last executing test programs: 3m48.386292723s ago: executing program 2 (id=323): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x3f00) 3m47.45469798s ago: executing program 2 (id=326): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x5) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x2, 0x200000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r2, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x807000, 0x806121, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) 3m44.226115105s ago: executing program 2 (id=334): ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd0c, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) io_setup$auto(0x7ffe, 0x0) (async) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x4}) (async) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x9d111591f778a9c2, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0xe7, 0x4000000100000ebf, 0x40000000000a1, 0x8000) r0 = socket(0x2, 0x80000, 0xde) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES64=r1, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x7fffe000) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xbe, 0xfffffffffffffffa, 0xffff) (async) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r2, 0x0, 0x1) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x40080, 0x0) (async) r3 = socket(0x25, 0x1, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x0) read$auto(0x3, 0x0, 0xf34) (async) read$auto(0x3, 0x0, 0x80) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101440, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m40.213807407s ago: executing program 2 (id=340): r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r3, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) ioctl$auto(r1, 0x8925, r1) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) writev$auto(r4, &(0x7f00000002c0)={&(0x7f0000000240)="2a300a0132f92a2206ffcfc1b59a2fcb2b746dbed23af8129ef90e7f546e90ae946077cb202fd638a9b2cc12eb5086c149123aba092362e1c593896be705d17bb35bb864de588036a297ad7ad298eee448b1fe7f814ef1fad2", 0x8001}, 0x4) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de45906c24c7be790", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x670, r7, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x5b8, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x57f, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x21, 0x2, "cf2e6fcfdda82a35b0c4766e8e5e58fb3ea071e5ef8b7594f267b6580a"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x9a, 0xbd, "1e1fd9236ba4903af2858e2af1e75288bc79f99228bc3a4292a3032ff2f96ad8f33a16d231b29249685346f83c8ee064c9b7edc439908030a62cf68d9dfd3a08289c8a0bdcd79496927e7e0834c9c3e7c87effb9dea341666a2ec4b8d7aef4309df2ca63ca6a3e8a0f761f2d031eeab4794df35b2a9e9de5108090355d6e78a4ae37b820da1b278866e63ca68cc24b4455caf328c703"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x670}}, 0x20001050) 3m39.474691602s ago: executing program 2 (id=342): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r1 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/space\x00', 0x48981, 0x0) write$auto(r1, &(0x7f0000000200)='0\x00\xa6C\x1b\xad\xb1\x9e\xc8Tt\xa8\x87\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\xaf\x14\x8a\xcf\xe8\xe8,-d\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xf6\xf1\xe9\x17\xb3\xc1\x13\x00\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3Ch\x03&\x1c\r&\xf9i\xa8\x01\xdbBr\'\x83\'d`\x05\x10\x9d\x8f*E\xfb\x9c\rTD\xa3\xc5\x1bWZ\xb8Q7]E\x84v\x17M\xd3\xf3\x1c\xd4.\vA\xad\x88\x85\xe3vi\xd6', 0x4) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xca301, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) open(0x0, 0x161342, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x1) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) clone$auto(0x6, 0x9, 0x0, 0x0, 0xe08) mmap$auto(0x5, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x1a3, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) 3m37.968628551s ago: executing program 2 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x11, 0x4, 0x7, 0x67, 0x400, 0x0, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x4a) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy13/power\x00', 0x40, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x74bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002800}, 0x40010) 3m22.681430058s ago: executing program 32 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x11, 0x4, 0x7, 0x67, 0x400, 0x0, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x4a) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy13/power\x00', 