T16576] tomoyo_check_open_permission+0x37b/0x3c0 [ 834.262355][T16576] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 834.262433][T16576] ? do_raw_spin_lock+0x12c/0x2b0 [ 834.262504][T16576] tomoyo_file_open+0x6b/0x90 [ 834.262553][T16576] security_file_open+0x84/0x1e0 [ 834.262594][T16576] do_dentry_open+0x596/0x1c10 [ 834.262653][T16576] vfs_open+0x82/0x3f0 [ 834.262692][T16576] path_openat+0x1de4/0x2cb0 [ 834.262750][T16576] ? __pfx_path_openat+0x10/0x10 [ 834.262805][T16576] do_filp_open+0x20b/0x470 [ 834.262850][T16576] ? __pfx_do_filp_open+0x10/0x10 [ 834.262892][T16576] ? mark_held_locks+0x49/0x80 [ 834.262959][T16576] ? alloc_fd+0x471/0x7d0 [ 834.263013][T16576] do_sys_openat2+0x11b/0x1d0 [ 834.263046][T16576] ? __pfx_do_sys_openat2+0x10/0x10 [ 834.263097][T16576] __x64_sys_openat+0x174/0x210 [ 834.263132][T16576] ? __pfx___x64_sys_openat+0x10/0x10 [ 834.263183][T16576] do_syscall_64+0xcd/0x490 [ 834.263229][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.263259][T16576] RIP: 0033:0x7f1016d8e929 [ 834.263284][T16576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.263313][T16576] RSP: 002b:00007f1017bad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 834.263342][T16576] RAX: ffffffffffffffda RBX: 00007f1016fb5fa0 RCX: 00007f1016d8e929 [ 834.263361][T16576] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 834.263380][T16576] RBP: 00007f1016e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 834.263398][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.263415][T16576] R13: 0000000000000000 R14: 00007f1016fb5fa0 R15: 00007ffe7a313878 [ 834.263465][T16576] [ 834.858938][T16583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.435233][T16590] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 835.857486][T16599] block2mtd: Using custom MTD label '' for dev [ 835.864378][T16599] block2mtd: error: cannot open device [ 835.870869][T16600] syz.0.2387 (16600): attempted to duplicate a private mapping with mremap. This is not supported. [ 837.499663][T16635] ubi0: attaching mtd0 [ 837.657152][T16635] ubi0: scanning is finished [ 837.670227][T16635] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 837.718465][T16637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.305579][T16635] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 838.508296][T16650] : Can't lookup blockdev [ 838.800828][T16649] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 839.968098][T16672] FAULT_INJECTION: forcing a failure. [ 839.968098][T16672] name failslab, interval 1, probability 0, space 0, times 0 [ 840.024045][T16672] CPU: 1 UID: 0 PID: 16672 Comm: syz.1.2399 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 840.024095][T16672] Tainted: [U]=USER [ 840.024104][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.024122][T16672] Call Trace: [ 840.024132][T16672] [ 840.024142][T16672] dump_stack_lvl+0x16c/0x1f0 [ 840.024193][T16672] should_fail_ex+0x512/0x640 [ 840.024229][T16672] ? fs_reclaim_acquire+0xae/0x150 [ 840.024266][T16672] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 840.024305][T16672] should_failslab+0xc2/0x120 [ 840.024334][T16672] __kmalloc_noprof+0xd2/0x510 [ 840.024393][T16672] tomoyo_realpath_from_path+0xc2/0x6e0 [ 840.024437][T16672] ? tomoyo_profile+0x47/0x60 [ 840.024485][T16672] tomoyo_path_perm+0x274/0x460 [ 840.024514][T16672] ? tomoyo_path_perm+0x260/0x460 [ 840.024549][T16672] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 840.024627][T16672] ? __pfx_ima_file_check+0x10/0x10 [ 840.024666][T16672] ? hook_file_truncate+0xc7/0x250 [ 840.024709][T16672] security_file_truncate+0x84/0x1e0 [ 840.024748][T16672] path_openat+0xc10/0x2cb0 [ 840.024802][T16672] ? __pfx_path_openat+0x10/0x10 [ 840.024847][T16672] ? __lock_acquire+0xb8a/0x1c90 [ 840.024891][T16672] do_filp_open+0x20b/0x470 [ 840.024932][T16672] ? __pfx_do_filp_open+0x10/0x10 [ 840.025004][T16672] ? alloc_fd+0x471/0x7d0 [ 840.025054][T16672] do_sys_openat2+0x11b/0x1d0 [ 840.025085][T16672] ? __pfx_do_sys_openat2+0x10/0x10 [ 840.025133][T16672] __x64_sys_openat+0x174/0x210 [ 840.025167][T16672] ? __pfx___x64_sys_openat+0x10/0x10 [ 840.025217][T16672] do_syscall_64+0xcd/0x490 [ 840.025265][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.025294][T16672] RIP: 0033:0x7f58b598e929 [ 840.025320][T16672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.025348][T16672] RSP: 002b:00007f58b68c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 840.025387][T16672] RAX: ffffffffffffffda RBX: 00007f58b5bb5fa0 RCX: 00007f58b598e929 [ 840.025406][T16672] RDX: 00000000000206a1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 840.025426][T16672] RBP: 00007f58b5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 840.025443][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.025460][T16672] R13: 