last executing test programs: 12m10.678439035s ago: executing program 0 (id=70): shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x6, 0x6, 0xffff, @_sigpoll={0x8000}}}, 0x0, &(0x7f0000000140)={{0xfff, 0x8000}, {0x4, 0xfffffffffffffffc}, 0xf61, 0x4, 0x3, 0x6, 0x5, 0x2, 0x6, 0xa57, 0x5, 0x2f4, 0x4000008, 0x3, 0xfffffffffffffffb, 0x4}) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4000009f, 0x400, 0x2}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x83b5a3da03b67f5b}, 0x404c040) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto_KVM_CREATE_VM(r4, 0x4138ae84, 0x0) 12m9.306456538s ago: executing program 0 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xa6ff, 0x4000000}, 0x0) 12m9.069240157s ago: executing program 0 (id=75): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) fcntl$auto(0x3, 0xc, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0xffffffffffffffff, 0x7, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x81, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x8) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x80040, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = socket(0x1d, 0x2, 0x7) r3 = getsockopt$auto(r2, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/fail-nth\x00', 0x4d2800, 0x0) pwrite64$auto(0xc8, &(0x7f0000000700)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81J*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x1b\xc1\x96\x0e\x91\x0f\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x1f\x00\xbe\xc0\xf4\xf5\xe2\xe8\x9e)\xea2\xbb`\xb2\x0f[\x1c6\xc8&\bw\xd7\x13=\"\xe6\x13\xb4\xc3\x04\xfe\x85\x01\x10b=\xed\xa5\x04\xbf\x86\xac\xc2\xd3\xa5g\xac\x1a\xd9*\xef\xd2\xeb\xb8sVt&M\xc2=SXu\x9aN\xa1\xf6\a\x1a\xe3\xe6{t2\xe2\xdc\xcf\x95\"\xd8\xbe\xfe\xdc0N\x7f\xb2D\xc5\b__f\xc7\x04F\x8d#\xf54\xfc\x92\x9f2\'\xbe\\\xa1\xb5\xa2\xf9\x12', 0xffffffffffffff5a, 0x13) sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fedb00f7030000000500010000000000370001002f7379732f6d6f64756c652f6e66532f706172616d65746572732f6e66735f69646d61705f63616368655f74696d656f75740000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mmap$auto(0x0, 0x20009, 0x1000000000dd, 0xeb1, 0xffffffffffffffff, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000850) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@batch={0x9, 0x4, 0x2da, 0x7, 0x3, r0, 0xe02, 0x2}, 0x10) 12m8.607404893s ago: executing program 0 (id=77): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x1, 0x9}, 0x7}, 0x3, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101880, 0xbf) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x4b44, 0x10000000000402) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x6b) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) 12m7.839469452s ago: executing program 0 (id=80): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0x60, 0x401}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001880), 0x10b040, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf2503000000080004000800000006000700f083880c22a3c989", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 12m6.371233141s ago: executing program 0 (id=82): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop10\x00', 0x100, 0x0) mmap$auto_def_blk_fops_fs(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x4, 0x20010, r0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x80002, 0x0) read$auto(r2, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8000}, 0x1, 0x0, 0xfffffffffffffffc, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)={0x1, 0x11, {0x98e, 0x7f, 0x101, 0x4, 0x6, 0x1, 0x2, 0xe00000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0xfffffffb) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x2, 0x804) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40383d0c, 0x0) 12m3.366587758s ago: executing program 1 (id=89): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/devices\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0xe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) fanotify_mark$auto(0x0, 0x31, 0x9, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 12m3.062514562s ago: executing program 1 (id=90): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x44) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (fail_nth: 30) 12m2.319604208s ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) alarm$auto(0x2) mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r4, 0x0, 0x100000001) r5 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r5, 0x65, 0x7, 0x0, 0x5) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x640, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) write$auto(0x3, 0x0, 0xfffffffffffffff7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x261c2, 0x84) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x80) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) alarm$auto(0x80000000) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12m1.162678542s ago: executing program 1 (id=93): mmap$auto(0x0, 0x400008, 0xdf, 0x800000009b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r5, 0x0, 0x7, 0x2}, {r0, 0x0, 0x8, 0xd589}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x38, 0x3, 0xebe, 0xfffffffffffffffa, 0x7ffffffffffffffd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000080)=""/64, 0x40) 11m59.779789033s ago: executing program 1 (id=96): bind$auto(0xffffffffffffffff, 0x0, 0x6b) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r0, 0x0, 0x4000002) mmap$auto(0x0, 0x3020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x0) write$auto(r1, 0x0, 0xfffffde9) write$auto(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) getsockopt$auto_SO_NOFCS(r2, 0x9, 0x2b, &(0x7f0000000080)='/proc/self/oom_adj\x00', &(0x7f00000000c0)=0x4) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r2, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0xa, 0x1, 0x100) socket(0x1, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x3, 0x4, 0x7, 0xb) madvise$auto(0xffffffffffffffff, 0xffffffffffff0005, 0x19) setfsgid$auto(0xee01) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) pidfd_open$auto(0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) 11m56.779703593s ago: executing program 1 (id=104): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe85, 0x9, 0xfffffffffffffc01, 0x4000000, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x9, 0x2, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000300)='/de\xef\xe7audio1\x00\x06\xa8\xa1\xafX\xd1)\xdbc\x9eJX\x11\xf8D\x8fR/;f@\xdd=\x18\xecs\x97B}p\xaaF\x8cr\xce \x91\xce\x1f\xe4xy0\xb9\x96\x9a\xd6\xf5\x12\xbc\x12^\x17\xe7\xa0#j\xa6A\x9a\xc5S\xe4\xb6\x96\xc1\xee\x11\xfb\xceS\xac\xb6O-\xc7\xfb[\v;\xe0\x87\xb1\xa5\xee\x12\x10\b\x8b\xba\xc0\xa2Ld\xef.\xc4\xa7\x1a\xb9;\xf3#BFr\xbf/[\xe8\x18\xd9E\xb6\x90t\xd1\x85\xc0\b\xe0\xe2\xe4\xdd\xcf\xe9\a.\\L\xa0j}\xf3\xd1Q\xe0q\xb3\xa2\xb9S{\xae\x92eC\x85&\xa1\xa2\x15\x99\xfc7\xb9\x90L\xc2\x17\xae\xf9\xc99{6\xbaF|\x8cAC\xd6k_Z\x7f.\xc9\xa1', 0x1000a3d9) sendfile$auto(r2, r2, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = socket(0x0, 0x3, 0x3c) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0xf8}}, 0x10000810) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x800, 0x9, 0x7) unshare$auto(0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x100000001, 0x8d, 0x5, 0x9b72, r1, 0x68000) futex_wake$auto(0x0, 0x8, 0x7, 0x2) 11m50.87163877s ago: executing program 32 (id=82): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop10\x00', 0x100, 0x0) mmap$auto_def_blk_fops_fs(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x4, 0x20010, r0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x80002, 0x0) read$auto(r2, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8000}, 0x1, 0x0, 0xfffffffffffffffc, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)={0x1, 0x11, {0x98e, 0x7f, 0x101, 0x4, 0x6, 0x1, 0x2, 0xe00000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0xfffffffb) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x2, 0x804) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40383d0c, 0x0) 11m41.563684482s ago: executing program 33 (id=104): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe85, 0x9, 0xfffffffffffffc01, 0x4000000, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x9, 0x2, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000300)='/de\xef\xe7audio1\x00\x06\xa8\xa1\xafX\xd1)\xdbc\x9eJX\x11\xf8D\x8fR/;f@\xdd=\x18\xecs\x97B}p\xaaF\x8cr\xce \x91\xce\x1f\xe4xy0\xb9\x96\x9a\xd6\xf5\x12\xbc\x12^\x17\xe7\xa0#j\xa6A\x9a\xc5S\xe4\xb6\x96\xc1\xee\x11\xfb\xceS\xac\xb6O-\xc7\xfb[\v;\xe0\x87\xb1\xa5\xee\x12\x10\b\x8b\xba\xc0\xa2Ld\xef.\xc4\xa7\x1a\xb9;\xf3#BFr\xbf/[\xe8\x18\xd9E\xb6\x90t\xd1\x85\xc0\b\xe0\xe2\xe4\xdd\xcf\xe9\a.\\L\xa0j}\xf3\xd1Q\xe0q\xb3\xa2\xb9S{\xae\x92eC\x85&\xa1\xa2\x15\x99\xfc7\xb9\x90L\xc2\x17\xae\xf9\xc99{6\xbaF|\x8cAC\xd6k_Z\x7f.\xc9\xa1', 0x1000a3d9) sendfile$auto(r2, r2, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = socket(0x0, 0x3, 0x3c) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0xf8}}, 0x10000810) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x800, 0x9, 0x7) unshare$auto(0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x100000001, 0x8d, 0x5, 0x9b72, r1, 0x68000) futex_wake$auto(0x0, 0x8, 0x7, 0x2) 14.24714301s ago: executing program 2 (id=2312): syz_clone3(&(0x7f0000000080)={0x349000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0xfffe}, @BATADV_ATTR_VERSION={0x5, 0x1, '\x00'}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="77030ef659b9"}]}, 0x4c}}, 0x20000040) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$auto(r1, 0x29, 0xb, 0x0, 0xca6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x1f, 0x0, 0x3d) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x23a8c70effffffe) 13.165853555s ago: executing program 2 (id=2318): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = gettid() syz_clone3(&(0x7f0000000300)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) clone$auto(0x6, 0x8, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x200, 0x7) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000000)={0xc6, 0x5, 0x0, 0x6, 0x2, 0x0}) prctl$auto(0x8, 0xe000000, r1, 0x8000000000000000, 0x1c) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) 12.332039228s ago: executing program 2 (id=2319): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x1000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 11.420955505s ago: executing program 2 (id=2323): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) r2 = getpid() mlockall$auto(0x5) io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000001280)="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", 0x897f) rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) landlock_create_ruleset$auto(0x0, 0x0, 0xb5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/async_depth\x00', 0x40800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/4096, 0x1000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001245}, 0xa, 0x40000000000000) ioctl$auto(0xffffffffffffffff, 0x400454c9, r0) 8.961090576s ago: executing program 2 (id=2328): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) 8.639136453s ago: executing program 2 (id=2329): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x400000040200}, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) modify_ldt$auto(0x1, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) mmap$auto(0x0, 0x2020009, 0xdc, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x21, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x2, 0xc, 0xfffffffffffffff7, 0x19, 0x401, 0x7fff) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) rt_sigaction$auto(0x4, 0x0, 0x0, 0x8) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) 6.920945765s ago: executing program 5 (id=2336): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x0, 0x5ad2, 0x808) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f00000001c0)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x100, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) mmap$auto(0x83, 0x0, 0x6945, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x18000003f000000, 0x400000004) open(0x0, 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r4, 0x0, 0x2f) 6.6180838s ago: executing program 4 (id=2337): socket(0x2, 0x80000, 0x3) setsockopt$auto(0x3, 0x6, 0x1f, 0x0, 0x0) mmap$auto(0x0, 0xda32, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x5, &(0x7f0000000080)={[0x20080009, 0x28, 0x9, 0x5, 0xc, 0x3, 0x7ff, 0x9ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x8, 0xd]}, 0x0, 0x0, 0x0) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x82ca, 0xe, 0x0) socket(0xa, 0x2, 0x84) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000) r1 = socket(0x11, 0x80003, 0x0) io_uring_setup$auto(0x9e5, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8) r2 = memfd_create$auto(0x0, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_BEACON(r2, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30100000", @ANYRES16, @ANYBLOB="02002dbd7000fcdbdf250e000000c7002100df16e84b26776e0b6c5d8449b7eab7512b08fa9160bf69a6422e7cdf4ea0039eee89b47e421ffd85d74e76d054d8bdbdf9bfd9bdc8c672740a4368e44c6f2292e822eae35982c4c852e9a79cd0dc7a1e5e622e16078fd7f3bb022e18f3e1179a456623300f4d1284c39d824e81f53d5ccc2a20391c284b92e3c5db711053508efe18c6064578e56bfb6a6d9d2519306931c6d3d4ec5c814492e88b5839f41f39651a5e2699799a8b7aeea0a54a5472c37567d94488c5a51e899653ce3301545d4643240005001c000000000036001f003c78dca01081d2ad6f60355b8822fc860595da61b4669386fead11f21af3368afc6681b37575938440ef8c4fceb87fac5342000013117580201040800400c2000400d3007d963e5c218416fcc13a2e9ceb5d1f2b23cdf113f7b1294e267bbc9d3313f1cbbb8cbb595a2fa7507edd539854fb33394358365758d9ca0a4e2352f2872cf3fda049f10544ed25f17fa2e5362b3fc05691f08e7086998b66d50924fb8bb8bb5f5a3c0ee1e7e41ee8e8601a5c4105a93d9acaea5cfa8a1535bb3e41004e8e74891443310816d18a14fff8a1fcfc76bc513c8216de27ed94ffa7b6a97856bcf9f477f331ea58cffe4a336665cd83f223545b7758e5285beff87854c6128a3fdfe87541281f6121e5e232f65071e3b881795da3d988916494bad97119b9c4b137c1887f6b0cc93d90a80b57aabeb0025af4c1982a56bb4c47049552ec7f158546badcb28a3b0e1e9aaa168716e48efb08b7432bd025c5f9b053cf279eb2e4d78d9437a7075b8bca1c0c661ad21002ba94b4abd174077fd19eb2bddb619c503eb384644c53c7b81743714d7c9f3141283092eb2afe704863eaaac8cd18b68a03fd7e5051c94c384d0bff7118720847fbda4d477c27f23a6aa9e73ad208b62d1e7fc79cfdf901648a6208f0be6d5af32fa60ecf7b66621763e40fd79d7bef7ef1b3181e66a250fa4f3927e26c921b89a90c87f28fba3730d1b469459dd403f29d228d86224a2cd184dc338a61e01e4b7e5e194d909f4eb8dabc715d2097f5bb382a44eec47c1d11570ab2446fc4e7edc5069407cca417945cb138dc2a2e3568198a5526fd1006f7ccce19b205b322da9ea74341e247649cc2852d31143427d6a8ee3f413f9251d93b6f44d810162b02b2900d418aea1bb6be1916d28d623980d395c0ab48cc66f97a156aa08fe93aa136e2a100d80490b7345e89450250351f5f35ad2829871ff45e60abe4f76a0413aa2e204b4164c1fe619c327b2eb6a51b38c795da03d58122e1ba27c48d6b5cb16157c220d35551da2e94b02c42b1f586e72c4758c181ab4f3c5463b1bdd3a72f3e484509add629e985b60e3006681dd3440866c30170a11c4eb99dca5ffa16089bdbbc58707e45b7e7b99872cc612eadbf08725d7f98b52042efbb69fe1c936b778967c604a2a30aa556b169ede81ba4e6ba7d8839b7fce692a6e49f42f7b2278c6ee5cc7ee23861e6c4466d78173e61ba861d856901a98582a5b724818618e057214be21ac824b66ef648b5f1c9dbdd3a74198dac97b3584667256e7c4c133bdbc85659d69f88b2417eabbd8c0effbfe8f1bf538a1313af51df75115ce6de30281678d9f94f4d19a4b22fd283a94edca13e66c8529def8c1a6d024c4e3eb95fb0ed72674f0a5553c0947803262abb9a65e5bb0f739a0d681e9fe22ccb74f31eb67918725631c90e39e71d31ca735daa2dbc9896d3f90e76f5852827a20faf19ae9250e3ebf3ab0cc536f46fd3162734876378ba5171e2cf19efa957e027555e54ced8edc3e2b0180451c659e5ee9a851f90a8cd69559df343cc381efb0872c4b16dad0d4271e7ce9bfcec827345e9504a19f40716abb4bd3e1a4ea74e9763bcbfd4d4ad24b8ba8441f302d8bb7642500b9c10105e38d97bc0213ab87ad9b6a1e3cf7be531c42b10097f44509db1b42cc530ef5469dd9654815a31b171afe99d662c32a19befafd5347f108a4583bd871e6758b86b4b298988e88b40e9afac016cae7ff0b26d53aea5313f8faf87bf8df57099bb34b503cf682b3507ed60ccf27d06e69414045242c7a8e5e47d0193525364a242f97525276fe4cb149bce8608d94e08d9fb94f87012270156dd482ae8e1446d53b96c158dc7edfa82da2fc7898c4a844b0fa24c1164c91bec08d5ad3c8a9b26996e6e31ed6d6803842c8c1ed9cd659955a4923e23aa52fc3f8619dcb6cd1831ae7ee48d368738c64b7d894d852b077165855c629b77d78c1b097c4422c532315446dad8fd73fd5d00f54fe2bada726214b302437ed1728a28a0957d9d5b6157b49d2eaabdb7ee1e864750d9419babfc6d36a23e7d18c7c8a9c8af10a32483b19ca34474317aeca391105e6415a96a4973808f02987fd19e7c09c58ce675853b2c8766c69a15cb9fbbdcc2c39a554cc96f5bbc68444e14e8c216ec20b5e33c5a70a827b4a3213cb941cb5c31bc68cc3d9c92468fcada9eb74ebee9ab28473f165a76eb2112dd15734f9596a8dad654abbc5d0ebfd6223ff021ac96ca2c6e4859f8e61c0b6bb046f6e761fcf364b6a30d7cca387d6bd48b99cdf88a364b9666fc6d4fb20933a8d2799f4e36338a491efb1ca22af0526c7ba89961a5bed5e9a4c1c3d7682b7b8a202e6d425eda98f09d20f536f6f3dd4f3a5642ef90d5024b8240cb6950f6864b0a918631125a2e0a096f9a2584fc45baa37191cb31a0235a8fb31319ea5f7d97676f16402b6cd077f831d6545dc8b6257dc55f0852ae6fb1b97aa8ab5a0bc3b9ba