last executing test programs: 10m18.980592954s ago: executing program 1 (id=1247): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0xa8680, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x15, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0xc57a, 0x5, 0xc, 0xd}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0xfffffffffffffffe, 0xfff, 0x0, 0x9, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0xe, r2, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty15\x00', 0x109401, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) socket(0x2b, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x800001, 0x5c61fa2c, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="130029bd704fb068c18e97d09150d3fdaa6dd200fbdbdf25030000000400080914000180080002800400325908001400a9c12c20"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) 10m17.794782589s ago: executing program 1 (id=1252): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) 10m17.568926294s ago: executing program 1 (id=1256): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x14, 0x0, 0xdb589d63fce79fc7, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d}\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xff\xff\xff\x7f\x00\x00\x00\x00\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfa\xcb\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x3, 0xa, 0xfff) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r2}, 0x1) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) 10m15.573235581s ago: executing program 1 (id=1261): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) (async) close_range$auto(0x2, 0x8000, 0x0) bpf$auto(0x15, &(0x7f0000000100)=@batch={0x7fff, 0x1, 0x7, 0x8000000000000000, 0xd, 0xffffffffffffffff, 0x7, 0xf0ce}, 0xcb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) (async, rerun: 64) mmap$auto(0x0, 0x4004, 0x3, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 32) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_register$auto(0x2, 0x0, 0x0, 0x5) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) write$auto(r1, &(0x7f0000000000)='9\x00d11V\xbe\x91!\x9ab2\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) (async) read$auto(r1, 0x0, 0x80000000) (async) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) (async) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) listen$auto(0x3, 0x81) 10m15.387492858s ago: executing program 1 (id=1263): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = fsmount$auto(r0, 0x1, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) socket(0xf, 0x3, 0x2) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r5 = prctl$auto_PR_SCHED_CORE_CREATE(0x80, 0x1, r4, 0x800, 0x514) r6 = socket(0x2, 0x2, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$auto_EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f00000000c0)=0x3ff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x80000000001ff, 0x7, 0xd3d, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xb, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x1000000000]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xc451, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r5, 0x40044145, &(0x7f0000000040)=0x4) 10m14.909044302s ago: executing program 1 (id=1268): utime$auto(0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01802bbd7080fadbdf250461319144c24e1a00000004000d00"], 0x18}}, 0x4044820) mmap$auto(0x8000000000, 0x2000000000000c39, 0xe2, 0x400000000009b72, r3, 0x1000) sysfs$auto(0x2, 0x4d, 0x7fffffffff) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0xffffffffffffffff) mmap$auto(0x0, 0x420008, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x200, 0x0) socket(0x2, 0x3, 0x2) read$auto(r5, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0xc048aeca, 0x0) 10m14.640638469s ago: executing program 32 (id=1268): utime$auto(0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01802bbd7080fadbdf250461319144c24e1a00000004000d00"], 0x18}}, 0x4044820) mmap$auto(0x8000000000, 0x2000000000000c39, 0xe2, 0x400000000009b72, r3, 0x1000) sysfs$auto(0x2, 0x4d, 0x7fffffffff) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0xffffffffffffffff) mmap$auto(0x0, 0x420008, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x200, 0x0) socket(0x2, 0x3, 0x2) read$auto(r5, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0xc048aeca, 0x0) 10m9.464885972s ago: executing program 0 (id=1292): unshare$auto(0x40000080) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xb00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r2, r2, 0x0, 0x4000000a1f) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS2(r4, 0xc0884113, &(0x7f0000000340)={0x0, 0x8000006, 0x2, 0xf9e1, 0x3, 0x4200000008001, 0x4000000000000a99, 0x2, 0x6, 0x628d, 0x7, 0x6, "1000000000000000006072487dadd02e6a5fafa16c75e4d8f7baa0812900bf978caf0300576a57de7f23cd667c1218b934b475ead70a1f6e"}) 10m7.954493568s ago: executing program 0 (id=1304): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xe43, 0xd, 0x10400, 0xe, 0x4, 0xc, r0, [0xfffffffc, 0x81, 0x20000000], {0x5, 0x5, 0x8c48, 0x2a3, 0x104, 0x7ffffffb, 0x100101, 0x6, 0x9340}, {0xd901, 0x81, 0x1001, 0x1, 0x9, 0x40, 0x76c5, 0x8000008, 0xd}}) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r1, 0x0, 0x5, 0x0, 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x4063c2, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, 0x0, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000800)='./file0\x00', 0x26c1, 0x154) execve$auto(0x0, 0x0, &(0x7f0000000100)=0x0) semctl$auto_GETNCNT(0x80000000, 0xe, 0xe, 0x6) r5 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d89c5d00", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf257f0000000600f700050b00000600b10005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x74, 0x2000000000002) write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001) clock_nanosleep$auto(0x7, 0x7fff, &(0x7f0000000000)={0x5, 0x5}, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0xaa080, 0x0) pread64$auto(r3, 0x0, 0x3c02, 0x100007) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 10m6.97872802s ago: executing program 0 (id=1300): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) 10m6.817764763s ago: executing program 0 (id=1301): read$auto_evm_key_ops_evm_secfs(0xffffffffffffffff, 0x0, 0x0) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x5, 0x0, 0x110000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94303e69fa83393849919be8cb1547fec6c64c6a1f55adf121cbc022679471e28348087f4f6d0c16b4824e0300000059149e5871bfdef5cd", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04000000", @ANYRES8=r1, @ANYBLOB="040026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x801}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) ioctl$auto(r1, 0x40104d01, 0x7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 10m5.879641641s ago: executing program 0 (id=1307): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = fsmount$auto(r0, 0x1, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) socket(0xf, 0x3, 0x2) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r5 = prctl$auto_PR_SCHED_CORE_CREATE(0x80, 0x1, r4, 0x800, 0x514) r6 = socket(0x2, 0x2, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$auto_EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f00000000c0)=0x3ff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x80000000001ff, 0x7, 0xd3d, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xb, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x1000000000]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xc451, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r5, 0x40044145, &(0x7f0000000040)=0x4) 10m5.024229706s ago: executing program 0 (id=1310): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)="ce45cd9af0f913d0215a3d2424f6704dff457da30bf5c4f1b23dd8faac89052b43fa9dc179a2b64570dcea94bf1f8dd9f1363408c34eb064d112b860388eaa221c2a53ace7de275c41e6be22dbb4b78266d88f0bc0f9b5ebd9096d9cd5b64a1951d9fc5e2e7063e62db3c712e9336c14d7312788351defe8682723e251cadfadffa69adb206d3991f48f79431f64468c45822e46e957a22eb8a93995ab0668507b350db39de30d8143cddf182af796fa5335e3098b3ef1b1030d6e53a83340fb7a8f9bd9484e6138dc0ccfb20ba24b8c7f7c2db319e5a3dcf8a05edbc9d6191fddb055d78991d857eb8273d84378e86e34", 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0x136, &(0x7f0000000140)={@siginfo_0_0={0xad, 0x2, 0xa, @_sigpoll={0x0, r0}}}, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_VHT_CAPABILITY={0x47, 0x9d, "0373a918474c40ee6923c5b596c39aed5aa6ae72dd599580095d23ead031bb051e4d8079830794565cd28bdc7af951259d6867d68801df5e5a5b743bb1948660b00de9"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xf}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) r3 = socket(0x22, 0x2, 0x8) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x8004) mmap$auto(0x8000, 0x400, 0xffffffffffffffff, 0x15, r0, 0x95) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x7f}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3f}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x400}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1ff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_VENDOR_DATA={0x6b, 0x1f, "2cccdcaab94ec86f7ac96a81218846d8e2c3b405480dd15f1e2303c77ed5e62a597977470698ec865e35d745bd8938adf9fc204721e381e1775a2abca8675d5c33cab09fd5f77562e6c529ec3a42aa52503418448d439694a0823c264074c23383125fcb7642f2"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/virtual/block/ram4/integrity/read_verify\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x6f, 0x125, "00e2e02a22d56f8be16802d99a260b152d83c92eea8f0e16bf35f83dfd6712b694dce788d7b72e603c885ecd40565fb724b58d3a5d9efa03679e5f9d8130920c02c30494cd76a37f0f38c251fd2cb92891cc18a3079db2e978e1f35ee15274f5f9538425f606832bee677d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x38}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)=@bpf_attr_4={0xfffffffffffffffb, r1, 0xfffffffc, r6}, 0x4) fcntl$auto_F_GETOWN_EX(r8, 0x10, 0x20b63384) r9 = gettid() r10 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000900), r3) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r10, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$auto_BLKTRACESETUP32(r7, 0xc0401273, &(0x7f0000000a00)={"a461ff9ab866d2fd31e83b38a3e9baef8da3a25e743409f9b3e7abd430c54ec4", 0xfffc, 0xffff, 0x0, 0x1, 0x2, r9}) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000ac0), r8) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r12, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xe6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20014110) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000c00), r1) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000001100)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c40)={0x460, r13, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_PMK={0x28, 0xfe, "7a57f73e10a44e1e6017dae2c8566e5e69873c2e0847da53e03e26d2c9600f0f096cec62"}, @NL80211_ATTR_MNTR_FLAGS={0xe3, 0x17, "132240dcc1f2343f77266b35e6b08ead1a1081161a45501f84dec22980b5c27914e36159212e6211324da738d6a235ce01aabc76ac96af2ca319ee37c28dcd4a6ec9bd3bbbcd56551495b4db552bbf920ad38c978f5d261bafc29e4846ea6f995e7008ffca56ff8d96ba0c8ceddc22accd2cb704fab76a0d783992071fc0ac107ac470e3aeee15481fc126f0b3c30012ddb672bbc29895bc7380d4f96aaa8589eed1cab4c3a0bcf537694b36424f2eb9bcb1e8988fa11b96d5603a927e45a95ded2929a3aabc6d5b17d3c2fd3902429c364b15d1208a53fb3d84957b5c93d9"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_REG_RULES={0x32c, 0x22, 0x0, 0x1, [@nested={0xc, 0xc1, 0x0, 0x1, [@nested={0x4, 0x5a}, @nested={0x4, 0x10c}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x8000000000000001}, @generic="33f6cbfc7823009bdbfea72effabd1cf3289a7a753c4c9173d919347af0549f081bb019685c61efb9de2bbc974b20ac0417b219e3f019b0b9d5d95201e38cb109adf785a3e5e381f986ac991aedb7729794a93830067be950f6575d4e3fa2306ec9ab6997f702bedab663cfe58ea1a10e3141598af69b47a086024b99a8679ea591fda3aa9deb1446049eced2660a6095b29fb1cb3794dabffc53f2b6e22f7f33e2049518c140260292ff98a09395c86db5eecbb2fa0d2492a27a935b9225d4837d5b24bef055d3a2c3afea00242f8425957cf8789c81e6c1b94904e013b44354c7559b22704b60ff21815e061", @generic="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", @nested={0x48, 0x4e, 0x0, 0x1, [@generic="fe1e2d6faea89f30ec81a04deea66c1858b54debe78acb973c9019468af8dc48beb4b4445c7d44dc", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r11}]}, @typed={0x85, 0x3f, 0x0, 0x0, @binary="425cf692d4cc570bf18290cbfdccaf23ef2cb80055e78a66b2ba4deda75f412a9d22a31632e6e463a168faf629ad343a24776fe51b86e207e20ec9c53c11f5f238c522d14f31d04e6f1048ab32361a2619fb0b5e338e8dc7f1320ed563df6daadd267b057eea8a1fdf7c9ea4c84e5cc137481f95553efd621b63eac37a5ec59db2"}, @generic="a6bf68b1e618b36e8850b1878761e4aaafdcbbdae55f9d422d1831133bf85001daf74c99bcabedf07eca892b5e475c6939b1d88c735dff39aad60deaa1df74941d"]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xa}]}, 0x460}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001180), r3) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r14, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2f0, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @u32}]}, @TIPC_NLA_PUBL={0x22d, 0x3, 0x0, 0x1, [@generic="dfe168596a31faa8a0605d240b42503ac8d15fce1bd272a06abb9a4ddb1e8f59ad22de7d76f4406b419d420fa8e46fe528cb83dd1bd05699ddedd0e6238fd76ced0d1221c6c2bd93ab5920205e7f97ce568a2477b30053339b19235b010888e48e0b5b8e4cac4b", @generic='F', @generic="bf867a01ea88a09850434c845494284e62d3a6c87272340320ab1fe108646fd6236301d0237309d4becc9877553fac881a1596ccab2be241b7a3a59d305b8a48ed77450d54c21d55e66ee52a6b4aac671ca686b6d183a0db291ca67f7c4042ef06e3578d5ff0519d4b2311437d459c", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x2a}, @generic="01abcfde6ae60a868a0c8b1aca7a4a412ab9e02cf49e58fc99f41bfdfdd5bc0a2d5561f09ec9ac5b3d2a18d9eb3e7c9d4e977eccdbcad1f45890fc5043b00fc6ed27f44eb73afd7e56cbdc4c3c0ba711858206e1489f9b8e67e9e69b908cc18f4f4748023123820b296b07333ea20aa70767ec803ad95e1934545d074e2c305828668d1e83da632c00f339f09cbe94dd1191088a411d0d3a45f327ea35e901b3d1508a0e1fff7358df0726c53b889ee67e33b24426625281590a40eae530a4", @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@local}, @generic="5140fce2e7389255585708b4a0ef3f8d2d9a49923111e041543172ca64dc2b2d09992eae96", @generic="bbeaa583aa31ca5e8f5a0d411d94", @nested={0x34, 0x3c, 0x0, 0x1, [@typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xbd}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x95}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@typed={0x4, 0x11a}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r9}]}, @TIPC_NLA_MEDIA={0x8e, 0x5, 0x0, 0x1, [@generic="968decc4e9257d5b2cec7c77a129dd39cded77f8b3354437e4b860c834122483105c8acba7ffd753c51eed772e5aa372bfb88c73252b8550dd41bb1996b3e10faea9c994f974cadffedb4d649809fd7a00705f328fe6deff4d5af26b9d729f536a2bfbd597c475ff029357745ebcc7dfd703f010b1a1a31e51fdaa589794defbe47a73f7d9357c706539"]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r16 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) timerfd_create$auto_CLOCK_TAI(0xb, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0x180, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r16, &(0x7f0000001580)="df312544bcbce9c4325670ef125891addbe8fe5d17c84b1ca8a0e2e59aedce70290b92648b76bf5bb8844ff71c4670de75d5098a1381a34937f7be71d031262d7c7efd3de5db2a92ef1eb5df1fffef71bf1b039b502a06b99c65b97bde18413f034b7a1bc36d74888201c3c64202ba144e50b4719b61614b1ad8396798ed6705c82da0b85bf573fd8228bd1f6c90ab8ff028c0d9e628ccff4120a192b951e4b114c104a4e2012bb13e517003389ebaa3376d1959760de7c196c78ce67549585fd3a2c6d4151a4e8e090fd557523048565f26e7d0540a84c9c221afdc22b7542bb80bf050126a66622b", 0xe9) 10m4.748533105s ago: executing program 33 (id=1310): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)="ce45cd9af0f913d0215a3d2424f6704dff457da30bf5c4f1b23dd8faac89052b43fa9dc179a2b64570dcea94bf1f8dd9f1363408c34eb064d112b860388eaa221c2a53ace7de275c41e6be22dbb4b78266d88f0bc0f9b5ebd9096d9cd5b64a1951d9fc5e2e7063e62db3c712e9336c14d7312788351defe8682723e251cadfadffa69adb206d3991f48f79431f64468c45822e46e957a22eb8a93995ab0668507b350db39de30d8143cddf182af796fa5335e3098b3ef1b1030d6e53a83340fb7a8f9bd9484e6138dc0ccfb20ba24b8c7f7c2db319e5a3dcf8a05edbc9d6191fddb055d78991d857eb8273d84378e86e34", 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0x136, &(0x7f0000000140)={@siginfo_0_0={0xad, 0x2, 0xa, @_sigpoll={0x0, r0}}}, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_VHT_CAPABILITY={0x47, 0x9d, "0373a918474c40ee6923c5b596c39aed5aa6ae72dd599580095d23ead031bb051e4d8079830794565cd28bdc7af951259d6867d68801df5e5a5b743bb1948660b00de9"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xf}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) r3 = socket(0x22, 0x2, 0x8) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x8004) mmap$auto(0x8000, 0x400, 0xffffffffffffffff, 0x15, r0, 0x95) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x7f}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3f}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x400}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1ff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_VENDOR_DATA={0x6b, 0x1f, "2cccdcaab94ec86f7ac96a81218846d8e2c3b405480dd15f1e2303c77ed5e62a597977470698ec865e35d745bd8938adf9fc204721e381e1775a2abca8675d5c33cab09fd5f77562e6c529ec3a42aa52503418448d439694a0823c264074c23383125fcb7642f2"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/virtual/block/ram4/integrity/read_verify\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x6f, 0x125, "00e2e02a22d56f8be16802d99a260b152d83c92eea8f0e16bf35f83dfd6712b694dce788d7b72e603c885ecd40565fb724b58d3a5d9efa03679e5f9d8130920c02c30494cd76a37f0f38c251fd2cb92891cc18a3079db2e978e1f35ee15274f5f9538425f606832bee677d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x38}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)=@bpf_attr_4={0xfffffffffffffffb, r1, 0xfffffffc, r6}, 0x4) fcntl$auto_F_GETOWN_EX(r8, 0x10, 0x20b63384) r9 = gettid() r10 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000900), r3) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r10, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$auto_BLKTRACESETUP32(r7, 0xc0401273, &(0x7f0000000a00)={"a461ff9ab866d2fd31e83b38a3e9baef8da3a25e743409f9b3e7abd430c54ec4", 0xfffc, 0xffff, 0x0, 0x1, 0x2, r9}) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000ac0), r8) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r12, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xe6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20014110) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000c00), r1) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000001100)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c40)={0x460, r13, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_PMK={0x28, 0xfe, "7a57f73e10a44e1e6017dae2c8566e5e69873c2e0847da53e03e26d2c9600f0f096cec62"}, @NL80211_ATTR_MNTR_FLAGS={0xe3, 0x17, "132240dcc1f2343f77266b35e6b08ead1a1081161a45501f84dec22980b5c27914e36159212e6211324da738d6a235ce01aabc76ac96af2ca319ee37c28dcd4a6ec9bd3bbbcd56551495b4db552bbf920ad38c978f5d261bafc29e4846ea6f995e7008ffca56ff8d96ba0c8ceddc22accd2cb704fab76a0d783992071fc0ac107ac470e3aeee15481fc126f0b3c30012ddb672bbc29895bc7380d4f96aaa8589eed1cab4c3a0bcf537694b36424f2eb9bcb1e8988fa11b96d5603a927e45a95ded2929a3aabc6d5b17d3c2fd3902429c364b15d1208a53fb3d84957b5c93d9"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_REG_RULES={0x32c, 0x22, 0x0, 0x1, [@nested={0xc, 0xc1, 0x0, 0x1, [@nested={0x4, 0x5a}, @nested={0x4, 0x10c}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x8000000000000001}, @generic="33f6cbfc7823009bdbfea72effabd1cf3289a7a753c4c9173d919347af0549f081bb019685c61efb9de2bbc974b20ac0417b219e3f019b0b9d5d95201e38cb109adf785a3e5e381f986ac991aedb7729794a93830067be950f6575d4e3fa2306ec9ab6997f702bedab663cfe58ea1a10e3141598af69b47a086024b99a8679ea591fda3aa9deb1446049eced2660a6095b29fb1cb3794dabffc53f2b6e22f7f33e2049518c140260292ff98a09395c86db5eecbb2fa0d2492a27a935b9225d4837d5b24bef055d3a2c3afea00242f8425957cf8789c81e6c1b94904e013b44354c7559b22704b60ff21815e061", @generic="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", @nested={0x48, 0x4e, 0x0, 0x1, [@generic="fe1e2d6faea89f30ec81a04deea66c1858b54debe78acb973c9019468af8dc48beb4b4445c7d44dc", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r11}]}, @typed={0x85, 0x3f, 0x0, 0x0, @binary="425cf692d4cc570bf18290cbfdccaf23ef2cb80055e78a66b2ba4deda75f412a9d22a31632e6e463a168faf629ad343a24776fe51b86e207e20ec9c53c11f5f238c522d14f31d04e6f1048ab32361a2619fb0b5e338e8dc7f1320ed563df6daadd267b057eea8a1fdf7c9ea4c84e5cc137481f95553efd621b63eac37a5ec59db2"}, @generic="a6bf68b1e618b36e8850b1878761e4aaafdcbbdae55f9d422d1831133bf85001daf74c99bcabedf07eca892b5e475c6939b1d88c735dff39aad60deaa1df74941d"]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xa}]}, 0x460}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001180), r3) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r14, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2f0, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @u32}]}, @TIPC_NLA_PUBL={0x22d, 0x3, 0x0, 0x1, [@generic="dfe168596a31faa8a0605d240b42503ac8d15fce1bd272a06abb9a4ddb1e8f59ad22de7d76f4406b419d420fa8e46fe528cb83dd1bd05699ddedd0e6238fd76ced0d1221c6c2bd93ab5920205e7f97ce568a2477b30053339b19235b010888e48e0b5b8e4cac4b", @generic='F', @generic="bf867a01ea88a09850434c845494284e62d3a6c87272340320ab1fe108646fd6236301d0237309d4becc9877553fac881a1596ccab2be241b7a3a59d305b8a48ed77450d54c21d55e66ee52a6b4aac671ca686b6d183a0db291ca67f7c4042ef06e3578d5ff0519d4b2311437d459c", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x2a}, @generic="01abcfde6ae60a868a0c8b1aca7a4a412ab9e02cf49e58fc99f41bfdfdd5bc0a2d5561f09ec9ac5b3d2a18d9eb3e7c9d4e977eccdbcad1f45890fc5043b00fc6ed27f44eb73afd7e56cbdc4c3c0ba711858206e1489f9b8e67e9e69b908cc18f4f4748023123820b296b07333ea20aa70767ec803ad95e1934545d074e2c305828668d1e83da632c00f339f09cbe94dd1191088a411d0d3a45f327ea35e901b3d1508a0e1fff7358df0726c53b889ee67e33b24426625281590a40eae530a4", @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@local}, @generic="5140fce2e7389255585708b4a0ef3f8d2d9a49923111e041543172ca64dc2b2d09992eae96", @generic="bbeaa583aa31ca5e8f5a0d411d94", @nested={0x34, 0x3c, 0x0, 