last executing test programs: 7.024824282s ago: executing program 0 (id=2898): sysfs$auto(0xe, 0xfffffffffffffffd, 0x100000000001) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) ioctl$auto(0x3, 0x80045439, 0x10000000000402) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000280)="352c8efa618c0bcf", 0x8) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r2, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x28, r5, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0xffffffffffffff54}}, 0x8080) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) 5.874114334s ago: executing program 3 (id=2902): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r3, 0x0, 0x80) write$auto(0xffffffffffffffff, 0x0, 0x2000000005) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r4, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ioctl$auto(0xffffffffffffffff, 0xc1205531, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x8000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x0, 0xe, 0xffffffffffffffff}) prctl$auto(0x4, 0x5, r5, 0x51, 0x7fffffffffffffff) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000340)=""/227, 0xe3) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) 5.745008578s ago: executing program 0 (id=2903): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r0, 0x0, 0x45c) unshare$auto(0x40000080) unshare$auto(0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r3, @ANYBLOB="8eba53f18d29a2235a84b0c2bea96e7ced55b29d47cf64ffc4bd074d9d51e3ecb76552126c0b429abd9771a35a2a21dc09a9cf644fac61b7beadc3875eec7a4c3204ea4ea7ead00106c5d9ba16161c412b5a0045515af46748eb8d8ab2bf1f7239a75b17641ade1fb1869b8be532c8c119"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x5c901, 0x80) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="205c2020027e0dc0203af10e9bfa1babfa203753ca9a20370a", 0x19) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000100)={{@raw=0x300, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d20600a5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000680)=0xfff, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000600)='/dev/midi2\x00', 0x800, 0x0) futimesat$auto(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xe}) 5.741431717s ago: executing program 2 (id=2904): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2aa82, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r1, 0x8000) mincore$auto(0x4001000, 0x4000000, 0x0) 5.37202913s ago: executing program 1 (id=2905): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = io_uring_setup$auto(0x86, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi20\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "00ff00", "01000002", "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000001080)={0x0, 0x9}, 0x2, 0x1000, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)=@bpf_attr_3={0x2, 0x6, 0x2f96, 0x10001, 0xffff1f07, 0x6, 0x8, 0x9, 0x4, "5c632cffeb9d2f2480f7c341d506f3ee", r3, 0x1000, r0, 0xd990, 0x7ff, 0x6, 0x4, 0x0, 0x1, 0x1bf, @attach_btf_obj_fd=r2, 0x9, 0x5, 0x3, 0x7, 0xfffffffd, r1, r2}, 0xffffbec2) io_uring_setup$auto(0xffd, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/options/sym-offset\x00', 0x900, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xc048aeca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) ioperm$auto(0x1ff, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc48}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 5.241779412s ago: executing program 0 (id=2906): io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x3, 0x8, 0x0, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='k', 0x85) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x5a5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 5.204624786s ago: executing program 2 (id=2907): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x100000000000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0xb, 0x44d4}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) write$auto(0x3, 0x0, 0xfdef) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8000006, 0x1, 0x81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c05, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0x2, 0xc}, 0x4, &(0x7f0000000080)={0x8000000000000000, 0x7fff}, &(0x7f0000000100)={0x3}, 0x8) write$auto(r1, 0x0, 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x3100000000, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x8, 0x4000400008, 0xdc, 0x9b72, r2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd2\x00', 0x200, 0x0) 4.25485717s ago: executing program 3 (id=2908): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x7, 0x6, [{r0, 0x0, 0xc87, 0xfffffffffffffffc}, {r3, 0x0, 0x0, 0xd}, {r5, 0x0, 0x1000, 0x3}, {r0, 0x0, 0x8, 0x800}]}) ioctl$auto_FS_IOC_GETFLAGS2(r6, 0x80086601, &(0x7f0000000380)=0xfffffffffffff621) r7 = socket(0x2b, 0x1, 0x1) ioctl$auto(r7, 0x8901, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 4.178740075s ago: executing program 2 (id=2909): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r3, 0x0, 0x80) write$auto(0xffffffffffffffff, 0x0, 0x2000000005) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r4, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ioctl$auto(0xffffffffffffffff, 0xc1205531, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x8000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x0, 0xe, 0xffffffffffffffff}) prctl$auto(0x4, 0x5, r5, 0x51, 0x7fffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) 3.638711027s ago: executing program 3 (id=2910): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x98901, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES2(r0, 0x80489439, &(0x7f0000000180)=[{0xfffffffffffff811, 0x6, 0x3}, {0x7, 0x40, 0x3}, {0x8000000000000001, 0x1, 0x8}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000ebf, 0xffffffffffffffff, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r3 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000340), r1) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x0, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x44) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x200400, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) adjtimex$auto(&(0x7f0000000440)={0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff00, 0x8, 0x0, 0x2, 0x0, 0x9, 0x100000000, 0xb4, {0xffffffffffffac55}, 0x0, 0x7, 0x1aaa, 0x4, 0x0, 0x4, 0xf442, 0x81, 0x200, 0xdc, 0xa}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, r1, 0x0) prctl$auto(0x1000000003b, 0x7, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x181101, 0x0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb15}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, "e4107b4f7fe1f2b7e265965d8d2d7d4c"}, @NL80211_ATTR_MESH_ID={0x16, 0x18, "5acd7a9fb97b2c5d1f40426adcc7703c8822"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x3}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x4004004) write$auto(r7, &(0x7f0000000040)='nbd\x00', 0x4) setresuid$auto(0x2, 0x7, 0x8080) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40601, 0x0) write$auto(r8, 0x0, 0x0) ioprio_get$auto(0x3, 0x2) 3.638128947s ago: executing program 1 (id=2918): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) sysfs$auto(0x2, 0x2, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x220000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="810b25bd7000ffdbdf253200000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 3.386954468s ago: executing program 1 (id=2911): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x68, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/effective_affinity\x00', 0x40000, 0x0) statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x6, 0x5, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x50a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x24]}, 0x1fe, 0xd) r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf2502000000080003000400000008000200ec02000008000100ffff0000080002000000000008000300ffffffff080002000600000008000200ff010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x17c, r2, 0x100, 0x8, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x168, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x56, 0x1, "f80e39539ee2008983f1973ff1d0b3f7b3796fbb20e14e93cb3417dca9c4e79f026be071e6ed85b2c52b3624256769519524cc8bb79c8c4cf892e9171c0a3bb39d8fcf41c5c2a7603e6f444a2e4072bf1052"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x8, 0x2, 'HSR\x00'}, @NFSD_A_SOCK_ADDR={0x88, 0x1, "32972493f9b53f6f781e811272ef1a54af0ce2125b63c5ccf8e82897cdec9f132574eedc4b8c20909d212cb40ef3238bfc2326d5246d1bac74248f4df9b285c2f69bfdd992de44209f195b7a9ecc6342fe4892063e9d855f55e3f5c6ea77602e87a4a69498b14ae9483bd3fb3c457d254790f50d9529dd74133c7122168ddd70115de611"}, @NFSD_A_SOCK_ADDR={0x7a, 0x1, "774439d393c756f922e211d8abe8b142d5f6bcd4fcce43aacc7931bfd7e8db552580ddb6ae3e770ab3d721c2d34fae95cbdfd47f98f1abebab5aaf24ae5ad3b8e053ffce768f7d4db4ed1cee0da3e55935429086b8e0eacd1469b4341e35064a1e6d53242d9fb505ac5453e10d5f532f707e27d7a413"}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200490c4) msgctl$auto(0xfff, 0x2, &(0x7f0000000300)={{0x2, 0xee00, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x7ff}, &(0x7f00000001c0)=0x7c, &(0x7f00000002c0)=0x4e, 0x7fff, 0x4, 0xd4, 0x9, 0x8, 0x3, 0x2, 0x6, @inferred, @raw=0x8001}) keyctl$auto(0x1001d, 0xffffffffffffffff, 0x5, r4, 0x9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000700)={0x0, 0x40}, 0x3) 3.002012506s ago: executing program 2 (id=2912): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x155) mmap$auto(0x4, 0x400002, 0xdc, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct$auto(0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0x0, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0xea, 0xd, 0x2, 0x400000000000948b, 0x7, 0x15f4da0a, 0x5, 0x3, 0x62, 0x7ff, 0x3, 0x401, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(r0, &(0x7f0000000380)="7c85620f4a263773c8393b9112e834be2372fe4a054f27a66f40f019f571de850e8fdeed6313e42ba1368baf70d418481bac6b420be85d13b6244295e474775d550f281e2febc4a9a608638d43c6a2f40d0da93234fca86a43af19f2fc77c810526c10e9c6e8a6f4a664e3c18f9cd7cd25a34cd1f4a796ac095e319ff84b0f76b4271040aaa01cf8cac2cf74dd0ea4aca8a78326f69dc7f9dca572462feee7b317b3b252d9609441ded03bd50695457720bc9c5dd18ca50636886f3a20c73ed325564482528efa8b58b80c4ca763e6a7e227c541aa9263f53b034123cd4a8033d40660", 0x3ff, 0x73, &(0x7f0000000200)=@ethernet={0x1, @broadcast}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r3, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003680)={'wlan0\x00'}) 2.718972116s ago: executing program 1 (id=2913): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x20000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x10, 0xffffffffffffff81, 0x7fa4826e, 0x19, 0x2, 0x100000001) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) setfsuid$auto(0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a1400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000807c) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="04000000027e0dc0023acb0c00000c000000fad4de9a20350a", 0x19) 2.53485439s ago: executing program 0 (id=2914): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) msgctl$auto_MSG_INFO(0x9, 0xc, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000080) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x200400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) adjtimex$auto(&(0x7f0000000440)={0x6, 0x0, 0xfffffffffffffffe, 0xffffffffffffff00, 0x8, 0x0, 0x2, 0x0, 0x9, 0x100000000, 0xb4, {0xffffffffffffac55}, 0x0, 0x7, 0x1aaa, 0x4, 0x0, 0x4, 0xf442, 0x81, 0x200, 0xdc, 0xa}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, r0, 0x0) prctl$auto(0x1000000003b, 0x7, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0xfffffffb, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x181101, 0x0) write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) 2.419873173s ago: executing program 3 (id=2915): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) open(0x0, 0x64842, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kpagecount\x00', 0x20c400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x204, 0x15f4da0a, 0x1, 0x8003, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x9]}, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r3, 0x4, 0x1ff, r1, @relative_fd=r0, 0xe600}, 0xf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 1.904315153s ago: executing program 2 (id=2916): mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyzf\x00', 0x610000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x1) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r3, 0xb21064a7, 0x20000a) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r4) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [0xd2, 0xfffffffc], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0x20d, 0xfffffff8, 0x18, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1182, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) select$auto(0x11, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x5, 0xc, 0x40, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x8, 0x8000001f, 0xfffffffffffffffd, 0x6d3d, 0x7, 0x3, 0x8]}, 0x0) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x44000) select$auto(0x9, &(0x7f0000000180)={[0xeeda, 0x9, 0x100000001, 0x9, 0x6, 0x1ff, 0x5, 0x1, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8f, 0x7, 0x8001]}, 0x0, &(0x7f0000000100)={[0x8000000000000005, 0x5, 0xfffffffff7fffffd, 0x10001, 0x1, 0xf, 0x1, 0x150, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x2, 0x7, 0x1ff, 0x5]}, &(0x7f0000000240)={0x4, 0x4}) close_range$auto(0x2, 0x8, 0x0) 1.614368879s ago: executing program 1 (id=2917): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f0000000240)={{0x1, 0xee00, 0xee00, 0x1d91d1ba, 0xa4b, 0x1, 0x7ff}, 0x400, 0xa4b, 0xffffffffffffffff, 0x88c, @inferred=0xffffffffffffffff, @raw=0x400, 0x0, 0x0, &(0x7f00000006c0)="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", &(0x7f0000000340)="da8352c132b895c0c605451caa89421ea13c36c22bd70b2705aebe2b8c7f1a8f32172e1e0205e4bb4af47c575b7a3e67a261d5a94847f61b9be806aadb3c8f7e39682817b0afb15f65edefe77522d6570d42a0b65794d4f412d7bcaed2196149d17d81379cf023a133a43365c077fb0e2da0d94a9aa2752b39288efae4704d393c13db7b1787b6d48f3983fb6087241525acbd1b7f8cc4de791de69d04d35fdc76c409cd7c3121b6def550c229885c4f7350cecb7e2d0c5f22d1a850d4e3e3474f545e76d25a68f6e1bbc206bae24465aca30fbaaf70db85f4093ffacfc695ce161ec2bc9926fda080842438b728f071e35ab8"}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000002f40)=ANY=[@ANYBLOB="54170000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800c900080000000400e4800400208004006f007011ee803dea3087c940d154eb97a96eb1da862abb8413c1fd9abae28d3f31eceef4d2943ae0664bd6a0c61d4972171fef0e2ee75274cc33956262bacc438ac97249c35bf85b6d32f2e3f4db7e16e03dc596d192b6958f945cfd0b7700431b663145deff176eabaad95bfc267431aca093966235211cf1546199a301b8ffbbe50e40ac0336375713af07816a1a0cf9251fb7d313690212a4795f236d93470ff2e42ddbad6303ad489fde2bcc65fad087c6ae6339d22fb0d69371adedced31893554b472b0e6f98bbcbc75a1e995c81d1bb170e9244b93408094460e951a431e9dcfb80ad9635a45c8f8a9110f85e99a7491d87273fbe1a82c8af5b123607ae17937eed0da7cf3d1d60bb47fbd825f03f83c56afca57b03b65b09d7a2435fb91b74eb54aa9998c2f302e208ce542db79faab1e0c8c4a2dd07aa7c0599ea3aafd7632713070542c24f6b71f953368d20f0fce895f36525aa4a4d49e85b7e27af21cf9e156411bd95c5dde4f26cdaf5f55870e4936cbbcec20c7d70293a0c13af6b7ab4fcc48bdbb28294d537ab78e9762f10aa025f0703e53be408db7d369901ce5b5a8dcfb23a4c1075607164814b0a5673f672fc5b6fb0c630e94f22404de8142b67411666357e6d9da8b3b86ff91aefa1721d14dc9bd8153776e5a28dc252ef5d4d0e311d76d11afedc398962f256cd8436d40bcc3c061cfd79750e061b9da040077da164de571a6f01b3d876c07aab39eb038ded3eedbd69e24799bcebca3ff535800335b11dfd61ce3a2673a7d1e97a8da3214a0a061c08837eb445ffceea43082564c3cd61d33fb50ee637fb84aa0f8f1d2937afe7f2bbd2558731ca4700724219d2dd95ac738b1f9ed3f3279661fc55c8d1e9257e935f97c77fac0ce1e34d4379cd4d221a99ac438d72ac23329f79a89b4e38570f48e4f68f04ef02b3e878d405faba7435d81fd9e3599417d7c7642ced436441cea80e80d872a89db23b9c52f58a6b071a89222c0fc353eded7baa8e9d63335889df0741aa6cb72bde292f4e75534c33af871db8e000ae87e772a7316077332f1b4b7a2249ccd071e53afa5fe3370e7a84a5fa2845db08d6a3644ea3404fd015b5eb8c1cef82ac8f53d0f6811612fc86fab885c300e0f63ebc865703c8c4bc6ab92741c1b78bcba490ade5fb3b3a57ef6795a79a947612dea61807cb2f6422dd502a839ac844ede6131828fd9cc5f974cc47ae02cd2dad220acac6dd3fbf4de14c077d62c2e233ac430a4c50006269ab18817667651bac64ab8c942e0c3e6f2a2ac415b1dc77ac5cfb96c68db0a091fba77bb9de4ac6920ff3afd10dc76b1f64bf8321073562814439a6667a91ff00fa06ab8d00edb3679ef622202fbeb0582e1397fa4b671bd70358682fa752283fe5da1db53fec22552e5aefd332ad7c56316f9390f936179ab05542cd340013b17f4090aceb86cb18dac858316c5c3ea7bf41b58f4a4a8628f0ebcfcc8fb9a7854e82529440d55e7bc77ef5421395f2add59b312f6b658ea3482d1ad36535e53b8e85b8037b4a1a7e217114e3b90607765d0b640f1ca89a92b07fe61f856c94437af8bf2c37733e0467914c032c8b8a04e6313629f59b8a197861000046e074706bdfadd6b88935890495be98f0724b6d6fc72105f41caa1b7b4fef95ba92cf0bd1fe697a2397147330060b25e4b7e75078ee624d0e657b91d91066f2eae0a501ccd84aa2c0db288a17a535fc2e4b7a247f8d6643558099bf498143669afd0bd372c7bfdb87be133f0aa2d110cbf68b804e2dbf144544dc250816d3c3d92c68f18c098e6d7452ca2e7177ba6eba77645480284e10845d2f69cb1664ab26f7c745c24963e29e0e9e73166c965d69f2ecff0f2e8a943eac8c8a5af0ad43b766e1265d5db9e90f6b14158abbd44b34dd681556daffda4d481b8b635c6b74c7f11582fb02068c54f7b1713514cd8a5fd53ca9f86684dc1bb91fce583788cd1a3e8810fe9fb6fa29d691c8d5feb904c80b9ddf2a92206f8d4354d919b17bb9d32ac93bd4056ebb996b2e89c29357bac41eb4ad5cfb8104426885fa86482f09c2a9b05b1cc09c651b3c139d9ba4d64431a92d864dd456ad65a20ed4cd22f286fc91b4253c0103cda8712cfd6bd5167173d86d36fe37dc71b7ff6a6f3ba0695ec06c878727cae79d5e0cd6eb19b7e7e08a454ccdb00f2b95a2d6d40f6818de3400b9785f5b2cb64efd38c5cd5fee369369d74ff5595943af49bae5a1cb7e9c3db09131d2d92de3c9816101bae449c4dff133bd1395f1edb2202705c56bcd88094b478fe855e686ea611861f653bc8dd8d00699d4c3b19150d7da20a25c05e05c43075b8b2c4bfac4b17a35e64c4d799c630dec5dac2fce225fb779daf6efd21f39ae462b64e2969bb9a8c2764b2e9535c0dba1264639148b6433fddf08a9b3dc2659622fa61c27b877816ded8cd34c5b944cad978d53e99200a5558bff9ba41d24a61a9965fbaa0e369a2b126a8cbae2f848fe24ec5e06f7ea538ca84c5a6ad10443e43e3467b10009cc729b7647c54d16a8bcff758a17f603da9daffc80aad2c02f4619a6fbb2eb70ca60ecb49d140c807addf8ecc16f0bce97f70e4fa354d09075aac2bd1835cb6d5cfaef449d8e68333b1180009941280d5d8609d1b80c9e0c5925491c235e6105eb56773d263c4281b09c0f11a4f70b4890812c0cb768b4cf984c5b1e2693305f754e360ff262494f30066ab9b6df38703e0490d6fa913103453449ba6519de8d74cd0395cb3b06fca1c39d0663bde3e4d53426d3b7a35c26d55d9d294dc5698215a533f3d63313b263035a952bf84272974fc52414a0679a1c5dac37444d1368926d2b89b8a06d29c285452b866a38528b7445c4e5458d0dc283d32a5b199f6219dd4f3ca3152fefb8f04039b56cf4698ec6f8e4a55088f7c704d9bf11ef323316783853d2c4db7ceeb694edfca8178d7f9f2e0ea624119e349f1af9f08f187cfb9563e46615c7a8feaba9f99a89edcbd8cc368faefc4fd5bac2394ae736a034e449a0c1b99897e35926d55947b90037d9fabe901b5b3cfbf90ff73bc7f2f5430e5ee11a424bd18b1f8ea5b562d6dceb441719b4ab2f12da8103e0979c80609972f9e9d99bda8265c058c93aa7183a05933939d11dd4874e8c8919848c4e1efc45cb87e361907462c0aa204ebb9e9d44a3b80139d333771a0dee30a68ff0aabda87d9c139eb00475867a09dc0566adcbe16c641b5cd8d91b70ede927c22224e01402bf73591a0569aee8ca0c3fe67dd360f8e5f8ef803b8951e7975c616ee475d67b52cb3101e5d5a55f912da9a3f0d788a278d4f8f0e98197871c8f970adfb2b9910abac9891c5a9c598c7800e8796b09a4e1be4e37190a8d3cdf10ab9a92b93d73427d55fb12f891ba37c462de397bd19345216b8b59c72972ccd10c332acb98c5af5ca527dbb6d9f2fcb8abd3c18c3b1dad846f12dc4736e14bbdea2d4338e6345cb74314634eec010379d9c58dbe207bcba1e639e6db8a0a75ed98081d255b0b765f0d605537ea9c9abd7b9897af7e71d73f4b155f0cae1bc847e1ecfd1392dac7f49b1c82a82178a7e686c861e9c1385496a5d0b449a9d0346ff5e3f32199e5022f5662d47bdf0df34de4a606f9143ad67717b541dbc64c1217d2a869937894ebbb2c02329f8cac7dc255a4e07bc59ca0676c999b01325196d57abc0c8245b42c31756519ab06dcb3a2f9cf5c6b26fe55ef005796dedd7083e7919f4b924858e085d37e27d1fbcd76957c9f04217f3658e8cedef3d9fc6b7949b3951150f40ae717e54708487dbd60c87a23c1a96ac7d45680b7c61055f4ebec47c34fbd219f01139a37bbdaf2dfdbe547d7f81c051dc40bb393e91d10264cebb07afa7107c13d843a7d1c40026063bca69940f6201a9b91ba495c4f47e1d862b071dca50d5f8c198b1da17f9a54d02b1dbed8422bac8e7324aef703ab010f4466e662d3e3ab11f070273574a2730bdc8730e9875bd2b72004ddb16104f991809b03a24bc49c1e37078b180186e69bcdb570ed0c4b7acdbeefa31d408dbc530cb2006188f961af3f17710e227c3c2d9c3c2788eeefaacf88094e818999f00376c41db0716de672ae0a06c044c7a77cc2cd0f72ab8a2e50cf050e0779b9932ad7036014da9cd20289e9b3b398388d9823eda46d9af36ddfdf07cfc89fd0994cf7d359d67a3a74829edf9d116369e16cebd4c12e5861035d504bb3414816d2f08780da903690489b1a06c58b7bd748eaafcaeaf6cc054ce2a810944546b2ce316ff0d064d9bbcf7640b996003641439a833571fd18c3bbe4fb2c6764d761e612bb5861f7be778863d28787fce405af7be909f4a4824fae4cf8295703bf7f1760a4e5a4554492d131c48059159bfd9fb60c1933b220bd9bdb694d6797c71d4f2e7db9b38380e6126e69db714b3eb835a3d9d514e923c04ef7550fccbab8f2b0ac237f304921d4f2d926ebdec961968d3de81cca16c4ab435e89644be18791d9be4f6b37a2eb4075ea7dd238ad932536557f7ce4dcd9763c396f2284b5e5e9ce6312dffa27b24e1f9e5445217bcf7b833b45c72fc5fc79906482f5757ceed3edc9fe8b1f5377b1418930ce72853d168d676d2684fc106ce83069f8f99f88e651929e44db3bead7ed64c8ef18dcc2031297ab93b179cfa09026f7f77fa6562a2d2fe246852f1fb7c4cf7e32e74257b73dcb5992517dfcdc3b93166671a40d0a529a2b630466ac448c3287764697051fe2d4073d269b765f2e63ec0edda85c7dd601667ef5d8c08049b56786efe6321bed7a4c3b91f5ae2c75869217d375f63fc87909c037e7ccced23e687c44405d2bfd8d345368b7a4f38b12dd049c3fce5a270ed9ebbe16db60c97b65147d4d676d2ca674bf5943ee650d34d920ef793b5079430880dd6cd53b267b51e031a63122176a9f3a67e8175d1ea8a7a3c7aa15c07ffa006377a032e3eb3e6e88b6ba439650b0960efecbdda602118e3fd5eb3fd041646ace3b5e98e26f72191dab92d7167f748043b1762e57b6cd6c98b8b7ac5b500a6a05692bb444222e069409e20f37961804a375de902314141a3174305929a7c44b3423870d4477559adcf1ec7c56f501641659d06cf82635431bbb8c4ad45152c4d7a2ff5746d56e1c820f13ea9f185937d87b0e9b7b6444e1cfebc647182da9d2ad32506c3690480d1914b77ba5bbb183fe65ba367b1bcb67c07f03bf748ca172d9a9ad49752550923719383d6d1134270c9edfd4773c33c9ccac446ab69caa602742d92a00d3770f4b6c2d3171f352181d69012d23337b8b1d9bea99e2ce3aeacf8389bc09364493866c2841a2fd6816cb7a3c4c764175a3ba6a3d4c1c559f1ccdb0e90c53917fe3c7ed68117526c1e14faa15d5d51cde959ed2917ba67992547a6a64c54ef60b138d138733309796d29aca66a444a9a5247b10f8b6fd0195a424f7ed8fd2ac45e38db6b247e69115ebd03134f4f675e14d937b7ad3cde99445405144a7595cee255bf77d8f5d6bfce6755172a0e76ccd669c28653d17cffaa0bc089bc5604be277c911427e84e4873b242b2e2ca8caa6ae7ebe22c2ce40e715886411fec3aea341ae588523a24993df98741f0d77d9115e6fe076b6136f78b21de55f5f1e2ca3b9b8b2df605831e8e5f21df106a086668ee2c1636dfaeafd12500436d000629bf8cf5ef815976f028e5387277c471b14492fc53b8369b0d754d5e2559d16f2a7892108d2ab79c3c95f75119e4e19876ba0d34028b98ab9b7003700931119cdbc6381c1e4f69eafda372847b32a97f9493bfd4a9083172edb36538e06ad97a3a2efd49491e33b84b878f583884bfce3262ec91663688ffef9265390534169d7f7b77f9c5e26c986dd13a4d9df67d60250a106b6c31572616f7f389dd430d49e169a98bfda756613ebfa6b6c264930bc5fab3973a4fd6482a06b3b78b8cfa5fd6e58d00924f8f1befc3aa25974f50d6b8298cb66e3e6f5946d82ca16ce6da6502e2b81dbc3620e72a57ffaf78e010300af0078006efb770a3bb2ebcbca5c78d31e6da239e1db3801d09da297ad4c626803a9949ed8e3f2b4b6ccd949bb7336667289482324f1a24f3c9f229197b60c007299acddd24caac0e9a48377dc8b5ab1dfe682cefce950451f8af82889241c0378cb451b4062738688748c0527d299188270e3a6c965548cfc282511c7037121896ba9492c4b8e3c049f3242fd2dd08aa2f90ae595e4415b7ccd926939569a6546d470753971ccb6464b5f683aee71000400e28008000100", @ANYRES32=0x0, @ANYBLOB="02882b94", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c00098008004600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x1754}, 0x1, 0x0, 0x0, 0x40810}, 0x4000010) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="dfff27bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) inotify_rm_watch$auto(r2, 0x8001) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3da) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) unshare$auto(0x40000080) fcntl$auto(0x3, 0x4, 0xa553) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 1.443691628s ago: executing program 0 (id=2919): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0x80000000dd, 0x9b72, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_FIRMWARE_NAME={0x26, 0x14, '/proc/fs/cifs/smbd_max_frmr_depth\x00'}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x5}, @NFC_ATTR_SE_APDU={0xe5, 0x19, "c1a76f3348b933736b9d1fff79e5176ae507f7c5d9b8fdc237274b1a5978e4de085b0067ebc64014bf0c8e45117463ad96fa55d443bc6b7d30e78e9118ce14a4745865a1a3ebb3d70df048640185391495df7abc3f1a63f8980ebc20360d9879410b096fda6fe74bba3728363cfa80aa57685526cd59f9153a53ba78a75d07b086ac40da20f7224dfcc7e3dc5828fab0848398435625a82911620564cd80bc2732498bb559c8923a38eeb20981463e549282c48ababee1a3e98b6ea4e9a17e646bc74f9e5f696a4e2393e9a75f120ee711bb41b44e664b3a333f38f4de026c51ee"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4bbe}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x3}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) landlock_restrict_self$auto(r2, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') mlockall$auto(0x7) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2aa82, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r4, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x40302, 0x0) mmap$auto(0x0, 0x1, 0x800000000df, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x81) mincore$auto(0x1000, 0x4000000, 0x0) 1.428372298s ago: executing program 3 (id=2920): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x80000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x20040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/84, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd2, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x9, 0x6d3e, 0x300, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mount$auto(0x0, 0x0, &(0x7f00000001c0)='ci\x80,\xc9\xfes\x00', 0x8001, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 710.392116ms ago: executing program 0 (id=2921): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) r0 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/mounts\x00', 0x28000, 0x0) preadv$auto(r0, &(0x7f00000031c0)={&(0x7f0000003140), 0x182}, 0x8, 0x0, 0x2) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x78}}, 0x4040010) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_3={0x7fffffff, 0x0, 0xdc5, 0xffffffffffffffb7, 0x101, 0x1, 0x8, 0x80, 0x81, "6883aec91e73a11a6f1b7a38d01087c6", 0x0, 0x6, r4, 0x7ca, 0x7fffffffffffffff, 0x2, 0xa, 0x6, 0x7ff, 0x7, @attach_prog_fd, 0x8, 0x7f, 0x9, 0x6, 0x8, r1, r3}, 0x6f4) bpf$auto(0x7, &(0x7f00000001c0)=@token_create={0x1, r5}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) write$auto(r3, 0x0, 0x104) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, 0x0) r8 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r8, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 106.197595ms ago: executing program 1 (id=2922): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000e5df27094b5a92b3ccc57164020b2a000077a7e85b9fd0f08087d50e774d2527ff58272676ca85c114c402002d3129ac4d9777053a3f28f2b9c6fe697facae5ee95e5b78268e8ef3ba54729f7018dc223795a9e0a714547b85004be9f423813c4835f331bf8f4232ac125b3f7eb8ed2720ce8f5c39e8571fc96d8c31b9337769", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251c0000001400040074756e6c3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) 15.124902ms ago: executing program 3 (id=2923): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 0s ago: executing program 2 (id=2924): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x20006, 0x3, 0x12, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) r2 = clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r3 = syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) r4 = geteuid() sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000001040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x130000}, 0xc, &(0x7f0000001000)={&(0x7f0000001200)={0x9c0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [@typed={0x80, 0xde, 0x0, 0x0, @binary="9d144722d2132396c1779541f46219911243dfebabb841c8fb7c01f76df287ddac06f0bcecbc6d3c357208d431a5ea05c92dc85371df7e5a3d2edd6d0f28e4a31ef8aad6b92d2c8879f3540d869321217837c7e1222ab14f68d90660878f80b77b831ff6ab49adbd3b3874351362b8a09912178d191235397ba67b95"}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@empty}, @generic="305c085e47dda16572c696a365cefc5f5ac2743b14e15ccd98e8bfffff2d1948ef432fa4e60706b28ee193b66d525487b0687938b7", @generic="85e267d8d1ce83aa70a5b17dffd1136fff1bb3af537a9bc2e0cd323194b6550c4b0beb6902f499d35bcab65fe1d81604166ba9252ceb6fa543cab5569716cb151a49c16cd36fb1309b7ae6"]}, @NLBL_CIPSOV4_A_MLSLVL={0x48, 0x7, 0x0, 0x1, [@nested={0x24, 0xc2, 0x0, 0x1, [@typed={0x4, 0xcd}, @nested={0x4, 0xde}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x9b}, @typed={0x8, 0x130, 0x0, 0x0, @uid}]}, @typed={0x14, 0x124, 0x0, 0x0, @str=':-h!/-^@(\']@%]/\x00'}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0x1}]}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xffffffff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}, @NLBL_CIPSOV4_A_TAGLST={0x22c, 0x4, 0x0, 0x1, [@generic="fb96f34e99d2a292d0daeb44bcaa3e19bfe267cdab9b203baa358dc8a0a530b94c6035aefcc10d73df38331ba616", @typed={0x8, 0x103, 0x0, 0x0, @u32=0x91}, @generic="d3e6c574581b20fbde003c87b65b839ca15094954a1d2dd6c4b64c7d2194d289be8e86eaa76799f998c3afa7792415b3a05910e01e0da0ec08ec77f5a5c79276c4055e784e069084d6b63e93446d68bbdef270616e39410e7842cb275f6d439eb9d4f399d7610399a504dc50b3f305d5912adbf23bd7d15ce6635ab21cf3239623e67994508000fc1f2880e8d96c51efb28892242ef47dbbf1b3fbecd900bcfbb92ddaa70545c4c833f3d7f642819f35fbb68723d4fd58b4bf0ab98f608e65078135722613ef3fae7747414630bd7926906aa55271599a069e061db7f1dc7bda656d7b2a9dc16914e344a16888709124b79a9b02", @generic="2b2cbc6c2456b052c2128d345c06556eff142dcc1dac8c2350cfcf133a91a078707782830a0d273986d41cfbc9f5fa75e4c34e5ec5aac9de05b59eb752cb6d86004b9a8dc0abd911", @generic="42a82513695f15ed4e6715862a7a1f85ae261eae22aff32b3b04608a016d4388d38b9aab299c903e047d20d227bab9fb552e486153837f9627694f9b7e439db0dc152476af2259f547f973ecb08b7875df91e1c26d03c6248ff9db35484103f94a7940cd7de70fea93a0ca038731d34827b6de030946208fdc2176d170b4eb04d958b7576b9ae64599e3ad2ff066ada8ffb0db86d2fd", @nested={0xc, 0xec, 0x0, 0x1, [@typed={0x6, 0xe9, 0x0, 0x0, @str='@\x00'}]}, @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @NLBL_CIPSOV4_A_TAGLST={0x568, 0x4, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @uid}, @nested={0xc, 0xb5, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @pid=r2}]}, @nested={0x10, 0xdd, 0x0, 0x1, [@nested={0x4, 0xb5}, @typed={0x8, 0xd, 0x0, 0x0, @pid=r3}]}, @nested={0x10b, 0x58, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x8e}, @generic="bf75e98c5aba214a15ed27c894a9f39f0845fe16a58abc49014efa9332f504f4ae53e5951b2e799269b7a490d9e9bc75d3268c1b232c5c099888f588e1d0ef7664dd869b73f7c0ab8104969bda32a701552975fba470838e8a40a21e47170906176f900e8f9e75ea94b85fb92d1865e2bbc71d4923b1da5237a4403db8f8dc28f022a034d65f2d65ae640f61f9f05c2f23e67986ec41c214ca4ece03c92f86f01b1018133790c2612bfb799f59634929ebf86628fd6d1672e1067c666322ede7f452486c2d6c0d91c8c3bd3572419d55bd673b8799cb87e21bcc688a2787dc4d735976470dafe9a9a6000e41d742eca32e82a88dc03b9645ba65bf"]}, @nested={0x20d, 0x122, 0x0, 0x1, [@nested={0x4, 0xc6}, @generic="4724238c7a177345977b4fde77e16def6d2a86fed63df728098d9ca8e09c0c31546b709fc11b3d9d7873d850de7efaf7a69c65a7a36116ba610112dc5377e9581e760d2e2d3883d5ab564c95c1dc0f1c63a3880c012a086bb0ffc5169bd5b73f9ebe9c2f933701c17cab113c4cffa93ebc0115496a92889135c918f0cb01", @generic='D\'5KPCQ', @nested={0x4, 0x10f}, @nested={0x4, 0xcf}, @generic="f7c2b8a36d80cca9abba0c4030934580804ad3ee3885e8ed7c5ab7086f72ceb3716f785029fe8d2e33e5e9ff673d018b27eab1d0ddb3f058834a3698747a7ac0b7ff9dffbd1708e3c3df7183891d75aee9aee2380279b81695b0f2be04b4312ec25597ee3585b638dc3e78041d16babc28ad9132e48d55c45517d9cd234a8ec3790aa3e808a1318af6b806ad2857dc9ce7108974255bd28df20d160972c110c7", @typed={0xc9, 0x12d, 0x0, 0x0, @binary="e0d1a47a688cfb55f5cc2dc84a5f9294d7819ad9aca4d607945cfe70a4ad18fb30f0e6b9302853d32311eb7ef17e38c86822d69bc69a9e3ef2735981ab2df5766675b97db3c62bcbe62a76f8ab6c1f5d8059c7832fa1ed0bc03f4087282497ae10fc840a8a8c7b185c9a98328b6681298954441fd3b8ef132cf17ec5166c7c583c46d1fc1920d488b123eee95d57cc6285547fc49ff2397fd4a6e276489e5a4eabab0b3d22e3fa179f167a510cafd7d7ac878b8b20cab45f9e659ca6fe8a023b2a31203ec0"}, @nested={0x4, 0x3d}, @typed={0x8, 0x12a, 0x0, 0x0, @fd=r0}]}, @nested={0x115, 0x9c, 0x0, 0x1, [@generic="9272e2a175483fff8af58e2b7a18dc4981f6c0aa7414063a4b31e13356b1c15f19c99df50612c93a63a81729d77301c6eec55fab7b14ffbd668b0c4d8db50862455129d0ea6e11c1895f56415db6c35fc872016e3eff54acd45a9487816c60bf93308ae2f3634fbcd6cd45402dfb6d9dbd6a0b3ca218142cf03f4c3ec06d65509b43a7ba1fb2191e164343c7b380d3c81146351c22819bbe2647dd06387e1af94e16234e6b25cb03cd05df46dc81b985f69672099431a751c8ef9e66a1c835404b02ffda8668976bc0250c18ef086af2070cd6f4b8ede487521800b69372aef9e592ae39db4252b0d5", @typed={0xa, 0xf2, 0x0, 0x0, @str='.*a]w\x00'}, @nested={0x4, 0x5e}, @typed={0xa, 0x5d, 0x0, 0x0, @str='~-!@[\x00'}, @nested={0x4, 0x13f}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r4}]}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@remote}, @generic="9e10b03e321b1c4c613e0539fbbc8538e92f7d84212dd7d5057c07766a0fe2433674129c95ed653af05e4b09cc6bfb8d43c3059c07c27b901ba3aa64d7e1d35a14f4f43fd175d37d9ff3d47601dc4f1a524f42fb7872fea35ddb8008263760145571e8d9f0143614b1c4b94bd68e7af3e302309d4c8c8d42795caf11dac5c507e4de624d68857d0ecfb87ff5ffb282c18d65409a335106d91d627052e2fb65cfe8ff8f22ac37d6970c90d5cd13947223bede4384d057d476554c583cb846d62479dd5e9e15aaa7bd14b0ee4b38cf64abbc50601200c0150dc42ba9bcba85f128e3f7b550118230410c2cb707f887d9b5be659a4f75827ec2"]}, @NLBL_CIPSOV4_A_MLSCATLST={0x99, 0xc, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0xfffffff8}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@empty}, @generic="025ffcf290ae2c0d021974e1133f0e16426df647f7e746a3a205aa2a6fbdfb29c90695194d1ea78d90324679792e8793a25807c4eb9097763ac77fc113d89ecc4ddcd8ccee1bdabb2a9e6991e947dde047536413acffc408002f779fcb3d1a6b0e9580f971aba6fd6d255b4b775822fe516eb2e8099a49d58f", @typed={0x4, 0x7b}]}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) process_vm_readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000140)="66cdff317494273e38ed2170e952ade7e64a6bb613eac2574efd755d4d0274bf2af580028fc7cab24b122c680da4b2588fab69f6073355543e64468c1979f28c499463f44bcbd2bce3603cb638dfa975e477cba783bbb34caae40a1e267c3907820b28e607ebabe0b9dfb8b2ab490508341473cada6070d30b1023cfce69ff1f4fccf30eef5134", 0x6}, 0x5, &(0x7f00000002c0)={&(0x7f0000000200)="70c1fd089b73269276eed11f072c078f05cc99ad8f26fa5035badcb3bcde7bf19c18c5f4a4c3a4b769c11e9c718654056fdd363fc0e548c411eaf4b57c912c489234fc3cbbbc0cd40227ae11974e45e73c8d90eece8464fe367b8e69dfe975d9bd8ba0f673be2df016ee2d5e5173668d74d1bd9898f0b99a49ca9674f62d91ee24", 0x100000000}, 0x7, 0x9) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      syzkaller syzkaller login: [ 958.165728][T18911] Invalid ELF header magic: != ELF [ 960.220663][ T30] audit: type=1800 audit(4294967778.170:15): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2511" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 961.611254][T18947] Invalid ELF header magic: != ELF [ 961.840888][T18954] bridge0: port 3(team0) entered blocking state [ 961.840967][T18954] bridge0: port 3(team0) entered disabled state [ 961.841132][T18954] team0: entered allmulticast mode [ 961.841150][T18954] team_slave_0: entered allmulticast mode [ 961.841197][T18954] team_slave_1: entered allmulticast mode [ 961.842999][T18954] team0: entered promiscuous mode [ 961.843019][T18954] team_slave_0: entered promiscuous mode [ 961.844017][T18954] team_slave_1: entered promiscuous mode [ 961.844810][T18954] bridge0: port 3(team0) entered blocking state [ 961.844944][T18954] bridge0: port 3(team0) entered forwarding state [ 962.422586][T18958] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 965.129095][T18993] Console: switching to colour VGA+ 80x25 [ 965.480650][T18993] Console: switching to colour frame buffer device 128x48 [ 965.618179][T19001] Console: switching to colour VGA+ 80x25 [ 965.794995][T19002] Console: switching to colour frame buffer device 128x48 [ 966.153693][T19007] Invalid ELF header magic: != ELF [ 966.423076][T19015] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 970.843033][T19075] Invalid ELF header magic: != ELF [ 970.943300][T19073] Invalid ELF header magic: != ELF [ 971.926599][T19082] Invalid ELF header magic: != ELF [ 972.484687][T19087] Invalid ELF header magic: != ELF [ 973.233992][T19103] FAULT_INJECTION: forcing a failure. [ 973.233992][T19103] name failslab, interval 1, probability 0, space 0, times 0 [ 973.262075][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.1.2543 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 973.262126][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.262144][T19103] Call Trace: [ 973.262155][T19103] [ 973.262167][T19103] dump_stack_lvl+0x16c/0x1f0 [ 973.262220][T19103] should_fail_ex+0x512/0x640 [ 973.262263][T19103] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 973.262316][T19103] should_failslab+0xc2/0x120 [ 973.262346][T19103] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 973.262393][T19103] ? find_held_lock+0x2b/0x80 [ 973.262424][T19103] ? alloc_vfsmnt+0x23/0x730 [ 973.262461][T19103] alloc_vfsmnt+0x23/0x730 [ 973.262512][T19103] clone_mnt+0x6d/0xff0 [ 973.262545][T19103] ? copy_tree+0x50d/0xa20 [ 973.262589][T19103] ? copy_mnt_ns+0x1ac/0xac0 [ 973.262645][T19103] copy_tree+0x38d/0xa20 [ 973.262705][T19103] copy_mnt_ns+0x1ac/0xac0 [ 973.262753][T19103] ? trace_kmem_cache_alloc+0x28/0xc0 [ 973.262789][T19103] ? trace_cap_capable+0x18d/0x200 [ 973.262819][T19103] ? create_new_namespaces+0x30/0xa90 [ 973.262863][T19103] create_new_namespaces+0xd3/0xa90 [ 973.262894][T19103] ? bpf_lsm_capable+0x9/0x10 [ 973.262933][T19103] ? security_capable+0x7e/0x260 [ 973.262970][T19103] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 973.263013][T19103] ksys_unshare+0x45b/0xa40 [ 973.263059][T19103] ? __pfx_ksys_unshare+0x10/0x10 [ 973.263106][T19103] ? ksys_write+0x1ac/0x250 [ 973.263149][T19103] __x64_sys_unshare+0x31/0x40 [ 973.263180][T19103] do_syscall_64+0xcd/0x490 [ 973.263218][T19103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.263241][T19103] RIP: 0033:0x7fec06d8e929 [ 973.263260][T19103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.263283][T19103] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 973.263305][T19103] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 973.263321][T19103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 973.263335][T19103] RBP: 00007fec07b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 973.263349][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.263362][T19103] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 973.263391][T19103] [ 976.177519][T19129] FAULT_INJECTION: forcing a failure. [ 976.177519][T19129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 976.299234][T19129] CPU: 0 UID: 0 PID: 19129 Comm: syz.0.2547 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 976.299282][T19129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.299299][T19129] Call Trace: [ 976.299310][T19129] [ 976.299322][T19129] dump_stack_lvl+0x16c/0x1f0 [ 976.299375][T19129] should_fail_ex+0x512/0x640 [ 976.299429][T19129] should_fail_alloc_page+0xe7/0x130 [ 976.299511][T19129] prepare_alloc_pages+0x3c2/0x610 [ 976.299551][T19129] ? stack_trace_save+0x8e/0xc0 [ 976.299593][T19129] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 976.299661][T19129] ? kasan_save_stack+0x42/0x60 [ 976.299708][T19129] ? kasan_save_stack+0x33/0x60 [ 976.299754][T19129] ? kasan_save_track+0x14/0x30 [ 976.299799][T19129] ? __kasan_slab_alloc+0x89/0x90 [ 976.299848][T19129] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 976.299894][T19129] ? __pmd_alloc+0xbf/0x930 [ 976.299927][T19129] ? __handle_mm_fault+0xaac/0x5490 [ 976.299968][T19129] ? handle_mm_fault+0x589/0xd10 [ 976.300007][T19129] ? __get_user_pages+0x589/0x3b80 [ 976.300041][T19129] ? __gup_longterm_locked+0x20d/0x1840 [ 976.300090][T19129] ? gup_fast_fallback+0x1ab3/0x29e0 [ 976.300124][T19129] ? get_user_pages_fast+0xa7/0xf0 [ 976.300160][T19129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 976.300206][T19129] ? __x64_sys_futex+0x1e0/0x4c0 [ 976.300244][T19129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.300326][T19129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.300378][T19129] ? policy_nodemask+0xea/0x4e0 [ 976.300414][T19129] alloc_pages_mpol+0x1fb/0x550 [ 976.300447][T19129] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 976.300480][T19129] ? do_raw_spin_lock+0x12c/0x2b0 [ 976.300531][T19129] ? find_held_lock+0x2b/0x80 [ 976.300569][T19129] alloc_pages_noprof+0x131/0x390 [ 976.300611][T19129] pte_alloc_one+0x1c/0x3a0 [ 976.300643][T19129] __do_fault+0x320/0x490 [ 976.300692][T19129] ? __pfx_filemap_map_pages+0x10/0x10 [ 976.300744][T19129] __handle_mm_fault+0x374c/0x5490 [ 976.300799][T19129] ? __pfx___handle_mm_fault+0x10/0x10 [ 976.300865][T19129] ? __pfx_stack_trace_save+0x10/0x10 [ 976.300937][T19129] handle_mm_fault+0x589/0xd10 [ 976.301001][T19129] __get_user_pages+0x589/0x3b80 [ 976.301074][T19129] ? __pfx___get_user_pages+0x10/0x10 [ 976.301113][T19129] ? __pfx_down_read_killable+0x10/0x10 [ 976.301161][T19129] __gup_longterm_locked+0x20d/0x1840 [ 976.301214][T19129] ? __pfx___gup_longterm_locked+0x10/0x10 [ 976.301260][T19129] ? find_held_lock+0x2b/0x80 [ 976.301306][T19129] gup_fast_fallback+0x1ab3/0x29e0 [ 976.301345][T19129] ? find_held_lock+0x2b/0x80 [ 976.301405][T19129] ? __pfx_gup_fast_fallback+0x10/0x10 [ 976.301456][T19129] ? _parse_integer_limit+0x17f/0x1d0 [ 976.301506][T19129] get_user_pages_fast+0xa7/0xf0 [ 976.301544][T19129] ? __pfx_get_user_pages_fast+0x10/0x10 [ 976.301594][T19129] get_futex_key+0x2c6/0x1540 [ 976.301647][T19129] ? __pfx_get_futex_key+0x10/0x10 [ 976.301701][T19129] futex_wake_op+0x12b/0xd50 [ 976.301755][T19129] ? get_pid_task+0x106/0x250 [ 976.301803][T19129] ? __pfx_futex_wake_op+0x10/0x10 [ 976.301868][T19129] ? ksys_write+0x190/0x250 [ 976.301920][T19129] do_futex+0x2e9/0x350 [ 976.301962][T19129] ? __pfx_do_futex+0x10/0x10 [ 976.302015][T19129] __x64_sys_futex+0x1e0/0x4c0 [ 976.302060][T19129] ? fput+0x70/0xf0 [ 976.302091][T19129] ? __pfx___x64_sys_futex+0x10/0x10 [ 976.302130][T19129] ? ksys_write+0x1ac/0x250 [ 976.302182][T19129] ? __pfx_ksys_write+0x10/0x10 [ 976.302241][T19129] do_syscall_64+0xcd/0x490 [ 976.302296][T19129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.302330][T19129] RIP: 0033:0x7fe306b8e929 [ 976.302357][T19129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.302389][T19129] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 976.302420][T19129] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 976.302442][T19129] RDX: 0000000000000009 RSI: 0000000000000005 RDI: 0000000000000000 [ 976.302460][T19129] RBP: 00007fe3079d3090 R08: 0000000000000000 R09: 00000000ffff7fff [ 976.302481][T19129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.302500][T19129] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 976.302543][T19129] [ 977.295043][T19134] FAULT_INJECTION: forcing a failure. [ 977.295043][T19134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 977.350612][T19134] CPU: 1 UID: 0 PID: 19134 Comm: syz.3.2548 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 977.350654][T19134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 977.350671][T19134] Call Trace: [ 977.350681][T19134] [ 977.350692][T19134] dump_stack_lvl+0x16c/0x1f0 [ 977.350739][T19134] should_fail_ex+0x512/0x640 [ 977.350788][T19134] should_fail_alloc_page+0xe7/0x130 [ 977.350820][T19134] prepare_alloc_pages+0x3c2/0x610 [ 977.350862][T19134] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 977.350908][T19134] ? copy_splice_read+0x1a8/0xba0 [ 977.350944][T19134] ? stack_trace_save+0x8e/0xc0 [ 977.350977][T19134] ? __pfx_stack_trace_save+0x10/0x10 [ 977.351009][T19134] ? stack_depot_save_flags+0x28/0xa40 [ 977.351061][T19134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 977.351105][T19134] ? kasan_save_stack+0x33/0x60 [ 977.351147][T19134] ? __kasan_kmalloc+0xaa/0xb0 [ 977.351188][T19134] ? copy_splice_read+0x1a8/0xba0 [ 977.351221][T19134] ? do_splice_read+0x285/0x370 [ 977.351253][T19134] ? splice_direct_to_actor+0x2a1/0xa30 [ 977.351288][T19134] ? do_splice_direct+0x174/0x240 [ 977.351322][T19134] ? do_sendfile+0xb06/0xe50 [ 977.351359][T19134] ? __x64_sys_sendfile64+0x1d8/0x220 [ 977.351385][T19134] ? do_syscall_64+0xcd/0x490 [ 977.351454][T19134] alloc_pages_bulk_noprof+0x71c/0x1410 [ 977.351516][T19134] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 977.351571][T19134] ? trace_kmalloc+0x2b/0xd0 [ 977.351600][T19134] ? __kmalloc_noprof+0x242/0x510 [ 977.351654][T19134] copy_splice_read+0x1e1/0xba0 [ 977.351692][T19134] ? __pfx_pipe_to_null+0x10/0x10 [ 977.351725][T19134] ? __pfx_copy_splice_read+0x10/0x10 [ 977.351758][T19134] ? pipe_unlock+0x4a/0x70 [ 977.351803][T19134] ? __pfx_splice_from_pipe+0x10/0x10 [ 977.351853][T19134] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 977.351897][T19134] ? __pfx_copy_splice_read+0x10/0x10 [ 977.351934][T19134] do_splice_read+0x285/0x370 [ 977.351974][T19134] splice_direct_to_actor+0x2a1/0xa30 [ 977.352013][T19134] ? __pfx_direct_splice_actor+0x10/0x10 [ 977.352059][T19134] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 977.352097][T19134] ? get_pid_task+0xfc/0x250 [ 977.352149][T19134] do_splice_direct+0x174/0x240 [ 977.352188][T19134] ? __pfx_do_splice_direct+0x10/0x10 [ 977.352227][T19134] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 977.352267][T19134] ? bpf_lsm_file_permission+0x9/0x10 [ 977.352298][T19134] ? security_file_permission+0x71/0x210 [ 977.352338][T19134] ? rw_verify_area+0xcf/0x680 [ 977.352378][T19134] do_sendfile+0xb06/0xe50 [ 977.352423][T19134] ? __pfx_do_sendfile+0x10/0x10 [ 977.352464][T19134] ? __fget_files+0x20e/0x3c0 [ 977.352519][T19134] __x64_sys_sendfile64+0x1d8/0x220 [ 977.352545][T19134] ? ksys_write+0x1ac/0x250 [ 977.352584][T19134] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 977.352625][T19134] do_syscall_64+0xcd/0x490 [ 977.352693][T19134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.352725][T19134] RIP: 0033:0x7f0795f8e929 [ 977.352751][T19134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.352783][T19134] RSP: 002b:00007f0796e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 977.352813][T19134] RAX: ffffffffffffffda RBX: 00007f07961b5fa0 RCX: 00007f0795f8e929 [ 977.352835][T19134] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 977.352854][T19134] RBP: 00007f0796e85090 R08: 0000000000000000 R09: 0000000000000000 [ 977.352873][T19134] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000001 [ 977.352893][T19134] R13: 0000000000000000 R14: 00007f07961b5fa0 R15: 00007ffc6a03c738 [ 977.352934][T19134] [ 978.753978][T19151] Invalid ELF header magic: != ELF [ 979.167178][T19156] ubi0: attaching mtd0 [ 979.197865][T19156] ubi0: scanning is finished [ 979.203110][T19156] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 979.780125][T19160] Invalid ELF header magic: != ELF [ 980.026561][T19156] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 980.085071][T19154] ALSA: mixer_oss: invalid OSS volume '' [ 982.074504][T19196] bridge0: port 3(team0) entered blocking state [ 982.081174][T19196] bridge0: port 3(team0) entered disabled state [ 982.097355][T19196] team0: entered allmulticast mode [ 982.102735][T19196] team_slave_0: entered allmulticast mode [ 982.111208][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 982.117590][T19196] team_slave_1: entered allmulticast mode [ 982.139559][T19196] team0: entered promiscuous mode [ 982.144686][T19196] team_slave_0: entered promiscuous mode [ 982.172485][T19196] team_slave_1: entered promiscuous mode [ 982.197979][T19196] bridge0: port 3(team0) entered blocking state [ 982.204743][T19196] bridge0: port 3(team0) entered forwarding state [ 982.380406][T19196] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 982.458747][T19201] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 984.162885][T19221] ubi0: attaching mtd0 [ 984.169404][T19221] ubi0: scanning is finished [ 984.174105][T19221] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 984.435441][T19221] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 984.459595][T19220] ALSA: mixer_oss: invalid OSS volume '' [ 984.481624][T19231] FAULT_INJECTION: forcing a failure. [ 984.481624][T19231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.553455][T19231] CPU: 0 UID: 0 PID: 19231 Comm: syz.2.2575 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 984.553503][T19231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.553521][T19231] Call Trace: [ 984.553532][T19231] [ 984.553544][T19231] dump_stack_lvl+0x16c/0x1f0 [ 984.553598][T19231] should_fail_ex+0x512/0x640 [ 984.553651][T19231] _copy_from_user+0x2e/0xd0 [ 984.553703][T19231] snd_rawmidi_ioctl+0x3a8/0x950 [ 984.553746][T19231] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 984.553802][T19231] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 984.553845][T19231] __x64_sys_ioctl+0x18b/0x210 [ 984.553909][T19231] do_syscall_64+0xcd/0x490 [ 984.553959][T19231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.553990][T19231] RIP: 0033:0x7f634198e929 [ 984.554014][T19231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.554044][T19231] RSP: 002b:00007f634274a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.554072][T19231] RAX: ffffffffffffffda RBX: 00007f6341bb5fa0 RCX: 00007f634198e929 [ 984.554093][T19231] RDX: 0000200000000080 RSI: 00000000c0305710 RDI: 0000000000000003 [ 984.554112][T19231] RBP: 00007f634274a090 R08: 0000000000000000 R09: 0000000000000000 [ 984.554132][T19231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.554151][T19231] R13: 0000000000000000 R14: 00007f6341bb5fa0 R15: 00007fff1a391558 [ 984.554199][T19231] [ 984.704448][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.982505][T19237] Invalid ELF header magic: != ELF [ 987.308807][T19287] ubi0: attaching mtd0 [ 987.315153][T19287] ubi0: scanning is finished [ 987.376251][T19287] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 987.693748][T19287] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 987.836214][T19283] ALSA: mixer_oss: invalid OSS volume '' [ 989.775675][ T5169] Bluetooth: hci2: command 0x0406 tx timeout [ 994.709751][T19406] FAULT_INJECTION: forcing a failure. [ 994.709751][T19406] name failslab, interval 1, probability 0, space 0, times 0 [ 994.724356][T19406] CPU: 1 UID: 0 PID: 19406 Comm: syz.3.2602 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 994.724396][T19406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 994.724414][T19406] Call Trace: [ 994.724425][T19406] [ 994.724437][T19406] dump_stack_lvl+0x16c/0x1f0 [ 994.724487][T19406] should_fail_ex+0x512/0x640 [ 994.724533][T19406] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 994.724597][T19406] should_failslab+0xc2/0x120 [ 994.724643][T19406] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 994.724693][T19406] ? shmem_alloc_inode+0x25/0x50 [ 994.724730][T19406] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 994.724771][T19406] shmem_alloc_inode+0x25/0x50 [ 994.724799][T19406] alloc_inode+0x64/0x240 [ 994.724831][T19406] new_inode+0x22/0x1c0 [ 994.724858][T19406] ? trace_cap_capable+0x18d/0x200 [ 994.724890][T19406] shmem_get_inode+0x19a/0xfb0 [ 994.724926][T19406] ? __vm_enough_memory+0x184/0x3f0 [ 994.724961][T19406] __shmem_file_setup+0x279/0x330 [ 994.725004][T19406] shmem_zero_setup+0x93/0x1a0 [ 994.725070][T19406] __mmap_region+0x1ece/0x25e0 [ 994.725125][T19406] ? __pfx___mmap_region+0x10/0x10 [ 994.725169][T19406] ? __lock_acquire+0x622/0x1c90 [ 994.725244][T19406] ? __lock_acquire+0x622/0x1c90 [ 994.725376][T19406] ? trace_cap_capable+0x18d/0x200 [ 994.725422][T19406] mmap_region+0x1ab/0x3f0 [ 994.725479][T19406] ? __get_unmapped_area+0x267/0x440 [ 994.725517][T19406] do_mmap+0xa3e/0x1210 [ 994.725560][T19406] ? __pfx_do_mmap+0x10/0x10 [ 994.725591][T19406] ? __pfx_down_write_killable+0x10/0x10 [ 994.725623][T19406] vm_mmap_pgoff+0x281/0x450 [ 994.725654][T19406] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 994.725682][T19406] ? __fget_files+0x20e/0x3c0 [ 994.725726][T19406] ksys_mmap_pgoff+0x7d/0x5c0 [ 994.725752][T19406] ? __pfx_ksys_write+0x10/0x10 [ 994.725790][T19406] __x64_sys_mmap+0x125/0x190 [ 994.725829][T19406] do_syscall_64+0xcd/0x490 [ 994.725867][T19406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.725892][T19406] RIP: 0033:0x7f0795f8e929 [ 994.725911][T19406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.725936][T19406] RSP: 002b:00007f0796e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 994.725959][T19406] RAX: ffffffffffffffda RBX: 00007f07961b6080 RCX: 00007f0795f8e929 [ 994.725975][T19406] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 994.725990][T19406] RBP: 00007f0796e64090 R08: 0000000000000401 R09: 0000000000008000 [ 994.726005][T19406] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 994.726019][T19406] R13: 0000000000000000 R14: 00007f07961b6080 R15: 00007ffc6a03c738 [ 994.726052][T19406] [ 995.482911][T19414] FAULT_INJECTION: forcing a failure. [ 995.482911][T19414] name failslab, interval 1, probability 0, space 0, times 0 [ 995.496047][T19414] CPU: 1 UID: 0 PID: 19414 Comm: syz.3.2603 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 995.496087][T19414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.496105][T19414] Call Trace: [ 995.496115][T19414] [ 995.496126][T19414] dump_stack_lvl+0x116/0x1f0 [ 995.496174][T19414] should_fail_ex+0x512/0x640 [ 995.496222][T19414] should_failslab+0xc2/0x120 [ 995.496250][T19414] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 995.496296][T19414] ? __send_signal_locked+0x159/0x12c0 [ 995.496348][T19414] __send_signal_locked+0x159/0x12c0 [ 995.496405][T19414] do_send_specific+0x1e8/0x370 [ 995.496442][T19414] ? __pfx_do_send_specific+0x10/0x10 [ 995.496477][T19414] ? __task_pid_nr_ns+0x17c/0x500 [ 995.496528][T19414] do_rt_tgsigqueueinfo+0xa9/0x100 [ 995.496568][T19414] __x64_sys_rt_tgsigqueueinfo+0x17a/0x210 [ 995.496614][T19414] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 995.496655][T19414] ? fput+0x70/0xf0 [ 995.496700][T19414] do_syscall_64+0xcd/0x490 [ 995.496746][T19414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.496776][T19414] RIP: 0033:0x7f0795f8e929 [ 995.496800][T19414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.496826][T19414] RSP: 002b:00007f0796e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 995.496850][T19414] RAX: ffffffffffffffda RBX: 00007f07961b6080 RCX: 00007f0795f8e929 [ 995.496868][T19414] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000104 [ 995.496884][T19414] RBP: 00007f0796e64090 R08: 0000000000000000 R09: 0000000000000000 [ 995.496899][T19414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.496914][T19414] R13: 0000000000000000 R14: 00007f07961b6080 R15: 00007ffc6a03c738 [ 995.496949][T19414] [ 996.619963][T19425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 996.676249][T19425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 996.964367][T19425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 996.971936][T19425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 997.054148][T19425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 997.138714][T19425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 997.144837][T19425] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 997.232607][T19425] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 997.395970][T19425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 997.402045][T19425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 997.446869][T19425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 997.949890][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.956470][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.665739][T17486] Bluetooth: hci2: command 0x0406 tx timeout [ 998.990935][T17486] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.216134][T17486] Bluetooth: hci4: command 0x0c1a tx timeout [ 999.475844][T17486] Bluetooth: hci0: command 0x0c1a tx timeout [ 1000.362973][T19464] FAULT_INJECTION: forcing a failure. [ 1000.362973][T19464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.412809][T19464] CPU: 0 UID: 0 PID: 19464 Comm: syz.2.2615 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1000.412860][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.412882][T19464] Call Trace: [ 1000.412894][T19464] [ 1000.412908][T19464] dump_stack_lvl+0x16c/0x1f0 [ 1000.412965][T19464] should_fail_ex+0x512/0x640 [ 1000.413021][T19464] should_fail_alloc_page+0xe7/0x130 [ 1000.413058][T19464] prepare_alloc_pages+0x3c2/0x610 [ 1000.413099][T19464] ? rcu_is_watching+0x12/0xc0 [ 1000.413139][T19464] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1000.413196][T19464] ? stack_trace_save+0x8e/0xc0 [ 1000.413233][T19464] ? __pfx_stack_trace_save+0x10/0x10 [ 1000.413270][T19464] ? stack_depot_save_flags+0x28/0xa40 [ 1000.413330][T19464] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1000.413384][T19464] ? __lock_acquire+0x622/0x1c90 [ 1000.413439][T19464] ? do_syscall_64+0xcd/0x490 [ 1000.413499][T19464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1000.413566][T19464] ? policy_nodemask+0xea/0x4e0 [ 1000.413601][T19464] alloc_pages_mpol+0x1fb/0x550 [ 1000.413634][T19464] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1000.413678][T19464] alloc_pages_noprof+0x131/0x390 [ 1000.413712][T19464] alloc_pages_exact_noprof+0x37/0xe0 [ 1000.413754][T19464] ? __asan_memset+0x23/0x50 [ 1000.413808][T19464] snd_pcm_attach_substream+0x4bb/0xd60 [ 1000.413863][T19464] snd_pcm_open_substream+0x8d/0x17f0 [ 1000.413909][T19464] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1000.413954][T19464] ? rcu_is_watching+0x12/0xc0 [ 1000.413995][T19464] snd_pcm_open+0x29e/0x730 [ 1000.414041][T19464] ? __pfx_snd_pcm_open+0x10/0x10 [ 1000.414087][T19464] ? __pfx_default_wake_function+0x10/0x10 [ 1000.414134][T19464] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1000.414176][T19464] snd_pcm_playback_open+0x86/0xe0 [ 1000.414218][T19464] snd_open+0x1fe/0x450 [ 1000.414269][T19464] ? __pfx_snd_open+0x10/0x10 [ 1000.414320][T19464] chrdev_open+0x231/0x6a0 [ 1000.414369][T19464] ? __pfx_apparmor_file_open+0x10/0x10 [ 1000.414411][T19464] ? __pfx_chrdev_open+0x10/0x10 [ 1000.414467][T19464] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1000.414518][T19464] do_dentry_open+0x744/0x1c10 [ 1000.414577][T19464] ? __pfx_chrdev_open+0x10/0x10 [ 1000.414637][T19464] vfs_open+0x82/0x3f0 [ 1000.414677][T19464] path_openat+0x1de4/0x2cb0 [ 1000.414739][T19464] ? __pfx_path_openat+0x10/0x10 [ 1000.414788][T19464] ? __lock_acquire+0xb8a/0x1c90 [ 1000.414840][T19464] do_filp_open+0x20b/0x470 [ 1000.414888][T19464] ? __pfx_do_filp_open+0x10/0x10 [ 1000.414966][T19464] ? alloc_fd+0x471/0x7d0 [ 1000.415021][T19464] do_sys_openat2+0x11b/0x1d0 [ 1000.415058][T19464] ? __pfx_do_sys_openat2+0x10/0x10 [ 1000.415111][T19464] __x64_sys_openat+0x174/0x210 [ 1000.415149][T19464] ? __pfx___x64_sys_openat+0x10/0x10 [ 1000.415204][T19464] do_syscall_64+0xcd/0x490 [ 1000.415256][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.415289][T19464] RIP: 0033:0x7f634198e929 [ 1000.415315][T19464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.415347][T19464] RSP: 002b:00007f634274a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1000.415378][T19464] RAX: ffffffffffffffda RBX: 00007f6341bb5fa0 RCX: 00007f634198e929 [ 1000.415400][T19464] RDX: 0000000000040100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1000.415422][T19464] RBP: 00007f6341a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1000.415441][T19464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.415461][T19464] R13: 0000000000000000 R14: 00007f6341bb5fa0 R15: 00007fff1a391558 [ 1000.415506][T19464] [ 1000.770168][T17486] Bluetooth: hci2: command 0x0406 tx timeout [ 1001.065112][T17486] Bluetooth: hci3: command 0x0c1a tx timeout [ 1001.297663][T17486] Bluetooth: hci4: command 0x0c1a tx timeout [ 1001.537923][T17486] Bluetooth: hci0: command 0x0c1a tx timeout [ 1002.279618][T19496] FAULT_INJECTION: forcing a failure. [ 1002.279618][T19496] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.366459][T19496] CPU: 0 UID: 0 PID: 19496 Comm: syz.2.2623 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1002.366504][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.366523][T19496] Call Trace: [ 1002.366534][T19496] [ 1002.366548][T19496] dump_stack_lvl+0x16c/0x1f0 [ 1002.366601][T19496] should_fail_ex+0x512/0x640 [ 1002.366664][T19496] should_failslab+0xc2/0x120 [ 1002.366695][T19496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1002.366744][T19496] ? skb_clone+0x190/0x3f0 [ 1002.366799][T19496] skb_clone+0x190/0x3f0 [ 1002.366850][T19496] netlink_deliver_tap+0xabd/0xd30 [ 1002.366914][T19496] netlink_unicast+0x62f/0x850 [ 1002.366955][T19496] ? __pfx_netlink_unicast+0x10/0x10 [ 1002.367002][T19496] netlink_sendmsg+0x8d1/0xdd0 [ 1002.367043][T19496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.367094][T19496] ____sys_sendmsg+0xa98/0xc70 [ 1002.367131][T19496] ? copy_msghdr_from_user+0x10a/0x160 [ 1002.367179][T19496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.367235][T19496] ___sys_sendmsg+0x134/0x1d0 [ 1002.367288][T19496] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.367333][T19496] ? __lock_acquire+0x622/0x1c90 [ 1002.367436][T19496] __sys_sendmsg+0x16d/0x220 [ 1002.367486][T19496] ? __pfx___sys_sendmsg+0x10/0x10 [ 1002.367564][T19496] do_syscall_64+0xcd/0x490 [ 1002.367629][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.367667][T19496] RIP: 0033:0x7f634198e929 [ 1002.367692][T19496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.367723][T19496] RSP: 002b:00007f634274a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.367752][T19496] RAX: ffffffffffffffda RBX: 00007f6341bb5fa0 RCX: 00007f634198e929 [ 1002.367773][T19496] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003 [ 1002.367793][T19496] RBP: 00007f634274a090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.367830][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.367849][T19496] R13: 0000000000000000 R14: 00007f6341bb5fa0 R15: 00007fff1a391558 [ 1002.367892][T19496] [ 1002.752246][T19498] FAULT_INJECTION: forcing a failure. [ 1002.752246][T19498] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.804241][T19498] CPU: 1 UID: 0 PID: 19498 Comm: syz.0.2624 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1002.804288][T19498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.804315][T19498] Call Trace: [ 1002.804325][T19498] [ 1002.804337][T19498] dump_stack_lvl+0x16c/0x1f0 [ 1002.804392][T19498] should_fail_ex+0x512/0x640 [ 1002.804439][T19498] ? __kvmalloc_node_noprof+0x124/0x620 [ 1002.804491][T19498] should_failslab+0xc2/0x120 [ 1002.804523][T19498] __kvmalloc_node_noprof+0x137/0x620 [ 1002.804572][T19498] ? seq_read_iter+0x826/0x12c0 [ 1002.804620][T19498] ? seq_read_iter+0x826/0x12c0 [ 1002.804657][T19498] seq_read_iter+0x826/0x12c0 [ 1002.804697][T19498] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1002.804764][T19498] kernfs_fop_read_iter+0x40f/0x5a0 [ 1002.804806][T19498] copy_splice_read+0x615/0xba0 [ 1002.804857][T19498] ? __pfx_copy_splice_read+0x10/0x10 [ 1002.804903][T19498] ? look_up_lock_class+0x59/0x150 [ 1002.804958][T19498] ? lockdep_init_map_type+0x5c/0x280 [ 1002.805007][T19498] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1002.805058][T19498] ? __pfx_copy_splice_read+0x10/0x10 [ 1002.805099][T19498] do_splice_read+0x285/0x370 [ 1002.805145][T19498] splice_direct_to_actor+0x2a1/0xa30 [ 1002.805191][T19498] ? __pfx_direct_splice_actor+0x10/0x10 [ 1002.805242][T19498] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1002.805287][T19498] ? get_pid_task+0xfc/0x250 [ 1002.805350][T19498] do_splice_direct+0x174/0x240 [ 1002.805393][T19498] ? __pfx_do_splice_direct+0x10/0x10 [ 1002.805433][T19498] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1002.805480][T19498] ? rw_verify_area+0xcf/0x680 [ 1002.805524][T19498] do_sendfile+0xb06/0xe50 [ 1002.805576][T19498] ? __pfx_do_sendfile+0x10/0x10 [ 1002.805621][T19498] ? __fget_files+0x20e/0x3c0 [ 1002.805676][T19498] __x64_sys_sendfile64+0x1d8/0x220 [ 1002.805704][T19498] ? ksys_write+0x1ac/0x250 [ 1002.805748][T19498] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1002.805792][T19498] do_syscall_64+0xcd/0x490 [ 1002.805843][T19498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.805874][T19498] RIP: 0033:0x7fe306b8e929 [ 1002.805898][T19498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.805929][T19498] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1002.805958][T19498] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 1002.805979][T19498] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1002.805996][T19498] RBP: 00007fe3079d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.806013][T19498] R10: 0000000000000441 R11: 0000000000000246 R12: 0000000000000001 [ 1002.806030][T19498] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 1002.806072][T19498] [ 1003.079251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.161147][T17486] Bluetooth: hci3: command 0x0c1a tx timeout [ 1003.325019][T19504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'. [ 1003.375766][T17486] Bluetooth: hci4: command 0x0c1a tx timeout [ 1003.615805][T17486] Bluetooth: hci0: command 0x0c1a tx timeout [ 1004.136620][T19517] ubi0: attaching mtd0 [ 1004.155928][T19517] ubi0: scanning is finished [ 1004.160638][T19517] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1004.377137][T19517] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1005.487205][T19539] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 1005.575125][T19538] Invalid ELF header magic: != ELF [ 1006.920880][T19562] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1006.965620][T19562] CPU: 0 UID: 0 PID: 19562 Comm: syz.3.2641 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1006.965657][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.965670][T19562] Call Trace: [ 1006.965677][T19562] [ 1006.965686][T19562] dump_stack_lvl+0x16c/0x1f0 [ 1006.965724][T19562] sysfs_warn_dup+0x7f/0xa0 [ 1006.965753][T19562] sysfs_do_create_link_sd+0x124/0x140 [ 1006.965785][T19562] sysfs_create_link+0x61/0xc0 [ 1006.965814][T19562] device_add+0x62c/0x1a70 [ 1006.965841][T19562] ? __pfx_device_add+0x10/0x10 [ 1006.965862][T19562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1006.965898][T19562] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1006.965956][T19562] wiphy_register+0x1c9c/0x2850 [ 1006.966006][T19562] ? netdev_run_todo+0x864/0x1320 [ 1006.966046][T19562] ? __dev_printk+0x1e0/0x270 [ 1006.966085][T19562] ? __pfx_wiphy_register+0x10/0x10 [ 1006.966131][T19562] ieee80211_register_hw+0x24ac/0x4140 [ 1006.966168][T19562] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1006.966197][T19562] ? find_held_lock+0x2b/0x80 [ 1006.966223][T19562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1006.966261][T19562] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1006.966288][T19562] ? __hrtimer_setup+0x176/0x280 [ 1006.966329][T19562] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1006.966381][T19562] ? trace_kmalloc+0x2b/0xd0 [ 1006.966405][T19562] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1006.966445][T19562] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1006.966480][T19562] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1006.966517][T19562] ? __asan_memcpy+0x3c/0x60 [ 1006.966553][T19562] hwsim_new_radio_nl+0xb51/0x12c0 [ 1006.966593][T19562] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1006.966640][T19562] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1006.966671][T19562] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1006.966709][T19562] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1006.966740][T19562] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1006.966770][T19562] ? trace_cap_capable+0x18d/0x200 [ 1006.966801][T19562] ? bpf_lsm_capable+0x9/0x10 [ 1006.966830][T19562] ? security_capable+0x7e/0x260 [ 1006.966854][T19562] ? ns_capable+0xd7/0x110 [ 1006.966882][T19562] genl_rcv_msg+0x55c/0x800 [ 1006.966914][T19562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.966943][T19562] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1006.966997][T19562] netlink_rcv_skb+0x158/0x420 [ 1006.967021][T19562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.967052][T19562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1006.967090][T19562] ? netlink_deliver_tap+0x1ae/0xd30 [ 1006.967134][T19562] genl_rcv+0x28/0x40 [ 1006.967159][T19562] netlink_unicast+0x58a/0x850 [ 1006.967200][T19562] ? __pfx_netlink_unicast+0x10/0x10 [ 1006.967232][T19562] netlink_sendmsg+0x8d1/0xdd0 [ 1006.967260][T19562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.967295][T19562] ____sys_sendmsg+0xa98/0xc70 [ 1006.967322][T19562] ? copy_msghdr_from_user+0x10a/0x160 [ 1006.967356][T19562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.967387][T19562] ? try_to_wake_up+0xa2f/0x1680 [ 1006.967416][T19562] ___sys_sendmsg+0x134/0x1d0 [ 1006.967452][T19562] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.967486][T19562] ? wake_up_q+0xb0/0x160 [ 1006.967533][T19562] ? do_futex+0x122/0x350 [ 1006.967566][T19562] __sys_sendmsg+0x16d/0x220 [ 1006.967601][T19562] ? __pfx___sys_sendmsg+0x10/0x10 [ 1006.967635][T19562] ? __x64_sys_futex+0x1e0/0x4c0 [ 1006.967681][T19562] do_syscall_64+0xcd/0x490 [ 1006.967719][T19562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.967753][T19562] RIP: 0033:0x7f0795f8e929 [ 1006.967770][T19562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.967793][T19562] RSP: 002b:00007f0796e85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.967813][T19562] RAX: ffffffffffffffda RBX: 00007f07961b5fa0 RCX: 00007f0795f8e929 [ 1006.967828][T19562] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1006.967841][T19562] RBP: 00007f0796010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1006.967854][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.967867][T19562] R13: 0000000000000000 R14: 00007f07961b5fa0 R15: 00007ffc6a03c738 [ 1006.967895][T19562] [ 1007.384677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.527908][T19592] ubi0: attaching mtd0 [ 1009.553288][T19592] ubi0: scanning is finished [ 1009.558920][T19592] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1009.597429][T19583] FAULT_INJECTION: forcing a failure. [ 1009.597429][T19583] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.675793][T19583] CPU: 1 UID: 0 PID: 19583 Comm: syz.0.2646 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1009.675837][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1009.675857][T19583] Call Trace: [ 1009.675868][T19583] [ 1009.675880][T19583] dump_stack_lvl+0x16c/0x1f0 [ 1009.675945][T19583] should_fail_ex+0x512/0x640 [ 1009.675992][T19583] ? fs_reclaim_acquire+0xae/0x150 [ 1009.676029][T19583] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1009.676070][T19583] should_failslab+0xc2/0x120 [ 1009.676098][T19583] __kmalloc_noprof+0xd2/0x510 [ 1009.676151][T19583] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1009.676205][T19583] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1009.676243][T19583] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1009.676315][T19583] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.676375][T19583] tomoyo_file_open+0x6b/0x90 [ 1009.676424][T19583] security_file_open+0x84/0x1e0 [ 1009.676466][T19583] do_dentry_open+0x596/0x1c10 [ 1009.676523][T19583] vfs_open+0x82/0x3f0 [ 1009.676561][T19583] path_openat+0x1de4/0x2cb0 [ 1009.676615][T19583] ? __pfx_path_openat+0x10/0x10 [ 1009.676662][T19583] ? __lock_acquire+0xb8a/0x1c90 [ 1009.676709][T19583] do_filp_open+0x20b/0x470 [ 1009.676754][T19583] ? __pfx_do_filp_open+0x10/0x10 [ 1009.676848][T19583] ? alloc_fd+0x471/0x7d0 [ 1009.676903][T19583] do_sys_openat2+0x11b/0x1d0 [ 1009.676940][T19583] ? __pfx_do_sys_openat2+0x10/0x10 [ 