891856c06670b5f06b6df1b377d0195a1b3d6d90ef89cb44a0334df111e99f7fc55a71ff8986e115def56057fce82232c6ffc588e44f23c084a9e7bccf18b365dea1fd6aea17d6c730c9c8ca99c7431ca423d754239d4b7010df7261de28015746de817988483355dc6dfd385fd313962b73e8f54e47c858e507f2f060ec4f9f9f349c7e9310999f3ff70247221b5baa2957e7791f14ceb771b588b8b7b74067fd83c9292e4a1f6eefd06524799044a60d3742f09b653417368f6367e4604552be83ce0d6aa367e4d8e45ea874a0d9484a189f0ec927463bb7ee7fb3bb847e80efee1b19b7cc2bccf5396f7c85d75424827893854e3102a94c77b02c5a3cb4827ebaaeea0d88e114ce2daaeed9dc3544e32aadd35dc2d20da5089b9b712fbe38e0638e47d28a34c7b2d6d58c6f2ab168298e0981a3ae0a93b1813ad48977d5c6c3d75d299d8db96c330538ea544fe951e1e8668a515f9c12f4b8308e65af92e3d880e59aef79ea15e06b9cdaa62c3cea195dcaa22e6b848dc58494b1dc800fccd7f6d01ab1b61306f4784d81ba3a8b07ee5e1d47a7da4fb0f9b6e2235a0031cffabfee9054f6697a74cfc3488ed9f73188aa1993569d937967d5ed718f2ad63a8e6e3336545108429400c7e1d2b8ecdf20b60d055800096352279767dc1d7352e7984fd299134542575a186f0628ff261a5194d9eea170ec8fcca19bf710f78391c5d76d1d3fce239e836ea30aa9760bc46d4a84ec580a22e0387ea17524e7c6ca153d080268cb42a7cb8d98e12bd330c9ac952e6a2c1ae7dbcbc135090792207f69ba76511ba63b6906df038baef49a25cc2a0b994f463415df6044ad0d0a736938a9cdfa06500880e56ba85f7f09ae214611d423bbbd8a482d5daec446ac02458a5c54291081638325dc919affb2d6cc9d7eb469d47798afdc341d996d9f6aa8ecc9085f7da1807ac2817cea9d1dd5f2d114112d9f66795ae630a17090313e0f0a23a1db89f270e7650e4c44a2c002ae7763817d1daaee4986f027ce22588c13bc35a116f29f495b546fba8337c79caacf126ee767cbb7f7e012cf274690fda9e37bc2240e105fbdf5f01b2b3cb605bad4b572d3525604b202ea520450fc358e937bb527543de2063ee0f2414e6d31de6a23073049a38330277e481c5facc21ee5c64dfa96f90f214b48460c5e2b149912ee08a754c4f3b31a3339403f307254d4b637937b641462bfcd3920e252ed9e170b078fcd14f6101b81dcd71db7ea12af8de35f588370611eb9ccd875aed5904e0b000233a333e4befa66096fc576ae29c71c412341ab9de8c6886c82be81520f761a68fb909538aa51e62c7c81f656d76c038b17b446e4f7c0d7cead7a4a9bd9ac510c6017b8f57c16eacd546e98f87e91153891239f669707ab62592a46ea3104dc7b66a299ff3d77c9bab406c25c9860666551e23f87bb28a0a91f7718a7c277d160b7887735aa667f4502774573ee0b0ac4db94ea057ae3bd0af02f1cec9c99d3b530b78f0a9da6bc0fb5a155ca2d3dbc1b768cfbdd489685711b86c614b3beb5ee6a8288dcc2e63f5604e1bdda70800c487577627621be3de3b64bf5e09f58a38f9e9d444ce061425e08a91c02dc1f0e6f5b0fbbc29db46208aa4e8097a7ddf8107a3f5e3c2254c2d36a962d3f4bc45d1ba96f0d39c3c28615fe0aea42d835606c8757568afd2c739676f628b9fcdc7121b803107ba352b065352ba23c68ac8fbe48a2fd7442a5841d7aafbfd5f82ed6618ec39bded10eb1e9802b3a357732fbeaaf29d37c9ab4a11802c3d232b43a635a1de61c5c80ba6167d88af89370aa8d05cc", @ANYRES32, @ANYBLOB="04004a8004001e806e070879f917de0a1eddc6769339753c6a798410b6870948a4e3dcd24030ffa059b40aa8ae7b7d1ea7b1edaae71093b77e6add0099cb480a7b239485de0566cdb1d07e96392c03f11c9634ef765005139836eb2dc1bcad0859d48a0a0714ea5a1e275fa50216b5c6a7b8ad44a28c0bef11c7d221f4a04908ae7eb9a9762b66d7df101ed5cbfa914add07d2cc10a8f901b7796be31eab871649ebfa9a2cc8333a784c8f1de3a804226513509a0e7864a986bca7e1f5b5b35328befb6990e011210018002f70726f632f7468726561642d73656c662f636c6561725f72656673000000000c00c380040036800400ec8000"], 0x1230}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/clear_refs\x00', 0x101200, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 6.273028962s ago: executing program 3 (id=2338): set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) 5.163206779s ago: executing program 4 (id=2339): statmount$auto(0x0, 0x0, 0x1fa, 0xd) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8001, 0x2, 0x7fa, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da03, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) r4 = pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0xf, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) splice$auto(0x4, 0x0, r4, 0x0, 0x80000001, 0x9) ioctl$auto_MON_IOCQ_URB_LEN(r4, 0x9201, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="49080000000100000022843a2d008200", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) sysfs$auto(0x2, 0x0, 0x0) r8 = fsopen$auto(0x0, 0x1) fsconfig$auto(r8, 0x8, 0x0, 0x0, 0x0) 5.162969739s ago: executing program 3 (id=2340): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x0, 0x5ad2, 0x808) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f00000001c0)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x100, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) mmap$auto(0x83, 0x0, 0x6945, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x18000003f000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r4, 0x0, 0x2f) 3.846980239s ago: executing program 3 (id=2341): socket(0x2, 0x80000, 0x3) setsockopt$auto(0x3, 0x6, 0x1f, 0x0, 0x0) mmap$auto(0x0, 0xda32, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0x5, &(0x7f0000000080)={[0x20080009, 0x28, 0x9, 0x5, 0xc, 0x3, 0x7ff, 0x9ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x8, 0xd]}, 0x0, 0x0, 0x0) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x82ca, 0xe, 0x0) socket(0xa, 0x2, 0x84) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000) r1 = socket(0x11, 0x80003, 0x0) io_uring_setup$auto(0x9e5, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8) r2 = memfd_create$auto(0x0, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_BEACON(r2, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30100000", @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04004a8004001e806e070879f917de0a1eddc6769339753c6a798410b6870948a4e3dcd24030ffa059b40aa8ae7b7d1ea7b1edaae71093b77e6add0099cb480a7b239485de0566cdb1d07e96392c03f11c9634ef765005139836eb2dc1bcad0859d48a0a0714ea5a1e275fa50216b5c6a7b8ad44a28c0bef11c7d221f4a04908ae7eb9a9762b66d7df101ed5cbfa914add07d2cc10a8f901b7796be31eab871649ebfa9a2cc8333a784c8f1de3a804226513509a0e7864a986bca7e1f5b5b35328befb6990e011210018002f70726f632f7468726561642d73656c662f636c6561725f72656673000000000c00c380040036800400ec8000"], 0x1230}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/clear_refs\x00', 0x101200, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 3.145421597s ago: executing program 5 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251a0000001c00e70042f1c19f0f4f20eb00000000000000000000000000000000040034000600f80be681d8dcb20175440114010104000008006b00050000000400d800080042005c8c000008009f00622a000004"], 0x64}, 0x1, 0x0, 0x0, 0xc050}, 0x4044800) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) 2.742854657s ago: executing program 4 (id=2343): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000900)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 2.733478737s ago: executing program 5 (id=2344): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000900)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/name\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000940)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 2.161923781s ago: executing program 3 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x68, &(0x7f0000000000)='!/*\x19(*\'\x00', 0xe) setsockopt$auto(0x4, 0x88, 0x68, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'N\xcb\xea\x8f\xfb/,SKS'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x200048c4) 2.124225263s ago: executing program 4 (id=2346): socket(0x2, 0x3, 0x1) (async) r0 = socket(0x2, 0x3, 0x1) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x785202f68de70351, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) 2.026360841s ago: executing program 5 (id=2347): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x200200, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000180)) msync$auto(0x8000000000, 0x2, 0x7) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae68, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r3, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 1.853522452s ago: executing program 3 (id=2348): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6, 0x4, 0xfffffff7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xee00, 0xffffffffffffffff, 0x8, 0x1c089d56, 0x8, 0x5}, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0xf0, 0x6, 0x8001, 0x100, 0xffffffffffffff81, 0x7fff, 0x4, 0x401, 0x3, @raw=0x7, @raw=0xff}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000002840)=ANY=[@ANYBLOB="f8100000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf250800000005000200000000000800010001800000c21028800c1021801326e0ef8a25e1c49cfb8dd4f8f7af962c0cb9fa2e75f4f1e922de6f1ae3a572c1a97071706ee212c07c7594d7899690d7c850b903ebc277a5764cec5b5c800a1e6427711a3e33ff5c8419e5405ca1e126daa0e8380335167bf54588ac9e325550d8feeaa09feddeb6ad98771330b0e5c3eead1bbd7a3deacfc343a7ad4f8c7b68426177a9fe930e396f8bec043071297c02a54c1ffa135414e928b0837e96297e9a8d1dc848cc34d31962ca2315486b29a8d7500dd551e6757e7add5727240d9af83b5cb633b200e651e2f94f12fe578320b308e55268cf90c16d6ad24c96f663a0027c1fb75dd91b1b3ff43ff81114c4d409d7e4f0573655f7354a5a6305c4986b601c8a16f3a88db5f39b6eaf9c1f7b98d162b2e4a2016d82d7a60dcb51660c1e2f80dc3d8ac65854293e2df687806806c358911bae65df330429bd55616bac29ad59c48864733455d5ebb46e4085b8fae2cf6dc83e2da50b7f237bf71361e8289badb0fae6484b15f82b0a9f9b9ce468a191374f6929bc673787c086c2eba91d2c7682a9d92046ba23da576a2c9ebac5d37b84e14ea170eafbab20fb0d51424c8c52cc32fa6e1f779aebf9cedb1cbebd0eb13705957420909abdd3054f1ef11a119f3c1c452a5339ca7f054eb6dfa9b0afed9f2ac18ad923da2aad38c083fd42fb82c239be08a2485fd3391adabc4c3662c1987a4a6c2f35a4d57f82a9899b1671a0b55e93ad82461cb30a93898c3842a3d2ecb9a8e4283a2362dab7d445b86052cc93f5c4eac7d0c9e61f6db50ae5155c3b46c41a7d23534d1562d36029caadee5919fcc49922256cf308888826d82f45d9a651401ba327dc3bf902c053ac98ea6df44e8ddb2933df771a2b8e406da223c922a4ebd06a2985130eb0125c4655da120019612aa632fb0f1157169ab4f9d72f6245217e9693a67e37d7744a03e137eebab7e0ab2689cf3c07c1dc332ce335c45502487663650046892c242cf4bca7ae5125e44b21b808aeee84ea130d9f35ce19790715ed97e177cf91ca1f210b2759eb3238fbfa640fde5b1f623d85a38e1b7dd68dd2f1caf9e351d0435856d9532b0a64af1d869100c8eac7edd33173667f760645082cfc2374da2fa12385749e59069eba8f360a335774d90e58666c69371efbc454ab343a9c33b66418aae7927cf3a39e359963478c0d73e825fed385d34a703319915870c6570d4d2091394cd0ef99facdd197c24aeb95213beb7dfb9c529650fb5d00daec426b919a5e9d23ff07ad6b44249467b30996307a620aae6b2eaf7e415daa5bb86472c3c3c361539bb8c7b955d36c7f5bec775c2d45e6b1a4b6f8e586b6a5ac4b341a23c55cc790e5bf3c4b938c5c900ae624c80995964edffeba4ea1b25940c934b17093313916b878f29a4ecf107138e1fb3085e4f586ac3a3ad4a8e5f50f2fda6970a48a12f55b4d7844ad4a8cb5f2b22dec0216658b8b309fd9cfae204ed4cd39e6dfed4213a29bbc309842f67c28c3900e4bd334613e84c82893b21035e1ab355c0b9a61ef2b71dd04669d0b0874b60d72b04f0da92bf63d10cd6b3e38c60fb7fd843b6f743a31dd1eb560ae0b7a5ae09a8563350b3889987e2208f4f99d02bfdbda9b3d498e911681080000000000000077b0bbd969c4212a8f9771a9ca866abffa285164c767f249a166c99d6441ed999cf3093bf9edf8e35c7db0a8785eacca08c62f53a5f344d40eba951cc676c25a90677f91b38aaa0cb5bd116f9fbaf8810f5e6fa94ef860e5f4d3ae6851214b4b248d086978fe997131e1768fa810564633661be341641be5fa31b43217f1b69d9c87bfd74a5e96efa8124ad23e1ed65ae1bebe14dcb014ebfb88b6ce3d58b84df37e23112d1ca3d11e2f236e4cba8eb03056fb8e4d70bcc322f7c1ef90000d72e1af297c6c02feb0f63096ee5a44fa65c98aa338b48fa65a965e6b06228dfc8a2ef7a2eeea4077e64ab28422e5aafc041ff9018f12d74328b42d3c666e76101742470475688a566b2c4c06c319b0bf11205f4238cc0c6256c4f2dffeb63e6e8fbdcead24ae379b0cdaf9d690f5718e0e2ad53fd92b93e7c6b4f340fa930e80e8b586c2cca53c433f320e94825e31085cb92e8b7f9860f6ee304925c47935eb72e4190cdad8fe77a1439f2e67cdc4e50e0f86e0a4213fb7ef449d61d27b1f6c848b1917c09a3a49a19c9fdd006631147cf96318a49686a92a7b04a354b863e7dfef770c9d1297ffb59d54c88003eec94c7e2c94dc8a20b7f1a12fa15b4f48ea139425dda7c8884565a81807f1c9f971b2fcf4a484cae446abfa82e689a08831fc7b2e152e6953697508b6ad3fd35c73dc78710b458aa6710f28412eace676b947d7545b3f13daffd6dac5621d12a3d21cb1a43730e6458ebc0838547b7926236f602d096d2e091c2fc1022ba50e6d3bf3cb2d42e8568b55506c880551ebd50b137160e17763c4110acea8edddfd52ea5b84f3d0515ebbbd5b0b59f48edd56a67f0d7407f443b98b8586a2f3ef4be3f5e59b357dd342ca4718080d3c92a8ba5d810118c2da911923146df445d93027ea754bbb6dbdb4de0e575b32bca377298ca5e478f4cb2f40935ee78c73420fb1e4f63d5f215b95737cf4884cbd1aa14e3aedda86950dda2491e8d317be496ba68e1e79b0091e0be46d40965d4b1ee380960d3abbcbeee260d3efbd445425a777e212ba3943f2df7e3e64fdbf85eb988ca9675a9c8238612d788f3f4caf7b677426e99ed2e2a8b0d09e22ce9cb5f31e2016b4cbda20a333e5f584ed9f27afc0748cecfa0366bdfdd563b38e2c084d330bf86aea6d1c2c28cd72a002f0abebfce7d92b0c73f0f44ea6ecc6370a0f5b530e692ca2886838dbb426eaa7121c0e3f9d68c7df50add301a60f507765a1a92dba73b3b449592b0bddd72212de9d310436c9885640f2ee6d79dfd708adefd9e7b00fa0fc0d8712f9f81e4065f0b51bd57f8645d36ff88d2c252fc3a80c51ed78fa23c810493af9590c14bf93b7b38ade865d4974bb2bb74c9113d68534e93969d82a1a389171a35854850adf745eb250f8fd9071526061758b8b4ff361990d888f56d289c7d75589de34dcb9c64089d961d82893ef780d58181f19bfe1a7ffc35287bb0f7b7aab30f636463bd68e7eec8fd312a8705feb887a90f006d428c837f170081b1031d011664a6c6a3c6cdcaaa7e770dbf6b3a6d39add9ae1319d9161b52eb17f68b204ce4e7dc78b992822fe252a1bd0dab94f7e6a712f23fc8e9635620cc8f5e8bedbdc1dd6d152a20baf1669ad3fe0f631b0b7612e44aa1730880710493ae938b855b27f83ae7ff58aec2bd20b9393cd5ee5ceb7532a995a7f93727cff93badb633c46b7abb6669bfc9dd06de0bffd8d1d7cc3a0241ccccf4a5b453c085e623695bcd070a681cacb0e1a61544e75d5a54f268167abe13c9b18d5dbdd9de109661e90a208ea73db67a3a8be6d859431aa226cc806d2bd2976e0e1d7134fb2af29fc5231ea01f2317d2b13a55270016c189a858f9e36cca386f471ff839d0dce735e424c5c694e345bf9d03f19032a415e02104e50cb482cef270469540e410c5e2e14d44c2a1de691ac0505889ecc84621163d46c714c64408d474214daf6f6f17ded3473ee5ecf4aab4e0ac14f07cb5ca5bbb140d164fe5bf03fba0fd398acfc225a7d2901303555022c70e03b56add92c07fc9f45bab98f50defa95feae1cfc053a9af5a2fb3cb669be30da43dee367ae64e25607231c07452a574420940857b9285a9bc237fb6a014e920ec55e9f54240235b047ae2ebaa5f6cb71f44b835cb7491ea0a811d2f2b6ed556122715001f34ab5d2cc93802d551ba2e23595dd6ba37b78ddc66574dc00bf68345dc36ddae049e445c087271bb794ecd06ca893debbf3d915a9164101384569fc130e5f2fd5d4cdd7ab5dafcd69825f95ec8df119b48cef832d840f6c790166417ca231846b872df465e9fe8e9070578c44ad48fe0d41590ab3ac22f2bf79d71527826655dc0667c564f433f712e2407ac96b17fd2cb722fbad3ba16a389be7a27fae8e5fa3f6f45ac4e362d3e764e29e91bbbe60ddfb557a67d154e1b14f0425b0cf88d64c84a40b24c5f7cb4d9e203da239c6a1438b82b8285ac628b75c930583018a3a07708a88df6d4f2cf3095fdc48ae9757aad781b95fc7a3b9a7d0c8d7058718e242850172ca426c5185296a54f4dd4cb33d3a026189322f7cca258983a23323fbe8671b9df99335bf3845fc7093bffa0297b1b98ac68a53353518e83b46414de2043d5b85f6e6b25ad7142207de1c757ebf78dcb84a87c5537527efe4291d3813857d93c14056faef4e5015b5f42bcc2ed79c712ee7976629a236c2c88eb1c5e2839ce090d757331763bffd7422f6f6c5972962d01398502cc851fc43a50bca1a0e7b07ee44d92bc86fa1f0f6e48c0dbd7478421e77ab750fd8eced806b161dcfc4b168c7c6cb12e129f364de1ca6c006c380f8936af30fa319575f70446d956c5df4cb531d26b6b667726b679d30fead95849a8bb914c3515963e99b32f687c35ea777c6731856f497a266c68521841e1ddc7ba36d06f8d50fb503ad33d845fb1820900a84a53a74a7226aaa18ab8bdc244302ded5f5fe370dca54c1cf32141f05cd620139f445f82b0189dd87ca9e052b22dd0397c9d869472c7545782e1e69c8754ba94bcab41a6f180a257a0789db8ffe5a5927b533fbafb68572786206ad77bce132b60eb21dbe8f072e70218f81d65db28aa619596c5ccdbc10838225cb9965000e2dc366b9ae27e7e8d197247ea6fdfe34725345a4c9d5e36c9915107844a26ca8077539067f3079322eb3142b111dbc1b73e9bdd25b00098b6082fc9d0d2a455c879deb22865ad229db5b6bc12380f0798fbf91ee524e14eb162b90a1a38adf5f6f1ce7aab63b027b56f15764beb421de98c8fa07439cc717960ef8d0a2c1e79f6965d2457330f3a5e7fa7988869ad9b9644acdf2d03a27edaba2e5924daecce24b2421f1406da69c6f6689bff78686c1c8dcaeecc9f3d88f659face08b2c94a745041a5d92b2816a22c5e15ba3cbd7d4db7a477f40f89cac589d037243ab9b54ec5c746b41ac27183273659d5f3146a7bd0944e836a7ca4e70be0393be31e3a970587330807fd49a2df800e544761e4b95f316dce19e0c110609abaafc39bf3e8b6d4393f5de8ad8986543e814b6d1533f6e9fdc3d42f807e3f49597c8f2ae9472a700219158742c81564894c66ffb59f4d8c9b473839d7835a5757a3c2b6e3552ba8701904245f87723e9051ae6a8570ae42bc096a4bb6d9174c11b16267be8aaaaaa23fba87ae4bd5615bc519a5451937909eb9dd3a037137c67d77d52eef7df1b0135643ca2c41da9507b17e83a85f70e767a552908d993f72ae8666e4dfada1ed1468e2fba5eb1e9becabc06d002ad3dd92a139560b54267c1fa7b34d55b7a16efeea1aaa3b457e47a27b54689714aea938236956df64a47926a6ac1327f9c02016fe9c08451180ec42fb69b347b7248c1bb5df5c44dc84b62c95b8f206a164a0d85f5ebc387188fe43aa85793e6f3be69f34a7a51033a9e13bba4f6e88762f18c5d6b4471692972756cf57a7c54adcc135dee4e69f8afa722e2fac77e291c5b9178db5b6b6f0f59241c773a5fe188985f51d674afde0e889b2da7868eb0cc44ebabf010d6ea21a59fd339d342efd2677c05240533db67baf322e796f6dcee7f9b8f4570fd7c937e3d8a576ecb7db6710a53847927b8f0ad4b080042009847bfd1eb77550a107ad414e068d04653e089ebfb97", @ANYRES32=r0, @ANYBLOB="281c002880040067800800da00050000000400488008001000", @ANYRES32=0x0, @ANYBLOB="5170b0e479dace1f6c2028ede818b9deb63d67c5e767b597d2890e5e9931b532af4fba92e2f0ebb4b8330f12e3e8322109f879b5c5a31e383e729b96c9729edbd9b365da8ecd9f4fd071c637d38c05720f1870f8906cf922bd5c3b04a782660afbe0f63ab2706b2120fb3e4dc317936e9a834bcc56a67d6dfbcb8db5f8a8b88faf10071fe40be632fdf7b7c5d587bc6cf83eeb5d190000050029000000000005000f0000000000"], 