0x1, [@typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xbd}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x95}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@typed={0x4, 0x11a}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r9}]}, @TIPC_NLA_MEDIA={0x8e, 0x5, 0x0, 0x1, [@generic="968decc4e9257d5b2cec7c77a129dd39cded77f8b3354437e4b860c834122483105c8acba7ffd753c51eed772e5aa372bfb88c73252b8550dd41bb1996b3e10faea9c994f974cadffedb4d649809fd7a00705f328fe6deff4d5af26b9d729f536a2bfbd597c475ff029357745ebcc7dfd703f010b1a1a31e51fdaa589794defbe47a73f7d9357c706539"]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r16 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) timerfd_create$auto_CLOCK_TAI(0xb, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0x180, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r16, &(0x7f0000001580)="df312544bcbce9c4325670ef125891addbe8fe5d17c84b1ca8a0e2e59aedce70290b92648b76bf5bb8844ff71c4670de75d5098a1381a34937f7be71d031262d7c7efd3de5db2a92ef1eb5df1fffef71bf1b039b502a06b99c65b97bde18413f034b7a1bc36d74888201c3c64202ba144e50b4719b61614b1ad8396798ed6705c82da0b85bf573fd8228bd1f6c90ab8ff028c0d9e628ccff4120a192b951e4b114c104a4e2012bb13e517003389ebaa3376d1959760de7c196c78ce67549585fd3a2c6d4151a4e8e090fd557523048565f26e7d0540a84c9c221afdc22b7542bb80bf050126a66622b", 0xe9) 9m51.327282142s ago: executing program 4 (id=1362): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x24000802) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b000000000000000002ff0700"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 9m51.080479524s ago: executing program 4 (id=1364): socket(0xa, 0x2, 0x3a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/cgroup/features\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001ac0)=""/98, 0x62) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x80000000, 0x1) read$auto_ctl_device_fops_user(r1, 0x0, 0x0) ioctl$auto_USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={0x2, 0x8, 0x0, &(0x7f00000000c0)="bd29d7f3e8d92cc4f3aa7ead5edb54106cf59146a771231626b9e77d3a93e43354f381969555b86a2c3bd3a0a5a5b90f16257f7109f570e463eadb0934d528eb00f02f473a3ccebd507a20e5624f6f4897fb766f49d281d52107ede22e38b8aff5a0c1529c748d787d5d10dd50e34b6de03ac018fd9e781050eb9f8a4a33926a3bbf1322639ac8e5129111defb48339d36812f593cbd74ef8dcfa89744fddf48194a53038bb75f609b720ca25e695cbd803704d108176a4e2e32048213a57753725b7d28dab328ad480c4a65af048e16b13f287ee415f1f9f84cadf0652631e4eb006a8eeca315"}) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) 9m50.9257047s ago: executing program 4 (id=1365): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 9m50.829832935s ago: executing program 4 (id=1366): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) 9m50.696629642s ago: executing program 4 (id=1368): io_setup$auto(0x7ffe, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) (rerun: 64) r1 = timerfd_create$auto(0x9, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000340)={0x8, [0x1, 0xffffffff, 0x80000000], [{0x80, 0x8000002, 0x1, 0x1, 0x1}, {0x8000, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xfffffffd, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x44ad, 0x400, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x0, 0x1}, {0x47ff, 0x4d3c, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xd, 0x1, 0x1, 0x1}], 0x80, 0x7, 0x3, 0x3, 0x6, 0x9, 0x6, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) (async) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="90b262f70af7a0840faad9ff5c7b7000fddbdf251100"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24000004) (async) ioctl$auto(r0, 0x7, r0) (async, rerun: 32) write$auto(r0, &(0x7f0000000000)='\x00', 0x6) (rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0xa000, 0x0) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) (async, rerun: 64) io_uring_setup$auto(0x86, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001100), 0x101081, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async, rerun: 64) tkill$auto(0x1, 0x7) (rerun: 64) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0x4008ae8a, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) (async) ioctl$auto_BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0xd6}) io_setup$auto(0x7ffe, &(0x7f0000000000)) 9m42.183343603s ago: executing program 4 (id=1405): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="4ceac020709188b5622aa1990800e1d0ae2ef23f241bb2bfd9339eef5829331e48dc800e9b3368", 0x27) socket(0x29, 0x2, 0x8001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000003340)='/dev/radio10\x00', 0xc0400, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker_raw\x00', 0x200001, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)) ioctl$auto_TIOCSETD2(r5, 0x5423, &(0x7f0000000240)="85de53a227bdea553e164a13152577059c410883d6f43cd1af2327f85c366dd72263234159154285fa24871c38d650bfb6a45d01d034f211385dee2d7dd35df16bebd48f7e7d480918f9560d4686317a6bb7edc5447283e757ec99b9caff4df0178206261da16f5ab6675c4e0491c36bc19c04812c9aebe2d331e026eb06b2e779a53c1f7fce9b2ad414e7420dfcf04369c1cf56cd22972e4fa65668ef6189b5f2b807986fffb9c232b5c1721f3fc7b7caf21e630952e85e8c9ecbd49c0295ae6ae9180767feaae1d0d2d4d3dd0cd03ef783af032679afdcc35fa99ebe28ec6d0252e96352a834ba74656a726f3a6e40e7d13293e06817705b") 9m41.884557744s ago: executing program 34 (id=1405): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="4ceac020709188b5622aa1990800e1d0ae2ef23f241bb2bfd9339eef5829331e48dc800e9b3368", 0x27) socket(0x29, 0x2, 0x8001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000003340)='/dev/radio10\x00', 0xc0400, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker_raw\x00', 0x200001, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)) ioctl$auto_TIOCSETD2(r5, 0x5423, &(0x7f0000000240)="85de53a227bdea553e164a13152577059c410883d6f43cd1af2327f85c366dd72263234159154285fa24871c38d650bfb6a45d01d034f211385dee2d7dd35df16bebd48f7e7d480918f9560d4686317a6bb7edc5447283e757ec99b9caff4df0178206261da16f5ab6675c4e0491c36bc19c04812c9aebe2d331e026eb06b2e779a53c1f7fce9b2ad414e7420dfcf04369c1cf56cd22972e4fa65668ef6189b5f2b807986fffb9c232b5c1721f3fc7b7caf21e630952e85e8c9ecbd49c0295ae6ae9180767feaae1d0d2d4d3dd0cd03ef783af032679afdcc35fa99ebe28ec6d0252e96352a834ba74656a726f3a6e40e7d13293e06817705b") 1m27.49424276s ago: executing program 3 (id=3401): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r7, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) r10 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) write$auto(r10, &(0x7f00000001c0)='{.-\xdc\x00', 0xfff) 1m25.484591686s ago: executing program 3 (id=3407): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4800) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2, 0x400000000000004, 0x4000000000df, 0x200000000040eb4, r0, 0x2) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) process_madvise$auto_MADV_NORMAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)="ee4b748f3eb34207ad7e46cd5338d42e567005f46e763c92c13e991b73fdcc679edc8679eab61cc2e385cadfc5def146751a7412c2d23d23df55308837a590431eb78d2247c564e22279ef7ae8b7788a087eb18fe6b1036d018d", 0x4}, 0xfffffffffffff1c8, 0x0, 0x5) socket(0xa, 0x2, 0x3a) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@generic={0xa, "2c551d000000fe8000"}, 0x66) mmap$auto(0x0, 0x400008, 0x100000001, 0x9b72, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x80, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) 1m24.234574272s ago: executing program 3 (id=3413): landlock_create_ruleset$auto(0x0, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0xd, r0, 0x1, 0x400000000008) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x80000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0x400c4d05, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x211) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) 1m23.502056991s ago: executing program 3 (id=3415): getrandom$auto(0x0, 0x6000000, 0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) copy_file_range$auto(r0, 0x0, r0, 0x0, 0x8001, 0x1b208608) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0xb53, 0x800000000000eb1, r0, 0x8000) madvise$auto(0x0, 0x100000, 0x17) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) getrandom$auto(&(0x7f0000000580)='\x00', 0x5, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24008090}, 0x24044805) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0x1fc5fc11, 0x3, 0xe, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x2, 0x7fefffff, 0x46, 0x7, 0x1, 0x60, 0x40000102}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r3 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="230029b07000fbdbdf258800000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x37c60ad6183ba5b}, 0x810) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3ac, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x384, 0x6e, 0x0, 0x1, [@typed={0x32, 0x14d, 0x0, 0x0, @str='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00'}, @generic="3fb652ea9162402fa436738df53bd1f5cd096d8b89101abe81877fdd88758560bd5b496f4b7ba0577d3c9e2cb291807788fd17e4b8414572acfc2c5ed0cdd80b1b222e42bc18d496f642c8129dfb53659e39c5b565850fa417ea0d652822adca9440447f25a7988a6e7a955bcdba72f3b34c543e790b6106a9c5446b26b5ca30961bd3670cb29d11a389f6511b9dd7a1e4089683a963eb9ba876c948c63811c160b5", @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@mcast1}, @generic="a85092ac2fa9ca0e66027a7161c717417f58d4f9e20b0bc608a84e1904cf18c1156b71cbae300ad8d70d8efed07945b8877fffc4a646ff1413a387d015d6754a35f2d16a8fda3b39b9983fbb9b8f0fc1925d4a6797e73f2ea0c68c26948be53208adc4dbcf334228581ecb3fde6d77d95d4b1a62f6dd3eed0b2ba5e06e955251f887c4efc0536786361b0181435e937480c4153f78b9e6c07109a036a83fa516d44e4fbb8d5d5fedff564653eacbb499bd7991655e099ae9", @generic="885bf5d418067fb1ff36c4b0377f76413405a634657ff2f9f6f7d7dca742fbd46fa5792416b0c0c8e2defb7343cadb2c522c022669d6f555c02ee6ec85fe4ef53bf71f54f725de384dcacfbbc520498a3755acd94af0f0b92072188fc89d8e93b07800cd3aa9cf9846b78423e3ca8e7c7a94bbd9d053e2dbaea615e4adfa0cc8f1463feca23ef01e379023aa2a1661a0e42170f9144e818afee0cbc660528ef331e191d2a156e09cd98dcbc2e71893a7c5985b2fa6ad6ad39b8999c4f3e53b82cc9a86ca1e62f941c714a4d38c11f51fa60f5a29935d85ab0bc9acf35a", @generic="04942973954ca79263df76d1ea8cde855bd8e8f5f80166b190eb3294d27bf5921848b7d422244789ac24e09119c7a2f063e819501e8851fa5257b4004f633107c2ab8ea34c4937343e69a3d3080613c9ad7ac09c52586dd89c79d43d3b5667d680b7cb3bec1f3c7b646445d0faea2671a3068c5f99764b86d0d7384a5021ee03fd2b09f92d886afb1b271bded433c4435ee10f1ba1a2b58235585a0d1934e62b531c79c37054fc45c64a4e8cadf5c044dab2a7f40047b06634651a8dcf09bd9cb8d67829a164e02ebaa8abda2c63ccff54f8f9d251f92bda7fe49891cb9067acac95b01d45121f3682cc93719c00743a5346e03e529d62bee7", @typed={0x8, 0x3a, 0x0, 0x0, @fd}]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]}, 0x3ac}}, 0x4) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x6) 1m22.5831905s ago: executing program 3 (id=3421): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:04.0/net/eth0/statistics/rx_errors\x00', 0x143001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/queue/nr_zones\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x581402, 0x0) mmap$auto(0x0, 0x7, 0x5, 0x40000eb0, 0x401, 0x8000) clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) clone$auto(0x1, 0x27, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) write$auto(r1, 0x0, 0xfdf0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x8, @old_prog_fd=r2}, 0xa3) bpf$auto(0x2, 0x0, 0x9) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x8) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 1m22.244424862s ago: executing program 3 (id=3422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x9, 0x80002, 0x10) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1, 0x9, 0xffb, 0x8000000108011, r1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000014c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x84) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x2000, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x2, 0x7ffffffb, 0x3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x3, 0x11, 0xe, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000040000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) move_pages$auto(0x0, 0x4000d0, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_XFS_IOC_FREESP64(r1, 0x40305825, &(0x7f0000000040)={0x5, 0x7fff, 0xfffffffffffffff9, 0x80000000, 0x80}) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 1m6.912652998s ago: executing program 35 (id=3422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x9, 0x80002, 0x10) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1, 0x9, 0xffb, 0x8000000108011, r1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000014c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x84) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x2000, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x2, 0x7ffffffb, 0x3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x3, 0x11, 0xe, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000040000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) move_pages$auto(0x0, 0x4000d0, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_XFS_IOC_FREESP64(r1, 0x40305825, &(0x7f0000000040)={0x5, 0x7fff, 0xfffffffffffffff9, 0x80000000, 0x80}) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 7.645182482s ago: executing program 6 (id=3647): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x22803, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr11/queues/tx-0/traffic_class\x00', 0x48200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000005c0)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x1e9880, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(r1, 0x400, 0x1000000, &(0x7f00000002c0)='\x00', 0x9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x1af40, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) remap_file_pages$auto(0xbe1, 0x20, 0x0, 0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012abd7000ffdbdf25010000000c0099000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x5411, 0x0) 6.447462537s ago: executing program 5 (id=3648): mmap$auto(0x0, 0x56, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdb99, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001200)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="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"/2078], 0x824}, 0x1, 0x0, 0x0, 0xd5}, 0x4001) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) mmap$auto(0x8, 0x3, 0xdb, 0x13, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) r4 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bdi/1:6/wb_stats\x00', 0x100, 0x0) write$auto(r4, &(0x7f0000000240)='\xf0\x8f;\xe7RT#\xfc\xdc\xda\xed\x1d~@<\x05\x00\x00\x00\x00\x00\x00\x00\x93\x91T\xe8[ZR\r\xa7%r\xb3_B\xc8\xd1KX\x16\xad\xda\xdc\xe1/U\'\x18UUBQ\xebF\x15\xe4\xe9\xe3\x14\xb9(\x8f\xe2\xefDK\xd0Yf 9\x93\xedZx3+\xfe\xff=P\x92\xd2~0n3\xaf\x9a\x8a_\xe5\xb4\xde[\x9c\x8f\xd3\xc7\xab,\xdfb\xfca2\xbe\xc1B!\xc7,r?\xbb\xde\x15\x0f\x18:*\xde\xf0{8\xaf\xec\x14f\xb5\'\x10\xda\xb6d\xbdv\xf3\xff\xea\x89\xf9\xa7\xf2[\xca\xa5i\x16\x96\x85\xdd\xe5\x84\xb4\xa3\xdc\f1\xfe\x8f0\xc6H\x16\xb1\xd9\xb0\xa4\xa2\x00\x00\x00\x00\x00\x00\x00\x00', 0x1000000000008000) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae99, 0x0) r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r5, 0x0, 0x1) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/options/blk_classic\x00', 0x800, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/clear_refs\x00', 0x105002, 0x0) getsockopt$auto_SO_BUF_LOCK(r8, 0x4, 0x48, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', &(0x7f00000000c0)=0x2) mmap$auto(0x0, 0xf7, 0x5, 0xeb1, 0xfffffffffffffffa, 0x400000008000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0xa) bind$auto(r7, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x66) write$auto(r6, 0x0, 0x6) 5.502039194s ago: executing program 7 (id=3650): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) ftruncate$auto(0x3, 0x400180200000) mmap$auto(0xa, 0x40009, 0xfffffffffffff227, 0x9b72, 0xffffffffffffffff, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x401, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="894f844ea904ebea19000000120001640043005af77d2e758fa4192512ca5b0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4844) write$auto(r3, 0x0, 0x1ff) prctl$auto_PR_SCHED_CORE_GET(0x9, 0x0, 0x0, 0x0, 0x26fa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x7fffffff, 0x4000000000002bc8, 0xfff, 0x6, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) setresuid$auto(0x8, 0x8, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 5.331659448s ago: executing program 5 (id=3658): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000d59332735e6976956185422cbc2c104bb32aa80246dd5e535a7cb4b3c671e167448cb483852653b1cc9e676f93f65f84aa51e1aa714d95ec11b5af56429c3d306cb572cd8c3caac08a55e6d3be139c5e2908793b8fd62730b6a271bfcb4436157d00"/112, @ANYRES16=r2, @ANYBLOB="05072dbd7000fbdbdf251c000000"], 0xfffffffffffffee0}, 0x1, 0x0, 0x0, 0x24000001}, 0x488c4) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/fail_io_timeout/verbose\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) madvise$auto(0x0, 0x8, 0x6) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xbba, &(0x7f0000000080)={0x0, 0xc, 0x2, 0xb, 0x80000001, 0x8, r5, [0xff, 0x7, 0xdf50], {0xfff, 0x2, 0x8, 0x2, 0x9, 0x30, 0x100, 0xd, 0x249}, {0x69, 0x401, 0x5, 0x5, 0xff, 0x7, 0x2, 0x7, 0x8}}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r7, 0x0, 0x1, 0x0, 0x1e) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x94) 5.330468873s ago: executing program 6 (id=3651): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x8a302, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1d, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x400, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendfile$auto(0x1, 0x3, 0x0, 0x9) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x96ff0100, 0x0, 0xfffffffffffffffd) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) epoll_create$auto(0x3e) 4.665495383s ago: executing program 7 (id=3652): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0xfffffffe, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(r4, 0x80a86f3d, r1) write$auto(r3, 0x0, 0x100000a3d9) 4.322492859s ago: executing program 6 (id=3653): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0xfffffffe, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(r4, 0x80a86f3d, r1) write$auto(r3, 0x0, 0x100000a3d9) 3.681342392s ago: executing program 5 (id=3654): mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x100000000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000240), r0) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x3}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x28}}, 0x401) write$auto_userio_fops_userio(r0, &(0x7f00000000c0)="83c63ee59b7c47c9069e5b9918bc514c2d181472ebe3f672937859d5aeeb50591c88e5cee660fbec6afb618ec1cc57cc406c822257df7371e06fa8489662702a00a23dee5c5d6404fa330d87b139b5abc0ed66e04854b1f9ec", 0x59) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x3) r3 = socket(0xa, 0x2, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/sysname\x00', 0x145381, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xc1}, 0x8, 0x4) symlink$auto(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x410008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x80000, 0x1f) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1002", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="280001c60f0003000000010008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x210}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c4) 3.561572708s ago: executing program 2 (id=3655): r0 = socket(0x18, 0x5, 0x2) bind$auto(r0, &(0x7f0000000440), 0x800) socket(0x1a, 0x4, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000340)="03b9") statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x46, 0x2b, 0x1000000000065f, 0x80000000, 0x40000007, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.54717757s ago: executing program 7 (id=3656): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0x32, 0x1d, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/options/trace_printk_dest\x00', 0x101000, 0x0) r0 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000002600)='/proc/self/oom_score_adj\x00', 0x101202, 0x0) setresuid$auto(0x2, 0x7, 0x8080) read$auto(0x3, 0x0, 0x80) write$auto_proc_oom_score_adj_operations_base(r0, 0x0, 0x2d) 3.343739054s ago: executing program 6 (id=3657): r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 3.220764982s ago: executing program 7 (id=3659): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0xa, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x692, 0xffa4}, 0x2, 0x0, &(0x7f00000000c0)={0xfffffffffffbfdff}, 0x8) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) pread64$auto(r2, 0x0, 0xb69c, 0x6) (async) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x800000000000008, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x10001, 0x40, 0x8, 0x1000f, 0x6, 0x10, [0x6, 0x2, 0xffff, 0x3, 0x7, 0x200000003, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x7, 0x8000, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x1, 0x7, 0x55ac, 0x4, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6]}, 0x4, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000d80)={0x1908, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x232, 0x2d, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="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", @generic="ca96e72de63630641c0b1900a96a88897aa4750ddd0e370bf78610ddbe47575e2df9d482fc99af575107d2e0d2d7b463c57b87c27519ce515a11a72c0ffb5320e3ef59ace71b179d93a06992cfb10f876e26bf8069bbd0ae7ec94207c0200d2a467eedd041f298ffbb08128efc6f887addcf6a64bc40914f9c69b3317f742c8404bc66a9e8eb04f9fe15f0662e5643bd9175d510127f1366", @nested={0x85, 0x61, 0x0, 0x1, [@generic="fdfe8add25ddf10ebe221dd22957d4dc1319e8ad3a808406f39a8835d20d408713e0e031a137ab036c4e8fece3726b01eae2e661b07221d30078cb142f2a4329ad78544a7885a47b92dd59e5367b5f66faa629d6067798f010122d929ed1fc31b2ebc364fa45f6c0555717845e", @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@mcast1}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10b4, 0x75, 0x0, 