0x40, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r2, 0x1, 0x74bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002800}, 0x40010) 2m31.576146784s ago: executing program 0 (id=498): sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000f9dbdf2503000000040008002000018008000f00ac1e000114000f0020010000000000000040000000000000abbea408c80609984de1da295799950a0ab50200004b91e7bdbb116ae945b737fd"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000001) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad02, 0x0) readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), r4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40, 0x80}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r3, 0x8001) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40800, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x7, 0x5, 0xd, 0x2, 0x6]}, 0x0) 2m30.479753289s ago: executing program 0 (id=501): r0 = io_uring_setup$auto(0x3, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x5, 0x8, 0x4, 0xffffffffffffffff, [0x8, 0x5, 0x5], {0x1, 0x200, 0x800, 0x1, 0xffff8626, 0x6, 0x46, 0x7fff, 0x7}, {0x1, 0x3, 0x5, 0xfffffffd, 0xfffffffa, 0x3, 0x6e6, 0x2, 0x200}}) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0x1, 0x45, &(0x7f0000000080)='+:\xea($\x00', &(0x7f00000000c0)=0x7) (async) getsockopt$auto_SO_MEMINFO(r0, 0x8, 0x37, &(0x7f0000000100)='+:\xea($\x00', &(0x7f0000000140)=0x3) (async) ioctl$auto_MEMUNLOCK(r0, 0x40084d06, &(0x7f0000000180)={0x81, 0xa}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), r1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vivid.0/video4linux/radio26/uevent\x00', 0x40, 0x0) r5 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000340)=@info={r4, 0x6, 0x1}, 0x5) writev$auto(r6, &(0x7f0000000480)={&(0x7f0000000400)="81288e47559f1bc90d1365736244dcb9750545460e3eaec8e8833bd64216e7756139d2b6488abfb86735cbd16de198a9fa0f4929195d9ed91fcee59a6d029faed3aea6a9d5bf339cccfa5a9657313f7175978ba3d8c2b3a2e819b3464df137f5041760cb80489df117bfefe5327d0dbe5d11fc8c72", 0x8000}, 0x538) (async) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000500), r0) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r7, 0x308, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x93}, @NL802154_ATTR_COORDINATOR={0x4f, 0x1e, 0x0, 0x1, [@typed={0xa, 0x9d, 0x0, 0x0, @str='+:\xea($\x00'}, @generic="9b15a2ae797395614e3a685df81ef6863dc00aa617ddc45a5030f54fe56095355d73f1afe9a268ab949ee3cd14d2477ec1f7ed906a4f87a6a5b7d85cc52faf"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40014}, 0x4001) (async) open(&(0x7f0000000680)='./file0\x00', 0x705800, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) writev$auto(r5, &(0x7f0000000840)={&(0x7f00000007c0)="e77505ee32bcdf7dca06d92dc653c101541b953f744a757c0c2b44f5937ac67ffb09ff68c97e125dc66d441eaaa899c78291f06e0b50ab7a1a20e1487f6dfee50c7d4cddb275e339ffc7c1acc6be7be60dc04936b868f0", 0x1}, 0xffffffffffff3927) socketpair$auto(0x3, 0x2, 0x8, &(0x7f0000000880)=0x6) (async) ioctl$auto_XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f00000008c0)={0x9, 0x9, 0x4, 0x0, 0xffffffff}) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r6, 0xc038586b, &(0x7f0000000ac0)={r2, &(0x7f0000000900)="f6b1dd0b1ebb3947ce70a52f21436941f7ba00d846e52249bd728e06b91c0245e1491992", 0x4, &(0x7f0000000940)="57c3ddf236cdc04ee483658c909b055460a1cd15fb71b2efc381aef54b90cf60c77fbdcce3aba506d60b6e6ef7c8ac531f075bd02ad5deef7749d3b98946c69c4ecdc45ee5ba3d5aae32e6ba793a63f35bc0ded3c5c541f891bd76b0a64ad36344a2920ce43654f48848a4af326466c9332883e56d2ce71196081808f364c94f2fc1268615ddbcebcd138efa9019a3c2b37c2e014b7af86457bff2aded5062617960b5ef2c1cb219e0682514bf75cedc2448b98bc7f0c0047d56a35c063b69b2b7ec3309f4d9fb6e18d25b8175d341e5c1c09f92d561bac2745a96", 0x1ff, &(0x7f0000000a40)="86ab64a4172cf94c7fad69f94e9cd7a7deba536f1d5e6ec97cd2071d27961c8b8832", &(0x7f0000000a80)=0x6}) lseek$auto(r9, 0x40aa, 0x7ff) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/tracing/trace_pipe\x00', 0x20, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/devices/virtual/tty/tty43/dev\x00', 0x20000, 0x0) (async) ioctl$auto_FIDEDUPERANGE(r8, 0xc0189436, 0x8) ioctl$auto_XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000b80)={{@_ha_fsid={[0x4, 0xffffffc0]}, {0x575a, 0x0, 0x200}}, {{[0x6, 0x100, 0x965, 0x55]}, 0xa, 0x885, 0x8, 0x0, 0xffffffffffffffb6}}) (async) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000bc0)=""/193, 0xc1) (async) setsockopt$auto_SO_KEEPALIVE(r9, 0x8, 0x9, &(0x7f0000000cc0)='\x00', 