0x10f8}, 0x1, 0x0, 0x0, 0x8050}, 0x8c1) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x7, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0xf, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyt0\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(0x3, 0x0, 0x80) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x80, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:04.0/net/eth0/gro_flush_timeout\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x26f8, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x1) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=@raw_tracepoint={0x29, r3, 0x0, 0x8}, 0x0) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0xf, 0x2, 0x0) 100.095981ms ago: executing program 5 (id=2352): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x8, 0x2, 0x63, 0xce, 0x7f, 0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffefff) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) connect$auto(0x3, 0x0, 0x18) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 3 (id=2353): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0xa00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r1, 0x0, 0x100000001) write$auto(0x3, 0x0, 0xfffffffffffffff7) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x261c2, 0x84) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x80) (fail_nth: 2) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) kernel console output (not intermixed with test programs): process `syz.3.1446'. [ 595.795399][T13139] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[13139] [ 596.880067][T13156] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[13156] [ 598.065195][T13172] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1458'. [ 598.499784][T13187] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[13187] [ 599.956490][T13199] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 914 with max blocks 18 with error 117 [ 599.972527][T13199] EXT4-fs (sda1): This should not happen!! Data will be lost [ 599.972527][T13199] [ 600.024309][T13208] CIFS mount error: No usable UNC path provided in device string! [ 600.024309][T13208] [ 600.066640][T13208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 601.187201][T13223] can: request_module (can-proto-3) failed. [ 601.707941][T13232] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1471'. [ 601.725981][T13226] CIFS mount error: No usable UNC path provided in device string! [ 601.725981][T13226] [ 601.736193][T13226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 601.899797][T13237] FAULT_INJECTION: forcing a failure. [ 601.899797][T13237] name failslab, interval 1, probability 0, space 0, times 0 [ 601.933130][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1473'. [ 601.946567][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.984352][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.4.1472 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 601.984395][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.984413][T13237] Call Trace: [ 601.984424][T13237] [ 601.984437][T13237] dump_stack_lvl+0x16c/0x1f0 [ 601.984485][T13237] should_fail_ex+0x512/0x640 [ 601.984527][T13237] ? __kvmalloc_node_noprof+0x122/0x600 [ 601.984569][T13237] should_failslab+0xc2/0x120 [ 601.984606][T13237] __kvmalloc_node_noprof+0x135/0x600 [ 601.984638][T13237] ? __pfx___mutex_lock+0x10/0x10 [ 601.984681][T13237] ? traverse.part.0.constprop.0+0x392/0x640 [ 601.984745][T13237] ? traverse.part.0.constprop.0+0x392/0x640 [ 601.984790][T13237] traverse.part.0.constprop.0+0x392/0x640 [ 601.984851][T13237] seq_read_iter+0x932/0x12c0 [ 601.984916][T13237] proc_reg_read_iter+0x21d/0x310 [ 601.984951][T13237] vfs_read+0x8c8/0xc70 [ 601.984990][T13237] ? __pfx_vfs_read+0x10/0x10 [ 601.985015][T13237] ? find_held_lock+0x2b/0x80 [ 601.985073][T13237] __x64_sys_pread64+0x1f4/0x250 [ 601.985108][T13237] ? __pfx___x64_sys_pread64+0x10/0x10 [ 601.985138][T13237] ? rcu_is_watching+0x12/0xc0 [ 601.985180][T13237] do_syscall_64+0xcd/0x230 [ 601.985230][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.985262][T13237] RIP: 0033:0x7fa73918e969 [ 601.985288][T13237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.985318][T13237] RSP: 002b:00007fa736ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 601.985348][T13237] RAX: ffffffffffffffda RBX: 00007fa7393b5fa0 RCX: 00007fa73918e969 [ 601.985369][T13237] RDX: 0000000100000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 601.985388][T13237] RBP: 00007fa736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.985405][T13237] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 601.985422][T13237] R13: 0000000000000000 R14: 00007fa7393b5fa0 R15: 00007ffdc4695118 [ 601.985462][T13237] [ 602.366816][T13238] bridge_slave_1 (unregistering): left allmulticast mode [ 602.375785][T13238] bridge_slave_1 (unregistering): left promiscuous mode [ 602.382879][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.528048][T13271] FAULT_INJECTION: forcing a failure. [ 604.528048][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 604.565655][T13271] CPU: 1 UID: 0 PID: 13271 Comm: syz.4.1482 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 604.565714][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.565735][T13271] Call Trace: [ 604.565747][T13271] [ 604.565760][T13271] dump_stack_lvl+0x16c/0x1f0 [ 604.565816][T13271] should_fail_ex+0x512/0x640 [ 604.565863][T13271] ? __kvmalloc_node_noprof+0x122/0x600 [ 604.565913][T13271] should_failslab+0xc2/0x120 [ 604.565954][T13271] __kvmalloc_node_noprof+0x135/0x600 [ 604.565993][T13271] ? io_alloc_cache_init+0x33/0x170 [ 604.566042][T13271] ? io_alloc_cache_init+0x33/0x170 [ 604.566073][T13271] io_alloc_cache_init+0x33/0x170 [ 604.566109][T13271] io_uring_setup+0x5ff/0x1ff0 [ 604.566159][T13271] ? __pfx_io_uring_setup+0x10/0x10 [ 604.566199][T13271] ? do_futex+0x122/0x350 [ 604.566240][T13271] ? __pfx_do_futex+0x10/0x10 [ 604.566273][T13271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.566352][T13271] ? rcu_is_watching+0x12/0xc0 [ 604.566396][T13271] __x64_sys_io_uring_setup+0xc2/0x170 [ 604.566442][T13271] do_syscall_64+0xcd/0x230 [ 604.566495][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.566528][T13271] RIP: 0033:0x7fa73918e969 [ 604.566555][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.566588][T13271] RSP: 002b:00007fa736ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 604.566627][T13271] RAX: ffffffffffffffda RBX: 00007fa7393b5fa0 RCX: 00007fa73918e969 [ 604.566649][T13271] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 604.566670][T13271] RBP: 00007fa739210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 604.566697][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.566717][T13271] R13: 0000000000000000 R14: 00007fa7393b5fa0 R15: 00007ffdc4695118 [ 604.566759][T13271] [ 604.985490][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 605.192398][T13278] program syz.3.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.143105][T13305] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[13305] [ 611.868322][T13350] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1499'. [ 612.245347][ T5841] Bluetooth: hci1: unexpected event 0x03 length: 18 > 11 [ 612.303660][T13350] ima: policy update failed [ 612.378617][ T30] audit: type=1802 audit(6042025744.364:15): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1499" res=0 errno=0 [ 612.596618][T13385] ptrace attach of "./syz-executor exec"[8430] was attempted by ""[13385] [ 612.663426][T13387] FAULT_INJECTION: forcing a failure. [ 612.663426][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 612.717476][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.2.1510 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 612.717519][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.717538][T13387] Call Trace: [ 612.717548][T13387] [ 612.717560][T13387] dump_stack_lvl+0x16c/0x1f0 [ 612.717610][T13387] should_fail_ex+0x512/0x640 [ 612.717652][T13387] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 612.717685][T13387] should_failslab+0xc2/0x120 [ 612.717734][T13387] __kmalloc_cache_noprof+0x6a/0x3e0 [ 612.717764][T13387] ? sctp_stream_init_ext+0x4e/0x1b0 [ 612.717816][T13387] sctp_stream_init_ext+0x4e/0x1b0 [ 612.717863][T13387] sctp_sendmsg_to_asoc+0x16c1/0x1bf0 [ 612.717930][T13387] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 612.717980][T13387] ? __pfx_autoremove_wake_function+0x10/0x10 [ 612.718029][T13387] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 612.718079][T13387] sctp_sendmsg+0xef5/0x1ee0 [ 612.718110][T13387] ? __lock_acquire+0x5ca/0x1ba0 [ 612.718159][T13387] ? __pfx_sctp_sendmsg+0x10/0x10 [ 612.718193][T13387] ? __lock_acquire+0xaa4/0x1ba0 [ 612.718233][T13387] ? __pfx___might_resched+0x10/0x10 [ 612.718281][T13387] ? import_ubuf+0x1b6/0x220 [ 612.718326][T13387] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.718360][T13387] ? __import_iovec+0x1c8/0x660 [ 612.718407][T13387] ? __might_fault+0xe3/0x190 [ 612.718440][T13387] ? __might_fault+0x13b/0x190 [ 612.718481][T13387] ? __pfx_sctp_sendmsg+0x10/0x10 [ 612.718517][T13387] inet_sendmsg+0x119/0x140 [ 612.718565][T13387] ____sys_sendmsg+0x973/0xc70 [ 612.718612][T13387] ? copy_msghdr_from_user+0x10a/0x160 [ 612.718647][T13387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.718708][T13387] ? __pfx__kstrtoull+0x10/0x10 [ 612.718753][T13387] ___sys_sendmsg+0x134/0x1d0 [ 612.718792][T13387] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.718849][T13387] ? find_held_lock+0x2b/0x80 [ 612.718907][T13387] __sys_sendmmsg+0x200/0x420 [ 612.718946][T13387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 612.718996][T13387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.719061][T13387] ? fput+0x70/0xf0 [ 612.719096][T13387] ? ksys_write+0x1b9/0x240 [ 612.719123][T13387] ? __pfx_ksys_write+0x10/0x10 [ 612.719161][T13387] __x64_sys_sendmmsg+0x9c/0x100 [ 612.719195][T13387] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.719239][T13387] do_syscall_64+0xcd/0x230 [ 612.719286][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.719318][T13387] RIP: 0033:0x7f74cf58e969 [ 612.719342][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.719373][T13387] RSP: 002b:00007f74cd3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 612.719402][T13387] RAX: ffffffffffffffda RBX: 00007f74cf7b6080 RCX: 00007f74cf58e969 [ 612.719423][T13387] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 612.719441][T13387] RBP: 00007f74cd3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 612.719459][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.719476][T13387] R13: 0000000000000001 R14: 00007f74cf7b6080 R15: 00007ffc42640cb8 [ 612.719516][T13387] [ 614.416630][T13413] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[13413] [ 615.588061][T13418] random: crng reseeded on system resumption [ 615.778921][T13425] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 615.778921][T13425] program syz.3.1519 not setting count and/or reply_len properly [ 615.898662][T13426] FAULT_INJECTION: forcing a failure. [ 615.898662][T13426] name failslab, interval 1, probability 0, space 0, times 0 [ 615.927308][T13426] CPU: 1 UID: 0 PID: 13426 Comm: syz.3.1519 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 615.927342][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.927357][T13426] Call Trace: [ 615.927365][T13426] [ 615.927374][T13426] dump_stack_lvl+0x16c/0x1f0 [ 615.927413][T13426] should_fail_ex+0x512/0x640 [ 615.927447][T13426] ? __kmalloc_noprof+0xbf/0x510 [ 615.927476][T13426] ? xfrm_hash_alloc+0xd1/0x100 [ 615.927510][T13426] should_failslab+0xc2/0x120 [ 615.927540][T13426] __kmalloc_noprof+0xd2/0x510 [ 615.927566][T13426] ? xfrm_state_init+0x377/0x630 [ 615.927602][T13426] ? __pfx_xfrm_net_init+0x10/0x10 [ 615.927640][T13426] xfrm_hash_alloc+0xd1/0x100 [ 615.927682][T13426] xfrm_net_init+0x244/0xcc0 [ 615.927725][T13426] ? __pfx_xfrm_net_init+0x10/0x10 [ 615.927762][T13426] ops_init+0x1df/0x5f0 [ 615.927795][T13426] setup_net+0x21e/0x850 [ 615.927827][T13426] ? __pfx_setup_net+0x10/0x10 [ 615.927855][T13426] ? lockdep_init_map_type+0x5c/0x280 [ 615.927888][T13426] ? __pfx_down_read_killable+0x10/0x10 [ 615.927914][T13426] ? debug_mutex_init+0x37/0x70 [ 615.927938][T13426] copy_net_ns+0x2a6/0x5f0 [ 615.927974][T13426] create_new_namespaces+0x3ea/0xad0 [ 615.928008][T13426] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 615.928037][T13426] ksys_unshare+0x45b/0xa40 [ 615.928070][T13426] ? __pfx_ksys_unshare+0x10/0x10 [ 615.928101][T13426] ? xfd_validate_state+0x5d/0x180 [ 615.928142][T13426] ? rcu_is_watching+0x12/0xc0 [ 615.928170][T13426] __x64_sys_unshare+0x31/0x40 [ 615.928202][T13426] do_syscall_64+0xcd/0x230 [ 615.928239][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.928263][T13426] RIP: 0033:0x7f7c9b78e969 [ 615.928282][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.928306][T13426] RSP: 002b:00007f7c9c5fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 615.928328][T13426] RAX: ffffffffffffffda RBX: 00007f7c9b9b6080 RCX: 00007f7c9b78e969 [ 615.928344][T13426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 615.928358][T13426] RBP: 00007f7c9b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 615.928373][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.928387][T13426] R13: 0000000000000000 R14: 00007f7c9b9b6080 R15: 00007ffc186db9d8 [ 615.928416][T13426] [ 616.619281][T13434] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[13434] [ 617.672306][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 617.751549][T13454] program syz.4.1527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.639934][T13471] FAULT_INJECTION: forcing a failure. [ 619.639934][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 619.679636][T13471] CPU: 1 UID: 0 PID: 13471 Comm: syz.3.1531 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 619.679677][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.679695][T13471] Call Trace: [ 619.679705][T13471] [ 619.679717][T13471] dump_stack_lvl+0x16c/0x1f0 [ 619.679767][T13471] should_fail_ex+0x512/0x640 [ 619.679813][T13471] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 619.679855][T13471] should_failslab+0xc2/0x120 [ 619.679895][T13471] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 619.679933][T13471] ? __d_alloc+0x31/0xaa0 [ 619.679966][T13471] ? stack_trace_save+0x8e/0xc0 [ 619.680001][T13471] __d_alloc+0x31/0xaa0 [ 619.680039][T13471] d_alloc+0x4a/0x1e0 [ 619.680084][T13471] d_alloc_parallel+0xe3/0x12e0 [ 619.680139][T13471] ? find_held_lock+0x2b/0x80 [ 619.680173][T13471] ? __pfx_d_alloc_parallel+0x10/0x10 [ 619.680220][T13471] ? __d_lookup+0x266/0x4a0 [ 619.680274][T13471] lookup_open.isra.0+0x665/0x1580 [ 619.680329][T13471] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 619.680398][T13471] ? __pfx_down_write+0x10/0x10 [ 619.680444][T13471] ? mnt_get_write_access+0x20c/0x300 [ 619.680492][T13471] path_openat+0x905/0x2d40 [ 619.680535][T13471] ? do_syscall_64+0xcd/0x230 [ 619.680579][T13471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.680614][T13471] ? __pfx_path_openat+0x10/0x10 [ 619.680648][T13471] ? __lock_acquire+0xaa4/0x1ba0 [ 619.680694][T13471] do_filp_open+0x20b/0x470 [ 619.680726][T13471] ? __pfx_do_filp_open+0x10/0x10 [ 619.680784][T13471] ? _raw_spin_unlock+0x28/0x50 [ 619.680818][T13471] ? alloc_fd+0x471/0x7d0 [ 619.680873][T13471] do_sys_openat2+0x11b/0x1d0 [ 619.680911][T13471] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.680952][T13471] ? __fget_files+0x20e/0x3c0 [ 619.681005][T13471] __x64_sys_open+0x153/0x1e0 [ 619.681044][T13471] ? __pfx___x64_sys_open+0x10/0x10 [ 619.681102][T13471] ? rcu_is_watching+0x12/0xc0 [ 619.681132][T13471] do_syscall_64+0xcd/0x230 [ 619.681177][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.681206][T13471] RIP: 0033:0x7f7c9b78e969 [ 619.681228][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.681257][T13471] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 619.681283][T13471] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 619.681303][T13471] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 619.681322][T13471] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 619.681338][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.681355][T13471] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 619.681393][T13471] [ 621.474024][T13466] CIFS mount error: No usable UNC path provided in device string! [ 621.474024][T13466] [ 621.485004][T13466] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 622.057962][T13497] CIFS mount error: No usable UNC path provided in device string! [ 622.057962][T13497] [ 622.068446][T13497] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 623.414993][T13520] random: crng reseeded on system resumption [ 623.853514][T13531] netlink: 'syz.4.1543': attribute type 4 has an invalid length. [ 624.525561][T13533] CIFS mount error: No usable UNC path provided in device string! [ 624.525561][T13533] [ 624.538111][T13533] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 626.282268][T13568] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[13568] [ 627.494818][T13589] netlink: 85 bytes leftover after parsing attributes in process `syz.2.1558'. [ 628.083975][T13598] netlink: 'syz.2.1559': attribute type 11 has an invalid length. [ 628.115312][T13598] netlink: 'syz.2.1559': attribute type 11 has an invalid length. [ 628.123253][T13598] netlink: 'syz.2.1559': attribute type 11 has an invalid length. [ 629.026819][T13611] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[13611] [ 629.447773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.454387][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.137466][T13619] CIFS mount error: No usable UNC path provided in device string! [ 630.137466][T13619] [ 630.150199][T13619] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 632.661010][ T30] audit: type=1804 audit(6042025764.644:16): pid=13658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1572" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=26 res=1 errno=0 [ 634.891832][T13688] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[13688] [ 636.741069][T13701] CIFS mount error: No usable UNC path provided in device string! [ 636.741069][T13701] [ 636.774779][T13701] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 638.187147][T13726] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1589'. [ 640.955267][T13770] CIFS mount error: No usable UNC path provided in device string! [ 640.955267][T13770] [ 640.972862][T13770] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 642.623944][ T30] audit: type=1804 audit(6042026797.607:17): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1607" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=26 res=1 errno=0 [ 643.309469][T13811] Console: switching to colour VGA+ 80x25 [ 643.817427][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 644.816837][T13856] FAULT_INJECTION: forcing a failure. [ 644.816837][T13856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.830658][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.4.1624 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 644.830699][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.830717][T13856] Call Trace: [ 644.830728][T13856] [ 644.830740][T13856] dump_stack_lvl+0x16c/0x1f0 [ 644.830787][T13856] should_fail_ex+0x512/0x640 [ 644.830839][T13856] _copy_to_user+0x32/0xd0 [ 644.830889][T13856] simple_read_from_buffer+0xcb/0x170 [ 644.830940][T13856] proc_fail_nth_read+0x197/0x270 [ 644.830998][T13856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.831046][T13856] ? rw_verify_area+0xcf/0x680 [ 644.831092][T13856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.831137][T13856] vfs_read+0x1de/0xc70 [ 644.831172][T13856] ? __pfx___mutex_lock+0x10/0x10 [ 644.831218][T13856] ? __pfx_vfs_read+0x10/0x10 [ 644.831259][T13856] ? __fget_files+0x20e/0x3c0 [ 644.831321][T13856] ksys_read+0x12a/0x240 [ 644.831349][T13856] ? __pfx_ksys_read+0x10/0x10 [ 644.831376][T13856] ? rcu_is_watching+0x12/0xc0 [ 644.831417][T13856] do_syscall_64+0xcd/0x230 [ 644.831468][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.831500][T13856] RIP: 0033:0x7fa73918d37c [ 644.831523][T13856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 644.831553][T13856] RSP: 002b:00007fa736ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.831581][T13856] RAX: ffffffffffffffda RBX: 00007fa7393b5fa0 RCX: 00007fa73918d37c [ 644.831600][T13856] RDX: 000000000000000f RSI: 00007fa736ff60a0 RDI: 0000000000000004 [ 644.831619][T13856] RBP: 00007fa736ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.831638][T13856] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 644.831657][T13856] R13: 0000000000000000 R14: 00007fa7393b5fa0 R15: 00007ffdc4695118 [ 644.831697][T13856] [ 645.733805][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 645.754546][T13869] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1627'. [ 646.334154][T13883] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[13883] [ 647.807934][T13912] Process accounting resumed [ 648.251614][T13928] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[13928] [ 648.276386][T13923] Invalid ELF header magic: != ELF [ 652.144323][T13983] CIFS mount error: No usable UNC path provided in device string! [ 652.144323][T13983] [ 652.154573][T13983] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 654.607102][T14026] CIFS mount error: No usable UNC path provided in device string! [ 654.607102][T14026] [ 654.620294][T14026] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.116008][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 658.148072][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 661.739991][T14122] CIFS mount error: No usable UNC path provided in device string! [ 661.739991][T14122] [ 661.778393][T14122] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 662.386527][T14139] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[14139] [ 662.645910][T14127] CIFS mount error: No usable UNC path provided in device string! [ 662.645910][T14127] [ 662.656100][T14127] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 665.026397][T14164] FAULT_INJECTION: forcing a failure. [ 665.026397][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 665.043141][T14164] CPU: 0 UID: 0 PID: 14164 Comm: syz.5.1698 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 665.043188][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.043206][T14164] Call Trace: [ 665.043218][T14164] [ 665.043232][T14164] dump_stack_lvl+0x16c/0x1f0 [ 665.043282][T14164] should_fail_ex+0x512/0x640 [ 665.043331][T14164] ? __kmalloc_noprof+0xbf/0x510 [ 665.043368][T14164] ? trace_parser_get_init+0x30/0xc0 [ 665.043410][T14164] should_failslab+0xc2/0x120 [ 665.043450][T14164] __kmalloc_noprof+0xd2/0x510 [ 665.043494][T14164] trace_parser_get_init+0x30/0xc0 [ 665.043543][T14164] ftrace_event_write+0x177/0x290 [ 665.043591][T14164] ? __pfx_ftrace_event_write+0x10/0x10 [ 665.043661][T14164] vfs_write+0x25c/0x1180 [ 665.043693][T14164] ? __pfx_ftrace_event_write+0x10/0x10 [ 665.043747][T14164] ? __pfx___mutex_lock+0x10/0x10 [ 665.043799][T14164] ? __pfx_vfs_write+0x10/0x10 [ 665.043846][T14164] ? __fget_files+0x20e/0x3c0 [ 665.043907][T14164] ksys_write+0x12a/0x240 [ 665.043940][T14164] ? __pfx_ksys_write+0x10/0x10 [ 665.043968][T14164] ? rcu_is_watching+0x12/0xc0 [ 665.044014][T14164] do_syscall_64+0xcd/0x230 [ 665.044064][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.044105][T14164] RIP: 0033:0x7f433db8e969 [ 665.044129][T14164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.044165][T14164] RSP: 002b:00007f433ea29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 665.044193][T14164] RAX: ffffffffffffffda RBX: 00007f433ddb6080 RCX: 00007f433db8e969 [ 665.044213][T14164] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 665.044230][T14164] RBP: 00007f433ea29090 R08: 0000000000000000 R09: 0000000000000000 [ 665.044254][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.044270][T14164] R13: 0000000000000000 R14: 00007f433ddb6080 R15: 00007ffda6f4b538 [ 665.044309][T14164] [ 666.797163][T14178] FAULT_INJECTION: forcing a failure. [ 666.797163][T14178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 666.816780][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.3.1702 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 666.816824][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.816843][T14178] Call Trace: [ 666.816854][T14178] [ 666.816866][T14178] dump_stack_lvl+0x16c/0x1f0 [ 666.816917][T14178] should_fail_ex+0x512/0x640 [ 666.816975][T14178] should_fail_alloc_page+0xe7/0x130 [ 666.817018][T14178] prepare_alloc_pages+0x3c2/0x610 [ 666.817068][T14178] ? rcu_is_watching+0x12/0xc0 [ 666.817104][T14178] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 666.817147][T14178] ? kasan_save_stack+0x33/0x60 [ 666.817196][T14178] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 666.817252][T14178] ? __lock_acquire+0x5ca/0x1ba0 [ 666.817296][T14178] ? __lock_acquire+0x5ca/0x1ba0 [ 666.817338][T14178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.817385][T14178] ? policy_nodemask+0xea/0x4e0 [ 666.817429][T14178] alloc_pages_mpol+0x1fb/0x550 [ 666.817472][T14178] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 666.817513][T14178] ? __lock_acquire+0x5ca/0x1ba0 [ 666.817562][T14178] folio_alloc_mpol_noprof+0x36/0x2f0 [ 666.817612][T14178] vma_alloc_folio_noprof+0xed/0x1e0 [ 666.817657][T14178] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 666.817718][T14178] do_pte_missing+0x223d/0x3fb0 [ 666.817766][T14178] __handle_mm_fault+0x103d/0x2a40 [ 666.817810][T14178] ? __pfx___handle_mm_fault+0x10/0x10 [ 666.817842][T14178] ? __pte_offset_map_lock+0x155/0x2f0 [ 666.817889][T14178] ? find_held_lock+0x2b/0x80 [ 666.817917][T14178] ? find_held_lock+0x2b/0x80 [ 666.817982][T14178] handle_mm_fault+0x3fe/0xad0 [ 666.818023][T14178] __get_user_pages+0x771/0x36f0 [ 666.818086][T14178] ? __pfx_mt_find+0x10/0x10 [ 666.818139][T14178] ? __pfx___get_user_pages+0x10/0x10 [ 666.818204][T14178] populate_vma_page_range+0x278/0x3a0 [ 666.818239][T14178] ? __pfx_populate_vma_page_range+0x10/0x10 [ 666.818269][T14178] ? __pfx_find_vma_intersection+0x10/0x10 [ 666.818321][T14178] ? do_mmap+0x69c/0x11b0 [ 666.818372][T14178] __mm_populate+0x1d8/0x380 [ 666.818404][T14178] ? __pfx___mm_populate+0x10/0x10 [ 666.818438][T14178] ? up_write+0x1b2/0x520 [ 666.818489][T14178] vm_mmap_pgoff+0x362/0x450 [ 666.818541][T14178] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 666.818599][T14178] ? __x64_sys_futex+0x1e0/0x4c0 [ 666.818632][T14178] ? __x64_sys_futex+0x1e9/0x4c0 [ 666.818673][T14178] ksys_mmap_pgoff+0x7d/0x5c0 [ 666.818721][T14178] ? rcu_is_watching+0x12/0xc0 [ 666.818754][T14178] __x64_sys_mmap+0x125/0x190 [ 666.818790][T14178] do_syscall_64+0xcd/0x230 [ 666.818841][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.818874][T14178] RIP: 0033:0x7f7c9b78e969 [ 666.818901][T14178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.818931][T14178] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 666.818969][T14178] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 666.818990][T14178] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 666.819010][T14178] RBP: 00007f7c9b810ab1 R08: 0000000000000000 R09: 0100000000008000 [ 666.819030][T14178] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 666.819049][T14178] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 666.819091][T14178] [ 668.879421][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 670.139085][T14218] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[14218] ^[ 672.110842][T14233] input: f¬ as /devices/virtual/input/input36 [ 673.125599][T14242] binder: 14241:14242 ioctl c0306201 0 returned -14 [ 674.131633][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 674.186074][T14268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 674.274703][T14268] ipvlan1: entered allmulticast mode [ 674.316871][T14268] veth0_vlan: entered allmulticast mode [ 675.667840][T14287] CIFS mount error: No usable UNC path provided in device string! [ 675.667840][T14287] [ 675.679031][T14287] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 676.912575][T14298] openvswitch: HfR: Dropping previously announced user features [ 677.119177][T14301] CIFS mount error: No usable UNC path provided in device string! [ 677.119177][T14301] [ 677.173667][T14301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 677.354516][T14304] CIFS mount error: No usable UNC path provided in device string! [ 677.354516][T14304] [ 677.413507][T14304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 679.078928][T14340] [ 679.080230][T14306] Process accounting paused [ 681.283157][T14373] FAULT_INJECTION: forcing a failure. [ 681.283157][T14373] name failslab, interval 1, probability 0, space 0, times 0 [ 681.302423][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.2.1747 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 681.302466][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.302486][T14373] Call Trace: [ 681.302496][T14373] [ 681.302509][T14373] dump_stack_lvl+0x16c/0x1f0 [ 681.302562][T14373] should_fail_ex+0x512/0x640 [ 681.302626][T14373] should_failslab+0xc2/0x120 [ 681.302669][T14373] __kmalloc_cache_noprof+0x6a/0x3e0 [ 681.302703][T14373] ? cfmuxl_create+0x40/0x210 [ 681.302752][T14373] ? __pfx_caif_init_net+0x10/0x10 [ 681.302798][T14373] cfmuxl_create+0x40/0x210 [ 681.302845][T14373] cfcnfg_create+0x78/0x500 [ 681.302887][T14373] ? debug_mutex_init+0x37/0x70 [ 681.302918][T14373] ? __pfx_caif_init_net+0x10/0x10 [ 681.302958][T14373] caif_init_net+0x7d/0xe0 [ 681.303002][T14373] ops_init+0x1df/0x5f0 [ 681.303048][T14373] setup_net+0x21e/0x850 [ 681.303093][T14373] ? __pfx_setup_net+0x10/0x10 [ 681.303133][T14373] ? lockdep_init_map_type+0x5c/0x280 [ 681.303178][T14373] ? __pfx_down_read_killable+0x10/0x10 [ 681.303213][T14373] ? debug_mutex_init+0x37/0x70 [ 681.303249][T14373] copy_net_ns+0x2a6/0x5f0 [ 681.303329][T14373] create_new_namespaces+0x3ea/0xad0 [ 681.303378][T14373] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 681.303420][T14373] ksys_unshare+0x45b/0xa40 [ 681.303465][T14373] ? __pfx_ksys_unshare+0x10/0x10 [ 681.303507][T14373] ? xfd_validate_state+0x5d/0x180 [ 681.303563][T14373] ? rcu_is_watching+0x12/0xc0 [ 681.303615][T14373] __x64_sys_unshare+0x31/0x40 [ 681.303660][T14373] do_syscall_64+0xcd/0x230 [ 681.303713][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.303746][T14373] RIP: 0033:0x7f74cf58e969 [ 681.303771][T14373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.303803][T14373] RSP: 002b:00007f74cd3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 681.303836][T14373] RAX: ffffffffffffffda RBX: 00007f74cf7b6080 RCX: 00007f74cf58e969 [ 681.303858][T14373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 681.303878][T14373] RBP: 00007f74cf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 681.303898][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.303918][T14373] R13: 0000000000000000 R14: 00007f74cf7b6080 R15: 00007ffc42640cb8 [ 681.303964][T14373] [ 683.583863][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1754'. [ 685.335314][T14430] CIFS mount error: No usable UNC path provided in device string! [ 685.335314][T14430] [ 685.345545][T14430] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 686.696111][T14456] zram0: detected capacity change from 0 to 8 [ 686.771040][T14458] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[14458] [ 686.964677][T14462] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[14462] [ 688.357649][T14487] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[14487] [ 690.916783][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.923297][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.050064][T14575] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[14575] [ 693.773877][T14585] FAULT_INJECTION: forcing a failure. [ 693.773877][T14585] name fail_futex, interval 1, probability 0, space 0, times 0 [ 693.787327][T14585] CPU: 1 UID: 0 PID: 14585 Comm: syz.3.1796 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 693.787365][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.787383][T14585] Call Trace: [ 693.787393][T14585] [ 693.787405][T14585] dump_stack_lvl+0x16c/0x1f0 [ 693.787453][T14585] should_fail_ex+0x512/0x640 [ 693.787496][T14585] get_futex_key+0x49e/0x1000 [ 693.787517][T14585] ? __lock_acquire+0xaa4/0x1ba0 [ 693.787551][T14585] ? __pfx_get_futex_key+0x10/0x10 [ 693.787584][T14585] futex_wait_setup+0x78/0x290 [ 693.787621][T14585] __futex_wait+0x266/0x3c0 [ 693.787653][T14585] ? __pfx___futex_wait+0x10/0x10 [ 693.787689][T14585] ? __pfx_futex_wake_mark+0x10/0x10 [ 693.787724][T14585] ? ktime_add_safe+0x60/0x70 [ 693.787760][T14585] futex_wait+0xe8/0x380 [ 693.787790][T14585] ? __pfx_futex_wait+0x10/0x10 [ 693.787818][T14585] ? __lock_acquire+0xaa4/0x1ba0 [ 693.787849][T14585] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 693.787893][T14585] do_futex+0x229/0x350 [ 693.787918][T14585] ? __pfx_do_futex+0x10/0x10 [ 693.787940][T14585] ? rcu_is_watching+0x12/0xc0 [ 693.787960][T14585] ? ktime_get+0x200/0x310 [ 693.787984][T14585] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.788016][T14585] ? read_tsc+0x9/0x20 [ 693.788049][T14585] __x64_sys_futex+0x1e0/0x4c0 [ 693.788077][T14585] ? __pfx___x64_sys_futex+0x10/0x10 [ 693.788114][T14585] do_syscall_64+0xcd/0x230 [ 693.788155][T14585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.788178][T14585] RIP: 0033:0x7f7c9b78e969 [ 693.788197][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.788226][T14585] RSP: 002b:00007ffc186dbb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 693.788247][T14585] RAX: ffffffffffffffda RBX: 00000000000a95d1 RCX: 