0x1, [@nested={0x1024, 0xb0, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xdd}, @generic="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", @generic="c8064fab"]}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x72}, @typed={0x60, 0x14e, 0x0, 0x0, @binary="fec4b55ae8eaba809f872fc3efec27130a45fcac1524fa06e7d72cd66f9f4bba36642a001fbc2be0de16f6215d440a3209d97f4c60c05bdfde0c9ef234bba1eb638b5bf0e1cff76644caceeeaeddbcdfe1daa2e60836ae9b0099a3f7"}]}, @NL80211_ATTR_BEACON_TAIL={0x5f3, 0xf, "f880668bc4f349073fb38f000af24b77c2416dc1a1cb3746aaaa45f88d4f78f7973f3868d0ffe56276238d390e404aa876d60a34bb4267be7bc1c0a6bfc8d688756d865fcc9fff07a99bab75ee32db73886358e04ccedec7924de73b97b65a4af57f2461ec700654cc31af30d7e0acff5bbc709608b7f373cf4be1a8d7c6b234e07bd0d16130cb24554b025e222a554ad3e14c5caa82136aa329570c1389451d73c75d331b7dbcc23b82154ff17f89355e1be202325ee933d8a44f1b77d37ee187714fc891ac6a9619f51e36eeb05fb767a5b09dfef2266ff59365c3669d2d4f8c0c4025987360259d5016028deefedf63c0cdaa529f949348801a6993af76af173694b02167f8a0b2f37d910002a0f3bf1ae968e208adc92cd53654784bf8472323ce6fd8f7f1ab1d9599996b903e3c10d9c304ee8806bef47b3f716558e525b44fd4e8a3862e103822fb64c0b462e232425e339ea7d40bcaf0cdfaa44e0f6ac93694db0f99585692cf67e62054c5740c33460f36721005f242e154dbae05715871eb14651df0c905ce529dff1669d18209d257ae540777e4e0add9b68b7145ebdee8f9a7e5dc92858cfc989e2de20f06e18cf48ecd8184c88b2e44e4b22488780d0e784fe8fae95874c0b0d244d8d635e0f5df2eeb9a8c8adf90acd934ef0c6fd2c7a050c4f9b3c90c84362b3e37ae96baf26d2b3270a7819c14cc5d75d9b95f0247fd6e428bbca753c51616a8d371b6fe0ec0879107435ae858a89220bfccd49d31e0893f4cb7fc36afb6a1d90c5426022f6c620db392978021f5894d5f36a254a491f39c66c39dd655e1576d8f93c0b4e877df3c5d7411630542d396df5b6298cd2326e8ae14be5af1d8ecf0c6d2ac36f835a747e00200d7c7f435984c5cb3459c170f1cd58628807cf09526567c4762a5a756ccdb6b8ac6751165d59fdf3e09689ef6ad5bb1138f569c0b92fefaa944bf35c785ac6fe06dc7944ff877d88e2a43786494224eb577bb052591b27f45e8a41630435cc9343a1d97778578b95106b2560ff910f0d88c3db3d72e7ec2eebb2f7123642f9ddd211998c0705baa76f4ee0eeae7f4ac2a97eb064be6ab37d44204795c58756461f66e3cea95895be205c79f6df1282039781f4658f1d72671843b2fd3b0af424b62f91654ce2999616727c8dfc33251e3ae83aee4872cc2f670fff6318730ae43b840e891cd1ca6c954640adfd7dc10688ff40644738a9e754c00b02bd4b2dbe9f5af6924e537e9f57aa6d02d99f3fd989a70338574d45c3577498ba015daca0168f1e1497a4b0acb1b4b482d84dd148d862b35c5c7b8d1219d3c0645cbb926a2e18afbeb1bfdc7303d1fcfcf1fdc3f3e4853e8e9146d840bd5397aeb7499159097cc96b32b020af030fc0933200c619886d71caee157fac2235e60aa1771f5d08566f43e48736aa1d7b4d75700f7b429dabab7c5a280618c03e87cdc6c6cbd3758dccfb86f6f2345e3ba54615641ced821a74180c36bbe3bd7e5f58b077db2ffca25f97b48fe47f939258cf3cc64784fd09825548b7dbf5354d453fa506ab4edf77ae024bd418cc53d6d6d38bd44d70208ce5691643ed3a4d815eb9ce61b36f9c038872604405f3ca62c8af0788bae1199ac504231395eeb25e608dde12b8a7eb990fa80e4aa77b1d9083c2807d877a05749494ed80e0bbeb4932a858bf9ef7893c9fecca4221a69efc063eef4df788093b977ebb1eea9fe2873c717b022dc16063d8980357021c9a8ed4896c1fbc2950d8861bd0aa7496d95d753d60e8b96280e983df24dc095042bc2550e06c98484272271863d421cae600d7c5c036fd722f06e09b03d7a0f8bd07c4c11feba2235f25e02606aefb40be9f9ea97bd207609f5b91ec6f97dbdc4ed2df5ee9bf8553e3d7dfc27f90aec0228ab49f02369419968685996af35f3b44262bf3beffc944bd8fdc6c6d0f516cecab7c9c5ae21a5ce7044b9eb1ac021d96c7782ddc40755af18079078fe2ab2e378d6003b9fbad7110baf001e6bca9bc513edc5cb10320e3801687481ada7a1e7b0d03ac458b61b30e040da176b7ed86023bf7302619b627e6d990e72574398676aa0ec37a0cfc96e30fcde5c239be323a4f9a0600aadbb778739c2fd5592"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29d}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x6}]}, 0x1908}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) readv$auto(r1, 0x0, 0xd) (async) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) (async) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.115527752s ago: executing program 2 (id=3660): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0xa, 0x1, 0x100) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x1, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x5, 0x8, 0x8fd7, 0x8000000000000000, 0x4, 0x15f4da0a, 0x200000000000003, 0x3, 0x9, 0x8, 0x8, 0x1, 0x9, 0x1, 0x5]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) socket(0x23, 0x80805, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680), 0x0) (async) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r1, 0xc008ae67, r4) fanotify_init$auto(0x6a1, 0x2000000000002) 3.100399206s ago: executing program 6 (id=3662): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x3, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(0xffffffffffffffff, 0x4008af25, &(0x7f0000000000)=0x2) r1 = socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, "55e09f33865ad136922314721cd8213ab8629124baa21c60db411d567e12352c109bdb75dee2d4800f68d512f3d939ecb03c0ebcafe83247749350247ef27b3b3c8c89fc7c33bf6449bda3aef73a3cc35863e233003a47906820506a274de784a6d9972d0ecb1786906b86ad80652bab8a78ff4f7f9fd56cbf9c1a321ba21b8907f154f943ba58a9d67bc8ca980120ed942f6333"}, 0xa8}, 0x1, 0x0, 0x0, 0x20040032}, 0x40000) getsockopt$auto(0x6, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) madvise$auto(0x0, 0x3, 0x15) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x0) (async) socket(0x2b, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(0xffffffffffffffff, 0x4008af25, &(0x7f0000000000)=0x2) (async) socket(0xa, 0x5, 0x0) (async) pipe2$auto(0x0, 0x80) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) (async) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, "55e09f33865ad136922314721cd8213ab8629124baa21c60db411d567e12352c109bdb75dee2d4800f68d512f3d939ecb03c0ebcafe83247749350247ef27b3b3c8c89fc7c33bf6449bda3aef73a3cc35863e233003a47906820506a274de784a6d9972d0ecb1786906b86ad80652bab8a78ff4f7f9fd56cbf9c1a321ba21b8907f154f943ba58a9d67bc8ca980120ed942f6333"}, 0xa8}, 0x1, 0x0, 0x0, 0x20040032}, 0x40000) (async) getsockopt$auto(0x6, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) 2.644299575s ago: executing program 5 (id=3663): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/181, 0xb5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r3, &(0x7f0000000140)=']}\x00', 0x101, 0x8) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0x5f, 0x0, 0x0, r2, 0x80000001}, 0x6d4) 2.467234549s ago: executing program 6 (id=3664): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r0, &(0x7f0000000680)="2f132726", 0x4) r1 = accept4$auto(r0, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, &(0x7f0000000040)=0x2c0, 0x3) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) getpid() r3 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x800, &(0x7f0000000440)={{0x8001, 0x54}, {0x8000, 0x6}, 0xfffffffffffffffb, 0x1, 0x6132, 0x40, 0x8, 0xcc7, 0x2, 0x8, 0x9, 0x6, 0x6, 0xfffffffffffffffb, 0x18, 0x3}) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, r3, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) fcntl$auto_F_WRLCK(r5, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x40000a, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x28}, 0x68) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x800c014) 2.140309246s ago: executing program 2 (id=3665): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000d59332735e6976956185422cbc2c104bb32aa80246dd5e535a7cb4b3c671e167448cb483852653b1cc9e676f93f65f84aa51e1aa714d95ec11b5af56429c3d306cb572cd8c3caac08a55e6d3be139c5e2908793b8fd62730b6a271bfcb4436157d00"/112, @ANYRES16=r2, @ANYBLOB="05072dbd7000fbdbdf251c000000"], 0xfffffffffffffee0}, 0x1, 0x0, 0x0, 0x24000001}, 0x488c4) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/fail_io_timeout/verbose\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) madvise$auto(0x0, 0x8, 0x6) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xbba, &(0x7f0000000080)={0x0, 0xc, 0x2, 0xb, 0x80000001, 0x8, r5, [0xff, 0x7, 0xdf50], {0xfff, 0x2, 0x8, 0x2, 0x9, 0x30, 0x100, 0xd, 0x249}, {0x69, 0x401, 0x5, 0x5, 0xff, 0x7, 0x2, 0x7, 0x8}}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r7, 0x0, 0x1, 0x0, 0x1e) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x94) 1.660735376s ago: executing program 7 (id=3666): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x25, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe}, 0x7, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x8) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000140)={r1, 0x10000}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0x5452, &(0x7f0000000080)={0x80, 0xbed0}) close_range$auto(r2, r3, 0x70) write$auto(r3, &(0x7f0000000100)='\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xb3oK\xed\x04\x10v\xf9<\xae{\xdc\xdeIk\x00\x00\x00\x00', 0x80000000000081) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1.345634333s ago: executing program 5 (id=3667): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0xfffffffe, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(r4, 0x80a86f3d, r1) write$auto(r3, 0x0, 0x100000a3d9) 782.583186ms ago: executing program 7 (id=3668): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0xfffffffe, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(r4, 0x80a86f3d, r1) write$auto(r3, 0x0, 0x100000a3d9) 372.79184ms ago: executing program 2 (id=3669): socket(0x2, 0x2, 0x88) r0 = eventfd$auto(0x0) write$auto_evdev_fops_evdev(r0, &(0x7f0000000040)="399817b6b7dfaa50dd9e5ff6284478019d6fcd22ccc1b0b2ae602e2bc8d3955136", 0x21) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x1000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x1, 0x800000ffff, 0x9b72, 0x7, 0x200000000028000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) shmctl$auto_SHM_UNLOCK(0x200, 0xc, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r4, 0x0, 0x4084881) r5 = open(&(0x7f0000001140)='./file0\x00', 0x22240, 0x146) execveat$auto(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') r6 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x195100, 0x0) ppoll$auto(&(0x7f0000000040)={r6, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$auto(r5, 0x7, 0xa, 0x0, 0x8002) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000011c0), 0xffffffffffffffff) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000140)={@raw=0x100000001, "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"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x100000000007) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b", 0x22) 103.933285ms ago: executing program 2 (id=3670): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x80045515, r0) mmap$auto(0x0, 0x400004, 0x400, 0x9b72, r0, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0xfffffffc}, 0x105}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x11) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 98.736844ms ago: executing program 5 (id=3671): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0xfffffffe, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x501040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(r4, 0x80a86f3d, r1) write$auto(r3, 0x0, 0x100000a3d9) 0s ago: executing program 2 (id=3672): mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x100000000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000240), r0) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x3}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x28}}, 0x401) write$auto_userio_fops_userio(r0, &(0x7f00000000c0)="83c63ee59b7c47c9069e5b9918bc514c2d181472ebe3f672937859d5aeeb50591c88e5cee660fbec6afb618ec1cc57cc406c822257df7371e06fa8489662702a00a23dee5c5d6404fa330d87b139b5abc0ed66e04854b1f9ec", 0x59) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x3) r3 = socket(0xa, 0x2, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/sysname\x00', 0x145381, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xc1}, 0x8, 0x4) symlink$auto(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x410008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x80000, 0x1f) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1002", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="280001c60f0003000000010008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x210}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c4) kernel console output (not intermixed with test programs): 0000000000 R09: 0000000000000000 [ 886.807583][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.807594][T22213] R13: 00007fd85c3b6038 R14: 00007fd85c3b5fa0 R15: 00007ffc152feb78 [ 886.807609][T22213] [ 886.807634][T22213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 887.121978][T22215] netlink: 318 bytes leftover after parsing attributes in process `syz.3.3242'. [ 887.131566][T22215] FAULT_INJECTION: forcing a failure. [ 887.131566][T22215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.147874][T22215] CPU: 0 UID: 0 PID: 22215 Comm: syz.3.3242 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 887.147924][T22215] Tainted: [U]=USER [ 887.147934][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.147951][T22215] Call Trace: [ 887.147960][T22215] [ 887.147970][T22215] dump_stack_lvl+0x16c/0x1f0 [ 887.148011][T22215] should_fail_ex+0x512/0x640 [ 887.148052][T22215] _copy_to_user+0x32/0xd0 [ 887.148079][T22215] simple_read_from_buffer+0xcb/0x170 [ 887.148109][T22215] proc_fail_nth_read+0x197/0x240 [ 887.148138][T22215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.148167][T22215] ? security_file_permission+0x71/0x210 [ 887.148214][T22215] ? rw_verify_area+0xcf/0x6c0 [ 887.148240][T22215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.148268][T22215] vfs_read+0x1e1/0xcf0 [ 887.148305][T22215] ? __pfx___mutex_lock+0x10/0x10 [ 887.148371][T22215] ? __pfx_vfs_read+0x10/0x10 [ 887.148405][T22215] ? __fget_files+0x204/0x3c0 [ 887.148431][T22215] ? rcu_is_watching+0x12/0xc0 [ 887.148463][T22215] ? __fget_files+0x20e/0x3c0 [ 887.148495][T22215] ksys_read+0x12a/0x250 [ 887.148526][T22215] ? __pfx_ksys_read+0x10/0x10 [ 887.148560][T22215] do_syscall_64+0xcd/0x490 [ 887.148597][T22215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.148625][T22215] RIP: 0033:0x7f27f6d8d5fc [ 887.148647][T22215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 887.148674][T22215] RSP: 002b:00007f27f7c27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.148702][T22215] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8d5fc [ 887.148721][T22215] RDX: 000000000000000f RSI: 00007f27f7c270a0 RDI: 0000000000000004 [ 887.148739][T22215] RBP: 00007f27f7c27090 R08: 0000000000000000 R09: 0000000000000000 [ 887.148756][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.148773][T22215] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 887.148798][T22215] [ 887.360085][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.367727][T22213] FAULT_INJECTION: forcing a failure. [ 887.367727][T22213] name failslab, interval 1, probability 0, space 0, times 0 [ 887.381155][T22213] CPU: 0 UID: 0 PID: 22213 Comm: syz.6.3243 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 887.381209][T22213] Tainted: [U]=USER [ 887.381231][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.381249][T22213] Call Trace: [ 887.381259][T22213] [ 887.381271][T22213] dump_stack_lvl+0x16c/0x1f0 [ 887.381315][T22213] should_fail_ex+0x512/0x640 [ 887.381359][T22213] should_failslab+0xc2/0x120 [ 887.381399][T22213] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 887.381436][T22213] ? apparmor_capable+0x114/0x1d0 [ 887.381469][T22213] ? prepare_creds+0x2c/0x7d0 [ 887.381514][T22213] prepare_creds+0x2c/0x7d0 [ 887.381557][T22213] __sys_setresuid+0x46d/0x1160 [ 887.381593][T22213] do_syscall_64+0xcd/0x490 [ 887.381633][T22213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.381664][T22213] RIP: 0033:0x7fd85c18ebe9 [ 887.381687][T22213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.381715][T22213] RSP: 002b:00007fd85cf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 887.381745][T22213] RAX: ffffffffffffffda RBX: 00007fd85c3b5fa0 RCX: 00007fd85c18ebe9 [ 887.381767][T22213] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 887.381786][T22213] RBP: 00007fd85c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.381805][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.381824][T22213] R13: 00007fd85c3b6038 R14: 00007fd85c3b5fa0 R15: 00007ffc152feb78 [ 887.381852][T22213] [ 887.545207][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.969333][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3247'. [ 888.253019][T22221] netlink: 318 bytes leftover after parsing attributes in process `syz.3.3245'. [ 889.432828][T22253] FAULT_INJECTION: forcing a failure. [ 889.432828][T22253] name failslab, interval 1, probability 0, space 0, times 0 [ 889.446050][T22253] CPU: 1 UID: 0 PID: 22253 Comm: syz.5.3252 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 889.446106][T22253] Tainted: [U]=USER [ 889.446118][T22253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.446136][T22253] Call Trace: [ 889.446147][T22253] [ 889.446158][T22253] dump_stack_lvl+0x16c/0x1f0 [ 889.446201][T22253] should_fail_ex+0x512/0x640 [ 889.446246][T22253] should_failslab+0xc2/0x120 [ 889.446286][T22253] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 889.446322][T22253] ? apparmor_capable+0x114/0x1d0 [ 889.446354][T22253] ? prepare_creds+0x2c/0x7d0 [ 889.446399][T22253] prepare_creds+0x2c/0x7d0 [ 889.446443][T22253] __sys_setresuid+0x46d/0x1160 [ 889.446479][T22253] do_syscall_64+0xcd/0x490 [ 889.446520][T22253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.446556][T22253] RIP: 0033:0x7f3be6d8ebe9 [ 889.446581][T22253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.446613][T22253] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 889.446643][T22253] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 889.446662][T22253] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 889.446681][T22253] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 889.446700][T22253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.446718][T22253] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 889.446746][T22253] [ 890.181389][T22270] FAULT_INJECTION: forcing a failure. [ 890.181389][T22270] name fail_futex, interval 1, probability 0, space 0, times 0 [ 890.257317][T22270] CPU: 1 UID: 0 PID: 22270 Comm: syz.6.3256 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 890.257376][T22270] Tainted: [U]=USER [ 890.257388][T22270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.257407][T22270] Call Trace: [ 890.257418][T22270] [ 890.257430][T22270] dump_stack_lvl+0x16c/0x1f0 [ 890.257476][T22270] should_fail_ex+0x512/0x640 [ 890.257523][T22270] get_futex_key+0x1d0/0x1560 [ 890.257562][T22270] ? kvm_sched_clock_read+0x11/0x20 [ 890.257600][T22270] ? __pfx_get_futex_key+0x10/0x10 [ 890.257634][T22270] ? sched_clock_cpu+0x6c/0x530 [ 890.257673][T22270] ? __pick_eevdf+0x30a/0x670 [ 890.257712][T22270] futex_wait_setup+0x9d/0x550 [ 890.257761][T22270] __futex_wait+0x194/0x2f0 [ 890.257807][T22270] ? __pfx___futex_wait+0x10/0x10 [ 890.257850][T22270] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 890.257898][T22270] ? __pfx_futex_wake_mark+0x10/0x10 [ 890.257949][T22270] ? lock_release+0x201/0x2f0 [ 890.257991][T22270] ? futex_private_hash_put+0x11c/0x300 [ 890.258029][T22270] futex_wait+0xe8/0x380 [ 890.258073][T22270] ? __pfx_futex_wait+0x10/0x10 [ 890.258121][T22270] ? kmem_cache_free+0x2d1/0x4d0 [ 890.258166][T22270] ? putname+0x154/0x1a0 [ 890.258210][T22270] do_futex+0x229/0x350 [ 890.258248][T22270] ? __pfx_do_futex+0x10/0x10 [ 890.258293][T22270] __x64_sys_futex+0x1e0/0x4c0 [ 890.258334][T22270] ? __x64_sys_openat+0x174/0x210 [ 890.258383][T22270] ? __pfx___x64_sys_futex+0x10/0x10 [ 890.258429][T22270] do_syscall_64+0xcd/0x490 [ 890.258471][T22270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.258503][T22270] RIP: 0033:0x7fd85c18ebe9 [ 890.258528][T22270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.258558][T22270] RSP: 002b:00007fd85cf940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 890.258591][T22270] RAX: ffffffffffffffda RBX: 00007fd85c3b5fa8 RCX: 00007fd85c18ebe9 [ 890.258612][T22270] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd85c3b5fa8 [ 890.258633][T22270] RBP: 00007fd85c3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 890.258652][T22270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.258672][T22270] R13: 00007fd85c3b6038 R14: 00007ffc152fea90 R15: 00007ffc152feb78 [ 890.258700][T22270] [ 891.342572][T22291] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3259'. [ 891.500891][T22294] ima: policy update failed [ 891.523347][ T30] audit: type=1802 audit(6050467968.974:28): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3260" res=0 errno=0 [ 891.757382][T22298] netlink: 318 bytes leftover after parsing attributes in process `syz.3.3261'. [ 893.463181][T22344] FAULT_INJECTION: forcing a failure. [ 893.463181][T22344] name failslab, interval 1, probability 0, space 0, times 0 [ 893.612852][T22344] CPU: 1 UID: 0 PID: 22344 Comm: syz.2.3269 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 893.612894][T22344] Tainted: [U]=USER [ 893.612901][T22344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 893.612911][T22344] Call Trace: [ 893.612918][T22344] [ 893.612925][T22344] dump_stack_lvl+0x16c/0x1f0 [ 893.612953][T22344] should_fail_ex+0x512/0x640 [ 893.612980][T22344] should_failslab+0xc2/0x120 [ 893.613005][T22344] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 893.613027][T22344] ? getname_flags.part.0+0x4c/0x550 [ 893.613057][T22344] getname_flags.part.0+0x4c/0x550 [ 893.613086][T22344] getname_flags+0x93/0xf0 [ 893.613106][T22344] do_sys_openat2+0xb8/0x1d0 [ 893.613134][T22344] ? __pfx_do_sys_openat2+0x10/0x10 [ 893.613165][T22344] __x64_sys_openat+0x174/0x210 [ 893.613193][T22344] ? __pfx___x64_sys_openat+0x10/0x10 [ 893.613225][T22344] do_syscall_64+0xcd/0x490 [ 893.613249][T22344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.613268][T22344] RIP: 0033:0x7fdcf938ebe9 [ 893.613283][T22344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.613301][T22344] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 893.613319][T22344] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 893.613332][T22344] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 