0000000000000000 R14: 00007f58b5bb5fa0 R15: 00007ffebf2a0e08 [ 840.025503][T16672] [ 840.025515][T16672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 840.309795][T16679] netlink: 98 bytes leftover after parsing attributes in process `syz.0.2400'. [ 840.321268][T16674] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 840.417023][T16679] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2400'. [ 842.856117][T16709] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 843.122021][T16712] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 844.521372][T16607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.531880][T16607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.540613][T16607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.551818][T16607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.560599][T16607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.751573][T16606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.790556][T16748] ubi0: attaching mtd0 [ 845.817751][T16748] ubi0: scanning is finished [ 845.835502][T16748] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 845.860594][T16727] chnl_net:caif_netlink_parms(): no params data found [ 846.133877][T16748] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 846.263640][T16606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.594135][T16607] Bluetooth: hci0: command tx timeout [ 846.707885][T16606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.948130][T16765] cougar: G6 mapped to space [ 847.747311][T16606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.879992][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.888808][T16770] ERROR: Out of memory at tomoyo_memory_ok. [ 847.897817][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.907185][T16727] bridge_slave_0: entered allmulticast mode [ 847.924760][T16727] bridge_slave_0: entered promiscuous mode [ 847.975482][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.982712][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.015323][T16727] bridge_slave_1: entered allmulticast mode [ 848.024930][T16727] bridge_slave_1: entered promiscuous mode [ 848.370279][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.424499][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.655163][T16727] team0: Port device team_slave_0 added [ 848.681129][T16607] Bluetooth: hci0: command tx timeout [ 848.722114][T16727] team0: Port device team_slave_1 added [ 850.403206][T16606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.414660][T16606] bond_slave_0: left allmulticast mode [ 850.426064][T16606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.438514][T16606] bond0 (unregistering): Released all slaves [ 850.470889][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.482644][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.523267][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.538527][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.546036][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.577674][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.659098][T16606] HfR: left promiscuous mode [ 850.759049][T16607] Bluetooth: hci0: command tx timeout [ 850.944689][T16727] hsr_slave_0: entered promiscuous mode [ 850.952227][T16727] hsr_slave_1: entered promiscuous mode [ 852.353103][T16834] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 852.453405][T16837] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 852.840592][T16607] Bluetooth: hci0: command tx timeout [ 852.990177][T16840] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 854.325977][T16727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 854.387520][T16727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 854.440274][T16727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 854.475621][T16727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 855.165107][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.259987][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.473732][T16609] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.480936][T16609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.718881][T16891] ubi0: attaching mtd0 [ 855.760086][T16891] ubi0: scanning is finished [ 855.783758][T16891] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 855.910789][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.918214][T16766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.073742][T16891] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 856.418825][T16606] hsr_slave_0: left promiscuous mode [ 856.486023][T16606] hsr_slave_1: left promiscuous mode [ 856.505161][T16606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.512679][T16606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.776419][T16606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.795032][T16606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.897923][T16606] veth1_macvtap: left promiscuous mode [ 856.904490][T16606] veth1_vlan: left promiscuous mode [ 856.910389][T16606] veth0_vlan: left promiscuous mode [ 858.354381][T16606] team0 (unregistering): Port device team_slave_1 removed [ 858.416863][T16606] team0 (unregistering): Port device team_slave_0 removed [ 859.762557][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.947230][T16727] veth0_vlan: entered promiscuous mode [ 859.998589][T16727] veth1_vlan: entered promiscuous mode [ 860.397687][T16727] veth0_macvtap: entered promiscuous mode [ 860.450687][T16727] veth1_macvtap: entered promiscuous mode [ 860.501233][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.560512][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.747989][T16727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.774015][T16727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.794060][T16727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.814104][T16727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.853792][T16947] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.082671][T16921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.118864][T16952] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2443'. [ 861.135092][T16921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.213380][T16921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.227121][T16921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.435436][T16957] filter_write: 1 callbacks suppressed [ 861.435462][T16957] msr: Write to unrecognized MSR 0x0 by syz.1.2444 (pid: 16957). [ 861.467208][T16957] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 863.021281][T16615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 863.045787][T16615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 863.057619][T16615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 863.071610][T16615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 863.081168][T16615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.395841][T16977] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 863.467660][T16979] chnl_net:caif_netlink_parms(): no params data found [ 863.808457][T16979] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.816289][T16997] FAULT_INJECTION: forcing a failure. [ 863.816289][T16997] name failslab, interval 1, probability 0, space 0, times 0 [ 863.857930][T16979] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.884520][T16997] CPU: 1 UID: 0 PID: 16997 Comm: syz.3.2451 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 863.884573][T16997] Tainted: [U]=USER [ 863.884582][T16997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 863.884601][T16997] Call Trace: [ 863.884610][T16997] [ 863.884622][T16997] dump_stack_lvl+0x16c/0x1f0 [ 863.884672][T16997] should_fail_ex+0x512/0x640 [ 863.884714][T16997] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 863.884764][T16997] should_failslab+0xc2/0x120 [ 863.884792][T16997] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 863.884838][T16997] ? shmem_alloc_inode+0x25/0x50 [ 863.884873][T16997] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 863.884901][T16997] shmem_alloc_inode+0x25/0x50 [ 863.884929][T16997] alloc_inode+0x64/0x240 [ 863.884960][T16997] new_inode+0x22/0x1c0 [ 863.884986][T16997] ? trace_cap_capable+0x18d/0x200 [ 863.885019][T16997] shmem_get_inode+0x19a/0xfb0 [ 863.885054][T16997] ? __vm_enough_memory+0x184/0x3f0 [ 863.885086][T16997] __shmem_file_setup+0x279/0x330 [ 863.885129][T16997] shmem_zero_setup+0x93/0x1a0 [ 863.885175][T16997] __mmap_region+0x1ece/0x25e0 [ 863.885223][T16997] ? __pfx___mmap_region+0x10/0x10 [ 863.885266][T16997] ? rcu_is_watching+0x12/0xc0 [ 863.885303][T16997] ? rcu_is_watching+0x12/0xc0 [ 863.885341][T16997] ? trace_sched_exit_tp+0xde/0x130 [ 863.885376][T16997] ? __schedule+0x1181/0x5de0 [ 863.885446][T16997] ? __pfx___schedule+0x10/0x10 [ 863.885547][T16997] ? trace_cap_capable+0x18d/0x200 [ 863.885594][T16997] mmap_region+0x1ab/0x3f0 [ 863.885638][T16997] ? __get_unmapped_area+0x267/0x440 [ 863.885678][T16997] do_mmap+0xa3e/0x1210 [ 863.885721][T16997] ? __pfx_do_mmap+0x10/0x10 [ 863.885755][T16997] ? __pfx_down_write_killable+0x10/0x10 [ 863.885795][T16997] vm_mmap_pgoff+0x281/0x450 [ 863.885835][T16997] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 863.885878][T16997] ? __x64_sys_futex+0x1e0/0x4c0 [ 863.885912][T16997] ? __x64_sys_futex+0x1e9/0x4c0 [ 863.885955][T16997] ksys_mmap_pgoff+0x7d/0x5c0 [ 863.885986][T16997] ? xfd_validate_state+0x61/0x180 [ 863.886032][T16997] __x64_sys_mmap+0x125/0x190 [ 863.886084][T16997] do_syscall_64+0xcd/0x490 [ 863.886133][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.886164][T16997] RIP: 