0xa) (async, rerun: 32) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, "e2acd1a1b8288a6ad08504d0674cee45ba7a0042e4766442cd4f67aa6feb652b851790f4d5d567f2f47cc6a1d34a8ba01ab6777b69fb6b9ca46eec875ef7496eb989fe44e1ab9d40cad62940422b8ffc"}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/ram6\x00', 0x40880, 0x0) (async) read$auto_proc_fault_inject_operations_base(r9, &(0x7f0000000e80), 0x0) (async, rerun: 32) getsockopt$auto_SO_BINDTODEVICE(0xffffffffffffffff, 0x80, 0x19, &(0x7f0000000ec0)='$\x10$\x00', &(0x7f0000000f00)=0x40) (rerun: 32) 2m30.039766463s ago: executing program 0 (id=503): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x7) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000001380)="4a0200000000000000899edb615550fd8c7c924d87f0030047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0x275e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000280), 0x0) 2m26.980116868s ago: executing program 0 (id=510): socket(0x10, 0x2, 0xc) r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0xb2c, 0x4000000000df, 0x40eb2, r0, 0x5) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m26.409823645s ago: executing program 0 (id=514): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000e2, 0x10, 0x401, 0x8000) r0 = socket(0x15, 0x3, 0x1) r1 = getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) capget$auto(&(0x7f0000000180)={0x3}, &(0x7f0000000300)={0x3, 0x2000, 0x4}) socket(0xa381801b8a5364e9, 0x5, 0xffffe15e) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) msgctl$auto(0x9, 0x9, &(0x7f0000000080)={{0xce0, 0x0, 0xee01, 0x101, 0x3, 0x6, 0xe}, 0x0, 0x0, 0xffff, 0x2, 0x7fffffffffffffff, 0x8, 0x8001, 0x1, 0x6, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="0000000004005643be7cbc66667661cd4f9165d9d47e65df5850faed5aab16bbc1fd3d6cd07e6a0e7014f17d8188c822cbcd7215c413f60d1984ef34ef48e3a9e16b2fb91a922a7f1439edce2a24fca353aa696bf6e1af785f15b1c31d782cf4346081b0edbfba8eca6e715fd26aa46e3e70600836ca78d57e24bb788fdaba155b3a0c0161ecb7df2669315e75b714028c8bececd23c8fa4019cada80053f88f57236e81257e7d"], 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x810) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x404) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) kill$auto(0x0, 0x11) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x8f83, 0x6, 0x80000000, 0xd, 0x5}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x41606ae6, 0x0) prctl$auto(0x3e, 0x8000000000000000, 0x0, 0x1, 0x40000000000000) mmap$auto(0x2000000000001d, 0xbb0, 0x5, 0x19, 0xffffffffffffffff, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) 2m25.857878394s ago: executing program 0 (id=516): mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x5) r0 = socket(0xb, 0x1, 0x8) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4840) rseq$auto(&(0x7f0000000300)={0xb, 0x8401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0xecde, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x3, 0x8, 0x81, 0x9b7e, r0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x3, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0xffffffff}}, 0x68) connect$auto(0x3, &(0x7f0000000240)=@generic={0xa, "000000000000000000c3f546d200"}, 0x55) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) memfd_create$auto(0x0, 0x4) bpf$auto(0x5, 0x0, 0xa) gettid() 2m10.764186783s ago: executing program 33 (id=516): mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x5) r0 = socket(0xb, 0x1, 0x8) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4840) rseq$auto(&(0x7f0000000300)={0xb, 0x8401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0xecde, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x3, 0x8, 0x81, 0x9b7e, r0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x3, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0xffffffff}}, 0x68) connect$auto(0x3, &(0x7f0000000240)=@generic={0xa, "000000000000000000c3f546d200"}, 0x55) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000001dc0)={0x0, 0x100000, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) memfd_create$auto(0x0, 0x4) bpf$auto(0x5, 0x0, 0xa) gettid() 8.789395576s ago: executing program 5 (id=808): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x1, 0xe, 0xfffffffffffffffe, {0x3, 0x7fffffff}, 0x200000000000008, 0x80, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x80, 0xdfffffffffff628e, 0x6, 0xdd, 0x808}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x80003, 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x5d19, r1}, 