00007f7c9b78e969 [ 693.788263][T14585] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c9b9b5fac [ 693.788277][T14585] RBP: 0000000000000032 R08: 00007f7c9c61f000 R09: 0000000d186dbe2f [ 693.788292][T14585] R10: 00007ffc186dbc30 R11: 0000000000000246 R12: 00007f7c9b9b5fac [ 693.788306][T14585] R13: 00007ffc186dbc30 R14: 00000000000a9603 R15: 00007ffc186dbc50 [ 693.788335][T14585] [ 694.009850][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.052658][T14639] openvswitch: HfR: Dropping previously announced user features [ 699.837640][T14671] CIFS mount error: No usable UNC path provided in device string! [ 699.837640][T14671] [ 699.848717][T14671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 701.766227][T14708] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[14708] [ 703.137418][T14725] FAULT_INJECTION: forcing a failure. [ 703.137418][T14725] name failslab, interval 1, probability 0, space 0, times 0 [ 703.212160][T14725] CPU: 0 UID: 0 PID: 14725 Comm: syz.3.1828 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 703.212219][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.212238][T14725] Call Trace: [ 703.212248][T14725] [ 703.212260][T14725] dump_stack_lvl+0x16c/0x1f0 [ 703.212320][T14725] should_fail_ex+0x512/0x640 [ 703.212371][T14725] should_failslab+0xc2/0x120 [ 703.212409][T14725] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 703.212445][T14725] ? skb_clone+0x190/0x3f0 [ 703.212487][T14725] skb_clone+0x190/0x3f0 [ 703.212526][T14725] sctp_ulpevent_make_rcvmsg+0x2fa/0xab0 [ 703.212566][T14725] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 703.212604][T14725] sctp_ulpq_tail_data+0xc2/0xf70 [ 703.212642][T14725] ? sctp_eat_data+0xbb3/0x1920 [ 703.212690][T14725] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 703.212746][T14725] ? sctp_sf_eat_data_6_2+0x56b/0xba0 [ 703.212801][T14725] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 703.212839][T14725] sctp_do_sm+0x1dc1/0x5c80 [ 703.212892][T14725] ? __pfx_sctp_do_sm+0x10/0x10 [ 703.212929][T14725] ? __pfx_sctp_do_sm+0x10/0x10 [ 703.213017][T14725] ? ktime_get+0x200/0x310 [ 703.213052][T14725] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.213102][T14725] sctp_assoc_bh_rcv+0x392/0x6f0 [ 703.213146][T14725] sctp_inq_push+0x1d8/0x270 [ 703.213182][T14725] sctp_backlog_rcv+0x169/0x590 [ 703.213229][T14725] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 703.213342][T14725] __release_sock+0x35f/0x400 [ 703.213392][T14725] release_sock+0x5a/0x220 [ 703.213429][T14725] sctp_sendmsg+0xf17/0x1ee0 [ 703.213461][T14725] ? __lock_acquire+0x5ca/0x1ba0 [ 703.213514][T14725] ? __pfx_sctp_sendmsg+0x10/0x10 [ 703.213547][T14725] ? __lock_acquire+0xaa4/0x1ba0 [ 703.213587][T14725] ? __pfx___might_resched+0x10/0x10 [ 703.213635][T14725] ? import_ubuf+0x1b6/0x220 [ 703.213683][T14725] ? __pfx_aa_sk_perm+0x10/0x10 [ 703.213720][T14725] ? __import_iovec+0x1c8/0x660 [ 703.213767][T14725] ? __might_fault+0xe3/0x190 [ 703.213800][T14725] ? __might_fault+0x13b/0x190 [ 703.213835][T14725] ? __pfx_sctp_sendmsg+0x10/0x10 [ 703.213871][T14725] inet_sendmsg+0x119/0x140 [ 703.213918][T14725] ____sys_sendmsg+0x973/0xc70 [ 703.213966][T14725] ? copy_msghdr_from_user+0x10a/0x160 [ 703.214001][T14725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.214054][T14725] ? __pfx__kstrtoull+0x10/0x10 [ 703.214097][T14725] ___sys_sendmsg+0x134/0x1d0 [ 703.214135][T14725] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.214192][T14725] ? find_held_lock+0x2b/0x80 [ 703.214248][T14725] __sys_sendmmsg+0x200/0x420 [ 703.214306][T14725] ? __pfx___sys_sendmmsg+0x10/0x10 [ 703.214357][T14725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 703.214457][T14725] ? fput+0x70/0xf0 [ 703.214494][T14725] ? ksys_write+0x1b9/0x240 [ 703.214523][T14725] ? __pfx_ksys_write+0x10/0x10 [ 703.214550][T14725] ? rcu_is_watching+0x12/0xc0 [ 703.214585][T14725] __x64_sys_sendmmsg+0x9c/0x100 [ 703.214620][T14725] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.214662][T14725] do_syscall_64+0xcd/0x230 [ 703.214712][T14725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.214745][T14725] RIP: 0033:0x7f7c9b78e969 [ 703.214769][T14725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.214800][T14725] RSP: 002b:00007f7c9c5fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 703.214829][T14725] RAX: ffffffffffffffda RBX: 00007f7c9b9b6080 RCX: 00007f7c9b78e969 [ 703.214850][T14725] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 703.214868][T14725] RBP: 00007f7c9c5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 703.214887][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.214904][T14725] R13: 0000000000000001 R14: 00007f7c9b9b6080 R15: 00007ffc186db9d8 [ 703.214944][T14725] [ 705.501624][T14750] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078406000 pfn:0x78400 [ 705.627874][T14750] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 705.663696][T14750] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 705.706647][T14750] page_type: f8(unknown) [ 705.711426][T14750] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 705.804626][T14750] raw: ffff888078406000 0000000000000000 00000001f8000000 0000000000000000 [ 705.857235][T14754] could not allocate digest TFM handle binfmt_misc [ 705.899376][T14764] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[14764] [ 706.055534][T14750] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 706.192363][T14750] head: ffff888078406000 0000000000000000 00000001f8000000 0000000000000000 [ 706.342824][T14750] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 706.511598][T14750] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 706.703818][T14750] page dumped because: unmovable page [ 706.866688][T14750] page_owner tracks the page as allocated [ 706.913594][T14750] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 10223, tgid 10223 (syz-executor), ts 392538523733, free_ts 392429809422 [ 707.074411][T14750] post_alloc_hook+0x181/0x1b0 [ 707.112607][T14750] get_page_from_freelist+0x135c/0x3920 [ 707.126939][T14750] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 707.133065][T14750] __alloc_pages_noprof+0xb/0x1b0 [ 707.143197][T14750] ___kmalloc_large_node+0x82/0x1e0 [ 707.153986][T14750] __kmalloc_large_node_noprof+0x1c/0x70 [ 707.163438][T14750] __kvmalloc_node_noprof.cold+0xb/0x65 [ 707.177528][T14750] alloc_netdev_mqs+0xd2/0x1570 [ 707.190423][T14750] rtnl_create_link+0xc10/0xfa0 [ 707.195383][T14750] vxcan_newlink+0x2f8/0x640 [ 707.237274][T14750] rtnl_newlink+0xc42/0x2000 [ 707.241992][T14750] rtnetlink_rcv_msg+0x95b/0xe90 [ 707.257050][T14750] netlink_rcv_skb+0x16a/0x440 [ 707.275861][T14750] netlink_unicast+0x53a/0x7f0 [ 707.280910][T14750] netlink_sendmsg+0x8d1/0xdd0 [ 707.285932][T14750] __sys_sendto+0x495/0x510 [ 707.316762][T14750] page last free pid 10244 tgid 10243 stack trace: [ 707.327243][T14750] __free_frozen_pages+0x69d/0xff0 [ 707.337858][T14750] __put_partials+0x16d/0x1c0 [ 707.342636][T14750] qlist_free_all+0x4e/0x120 [ 707.356242][T14750] kasan_quarantine_reduce+0x195/0x1e0 [ 707.364120][T14750] __kasan_slab_alloc+0x69/0x90 [ 707.372739][T14750] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 707.378528][T14750] kobject_uevent_env+0x265/0x1870 [ 707.383812][T14750] device_del+0x623/0x9f0 [ 707.392326][T14750] unregister_netdevice_many_notify+0x1904/0x26f0 [ 707.399162][T14750] setup_net+0x49a/0x850 [ 707.403491][T14750] copy_net_ns+0x2a6/0x5f0 [ 707.411582][T14750] create_new_namespaces+0x3ea/0xad0 [ 707.416955][T14750] copy_namespaces+0x468/0x560 [ 707.422325][T14750] copy_process+0x29ff/0x91a0 [ 707.427395][T14750] kernel_clone+0xfc/0x960 [ 707.431894][T14750] __do_sys_clone+0xce/0x120 [ 708.078769][T14779] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[14779] [ 712.063998][T14807] CIFS mount error: No usable UNC path provided in device string! [ 712.063998][T14807] [ 712.144989][T14807] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 712.302538][T14827] CIFS mount error: No usable UNC path provided in device string! [ 712.302538][T14827] [ 712.358367][T14827] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 713.092916][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 713.479901][T14831] CIFS mount error: No usable UNC path provided in device string! [ 713.479901][T14831] [ 713.479934][T14831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 715.052877][T14863] CIFS mount error: No usable UNC path provided in device string! [ 715.052877][T14863] [ 715.076928][T14863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 715.250413][T14883] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[14883] [ 715.415136][ T5841] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 716.435827][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 717.288854][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 717.333029][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 718.709619][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 718.871392][T14941] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078406000 pfn:0x78400 [ 718.920667][T14941] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 718.929308][T14941] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 718.997118][T14941] page_type: f8(unknown) [ 719.020425][T14941] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 719.074005][T14941] raw: ffff888078406000 0000000000000000 00000001f8000000 0000000000000000 [ 719.086379][T14941] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 719.095611][T14941] head: ffff888078406000 0000000000000000 00000001f8000000 0000000000000000 [ 719.182526][T14941] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 719.282648][T14941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 719.295948][T14947] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 719.303718][T14941] page dumped because: unmovable page [ 719.311234][T14941] page_owner tracks the page as allocated [ 719.421802][T14941] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 10223, tgid 10223 (syz-executor), ts 392538523733, free_ts 392429809422 [ 719.443894][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.455206][ T5841] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 719.696712][T14948] could not allocate digest TFM handle binfmt_misc [ 719.823488][T14941] post_alloc_hook+0x181/0x1b0 [ 719.828468][T14941] get_page_from_freelist+0x135c/0x3920 [ 719.878772][T14946] CIFS mount error: No usable UNC path provided in device string! [ 719.878772][T14946] [ 719.901606][T14946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 719.915976][T14941] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 720.054033][T14941] __alloc_pages_noprof+0xb/0x1b0 [ 720.059223][T14941] ___kmalloc_large_node+0x82/0x1e0 [ 720.065783][T14941] __kmalloc_large_node_noprof+0x1c/0x70 [ 720.071608][T14941] __kvmalloc_node_noprof.cold+0xb/0x65 [ 720.077377][T14941] alloc_netdev_mqs+0xd2/0x1570 [ 720.082374][T14941] rtnl_create_link+0xc10/0xfa0 [ 720.090091][T14941] vxcan_newlink+0x2f8/0x640 [ 720.109713][T14941] rtnl_newlink+0xc42/0x2000 [ 720.135246][T14941] rtnetlink_rcv_msg+0x95b/0xe90 [ 720.153880][T14941] netlink_rcv_skb+0x16a/0x440 [ 720.169292][T14941] netlink_unicast+0x53a/0x7f0 [ 720.195419][T14941] netlink_sendmsg+0x8d1/0xdd0 [ 720.225025][T14941] __sys_sendto+0x495/0x510 [ 720.229769][T14941] page last free pid 10244 tgid 10243 stack trace: [ 720.266525][T14941] __free_frozen_pages+0x69d/0xff0 [ 720.310087][T14941] __put_partials+0x16d/0x1c0 [ 720.329667][T14941] qlist_free_all+0x4e/0x120 [ 720.339865][T14941] kasan_quarantine_reduce+0x195/0x1e0 [ 720.360434][T14941] __kasan_slab_alloc+0x69/0x90 [ 720.376324][T14941] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 720.387805][T14941] kobject_uevent_env+0x265/0x1870 [ 720.400986][T14941] device_del+0x623/0x9f0 [ 720.410523][T14941] unregister_netdevice_many_notify+0x1904/0x26f0 [ 720.434217][T14941] setup_net+0x49a/0x850 [ 720.455014][T14941] copy_net_ns+0x2a6/0x5f0 [ 720.467567][T14941] create_new_namespaces+0x3ea/0xad0 [ 720.509176][T14941] copy_namespaces+0x468/0x560 [ 720.531824][T14941] copy_process+0x29ff/0x91a0 [ 720.563999][T14941] kernel_clone+0xfc/0x960 [ 720.603705][T14941] __do_sys_clone+0xce/0x120 [ 723.691231][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 725.010881][T15044] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[15044]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           syzkaller syzkaller login: [ 743.561767][T15341] CIFS mount error: No usable UNC path provided in device string! [ 743.561767][T15341] [ 743.595774][T15341] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 746.427439][T15400] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[15400] [ 746.701353][T15396] CIFS mount error: No usable UNC path provided in device string! [ 746.701353][T15396] [ 746.802972][T15396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 747.461135][T15414] input: f¬ as /devices/virtual/input/input38 [ 749.304904][T15435] FAULT_INJECTION: forcing a failure. [ 749.304904][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 749.305002][T15435] CPU: 1 UID: 0 PID: 15435 Comm: syz.2.1983 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 749.305042][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.305062][T15435] Call Trace: [ 749.305073][T15435] [ 749.305085][T15435] dump_stack_lvl+0x16c/0x1f0 [ 749.305139][T15435] should_fail_ex+0x512/0x640 [ 749.305186][T15435] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 749.305229][T15435] should_failslab+0xc2/0x120 [ 749.305278][T15435] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 749.305317][T15435] ? __d_alloc+0x31/0xaa0 [ 749.305358][T15435] __d_alloc+0x31/0xaa0 [ 749.305390][T15435] ? bpf_lsm_inode_permission+0x9/0x10 [ 749.305445][T15435] d_alloc+0x4a/0x1e0 [ 749.305482][T15435] vfs_tmpfile+0x148/0x890 [ 749.305522][T15435] path_openat+0x16ec/0x2d40 [ 749.305550][T15435] ? __x64_sys_open+0x153/0x1e0 [ 749.305590][T15435] ? do_syscall_64+0xcd/0x230 [ 749.305640][T15435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.305690][T15435] ? __pfx_path_openat+0x10/0x10 [ 749.305724][T15435] ? __lock_acquire+0xaa4/0x1ba0 [ 749.305774][T15435] do_filp_open+0x20b/0x470 [ 749.305807][T15435] ? __pfx_do_filp_open+0x10/0x10 [ 749.305870][T15435] ? _raw_spin_unlock+0x28/0x50 [ 749.305908][T15435] ? alloc_fd+0x471/0x7d0 [ 749.305972][T15435] do_sys_openat2+0x11b/0x1d0 [ 749.306017][T15435] ? __pfx_do_sys_openat2+0x10/0x10 [ 749.306078][T15435] __x64_sys_open+0x153/0x1e0 [ 749.306122][T15435] ? __pfx___x64_sys_open+0x10/0x10 [ 749.306177][T15435] ? rcu_is_watching+0x12/0xc0 [ 749.306211][T15435] do_syscall_64+0xcd/0x230 [ 749.306269][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.306302][T15435] RIP: 0033:0x7f74cf58e969 [ 749.306329][T15435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.306362][T15435] RSP: 002b:00007f74d032d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 749.306394][T15435] RAX: ffffffffffffffda RBX: 00007f74cf7b5fa0 RCX: 00007f74cf58e969 [ 749.306416][T15435] RDX: 0000000000000408 RSI: 0000000000591083 RDI: 0000200000000100 [ 749.306437][T15435] RBP: 00007f74cf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 749.306457][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.306477][T15435] R13: 0000000000000000 R14: 00007f74cf7b5fa0 R15: 00007ffc42640cb8 [ 749.306520][T15435] [ 750.077403][T15455] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[15455] [ 752.355477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.362664][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.705274][T15482] FAULT_INJECTION: forcing a failure. [ 752.705274][T15482] name failslab, interval 1, probability 0, space 0, times 0 [ 752.739435][T15482] CPU: 1 UID: 0 PID: 15482 Comm: syz.2.1994 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 752.739479][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.739497][T15482] Call Trace: [ 752.739507][T15482] [ 752.739518][T15482] dump_stack_lvl+0x16c/0x1f0 [ 752.739570][T15482] should_fail_ex+0x512/0x640 [ 752.739612][T15482] ? fs_reclaim_acquire+0xae/0x150 [ 752.739660][T15482] should_failslab+0xc2/0x120 [ 752.739696][T15482] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 752.739730][T15482] ? security_inode_alloc+0x3b/0x2b0 [ 752.739769][T15482] security_inode_alloc+0x3b/0x2b0 [ 752.739803][T15482] inode_init_always_gfp+0xce4/0x1030 [ 752.739857][T15482] alloc_inode+0x86/0x240 [ 752.739894][T15482] path_from_stashed+0x2be/0xb00 [ 752.739930][T15482] ? __pfx_path_from_stashed+0x10/0x10 [ 752.739970][T15482] ? do_raw_read_unlock+0x44/0xe0 [ 752.740025][T15482] ns_get_path+0x5f/0x80 [ 752.740070][T15482] proc_ns_get_link+0x121/0x260 [ 752.740117][T15482] ? __pfx_proc_ns_get_link+0x10/0x10 [ 752.740165][T15482] ? __pfx___might_resched+0x10/0x10 [ 752.740203][T15482] ? __pfx_proc_ns_get_link+0x10/0x10 [ 752.740249][T15482] step_into+0x1b22/0x2270 [ 