0033:0x7fc23138e929 [ 863.886190][T16997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.886219][T16997] RSP: 002b:00007fc2321a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 863.886248][T16997] RAX: ffffffffffffffda RBX: 00007fc2315b5fa0 RCX: 00007fc23138e929 [ 863.886266][T16997] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 863.886284][T16997] RBP: 00007fc231410b39 R08: fffffffffffffffa R09: 0000000000008000 [ 863.886303][T16997] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 863.886319][T16997] R13: 0000000000000000 R14: 00007fc2315b5fa0 R15: 00007ffc25762378 [ 863.886366][T16997] [ 863.894195][T16979] bridge_slave_0: entered allmulticast mode [ 864.221951][T16979] bridge_slave_0: entered promiscuous mode [ 864.233120][T16979] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.241209][T16979] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.249012][T16979] bridge_slave_1: entered allmulticast mode [ 864.257575][T16979] bridge_slave_1: entered promiscuous mode [ 864.622214][T17003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2452'. [ 864.632714][T16979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.685919][T16979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.876005][T17003] hsr_slave_0 (unregistering): left promiscuous mode [ 865.072806][T16766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.157997][T16615] Bluetooth: hci1: command tx timeout [ 865.215342][T16766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.291245][T16979] team0: Port device team_slave_0 added [ 865.362978][T16766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.400853][T16979] team0: Port device team_slave_1 added [ 865.546693][T16766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.763430][T16979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.802296][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.851154][T16979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.898876][T16979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.916314][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.949033][T16979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.218559][T17018] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 866.422984][T17016] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 866.532214][T16979] hsr_slave_0: entered promiscuous mode [ 866.548036][T16979] hsr_slave_1: entered promiscuous mode [ 866.559486][T16979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.567689][T16979] Cannot create hsr debugfs directory [ 866.627592][T16766] bridge_slave_0: left allmulticast mode [ 866.640908][T16766] bridge_slave_0: left promiscuous mode [ 866.652741][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.011651][T17025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 867.239559][T16615] Bluetooth: hci1: command tx timeout [ 867.323720][T16766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.345822][T16766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.366865][T16766] bond0 (unregistering): Released all slaves [ 867.481937][T16766] HfR: left promiscuous mode [ 868.094710][T17045] ERROR: Out of memory at tomoyo_memory_ok. [ 869.314156][T16615] Bluetooth: hci1: command tx timeout [ 869.627081][T16979] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 869.924597][T16979] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 870.046575][T16979] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 870.152773][T16979] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.394267][T16615] Bluetooth: hci1: command tx timeout [ 871.502468][T16979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.599292][T16979] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.042224][T16766] hsr_slave_0: left promiscuous mode [ 872.074588][T16766] hsr_slave_1: left promiscuous mode [ 872.159416][T16766] veth1_macvtap: left promiscuous mode [ 872.201987][T16766] veth0_macvtap: left promiscuous mode [ 872.240441][T16766] veth1_vlan: left promiscuous mode [ 872.266209][T16766] veth0_vlan: left promiscuous mode [ 872.896849][T17113] ERROR: Out of memory at tomoyo_memory_ok. [ 872.963312][T17112] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 873.777934][T17121] ERROR: Out of memory at tomoyo_memory_ok. [ 874.179666][T16766] team0 (unregistering): Port device team_slave_1 removed [ 874.348918][T16766] team0 (unregistering): Port device team_slave_0 removed [ 874.790118][ T30] audit: type=1800 audit(4294971456.671:12): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2471" name="file0" dev="tmpfs" ino=3187 res=0 errno=0 [ 