1009.677000][T19583] __x64_sys_openat+0x174/0x210 [ 1009.677038][T19583] ? __pfx___x64_sys_openat+0x10/0x10 [ 1009.677073][T19583] ? ksys_write+0x1ac/0x250 [ 1009.677134][T19583] do_syscall_64+0xcd/0x490 [ 1009.677184][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.677217][T19583] RIP: 0033:0x7fe306b8e929 [ 1009.677242][T19583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.677274][T19583] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1009.677304][T19583] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 1009.677326][T19583] RDX: 0000000000002000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1009.677348][T19583] RBP: 00007fe3079d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.677369][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.677390][T19583] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 1009.677431][T19583] [ 1009.677446][T19583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.807330][T19597] FAULT_INJECTION: forcing a failure. [ 1009.807330][T19597] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.035703][T19597] CPU: 1 UID: 0 PID: 19597 Comm: syz.3.2647 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1010.035744][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.035762][T19597] Call Trace: [ 1010.035771][T19597] [ 1010.035781][T19597] dump_stack_lvl+0x16c/0x1f0 [ 1010.035818][T19597] should_fail_ex+0x512/0x640 [ 1010.035849][T19597] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1010.035890][T19597] should_failslab+0xc2/0x120 [ 1010.035910][T19597] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1010.035949][T19597] ? __alloc_skb+0x2b2/0x380 [ 1010.035983][T19597] __alloc_skb+0x2b2/0x380 [ 1010.036012][T19597] ? __pfx___alloc_skb+0x10/0x10 [ 1010.036045][T19597] ? __lock_acquire+0xb8a/0x1c90 [ 1010.036077][T19597] netlink_alloc_large_skb+0x69/0x130 [ 1010.036102][T19597] netlink_sendmsg+0x6a1/0xdd0 [ 1010.036128][T19597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.036159][T19597] ____sys_sendmsg+0xa98/0xc70 [ 1010.036184][T19597] ? copy_msghdr_from_user+0x10a/0x160 [ 1010.036216][T19597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1010.036243][T19597] ? kfree+0x24f/0x4d0 [ 1010.036267][T19597] ? __pfx__kstrtoull+0x10/0x10 [ 1010.036297][T19597] ___sys_sendmsg+0x134/0x1d0 [ 1010.036330][T19597] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.036385][T19597] ? __pfx___might_resched+0x10/0x10 [ 1010.036414][T19597] __sys_sendmmsg+0x200/0x420 [ 1010.036449][T19597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1010.036490][T19597] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.036534][T19597] ? fput+0x70/0xf0 [ 1010.036554][T19597] ? ksys_write+0x1ac/0x250 [ 1010.036584][T19597] ? __pfx_ksys_write+0x10/0x10 [ 1010.036618][T19597] __x64_sys_sendmmsg+0x9c/0x100 [ 1010.036649][T19597] ? lockdep_hardirqs_on+0x7c/0x110 [ 1010.036679][T19597] do_syscall_64+0xcd/0x490 [ 1010.036712][T19597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.036734][T19597] RIP: 0033:0x7f0795f8e929 [ 1010.036751][T19597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.036773][T19597] RSP: 002b:00007f0796e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1010.036794][T19597] RAX: ffffffffffffffda RBX: 00007f07961b6080 RCX: 00007f0795f8e929 [ 1010.036808][T19597] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1010.036822][T19597] RBP: 00007f0796e64090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.036835][T19597] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1010.036848][T19597] R13: 0000000000000000 R14: 00007f07961b6080 R15: 00007ffc6a03c738 [ 1010.036874][T19597] [ 1010.309328][T19592] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1011.064641][T19607] FAULT_INJECTION: forcing a failure. [ 1011.064641][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.102295][T19611] FAULT_INJECTION: forcing a failure. [ 1011.102295][T19611] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.102402][T19611] CPU: 1 UID: 0 PID: 19611 Comm: syz.2.2652 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1011.102442][T19611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.102461][T19611] Call Trace: [ 1011.102472][T19611] [ 1011.102485][T19611] dump_stack_lvl+0x16c/0x1f0 [ 1011.102544][T19611] should_fail_ex+0x512/0x640 [ 1011.102590][T19611] ? find_held_lock+0x2b/0x80 [ 1011.102627][T19611] ? bit_cursor+0x885/0x17e0 [ 1011.102654][T19611] should_failslab+0xc2/0x120 [ 1011.102687][T19611] __kmalloc_noprof+0xd2/0x510 [ 1011.102732][T19611] ? do_raw_spin_unlock+0x172/0x230 [ 1011.102773][T19611] bit_cursor+0x885/0x17e0 [ 1011.102890][T19611] ? __pfx_bit_cursor+0x10/0x10 [ 1011.102936][T19611] ? fb_get_color_depth+0x120/0x250 [ 1011.102984][T19611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1011.103037][T19611] ? get_color+0x1ce/0x440 [ 1011.103085][T19611] ? __pfx_bit_cursor+0x10/0x10 [ 1011.103113][T19611] fbcon_cursor+0x409/0x5f0 [ 1011.103169][T19611] hide_cursor+0x87/0x220 [ 1011.103215][T19611] redraw_screen+0x5d4/0x760 [ 1011.103266][T19611] ? __pfx_redraw_screen+0x10/0x10 [ 1011.103327][T19611] fbcon_resumed+0xc3/0x100 [ 1011.103374][T19611] fb_set_suspend+0x104/0x1a0 [ 1011.103424][T19611] store_fbstate+0xb8/0x110 [ 1011.103462][T19611] ? __pfx_store_fbstate+0x10/0x10 [ 1011.103501][T19611] ? find_held_lock+0x2b/0x80 [ 1011.103536][T19611] ? sysfs_file_kobj+0xe4/0x290 [ 1011.103579][T19611] ? __pfx_store_fbstate+0x10/0x10 [ 1011.103613][T19611] dev_attr_store+0x55/0x80 [ 1011.103647][T19611] ? __pfx_dev_attr_store+0x10/0x10 [ 1011.103679][T19611] sysfs_kf_write+0xef/0x150 [ 1011.103723][T19611] kernfs_fop_write_iter+0x351/0x510 [ 1011.103755][T19611] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1011.103801][T19611] vfs_write+0x6c7/0x1150 [ 1011.103850][T19611] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1011.103896][T19611] ? __pfx___mutex_lock+0x10/0x10 [ 1011.103945][T19611] ? __pfx_vfs_write+0x10/0x10 [ 1011.104023][T19611] ksys_write+0x12a/0x250 [ 1011.104070][T19611] ? __pfx_ksys_write+0x10/0x10 [ 1011.104130][T19611] do_syscall_64+0xcd/0x490 [ 1011.104184][T19611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.104217][T19611] RIP: 0033:0x7f634198e929 [ 1011.104243][T19611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.104275][T19611] RSP: 002b:00007f634274a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1011.104303][T19611] RAX: ffffffffffffffda RBX: 00007f6341bb5fa0 RCX: 00007f634198e929 [ 1011.104325][T19611] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1011.104346][T19611] RBP: 00007f634274a090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.104367][T19611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.104388][T19611] R13: 0000000000000000 R14: 00007f6341bb5fa0 R15: 00007fff1a391558 [ 1011.104432][T19611] [ 1011.115992][T19607] CPU: 1 UID: 0 PID: 19607 Comm: syz.0.2651 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1011.116047][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.116067][T19607] Call Trace: [ 1011.116078][T19607] [ 1011.116091][T19607] dump_stack_lvl+0x16c/0x1f0 [ 1011.116143][T19607] should_fail_ex+0x512/0x640 [ 1011.116188][T19607] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1011.116234][T19607] should_failslab+0xc2/0x120 [ 1011.116264][T19607] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1011.116317][T19607] ? devinet_init_net+0x56/0x910 [ 1011.116355][T19607] ? __pfx_devinet_init_net+0x10/0x10 [ 1011.116392][T19607] devinet_init_net+0x56/0x910 [ 1011.116431][T19607] ? __pfx_devinet_init_net+0x10/0x10 [ 1011.116468][T19607] ops_init+0x1df/0x5f0 [ 1011.116521][T19607] setup_net+0x1ff/0x510 [ 1011.116567][T19607] ? lockdep_init_map_type+0x5c/0x280 [ 1011.116611][T19607] ? __pfx_setup_net+0x10/0x10 [ 1011.116662][T19607] ? debug_mutex_init+0x37/0x70 [ 1011.116699][T19607] copy_net_ns+0x2a6/0x5f0 [ 1011.116733][T19607] create_new_namespaces+0x3ea/0xa90 [ 1011.116779][T19607] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1011.116819][T19607] ksys_unshare+0x45b/0xa40 [ 1011.116868][T19607] ? __pfx_ksys_unshare+0x10/0x10 [ 1011.116933][T19607] ? xfd_validate_state+0x61/0x180 [ 1011.116992][T19607] __x64_sys_unshare+0x31/0x40 [ 1011.117038][T19607] do_syscall_64+0xcd/0x490 [ 1011.117093][T19607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.117126][T19607] RIP: 0033:0x7fe306b8e929 [ 1011.117152][T19607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.117186][T19607] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1011.117217][T19607] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 1011.117240][T19607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1011.117262][T19607] RBP: 00007fe306c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1011.117282][T19607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.117302][T19607] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 1011.117344][T19607] [ 1011.161742][T19608] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1011.735272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.854836][T19630] Invalid ELF header magic: != ELF [ 1016.114071][T19663] zswap: compressor not available [ 1017.405014][T19697] Invalid ELF header magic: != ELF [ 1019.567215][T19734] netlink: zone id is out of range [ 1019.584896][T19734] netlink: zone id is out of range [ 1019.742925][T19734] netlink: set zone limit has 8 unknown bytes [ 1020.054701][T19736] FAULT_INJECTION: forcing a failure. [ 1020.054701][T19736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.125253][T19736] CPU: 0 UID: 0 PID: 19736 Comm: syz.2.2675 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1020.125301][T19736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.125321][T19736] Call Trace: [ 1020.125332][T19736] [ 1020.125346][T19736] dump_stack_lvl+0x16c/0x1f0 [ 1020.125401][T19736] should_fail_ex+0x512/0x640 [ 1020.125452][T19736] _copy_from_user+0x2e/0xd0 [ 1020.125504][T19736] copy_msghdr_from_user+0x98/0x160 [ 1020.125557][T19736] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1020.125623][T19736] ___sys_sendmsg+0xfe/0x1d0 [ 1020.125673][T19736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.125718][T19736] ? __lock_acquire+0x622/0x1c90 [ 1020.125814][T19736] __sys_sendmsg+0x16d/0x220 [ 1020.125871][T19736] ? __pfx___sys_sendmsg+0x10/0x10 [ 1020.125947][T19736] do_syscall_64+0xcd/0x490 [ 1020.125998][T19736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.126043][T19736] RIP: 0033:0x7f634198e929 [ 1020.126068][T19736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.126100][T19736] RSP: 002b:00007f6342729038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.126129][T19736] RAX: ffffffffffffffda RBX: 00007f6341bb6080 RCX: 00007f634198e929 [ 1020.126150][T19736] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000002 [ 1020.126168][T19736] RBP: 00007f6342729090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.126186][T19736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.126202][T19736] R13: 0000000000000000 R14: 00007f6341bb6080 R15: 00007fff1a391558 [ 1020.126240][T19736] [ 1021.581425][T19760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1021.590742][T19760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.612628][T19760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.636345][T19760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1021.696413][T19771] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1021.768807][T19771] CPU: 0 UID: 0 PID: 19771 Comm: syz.3.2681 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1021.768859][T19771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1021.768880][T19771] Call Trace: [ 1021.768892][T19771] [ 1021.768905][T19771] dump_stack_lvl+0x16c/0x1f0 [ 1021.768962][T19771] sysfs_warn_dup+0x7f/0xa0 [ 1021.769008][T19771] sysfs_do_create_link_sd+0x124/0x140 [ 1021.769060][T19771] sysfs_create_link+0x61/0xc0 [ 1021.769106][T19771] device_add+0x62c/0x1a70 [ 1021.769147][T19771] ? __pfx_device_add+0x10/0x10 [ 1021.769182][T19771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1021.769235][T19771] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1021.769300][T19771] wiphy_register+0x1c9c/0x2850 [ 1021.769339][T19771] ? netdev_run_todo+0x864/0x1320 [ 1021.769393][T19771] ? __dev_printk+0x1e0/0x270 [ 1021.769448][T19771] ? __pfx_wiphy_register+0x10/0x10 [ 1021.769508][T19771] ieee80211_register_hw+0x24ac/0x4140 [ 1021.769560][T19771] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1021.769603][T19771] ? find_held_lock+0x2b/0x80 [ 1021.769640][T19771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1021.769712][T19771] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1021.769761][T19771] ? __hrtimer_setup+0x176/0x280 [ 1021.769827][T19771] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1021.769902][T19771] ? trace_kmalloc+0x2b/0xd0 [ 1021.769938][T19771] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1021.769997][T19771] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1021.770050][T19771] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1021.770104][T19771] ? __asan_memcpy+0x3c/0x60 [ 1021.770157][T19771] hwsim_new_radio_nl+0xb51/0x12c0 [ 1021.770215][T19771] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1021.770281][T19771] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1021.770327][T19771] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1021.770383][T19771] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1021.770430][T19771] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1021.770474][T19771] ? trace_cap_capable+0x18d/0x200 [ 1021.770518][T19771] ? bpf_lsm_capable+0x9/0x10 [ 1021.770561][T19771] ? security_capable+0x7e/0x260 [ 1021.770596][T19771] ? ns_capable+0xd7/0x110 [ 1021.770638][T19771] genl_rcv_msg+0x55c/0x800 [ 1021.770685][T19771] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1021.770730][T19771] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1021.770807][T19771] netlink_rcv_skb+0x158/0x420 [ 1021.770844][T19771] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1021.770890][T19771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1021.770946][T19771] ? netlink_deliver_tap+0x1ae/0xd30 [ 1021.771012][T19771] genl_rcv+0x28/0x40 [ 1021.771046][T19771] netlink_unicast+0x58a/0x850 [ 1021.771088][T19771] ? __pfx_netlink_unicast+0x10/0x10 [ 1021.771137][T19771] netlink_sendmsg+0x8d1/0xdd0 [ 1021.771183][T19771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.771238][T19771] ____sys_sendmsg+0xa98/0xc70 [ 1021.771279][T19771] ? copy_msghdr_from_user+0x10a/0x160 [ 1021.771333][T19771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.771384][T19771] ? __pfx_futex_wake_mark+0x10/0x10 [ 1021.771443][T19771] ___sys_sendmsg+0x134/0x1d0 [ 1021.771499][T19771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.771549][T19771] ? __lock_acquire+0x622/0x1c90 [ 1021.771653][T19771] __sys_sendmsg+0x16d/0x220 [ 1021.771720][T19771] ? __pfx___sys_sendmsg+0x10/0x10 [ 1021.771778][T19771] ? __x64_sys_futex+0x1e0/0x4c0 [ 1021.771848][T19771] do_syscall_64+0xcd/0x490 [ 1021.771904][T19771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.771939][T19771] RIP: 0033:0x7f0795f8e929 [ 1021.771967][T19771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.772001][T19771] RSP: 002b:00007f0796e43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.772032][T19771] RAX: ffffffffffffffda RBX: 00007f07961b6160 RCX: 00007f0795f8e929 [ 1021.772055][T19771] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1021.772076][T19771] RBP: 00007f0796010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1021.772096][T19771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.772117][T19771] R13: 0000000000000000 R14: 00007f07961b6160 R15: 00007ffc6a03c738 [ 1021.772162][T19771] [ 1022.918435][T19782] random: crng reseeded on system resumption [ 1023.385351][T19782] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2686'. [ 1023.464831][T19791] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1023.514472][T19787] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2686'. [ 1023.615720][T17486] Bluetooth: hci4: command 0x0c1a tx timeout [ 1023.621888][T17486] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.628051][T17486] Bluetooth: hci2: command 0x0406 tx timeout [ 1023.697006][ T5169] Bluetooth: hci0: command 0x0c1a tx timeout [ 1024.097265][T19783] Invalid ELF header magic: != ELF [ 1026.177478][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 1026.431813][T19825] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 1028.597856][T19864] FAULT_INJECTION: forcing a failure. [ 1028.597856][T19864] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.613220][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.1.2701 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1028.613264][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.613284][T19864] Call Trace: [ 1028.613296][T19864] [ 1028.613310][T19864] dump_stack_lvl+0x16c/0x1f0 [ 1028.613371][T19864] should_fail_ex+0x512/0x640 [ 1028.613418][T19864] ? fs_reclaim_acquire+0xae/0x150 [ 1028.613453][T19864] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1028.613485][T19864] should_failslab+0xc2/0x120 [ 1028.613508][T19864] __kmalloc_noprof+0xd2/0x510 [ 1028.613549][T19864] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1028.613584][T19864] ? tomoyo_profile+0x47/0x60 [ 1028.613623][T19864] tomoyo_path_number_perm+0x245/0x580 [ 1028.613649][T19864] ? tomoyo_path_number_perm+0x237/0x580 [ 1028.613679][T19864] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1028.613708][T19864] ? find_held_lock+0x2b/0x80 [ 1028.613758][T19864] ? find_held_lock+0x2b/0x80 [ 1028.613781][T19864] ? hook_file_ioctl_common+0x145/0x410 [ 1028.613812][T19864] ? __fget_files+0x20e/0x3c0 [ 1028.613849][T19864] security_file_ioctl+0x9b/0x240 [ 1028.613880][T19864] __x64_sys_ioctl+0xb7/0x210 [ 1028.613909][T19864] do_syscall_64+0xcd/0x490 [ 1028.613946][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.613969][T19864] RIP: 0033:0x7fec06d8e929 [ 1028.613987][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.614009][T19864] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.614030][T19864] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 