893.613344][T22344] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 893.613355][T22344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.613367][T22344] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 893.613382][T22344] [ 894.528938][T22353] FAULT_INJECTION: forcing a failure. [ 894.528938][T22353] name failslab, interval 1, probability 0, space 0, times 0 [ 894.528991][T22353] CPU: 1 UID: 0 PID: 22353 Comm: syz.3.3271 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 894.529040][T22353] Tainted: [U]=USER [ 894.529052][T22353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 894.529071][T22353] Call Trace: [ 894.529082][T22353] [ 894.529094][T22353] dump_stack_lvl+0x16c/0x1f0 [ 894.529148][T22353] should_fail_ex+0x512/0x640 [ 894.529197][T22353] should_failslab+0xc2/0x120 [ 894.529239][T22353] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 894.529278][T22353] ? d_alloc_parallel+0x828/0x1480 [ 894.529324][T22353] ? proc_alloc_inode+0x25/0x200 [ 894.529365][T22353] ? __pfx_proc_alloc_inode+0x10/0x10 [ 894.529404][T22353] proc_alloc_inode+0x25/0x200 [ 894.529442][T22353] alloc_inode+0x64/0x240 [ 894.529484][T22353] new_inode+0x22/0x1c0 [ 894.529527][T22353] proc_get_inode+0x1d/0x780 [ 894.529570][T22353] proc_lookup_de+0x236/0x360 [ 894.529616][T22353] proc_lookup+0xcf/0x110 [ 894.529660][T22353] __lookup_slow+0x24e/0x460 [ 894.529706][T22353] ? __pfx___lookup_slow+0x10/0x10 [ 894.529754][T22353] ? irq_entries_start+0xd0/0xcb0 [ 894.529789][T22353] ? irq_entries_start+0xd0/0xcb0 [ 894.529820][T22353] ? lookup_fast+0x156/0x610 [ 894.529852][T22353] walk_component+0x353/0x5b0 [ 894.529884][T22353] path_lookupat+0x142/0x6d0 [ 894.529916][T22353] path_openat+0x16f1/0x2cb0 [ 894.529950][T22353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.529987][T22353] ? __pfx_path_openat+0x10/0x10 [ 894.530026][T22353] do_filp_open+0x20b/0x470 [ 894.530061][T22353] ? __pfx_do_filp_open+0x10/0x10 [ 894.530102][T22353] ? __pfx_kfree_link+0x10/0x10 [ 894.530161][T22353] ? alloc_fd+0x471/0x7d0 [ 894.530197][T22353] do_sys_openat2+0x11b/0x1d0 [ 894.530244][T22353] ? __pfx_do_sys_openat2+0x10/0x10 [ 894.530291][T22353] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 894.530338][T22353] __x64_sys_openat+0x174/0x210 [ 894.530386][T22353] ? __pfx___x64_sys_openat+0x10/0x10 [ 894.530434][T22353] ? syscall_user_dispatch+0x78/0x140 [ 894.530485][T22353] do_syscall_64+0xcd/0x490 [ 894.530525][T22353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.530556][T22353] RIP: 0033:0x7f27f6d8ebe9 [ 894.530581][T22353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.530611][T22353] RSP: 002b:00007f27f7c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 894.530643][T22353] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8ebe9 [ 894.530663][T22353] RDX: 0000000000323d42 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 894.530685][T22353] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 894.530705][T22353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.530724][T22353] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 894.530754][T22353] [ 895.107928][T22360] synth uevent: /bus/mei: unknown uevent action string [ 895.542518][T22364] netlink: 318 bytes leftover after parsing attributes in process `syz.3.3274'. [ 895.724795][T22367] FAULT_INJECTION: forcing a failure. [ 895.724795][T22367] name failslab, interval 1, probability 0, space 0, times 0 [ 895.724846][T22367] CPU: 1 UID: 0 PID: 22367 Comm: syz.3.3275 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 895.724894][T22367] Tainted: [U]=USER [ 895.724905][T22367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 895.724924][T22367] Call Trace: [ 895.724934][T22367] [ 895.724947][T22367] dump_stack_lvl+0x16c/0x1f0 [ 895.724989][T22367] should_fail_ex+0x512/0x640 [ 895.725035][T22367] should_failslab+0xc2/0x120 [ 895.725084][T22367] __kmalloc_cache_noprof+0x6a/0x3e0 [ 895.725117][T22367] ? netdev_create_hash+0x3c/0xc0 [ 895.725165][T22367] ? __pfx_netdev_init+0x10/0x10 [ 895.725209][T22367] netdev_create_hash+0x3c/0xc0 [ 895.725253][T22367] ? __pfx_netdev_init+0x10/0x10 [ 895.725294][T22367] netdev_init+0x70/0x230 [ 895.725336][T22367] ops_init+0x1df/0x5f0 [ 895.725376][T22367] setup_net+0x10f/0x380 [ 895.725413][T22367] ? lockdep_init_map_type+0x5c/0x280 [ 895.725453][T22367] ? __pfx_setup_net+0x10/0x10 [ 895.725493][T22367] ? debug_mutex_init+0x37/0x70 [ 895.725521][T22367] copy_net_ns+0x2a6/0x5f0 [ 895.725563][T22367] create_new_namespaces+0x3ea/0xa90 [ 895.725600][T22367] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 895.725637][T22367] ksys_unshare+0x45b/0xa40 [ 895.725702][T22367] ? __pfx_ksys_unshare+0x10/0x10 [ 895.725744][T22367] ? xfd_validate_state+0x61/0x180 [ 895.725794][T22367] __x64_sys_unshare+0x31/0x40 [ 895.725834][T22367] do_syscall_64+0xcd/0x490 [ 895.725873][T22367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.725903][T22367] RIP: 0033:0x7f27f6d8ebe9 [ 895.725928][T22367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.725958][T22367] RSP: 002b:00007f27f7c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 895.725988][T22367] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8ebe9 [ 895.726008][T22367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 895.726027][T22367] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 895.726047][T22367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.726067][T22367] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 895.726105][T22367] [ 896.943889][T22335] pty pty205: ldisc open failed (-12), clearing slot 205 [ 896.957371][T22349] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 897.563294][T22386] FAULT_INJECTION: forcing a failure. [ 897.563294][T22386] name fail_futex, interval 1, probability 0, space 0, times 0 [ 897.651490][T22386] CPU: 0 UID: 0 PID: 22386 Comm: syz.5.3279 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 897.651531][T22386] Tainted: [U]=USER [ 897.651538][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.651549][T22386] Call Trace: [ 897.651555][T22386] [ 897.651563][T22386] dump_stack_lvl+0x16c/0x1f0 [ 897.651591][T22386] should_fail_ex+0x512/0x640 [ 897.651619][T22386] get_futex_key+0x1d0/0x1560 [ 897.651648][T22386] ? __pfx_get_futex_key+0x10/0x10 [ 897.651669][T22386] ? lock_release+0x201/0x2f0 [ 897.651696][T22386] futex_wake+0xea/0x530 [ 897.651722][T22386] ? futex_wait+0x120/0x380 [ 897.651748][T22386] ? __pfx_futex_wait+0x10/0x10 [ 897.651774][T22386] ? ksys_write+0x12a/0x250 [ 897.651794][T22386] ? __pfx_futex_wake+0x10/0x10 [ 897.651822][T22386] ? ksys_write+0x190/0x250 [ 897.651845][T22386] ? rcu_is_watching+0x12/0xc0 [ 897.651864][T22386] ? lock_release+0x201/0x2f0 [ 897.651888][T22386] do_futex+0x1e3/0x350 [ 897.651911][T22386] ? __pfx_do_futex+0x10/0x10 [ 897.651934][T22386] ? cap_task_prctl+0x2af/0xa80 [ 897.651954][T22386] __x64_sys_futex+0x1e0/0x4c0 [ 897.651978][T22386] ? __pfx___x64_sys_futex+0x10/0x10 [ 897.652001][T22386] ? __pfx___do_sys_prctl+0x10/0x10 [ 897.652032][T22386] do_syscall_64+0xcd/0x490 [ 897.652057][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.652076][T22386] RIP: 0033:0x7f3be6d8ebe9 [ 897.652099][T22386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.652117][T22386] RSP: 002b:00007f3be7b9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 897.652135][T22386] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa8 RCX: 00007f3be6d8ebe9 [ 897.652151][T22386] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3be6fb5fac [ 897.652162][T22386] RBP: 00007f3be6fb5fa0 R08: 00007f3be7b9e000 R09: 0000000000000000 [ 897.652174][T22386] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 897.652185][T22386] R13: 00007f3be6fb6038 R14: 00007ffd47b848f0 R15: 00007ffd47b849d8 [ 897.652201][T22386] [ 897.655139][T22386] FAULT_INJECTION: forcing a failure. [ 897.655139][T22386] name failslab, interval 1, probability 0, space 0, times 0 [ 897.979737][T22386] CPU: 0 UID: 0 PID: 22386 Comm: syz.5.3279 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 897.979795][T22386] Tainted: [U]=USER [ 897.979807][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.979826][T22386] Call Trace: [ 897.979847][T22386] [ 897.979860][T22386] dump_stack_lvl+0x16c/0x1f0 [ 897.979905][T22386] should_fail_ex+0x512/0x640 [ 897.979952][T22386] should_failslab+0xc2/0x120 [ 897.979992][T22386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 897.980029][T22386] ? alloc_uid+0x13d/0x4c0 [ 897.980071][T22386] alloc_uid+0x13d/0x4c0 [ 897.980108][T22386] ? __pfx_alloc_uid+0x10/0x10 [ 897.980146][T22386] ? security_prepare_creds+0xa7/0x270 [ 897.980193][T22386] __sys_setresuid+0x507/0x1160 [ 897.980229][T22386] do_syscall_64+0xcd/0x490 [ 897.980270][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.980300][T22386] RIP: 0033:0x7f3be6d8ebe9 [ 897.980323][T22386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.980354][T22386] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 897.980385][T22386] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 897.980407][T22386] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 897.980426][T22386] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 897.980445][T22386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.980463][T22386] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 897.980491][T22386] [ 898.579937][T22398] binder: 22396:22398 ioctl 400c620e 0 returned -22 [ 898.885783][T22403] kexec: Could not allocate control_code_buffer [ 900.541759][T22446] FAULT_INJECTION: forcing a failure. [ 900.541759][T22446] name failslab, interval 1, probability 0, space 0, times 0 [ 900.555452][T22446] CPU: 1 UID: 0 PID: 22446 Comm: syz.2.3291 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 900.555508][T22446] Tainted: [U]=USER [ 900.555519][T22446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.555538][T22446] Call Trace: [ 900.555548][T22446] [ 900.555560][T22446] dump_stack_lvl+0x16c/0x1f0 [ 900.555605][T22446] should_fail_ex+0x512/0x640 [ 900.555648][T22446] should_failslab+0xc2/0x120 [ 900.555685][T22446] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.555708][T22446] ? apparmor_capable+0x114/0x1d0 [ 900.555729][T22446] ? prepare_creds+0x2c/0x7d0 [ 900.555757][T22446] prepare_creds+0x2c/0x7d0 [ 900.555784][T22446] __sys_setresuid+0x46d/0x1160 [ 900.555815][T22446] do_syscall_64+0xcd/0x490 [ 900.555839][T22446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.555860][T22446] RIP: 0033:0x7fdcf938ebe9 [ 900.555875][T22446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.555893][T22446] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 900.555913][T22446] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 900.555924][T22446] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 900.555935][T22446] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 900.555946][T22446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.555956][T22446] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 900.555972][T22446] [ 901.118512][T22453] FAULT_INJECTION: forcing a failure. [ 901.118512][T22453] name failslab, interval 1, probability 0, space 0, times 0 [ 901.189211][T22453] CPU: 0 UID: 0 PID: 22453 Comm: syz.3.3292 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 901.189267][T22453] Tainted: [U]=USER [ 901.189279][T22453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 901.189296][T22453] Call Trace: [ 901.189306][T22453] [ 901.189318][T22453] dump_stack_lvl+0x16c/0x1f0 [ 901.189361][T22453] should_fail_ex+0x512/0x640 [ 901.189403][T22453] ? __seq_open_private+0x22/0xd0 [ 901.189446][T22453] should_failslab+0xc2/0x120 [ 901.189481][T22453] __kmalloc_noprof+0xd2/0x510 [ 901.189514][T22453] ? __debugfs_file_get+0x1fe/0x840 [ 901.189560][T22453] ? __pfx_nst_fop_open+0x10/0x10 [ 901.189602][T22453] __seq_open_private+0x22/0xd0 [ 901.189647][T22453] nst_fop_open+0x24/0x120 [ 901.189687][T22453] full_proxy_open_regular+0x1b9/0x360 [ 901.189717][T22453] do_dentry_open+0x982/0x1530 [ 901.189750][T22453] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 901.189781][T22453] vfs_open+0x82/0x3f0 [ 901.189825][T22453] path_openat+0x1de4/0x2cb0 [ 901.189876][T22453] ? __pfx_path_openat+0x10/0x10 [ 901.189917][T22453] do_filp_open+0x20b/0x470 [ 901.189953][T22453] ? __pfx_do_filp_open+0x10/0x10 [ 901.189999][T22453] ? alloc_fd+0x471/0x7d0 [ 901.190033][T22453] do_sys_openat2+0x11b/0x1d0 [ 901.190077][T22453] ? __pfx_do_sys_openat2+0x10/0x10 [ 901.190122][T22453] __x64_sys_openat+0x174/0x210 [ 901.190166][T22453] ? __pfx___x64_sys_openat+0x10/0x10 [ 901.190223][T22453] do_syscall_64+0xcd/0x490 [ 901.190262][T22453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.190292][T22453] RIP: 0033:0x7f27f6d8ebe9 [ 901.190317][T22453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.190347][T22453] RSP: 002b:00007f27f7c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 901.190378][T22453] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8ebe9 [ 901.190399][T22453] RDX: 0000000000101080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 901.190419][T22453] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 901.190436][T22453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.190454][T22453] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 901.190480][T22453] [ 901.426135][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.743420][T22455] netlink: 318 bytes leftover after parsing attributes in process `syz.2.3293'. [ 902.226787][ T30] audit: type=1800 audit(6050467979.684:29): pid=22473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3295" name="members" dev="configfs" ino=91386 res=0 errno=0 [ 904.136153][T22438] Process accounting paused [ 904.537899][T22505] FAULT_INJECTION: forcing a failure. [ 904.537899][T22505] name fail_futex, interval 1, probability 0, space 0, times 0 [ 904.633072][T22505] CPU: 1 UID: 0 PID: 22505 Comm: syz.3.3303 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 904.633130][T22505] Tainted: [U]=USER [ 904.633142][T22505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 904.633163][T22505] Call Trace: [ 904.633173][T22505] [ 904.633186][T22505] dump_stack_lvl+0x16c/0x1f0 [ 904.633231][T22505] should_fail_ex+0x512/0x640 [ 904.633278][T22505] get_futex_key+0x1d0/0x1560 [ 904.633316][T22505] ? __pfx_get_futex_key+0x10/0x10 [ 904.633351][T22505] ? rcu_is_watching+0x12/0xc0 [ 904.633384][T22505] ? lock_release+0x201/0x2f0 [ 904.633427][T22505] futex_wake+0xea/0x530 [ 904.633472][T22505] ? __pfx_futex_wake+0x10/0x10 [ 904.633513][T22505] ? lock_release+0x201/0x2f0 [ 904.633553][T22505] ? ksys_write+0x190/0x250 [ 904.633587][T22505] ? rcu_is_watching+0x12/0xc0 [ 904.633617][T22505] ? lock_release+0x201/0x2f0 [ 904.633657][T22505] do_futex+0x1e3/0x350 [ 904.633695][T22505] ? __pfx_do_futex+0x10/0x10 [ 904.633734][T22505] ? cap_task_prctl+0x2af/0xa80 [ 904.633769][T22505] __x64_sys_futex+0x1e0/0x4c0 [ 904.633803][T22505] ? __pfx___x64_sys_futex+0x10/0x10 [ 904.633839][T22505] ? __pfx___do_sys_prctl+0x10/0x10 [ 904.633891][T22505] do_syscall_64+0xcd/0x490 [ 904.633933][T22505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.633964][T22505] RIP: 0033:0x7f27f6d8ebe9 [ 904.633989][T22505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.634019][T22505] RSP: 002b:00007f27f7c270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 904.634061][T22505] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa8 RCX: 00007f27f6d8ebe9 [ 904.634083][T22505] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f27f6fb5fac [ 904.634102][T22505] RBP: 00007f27f6fb5fa0 R08: 00007f27f7c28000 R09: 0000000000000000 [ 904.634122][T22505] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 904.634142][T22505] R13: 00007f27f6fb6038 R14: 00007ffc6a223ba0 R15: 00007ffc6a223c88 [ 904.634170][T22505] [ 904.846858][T22515] FAULT_INJECTION: forcing a failure. [ 904.846858][T22515] name failslab, interval 1, probability 0, space 0, times 0 [ 904.860226][T22515] CPU: 1 UID: 0 PID: 22515 Comm: syz.3.3303 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 904.860283][T22515] Tainted: [U]=USER [ 904.860296][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 904.860315][T22515] Call Trace: [ 904.860325][T22515] [ 904.860338][T22515] dump_stack_lvl+0x16c/0x1f0 [ 904.860383][T22515] should_fail_ex+0x512/0x640 [ 904.860429][T22515] should_failslab+0xc2/0x120 [ 904.860471][T22515] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 904.860509][T22515] ? apparmor_capable+0x114/0x1d0 [ 904.860544][T22515] ? prepare_creds+0x2c/0x7d0 [ 904.860590][T22515] prepare_creds+0x2c/0x7d0 [ 904.860634][T22515] __sys_setresuid+0x46d/0x1160 [ 904.860670][T22515] do_syscall_64+0xcd/0x490 [ 904.860711][T22515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.860754][T22515] RIP: 0033:0x7f27f6d8ebe9 [ 904.860779][T22515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.860809][T22515] RSP: 002b:00007f27f7c06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 904.860842][T22515] RAX: ffffffffffffffda RBX: 00007f27f6fb6090 RCX: 00007f27f6d8ebe9 [ 904.860863][T22515] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 904.860882][T22515] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 904.860901][T22515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.860920][T22515] R13: 00007f27f6fb6128 R14: 00007f27f6fb6090 R15: 00007ffc6a223c88 [ 904.860950][T22515] [ 909.069328][T22605] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3321'. [ 909.129887][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 909.448576][T14541] udevd[14541]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 912.519910][ T30] audit: type=1800 audit(6050467989.994:30): pid=22666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=91763 res=0 errno=0 [ 912.546748][ T30] audit: type=1326 audit(6050467989.994:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be6d8ebe9 code=0x0 [ 912.586003][T22667] ptrace attach of "./syz-executor exec"[12800] was attempted by ""[22667] [ 912.631271][T22669] FAULT_INJECTION: forcing a failure. [ 912.631271][T22669] name failslab, interval 1, probability 0, space 0, times 0 [ 912.693760][T22669] CPU: 1 UID: 0 PID: 22669 Comm: syz.3.3332 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 912.693794][T22669] Tainted: [U]=USER [ 912.693807][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.693817][T22669] Call Trace: [ 912.693824][T22669] [ 912.693831][T22669] dump_stack_lvl+0x16c/0x1f0 [ 912.693859][T22669] should_fail_ex+0x512/0x640 [ 912.693890][T22669] should_failslab+0xc2/0x120 [ 912.693915][T22669] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 912.693944][T22669] ? __alloc_skb+0x2b2/0x380 [ 912.693968][T22669] __alloc_skb+0x2b2/0x380 [ 912.693990][T22669] ? __pfx___alloc_skb+0x10/0x10 [ 912.694015][T22669] new_skb+0x21/0x230 [ 912.694036][T22669] aoecmd_cfg+0x21c/0x7d0 [ 912.694059][T22669] ? __pfx_aoecmd_cfg+0x10/0x10 [ 912.694084][T22669] ? common_file_perm+0x1a9/0x340 [ 912.694109][T22669] ? __pfx_aoechr_write+0x10/0x10 [ 912.694128][T22669] ? aoechr_write+0x120/0x160 [ 912.694147][T22669] aoechr_write+0x120/0x160 [ 912.694167][T22669] vfs_writev+0x5dc/0xde0 [ 912.694188][T22669] ? __pfx_vfs_writev+0x10/0x10 [ 912.694208][T22669] ? kmem_cache_free+0x2d1/0x4d0 [ 912.694229][T22669] ? rcu_is_watching+0x12/0xc0 [ 912.694250][T22669] ? __fget_files+0x20e/0x3c0 [ 912.694272][T22669] ? do_writev+0x132/0x340 [ 912.694290][T22669] do_writev+0x132/0x340 [ 912.694308][T22669] ? __pfx_do_writev+0x10/0x10 [ 912.694329][T22669] do_syscall_64+0xcd/0x490 [ 912.694353][T22669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.694377][T22669] RIP: 0033:0x7f27f6d8ebe9 [ 912.694393][T22669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.694410][T22669] RSP: 002b:00007f27f7c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 912.694428][T22669] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8ebe9 [ 912.694440][T22669] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 912.694451][T22669] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 912.694462][T22669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.694473][T22669] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 912.694489][T22669] [ 912.694497][T22669] aoe: skb alloc failure [ 912.997538][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.003945][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.461932][T22679] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 913.658742][T22689] netlink: 25520 bytes leftover after parsing attributes in process `syz.6.3335'. [ 913.672762][T22689] netlink: zone id is out of range [ 913.681136][T22689] netlink: zone id is out of range [ 913.701390][T22689] netlink: zone id is out of range [ 913.707424][T22689] netlink: zone id is out of range [ 913.869903][T22689] netlink: zone id is out of range [ 913.885809][T22689] netlink: zone id is out of range [ 913.892640][T22689] netlink: zone id is out of range [ 913.921356][T22689] netlink: zone id is out of range [ 913.928740][T22689] netlink: zone id is out of range [ 913.934013][T22689] netlink: zone id is out of range [ 915.027798][ T30] audit: type=1800 audit(6050467992.494:32): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3339" name="members" dev="configfs" ino=91992 res=0 errno=0 [ 915.292332][T22723] FAULT_INJECTION: forcing a failure. [ 915.292332][T22723] name failslab, interval 1, probability 0, space 0, times 0 [ 915.357309][T22723] CPU: 1 UID: 0 PID: 22723 Comm: syz.6.3342 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 915.357344][T22723] Tainted: [U]=USER [ 915.357350][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 915.357361][T22723] Call Trace: [ 915.357368][T22723] [ 915.357375][T22723] dump_stack_lvl+0x16c/0x1f0 [ 915.357403][T22723] should_fail_ex+0x512/0x640 [ 915.357431][T22723] should_failslab+0xc2/0x120 [ 915.357456][T22723] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 915.357478][T22723] ? apparmor_capable+0x114/0x1d0 [ 915.357498][T22723] ? prepare_creds+0x2c/0x7d0 [ 915.357529][T22723] prepare_creds+0x2c/0x7d0 [ 915.357557][T22723] __sys_setresuid+0x46d/0x1160 [ 915.357579][T22723] do_syscall_64+0xcd/0x490 [ 915.357604][T22723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.357623][T22723] RIP: 