752.740300][T15482] ? __pfx_step_into+0x10/0x10 [ 752.740343][T15482] ? find_held_lock+0x2b/0x80 [ 752.740383][T15482] path_openat+0x749/0x2d40 [ 752.740425][T15482] ? __pfx_path_openat+0x10/0x10 [ 752.740464][T15482] do_filp_open+0x20b/0x470 [ 752.740493][T15482] ? __pfx_do_filp_open+0x10/0x10 [ 752.740548][T15482] ? alloc_fd+0x471/0x7d0 [ 752.740603][T15482] do_sys_openat2+0x11b/0x1d0 [ 752.740642][T15482] ? __pfx_do_sys_openat2+0x10/0x10 [ 752.740695][T15482] __x64_sys_openat+0x174/0x210 [ 752.740735][T15482] ? __pfx___x64_sys_openat+0x10/0x10 [ 752.740779][T15482] ? do_user_addr_fault+0x843/0x1370 [ 752.740819][T15482] do_syscall_64+0xcd/0x230 [ 752.740866][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.740895][T15482] RIP: 0033:0x7f74cf58d2d0 [ 752.740919][T15482] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 752.740949][T15482] RSP: 002b:00007f74d032cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 752.740986][T15482] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f74cf58d2d0 [ 752.741005][T15482] RDX: 0000000000000002 RSI: 00007f74d032cfa0 RDI: 00000000ffffff9c [ 752.741023][T15482] RBP: 00007f74d032cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 752.741042][T15482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 752.741059][T15482] R13: 0000000000000000 R14: 00007f74cf7b5fa0 R15: 00007ffc42640cb8 [ 752.741098][T15482] [ 753.106780][T15499] FAULT_INJECTION: forcing a failure. [ 753.106780][T15499] name failslab, interval 1, probability 0, space 0, times 0 [ 753.178922][T15499] CPU: 0 UID: 0 PID: 15499 Comm: syz.3.1997 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 753.178977][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.178999][T15499] Call Trace: [ 753.179011][T15499] [ 753.179025][T15499] dump_stack_lvl+0x16c/0x1f0 [ 753.179095][T15499] should_fail_ex+0x512/0x640 [ 753.179149][T15499] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 753.179190][T15499] should_failslab+0xc2/0x120 [ 753.179236][T15499] __kmalloc_cache_noprof+0x6a/0x3e0 [ 753.179273][T15499] ? snd_pcm_oss_change_params_locked+0x247/0x3b40 [ 753.179345][T15499] snd_pcm_oss_change_params_locked+0x247/0x3b40 [ 753.179403][T15499] ? preempt_count_sub+0xc5/0x160 [ 753.179447][T15499] ? trace_contention_end+0xdd/0x130 [ 753.179497][T15499] ? __mutex_lock+0x1ca/0xb90 [ 753.179555][T15499] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 753.179617][T15499] ? __pfx___mutex_lock+0x10/0x10 [ 753.179687][T15499] ? find_held_lock+0x2b/0x80 [ 753.179731][T15499] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 753.179795][T15499] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 753.179853][T15499] ? find_held_lock+0x2b/0x80 [ 753.179894][T15499] ? hook_file_ioctl_common+0x145/0x410 [ 753.179937][T15499] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 753.179999][T15499] ? __fget_files+0x20e/0x3c0 [ 753.180064][T15499] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 753.180127][T15499] __x64_sys_ioctl+0x190/0x200 [ 753.180178][T15499] do_syscall_64+0xcd/0x230 [ 753.180235][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.180273][T15499] RIP: 0033:0x7f7c9b78e969 [ 753.180303][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.180340][T15499] RSP: 002b:00007f7c9c5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.180376][T15499] RAX: ffffffffffffffda RBX: 00007f7c9b9b6160 RCX: 00007f7c9b78e969 [ 753.180402][T15499] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 753.180425][T15499] RBP: 00007f7c9b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 753.180447][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.180469][T15499] R13: 0000000000000000 R14: 00007f7c9b9b6160 R15: 00007ffc186db9d8 [ 753.180517][T15499] [ 753.734067][ T5139] Bluetooth: hci1: unexpected event 0x3e length: 1023 > 260 [ 753.734112][ T5139] Bluetooth: hci1: unexpected subevent 0x01 length: 1022 > 18 [ 755.411859][T15524] CIFS mount error: No usable UNC path provided in device string! [ 755.411859][T15524] [ 755.448954][T15524] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 756.929508][T15544] FAULT_INJECTION: forcing a failure. [ 756.929508][T15544] name fail_futex, interval 1, probability 0, space 0, times 0 [ 756.995920][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.4.2008 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 756.995963][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.995981][T15544] Call Trace: [ 756.995992][T15544] [ 756.996004][T15544] dump_stack_lvl+0x16c/0x1f0 [ 756.996052][T15544] should_fail_ex+0x512/0x640 [ 756.996100][T15544] get_futex_key+0xabc/0x1000 [ 756.996136][T15544] ? __pfx_get_futex_key+0x10/0x10 [ 756.996182][T15544] futex_wake+0xe7/0x4e0 [ 756.996219][T15544] ? rcu_is_watching+0x12/0xc0 [ 756.996250][T15544] ? __pfx_futex_wake+0x10/0x10 [ 756.996335][T15544] do_futex+0x1e3/0x350 [ 756.996369][T15544] ? __pfx_do_futex+0x10/0x10 [ 756.996400][T15544] ? __might_fault+0xe3/0x190 [ 756.996445][T15544] mm_release+0x24e/0x300 [ 756.996481][T15544] do_exit+0x898/0x2c30 [ 756.996521][T15544] ? __pfx_futex_wake_mark+0x10/0x10 [ 756.996569][T15544] ? __pfx_do_exit+0x10/0x10 [ 756.996617][T15544] ? do_raw_spin_lock+0x12c/0x2b0 [ 756.996664][T15544] ? find_held_lock+0x2b/0x80 [ 756.996700][T15544] do_group_exit+0xd3/0x2a0 [ 756.996747][T15544] get_signal+0x2673/0x26d0 [ 756.996784][T15544] ? percpu_counter_add_batch+0xb8/0x1f0 [ 756.996834][T15544] ? __pfx_get_signal+0x10/0x10 [ 756.996869][T15544] ? do_futex+0x122/0x350 [ 756.996901][T15544] ? __pfx_do_futex+0x10/0x10 [ 756.996937][T15544] arch_do_signal_or_restart+0x8f/0x7a0 [ 756.996985][T15544] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 756.997042][T15544] ? rcu_is_watching+0x12/0xc0 [ 756.997078][T15544] syscall_exit_to_user_mode+0x150/0x2a0 [ 756.997125][T15544] do_syscall_64+0xda/0x230 [ 756.997175][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.997206][T15544] RIP: 0033:0x7fa73918e969 [ 756.997227][T15544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.997256][T15544] RSP: 002b:00007fa736ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 756.997285][T15544] RAX: fffffffffffffe00 RBX: 00007fa7393b5fa8 RCX: 00007fa73918e969 [ 756.997306][T15544] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7393b5fa8 [ 756.997325][T15544] RBP: 00007fa7393b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 756.997345][T15544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7393b5fac [ 756.997365][T15544] R13: 0000000000000000 R14: 00007ffdc4695030 R15: 00007ffdc4695118 [ 756.997403][T15544] [ 758.047833][T15547] ima: policy update failed [ 758.063705][ T30] audit: type=1802 audit(6042026913.012:20): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2010" res=0 errno=0 [ 763.204912][T15629] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 763.383766][T15631] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 764.388510][T15638] FAULT_INJECTION: forcing a failure. [ 764.388510][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.450347][T15638] CPU: 0 UID: 0 PID: 15638 Comm: syz.3.2024 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 764.450391][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.450409][T15638] Call Trace: [ 764.450419][T15638] [ 764.450431][T15638] dump_stack_lvl+0x16c/0x1f0 [ 764.450480][T15638] should_fail_ex+0x512/0x640 [ 764.450531][T15638] _copy_from_user+0x2e/0xd0 [ 764.450581][T15638] copy_msghdr_from_user+0x98/0x160 [ 764.450617][T15638] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 764.450662][T15638] ? __pfx__kstrtoull+0x10/0x10 [ 764.450707][T15638] ___sys_sendmsg+0xfe/0x1d0 [ 764.450746][T15638] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.450801][T15638] ? find_held_lock+0x2b/0x80 [ 764.450858][T15638] __sys_sendmmsg+0x200/0x420 [ 764.450916][T15638] ? __pfx___sys_sendmmsg+0x10/0x10 [ 764.450967][T15638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.451032][T15638] ? fput+0x70/0xf0 [ 764.451070][T15638] ? ksys_write+0x1b9/0x240 [ 764.451099][T15638] ? __pfx_ksys_write+0x10/0x10 [ 764.451125][T15638] ? rcu_is_watching+0x12/0xc0 [ 764.451162][T15638] __x64_sys_sendmmsg+0x9c/0x100 [ 764.451199][T15638] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.451242][T15638] do_syscall_64+0xcd/0x230 [ 764.451289][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.451321][T15638] RIP: 0033:0x7f7c9b78e969 [ 764.451346][T15638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.451377][T15638] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 764.451406][T15638] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 764.451427][T15638] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 764.451445][T15638] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 764.451462][T15638] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.451480][T15638] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 764.451520][T15638] [ 767.114479][T15666] CIFS mount error: No usable UNC path provided in device string! [ 767.114479][T15666] [ 767.140006][T15666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 769.605651][T15712] random: crng reseeded on system resumption [ 771.168942][T15724] CIFS mount error: No usable UNC path provided in device string! [ 771.168942][T15724] [ 771.187641][T15724] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 771.827373][T15737] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 772.887940][T15762] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 773.284121][T15770] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 773.474362][T15773] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 774.320995][T15774] CIFS mount error: No usable UNC path provided in device string! [ 774.320995][T15774] [ 774.337930][T15774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 775.155076][T15795] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 775.679643][T15803] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 777.213135][T15832] CIFS mount error: No usable UNC path provided in device string! [ 777.213135][T15832] [ 777.273837][T15832] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 778.078662][T15838] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.165089][T15839] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 779.128885][T15849] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[15849] [ 780.538222][T15875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2072'. [ 780.576781][T15878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.777255][T15882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.943362][T15886] FAULT_INJECTION: forcing a failure. [ 780.943362][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 781.023346][T15886] CPU: 1 UID: 0 PID: 15886 Comm: syz.3.2076 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 781.023392][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.023411][T15886] Call Trace: [ 781.023421][T15886] [ 781.023433][T15886] dump_stack_lvl+0x16c/0x1f0 [ 781.023483][T15886] should_fail_ex+0x512/0x640 [ 781.023535][T15886] should_failslab+0xc2/0x120 [ 781.023574][T15886] __kmalloc_cache_noprof+0x6a/0x3e0 [ 781.023607][T15886] ? sctp_add_bind_addr+0xae/0x3f0 [ 781.023654][T15886] sctp_add_bind_addr+0xae/0x3f0 [ 781.023702][T15886] sctp_copy_local_addr_list+0x39d/0x5a0 [ 781.023758][T15886] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 781.023816][T15886] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 781.023874][T15886] ? sctp_bind_addr_copy+0xe0/0x530 [ 781.023915][T15886] sctp_bind_addr_copy+0xe0/0x530 [ 781.023968][T15886] sctp_connect_new_asoc+0x1d7/0x790 [ 781.024008][T15886] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 781.024046][T15886] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 781.024112][T15886] __sctp_connect+0x3f3/0xc60 [ 781.024151][T15886] ? do_raw_spin_lock+0x12c/0x2b0 [ 781.024202][T15886] ? __pfx___sctp_connect+0x10/0x10 [ 781.024240][T15886] ? __pfx_sctp_inet_connect+0x10/0x10 [ 781.024277][T15886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 781.024324][T15886] ? __pfx_sctp_inet_connect+0x10/0x10 [ 781.024367][T15886] sctp_inet_connect+0x15f/0x200 [ 781.024405][T15886] __sys_connect_file+0x13e/0x1a0 [ 781.024441][T15886] __sys_connect+0x14d/0x170 [ 781.024471][T15886] ? __pfx___sys_connect+0x10/0x10 [ 781.024516][T15886] ? __pfx_ksys_write+0x10/0x10 [ 781.024544][T15886] ? rcu_is_watching+0x12/0xc0 [ 781.024582][T15886] __x64_sys_connect+0x72/0xb0 [ 781.024611][T15886] ? lockdep_hardirqs_on+0x7c/0x110 [ 781.024654][T15886] do_syscall_64+0xcd/0x230 [ 781.024703][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.024734][T15886] RIP: 0033:0x7f7c9b78e969 [ 781.024758][T15886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.024788][T15886] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 781.024816][T15886] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 781.024837][T15886] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 781.024857][T15886] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 781.024876][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.024895][T15886] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 781.024936][T15886] [ 781.313964][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.849743][T15900] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2080'. [ 783.016190][T15932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2084'. [ 783.564939][T15943] FAULT_INJECTION: forcing a failure. [ 783.564939][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 783.582737][T15943] CPU: 1 UID: 0 PID: 15943 Comm: syz.2.2087 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 783.582780][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 783.582798][T15943] Call Trace: [ 783.582808][T15943] [ 783.582819][T15943] dump_stack_lvl+0x16c/0x1f0 [ 783.582870][T15943] should_fail_ex+0x512/0x640 [ 783.582914][T15943] ? __kmalloc_noprof+0xbf/0x510 [ 783.582952][T15943] ? iovec_from_user+0x108/0x140 [ 783.582997][T15943] should_failslab+0xc2/0x120 [ 783.583035][T15943] __kmalloc_noprof+0xd2/0x510 [ 783.583079][T15943] iovec_from_user+0x108/0x140 [ 783.583142][T15943] __import_iovec+0x88/0x660 [ 783.583202][T15943] import_iovec+0x86/0xb0 [ 783.583257][T15943] copy_msghdr_from_user+0xf9/0x160 [ 783.583292][T15943] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 783.583337][T15943] ? __pfx__kstrtoull+0x10/0x10 [ 783.583382][T15943] ___sys_sendmsg+0xfe/0x1d0 [ 783.583420][T15943] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.583476][T15943] ? find_held_lock+0x2b/0x80 [ 783.583532][T15943] __sys_sendmmsg+0x200/0x420 [ 783.583573][T15943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 783.583624][T15943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 783.583689][T15943] ? fput+0x70/0xf0 [ 783.583724][T15943] ? ksys_write+0x1b9/0x240 [ 783.583753][T15943] ? __pfx_ksys_write+0x10/0x10 [ 783.583781][T15943] ? rcu_is_watching+0x12/0xc0 [ 783.583817][T15943] __x64_sys_sendmmsg+0x9c/0x100 [ 783.583853][T15943] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.583894][T15943] do_syscall_64+0xcd/0x230 [ 783.583943][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.583973][T15943] RIP: 0033:0x7f74cf58e969 [ 783.583998][T15943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.584030][T15943] RSP: 002b:00007f74d032d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 783.584059][T15943] RAX: ffffffffffffffda RBX: 00007f74cf7b5fa0 RCX: 00007f74cf58e969 [ 783.584078][T15943] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 783.584102][T15943] RBP: 00007f74d032d090 R08: 0000000000000000 R09: 0000000000000000 [ 783.584121][T15943] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.584140][T15943] R13: 0000000000000000 R14: 00007f74cf7b5fa0 R15: 00007ffc42640cb8 [ 783.584180][T15943] [ 783.841837][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.852864][T15972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2095'. [ 785.108475][T15976] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 785.152882][T15976] random: crng reseeded on system resumption [ 786.536789][T16013] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.207798][T16033] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.353794][T16041] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 788.967169][T16057] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 789.371718][T16069] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[16069] [ 790.353234][T16088] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 790.508734][T16088] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 790.642654][T16094] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2119'. [ 792.389192][T16112] CIFS mount error: No usable UNC path provided in device string! [ 792.389192][T16112] [ 792.411105][T16112] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 792.505992][T16091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 793.778240][T16134] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[16134] [ 