1028.614046][T19864] RDX: 0000000000000000 RSI: 00000000400454a4 RDI: 0000000000000003 [ 1028.614060][T19864] RBP: 00007fec07b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.614074][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.614089][T19864] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 1028.614119][T19864] [ 1028.785699][T19864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1028.788831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.828496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.834491][ C1] hrtimer: interrupt took 218990835 ns [ 1028.934551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.957603][T19856] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1031.545796][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1032.135404][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2708'. [ 1032.177327][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 1032.694144][T19913] Invalid ELF header magic: != ELF [ 1032.877533][T19919] Invalid ELF header magic: != ELF [ 1033.553762][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1034.258557][T19937] Invalid ELF header magic: != ELF [ 1035.150187][T19951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2722'. [ 1038.362697][T19994] Unable to find swap-space signature [ 1038.531350][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1040.303571][T20018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1040.922559][T20022] Invalid ELF header magic: != ELF [ 1041.195036][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 1042.014513][T20052] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1042.104963][T20052] CPU: 1 UID: 0 PID: 20052 Comm: syz.2.2743 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1042.105007][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.105025][T20052] Call Trace: [ 1042.105036][T20052] [ 1042.105048][T20052] dump_stack_lvl+0x16c/0x1f0 [ 1042.105098][T20052] sysfs_warn_dup+0x7f/0xa0 [ 1042.105140][T20052] sysfs_do_create_link_sd+0x124/0x140 [ 1042.105183][T20052] sysfs_create_link+0x61/0xc0 [ 1042.105223][T20052] device_add+0x62c/0x1a70 [ 1042.105260][T20052] ? __pfx_device_add+0x10/0x10 [ 1042.105291][T20052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1042.105340][T20052] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1042.105396][T20052] wiphy_register+0x1c9c/0x2850 [ 1042.105430][T20052] ? netdev_run_todo+0x864/0x1320 [ 1042.105479][T20052] ? __dev_printk+0x1e0/0x270 [ 1042.105533][T20052] ? __pfx_wiphy_register+0x10/0x10 [ 1042.105590][T20052] ieee80211_register_hw+0x24ac/0x4140 [ 1042.105639][T20052] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1042.105678][T20052] ? find_held_lock+0x2b/0x80 [ 1042.105711][T20052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1042.105758][T20052] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1042.105794][T20052] ? __hrtimer_setup+0x176/0x280 [ 1042.105846][T20052] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1042.105935][T20052] ? trace_kmalloc+0x2b/0xd0 [ 1042.105967][T20052] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1042.106020][T20052] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1042.106066][T20052] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1042.106111][T20052] ? __asan_memcpy+0x3c/0x60 [ 1042.106158][T20052] hwsim_new_radio_nl+0xb51/0x12c0 [ 1042.106209][T20052] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1042.106269][T20052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1042.106311][T20052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1042.106361][T20052] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1042.106404][T20052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1042.106451][T20052] ? trace_cap_capable+0x18d/0x200 [ 1042.106494][T20052] ? bpf_lsm_capable+0x9/0x10 [ 1042.106532][T20052] ? security_capable+0x7e/0x260 [ 1042.106564][T20052] ? ns_capable+0xd7/0x110 [ 1042.106602][T20052] genl_rcv_msg+0x55c/0x800 [ 1042.106645][T20052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.106684][T20052] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1042.106744][T20052] netlink_rcv_skb+0x158/0x420 [ 1042.106776][T20052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.106815][T20052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1042.106865][T20052] ? netlink_deliver_tap+0x1ae/0xd30 [ 1042.106932][T20052] genl_rcv+0x28/0x40 [ 1042.106965][T20052] netlink_unicast+0x58a/0x850 [ 1042.107003][T20052] ? __pfx_netlink_unicast+0x10/0x10 [ 1042.107046][T20052] netlink_sendmsg+0x8d1/0xdd0 [ 1042.107086][T20052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.107135][T20052] ____sys_sendmsg+0xa98/0xc70 [ 1042.107172][T20052] ? copy_msghdr_from_user+0x10a/0x160 [ 1042.107219][T20052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.107264][T20052] ? __pfx_futex_wake_mark+0x10/0x10 [ 1042.107316][T20052] ___sys_sendmsg+0x134/0x1d0 [ 1042.107367][T20052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.107414][T20052] ? __futex_hash.constprop.0+0x1e9/0x440 [ 1042.107486][T20052] ? do_futex+0x122/0x350 [ 1042.107532][T20052] __sys_sendmsg+0x16d/0x220 [ 1042.107579][T20052] ? __pfx___sys_sendmsg+0x10/0x10 [ 1042.107625][T20052] ? __x64_sys_futex+0x1e0/0x4c0 [ 1042.107688][T20052] do_syscall_64+0xcd/0x490 [ 1042.107739][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.107771][T20052] RIP: 0033:0x7f634198e929 [ 1042.107796][T20052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.107826][T20052] RSP: 002b:00007f634274a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.107857][T20052] RAX: ffffffffffffffda RBX: 00007f6341bb5fa0 RCX: 00007f634198e929 [ 1042.107878][T20052] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1042.107898][T20052] RBP: 00007f6341a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1042.107926][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.107945][T20052] R13: 0000000000000000 R14: 00007f6341bb5fa0 R15: 00007fff1a391558 [ 1042.107987][T20052] [ 1042.519177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1047.945475][T20102] FAULT_INJECTION: forcing a failure. [ 1047.945475][T20102] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.047078][T20102] CPU: 1 UID: 0 PID: 20102 Comm: syz.3.2752 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1048.047122][T20102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1048.047139][T20102] Call Trace: [ 1048.047150][T20102] [ 1048.047162][T20102] dump_stack_lvl+0x16c/0x1f0 [ 1048.047209][T20102] should_fail_ex+0x512/0x640 [ 1048.047253][T20102] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1048.047303][T20102] should_failslab+0xc2/0x120 [ 1048.047332][T20102] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1048.047377][T20102] ? __lock_acquire+0xb8a/0x1c90 [ 1048.047414][T20102] ? __alloc_skb+0x2b2/0x380 [ 1048.047462][T20102] __alloc_skb+0x2b2/0x380 [ 1048.047522][T20102] ? __pfx___alloc_skb+0x10/0x10 [ 1048.047571][T20102] ? do_raw_spin_lock+0x12c/0x2b0 [ 1048.047619][T20102] ? find_held_lock+0x2b/0x80 [ 1048.047659][T20102] inet6_netconf_notify_devconf+0x87/0x180 [ 1048.047726][T20102] ip6_mroute_setsockopt+0x1253/0x20d0 [ 1048.047781][T20102] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1048.047843][T20102] ? find_held_lock+0x2b/0x80 [ 1048.047875][T20102] ? is_bpf_text_address+0x8a/0x1a0 [ 1048.047929][T20102] ? kernel_text_address+0x8d/0x100 [ 1048.047959][T20102] ? __kernel_text_address+0xd/0x40 [ 1048.047987][T20102] ? unwind_get_return_address+0x59/0xa0 [ 1048.048038][T20102] ? arch_stack_walk+0xa6/0x100 [ 1048.048077][T20102] ? do_ipv6_setsockopt+0x7b1/0x4300 [ 1048.048115][T20102] do_ipv6_setsockopt+0x7b1/0x4300 [ 1048.048160][T20102] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1048.048196][T20102] ? _kstrtoull+0x145/0x200 [ 1048.048236][T20102] ? aa_label_sk_perm+0x19b/0x5a0 [ 1048.048278][T20102] ? find_held_lock+0x2b/0x80 [ 1048.048311][T20102] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1048.048349][T20102] ? __lock_acquire+0x622/0x1c90 [ 1048.048423][T20102] ? __pfx___might_resched+0x10/0x10 [ 1048.048466][T20102] ? ipv6_setsockopt+0xcb/0x170 [ 1048.048498][T20102] ipv6_setsockopt+0xcb/0x170 [ 1048.048551][T20102] rawv6_setsockopt+0xc2/0x510 [ 1048.048582][T20102] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1048.048613][T20102] ? sock_common_setsockopt+0x2e/0xf0 [ 1048.048645][T20102] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1048.048683][T20102] do_sock_setsockopt+0x224/0x470 [ 1048.048714][T20102] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1048.048768][T20102] __sys_setsockopt+0x120/0x1a0 [ 1048.048818][T20102] __x64_sys_setsockopt+0xbd/0x160 [ 1048.048858][T20102] ? do_syscall_64+0x91/0x490 [ 1048.048900][T20102] ? lockdep_hardirqs_on+0x7c/0x110 [ 1048.048943][T20102] do_syscall_64+0xcd/0x490 [ 1048.048990][T20102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.049019][T20102] RIP: 0033:0x7f0795f8e929 [ 1048.049042][T20102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.049070][T20102] RSP: 002b:00007f0796e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1048.049098][T20102] RAX: ffffffffffffffda RBX: 00007f07961b5fa0 RCX: 00007f0795f8e929 [ 1048.049119][T20102] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 0400000000000003 [ 1048.049139][T20102] RBP: 00007f0796e85090 R08: 0000000000000567 R09: 0000000000000000 [ 1048.049157][T20102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.049176][T20102] R13: 0000000000000000 R14: 00007f07961b5fa0 R15: 00007ffc6a03c738 [ 1048.049215][T20102] [ 1051.875466][T20155] Invalid ELF header magic: != ELF [ 1052.875001][T20167] FAULT_INJECTION: forcing a failure. [ 1052.875001][T20167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.022170][T20167] CPU: 1 UID: 0 PID: 20167 Comm: syz.3.2764 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1053.022205][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.022219][T20167] Call Trace: [ 1053.022227][T20167] [ 1053.022236][T20167] dump_stack_lvl+0x16c/0x1f0 [ 1053.022283][T20167] should_fail_ex+0x512/0x640 [ 1053.022321][T20167] _copy_from_iter+0x463/0x16f0 [ 1053.022364][T20167] ? __pfx__copy_from_iter+0x10/0x10 [ 1053.022399][T20167] ? do_raw_spin_lock+0x12c/0x2b0 [ 1053.022438][T20167] ? find_held_lock+0x2b/0x80 [ 1053.022465][T20167] ? rcu_is_watching+0x12/0xc0 [ 1053.022490][T20167] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1053.022526][T20167] write_pool_user+0xe8/0x2f0 [ 1053.022553][T20167] ? __pfx_write_pool_user+0x10/0x10 [ 1053.022585][T20167] ? __lock_acquire+0x622/0x1c90 [ 1053.022616][T20167] ? copy_iovec_from_user+0x131/0x170 [ 1053.022656][T20167] do_iter_readv_writev+0x657/0x950 [ 1053.022691][T20167] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1053.022727][T20167] ? bpf_lsm_file_permission+0x9/0x10 [ 1053.022753][T20167] ? security_file_permission+0x71/0x210 [ 1053.022785][T20167] ? rw_verify_area+0xcf/0x680 [ 1053.022817][T20167] vfs_writev+0x35f/0xde0 [ 1053.022855][T20167] ? __pfx_vfs_writev+0x10/0x10 [ 1053.022907][T20167] ? __fget_files+0x20e/0x3c0 [ 1053.022941][T20167] ? __fget_files+0x180/0x3c0 [ 1053.022997][T20167] ? do_writev+0x132/0x340 [ 1053.023037][T20167] do_writev+0x132/0x340 [ 1053.023079][T20167] ? __pfx_do_writev+0x10/0x10 [ 1053.023139][T20167] do_syscall_64+0xcd/0x490 [ 1053.023189][T20167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.023223][T20167] RIP: 0033:0x7f0795f8e929 [ 1053.023256][T20167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.023289][T20167] RSP: 002b:00007f0796e64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1053.023320][T20167] RAX: ffffffffffffffda RBX: 00007f07961b6080 RCX: 00007f0795f8e929 [ 1053.023343][T20167] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 000000000000000a [ 1053.023365][T20167] RBP: 00007f0796e64090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.023385][T20167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.023406][T20167] R13: 0000000000000000 R14: 00007f07961b6080 R15: 00007ffc6a03c738 [ 1053.023448][T20167] [ 1053.771152][T20177] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1053.852330][T20177] CPU: 0 UID: 0 PID: 20177 Comm: syz.1.2766 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1053.852368][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.852382][T20177] Call Trace: [ 1053.852390][T20177] [ 1053.852399][T20177] dump_stack_lvl+0x16c/0x1f0 [ 1053.852437][T20177] sysfs_warn_dup+0x7f/0xa0 [ 1053.852467][T20177] sysfs_do_create_link_sd+0x124/0x140 [ 1053.852500][T20177] sysfs_create_link+0x61/0xc0 [ 1053.852529][T20177] device_add+0x62c/0x1a70 [ 1053.852556][T20177] ? __pfx_device_add+0x10/0x10 [ 1053.852578][T20177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1053.852614][T20177] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1053.852661][T20177] wiphy_register+0x1c9c/0x2850 [ 1053.852705][T20177] ? netdev_run_todo+0x864/0x1320 [ 1053.852745][T20177] ? __dev_printk+0x1e0/0x270 [ 1053.852784][T20177] ? __pfx_wiphy_register+0x10/0x10 [ 1053.852827][T20177] ieee80211_register_hw+0x24ac/0x4140 [ 1053.852865][T20177] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1053.852896][T20177] ? find_held_lock+0x2b/0x80 [ 1053.852923][T20177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1053.852961][T20177] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1053.852989][T20177] ? __hrtimer_setup+0x176/0x280 [ 1053.853031][T20177] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1053.853084][T20177] ? trace_kmalloc+0x2b/0xd0 [ 1053.853107][T20177] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1053.853148][T20177] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1053.853189][T20177] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1053.853227][T20177] ? __asan_memcpy+0x3c/0x60 [ 1053.853264][T20177] hwsim_new_radio_nl+0xb51/0x12c0 [ 1053.853305][T20177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1053.853352][T20177] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1053.853385][T20177] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1053.853423][T20177] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1053.853455][T20177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1053.853486][T20177] ? trace_cap_capable+0x18d/0x200 [ 1053.853517][T20177] ? bpf_lsm_capable+0x9/0x10 [ 1053.853552][T20177] ? security_capable+0x7e/0x260 [ 1053.853577][T20177] ? ns_capable+0xd7/0x110 [ 1053.853606][T20177] genl_rcv_msg+0x55c/0x800 [ 1053.853639][T20177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1053.853669][T20177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1053.853717][T20177] netlink_rcv_skb+0x158/0x420 [ 1053.853742][T20177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1053.853773][T20177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1053.853810][T20177] ? netlink_deliver_tap+0x1ae/0xd30 [ 1053.853855][T20177] genl_rcv+0x28/0x40 [ 1053.853890][T20177] netlink_unicast+0x58a/0x850 [ 1053.853928][T20177] ? __pfx_netlink_unicast+0x10/0x10 [ 1053.853959][T20177] netlink_sendmsg+0x8d1/0xdd0 [ 1053.853985][T20177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.854018][T20177] ____sys_sendmsg+0xa98/0xc70 [ 1053.854044][T20177] ? copy_msghdr_from_user+0x10a/0x160 [ 1053.854077][T20177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.854108][T20177] ? __pfx_futex_wake_mark+0x10/0x10 [ 1053.854144][T20177] ___sys_sendmsg+0x134/0x1d0 [ 1053.854185][T20177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.854217][T20177] ? sched_clock_cpu+0x6c/0x530 [ 1053.854271][T20177] ? do_futex+0x122/0x350 [ 1053.854303][T20177] __sys_sendmsg+0x16d/0x220 [ 1053.854357][T20177] ? __pfx___sys_sendmsg+0x10/0x10 [ 1053.854393][T20177] ? __x64_sys_futex+0x1e0/0x4c0 [ 1053.854440][T20177] do_syscall_64+0xcd/0x490 [ 1053.854480][T20177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.854504][T20177] RIP: 0033:0x7fec06d8e929 [ 1053.854523][T20177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.854547][T20177] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.854570][T20177] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 1053.854586][T20177] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1053.854602][T20177] RBP: 00007fec06e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1053.854618][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.854632][T20177] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 1053.854662][T20177] [ 1054.847590][T20183] FAULT_INJECTION: forcing a failure. [ 1054.847590][T20183] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.985636][T20183] CPU: 1 UID: 0 PID: 20183 Comm: syz.3.2767 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1054.985682][T20183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.985702][T20183] Call Trace: [ 1054.985714][T20183] [ 1054.985727][T20183] dump_stack_lvl+0x16c/0x1f0 [ 1054.985780][T20183] should_fail_ex+0x512/0x640 [ 1054.985827][T20183] ? fs_reclaim_acquire+0xae/0x150 [ 1054.985871][T20183] should_failslab+0xc2/0x120 [ 1054.985903][T20183] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1054.985956][T20183] ? security_inode_alloc+0x3b/0x2b0 [ 1054.986000][T20183] security_inode_alloc+0x3b/0x2b0 [ 1054.986035][T20183] inode_init_always_gfp+0xce4/0x1030 [ 1054.986098][T20183] alloc_inode+0x86/0x240 [ 1054.986132][T20183] alloc_anon_inode+0x28/0x3e0 [ 1054.986193][T20183] ioctx_alloc+0x4ad/0x2120 [ 1054.986244][T20183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.986306][T20183] ? find_held_lock+0x2b/0x80 [ 1054.986337][T20183] ? __pfx_ioctx_alloc+0x10/0x10 [ 1054.986373][T20183] ? __might_fault+0x13b/0x190 [ 1054.986427][T20183] __x64_sys_io_setup+0xc9/0x210 [ 1054.986468][T20183] do_syscall_64+0xcd/0x490 [ 1054.986514][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.986545][T20183] RIP: 0033:0x7f0795f8e929 [ 1054.986568][T20183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.986597][T20183] RSP: 002b:00007f0796e85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1054.986625][T20183] RAX: ffffffffffffffda RBX: 00007f07961b5fa0 RCX: 00007f0795f8e929 [ 1054.986645][T20183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 1054.986663][T20183] RBP: 00007f0796e85090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.986684][T20183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.986703][T20183] R13: 0000000000000000 R14: 00007f07961b5fa0 R15: 00007ffc6a03c738 [ 1054.986741][T20183] [ 1055.845071][T20195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1056.937907][T20204] Invalid ELF header magic: != ELF [ 1058.329795][T20227] Invalid ELF header magic: != ELF [ 1059.386672][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.393025][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.566620][T20254] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1062.605655][T20254] CPU: 0 UID: 0 PID: 20254 Comm: syz.1.2779 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1062.605716][T20254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1062.605738][T20254] Call Trace: [ 1062.605751][T20254] [ 1062.605764][T20254] dump_stack_lvl+0x16c/0x1f0 [ 1062.605822][T20254] sysfs_warn_dup+0x7f/0xa0 [ 1062.605868][T20254] sysfs_do_create_link_sd+0x124/0x140 [ 1062.605919][T20254] sysfs_create_link+0x61/0xc0 [ 1062.605966][T20254] device_add+0x62c/0x1a70 [ 1062.606008][T20254] ? __pfx_device_add+0x10/0x10 [ 1062.606042][T20254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1062.606115][T20254] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1062.606201][T20254] wiphy_register+0x1c9c/0x2850 [ 1062.606252][T20254] ? netdev_run_todo+0x864/0x1320 [ 1062.606306][T20254] ? __dev_printk+0x1e0/0x270 [ 1062.606371][T20254] ? __pfx_wiphy_register+0x10/0x10 [ 1062.606440][T20254] ieee80211_register_hw+0x24ac/0x4140 [ 1062.606495][T20254] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1062.606538][T20254] ? find_held_lock+0x2b/0x80 [ 1062.606575][T20254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1062.606628][T20254] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1062.606667][T20254] ? __hrtimer_setup+0x176/0x280 [ 1062.606729][T20254] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1062.606804][T20254] ? trace_kmalloc+0x2b/0xd0 [ 1062.606838][T20254] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1062.606893][T20254] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1062.606943][T20254] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1062.606995][T20254] ? __asan_memcpy+0x3c/0x60 [ 1062.607047][T20254] hwsim_new_radio_nl+0xb51/0x12c0 [ 1062.607102][T20254] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1062.607169][T20254] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1062.607215][T20254] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1062.607269][T20254] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1062.607315][T20254] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1062.607357][T20254] ? trace_cap_capable+0x18d/0x200 [ 1062.607421][T20254] ? bpf_lsm_capable+0x9/0x10 [ 1062.607460][T20254] ? security_capable+0x7e/0x260 [ 1062.607492][T20254] ? ns_capable+0xd7/0x110 [ 1062.607530][T20254] genl_rcv_msg+0x55c/0x800 [ 1062.607571][T20254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.607610][T20254] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1062.607673][T20254] netlink_rcv_skb+0x158/0x420 [ 1062.607707][T20254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.607747][T20254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1062.607796][T20254] ? netlink_deliver_tap+0x1ae/0xd30 [ 1062.607854][T20254] genl_rcv+0x28/0x40 [ 1062.607886][T20254] netlink_unicast+0x58a/0x850 [ 1062.607924][T20254] ? __pfx_netlink_unicast+0x10/0x10 [ 1062.607970][T20254] netlink_sendmsg+0x8d1/0xdd0 [ 1062.608010][T20254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.608058][T20254] ____sys_sendmsg+0xa98/0xc70 [ 1062.608096][T20254] ? copy_msghdr_from_user+0x10a/0x160 [ 1062.608143][T20254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.608180][T20254] ? try_to_wake_up+0xa2f/0x1680 [ 1062.608221][T20254] ___sys_sendmsg+0x134/0x1d0 [ 1062.608270][T20254] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.608315][T20254] ? wake_up_q+0xb0/0x160 [ 1062.608380][T20254] ? do_futex+0x122/0x350 [ 1062.608435][T20254] __sys_sendmsg+0x16d/0x220 [ 1062.608483][T20254] ? __pfx___sys_sendmsg+0x10/0x10 [ 1062.608529][T20254] ? __x64_sys_futex+0x1e0/0x4c0 [ 1062.608593][T20254] do_syscall_64+0xcd/0x490 [ 1062.608643][T20254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.608676][T20254] RIP: 0033:0x7fec06d8e929 [ 1062.608703][T20254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.608733][T20254] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.608763][T20254] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 1062.608785][T20254] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1062.608805][T20254] RBP: 00007fec06e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1062.608824][T20254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.608842][T20254] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 1062.608883][T20254] [ 1065.327441][T20284] FAULT_INJECTION: forcing a failure. [ 1065.327441][T20284] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.389989][T20284] CPU: 1 UID: 0 PID: 20284 Comm: syz.0.2786 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1065.390037][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.390057][T20284] Call Trace: [ 1065.390068][T20284] [ 1065.390082][T20284] dump_stack_lvl+0x16c/0x1f0 [ 1065.390134][T20284] should_fail_ex+0x512/0x640 [ 1065.390205][T20284] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1065.390261][T20284] should_failslab+0xc2/0x120 [ 1065.390296][T20284] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1065.390347][T20284] ? vma_merge_new_range+0x37f/0xa00 [ 1065.390403][T20284] ? vm_area_alloc+0x1f/0x160 [ 1065.390449][T20284] vm_area_alloc+0x1f/0x160 [ 1065.390490][T20284] __mmap_region+0xf0a/0x25e0 [ 1065.390543][T20284] ? __pfx___mmap_region+0x10/0x10 [ 1065.390591][T20284] ? rcu_is_watching+0x12/0xc0 [ 1065.390633][T20284] ? rcu_is_watching+0x12/0xc0 [ 1065.390666][T20284] ? trace_sched_exit_tp+0xde/0x130 [ 1065.390705][T20284] ? __schedule+0x1181/0x5de0 [ 1065.390743][T20284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1065.390787][T20284] ? __lock_acquire+0xb8a/0x1c90 [ 1065.390843][T20284] ? __pfx___schedule+0x10/0x10 [ 1065.390930][T20284] ? trace_cap_capable+0x18d/0x200 [ 1065.390976][T20284] mmap_region+0x1ab/0x3f0 [ 1065.391024][T20284] ? __get_unmapped_area+0x267/0x440 [ 1065.391064][T20284] do_mmap+0xa3e/0x1210 [ 1065.391106][T20284] ? __pfx_do_mmap+0x10/0x10 [ 1065.391143][T20284] ? __pfx_down_write_killable+0x10/0x10 [ 1065.391188][T20284] vm_mmap_pgoff+0x281/0x450 [ 1065.391229][T20284] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1065.391270][T20284] ? __x64_sys_futex+0x1e0/0x4c0 [ 1065.391308][T20284] ? __x64_sys_futex+0x1e9/0x4c0 [ 1065.391351][T20284] ksys_mmap_pgoff+0x7d/0x5c0 [ 1065.391385][T20284] ? xfd_validate_state+0x61/0x180 [ 1065.391427][T20284] ? __task_pid_nr_ns+0x17c/0x500 [ 1065.391475][T20284] __x64_sys_mmap+0x125/0x190 [ 1065.391526][T20284] do_syscall_64+0xcd/0x490 [ 1065.391576][T20284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.391607][T20284] RIP: 0033:0x7fe306b8e929 [ 1065.391633][T20284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.391665][T20284] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1065.391703][T20284] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 1065.391725][T20284] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 1065.391745][T20284] RBP: 00007fe306c10b39 R08: 0000000000000002 R09: 0000000000008000 [ 1065.391765][T20284] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1065.391785][T20284] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 1065.391826][T20284] [ 1065.917337][T20295] usbcore.quirks: string doesn't fit in 127 chars. [ 1066.502105][T20294] Invalid ELF header magic: != ELF [ 1066.705704][T20301] Invalid ELF header magic: != ELF [ 1067.418462][T20313] sp0: Synchronizing with TNC [ 1068.401863][T20315] sp0: Synchronizing with TNC [ 1068.877461][T20321] ubi0: attaching mtd0 [ 1069.078559][T20321] ubi0: scanning is finished [ 1069.083296][T20321] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1069.550656][T20321] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1070.946354][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 1072.617433][T20364] Invalid ELF header magic: != ELF [ 1073.333196][T20380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2804'. [ 1074.321151][T20394] FAULT_INJECTION: forcing a failure. [ 1074.321151][T20394] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.321210][T20394] CPU: 1 UID: 0 PID: 20394 Comm: syz.0.2808 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1074.321252][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1074.321271][T20394] Call Trace: [ 1074.321283][T20394] [ 1074.321295][T20394] dump_stack_lvl+0x16c/0x1f0 [ 1074.321346][T20394] should_fail_ex+0x512/0x640 [ 1074.321402][T20394] ? find_held_lock+0x2b/0x80 [ 1074.321443][T20394] ? bit_cursor+0x885/0x17e0 [ 1074.321466][T20394] should_failslab+0xc2/0x120 [ 1074.321493][T20394] __kmalloc_noprof+0xd2/0x510 [ 1074.321529][T20394] ? do_raw_spin_unlock+0x172/0x230 [ 1074.321562][T20394] bit_cursor+0x885/0x17e0 [ 1074.321595][T20394] ? __pfx_bit_cursor+0x10/0x10 [ 1074.321632][T20394] ? fb_get_color_depth+0x120/0x250 [ 1074.321670][T20394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1074.321722][T20394] ? get_color+0x1ce/0x440 [ 1074.321766][T20394] ? __pfx_bit_cursor+0x10/0x10 [ 1074.321810][T20394] fbcon_cursor+0x409/0x5f0 [ 1074.321864][T20394] hide_cursor+0x87/0x220 [ 1074.321907][T20394] do_con_write+0x23f7/0x8280 [ 1074.321939][T20394] ? __pfx___might_resched+0x10/0x10 [ 1074.321976][T20394] ? rcu_is_watching+0x12/0xc0 [ 1074.322010][T20394] ? trace_contention_end+0xdd/0x130 [ 1074.322057][T20394] ? __mutex_lock+0x1ca/0xb90 [ 1074.322106][T20394] ? n_tty_write+0x549/0x1160 [ 1074.322149][T20394] ? __pfx_do_con_write+0x10/0x10 [ 1074.322199][T20394] con_write+0x23/0xb0 [ 1074.322229][T20394] n_tty_write+0x40f/0x1160 [ 1074.322284][T20394] ? __pfx_n_tty_write+0x10/0x10 [ 1074.322320][T20394] ? rcu_is_watching+0x12/0xc0 [ 1074.322355][T20394] ? __pfx_woken_wake_function+0x10/0x10 [ 1074.322389][T20394] ? kfree+0x24f/0x4d0 [ 1074.322425][T20394] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 1074.322489][T20394] ? __pfx_n_tty_write+0x10/0x10 [ 1074.322528][T20394] file_tty_write.constprop.0+0x501/0x9b0 [ 1074.322592][T20394] redirected_tty_write+0xd4/0x150 [ 1074.322641][T20394] vfs_write+0x6c7/0x1150 [ 1074.322688][T20394] ? __pfx_redirected_tty_write+0x10/0x10 [ 1074.322743][T20394] ? __pfx_vfs_write+0x10/0x10 [ 1074.322782][T20394] ? find_held_lock+0x2b/0x80 [ 1074.322842][T20394] ksys_write+0x12a/0x250 [ 1074.322886][T20394] ? __pfx_ksys_write+0x10/0x10 [ 1074.322943][T20394] do_syscall_64+0xcd/0x490 [ 1074.322995][T20394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.323028][T20394] RIP: 0033:0x7fe306b8e929 [ 1074.323054][T20394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.323085][T20394] RSP: 002b:00007fe3079d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1074.323115][T20394] RAX: ffffffffffffffda RBX: 00007fe306db5fa0 RCX: 00007fe306b8e929 [ 1074.323136][T20394] RDX: 000000000000023d RSI: 0000200000000e00 RDI: 0000000000000003 [ 1074.323157][T20394] RBP: 00007fe3079d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.323177][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.323196][T20394] R13: 0000000000000000 R14: 00007fe306db5fa0 R15: 00007ffca579f298 [ 1074.323240][T20394] [ 1074.529248][T20400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1074.532950][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1075.268409][T20400] hsr_slave_0 (unregistering): left promiscuous mode [ 1077.754743][T20427] Invalid ELF header magic: != ELF [ 1078.187244][T20440] Invalid ELF header magic: != ELF [ 1079.048712][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2820'. [ 1082.324771][T20509] Invalid ELF header magic: != ELF [ 1082.861385][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1082.900811][T20519] Invalid ELF header magic: != ELF [ 1083.289326][T20525] Invalid ELF header magic: != ELF [ 1083.979460][T20534] FAULT_INJECTION: forcing a failure. [ 1083.979460][T20534] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.979495][T20534] CPU: 0 UID: 0 PID: 20534 Comm: syz.3.2835 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1083.979525][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1083.979540][T20534] Call Trace: [ 1083.979548][T20534] [ 1083.979557][T20534] dump_stack_lvl+0x16c/0x1f0 [ 1083.979596][T20534] should_fail_ex+0x512/0x640 [ 1083.979630][T20534] ? find_held_lock+0x2b/0x80 [ 1083.979657][T20534] ? bit_cursor+0x885/0x17e0 [ 1083.979677][T20534] should_failslab+0xc2/0x120 [ 1083.979701][T20534] __kmalloc_noprof+0xd2/0x510 [ 1083.979734][T20534] ? do_raw_spin_unlock+0x172/0x230 [ 1083.979762][T20534] bit_cursor+0x885/0x17e0 [ 1083.979791][T20534] ? __pfx_bit_cursor+0x10/0x10 [ 1083.979822][T20534] ? fb_get_color_depth+0x120/0x250 [ 1083.979856][T20534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1083.979894][T20534] ? get_color+0x1ce/0x440 [ 1083.979928][T20534] ? __pfx_bit_cursor+0x10/0x10 [ 1083.979947][T20534] fbcon_cursor+0x409/0x5f0 [ 1083.979986][T20534] hide_cursor+0x87/0x220 [ 1083.980020][T20534] do_con_write+0x23f7/0x8280 [ 1083.980042][T20534] ? __pfx___might_resched+0x10/0x10 [ 1083.980070][T20534] ? rcu_is_watching+0x12/0xc0 [ 1083.980095][T20534] ? trace_contention_end+0xdd/0x130 [ 1083.980130][T20534] ? __mutex_lock+0x1ca/0xb90 [ 1083.980168][T20534] ? n_tty_write+0x549/0x1160 [ 1083.980198][T20534] ? __pfx_do_con_write+0x10/0x10 [ 1083.980235][T20534] con_write+0x23/0xb0 [ 1083.980256][T20534] n_tty_write+0x40f/0x1160 [ 1083.980295][T20534] ? __pfx_n_tty_write+0x10/0x10 [ 1083.980320][T20534] ? rcu_is_watching+0x12/0xc0 [ 1083.980352][T20534] ? __pfx_woken_wake_function+0x10/0x10 [ 1083.980377][T20534] ? kfree+0x24f/0x4d0 [ 1083.980404][T20534] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 1083.980445][T20534] ? __pfx_n_tty_write+0x10/0x10 [ 1083.980473][T20534] file_tty_write.constprop.0+0x501/0x9b0 [ 1083.980530][T20534] redirected_tty_write+0xd4/0x150 [ 1083.980567][T20534] vfs_write+0x6c7/0x1150 [ 1083.980600][T20534] ? __pfx_redirected_tty_write+0x10/0x10 [ 1083.980640][T20534] ? __pfx_vfs_write+0x10/0x10 [ 1083.980670][T20534] ? find_held_lock+0x2b/0x80 [ 1083.980712][T20534] ksys_write+0x12a/0x250 [ 1083.980745][T20534] ? __pfx_ksys_write+0x10/0x10 [ 1083.980786][T20534] do_syscall_64+0xcd/0x490 [ 1083.980823][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.980846][T20534] RIP: 0033:0x7f0795f8e929 [ 1083.980863][T20534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.980886][T20534] RSP: 002b:00007f0796e22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1083.980906][T20534] RAX: ffffffffffffffda RBX: 00007f07961b6240 RCX: 00007f0795f8e929 [ 1083.980922][T20534] RDX: 0000000000000070 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1083.980936][T20534] RBP: 00007f0796e22090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.980949][T20534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.980981][T20534] R13: 0000000000000000 R14: 00007f07961b6240 R15: 00007ffc6a03c738 [ 1083.981011][T20534] [ 1085.228397][T20543] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1085.983104][T20556] Invalid ELF header magic: != ELF [ 1086.549236][T20567] Invalid ELF header magic: != ELF [ 1089.457147][T20604] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1091.897661][T20632] Invalid ELF header magic: != ELF [ 1094.192329][T20675] netlink: 346 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1094.507913][T20679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1094.517592][T20679] ipvlan1: entered allmulticast mode [ 1094.523019][T20679] veth0_vlan: entered allmulticast mode [ 1094.603894][T20683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1095.016870][T20687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1095.295671][ T5169] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1095.466538][T20694] FAULT_INJECTION: forcing a failure. [ 1095.466538][T20694] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.518506][T20694] CPU: 1 UID: 0 PID: 20694 Comm: syz.0.2864 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1095.518551][T20694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1095.518570][T20694] Call Trace: [ 1095.518581][T20694] [ 1095.518594][T20694] dump_stack_lvl+0x16c/0x1f0 [ 1095.518649][T20694] should_fail_ex+0x512/0x640 [ 1095.518692][T20694] ? __kmalloc_noprof+0xbf/0x510 [ 1095.518744][T20694] ? constrain_params_by_rules+0x175/0xca0 [ 1095.518778][T20694] should_failslab+0xc2/0x120 [ 1095.518811][T20694] __kmalloc_noprof+0xd2/0x510 [ 1095.518854][T20694] ? kasan_quarantine_put+0x10a/0x240 [ 1095.518902][T20694] ? constrain_params_by_rules+0xa09/0xca0 [ 1095.518948][T20694] constrain_params_by_rules+0x175/0xca0 [ 1095.519002][T20694] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1095.519049][T20694] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1095.519097][T20694] ? __mutex_trylock_common+0xe9/0x250 [ 1095.519147][T20694] ? snd_interval_refine+0x2fa/0x580 [ 1095.519199][T20694] snd_pcm_hw_refine+0x7de/0xad0 [ 1095.519244][T20694] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1095.519288][T20694] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1095.519341][T20694] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1095.519380][T20694] snd_pcm_hw_param_first+0x334/0x6f0 [ 1095.519424][T20694] snd_pcm_hw_params+0x5ad/0x1b40 [ 1095.519478][T20694] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1095.519520][T20694] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1095.519574][T20694] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1095.519607][T20694] ? __asan_memset+0x23/0x50 [ 