0033:0x7fd85c18ebe9 [ 915.357637][T22723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.357655][T22723] RSP: 002b:00007fd85cf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 915.357673][T22723] RAX: ffffffffffffffda RBX: 00007fd85c3b5fa0 RCX: 00007fd85c18ebe9 [ 915.357685][T22723] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 915.357696][T22723] RBP: 00007fd85c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 915.357707][T22723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.357718][T22723] R13: 00007fd85c3b6038 R14: 00007fd85c3b5fa0 R15: 00007ffc152feb78 [ 915.357734][T22723] [ 917.233712][T22775] FAULT_INJECTION: forcing a failure. [ 917.233712][T22775] name failslab, interval 1, probability 0, space 0, times 0 [ 917.249232][T22775] CPU: 1 UID: 0 PID: 22775 Comm: syz.5.3354 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 917.249284][T22775] Tainted: [U]=USER [ 917.249295][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.249312][T22775] Call Trace: [ 917.249321][T22775] [ 917.249332][T22775] dump_stack_lvl+0x16c/0x1f0 [ 917.249371][T22775] should_fail_ex+0x512/0x640 [ 917.249410][T22775] should_failslab+0xc2/0x120 [ 917.249447][T22775] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 917.249479][T22775] ? apparmor_capable+0x114/0x1d0 [ 917.249510][T22775] ? prepare_creds+0x2c/0x7d0 [ 917.249559][T22775] prepare_creds+0x2c/0x7d0 [ 917.249609][T22775] __sys_setresuid+0x46d/0x1160 [ 917.249643][T22775] do_syscall_64+0xcd/0x490 [ 917.249681][T22775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.249709][T22775] RIP: 0033:0x7f3be6d8ebe9 [ 917.249731][T22775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.249757][T22775] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 917.249785][T22775] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 917.249804][T22775] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 917.249820][T22775] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 917.249837][T22775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.249854][T22775] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 917.249881][T22775] [ 917.804170][T22785] FAULT_INJECTION: forcing a failure. [ 917.804170][T22785] name failslab, interval 1, probability 0, space 0, times 0 [ 917.826791][T22785] CPU: 0 UID: 0 PID: 22785 Comm: syz.5.3357 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 917.826846][T22785] Tainted: [U]=USER [ 917.826857][T22785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.826875][T22785] Call Trace: [ 917.826885][T22785] [ 917.826898][T22785] dump_stack_lvl+0x16c/0x1f0 [ 917.826938][T22785] should_fail_ex+0x512/0x640 [ 917.826982][T22785] should_failslab+0xc2/0x120 [ 917.827020][T22785] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 917.827044][T22785] ? apparmor_capable+0x114/0x1d0 [ 917.827065][T22785] ? prepare_creds+0x2c/0x7d0 [ 917.827093][T22785] prepare_creds+0x2c/0x7d0 [ 917.827120][T22785] __sys_setresuid+0x46d/0x1160 [ 917.827142][T22785] do_syscall_64+0xcd/0x490 [ 917.827167][T22785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.827186][T22785] RIP: 0033:0x7f3be6d8ebe9 [ 917.827201][T22785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.827219][T22785] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 917.827238][T22785] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 917.827250][T22785] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 917.827262][T22785] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 917.827273][T22785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.827283][T22785] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 917.827299][T22785] [ 917.849158][T22783] FAULT_INJECTION: forcing a failure. [ 917.849158][T22783] name failslab, interval 1, probability 0, space 0, times 0 [ 918.040310][T22783] CPU: 0 UID: 0 PID: 22783 Comm: syz.2.3364 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 918.040363][T22783] Tainted: [U]=USER [ 918.040373][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.040391][T22783] Call Trace: [ 918.040400][T22783] [ 918.040411][T22783] dump_stack_lvl+0x16c/0x1f0 [ 918.040449][T22783] should_fail_ex+0x512/0x640 [ 918.040489][T22783] should_failslab+0xc2/0x120 [ 918.040526][T22783] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 918.040557][T22783] ? apparmor_capable+0x114/0x1d0 [ 918.040586][T22783] ? prepare_creds+0x2c/0x7d0 [ 918.040636][T22783] prepare_creds+0x2c/0x7d0 [ 918.040693][T22783] __sys_setresuid+0x46d/0x1160 [ 918.040728][T22783] do_syscall_64+0xcd/0x490 [ 918.040768][T22783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.040796][T22783] RIP: 0033:0x7fdcf938ebe9 [ 918.040820][T22783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.040848][T22783] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 918.040875][T22783] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 918.040894][T22783] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 918.040911][T22783] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 918.040927][T22783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.040944][T22783] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 918.040970][T22783] [ 919.467753][ T30] audit: type=1800 audit(6050467996.934:33): pid=22816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=93403 res=0 errno=0 [ 919.488062][ T30] audit: type=1326 audit(6050467996.934:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22815 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf938ebe9 code=0x0 [ 919.526374][T22817] ptrace attach of "./syz-executor exec"[17339] was attempted by ""[22817] [ 920.601083][ T5861] Bluetooth: hci1: ACL packet too small [ 921.699751][T22850] FAULT_INJECTION: forcing a failure. [ 921.699751][T22850] name failslab, interval 1, probability 0, space 0, times 0 [ 921.760993][T22857] netlink: 25520 bytes leftover after parsing attributes in process `syz.5.3369'. [ 921.767571][T22850] CPU: 1 UID: 0 PID: 22850 Comm: syz.3.3370 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 921.767621][T22850] Tainted: [U]=USER [ 921.767630][T22850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.767646][T22850] Call Trace: [ 921.767656][T22850] [ 921.767666][T22850] dump_stack_lvl+0x16c/0x1f0 [ 921.767704][T22850] should_fail_ex+0x512/0x640 [ 921.767744][T22850] should_failslab+0xc2/0x120 [ 921.767779][T22850] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 921.767810][T22850] ? apparmor_capable+0x114/0x1d0 [ 921.767848][T22850] ? prepare_creds+0x2c/0x7d0 [ 921.767887][T22850] prepare_creds+0x2c/0x7d0 [ 921.767926][T22850] __sys_setresuid+0x46d/0x1160 [ 921.767958][T22850] do_syscall_64+0xcd/0x490 [ 921.767994][T22850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.768020][T22850] RIP: 0033:0x7f27f6d8ebe9 [ 921.768041][T22850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.768066][T22850] RSP: 002b:00007f27f7c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 921.768093][T22850] RAX: ffffffffffffffda RBX: 00007f27f6fb5fa0 RCX: 00007f27f6d8ebe9 [ 921.768112][T22850] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 921.768128][T22850] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 921.768143][T22850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.768159][T22850] R13: 00007f27f6fb6038 R14: 00007f27f6fb5fa0 R15: 00007ffc6a223c88 [ 921.768183][T22850] [ 921.943442][T22857] net_ratelimit: 215 callbacks suppressed [ 921.943466][T22857] netlink: zone id is out of range [ 921.958434][T22857] netlink: zone id is out of range [ 921.969256][T22857] netlink: zone id is out of range [ 921.977363][T22857] netlink: zone id is out of range [ 921.986066][T22857] netlink: zone id is out of range [ 922.010296][T22857] netlink: zone id is out of range [ 922.032268][T22857] netlink: zone id is out of range [ 922.037753][T22857] netlink: zone id is out of range [ 922.048142][T22857] netlink: zone id is out of range [ 922.093891][T22857] netlink: zone id is out of range [ 922.663118][ T30] audit: type=1800 audit(6050468000.134:35): pid=22878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=92816 res=0 errno=0 [ 922.751525][ T30] audit: type=1326 audit(6050468000.224:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 922.805467][T22883] ptrace attach of "./syz-executor exec"[13342] was attempted by ""[22883] [ 923.438279][T22895] FAULT_INJECTION: forcing a failure. [ 923.438279][T22895] name failslab, interval 1, probability 0, space 0, times 0 [ 923.464167][T22895] CPU: 0 UID: 0 PID: 22895 Comm: syz.2.3379 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 923.464223][T22895] Tainted: [U]=USER [ 923.464234][T22895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.464253][T22895] Call Trace: [ 923.464262][T22895] [ 923.464274][T22895] dump_stack_lvl+0x16c/0x1f0 [ 923.464318][T22895] should_fail_ex+0x512/0x640 [ 923.464362][T22895] should_failslab+0xc2/0x120 [ 923.464403][T22895] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 923.464443][T22895] ? alloc_uid+0x13d/0x4c0 [ 923.464480][T22895] alloc_uid+0x13d/0x4c0 [ 923.464517][T22895] ? __pfx_alloc_uid+0x10/0x10 [ 923.464556][T22895] ? security_prepare_creds+0xa7/0x270 [ 923.464628][T22895] __sys_setresuid+0x507/0x1160 [ 923.464665][T22895] do_syscall_64+0xcd/0x490 [ 923.464708][T22895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.464740][T22895] RIP: 0033:0x7fdcf938ebe9 [ 923.464765][T22895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.464796][T22895] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 923.464828][T22895] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 923.464849][T22895] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 923.464868][T22895] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 923.464886][T22895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.464905][T22895] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 923.464933][T22895] [ 924.879797][ T5861] Bluetooth: hci0: ACL packet too small [ 924.959168][T22926] netlink: 318 bytes leftover after parsing attributes in process `syz.3.3384'. [ 926.083897][T22947] netlink: 25520 bytes leftover after parsing attributes in process `syz.2.3386'. [ 926.382638][ T30] audit: type=1800 audit(6050468003.854:37): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=93657 res=0 errno=0 [ 926.431849][ T5861] Bluetooth: hci2: ACL packet too small [ 926.437916][ T30] audit: type=1326 audit(6050468003.894:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22961 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f6d8ebe9 code=0x0 [ 926.468984][T22965] ptrace attach of "./syz-executor exec"[18331] was attempted by ""[22965] [ 927.319609][T22982] FAULT_INJECTION: forcing a failure. [ 927.319609][T22982] name failslab, interval 1, probability 0, space 0, times 0 [ 927.333940][T22982] CPU: 0 UID: 0 PID: 22982 Comm: syz.3.3394 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 927.333974][T22982] Tainted: [U]=USER [ 927.333980][T22982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 927.333992][T22982] Call Trace: [ 927.333998][T22982] [ 927.334005][T22982] dump_stack_lvl+0x16c/0x1f0 [ 927.334033][T22982] should_fail_ex+0x512/0x640 [ 927.334061][T22982] should_failslab+0xc2/0x120 [ 927.334088][T22982] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 927.334110][T22982] ? security_file_alloc+0x34/0x2b0 [ 927.334137][T22982] security_file_alloc+0x34/0x2b0 [ 927.334162][T22982] init_file+0x93/0x4c0 [ 927.334188][T22982] alloc_empty_file+0x73/0x1e0 [ 927.334216][T22982] path_openat+0xda/0x2cb0 [ 927.334236][T22982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.334259][T22982] ? __pfx_path_openat+0x10/0x10 [ 927.334282][T22982] do_filp_open+0x20b/0x470 [ 927.334307][T22982] ? __pfx_do_filp_open+0x10/0x10 [ 927.334335][T22982] ? alloc_fd+0x471/0x7d0 [ 927.334356][T22982] do_sys_openat2+0x11b/0x1d0 [ 927.334384][T22982] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.334416][T22982] __x64_sys_openat+0x174/0x210 [ 927.334445][T22982] ? __pfx___x64_sys_openat+0x10/0x10 [ 927.334480][T22982] do_syscall_64+0xcd/0x490 [ 927.334506][T22982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.334524][T22982] RIP: 0033:0x7f27f6d8ebe9 [ 927.334539][T22982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.334557][T22982] RSP: 002b:00007f27f7be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 927.334576][T22982] RAX: ffffffffffffffda RBX: 00007f27f6fb6180 RCX: 00007f27f6d8ebe9 [ 927.334589][T22982] RDX: 0000000000040802 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 927.334601][T22982] RBP: 00007f27f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 927.334616][T22982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.334631][T22982] R13: 00007f27f6fb6218 R14: 00007f27f6fb6180 R15: 00007ffc6a223c88 [ 927.334652][T22982] [ 929.199706][T23071] ubi0: attaching mtd0 [ 929.236896][T23071] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 931.024078][ T30] audit: type=1800 audit(6050468008.494:39): pid=23095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=93747 res=0 errno=0 [ 931.406194][ T30] audit: type=1326 audit(6050468008.874:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23094 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 932.322312][T23117] __vm_enough_memory: pid: 23117, comm: syz.6.3410, bytes: 4398046511104 not enough memory for the allocation [ 933.964669][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3418'. [ 934.856070][T23168] program syz.6.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.877316][T23168] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 934.954717][T23152] Process accounting resumed [ 935.038643][T23169] FAULT_INJECTION: forcing a failure. [ 935.038643][T23169] name failslab, interval 1, probability 0, space 0, times 0 [ 935.051545][T23169] CPU: 0 UID: 0 PID: 23169 Comm: syz.2.3423 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 935.051578][T23169] Tainted: [U]=USER [ 935.051585][T23169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.051596][T23169] Call Trace: [ 935.051602][T23169] [ 935.051609][T23169] dump_stack_lvl+0x16c/0x1f0 [ 935.051649][T23169] should_fail_ex+0x512/0x640 [ 935.051680][T23169] should_failslab+0xc2/0x120 [ 935.051705][T23169] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 935.051729][T23169] ? getname_flags.part.0+0x4c/0x550 [ 935.051760][T23169] getname_flags.part.0+0x4c/0x550 [ 935.051789][T23169] getname_flags+0x93/0xf0 [ 935.051809][T23169] do_sys_openat2+0xb8/0x1d0 [ 935.051836][T23169] ? __pfx_do_sys_openat2+0x10/0x10 [ 935.051868][T23169] __x64_sys_openat+0x174/0x210 [ 935.051896][T23169] ? __pfx___x64_sys_openat+0x10/0x10 [ 935.051928][T23169] do_syscall_64+0xcd/0x490 [ 935.051953][T23169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.051972][T23169] RIP: 0033:0x7fdcf938ebe9 [ 935.051987][T23169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.052004][T23169] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 935.052022][T23169] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 935.052035][T23169] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 935.052046][T23169] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 935.052058][T23169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.052069][T23169] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 935.052085][T23169] [ 935.053118][T23169] FAULT_INJECTION: forcing a failure. [ 935.053118][T23169] name failslab, interval 1, probability 0, space 0, times 0 [ 935.337843][T23169] CPU: 1 UID: 0 PID: 23169 Comm: syz.2.3423 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 935.337893][T23169] Tainted: [U]=USER [ 935.337900][T23169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.337911][T23169] Call Trace: [ 935.337917][T23169] [ 935.337925][T23169] dump_stack_lvl+0x16c/0x1f0 [ 935.337952][T23169] should_fail_ex+0x512/0x640 [ 935.337979][T23169] should_failslab+0xc2/0x120 [ 935.338005][T23169] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 935.338028][T23169] ? apparmor_capable+0x114/0x1d0 [ 935.338047][T23169] ? prepare_creds+0x2c/0x7d0 [ 935.338074][T23169] prepare_creds+0x2c/0x7d0 [ 935.338101][T23169] __sys_setresuid+0x46d/0x1160 [ 935.338122][T23169] do_syscall_64+0xcd/0x490 [ 935.338146][T23169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.338166][T23169] RIP: 0033:0x7fdcf938ebe9 [ 935.338180][T23169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.338198][T23169] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 935.338216][T23169] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 935.338229][T23169] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 935.338240][T23169] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 935.338251][T23169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.338262][T23169] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 935.338278][T23169] [ 936.646993][T23197] FAULT_INJECTION: forcing a failure. [ 936.646993][T23197] name failslab, interval 1, probability 0, space 0, times 0 [ 936.685314][T23197] CPU: 1 UID: 0 PID: 23197 Comm: syz.2.3429 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 936.685349][T23197] Tainted: [U]=USER [ 936.685357][T23197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.685370][T23197] Call Trace: [ 936.685376][T23197] [ 936.685384][T23197] dump_stack_lvl+0x16c/0x1f0 [ 936.685412][T23197] should_fail_ex+0x512/0x640 [ 936.685440][T23197] should_failslab+0xc2/0x120 [ 936.685466][T23197] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 936.685489][T23197] ? sk_prot_alloc+0x60/0x2a0 [ 936.685518][T23197] sk_prot_alloc+0x60/0x2a0 [ 936.685546][T23197] sk_alloc+0x36/0xc20 [ 936.685568][T23197] tipc_sk_create+0xcf/0x21a0 [ 936.685598][T23197] ? evm_inode_alloc_security+0x49/0xc0 [ 936.685631][T23197] ? security_inode_alloc+0xcf/0x2b0 [ 936.685654][T23197] ? rcu_is_watching+0x12/0xc0 [ 936.685674][T23197] ? rcu_is_watching+0x12/0xc0 [ 936.685692][T23197] ? lock_release+0x201/0x2f0 [ 936.685718][T23197] __sock_create+0x338/0x8d0 [ 936.685737][T23197] __sys_socket+0x14d/0x260 [ 936.685755][T23197] ? __pfx___sys_socket+0x10/0x10 [ 936.685773][T23197] ? xfd_validate_state+0x61/0x180 [ 936.685803][T23197] __x64_sys_socket+0x72/0xb0 [ 936.685821][T23197] do_syscall_64+0xcd/0x490 [ 936.685847][T23197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.685867][T23197] RIP: 0033:0x7fdcf938ebe9 [ 936.685882][T23197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.685902][T23197] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.685922][T23197] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 936.685935][T23197] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 936.685946][T23197] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 936.685959][T23197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.685970][T23197] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 936.685987][T23197] [ 937.143664][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.151473][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.080595][T23200] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3427'. [ 938.339744][T23220] could not allocate digest TFM handle [ 940.303546][T23267] program syz.2.3435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.350827][T23267] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 943.166005][T23309] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3441'. [ 944.698932][T23348] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3447'. [ 946.043662][T23384] program syz.5.3448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.096965][T23384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 948.169112][ T30] audit: type=1800 audit(6050468025.634:41): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=94746 res=0 errno=0 [ 948.212489][ T30] audit: type=1326 audit(6050468025.634:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23413 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 951.009043][T23439] ptm ptm53: ldisc open failed (-12), clearing slot 53 [ 951.193923][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.204078][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.212100][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.220793][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.247351][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 951.560989][T23449] chnl_net:caif_netlink_parms(): no params data found [ 951.627766][T23449] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.635133][T23449] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.642510][T23449] bridge_slave_0: entered allmulticast mode [ 951.650174][T23449] bridge_slave_0: entered promiscuous mode [ 951.658935][T23449] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.666420][T23449] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.674332][T23449] bridge_slave_1: entered allmulticast mode [ 951.681628][T23449] bridge_slave_1: entered promiscuous mode [ 951.712084][T23449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.724213][T23449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.757051][T23449] team0: Port device team_slave_0 added [ 951.766499][T23449] team0: Port device team_slave_1 added [ 951.794160][T23449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.801282][T23449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.828674][T23449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.840855][T23449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.847975][T23449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.875661][T23449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.917299][T23449] hsr_slave_0: entered promiscuous mode [ 951.923710][T23449] hsr_slave_1: entered promiscuous mode [ 951.930285][T23449] debugfs: 'hsr0' already exists in 'hsr' [ 951.936044][T23449] Cannot create hsr debugfs directory [ 952.069401][T23449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 952.079883][T23449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 952.092992][T23449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 952.112360][T23449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 952.186189][T23449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.204495][T23449] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.217013][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.224176][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.238392][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.245522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.463857][T23449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.745067][T23449] veth0_vlan: entered promiscuous mode [ 952.761848][T23449] veth1_vlan: entered promiscuous mode [ 952.805548][T23449] veth0_macvtap: entered promiscuous mode [ 952.815118][T23449] veth1_macvtap: entered promiscuous mode [ 952.842649][T23449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.858850][T23449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.873171][ T6407] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.892906][ T6407] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.905048][ T6407] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.917698][ T6407] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.964657][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.982949][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.012554][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.023664][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.296731][ T5863] Bluetooth: hci3: command tx timeout [ 953.610699][T23477] ALSA: mixer_oss: invalid OSS volume '' [ 954.702487][T23515] program syz.7.