794.424370][T16136] FAULT_INJECTION: forcing a failure. [ 794.424370][T16136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.454623][T16140] Invalid ELF header magic: != ELF [ 794.489373][T16136] CPU: 0 UID: 0 PID: 16136 Comm: syz.3.2128 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 794.489415][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.489435][T16136] Call Trace: [ 794.489444][T16136] [ 794.489456][T16136] dump_stack_lvl+0x16c/0x1f0 [ 794.489504][T16136] should_fail_ex+0x512/0x640 [ 794.489555][T16136] _copy_from_user+0x2e/0xd0 [ 794.489606][T16136] ____sys_sendmsg+0x607/0xc70 [ 794.489657][T16136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.489709][T16136] ? __pfx__kstrtoull+0x10/0x10 [ 794.489754][T16136] ___sys_sendmsg+0x134/0x1d0 [ 794.489793][T16136] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.489850][T16136] ? find_held_lock+0x2b/0x80 [ 794.489906][T16136] __sys_sendmmsg+0x200/0x420 [ 794.489948][T16136] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.489999][T16136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.490064][T16136] ? fput+0x70/0xf0 [ 794.490104][T16136] ? ksys_write+0x1b9/0x240 [ 794.490133][T16136] ? __pfx_ksys_write+0x10/0x10 [ 794.490168][T16136] ? rcu_is_watching+0x12/0xc0 [ 794.490203][T16136] __x64_sys_sendmmsg+0x9c/0x100 [ 794.490240][T16136] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.490283][T16136] do_syscall_64+0xcd/0x230 [ 794.490330][T16136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.490362][T16136] RIP: 0033:0x7f7c9b78e969 [ 794.490387][T16136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.490418][T16136] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.490447][T16136] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 794.490467][T16136] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 794.490485][T16136] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 794.490502][T16136] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.490519][T16136] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 794.490558][T16136] [ 795.371181][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2132'. [ 795.486495][T16159] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 795.588850][T16161] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 797.434121][T16185] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 798.130308][T16192] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[16192] [ 798.261621][T16191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 798.352136][T16191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 798.358980][T16191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 798.409106][T16191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 799.587373][T16207] CIFS mount error: No usable UNC path provided in device string! [ 799.587373][T16207] [ 799.600299][T16207] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 799.814659][T16210] FAULT_INJECTION: forcing a failure. [ 799.814659][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 799.833650][T16210] CPU: 1 UID: 0 PID: 16210 Comm: syz.3.2144 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 799.833697][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.833715][T16210] Call Trace: [ 799.833724][T16210] [ 799.833734][T16210] dump_stack_lvl+0x16c/0x1f0 [ 799.833781][T16210] should_fail_ex+0x512/0x640 [ 799.833827][T16210] should_failslab+0xc2/0x120 [ 799.833861][T16210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 799.833888][T16210] ? sctp_add_bind_addr+0xae/0x3f0 [ 799.833930][T16210] sctp_add_bind_addr+0xae/0x3f0 [ 799.833970][T16210] sctp_copy_local_addr_list+0x39d/0x5a0 [ 799.834027][T16210] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 799.834083][T16210] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 799.834143][T16210] ? sctp_bind_addr_copy+0xe0/0x530 [ 799.834184][T16210] sctp_bind_addr_copy+0xe0/0x530 [ 799.834237][T16210] sctp_connect_new_asoc+0x1d7/0x790 [ 799.834275][T16210] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 799.834312][T16210] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 799.834374][T16210] __sctp_connect+0x3f3/0xc60 [ 799.834411][T16210] ? do_raw_spin_lock+0x12c/0x2b0 [ 799.834460][T16210] ? __pfx___sctp_connect+0x10/0x10 [ 799.834497][T16210] ? __pfx_sctp_inet_connect+0x10/0x10 [ 799.834533][T16210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.834575][T16210] ? __pfx_sctp_inet_connect+0x10/0x10 [ 799.834608][T16210] sctp_inet_connect+0x15f/0x200 [ 799.834646][T16210] __sys_connect_file+0x13e/0x1a0 [ 799.834693][T16210] __sys_connect+0x14d/0x170 [ 799.834722][T16210] ? __pfx___sys_connect+0x10/0x10 [ 799.834767][T16210] ? __pfx_ksys_write+0x10/0x10 [ 799.834795][T16210] ? rcu_is_watching+0x12/0xc0 [ 799.834828][T16210] __x64_sys_connect+0x72/0xb0 [ 799.834852][T16210] ? lockdep_hardirqs_on+0x7c/0x110 [ 799.834894][T16210] do_syscall_64+0xcd/0x230 [ 799.834944][T16210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.834974][T16210] RIP: 0033:0x7f7c9b78e969 [ 799.834999][T16210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.835029][T16210] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 799.835059][T16210] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 799.835080][T16210] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 799.835098][T16210] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 799.835116][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.835135][T16210] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 799.835176][T16210] [ 800.138209][T16214] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 800.299321][T16214] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 800.320977][ T5139] Bluetooth: hci2: command 0x0c1a tx timeout [ 800.430288][ T5139] Bluetooth: hci1: command 0x0c1a tx timeout [ 800.440544][T15290] Bluetooth: hci0: command 0x0406 tx timeout [ 800.449152][T15290] Bluetooth: hci3: command 0x0c1a tx timeout [ 800.693645][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 802.025746][T16243] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.179847][T16268] FAULT_INJECTION: forcing a failure. [ 803.179847][T16268] name failslab, interval 1, probability 0, space 0, times 0 [ 803.208301][T16268] CPU: 1 UID: 0 PID: 16268 Comm: syz.3.2159 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 803.208350][T16268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.208369][T16268] Call Trace: [ 803.208379][T16268] [ 803.208391][T16268] dump_stack_lvl+0x16c/0x1f0 [ 803.208442][T16268] should_fail_ex+0x512/0x640 [ 803.208486][T16268] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 803.208520][T16268] should_failslab+0xc2/0x120 [ 803.208560][T16268] __kmalloc_cache_noprof+0x6a/0x3e0 [ 803.208591][T16268] ? alloc_netdev_mqs+0xf3a/0x1570 [ 803.208635][T16268] alloc_netdev_mqs+0xf3a/0x1570 [ 803.208682][T16268] ppp_ioctl+0x1761/0x2660 [ 803.208725][T16268] ? find_held_lock+0x2b/0x80 [ 803.208755][T16268] ? __pfx_ppp_ioctl+0x10/0x10 [ 803.208801][T16268] ? __fget_files+0x20e/0x3c0 [ 803.208855][T16268] ? __pfx_ppp_ioctl+0x10/0x10 [ 803.208896][T16268] __x64_sys_ioctl+0x190/0x200 [ 803.208943][T16268] do_syscall_64+0xcd/0x230 [ 803.208991][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.209019][T16268] RIP: 0033:0x7f7c9b78e969 [ 803.209049][T16268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.209078][T16268] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.209106][T16268] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 803.209127][T16268] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 803.209146][T16268] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 803.209165][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.209182][T16268] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 803.209223][T16268] [ 803.718764][T16281] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.797447][T16282] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.885361][T16285] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.978306][T16287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 805.876228][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1371 with max blocks 19 with error 117 [ 805.928830][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 805.928830][ T13] [ 805.944842][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 938 with max blocks 5 with error 117 [ 805.959309][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 805.959309][ T13] [ 806.920637][T16339] openvswitch: HfR: Dropping previously announced user features [ 807.107921][T16342] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 937 with max blocks 1 with error 117 [ 807.145697][T16345] FAULT_INJECTION: forcing a failure. [ 807.145697][T16345] name failslab, interval 1, probability 0, space 0, times 0 [ 807.178057][T16338] CIFS mount error: No usable UNC path provided in device string! [ 807.178057][T16338] [ 807.189382][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.3.2177 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 807.189423][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.189442][T16345] Call Trace: [ 807.189452][T16345] [ 807.189463][T16345] dump_stack_lvl+0x16c/0x1f0 [ 807.189514][T16345] should_fail_ex+0x512/0x640 [ 807.189565][T16345] should_failslab+0xc2/0x120 [ 807.189605][T16345] __kmalloc_cache_noprof+0x6a/0x3e0 [ 807.189637][T16345] ? sctp_add_bind_addr+0xae/0x3f0 [ 807.189685][T16345] sctp_add_bind_addr+0xae/0x3f0 [ 807.189732][T16345] sctp_copy_local_addr_list+0x39d/0x5a0 [ 807.189785][T16345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 807.189839][T16345] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 807.189896][T16345] ? sctp_bind_addr_copy+0xe0/0x530 [ 807.189938][T16345] sctp_bind_addr_copy+0xe0/0x530 [ 807.189999][T16345] sctp_connect_new_asoc+0x1d7/0x790 [ 807.190038][T16345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 807.190080][T16345] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 807.190143][T16345] __sctp_connect+0x3f3/0xc60 [ 807.190184][T16345] ? do_raw_spin_lock+0x12c/0x2b0 [ 807.190233][T16345] ? __pfx___sctp_connect+0x10/0x10 [ 807.190271][T16345] ? __pfx_sctp_inet_connect+0x10/0x10 [ 807.190308][T16345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 807.190355][T16345] ? __pfx_sctp_inet_connect+0x10/0x10 [ 807.190386][T16345] sctp_inet_connect+0x15f/0x200 [ 807.190422][T16345] __sys_connect_file+0x13e/0x1a0 [ 807.190456][T16345] __sys_connect+0x14d/0x170 [ 807.190484][T16345] ? __pfx___sys_connect+0x10/0x10 [ 807.190527][T16345] ? __pfx_ksys_write+0x10/0x10 [ 807.190555][T16345] ? rcu_is_watching+0x12/0xc0 [ 807.190591][T16345] __x64_sys_connect+0x72/0xb0 [ 807.190618][T16345] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.190658][T16345] do_syscall_64+0xcd/0x230 [ 807.190707][T16345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.190740][T16345] RIP: 0033:0x7f7c9b78e969 [ 807.190765][T16345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.190795][T16345] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 807.190824][T16345] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 807.190845][T16345] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 807.190863][T16345] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 807.190882][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.190901][T16345] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 807.190949][T16345] [ 807.491851][T16342] EXT4-fs (sda1): This should not happen!! Data will be lost [ 807.491851][T16342] [ 807.537820][T16338] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 808.096190][T16363] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 809.027547][T16375] FAULT_INJECTION: forcing a failure. [ 809.027547][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 809.083333][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.4.2182 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 809.083377][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.083396][T16375] Call Trace: [ 809.083406][T16375] [ 809.083418][T16375] dump_stack_lvl+0x16c/0x1f0 [ 809.083469][T16375] should_fail_ex+0x512/0x640 [ 809.083514][T16375] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 809.083550][T16375] should_failslab+0xc2/0x120 [ 809.083597][T16375] __kmalloc_cache_noprof+0x6a/0x3e0 [ 809.083628][T16375] ? vsnprintf+0x318/0x1160 [ 809.083666][T16375] ? __alloc_workqueue+0xda2/0x1810 [ 809.083712][T16375] __alloc_workqueue+0xda2/0x1810 [ 809.083752][T16375] ? __pfx_vsnprintf+0x10/0x10 [ 809.083814][T16375] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.083858][T16375] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 809.083904][T16375] alloc_workqueue+0xd2/0x200 [ 809.083944][T16375] ? __pfx_alloc_workqueue+0x10/0x10 [ 809.083993][T16375] ? __pfx___debug_object_init+0x10/0x10 [ 809.084036][T16375] nci_register_device+0x21e/0xb80 [ 809.084077][T16375] ? __pfx_nci_register_device+0x10/0x10 [ 809.084123][T16375] ? lockdep_init_map_type+0x5c/0x280 [ 809.084172][T16375] virtual_ncidev_open+0x141/0x220 [ 809.084218][T16375] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 809.084263][T16375] misc_open+0x35a/0x420 [ 809.084311][T16375] ? __pfx_misc_open+0x10/0x10 [ 809.084359][T16375] chrdev_open+0x231/0x6a0 [ 809.084391][T16375] ? __pfx_apparmor_file_open+0x10/0x10 [ 809.084431][T16375] ? __pfx_chrdev_open+0x10/0x10 [ 809.084467][T16375] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 809.084522][T16375] do_dentry_open+0x741/0x1c10 [ 809.084554][T16375] ? __pfx_chrdev_open+0x10/0x10 [ 809.084595][T16375] vfs_open+0x82/0x3f0 [ 809.084640][T16375] path_openat+0x1e5e/0x2d40 [ 809.084684][T16375] ? __pfx_path_openat+0x10/0x10 [ 809.084724][T16375] do_filp_open+0x20b/0x470 [ 809.084755][T16375] ? __pfx_do_filp_open+0x10/0x10 [ 809.084820][T16375] ? alloc_fd+0x471/0x7d0 [ 809.084879][T16375] do_sys_openat2+0x11b/0x1d0 [ 809.084919][T16375] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.084976][T16375] __x64_sys_openat+0x174/0x210 [ 809.085018][T16375] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.085061][T16375] ? rcu_is_watching+0x12/0xc0 [ 809.085102][T16375] do_syscall_64+0xcd/0x230 [ 809.085149][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.085180][T16375] RIP: 0033:0x7fa73918e969 [ 809.085204][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.085235][T16375] RSP: 002b:00007fa736ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.085264][T16375] RAX: ffffffffffffffda RBX: 00007fa7393b5fa0 RCX: 00007fa73918e969 [ 809.085285][T16375] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 809.085305][T16375] RBP: 00007fa739210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 809.085324][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.085342][T16375] R13: 0000000000000000 R14: 00007fa7393b5fa0 R15: 00007ffdc4695118 [ 809.085383][T16375] [ 809.434496][T16379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2183'. [ 809.886108][T16389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 809.937299][T16383] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 810.090741][T16394] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 810.706722][T16411] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2192'. [ 810.778317][T16411] binder: 16410:16411 ioctl c0306201 0 returned -14 [ 811.430495][T16427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2194'. [ 811.925233][T16431] FAULT_INJECTION: forcing a failure. [ 811.925233][T16431] name failslab, interval 1, probability 0, space 0, times 0 [ 811.954867][T16431] CPU: 0 UID: 0 PID: 16431 Comm: syz.3.2196 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 811.954906][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.954922][T16431] Call Trace: [ 811.954930][T16431] [ 811.954940][T16431] dump_stack_lvl+0x16c/0x1f0 [ 811.954982][T16431] should_fail_ex+0x512/0x640 [ 811.955026][T16431] should_failslab+0xc2/0x120 [ 811.955058][T16431] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 811.955101][T16431] ? dst_alloc+0x99/0x1a0 [ 811.955131][T16431] dst_alloc+0x99/0x1a0 [ 811.955158][T16431] rt_dst_alloc+0x35/0x3a0 [ 811.955193][T16431] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 811.955253][T16431] ip_route_output_key_hash+0x137/0x2e0 [ 811.955295][T16431] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 811.955335][T16431] ? stack_trace_save+0x8e/0xc0 [ 811.955377][T16431] tcp_v4_connect+0x7e2/0x1ba0 [ 811.955424][T16431] ? __pfx_tcp_v4_connect+0x10/0x10 [ 811.955471][T16431] __inet_stream_connect+0x3c5/0x1020 [ 811.955518][T16431] ? __pfx___inet_stream_connect+0x10/0x10 [ 811.955573][T16431] tcp_sendmsg_fastopen+0x3ed/0x750 [ 811.955619][T16431] tcp_sendmsg_locked+0x203a/0x3930 [ 811.955667][T16431] ? __lock_acquire+0xaa4/0x1ba0 [ 811.955711][T16431] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 811.955752][T16431] ? do_raw_spin_lock+0x12c/0x2b0 [ 