1095.519650][T20694] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1095.519690][T20694] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1095.519742][T20694] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1095.519809][T20694] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1095.519850][T20694] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1095.519887][T20694] ? hook_file_ioctl_common+0x145/0x410 [ 1095.519921][T20694] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1095.519959][T20694] ? __fget_files+0x20e/0x3c0 [ 1095.520007][T20694] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1095.520044][T20694] __x64_sys_ioctl+0x18b/0x210 [ 1095.520083][T20694] do_syscall_64+0xcd/0x490 [ 1095.520132][T20694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.520162][T20694] RIP: 0033:0x7fe306b8e929 [ 1095.520186][T20694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.520215][T20694] RSP: 002b:00007fe3079b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.520241][T20694] RAX: ffffffffffffffda RBX: 00007fe306db6080 RCX: 00007fe306b8e929 [ 1095.520259][T20694] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1095.520276][T20694] RBP: 00007fe3079b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.520294][T20694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.520316][T20694] R13: 0000000000000001 R14: 00007fe306db6080 R15: 00007ffca579f298 [ 1095.520356][T20694] [ 1096.392663][T20699] Invalid ELF header magic: != ELF [ 1096.928495][T20720] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2870'. [ 1097.114801][T20715] Invalid ELF header magic: != ELF [ 1097.601811][T20736] kAFS: No cell specified [ 1098.301372][T20745] Invalid ELF header magic: != ELF [ 1098.472521][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1098.535447][T20755] ipvlan1: entered allmulticast mode [ 1098.617860][T20755] veth0_vlan: entered allmulticast mode [ 1098.685057][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1099.224208][T20778] Invalid ELF header magic: != ELF [ 1100.181692][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1102.024203][T20825] Invalid ELF header magic: != ELF [ 1103.001280][T20837] Invalid ELF header magic: != ELF [ 1103.279310][T20842] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 1105.739503][T20889] Invalid ELF header magic: != ELF [ 1105.894393][T20893] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 1105.914027][T20893] CPU: 0 UID: 0 PID: 20893 Comm: syz.1.2905 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1105.914075][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1105.914105][T20893] Call Trace: [ 1105.914117][T20893] [ 1105.914130][T20893] dump_stack_lvl+0x16c/0x1f0 [ 1105.914188][T20893] sysfs_warn_dup+0x7f/0xa0 [ 1105.914233][T20893] sysfs_do_create_link_sd+0x124/0x140 [ 1105.914301][T20893] sysfs_create_link+0x61/0xc0 [ 1105.914344][T20893] device_add+0x62c/0x1a70 [ 1105.914383][T20893] ? __pfx_device_add+0x10/0x10 [ 1105.914414][T20893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1105.914475][T20893] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1105.914537][T20893] wiphy_register+0x1c9c/0x2850 [ 1105.914574][T20893] ? netdev_run_todo+0x864/0x1320 [ 1105.914622][T20893] ? __dev_printk+0x1e0/0x270 [ 1105.914674][T20893] ? __pfx_wiphy_register+0x10/0x10 [ 1105.914736][T20893] ieee80211_register_hw+0x24ac/0x4140 [ 1105.914787][T20893] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1105.914828][T20893] ? find_held_lock+0x2b/0x80 [ 1105.914864][T20893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1105.914911][T20893] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1105.914948][T20893] ? __hrtimer_setup+0x176/0x280 [ 1105.915003][T20893] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1105.915092][T20893] ? trace_kmalloc+0x2b/0xd0 [ 1105.915124][T20893] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1105.915174][T20893] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1105.915209][T20893] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1105.915246][T20893] ? __asan_memcpy+0x3c/0x60 [ 1105.915281][T20893] hwsim_new_radio_nl+0xb51/0x12c0 [ 1105.915320][T20893] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1105.915365][T20893] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1105.915396][T20893] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1105.915433][T20893] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1105.915476][T20893] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1105.915517][T20893] ? trace_cap_capable+0x18d/0x200 [ 1105.915559][T20893] ? bpf_lsm_capable+0x9/0x10 [ 1105.915599][T20893] ? security_capable+0x7e/0x260 [ 1105.915632][T20893] ? ns_capable+0xd7/0x110 [ 1105.915670][T20893] genl_rcv_msg+0x55c/0x800 [ 1105.915715][T20893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.915755][T20893] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1105.915821][T20893] netlink_rcv_skb+0x158/0x420 [ 1105.915854][T20893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1105.915896][T20893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1105.915947][T20893] ? netlink_deliver_tap+0x1ae/0xd30 [ 1105.916009][T20893] genl_rcv+0x28/0x40 [ 1105.916043][T20893] netlink_unicast+0x58a/0x850 [ 1105.916084][T20893] ? __pfx_netlink_unicast+0x10/0x10 [ 1105.916130][T20893] netlink_sendmsg+0x8d1/0xdd0 [ 1105.916173][T20893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.916225][T20893] ____sys_sendmsg+0xa98/0xc70 [ 1105.916264][T20893] ? copy_msghdr_from_user+0x10a/0x160 [ 1105.916313][T20893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.916362][T20893] ? __pfx_futex_wake_mark+0x10/0x10 [ 1105.916416][T20893] ___sys_sendmsg+0x134/0x1d0 [ 1105.916474][T20893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.916565][T20893] ? do_futex+0x122/0x350 [ 1105.916616][T20893] __sys_sendmsg+0x16d/0x220 [ 1105.916667][T20893] ? __pfx___sys_sendmsg+0x10/0x10 [ 1105.916716][T20893] ? __x64_sys_futex+0x1e0/0x4c0 [ 1105.916785][T20893] do_syscall_64+0xcd/0x490 [ 1105.916840][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.916875][T20893] RIP: 0033:0x7fec06d8e929 [ 1105.916914][T20893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.916963][T20893] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.916993][T20893] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 1105.917016][T20893] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1105.917037][T20893] RBP: 00007fec06e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1105.917058][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.917079][T20893] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 1105.917122][T20893] [ 1106.322134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.773240][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1106.786826][T20905] geneve1: entered promiscuous mode [ 1106.792093][T20905] geneve1: entered allmulticast mode [ 1106.812570][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1107.071096][T20911] Invalid ELF header magic: != ELF [ 1108.031656][ T5833] Process accounting resumed [ 1109.648985][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1110.232286][T20958] ptrace attach of "./syz-executor exec"[17790] was attempted by ""[20958] [ 1110.402962][T20965] ALSA: mixer_oss: invalid OSS volume '' [ 1110.415445][T20965] ubi0: attaching mtd0 [ 1110.421226][T20965] ubi0: scanning is finished [ 1110.426296][T20965] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1110.871187][T20965] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1110.956217][T20968] [ 1110.958612][T20968] ====================================================== [ 1110.965673][T20968] WARNING: possible circular locking dependency detected [ 1110.972727][T20968] 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 Not tainted [ 1110.979871][T20968] ------------------------------------------------------ [ 1110.986913][T20968] syz.1.2922/20968 is trying to acquire lock: [ 1110.992997][T20968] ffff888142b5a338 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 1111.002895][T20968] [ 1111.002895][T20968] but task is already holding lock: [ 1111.010279][T20968] ffff888142b59e00 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1111.021566][T20968] [ 1111.021566][T20968] which lock already depends on the new lock. [ 1111.021566][T20968] [ 1111.031997][T20968] [ 1111.031997][T20968] the existing dependency chain (in reverse order) is: [ 1111.041034][T20968] [ 1111.041034][T20968] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 1111.049705][T20968] blk_alloc_queue+0x619/0x760 [ 1111.055032][T20968] blk_mq_alloc_queue+0x175/0x290 [ 1111.060637][T20968] __blk_mq_alloc_disk+0x29/0x120 [ 1111.066239][T20968] nbd_dev_add+0x4a0/0xbc0 [ 1111.071232][T20968] nbd_init+0x181/0x320 [ 1111.075957][T20968] do_one_initcall+0x120/0x6e0 [ 1111.081280][T20968] kernel_init_freeable+0x5c2/0x900 [ 1111.087051][T20968] kernel_init+0x1c/0x2b0 [ 1111.091946][T20968] ret_from_fork+0x5d7/0x6f0 [ 1111.097095][T20968] ret_from_fork_asm+0x1a/0x30 [ 1111.102412][T20968] [ 1111.102412][T20968] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1111.109657][T20968] fs_reclaim_acquire+0x102/0x150 [ 1111.115222][T20968] prepare_alloc_pages+0x162/0x610 [ 1111.120885][T20968] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1111.127364][T20968] __alloc_pages_noprof+0xb/0x1b0 [ 1111.132949][T20968] pcpu_populate_chunk+0x110/0xb00 [ 1111.138616][T20968] pcpu_alloc_noprof+0x86a/0x1470 [ 1111.144193][T20968] xt_percpu_counter_alloc+0x13e/0x1b0 [ 1111.150231][T20968] find_check_entry.constprop.0+0xbc/0x9b0 [ 1111.156594][T20968] translate_table+0xc98/0x1720 [ 1111.161997][T20968] ipt_register_table+0x102/0x430 [ 1111.167584][T20968] iptable_mangle_table_init+0x40/0x60 [ 1111.173609][T20968] xt_find_table_lock+0x2e4/0x520 [ 1111.179186][T20968] xt_request_find_table_lock+0x28/0xf0 [ 1111.185281][T20968] get_info+0x190/0x610 [ 1111.190003][T20968] do_ipt_get_ctl+0x169/0xa10 [ 1111.195237][T20968] nf_getsockopt+0x79/0xe0 [ 1111.200204][T20968] ip_getsockopt+0x18c/0x1e0 [ 1111.205352][T20968] tcp_getsockopt+0xa1/0x100 [ 1111.210497][T20968] do_sock_getsockopt+0x3ff/0x800 [ 1111.216071][T20968] __sys_getsockopt+0x123/0x1b0 [ 1111.221563][T20968] __x64_sys_getsockopt+0xbd/0x160 [ 1111.227231][T20968] do_syscall_64+0xcd/0x490 [ 1111.232292][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.238728][T20968] [ 1111.238728][T20968] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1111.246495][T20968] __mutex_lock+0x199/0xb90 [ 1111.251557][T20968] pcpu_alloc_noprof+0xb4c/0x1470 [ 1111.257139][T20968] sbitmap_init_node+0x2fd/0x770 [ 1111.262647][T20968] sbitmap_queue_init_node+0x41/0x560 [ 1111.268571][T20968] blk_mq_init_tags+0x12d/0x2b0 [ 1111.273997][T20968] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1111.280091][T20968] blk_mq_init_sched+0x30c/0x610 [ 1111.285575][T20968] elevator_switch+0x1e1/0x7f0 [ 1111.290895][T20968] elevator_change+0x2ac/0x400 [ 1111.296211][T20968] elevator_set_default+0x292/0x320 [ 1111.301970][T20968] blk_register_queue+0x393/0x4f0 [ 1111.307543][T20968] __add_disk+0x74a/0xf00 [ 1111.312424][T20968] add_disk_fwnode+0x13f/0x5d0 [ 1111.317752][T20968] nbd_dev_add+0x791/0xbc0 [ 1111.322764][T20968] nbd_init+0x181/0x320 [ 1111.327491][T20968] do_one_initcall+0x120/0x6e0 [ 1111.332803][T20968] kernel_init_freeable+0x5c2/0x900 [ 1111.338560][T20968] kernel_init+0x1c/0x2b0 [ 1111.343430][T20968] ret_from_fork+0x5d7/0x6f0 [ 1111.348584][T20968] ret_from_fork_asm+0x1a/0x30 [ 1111.353914][T20968] [ 1111.353914][T20968] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1111.361781][T20968] __lock_acquire+0x126f/0x1c90 [ 1111.367189][T20968] lock_acquire+0x179/0x350 [ 1111.372251][T20968] __mutex_lock+0x199/0xb90 [ 1111.377313][T20968] queue_requests_store+0x1c7/0x310 [ 1111.383054][T20968] queue_attr_store+0x279/0x320 [ 1111.388465][T20968] sysfs_kf_write+0xef/0x150 [ 1111.393614][T20968] kernfs_fop_write_iter+0x351/0x510 [ 1111.399447][T20968] iter_file_splice_write+0x91c/0x1150 [ 1111.405456][T20968] direct_splice_actor+0x18f/0x6c0 [ 1111.411117][T20968] splice_direct_to_actor+0x345/0xa30 [ 1111.417046][T20968] do_splice_direct+0x174/0x240 [ 1111.422479][T20968] do_sendfile+0xb06/0xe50 [ 1111.427451][T20968] __x64_sys_sendfile64+0x1d8/0x220 [ 1111.433201][T20968] do_syscall_64+0xcd/0x490 [ 1111.438270][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.444704][T20968] [ 1111.444704][T20968] other info that might help us debug this: [ 1111.444704][T20968] [ 1111.454943][T20968] Chain exists of: [ 1111.454943][T20968] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 1111.454943][T20968] [ 1111.468845][T20968] Possible unsafe locking scenario: [ 1111.468845][T20968] [ 1111.476302][T20968] CPU0 CPU1 [ 1111.481676][T20968] ---- ---- [ 1111.487046][T20968] lock(&q->q_usage_counter(io)#59); [ 1111.492452][T20968] lock(fs_reclaim); [ 1111.498985][T20968] lock(&q->q_usage_counter(io)#59); [ 1111.506916][T20968] lock(&q->elevator_lock); [ 1111.511535][T20968] [ 1111.511535][T20968] *** DEADLOCK *** [ 1111.511535][T20968] [ 1111.519691][T20968] 5 locks held by syz.1.2922/20968: [ 1111.524900][T20968] #0: ffff888036c5a428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1111.534977][T20968] #1: ffff888033ef8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1111.544765][T20968] #2: ffff888026f434b8 (kn->active#194){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1111.554907][T20968] #3: ffff888142b59e00 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1111.566664][T20968] #4: ffff888142b59e38 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1111.578636][T20968] [ 1111.578636][T20968] stack backtrace: [ 1111.584539][T20968] CPU: 1 UID: 0 PID: 20968 Comm: syz.1.2922 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1111.584572][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1111.584587][T20968] Call Trace: [ 1111.584596][T20968] [ 1111.584606][T20968] dump_stack_lvl+0x116/0x1f0 [ 1111.584645][T20968] print_circular_bug+0x275/0x350 [ 1111.584680][T20968] check_noncircular+0x14c/0x170 [ 1111.584717][T20968] __lock_acquire+0x126f/0x1c90 [ 1111.584753][T20968] ? __lock_acquire+0xb8a/0x1c90 [ 1111.584788][T20968] lock_acquire+0x179/0x350 [ 1111.584820][T20968] ? queue_requests_store+0x1c7/0x310 [ 1111.584844][T20968] ? __pfx___might_resched+0x10/0x10 [ 1111.584872][T20968] ? do_raw_spin_lock+0x12c/0x2b0 [ 1111.584914][T20968] __mutex_lock+0x199/0xb90 [ 1111.584956][T20968] ? queue_requests_store+0x1c7/0x310 [ 1111.584979][T20968] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1111.585013][T20968] ? queue_requests_store+0x1c7/0x310 [ 1111.585035][T20968] ? lockdep_hardirqs_on+0x7c/0x110 [ 1111.585071][T20968] ? __pfx___mutex_lock+0x10/0x10 [ 1111.585112][T20968] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1111.585148][T20968] ? queue_requests_store+0x1c7/0x310 [ 1111.585169][T20968] queue_requests_store+0x1c7/0x310 [ 1111.585193][T20968] ? __pfx_queue_requests_store+0x10/0x10 [ 1111.585218][T20968] ? __mutex_trylock_common+0xe9/0x250 [ 1111.585255][T20968] ? __pfx_queue_requests_store+0x10/0x10 [ 1111.585278][T20968] queue_attr_store+0x279/0x320 [ 1111.585318][T20968] ? __pfx_queue_attr_store+0x10/0x10 [ 1111.585357][T20968] ? __lock_acquire+0x622/0x1c90 [ 1111.585400][T20968] ? find_held_lock+0x2b/0x80 [ 1111.585460][T20968] ? sysfs_file_kobj+0xe4/0x290 [ 1111.585495][T20968] ? __pfx_queue_attr_store+0x10/0x10 [ 1111.585533][T20968] sysfs_kf_write+0xef/0x150 [ 1111.585563][T20968] kernfs_fop_write_iter+0x351/0x510 [ 1111.585589][T20968] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1111.585620][T20968] iter_file_splice_write+0x91c/0x1150 [ 1111.585662][T20968] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1111.585698][T20968] ? __pfx_copy_splice_read+0x10/0x10 [ 1111.585736][T20968] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1111.585771][T20968] direct_splice_actor+0x18f/0x6c0 [ 1111.585805][T20968] splice_direct_to_actor+0x345/0xa30 [ 1111.585840][T20968] ? __pfx_direct_splice_actor+0x10/0x10 [ 1111.585877][T20968] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1111.585914][T20968] do_splice_direct+0x174/0x240 [ 1111.585953][T20968] ? __pfx_do_splice_direct+0x10/0x10 [ 1111.585985][T20968] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1111.586019][T20968] ? rw_verify_area+0xcf/0x680 [ 1111.586052][T20968] do_sendfile+0xb06/0xe50 [ 1111.586088][T20968] ? __pfx_do_sendfile+0x10/0x10 [ 1111.586123][T20968] ? __x64_sys_futex+0x1e0/0x4c0 [ 1111.586154][T20968] ? __x64_sys_futex+0x1e9/0x4c0 [ 1111.586186][T20968] __x64_sys_sendfile64+0x1d8/0x220 [ 1111.586212][T20968] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1111.586241][T20968] do_syscall_64+0xcd/0x490 [ 1111.586279][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.586306][T20968] RIP: 0033:0x7fec06d8e929 [ 1111.586326][T20968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.586368][T20968] RSP: 002b:00007fec07b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1111.586392][T20968] RAX: ffffffffffffffda RBX: 00007fec06fb5fa0 RCX: 00007fec06d8e929 [ 1111.586410][T20968] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1111.586427][T20968] RBP: 00007fec06e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1111.586444][T20968] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1111.586460][T20968] R13: 0000000000000000 R14: 00007fec06fb5fa0 R15: 00007ffec3df04a8 [ 1111.586487][T20968] [ 1112.280927][T20977] random: crng reseeded on system resumption [ 1112.327649][T20977] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1112.361046][T20977] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1112.393167][T20977] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1112.401879][T20977] PM: hibernation: Basic memory bitmaps created [ 1112.451290][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.491631][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.731985][T20969] PM: hibernation: Basic memory bitmaps freed [ 1120.817497][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.823930][ T1303] ieee802154 phy1 wpan1: encryption failed: -22