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 954.836005][T23515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 955.384505][ T5863] Bluetooth: hci3: command tx timeout [ 955.558296][ T30] audit: type=1800 audit(6050468033.024:43): pid=23528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=96276 res=0 errno=0 [ 955.647151][ T30] audit: type=1326 audit(6050468033.024:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23527 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf938ebe9 code=0x0 [ 957.456969][ T5863] Bluetooth: hci3: command tx timeout [ 959.125444][T23550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 959.146245][T23550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 959.187361][T23550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 959.193374][T23550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 959.206813][T23550] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 959.275270][T23550] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 959.299452][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 959.361788][T23555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 959.554918][ T30] audit: type=1326 audit(6050468037.024:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23580 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 960.703549][T23583] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 960.839010][ T30] audit: type=1800 audit(6050468038.314:46): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=95743 res=0 errno=0 [ 960.899304][T23596] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3494'. [ 960.914394][ T30] audit: type=1326 audit(6050468038.364:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23593 comm=08 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be6d8ebe9 code=0x0 [ 961.217207][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 961.217213][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout [ 961.230198][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 963.306839][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 963.823109][T23619] ALSA: mixer_oss: invalid OSS volume '' [ 964.672463][T23652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 965.386796][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 967.875065][T23681] ALSA: mixer_oss: invalid OSS volume '' [ 968.211338][ T5863] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 970.256810][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 971.317532][ T30] audit: type=1326 audit(6050468048.784:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.6.3521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 972.290521][ T30] audit: type=1326 audit(6050468049.764:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23753 comm=6E6C696E650A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 973.485080][T23770] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input48 [ 973.571500][T23772] Process accounting resumed [ 973.720681][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.834639][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.027698][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.084774][T23762] Process accounting paused [ 974.095329][T23769] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 974.175017][T23769] FAULT_INJECTION: forcing a failure. [ 974.175017][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.211309][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.270897][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.7.3526 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 974.270964][T23769] Tainted: [U]=USER [ 974.270976][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 974.270996][T23769] Call Trace: [ 974.271006][T23769] [ 974.271018][T23769] dump_stack_lvl+0x16c/0x1f0 [ 974.271061][T23769] should_fail_ex+0x512/0x640 [ 974.271107][T23769] _copy_from_user+0x2e/0xd0 [ 974.271152][T23769] memdup_user_nul+0x6c/0x120 [ 974.271194][T23769] nsim_dev_health_break_write+0xbd/0x210 [ 974.271234][T23769] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 974.271275][T23769] ? rcu_is_watching+0x12/0xc0 [ 974.271308][T23769] full_proxy_write+0x131/0x1a0 [ 974.271354][T23769] ? __pfx_full_proxy_write+0x10/0x10 [ 974.271398][T23769] vfs_write+0x2a0/0x11d0 [ 974.271434][T23769] ? __pfx___mutex_lock+0x10/0x10 [ 974.271472][T23769] ? __pfx_vfs_write+0x10/0x10 [ 974.271502][T23769] ? __fget_files+0x204/0x3c0 [ 974.271534][T23769] ? rcu_is_watching+0x12/0xc0 [ 974.271566][T23769] ? __fget_files+0x20e/0x3c0 [ 974.271601][T23769] ksys_write+0x12a/0x250 [ 974.271635][T23769] ? __pfx_ksys_write+0x10/0x10 [ 974.271675][T23769] do_syscall_64+0xcd/0x490 [ 974.271714][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.271744][T23769] RIP: 0033:0x7fd85398ebe9 [ 974.271768][T23769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.271797][T23769] RSP: 002b:00007fd8547fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 974.271827][T23769] RAX: ffffffffffffffda RBX: 00007fd853bb5fa0 RCX: 00007fd85398ebe9 [ 974.271848][T23769] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 974.271866][T23769] RBP: 00007fd853a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 974.271883][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.271902][T23769] R13: 00007fd853bb6038 R14: 00007fd853bb5fa0 R15: 00007ffd99d31008 [ 974.271930][T23769] [ 974.492284][T23769] FAULT_INJECTION: forcing a failure. [ 974.492284][T23769] name failslab, interval 1, probability 0, space 0, times 0 [ 974.508017][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.7.3526 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 974.508052][T23769] Tainted: [U]=USER [ 974.508058][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 974.508069][T23769] Call Trace: [ 974.508075][T23769] [ 974.508083][T23769] dump_stack_lvl+0x16c/0x1f0 [ 974.508111][T23769] should_fail_ex+0x512/0x640 [ 974.508138][T23769] should_failslab+0xc2/0x120 [ 974.508165][T23769] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 974.508189][T23769] ? alloc_uid+0x13d/0x4c0 [ 974.508214][T23769] alloc_uid+0x13d/0x4c0 [ 974.508237][T23769] ? __pfx_alloc_uid+0x10/0x10 [ 974.508260][T23769] ? security_prepare_creds+0xa7/0x270 [ 974.508290][T23769] __sys_setresuid+0x507/0x1160 [ 974.508313][T23769] do_syscall_64+0xcd/0x490 [ 974.508337][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.508357][T23769] RIP: 0033:0x7fd85398ebe9 [ 974.508372][T23769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.508390][T23769] RSP: 002b:00007fd8547fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 974.508408][T23769] RAX: ffffffffffffffda RBX: 00007fd853bb5fa0 RCX: 00007fd85398ebe9 [ 974.508420][T23769] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 974.508431][T23769] RBP: 00007fd853a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 974.508442][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.508453][T23769] R13: 00007fd853bb6038 R14: 00007fd853bb5fa0 R15: 00007ffd99d31008 [ 974.508469][T23769] [ 975.041967][T23787] perf: Dynamic interrupt throttling disabled, can hang your system! [ 975.159062][ T36] bridge_slave_1: left allmulticast mode [ 975.166911][ T36] bridge_slave_1: left promiscuous mode [ 975.233156][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.317065][ T36] bridge_slave_0: left allmulticast mode [ 975.324606][ T36] bridge_slave_0: left promiscuous mode [ 975.340442][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.686315][ T30] audit: type=1326 audit(6050468053.154:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23811 comm=6E6C696E650A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcf938ebe9 code=0x0 [ 976.337918][ T36] HfR: left promiscuous mode [ 976.787755][T23836] FAULT_INJECTION: forcing a failure. [ 976.787755][T23836] name failslab, interval 1, probability 0, space 0, times 0 [ 976.793821][T23839] ptrace attach of "./syz-executor exec"[23842] was attempted by "./syz-executor exec"[23839] [ 976.819681][T23836] CPU: 0 UID: 0 PID: 23836 Comm: syz.2.3539 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 976.819738][T23836] Tainted: [U]=USER [ 976.819749][T23836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 976.819769][T23836] Call Trace: [ 976.819779][T23836] [ 976.819792][T23836] dump_stack_lvl+0x16c/0x1f0 [ 976.819836][T23836] should_fail_ex+0x512/0x640 [ 976.819882][T23836] should_failslab+0xc2/0x120 [ 976.819923][T23836] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 976.819964][T23836] ? nsim_dev_dummy_reporter_recover+0xca/0x190 [ 976.820012][T23836] kstrdup+0x53/0x100 [ 976.820051][T23836] ? __pfx_nsim_dev_dummy_reporter_recover+0x10/0x10 [ 976.820095][T23836] nsim_dev_dummy_reporter_recover+0xca/0x190 [ 976.820137][T23836] ? rcu_is_watching+0x12/0xc0 [ 976.820178][T23836] devlink_health_reporter_recover+0xc1/0x200 [ 976.820227][T23836] devlink_health_report+0x32e/0x9c0 [ 976.820275][T23836] ? __pfx_devlink_health_report+0x10/0x10 [ 976.820319][T23836] ? _copy_from_user+0x59/0xd0 [ 976.820369][T23836] nsim_dev_health_break_write+0x166/0x210 [ 976.820411][T23836] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 976.820467][T23836] ? rcu_is_watching+0x12/0xc0 [ 976.820502][T23836] full_proxy_write+0x131/0x1a0 [ 976.820551][T23836] ? __pfx_full_proxy_write+0x10/0x10 [ 976.820598][T23836] vfs_write+0x2a0/0x11d0 [ 976.820632][T23836] ? __pfx___mutex_lock+0x10/0x10 [ 976.820666][T23836] ? __pfx_vfs_write+0x10/0x10 [ 976.820697][T23836] ? __fget_files+0x204/0x3c0 [ 976.820729][T23836] ? rcu_is_watching+0x12/0xc0 [ 976.820762][T23836] ? __fget_files+0x20e/0x3c0 [ 976.820797][T23836] ksys_write+0x12a/0x250 [ 976.820830][T23836] ? __pfx_ksys_write+0x10/0x10 [ 976.820868][T23836] do_syscall_64+0xcd/0x490 [ 976.820907][T23836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.820936][T23836] RIP: 0033:0x7fdcf938ebe9 [ 976.820959][T23836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.820988][T23836] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.821018][T23836] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 976.821036][T23836] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 976.821054][T23836] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 976.821072][T23836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.821090][T23836] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 976.821118][T23836] [ 977.096319][T23836] FAULT_INJECTION: forcing a failure. [ 977.096319][T23836] name failslab, interval 1, probability 0, space 0, times 0 [ 977.111505][T23836] CPU: 0 UID: 0 PID: 23836 Comm: syz.2.3539 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 977.111563][T23836] Tainted: [U]=USER [ 977.111574][T23836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 977.111592][T23836] Call Trace: [ 977.111602][T23836] [ 977.111614][T23836] dump_stack_lvl+0x16c/0x1f0 [ 977.111656][T23836] should_fail_ex+0x512/0x640 [ 977.111701][T23836] should_failslab+0xc2/0x120 [ 977.111741][T23836] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 977.111777][T23836] ? apparmor_capable+0x114/0x1d0 [ 977.111809][T23836] ? prepare_creds+0x2c/0x7d0 [ 977.111855][T23836] prepare_creds+0x2c/0x7d0 [ 977.111900][T23836] __sys_setresuid+0x46d/0x1160 [ 977.111937][T23836] do_syscall_64+0xcd/0x490 [ 977.111974][T23836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.112005][T23836] RIP: 0033:0x7fdcf938ebe9 [ 977.112030][T23836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.112060][T23836] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 977.112091][T23836] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 977.112111][T23836] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 977.112130][T23836] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 977.112149][T23836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.112167][T23836] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 977.112203][T23836] [ 977.211516][T23853] ptrace attach of ""[23842] was attempted by "./syz-executor exec"[23853] [ 977.801190][ T36] hsr_slave_0: left promiscuous mode [ 977.875228][ T36] hsr_slave_1: left promiscuous mode [ 977.954998][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.971543][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.044449][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.115916][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.183147][ T36] veth1_macvtap: left promiscuous mode [ 978.189177][ T36] veth0_macvtap: left promiscuous mode [ 978.219667][ T36] veth1_vlan: left promiscuous mode [ 978.271379][ T36] veth0_vlan: left promiscuous mode [ 979.210136][ T36] team0 (unregistering): Port device team_slave_1 removed [ 979.318592][ T36] team0 (unregistering): Port device team_slave_0 removed [ 979.648591][T23904] random: crng reseeded on system resumption [ 979.912622][T23864] bridge0: port 3(team0) entered blocking state [ 979.922034][T23864] bridge0: port 3(team0) entered disabled state [ 979.936827][T23864] team0: entered allmulticast mode [ 979.949075][T23864] team_slave_0: entered allmulticast mode [ 979.954875][T23864] team_slave_1: entered allmulticast mode [ 980.005730][T23864] team0: entered promiscuous mode [ 980.011216][T23864] team_slave_0: entered promiscuous mode [ 980.018265][T23864] team_slave_1: entered promiscuous mode [ 980.024935][T23864] bridge0: port 3(team0) entered blocking state [ 980.031352][T23864] bridge0: port 3(team0) entered forwarding state [ 980.154962][T23912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3549'. [ 980.178284][ T30] audit: type=1326 audit(6050468057.654:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23910 comm=6E6C696E650A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be6d8ebe9 code=0x0 [ 980.437019][T23919] FAULT_INJECTION: forcing a failure. [ 980.437019][T23919] name failslab, interval 1, probability 0, space 0, times 0 [ 980.473950][T23919] CPU: 0 UID: 0 PID: 23919 Comm: syz.2.3550 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 980.473996][T23919] Tainted: [U]=USER [ 980.474003][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.474013][T23919] Call Trace: [ 980.474020][T23919] [ 980.474027][T23919] dump_stack_lvl+0x16c/0x1f0 [ 980.474055][T23919] should_fail_ex+0x512/0x640 [ 980.474086][T23919] should_failslab+0xc2/0x120 [ 980.474110][T23919] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 980.474133][T23919] ? getname_flags.part.0+0x4c/0x550 [ 980.474162][T23919] getname_flags.part.0+0x4c/0x550 [ 980.474191][T23919] getname_flags+0x93/0xf0 [ 980.474210][T23919] do_sys_openat2+0xb8/0x1d0 [ 980.474237][T23919] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.474268][T23919] __x64_sys_openat+0x174/0x210 [ 980.474296][T23919] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.474328][T23919] do_syscall_64+0xcd/0x490 [ 980.474352][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.474371][T23919] RIP: 0033:0x7fdcf938ebe9 [ 980.474386][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.474404][T23919] RSP: 002b:00007fdcfa250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.474423][T23919] RAX: ffffffffffffffda RBX: 00007fdcf95b6090 RCX: 00007fdcf938ebe9 [ 980.474435][T23919] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 980.474446][T23919] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 980.474457][T23919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.474468][T23919] R13: 00007fdcf95b6128 R14: 00007fdcf95b6090 R15: 00007ffdafc31568 [ 980.474484][T23919] [ 980.731762][T23917] FAULT_INJECTION: forcing a failure. [ 980.731762][T23917] name failslab, interval 1, probability 0, space 0, times 0 [ 980.775956][T23917] CPU: 1 UID: 0 PID: 23917 Comm: syz.2.3550 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 980.776010][T23917] Tainted: [U]=USER [ 980.776021][T23917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.776049][T23917] Call Trace: [ 980.776059][T23917] [ 980.776072][T23917] dump_stack_lvl+0x16c/0x1f0 [ 980.776117][T23917] should_fail_ex+0x512/0x640 [ 980.776162][T23917] ? lsm_blob_alloc+0x68/0x90 [ 980.776207][T23917] should_failslab+0xc2/0x120 [ 980.776249][T23917] __kmalloc_noprof+0xd2/0x510 [ 980.776286][T23917] lsm_blob_alloc+0x68/0x90 [ 980.776333][T23917] security_prepare_creds+0x30/0x270 [ 980.776379][T23917] prepare_creds+0x56f/0x7d0 [ 980.776425][T23917] __sys_setresuid+0x46d/0x1160 [ 980.776463][T23917] do_syscall_64+0xcd/0x490 [ 980.776508][T23917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.776536][T23917] RIP: 0033:0x7fdcf938ebe9 [ 980.776561][T23917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.776591][T23917] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 980.776622][T23917] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 980.776644][T23917] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 980.776664][T23917] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 980.776684][T23917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.776703][T23917] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 980.776733][T23917] [ 981.423096][T23946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3556'. [ 981.986412][T23946] hsr_slave_0: left promiscuous mode [ 982.176497][T23946] hsr_slave_1: left promiscuous mode [ 982.766812][T23977] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 982.775809][T23977] FAULT_INJECTION: forcing a failure. [ 982.775809][T23977] name failslab, interval 1, probability 0, space 0, times 0 [ 982.841626][T23977] CPU: 1 UID: 0 PID: 23977 Comm: syz.7.3559 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 982.841679][T23977] Tainted: [U]=USER [ 982.841690][T23977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 982.841707][T23977] Call Trace: [ 982.841717][T23977] [ 982.841728][T23977] dump_stack_lvl+0x16c/0x1f0 [ 982.841769][T23977] should_fail_ex+0x512/0x640 [ 982.841812][T23977] should_failslab+0xc2/0x120 [ 982.841859][T23977] __kmalloc_cache_noprof+0x6a/0x3e0 [ 982.841899][T23977] ? netdev_create_hash+0x3c/0xc0 [ 982.841943][T23977] ? __pfx_netdev_init+0x10/0x10 [ 982.841984][T23977] netdev_create_hash+0x3c/0xc0 [ 982.842027][T23977] ? __pfx_netdev_init+0x10/0x10 [ 982.842067][T23977] netdev_init+0x70/0x230 [ 982.842106][T23977] ops_init+0x1df/0x5f0 [ 982.842151][T23977] setup_net+0x10f/0x380 [ 982.842187][T23977] ? lockdep_init_map_type+0x5c/0x280 [ 982.842228][T23977] ? __pfx_setup_net+0x10/0x10 [ 982.842267][T23977] ? debug_mutex_init+0x37/0x70 [ 982.842296][T23977] copy_net_ns+0x2a6/0x5f0 [ 982.842339][T23977] create_new_namespaces+0x3ea/0xa90 [ 982.842376][T23977] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 982.842412][T23977] ksys_unshare+0x45b/0xa40 [ 982.842460][T23977] ? __pfx_ksys_unshare+0x10/0x10 [ 982.842502][T23977] ? xfd_validate_state+0x61/0x180 [ 982.842550][T23977] __x64_sys_unshare+0x31/0x40 [ 982.842589][T23977] do_syscall_64+0xcd/0x490 [ 982.842628][T23977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.842658][T23977] RIP: 0033:0x7fd85398ebe9 [ 982.842681][T23977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.842711][T23977] RSP: 002b:00007fd8547d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 982.842740][T23977] RAX: ffffffffffffffda RBX: 00007fd853bb6090 RCX: 00007fd85398ebe9 [ 982.842761][T23977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 982.842779][T23977] RBP: 00007fd853a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 982.842796][T23977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.842812][T23977] R13: 00007fd853bb6128 R14: 00007fd853bb6090 R15: 00007ffd99d31008 [ 982.842838][T23977] [ 983.537950][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'. [ 983.906926][T24005] FAULT_INJECTION: forcing a failure. [ 983.906926][T24005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.936791][T24005] CPU: 1 UID: 0 PID: 24005 Comm: syz.2.3562 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 983.936850][T24005] Tainted: [U]=USER [ 983.936860][T24005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.936885][T24005] Call Trace: [ 983.936897][T24005] [ 983.936908][T24005] dump_stack_lvl+0x16c/0x1f0 [ 983.936952][T24005] should_fail_ex+0x512/0x640 [ 983.936995][T24005] strncpy_from_user+0x3b/0x2e0 [ 983.937035][T24005] getname_flags.part.0+0x8f/0x550 [ 983.937084][T24005] getname_flags+0x93/0xf0 [ 983.937126][T24005] do_sys_openat2+0xb8/0x1d0 [ 983.937173][T24005] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.937227][T24005] __x64_sys_openat+0x174/0x210 [ 983.937275][T24005] ? __pfx___x64_sys_openat+0x10/0x10 [ 983.937330][T24005] do_syscall_64+0xcd/0x490 [ 983.937372][T24005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.937403][T24005] RIP: 0033:0x7fdcf938ebe9 [ 983.937428][T24005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.937461][T24005] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 983.937494][T24005] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 