875.129601][T17137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.482581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.489342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.890914][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.898225][T16610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.993149][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.000603][T16610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.158620][T17153] FAULT_INJECTION: forcing a failure. [ 877.158620][T17153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.224314][T17153] CPU: 1 UID: 0 PID: 17153 Comm: syz.3.2476 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 877.224356][T17153] Tainted: [U]=USER [ 877.224361][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 877.224372][T17153] Call Trace: [ 877.224378][T17153] [ 877.224384][T17153] dump_stack_lvl+0x16c/0x1f0 [ 877.224415][T17153] should_fail_ex+0x512/0x640 [ 877.224442][T17153] _copy_from_user+0x2e/0xd0 [ 877.224469][T17153] do_sock_getsockopt+0x5f4/0x800 [ 877.224491][T17153] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 877.224509][T17153] ? __fget_files+0x204/0x3c0 [ 877.224533][T17153] ? 0xffffffffff600000 [ 877.224554][T17153] __sys_getsockopt+0x123/0x1b0 [ 877.224579][T17153] ? 0xffffffffff600000 [ 877.224594][T17153] __x64_sys_getsockopt+0xbd/0x160 [ 877.224618][T17153] ? do_syscall_64+0x91/0x490 [ 877.224643][T17153] ? lockdep_hardirqs_on+0x7c/0x110 [ 877.224667][T17153] do_syscall_64+0xcd/0x490 [ 877.224694][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.224711][T17153] RIP: 0033:0x7fc23138e929 [ 877.224724][T17153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.224742][T17153] RSP: 002b:00007fc2321a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 877.224760][T17153] RAX: ffffffffffffffda RBX: 00007fc2315b5fa0 RCX: 00007fc23138e929 [ 877.224771][T17153] RDX: 0000000000000005 RSI: 0000000000000114 RDI: 0000000000000004 [ 877.224780][T17153] RBP: 00007fc2321a9090 R08: 0000000000000000 R09: 0000000000000000 [ 877.224790][T17153] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 877.224800][T17153] R13: 0000000000000000 R14: 00007fc2315b5fa0 R15: 00007ffc25762378 [ 877.224814][T17153] ? 0xffffffffff600000 [ 877.224832][T17153] [ 877.915068][T16979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.133126][T16979] veth0_vlan: entered promiscuous mode [ 878.267127][T16979] veth1_vlan: entered promiscuous mode [ 878.458662][T16979] veth0_macvtap: entered promiscuous mode [ 878.624867][T16979] veth1_macvtap: entered promiscuous mode [ 878.742229][T16979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.779403][T16979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.857413][T16979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.866623][T16979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.880703][T16979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.891092][T16979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.777817][T16631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.828515][T16631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.014072][T17186] ubi0: attaching mtd0 [ 880.035969][T17186] ubi0: scanning is finished [ 880.069093][T17186] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 880.263523][T16609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.276615][T16609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.464064][T17186] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 881.767289][T16607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 881.784352][T16607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 881.804867][T16607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 881.813040][T16607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 881.830453][T16607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.503492][T16606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.764337][T16606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.923504][T16606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.106670][T16606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.639138][T17230] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 883.692675][T17235] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 883.781026][T17208] chnl_net:caif_netlink_parms(): no params data found [ 883.812541][T16606] vlan1: left allmulticast mode [ 883.818751][T16606] veth0_vlan: left allmulticast mode [ 883.825946][T16606] vlan1: left promiscuous mode [ 883.835140][T16606] bridge0: port 2(vlan1) entered disabled state [ 883.863383][T16606] bridge_slave_0: left allmulticast mode [ 883.876374][T16607] Bluetooth: hci3: command tx timeout [ 883.883787][T16606] bridge_slave_0: left promiscuous mode [ 883.896455][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.206872][T16606] ip_vti0 (unregistering): left allmulticast mode [ 884.717511][T16606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.747674][T16606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.770010][T16606] bond0 (unregistering): Released all slaves [ 884.823435][T17230] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 884.863785][T17230] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 884.894217][T17230] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 885.065996][T16606] HfR: left promiscuous mode [ 885.145414][T16606] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 885.158252][T16606] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 885.166891][T16606] CPU: 0 UID: 0 PID: 16606 Comm: kworker/u10:0 Tainted: G U 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 885.181174][T16606] Tainted: [U]=USER [ 885.185105][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 885.195788][T16606] Workqueue: netns cleanup_net [ 885.200830][T16606] RIP: 0010:tipc_conn_close+0x48/0x1c0 [ 885.206797][T16606] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 5b 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 08 48 8d 7d 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 45 01 00 00 4c 8b 6d 18 49 8d ad d8 03 00 00 48 [ 885.227127][T16606] RSP: 0018:ffffc9000ba3fa58 EFLAGS: 00010206 [ 885.233515][T16606] RAX: dffffc0000000000 RBX: ffff88805234ac00 RCX: 0000000000000007 [ 885.241519][T16606] RDX: 0000000000000003 RSI: ffffffff8b1ed264 RDI: 0000000000000018 [ 885.249586][T16606] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 885.257566][T16606] R10: ffffffff90a82757 R11: 0000000000000001 R12: ffff8881457a4c58 [ 885.265966][T16606] R13: ffffed1028af4993 R14: ffff88805234ac08 R15: ffff88805234ac00 [ 885.274003][T16606] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 885.283332][T16606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.290210][T16606] CR2: 00007fffbf822d88 CR3: 0000000031fe6000 CR4: 00000000003526f0 [ 885.298469][T16606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 885.306684][T16606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 885.314705][T16606] Call Trace: [ 885.318118][T16606] [ 885.321067][T16606] tipc_topsrv_exit_net+0x146/0x3b0 [ 885.326472][T16606] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 885.332303][T16606] ops_undo_list+0x2eb/0xab0 [ 885.336921][T16606] ? __pfx_ops_undo_list+0x10/0x10 [ 885.342167][T16606] ? __local_bh_enable_ip+0xa4/0x120 [ 885.347489][T16606] cleanup_net+0x408/0x890 [ 885.352071][T16606] ? __pfx_cleanup_net+0x10/0x10 [ 885.357670][T16606] ? rcu_is_watching+0x12/0xc0 [ 885.362466][T16606] process_one_work+0x9cc/0x1b70 [ 885.367662][T16606] ? __pfx_cleanup_net+0x10/0x10 [ 885.372824][T16606] ? __pfx_process_one_work+0x10/0x10 [ 885.378248][T16606] ? assign_work+0x1a0/0x250 [ 885.382862][T16606] worker_thread+0x6c8/0xf10 [ 885.387500][T16606] ? __pfx_worker_thread+0x10/0x10 [ 885.392641][T16606] kthread+0x3c5/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 885.396744][T16606] ? __pfx_kthread+0x10/0x10 [ 885.401358][T16606] ? rcu_is_watching+0x12/0xc0 [ 885.406252][T16606] ? __pfx_kthread+0x10/0x10 [ 885.410865][T16606] ret_from_fork+0x5d4/0x6f0 [ 885.415741][T16606] ? __pfx_kthread+0x10/0x10 [ 885.420364][T16606] ret_from_fork_asm+0x1a/0x30 [ 885.425176][T16606] [ 885.428294][T16606] Modules linked in: [ 885.433233][T16606] ---[ end trace 0000000000000000 ]--- [ 885.470706][ T5182] ERROR: Out of memory at tomoyo_memory_ok. [ 885.527111][T16606] RIP: 0010:tipc_conn_close+0x48/0x1c0 [ 885.532687][T16606] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 5b 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 08 48 8d 7d 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 45 01 00 00 4c 8b 6d 18 49 8d ad d8 03 00 00 48 [ 885.582241][T16606] RSP: 0018:ffffc9000ba3fa58 EFLAGS: 00010206 [ 885.604246][T16606] RAX: dffffc0000000000 RBX: ffff88805234ac00 RCX: 0000000000000007 [ 885.612316][T16606] RDX: 0000000000000003 RSI: ffffffff8b1ed264 RDI: 0000000000000018 [ 885.633973][T16606] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 885.655003][T16606] R10: ffffffff90a82757 R11: 0000000000000001 R12: ffff8881457a4c58 [ 885.684697][T16606] R13: ffffed1028af4993 R14: ffff88805234ac08 R15: ffff88805234ac00 [ 885.692760][T16606] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 885.703329][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.703977][T16606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.733999][T16606] CR2: 00007f1017b8bf98 CR3: 000000004ec58000 CR4: 00000000003526f0 [ 885.741621][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.752297][T16606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 885.769873][T16606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 885.771049][T17208] bridge_slave_0: entered allmulticast mode [ 885.779311][T16606] Kernel panic - not syncing: Fatal exception [ 885.784572][T16606] Kernel Offset: disabled