811.955790][T16431] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 811.955837][T16431] ? __local_bh_enable_ip+0xa4/0x120 [ 811.955872][T16431] tcp_sendmsg+0x2e/0x50 [ 811.955906][T16431] ? __pfx_tcp_sendmsg+0x10/0x10 [ 811.955942][T16431] inet_sendmsg+0xb9/0x140 [ 811.955980][T16431] ____sys_sendmsg+0x973/0xc70 [ 811.956022][T16431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.956065][T16431] ? __pfx__kstrtoull+0x10/0x10 [ 811.956101][T16431] ___sys_sendmsg+0x134/0x1d0 [ 811.956134][T16431] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.956180][T16431] ? find_held_lock+0x2b/0x80 [ 811.956230][T16431] __sys_sendmmsg+0x200/0x420 [ 811.956265][T16431] ? __pfx___sys_sendmmsg+0x10/0x10 [ 811.956306][T16431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 811.956360][T16431] ? fput+0x70/0xf0 [ 811.956389][T16431] ? ksys_write+0x1b9/0x240 [ 811.956413][T16431] ? __pfx_ksys_write+0x10/0x10 [ 811.956435][T16431] ? rcu_is_watching+0x12/0xc0 [ 811.956465][T16431] __x64_sys_sendmmsg+0x9c/0x100 [ 811.956495][T16431] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.956530][T16431] do_syscall_64+0xcd/0x230 [ 811.956570][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.956596][T16431] RIP: 0033:0x7f7c9b78e969 [ 811.956616][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.956643][T16431] RSP: 002b:00007f7c9c61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 811.956667][T16431] RAX: ffffffffffffffda RBX: 00007f7c9b9b5fa0 RCX: 00007f7c9b78e969 [ 811.956685][T16431] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 811.956700][T16431] RBP: 00007f7c9c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 811.956716][T16431] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.956732][T16431] R13: 0000000000000000 R14: 00007f7c9b9b5fa0 R15: 00007ffc186db9d8 [ 811.956766][T16431] [ 813.798384][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.806681][T16464] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 813.816098][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.174959][T16475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2205'. [ 814.308252][T16461] CIFS mount error: No usable UNC path provided in device string! [ 814.308252][T16461] [ 814.328055][T16461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 815.060477][T16488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2207'. [ 815.478749][T16499] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 816.628690][T16523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 817.154034][T16532] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[16532] [ 817.574427][T16536] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[16536] [ 818.372952][T16540] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2222'. [ 819.449850][T16565] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 819.577775][T16566] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 819.708885][T16569] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 819.751194][T16562] i2c i2c-0: new_device: Can't parse I2C address [ 820.107875][T16574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2231'. [ 821.462016][T16602] random: crng reseeded on system resumption [ 821.936509][T16597] bond0: option all_slaves_active: invalid value () [ 822.433526][T16626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2242'. [ 822.939002][T16635] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[16635] [ 823.363816][T16640] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 824.423510][T16656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 826.289990][T16674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2252'. [ 826.834399][T16689] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 826.957026][T16684] CIFS mount error: No usable UNC path provided in device string! [ 826.957026][T16684] [ 826.996683][T16684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 827.275657][T16694] binder: 16693:16694 unknown command 1718380910 [ 827.312955][T16694] binder: 16693:16694 ioctl c0306201 0 returned -22 [ 827.758775][T16705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 828.613444][T16711] CIFS mount error: No usable UNC path provided in device string! [ 828.613444][T16711] [ 828.661786][T16711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 829.243220][T16720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2263'. [ 829.399242][T16723] openvswitch: HfR: Dropping previously announced user features [ 829.642714][T16726] kernel read not supported for file /set_event_notrace_pid (pid: 16726 comm: syz.4.2264) [ 829.731583][ T30] audit: type=1800 audit(8189510632.682:21): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2264" name="set_event_notrace_pid" dev="tracefs" ino=29 res=0 errno=0 [ 830.567483][T16740] ptrace attach of "./syz-executor exec"[10223] was attempted by "./syz-executor exec"[16740] [ 831.024263][T16744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 831.784069][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2273'. [ 832.866300][T16773] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 832.911823][T16778] random: crng reseeded on system resumption [ 833.838144][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2283'. [ 835.057042][T16825] binder: 16824:16825 unknown command 3 [ 835.074158][T16825] binder: 16824:16825 ioctl c0306201 0 returned -22 [ 836.056968][T16850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2292'. [ 836.273974][ T1015] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1371 with max blocks 19 with error 117 [ 836.311080][ T1015] EXT4-fs (sda1): This should not happen!! Data will be lost [ 836.311080][ T1015] [ 836.914715][T16867] openvswitch: HfR: Dropping previously announced user features [ 837.294433][T16860] CIFS mount error: No usable UNC path provided in device string! [ 837.294433][T16860] [ 837.307585][T16860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 838.417420][T16887] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.757294][T16894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2302'. [ 838.829317][T16891] ptrace attach of "./syz-executor exec"[8430] was attempted by "./syz-executor exec"[16891] [ 839.172028][T16904] ptrace attach of "./syz-executor exec"[9684] was attempted by "./syz-executor exec"[16904] [ 840.715018][T16934] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1363 with max blocks 8 with error 117 [ 840.730394][T16934] EXT4-fs (sda1): This should not happen!! Data will be lost [ 840.730394][T16934] [ 840.906284][T16934] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[16934] [ 841.647993][T16944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2313'. [ 841.672374][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 842.087997][T16953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 842.175178][T16954] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 842.309183][T16956] .SR: entered promiscuous mode [ 842.493456][T16956] Invalid ELF header magic: != ELF [ 843.298016][T16966] FAULT_INJECTION: forcing a failure. [ 843.298016][T16966] name failslab, interval 1, probability 0, space 0, times 0 [ 843.340310][T16966] CPU: 0 UID: 0 PID: 16966 Comm: syz.2.2319 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 843.340357][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 843.340376][T16966] Call Trace: [ 843.340385][T16966] [ 843.340396][T16966] dump_stack_lvl+0x16c/0x1f0 [ 843.340449][T16966] should_fail_ex+0x512/0x640 [ 843.340496][T16966] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 843.340532][T16966] should_failslab+0xc2/0x120 [ 843.340580][T16966] __kmalloc_cache_noprof+0x6a/0x3e0 [ 843.340611][T16966] ? vsnprintf+0x318/0x1160 [ 843.340650][T16966] ? __alloc_workqueue+0xda2/0x1810 [ 843.340696][T16966] __alloc_workqueue+0xda2/0x1810 [ 843.340736][T16966] ? __pfx_vsnprintf+0x10/0x10 [ 843.340775][T16966] ? lockdep_hardirqs_on+0x7c/0x110 [ 843.340816][T16966] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 843.340858][T16966] alloc_workqueue+0xd2/0x200 [ 843.340895][T16966] ? __pfx_alloc_workqueue+0x10/0x10 [ 843.340941][T16966] ? __pfx___debug_object_init+0x10/0x10 [ 843.340982][T16966] nci_register_device+0x21e/0xb80 [ 843.341022][T16966] ? __pfx_nci_register_device+0x10/0x10 [ 843.341064][T16966] ? lockdep_init_map_type+0x5c/0x280 [ 843.341110][T16966] virtual_ncidev_open+0x141/0x220 [ 843.341155][T16966] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 843.341198][T16966] misc_open+0x35a/0x420 [ 843.341244][T16966] ? __pfx_misc_open+0x10/0x10 [ 843.341289][T16966] chrdev_open+0x231/0x6a0 [ 843.341320][T16966] ? __pfx_apparmor_file_open+0x10/0x10 [ 843.341358][T16966] ? __pfx_chrdev_open+0x10/0x10 [ 843.341392][T16966] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 843.341444][T16966] do_dentry_open+0x741/0x1c10 [ 843.341474][T16966] ? __pfx_chrdev_open+0x10/0x10 [ 843.341512][T16966] vfs_open+0x82/0x3f0 [ 843.341561][T16966] path_openat+0x1e5e/0x2d40 [ 843.341606][T16966] ? __pfx_path_openat+0x10/0x10 [ 843.341646][T16966] do_filp_open+0x20b/0x470 [ 843.341675][T16966] ? __pfx_do_filp_open+0x10/0x10 [ 843.341731][T16966] ? alloc_fd+0x471/0x7d0 [ 843.341789][T16966] do_sys_openat2+0x11b/0x1d0 [ 843.341828][T16966] ? __pfx_do_sys_openat2+0x10/0x10 [ 843.341882][T16966] __x64_sys_openat+0x174/0x210 [ 843.341922][T16966] ? __pfx___x64_sys_openat+0x10/0x10 [ 843.341965][T16966] ? rcu_is_watching+0x12/0xc0 [ 843.342002][T16966] do_syscall_64+0xcd/0x230 [ 843.342048][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.342078][T16966] RIP: 0033:0x7f74cf58e969 [ 843.342101][T16966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.342131][T16966] RSP: 002b:00007f74d032d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 843.342159][T16966] RAX: ffffffffffffffda RBX: 00007f74cf7b5fa0 RCX: 00007f74cf58e969 [ 843.342179][T16966] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 843.342198][T16966] RBP: 00007f74cf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 843.342217][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.342234][T16966] R13: 0000000000000000 R14: 00007f74cf7b5fa0 R15: 00007ffc42640cb8 [ 843.342274][T16966] [ 843.564902][T16956] could not allocate digest TFM handle [ 843.813193][T16961] could not allocate digest TFM handle [ 845.754709][T17017] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 845.793079][T17017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2327'. [ 845.803980][T17017] caif0: entered promiscuous mode [ 851.223254][T17078] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 851.301707][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2339'. [ 851.406132][T17078] caif0: entered promiscuous mode [ 852.502354][T17089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2342'. [ 853.030796][T17093] binder: 17092:17093 ioctl c0306201 0 returned -14 [ 853.105936][T17094] binder: 17091:17094 ioctl c0306201 0 returned -14 [ 853.367273][T17096] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 853.492084][T17098] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2346'. [ 853.509781][T17098] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2346'. [ 853.692061][T17101] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 855.213183][T17103] kernel read not supported for file /set_event_notrace_pid (pid: 17103 comm: syz.3.2348) [ 855.235643][ T30] audit: type=1800 audit(8189510658.172:22): pid=17103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2348" name="set_event_notrace_pid" dev="tracefs" ino=29 res=0 errno=0 [ 855.732946][T17126] FAULT_INJECTION: forcing a failure. [ 855.732946][T17126] name failslab, interval 1, probability 0, space 0, times 0 [ 855.747430][T17126] CPU: 1 UID: 0 PID: 17126 Comm: syz.3.2353 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 855.747471][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.747485][T17126] Call Trace: [ 855.747493][T17126] [ 855.747501][T17126] dump_stack_lvl+0x16c/0x1f0 [ 855.747542][T17126] should_fail_ex+0x512/0x640 [ 855.747576][T17126] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 855.747600][T17126] should_failslab+0xc2/0x120 [ 855.747627][T17126] __kmalloc_cache_noprof+0x6a/0x3e0 [ 855.747647][T17126] ? rcu_is_watching+0x12/0xc0 [ 855.747667][T17126] ? s_start+0x7b/0x320 [ 855.747698][T17126] s_start+0x7b/0x320 [ 855.747728][T17126] seq_read_iter+0x2be/0x12c0 [ 855.747773][T17126] seq_read+0x39e/0x4e0 [ 855.747804][T17126] ? __pfx_seq_read+0x10/0x10 [ 855.747849][T17126] ? get_pid_task+0xfc/0x250 [ 855.747890][T17126] ? __mutex_trylock_common+0xe9/0x250 [ 855.747931][T17126] ? rw_verify_area+0xcf/0x680 [ 855.747963][T17126] ? __pfx_seq_read+0x10/0x10 [ 855.747995][T17126] vfs_read+0x1de/0xc70 [ 855.748019][T17126] ? __pfx___mutex_lock+0x10/0x10 [ 855.748050][T17126] ? __pfx_vfs_read+0x10/0x10 [ 855.748078][T17126] ? __fget_files+0x20e/0x3c0 [ 855.748121][T17126] ksys_read+0x12a/0x240 [ 855.748141][T17126] ? __pfx_ksys_read+0x10/0x10 [ 855.748159][T17126] ? rcu_is_watching+0x12/0xc0 [ 855.748186][T17126] do_syscall_64+0xcd/0x230 [ 855.748220][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.748242][T17126] RIP: 0033:0x7f7c9b78e969 [ 855.748267][T17126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.748291][T17126] RSP: 002b:00007f7c9c5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 855.748311][T17126] RAX: ffffffffffffffda RBX: 00007f7c9b9b6160 RCX: 00007f7c9b78e969 [ 855.748327][T17126] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 855.748341][T17126] RBP: 00007f7c9c5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 855.748355][T17126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.748368][T17126] R13: 0000000000000000 R14: 00007f7c9b9b6160 R15: 00007ffc186db9d8 [ 855.748397][T17126] [ 855.748465][T17126] [ 855.987699][T17126] ===================================== [ 855.993786][T17126] WARNING: bad unlock balance detected! [ 855.999880][T17126] 6.15.0-rc6-syzkaller #0 Not tainted [ 856.005798][T17126] ------------------------------------- [ 856.011896][T17126] syz.3.2353/17126 is trying to release lock (event_mutex) at: [ 856.020200][T17126] [] seq_read_iter+0x60d/0x12c0 [ 856.027281][T17126] but there are no more locks to release! [ 856.033561][T17126] [ 856.033561][T17126] other info that might help us debug this: [ 856.042425][T17126] 2 locks held by syz.3.2353/17126: [ 856.048141][T17126] #0: ffff88807f3a29b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 856.058119][T17126] #1: ffff88806509b0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 856.067910][T17126] [ 856.067910][T17126] stack backtrace: [ 856.074385][T17126] CPU: 1 UID: 0 PID: 17126 Comm: syz.3.2353 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 856.074413][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.074427][T17126] Call Trace: [ 856.074435][T17126] [ 856.074443][T17126] dump_stack_lvl+0x116/0x1f0 [ 856.074478][T17126] ? seq_read_iter+0x60d/0x12c0 [ 856.074511][T17126] print_unlock_imbalance_bug+0x11b/0x130 [ 856.074540][T17126] ? seq_read_iter+0x60d/0x12c0 [ 856.074571][T17126] lock_release+0x242/0x2f0 [ 856.074601][T17126] __mutex_unlock_slowpath+0xa2/0x6a0 [ 856.074635][T17126] ? rcu_is_watching+0x12/0xc0 [ 856.074656][T17126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 856.074692][T17126] ? rcu_is_watching+0x12/0xc0 [ 856.074712][T17126] ? kfree+0x252/0x4d0 [ 856.074729][T17126] ? __kasan_kmalloc+0x8a/0xb0 [ 856.074754][T17126] seq_read_iter+0x60d/0x12c0 [ 856.074789][T17126] seq_read+0x39e/0x4e0 [ 856.074827][T17126] ? __pfx_seq_read+0x10/0x10 [ 856.074866][T17126] ? get_pid_task+0xfc/0x250 [ 856.074898][T17126] ? __mutex_trylock_common+0xe9/0x250 [ 856.074933][T17126] ? rw_verify_area+0xcf/0x680 [ 856.074965][T17126] ? __pfx_seq_read+0x10/0x10 [ 856.074994][T17126] vfs_read+0x1de/0xc70 [ 856.075015][T17126] ? __pfx___mutex_lock+0x10/0x10 [ 856.075045][T17126] ? __pfx_vfs_read+0x10/0x10 [ 856.075068][T17126] ? __fget_files+0x20e/0x3c0 [ 856.075105][T17126] ksys_read+0x12a/0x240 [ 856.075123][T17126] ? __pfx_ksys_read+0x10/0x10 [ 856.075142][T17126] ? rcu_is_watching+0x12/0xc0 [ 856.075164][T17126] do_syscall_64+0xcd/0x230 [ 856.075196][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.075218][T17126] RIP: 0033:0x7f7c9b78e969 [ 856.075242][T17126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.075265][T17126] RSP: 002b:00007f7c9c5dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 856.075285][T17126] RAX: ffffffffffffffda RBX: 00007f7c9b9b6160 RCX: 00007f7c9b78e969 [ 856.075301][T17126] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 856.075315][T17126] RBP: 00007f7c9c5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 856.075329][T17126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.075343][T17126] R13: 0000000000000000 R14: 00007f7c9b9b6160 R15: 00007ffc186db9d8 [ 856.075364][T17126] [ 856.391720][T17118] serio: Serial port pty64 [ 856.557534][T17129] ptrace attach of "./syz-executor exec"[10974] was attempted by "./syz-executor exec"[17129]