983.937516][T24005] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 983.937537][T24005] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 983.937556][T24005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.937575][T24005] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 983.937604][T24005] [ 983.939676][T24005] FAULT_INJECTION: forcing a failure. [ 983.939676][T24005] name failslab, interval 1, probability 0, space 0, times 0 [ 984.126977][T24005] CPU: 0 UID: 0 PID: 24005 Comm: syz.2.3562 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 984.127035][T24005] Tainted: [U]=USER [ 984.127055][T24005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.127074][T24005] Call Trace: [ 984.127084][T24005] [ 984.127096][T24005] dump_stack_lvl+0x16c/0x1f0 [ 984.127142][T24005] should_fail_ex+0x512/0x640 [ 984.127192][T24005] should_failslab+0xc2/0x120 [ 984.127232][T24005] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 984.127278][T24005] ? alloc_uid+0x13d/0x4c0 [ 984.127319][T24005] alloc_uid+0x13d/0x4c0 [ 984.127357][T24005] ? __pfx_alloc_uid+0x10/0x10 [ 984.127395][T24005] ? security_prepare_creds+0xa7/0x270 [ 984.127443][T24005] __sys_setresuid+0x507/0x1160 [ 984.127480][T24005] do_syscall_64+0xcd/0x490 [ 984.127522][T24005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.127554][T24005] RIP: 0033:0x7fdcf938ebe9 [ 984.127579][T24005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.127608][T24005] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 984.127640][T24005] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 984.127662][T24005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 984.127681][T24005] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 984.127701][T24005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.127720][T24005] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 984.127749][T24005] [ 984.513749][T24004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 984.556806][T24004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 984.563082][T24004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 984.572189][T24004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 984.596732][T24004] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 985.946680][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 986.586677][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 986.592790][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 986.606644][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 986.627547][T24056] ALSA: mixer_oss: invalid OSS volume '' [ 986.762751][T24057] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 988.430847][T24084] FAULT_INJECTION: forcing a failure. [ 988.430847][T24084] name fail_futex, interval 1, probability 0, space 0, times 0 [ 988.474208][T24084] CPU: 1 UID: 0 PID: 24084 Comm: syz.5.3573 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 988.474243][T24084] Tainted: [U]=USER [ 988.474250][T24084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 988.474262][T24084] Call Trace: [ 988.474268][T24084] [ 988.474275][T24084] dump_stack_lvl+0x16c/0x1f0 [ 988.474304][T24084] should_fail_ex+0x512/0x640 [ 988.474333][T24084] get_futex_key+0x1d0/0x1560 [ 988.474357][T24084] ? __pfx_get_futex_key+0x10/0x10 [ 988.474378][T24084] ? nsim_dev_health_break_write+0x170/0x210 [ 988.474405][T24084] ? nsim_dev_health_break_write+0x187/0x210 [ 988.474431][T24084] futex_wake+0xea/0x530 [ 988.474456][T24084] ? rcu_is_watching+0x12/0xc0 [ 988.474475][T24084] ? ksys_write+0x12a/0x250 [ 988.474496][T24084] ? __pfx_futex_wake+0x10/0x10 [ 988.474529][T24084] ? lock_release+0x201/0x2f0 [ 988.474554][T24084] ? ksys_write+0x190/0x250 [ 988.474573][T24084] ? rcu_is_watching+0x12/0xc0 [ 988.474591][T24084] ? lock_release+0x201/0x2f0 [ 988.474615][T24084] do_futex+0x1e3/0x350 [ 988.474638][T24084] ? __pfx_do_futex+0x10/0x10 [ 988.474664][T24084] __x64_sys_futex+0x1e0/0x4c0 [ 988.474688][T24084] ? fput+0x9b/0xd0 [ 988.474719][T24084] ? __pfx___x64_sys_futex+0x10/0x10 [ 988.474742][T24084] ? ksys_write+0x1ac/0x250 [ 988.474762][T24084] ? __pfx_ksys_write+0x10/0x10 [ 988.474785][T24084] do_syscall_64+0xcd/0x490 [ 988.474810][T24084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.474830][T24084] RIP: 0033:0x7f3be6d8ebe9 [ 988.474845][T24084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.474864][T24084] RSP: 002b:00007f3be7b9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 988.474883][T24084] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa8 RCX: 00007f3be6d8ebe9 [ 988.474900][T24084] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3be6fb5fac [ 988.474914][T24084] RBP: 00007f3be6fb5fa0 R08: 00007f3be7b9e000 R09: 0000000000000000 [ 988.474925][T24084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 988.474936][T24084] R13: 00007f3be6fb6038 R14: 00007ffd47b848f0 R15: 00007ffd47b849d8 [ 988.474955][T24084] [ 989.016694][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 989.035093][T24084] FAULT_INJECTION: forcing a failure. [ 989.035093][T24084] name failslab, interval 1, probability 0, space 0, times 0 [ 989.115792][T24084] CPU: 1 UID: 0 PID: 24084 Comm: syz.5.3573 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 989.115828][T24084] Tainted: [U]=USER [ 989.115835][T24084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 989.115847][T24084] Call Trace: [ 989.115853][T24084] [ 989.115861][T24084] dump_stack_lvl+0x16c/0x1f0 [ 989.115889][T24084] should_fail_ex+0x512/0x640 [ 989.115917][T24084] should_failslab+0xc2/0x120 [ 989.115942][T24084] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 989.115965][T24084] ? alloc_uid+0x13d/0x4c0 [ 989.115989][T24084] alloc_uid+0x13d/0x4c0 [ 989.116013][T24084] ? __pfx_alloc_uid+0x10/0x10 [ 989.116044][T24084] ? security_prepare_creds+0xa7/0x270 [ 989.116077][T24084] __sys_setresuid+0x507/0x1160 [ 989.116099][T24084] do_syscall_64+0xcd/0x490 [ 989.116124][T24084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.116143][T24084] RIP: 0033:0x7f3be6d8ebe9 [ 989.116159][T24084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.116179][T24084] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 989.116197][T24084] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 989.116210][T24084] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 989.116221][T24084] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 989.116232][T24084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.116243][T24084] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 989.116258][T24084] [ 993.489094][ T30] audit: type=1326 audit(6050468070.964:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24177 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be6d8ebe9 code=0x0 [ 993.594959][T24166] FAULT_INJECTION: forcing a failure. [ 993.594959][T24166] name failslab, interval 1, probability 0, space 0, times 0 [ 993.634708][T24166] CPU: 0 UID: 0 PID: 24166 Comm: syz.6.3587 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 993.634743][T24166] Tainted: [U]=USER [ 993.634750][T24166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.634760][T24166] Call Trace: [ 993.634767][T24166] [ 993.634775][T24166] dump_stack_lvl+0x16c/0x1f0 [ 993.634803][T24166] should_fail_ex+0x512/0x640 [ 993.634830][T24166] should_failslab+0xc2/0x120 [ 993.634855][T24166] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 993.634877][T24166] ? apparmor_capable+0x114/0x1d0 [ 993.634900][T24166] ? prepare_creds+0x2c/0x7d0 [ 993.634928][T24166] prepare_creds+0x2c/0x7d0 [ 993.634955][T24166] __sys_setresuid+0x46d/0x1160 [ 993.634976][T24166] do_syscall_64+0xcd/0x490 [ 993.635000][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.635022][T24166] RIP: 0033:0x7fd85c18ebe9 [ 993.635044][T24166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.635073][T24166] RSP: 002b:00007fd85cf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 993.635102][T24166] RAX: ffffffffffffffda RBX: 00007fd85c3b5fa0 RCX: 00007fd85c18ebe9 [ 993.635119][T24166] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 993.635130][T24166] RBP: 00007fd85c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 993.635141][T24166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.635152][T24166] R13: 00007fd85c3b6038 R14: 00007fd85c3b5fa0 R15: 00007ffc152feb78 [ 993.635168][T24166] [ 994.759385][T24196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3594'. [ 994.809883][T24197] netlink: 346 bytes leftover after parsing attributes in process `syz.7.3595'. [ 994.949987][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'. [ 996.410583][T24238] FAULT_INJECTION: forcing a failure. [ 996.410583][T24238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.468467][T24238] CPU: 1 UID: 0 PID: 24238 Comm: syz.7.3602 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 996.468527][T24238] Tainted: [U]=USER [ 996.468538][T24238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 996.468558][T24238] Call Trace: [ 996.468569][T24238] [ 996.468582][T24238] dump_stack_lvl+0x16c/0x1f0 [ 996.468636][T24238] should_fail_ex+0x512/0x640 [ 996.468682][T24238] _copy_from_user+0x2e/0xd0 [ 996.468731][T24238] memdup_user_nul+0x6c/0x120 [ 996.468771][T24238] nsim_dev_health_break_write+0xbd/0x210 [ 996.468815][T24238] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 996.468857][T24238] ? rcu_is_watching+0x12/0xc0 [ 996.468891][T24238] full_proxy_write+0x131/0x1a0 [ 996.468939][T24238] ? __pfx_full_proxy_write+0x10/0x10 [ 996.468984][T24238] vfs_write+0x2a0/0x11d0 [ 996.469021][T24238] ? __pfx___mutex_lock+0x10/0x10 [ 996.469060][T24238] ? __pfx_vfs_write+0x10/0x10 [ 996.469094][T24238] ? __fget_files+0x204/0x3c0 [ 996.469125][T24238] ? rcu_is_watching+0x12/0xc0 [ 996.469158][T24238] ? __fget_files+0x20e/0x3c0 [ 996.469195][T24238] ksys_write+0x12a/0x250 [ 996.469229][T24238] ? __pfx_ksys_write+0x10/0x10 [ 996.469269][T24238] do_syscall_64+0xcd/0x490 [ 996.469310][T24238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.469343][T24238] RIP: 0033:0x7fd85398ebe9 [ 996.469367][T24238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.469397][T24238] RSP: 002b:00007fd8547fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 996.469433][T24238] RAX: ffffffffffffffda RBX: 00007fd853bb5fa0 RCX: 00007fd85398ebe9 [ 996.469453][T24238] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000007 [ 996.469471][T24238] RBP: 00007fd853a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 996.469490][T24238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.469507][T24238] R13: 00007fd853bb6038 R14: 00007fd853bb5fa0 R15: 00007ffd99d31008 [ 996.469533][T24238] [ 997.272758][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 997.353756][T24263] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 997.387871][T24263] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 998.581868][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.581988][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.083703][T24344] FAULT_INJECTION: forcing a failure. [ 1000.083703][T24344] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1000.126757][T24344] CPU: 1 UID: 0 PID: 24344 Comm: syz.5.3613 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1000.126814][T24344] Tainted: [U]=USER [ 1000.126825][T24344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1000.126844][T24344] Call Trace: [ 1000.126854][T24344] [ 1000.126866][T24344] dump_stack_lvl+0x16c/0x1f0 [ 1000.126909][T24344] should_fail_ex+0x512/0x640 [ 1000.126955][T24344] get_futex_key+0x1d0/0x1560 [ 1000.126994][T24344] ? __pfx_get_futex_key+0x10/0x10 [ 1000.127029][T24344] ? rcu_is_watching+0x12/0xc0 [ 1000.127059][T24344] ? lock_release+0x201/0x2f0 [ 1000.127102][T24344] futex_wake+0xea/0x530 [ 1000.127144][T24344] ? __pfx_futex_wake+0x10/0x10 [ 1000.127186][T24344] ? lock_release+0x201/0x2f0 [ 1000.127226][T24344] ? ksys_write+0x190/0x250 [ 1000.127261][T24344] ? rcu_is_watching+0x12/0xc0 [ 1000.127292][T24344] ? lock_release+0x201/0x2f0 [ 1000.127331][T24344] do_futex+0x1e3/0x350 [ 1000.127369][T24344] ? __pfx_do_futex+0x10/0x10 [ 1000.127407][T24344] ? cap_task_prctl+0x2af/0xa80 [ 1000.127442][T24344] __x64_sys_futex+0x1e0/0x4c0 [ 1000.127483][T24344] ? __pfx___x64_sys_futex+0x10/0x10 [ 1000.127524][T24344] ? __pfx___do_sys_prctl+0x10/0x10 [ 1000.127584][T24344] do_syscall_64+0xcd/0x490 [ 1000.127625][T24344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.127655][T24344] RIP: 0033:0x7f3be6d8ebe9 [ 1000.127679][T24344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.127708][T24344] RSP: 002b:00007f3be7b9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1000.127737][T24344] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa8 RCX: 00007f3be6d8ebe9 [ 1000.127757][T24344] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3be6fb5fac [ 1000.127776][T24344] RBP: 00007f3be6fb5fa0 R08: 00007f3be7b9e000 R09: 0000000000000000 [ 1000.127795][T24344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1000.127813][T24344] R13: 00007f3be6fb6038 R14: 00007ffd47b848f0 R15: 00007ffd47b849d8 [ 1000.127842][T24344] [ 1000.134887][T24344] FAULT_INJECTION: forcing a failure. [ 1000.134887][T24344] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.467642][T24344] CPU: 1 UID: 0 PID: 24344 Comm: syz.5.3613 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1000.467697][T24344] Tainted: [U]=USER [ 1000.467708][T24344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1000.467726][T24344] Call Trace: [ 1000.467737][T24344] [ 1000.467749][T24344] dump_stack_lvl+0x16c/0x1f0 [ 1000.467790][T24344] should_fail_ex+0x512/0x640 [ 1000.467832][T24344] should_failslab+0xc2/0x120 [ 1000.467879][T24344] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1000.467914][T24344] ? apparmor_capable+0x114/0x1d0 [ 1000.467947][T24344] ? prepare_creds+0x2c/0x7d0 [ 1000.467991][T24344] prepare_creds+0x2c/0x7d0 [ 1000.468033][T24344] __sys_setresuid+0x46d/0x1160 [ 1000.468070][T24344] do_syscall_64+0xcd/0x490 [ 1000.468109][T24344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.468138][T24344] RIP: 0033:0x7f3be6d8ebe9 [ 1000.468162][T24344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.468188][T24344] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1000.468217][T24344] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 1000.468236][T24344] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1000.468254][T24344] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1000.468271][T24344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.468289][T24344] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 1000.468316][T24344] [ 1002.831927][T24404] binder: 24403:24404 ioctl 5380 2000000000c0 returned -22 [ 1002.867698][T24404] sd 0:0:1:0: PR command failed: 1026 [ 1002.933966][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3618'. [ 1002.949747][T24404] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1002.979650][T24404] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1003.008712][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1003.018494][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1004.212736][T24374] Process accounting resumed [ 1004.367602][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3626'. [ 1004.575139][ T30] audit: type=1326 audit(6050468082.044:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85c18ebe9 code=0x0 [ 1005.388229][T24459] lo: entered allmulticast mode [ 1005.641583][T24453] lo: left allmulticast mode [ 1006.080692][T24474] FAULT_INJECTION: forcing a failure. [ 1006.080692][T24474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.103316][T24474] CPU: 1 UID: 0 PID: 24474 Comm: syz.5.3636 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1006.103380][T24474] Tainted: [U]=USER [ 1006.103390][T24474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.103408][T24474] Call Trace: [ 1006.103419][T24474] [ 1006.103430][T24474] dump_stack_lvl+0x16c/0x1f0 [ 1006.103474][T24474] should_fail_ex+0x512/0x640 [ 1006.103518][T24474] strncpy_from_user+0x3b/0x2e0 [ 1006.103557][T24474] getname_flags.part.0+0x8f/0x550 [ 1006.103607][T24474] getname_flags+0x93/0xf0 [ 1006.103640][T24474] do_sys_openat2+0xb8/0x1d0 [ 1006.103687][T24474] ? __pfx_do_sys_openat2+0x10/0x10 [ 1006.103739][T24474] __x64_sys_openat+0x174/0x210 [ 1006.103795][T24474] ? __pfx___x64_sys_openat+0x10/0x10 [ 1006.103853][T24474] do_syscall_64+0xcd/0x490 [ 1006.103889][T24474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.103919][T24474] RIP: 0033:0x7f3be6d8ebe9 [ 1006.103942][T24474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.103972][T24474] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1006.104001][T24474] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 1006.104020][T24474] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1006.104038][T24474] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.104056][T24474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.104073][T24474] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 1006.104101][T24474] [ 1006.268232][T24474] FAULT_INJECTION: forcing a failure. [ 1006.268232][T24474] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.495425][T24474] CPU: 0 UID: 0 PID: 24474 Comm: syz.5.3636 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1006.495459][T24474] Tainted: [U]=USER [ 1006.495466][T24474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.495477][T24474] Call Trace: [ 1006.495483][T24474] [ 1006.495491][T24474] dump_stack_lvl+0x16c/0x1f0 [ 1006.495518][T24474] should_fail_ex+0x512/0x640 [ 1006.495547][T24474] should_failslab+0xc2/0x120 [ 1006.495572][T24474] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1006.495594][T24474] ? alloc_uid+0x13d/0x4c0 [ 1006.495620][T24474] alloc_uid+0x13d/0x4c0 [ 1006.495642][T24474] ? __pfx_alloc_uid+0x10/0x10 [ 1006.495664][T24474] ? security_prepare_creds+0xa7/0x270 [ 1006.495693][T24474] __sys_setresuid+0x507/0x1160 [ 1006.495715][T24474] do_syscall_64+0xcd/0x490 [ 1006.495739][T24474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.495757][T24474] RIP: 0033:0x7f3be6d8ebe9 [ 1006.495772][T24474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.495800][T24474] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1006.495819][T24474] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 1006.495832][T24474] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1006.495843][T24474] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.495856][T24474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.495867][T24474] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 1006.495883][T24474] [ 1006.768692][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3637'. [ 1007.308946][T24492] FAULT_INJECTION: forcing a failure. [ 1007.308946][T24492] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.332071][T24492] CPU: 0 UID: 0 PID: 24492 Comm: syz.5.3646 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1007.332126][T24492] Tainted: [U]=USER [ 1007.332137][T24492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1007.332155][T24492] Call Trace: [ 1007.332165][T24492] [ 1007.332178][T24492] dump_stack_lvl+0x16c/0x1f0 [ 1007.332222][T24492] should_fail_ex+0x512/0x640 [ 1007.332268][T24492] should_failslab+0xc2/0x120 [ 1007.332310][T24492] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1007.332348][T24492] ? alloc_uid+0x13d/0x4c0 [ 1007.332390][T24492] alloc_uid+0x13d/0x4c0 [ 1007.332428][T24492] ? __pfx_alloc_uid+0x10/0x10 [ 1007.332466][T24492] ? security_prepare_creds+0xa7/0x270 [ 1007.332513][T24492] __sys_setresuid+0x507/0x1160 [ 1007.332550][T24492] do_syscall_64+0xcd/0x490 [ 1007.332592][T24492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.332623][T24492] RIP: 0033:0x7f3be6d8ebe9 [ 1007.332648][T24492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.332678][T24492] RSP: 002b:00007f3be7b9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1007.332710][T24492] RAX: ffffffffffffffda RBX: 00007f3be6fb5fa0 RCX: 00007f3be6d8ebe9 [ 1007.332732][T24492] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1007.332760][T24492] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1007.332780][T24492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.332798][T24492] R13: 00007f3be6fb6038 R14: 00007f3be6fb5fa0 R15: 00007ffd47b849d8 [ 1007.332827][T24492] [ 1007.736956][T24490] FAULT_INJECTION: forcing a failure. [ 1007.736956][T24490] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.749770][T24490] CPU: 0 UID: 0 PID: 24490 Comm: syz.6.3638 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1007.749824][T24490] Tainted: [U]=USER [ 1007.749834][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1007.749851][T24490] Call Trace: [ 1007.749862][T24490] [ 1007.749873][T24490] dump_stack_lvl+0x16c/0x1f0 [ 1007.749912][T24490] should_fail_ex+0x512/0x640 [ 1007.749955][T24490] should_failslab+0xc2/0x120 [ 1007.749991][T24490] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1007.750024][T24490] ? apparmor_capable+0x114/0x1d0 [ 1007.750052][T24490] ? prepare_creds+0x2c/0x7d0 [ 1007.750095][T24490] prepare_creds+0x2c/0x7d0 [ 1007.750137][T24490] __sys_setresuid+0x46d/0x1160 [ 1007.750173][T24490] do_syscall_64+0xcd/0x490 [ 1007.750213][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.750242][T24490] RIP: 0033:0x7fd85c18ebe9 [ 1007.750266][T24490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.750294][T24490] RSP: 002b:00007fd85cf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1007.750325][T24490] RAX: ffffffffffffffda RBX: 00007fd85c3b5fa0 RCX: 00007fd85c18ebe9 [ 1007.750344][T24490] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1007.750362][T24490] RBP: 00007fd85c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1007.750379][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.750397][T24490] R13: 00007fd85c3b6038 R14: 00007fd85c3b5fa0 R15: 00007ffc152feb78 [ 1007.750424][T24490] [ 1008.582123][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3640'. [ 1009.630204][T24532] FAULT_INJECTION: forcing a failure. [ 1009.630204][T24532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1009.735205][T24532] CPU: 1 UID: 0 PID: 24532 Comm: syz.2.3644 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1009.735264][T24532] Tainted: [U]=USER [ 1009.735275][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.735294][T24532] Call Trace: [ 1009.735304][T24532] [ 1009.735316][T24532] dump_stack_lvl+0x16c/0x1f0 [ 1009.735363][T24532] should_fail_ex+0x512/0x640 [ 1009.735408][T24532] should_fail_alloc_page+0xe7/0x130 [ 1009.735449][T24532] prepare_alloc_pages+0x3c2/0x610 [ 1009.735491][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.735525][T24532] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1009.735563][T24532] ? psi_group_change+0x55a/0xbe0 [ 1009.735604][T24532] ? enqueue_task+0x20e/0x4e0 [ 1009.735638][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.735669][T24532] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 1009.735767][T24532] ? __resched_curr+0x316/0x3b0 [ 1009.735813][T24532] ? css_rstat_updated+0x1c2/0x510 [ 1009.735846][T24532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1009.735885][T24532] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.735932][T24532] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1009.735982][T24532] ? do_raw_spin_unlock+0x172/0x230 [ 1009.736029][T24532] ? _raw_spin_unlock+0x28/0x50 [ 1009.736059][T24532] ? __dquot_alloc_space+0x520/0xe20 [ 1009.736097][T24532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1009.736140][T24532] ? policy_nodemask+0xea/0x4e0 [ 1009.736187][T24532] alloc_pages_mpol+0x1fb/0x550 [ 1009.736227][T24532] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1009.736267][T24532] ? __folio_batch_add_and_move+0x602/0xc90 [ 1009.736306][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.736335][T24532] ? lock_release+0x201/0x2f0 [ 1009.736374][T24532] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1009.736420][T24532] shmem_alloc_folio+0x135/0x160 [ 1009.736467][T24532] shmem_alloc_and_add_folio+0x499/0xc20 [ 1009.736501][T24532] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1009.736536][T24532] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1009.736574][T24532] shmem_get_folio_gfp+0x67f/0x1600 [ 1009.736613][T24532] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1009.736648][T24532] ? __pfx_timestamp_truncate+0x10/0x10 [ 1009.736692][T24532] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1009.736742][T24532] shmem_fault+0x1fe/0xa30 [ 1009.736775][T24532] ? current_time+0x11d/0x1a0 [ 1009.736809][T24532] ? __pfx_shmem_fault+0x10/0x10 [ 1009.736841][T24532] ? __up_read+0x1f8/0x750 [ 1009.736881][T24532] ? __pfx___up_read+0x10/0x10 [ 1009.736921][T24532] ? fault_dirty_shared_page+0x573/0x6c0 [ 1009.736962][T24532] ? inode_to_bdi+0x9e/0x160 [ 1009.736996][T24532] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1009.737044][T24532] ? __pfx_filemap_map_pages+0x10/0x10 [ 1009.737079][T24532] __do_fault+0x10a/0x490 [ 1009.737113][T24532] ? lock_acquire+0x2cd/0x350 [ 1009.737150][T24532] ? __pfx_filemap_map_pages+0x10/0x10 [ 1009.737182][T24532] do_pte_missing+0x1a6/0x3ba0 [ 1009.737211][T24532] ? __handle_mm_fault+0x14fd/0x2a50 [ 1009.737238][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.737268][T24532] ? lock_release+0x201/0x2f0 [ 1009.737308][T24532] __handle_mm_fault+0x152a/0x2a50 [ 1009.737339][T24532] ? mt_find+0x3ef/0xa30 [ 1009.737379][T24532] ? __pfx___handle_mm_fault+0x10/0x10 [ 1009.737408][T24532] ? __pfx_mt_find+0x10/0x10 [ 1009.737456][T24532] ? find_vma+0xbf/0x140 [ 1009.737495][T24532] ? __pfx_find_vma+0x10/0x10 [ 1009.737533][T24532] handle_mm_fault+0x589/0xd10 [ 1009.737564][T24532] ? __bpf_trace_exceptions+0x1/0x40 [ 1009.737607][T24532] do_user_addr_fault+0x7a6/0x1370 [ 1009.737653][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.737696][T24532] exc_page_fault+0x5c/0xb0 [ 1009.737733][T24532] asm_exc_page_fault+0x26/0x30 [ 1009.737764][T24532] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1009.737798][T24532] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1009.737828][T24532] RSP: 0018:ffffc9000486fbc0 EFLAGS: 00050206 [ 1009.737854][T24532] RAX: 0000000000000001 RBX: 0000000000004000 RCX: 0000000000002000 [ 1009.737874][T24532] RDX: 0000000000000000 RSI: ffff8880931e2000 RDI: 0000000000012000 [ 1009.737894][T24532] RBP: 0000000000010000 R08: 0000000000000000 R09: ffffed101263c7ff [ 1009.737913][T24532] R10: ffff8880931e3fff R11: 0000000000000000 R12: ffff8880931e0000 [ 1009.737933][T24532] R13: 0000000000014000 R14: 00007ffffffff000 R15: 0000000000000000 [ 1009.737962][T24532] _copy_to_user+0xbb/0xd0 [ 1009.737991][T24532] snd_pcm_oss_read2+0x294/0x410 [ 1009.738022][T24532] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1009.738048][T24532] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1009.738082][T24532] ? snd_pcm_oss_prepare+0x11e/0x220 [ 1009.738126][T24532] snd_pcm_oss_read+0x5d3/0x760 [ 1009.738157][T24532] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1009.738186][T24532] vfs_read+0x1e1/0xcf0 [ 1009.738218][T24532] ? __might_fault+0x13b/0x190 [ 1009.738249][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.738279][T24532] ? __pfx_vfs_read+0x10/0x10 [ 1009.738309][T24532] ? __fget_files+0x204/0x3c0 [ 1009.738340][T24532] ? rcu_is_watching+0x12/0xc0 [ 1009.738370][T24532] ? lock_release+0x201/0x2f0 [ 1009.738410][T24532] ? __fget_files+0x20e/0x3c0 [ 1009.738446][T24532] ksys_read+0x12a/0x250 [ 1009.738479][T24532] ? __pfx_ksys_read+0x10/0x10 [ 1009.738516][T24532] do_syscall_64+0xcd/0x490 [ 1009.738553][T24532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.738583][T24532] RIP: 0033:0x7fdcf938ebe9 [ 1009.738606][T24532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.738634][T24532] RSP: 002b:00007fdcfa250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1009.738664][T24532] RAX: ffffffffffffffda RBX: 00007fdcf95b6090 RCX: 00007fdcf938ebe9 [ 1009.738695][T24532] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 000000000000000a [ 1009.738714][T24532] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1009.738733][T24532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.738752][T24532] R13: 00007fdcf95b6128 R14: 00007fdcf95b6090 R15: 00007ffdafc31568 [ 1009.738781][T24532] [ 1011.208119][T24553] FAULT_INJECTION: forcing a failure. [ 1011.208119][T24553] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.227042][T24553] CPU: 0 UID: 0 PID: 24553 Comm: syz.2.3649 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1011.227079][T24553] Tainted: [U]=USER [ 1011.227086][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.227097][T24553] Call Trace: [ 1011.227104][T24553] [ 1011.227111][T24553] dump_stack_lvl+0x16c/0x1f0 [ 1011.227147][T24553] should_fail_ex+0x512/0x640 [ 1011.227175][T24553] should_failslab+0xc2/0x120 [ 1011.227200][T24553] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1011.227230][T24553] ? getname_flags.part.0+0x4c/0x550 [ 1011.227260][T24553] getname_flags.part.0+0x4c/0x550 [ 1011.227289][T24553] getname_flags+0x93/0xf0 [ 1011.227308][T24553] do_sys_openat2+0xb8/0x1d0 [ 1011.227335][T24553] ? __pfx_do_sys_openat2+0x10/0x10 [ 1011.227366][T24553] __x64_sys_openat+0x174/0x210 [ 1011.227393][T24553] ? __pfx___x64_sys_openat+0x10/0x10 [ 1011.227425][T24553] do_syscall_64+0xcd/0x490 [ 1011.227461][T24553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.227481][T24553] RIP: 0033:0x7fdcf938ebe9 [ 1011.227497][T24553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.227516][T24553] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1011.227536][T24553] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 1011.227549][T24553] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1011.227560][T24553] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1011.227572][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.227584][T24553] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 1011.227600][T24553] [ 1011.231106][T24553] FAULT_INJECTION: forcing a failure. [ 1011.231106][T24553] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.466759][T24553] CPU: 1 UID: 0 PID: 24553 Comm: syz.2.3649 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1011.466816][T24553] Tainted: [U]=USER [ 1011.466827][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.466846][T24553] Call Trace: [ 1011.466855][T24553] [ 1011.466866][T24553] dump_stack_lvl+0x16c/0x1f0 [ 1011.466908][T24553] should_fail_ex+0x512/0x640 [ 1011.466953][T24553] should_failslab+0xc2/0x120 [ 1011.466993][T24553] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1011.467025][T24553] ? apparmor_capable+0x114/0x1d0 [ 1011.467056][T24553] ? prepare_creds+0x2c/0x7d0 [ 1011.467097][T24553] prepare_creds+0x2c/0x7d0 [ 1011.467139][T24553] __sys_setresuid+0x46d/0x1160 [ 1011.467176][T24553] do_syscall_64+0xcd/0x490 [ 1011.467217][T24553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.467249][T24553] RIP: 0033:0x7fdcf938ebe9 [ 1011.467274][T24553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.467304][T24553] RSP: 002b:00007fdcfa271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1011.467337][T24553] RAX: ffffffffffffffda RBX: 00007fdcf95b5fa0 RCX: 00007fdcf938ebe9 [ 1011.467359][T24553] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1011.467377][T24553] RBP: 00007fdcf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1011.467395][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.467412][T24553] R13: 00007fdcf95b6038 R14: 00007fdcf95b5fa0 R15: 00007ffdafc31568 [ 1011.467440][T24553] [ 1011.884920][T24556] FAULT_INJECTION: forcing a failure. [ 1011.884920][T24556] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.970180][T24556] CPU: 0 UID: 0 PID: 24556 Comm: syz.7.3650 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1011.970236][T24556] Tainted: [U]=USER [ 1011.970248][T24556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.970265][T24556] Call Trace: [ 1011.970275][T24556] [ 1011.970286][T24556] dump_stack_lvl+0x16c/0x1f0 [ 1011.970329][T24556] should_fail_ex+0x512/0x640 [ 1011.970373][T24556] should_failslab+0xc2/0x120 [ 1011.970413][T24556] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1011.970447][T24556] ? apparmor_capable+0x114/0x1d0 [ 1011.970487][T24556] ? prepare_creds+0x2c/0x7d0 [ 1011.970532][T24556] prepare_creds+0x2c/0x7d0 [ 1011.970574][T24556] __sys_setresuid+0x46d/0x1160 [ 1011.970610][T24556] do_syscall_64+0xcd/0x490 [ 1011.970648][T24556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.970679][T24556] RIP: 0033:0x7fd85398ebe9 [ 1011.970703][T24556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.970731][T24556] RSP: 002b:00007fd8547fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 1011.970761][T24556] RAX: ffffffffffffffda RBX: 00007fd853bb5fa0 RCX: 00007fd85398ebe9 [ 1011.970781][T24556] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1011.970799][T24556] RBP: 00007fd853a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1011.970818][T24556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.970837][T24556] R13: 00007fd853bb6038 R14: 00007fd853bb5fa0 R15: 00007ffd99d31008 [ 1011.970865][T24556] [ 1012.265963][T24565] can: request_module (can-proto-0) failed. [ 1013.596834][T24600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1013.635437][T24600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.667830][T24600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.725748][T24605] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1013.831788][T24605] netlink: 'syz.6.3657': attribute type 1 has an invalid length. [ 1013.922785][T24611] random: crng reseeded on system resumption [ 1016.741351][T24670] ERROR: Out of memory at tomoyo_memory_ok. [ 1017.234976][T24681] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1017.280314][T24685] ================================================================== [ 1017.288433][T24685] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1017.296190][T24685] Read of size 8 at addr ffff88802a14dc18 by task syz.5.3671/24685 [ 1017.304096][T24685] [ 1017.306426][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.5.3671 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1017.306456][T24685] Tainted: [U]=USER [ 1017.306463][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1017.306475][T24685] Call Trace: [ 1017.306482][T24685] [ 1017.306491][T24685] dump_stack_lvl+0x116/0x1f0 [ 1017.306529][T24685] print_report+0xcd/0x630 [ 1017.306566][T24685] ? __virt_addr_valid+0x81/0x610 [ 1017.306592][T24685] ? __phys_addr+0xe8/0x180 [ 1017.306614][T24685] ? dvb_device_open+0x36a/0x3b0 [ 1017.306640][T24685] kasan_report+0xe0/0x110 [ 1017.306664][T24685] ? dvb_device_open+0x36a/0x3b0 [ 1017.306698][T24685] ? __pfx_dvb_device_open+0x10/0x10 [ 1017.306723][T24685] dvb_device_open+0x36a/0x3b0 [ 1017.306748][T24685] ? __pfx_dvb_device_open+0x10/0x10 [ 1017.306774][T24685] chrdev_open+0x234/0x6a0 [ 1017.306798][T24685] ? __pfx_apparmor_file_open+0x10/0x10 [ 1017.306819][T24685] ? __pfx_chrdev_open+0x10/0x10 [ 1017.306842][T24685] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1017.306865][T24685] do_dentry_open+0x982/0x1530 [ 1017.306888][T24685] ? __pfx_chrdev_open+0x10/0x10 [ 1017.306913][T24685] vfs_open+0x82/0x3f0 [ 1017.306942][T24685] path_openat+0x1de4/0x2cb0 [ 1017.306966][T24685] ? __pfx_path_openat+0x10/0x10 [ 1017.306990][T24685] do_filp_open+0x20b/0x470 [ 1017.307011][T24685] ? __pfx_do_filp_open+0x10/0x10 [ 1017.307038][T24685] ? alloc_fd+0x471/0x7d0 [ 1017.307059][T24685] do_sys_openat2+0x11b/0x1d0 [ 1017.307086][T24685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.307114][T24685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.307145][T24685] __x64_sys_openat+0x174/0x210 [ 1017.307173][T24685] ? __pfx___x64_sys_openat+0x10/0x10 [ 1017.307206][T24685] do_syscall_64+0xcd/0x490 [ 1017.307232][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.307251][T24685] RIP: 0033:0x7f3be6d8ebe9 [ 1017.307266][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.307285][T24685] RSP: 002b:00007f3be7b3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1017.307304][T24685] RAX: ffffffffffffffda RBX: 00007f3be6fb6270 RCX: 00007f3be6d8ebe9 [ 1017.307316][T24685] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1017.307328][T24685] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1017.307339][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.307351][T24685] R13: 00007f3be6fb6308 R14: 00007f3be6fb6270 R15: 00007ffd47b849d8 [ 1017.307367][T24685] [ 1017.307373][T24685] [ 1017.562712][T24685] Allocated by task 1: [ 1017.566949][T24685] kasan_save_stack+0x33/0x60 [ 1017.571732][T24685] kasan_save_track+0x14/0x30 [ 1017.576469][T24685] __kasan_kmalloc+0xaa/0xb0 [ 1017.581107][T24685] dvb_register_device+0x1e4/0x2370 [ 1017.586417][T24685] dvb_register_frontend+0x5a6/0x880 [ 1017.591713][T24685] vidtv_bridge_probe+0x459/0xa90 [ 1017.597096][T24685] platform_probe+0x106/0x1d0 [ 1017.601770][T24685] really_probe+0x23e/0xa90 [ 1017.606286][T24685] __driver_probe_device+0x1de/0x440 [ 1017.611577][T24685] driver_probe_device+0x4c/0x1b0 [ 1017.616638][T24685] __driver_attach+0x283/0x580 [ 1017.621494][T24685] bus_for_each_dev+0x13b/0x1d0 [ 1017.626344][T24685] bus_add_driver+0x2e9/0x690 [ 1017.631040][T24685] driver_register+0x15c/0x4b0 [ 1017.635812][T24685] vidtv_bridge_init+0x45/0x80 [ 1017.640594][T24685] do_one_initcall+0x120/0x6e0 [ 1017.645364][T24685] kernel_init_freeable+0x5c2/0x910 [ 1017.650588][T24685] kernel_init+0x1c/0x2b0 [ 1017.654956][T24685] ret_from_fork+0x5d4/0x6f0 [ 1017.659565][T24685] ret_from_fork_asm+0x1a/0x30 [ 1017.664347][T24685] [ 1017.666672][T24685] Freed by task 24681: [ 1017.670774][T24685] kasan_save_stack+0x33/0x60 [ 1017.675567][T24685] kasan_save_track+0x14/0x30 [ 1017.680252][T24685] kasan_save_free_info+0x3b/0x60 [ 1017.685300][T24685] __kasan_slab_free+0x60/0x70 [ 1017.690065][T24685] kfree+0x2b4/0x4d0 [ 1017.694061][T24685] dvb_device_put.part.0+0x60/0x90 [ 1017.699188][T24685] dvb_device_open+0x2a4/0x3b0 [ 1017.703980][T24685] chrdev_open+0x234/0x6a0 [ 1017.708487][T24685] do_dentry_open+0x982/0x1530 [ 1017.713257][T24685] vfs_open+0x82/0x3f0 [ 1017.717331][T24685] path_openat+0x1de4/0x2cb0 [ 1017.721920][T24685] do_filp_open+0x20b/0x470 [ 1017.726507][T24685] do_sys_openat2+0x11b/0x1d0 [ 1017.731213][T24685] __x64_sys_openat+0x174/0x210 [ 1017.736179][T24685] do_syscall_64+0xcd/0x490 [ 1017.740684][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.746587][T24685] [ 1017.749078][T24685] The buggy address belongs to the object at ffff88802a14dc00 [ 1017.749078][T24685] which belongs to the cache kmalloc-256 of size 256 [ 1017.763240][T24685] The buggy address is located 24 bytes inside of [ 1017.763240][T24685] freed 256-byte region [ffff88802a14dc00, ffff88802a14dd00) [ 1017.777059][T24685] [ 1017.779414][T24685] The buggy address belongs to the physical page: [ 1017.785833][T24685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a14c [ 1017.795123][T24685] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1017.803804][T24685] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1017.811379][T24685] page_type: f5(slab) [ 1017.815374][T24685] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1017.824066][T24685] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1017.832662][T24685] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 1017.841439][T24685] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1017.850147][T24685] head: 00fff00000000001 ffffea0000a85301 00000000ffffffff 00000000ffffffff [ 1017.858921][T24685] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1017.867607][T24685] page dumped because: kasan: bad access detected [ 1017.874210][T24685] page_owner tracks the page as allocated [ 1017.879941][T24685] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23052912125, free_ts 0 [ 1017.899659][T24685] post_alloc_hook+0x1c0/0x230 [ 1017.904447][T24685] get_page_from_freelist+0x132b/0x38e0 [ 1017.909996][T24685] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1017.915899][T24685] alloc_pages_mpol+0x1fb/0x550 [ 1017.921192][T24685] new_slab+0x247/0x330 [ 1017.925359][T24685] ___slab_alloc+0xcf2/0x1740 [ 1017.930034][T24685] __slab_alloc.constprop.0+0x56/0xb0 [ 1017.935458][T24685] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1017.940823][T24685] bus_add_driver+0x92/0x690 [ 1017.945412][T24685] driver_register+0x15c/0x4b0 [ 1017.950281][T24685] usb_register_driver+0x216/0x4d0 [ 1017.955410][T24685] do_one_initcall+0x120/0x6e0 [ 1017.960202][T24685] kernel_init_freeable+0x5c2/0x910 [ 1017.965406][T24685] kernel_init+0x1c/0x2b0 [ 1017.969769][T24685] ret_from_fork+0x5d4/0x6f0 [ 1017.974365][T24685] ret_from_fork_asm+0x1a/0x30 [ 1017.979135][T24685] page_owner free stack trace missing [ 1017.984491][T24685] [ 1017.986803][T24685] Memory state around the buggy address: [ 1017.992513][T24685] ffff88802a14db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1018.000581][T24685] ffff88802a14db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1018.008729][T24685] >ffff88802a14dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1018.016783][T24685] ^ [ 1018.021712][T24685] ffff88802a14dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1018.029767][T24685] ffff88802a14dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1018.037996][T24685] ================================================================== [ 1018.048063][T24685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1018.055313][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.5.3671 Tainted: G U 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 1018.069092][T24685] Tainted: [U]=USER [ 1018.072932][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1018.083209][T24685] Call Trace: [ 1018.086715][T24685] [ 1018.089731][T24685] dump_stack_lvl+0x3d/0x1f0 [ 1018.094380][T24685] vpanic+0x6e8/0x7a0 [ 1018.098444][T24685] ? __pfx_vpanic+0x10/0x10 [ 1018.103525][T24685] ? __pfx_vprintk_emit+0x10/0x10 [ 1018.108691][T24685] ? dvb_device_open+0x36a/0x3b0 [ 1018.113690][T24685] panic+0xca/0xd0 [ 1018.117494][T24685] ? __pfx_panic+0x10/0x10 [ 1018.121973][T24685] ? dvb_device_open+0x36a/0x3b0 [ 1018.126980][T24685] ? preempt_schedule_common+0x44/0xc0 [ 1018.132502][T24685] ? preempt_schedule_thunk+0x16/0x30 [ 1018.137941][T24685] check_panic_on_warn+0xab/0xb0 [ 1018.142969][T24685] end_report+0x107/0x170 [ 1018.147351][T24685] kasan_report+0xee/0x110 [ 1018.151826][T24685] ? dvb_device_open+0x36a/0x3b0 [ 1018.156826][T24685] ? __pfx_dvb_device_open+0x10/0x10 [ 1018.162171][T24685] dvb_device_open+0x36a/0x3b0 [ 1018.166992][T24685] ? __pfx_dvb_device_open+0x10/0x10 [ 1018.172336][T24685] chrdev_open+0x234/0x6a0 [ 1018.176808][T24685] ? __pfx_apparmor_file_open+0x10/0x10 [ 1018.182396][T24685] ? __pfx_chrdev_open+0x10/0x10 [ 1018.187398][T24685] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1018.193930][T24685] do_dentry_open+0x982/0x1530 [ 1018.198720][T24685] ? __pfx_chrdev_open+0x10/0x10 [ 1018.203685][T24685] vfs_open+0x82/0x3f0 [ 1018.207781][T24685] path_openat+0x1de4/0x2cb0 [ 1018.212398][T24685] ? __pfx_path_openat+0x10/0x10 [ 1018.217481][T24685] do_filp_open+0x20b/0x470 [ 1018.222001][T24685] ? __pfx_do_filp_open+0x10/0x10 [ 1018.227052][T24685] ? alloc_fd+0x471/0x7d0 [ 1018.231401][T24685] do_sys_openat2+0x11b/0x1d0 [ 1018.236101][T24685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1018.241414][T24685] ? __pfx_do_sys_openat2+0x10/0x10 [ 1018.246648][T24685] __x64_sys_openat+0x174/0x210 [ 1018.251557][T24685] ? __pfx___x64_sys_openat+0x10/0x10 [ 1018.257150][T24685] do_syscall_64+0xcd/0x490 [ 1018.261787][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.267707][T24685] RIP: 0033:0x7f3be6d8ebe9 [ 1018.272132][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.291753][T24685] RSP: 002b:00007f3be7b3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1018.300402][T24685] RAX: ffffffffffffffda RBX: 00007f3be6fb6270 RCX: 00007f3be6d8ebe9 [ 1018.308453][T24685] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1018.316435][T24685] RBP: 00007f3be6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1018.324503][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.332487][T24685] R13: 00007f3be6fb6308 R14: 00007f3be6fb6270 R15: 00007ffd47b849d8 [ 1018.340475][T24685] [ 1018.343804][T24685] Kernel Offset: disabled [ 1018.348214][T24685] Rebooting in 86400 seconds..