0x10) bpf$auto(0x19, &(0x7f0000000380)=@task_fd_query={0x0, r1, 0xfffff83f, 0x5, 0xffff, 0x8, r3, 0xfffffffffffff000}, 0x1) r4 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x3, 0x100000001, 0x4000000000df, 0x40eb1, r5, 0x300000000002) exit$auto(0x5) pipe2$auto(0x0, 0x80) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="50040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0900030090f55fedc80000000900030047f1f4bf5a0000005400018014000200626f6e645f736c6176655f3100000000140002006261746164765f736c6176655f3000001400020069703667726574617030000000000000140002006361696630000000000000000000000006000300492c0000"], 0x450}, 0x1, 0x0, 0x0, 0x4004805}, 0x20004800) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000100)="17") setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r7, 0x0, 0x0) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) clone$auto(0x23918fa0, 0x9ec7, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x3e478395) close_range$auto(0x0, 0x5, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000280)="6a560c1153b114e06fba0171fc9dffd178f97dfe0eafef0272afc89b02a422f42ebbfae40c83050908209c9255ee89c96859eaa2cb89f6671c698e5aa1aa131fbdbfbc85e89731ac1bbbb9b796084946938db37b60c7f1eb393f225367a88aaae8098a02c1c3c43254c3c7ee4368e20328ab4cb511e09619082a821197945d1b9fcd7266348c0d8e47b50b04eb2481236f24b5a98ecd946fa56c7e53e83f45a929d46ad88b64136d41c4625336e591bd48f18825887c58c0") r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000006380)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000006300)=ANY=[@ANYBLOB='\x00', @ANYRES16=r8, @ANYBLOB="8f0329bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044041}, 0x4000) 8.75333831s ago: executing program 3 (id=809): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0xff) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) (async, rerun: 32) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fchown$auto(0xffffffffffffffff, 0x0, 0x0) adjtimex$auto(&(0x7f0000000480)={0x0, 0x0, 0x100, 0x5, 0x8, 0x40, 0x647c02a9, 0x0, 0x2, 0x2000000000009, 0xa, {0x8000000000000001, 0x2}, 0x3, 0x4, 0x83b, 0x8, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffffa, 0x6, 0x72}) (async) socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x81b, 0x8, &(0x7f0000000200)='\x003\x84\xa7\xfbL\xaa[\xc7\xf2~3j\xbf\x122U\xacjR\x9e\x8f7\xca}\x99?\xad\x03\x17\xb2|]:\xf6\xd0\x00\xde0\xdb\x9e\xd7\xc8w\'\x1d2\x9b\x8fu\xda\x05\xb0>*\x03!A\x81\x18\xbd\rQ3\\1\x94\xb2\xab\xde\x04*\xeaX\xeeq-\x11\xdf\xc6\xf9\xc3\x06\xd8\xd2\xe1\x9cp\xbf>a\x15\xee\xd7\xb7\x8e5Q<\xb5\x02\\Ch(\x05\xa2\xd0\xfb+\xf0\xbf\x14', &(0x7f00000003c0)=0x153d2451) (async, rerun: 64) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async, rerun: 32) setresgid$auto(0x81, 0x800000a0, 0x8) (async, rerun: 32) setgroups$auto(0xc00000000, 0xfffffffffffffffc) (async) r1 = memfd_create$auto(0x0, 0x6) setresuid$auto(0x0, 0x8, 0x8000) (async) shmget$auto(0x8, 0x10563, 0x9) (async) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r3, 0x40000000113, 0x4, 0xfffffffffffffffc, 0x0) r4 = syz_genetlink_get_family_id$auto_nfc(0x0, r1) sendmsg$auto_NFC_CMD_GET_TARGET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc6aa755e2f583722}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r4, @ANYBLOB="20002bbd7000fddbdf25080000000800140000e6030008000d000100010005000b000b00000005000f0004000000b4011380af013a80f20cd8a7d91c2439de264dbb614d994b729ab4664b097f779820f52e4fb607ece716f2f00438835774e16aab4421b696e110d4c27babad0a1006f139c2dc0a8658020a33dd866d033b8ea6cd03f4dad7c50c6960930800e800", @ANYRES32=0x0, @ANYBLOB="0800070005000000ef0007800400ea800800ff002b018ce6397800b1696ad0e5995ebde160602c387ab68683c97c1e2223aa05b5e2d0579ffdc6766622677eacc7d40f20599fa2586b82edfb6a3e594cf3e69fdd28ff24d59f1794a61120979fea46cfdf8f204f3a73640c16f1cbe8c0de573c1c52", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0800fd0000e6030000"], 0x1e8}, 0x1, 0x0, 0x0, 0x2000c040}, 0x800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x18, r2, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000874}, 0x8c0) 8.488640994s ago: executing program 5 (id=812): r0 = socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8, 0x1, [0xfd]}) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(r0, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x7, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) mincore$auto(0x7, 0xc, &(0x7f0000000000)='/dev/ptyd1\x00') close_range$auto(0x2, 0x8, 0x0) 7.189943641s ago: executing program 3 (id=815): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f000000e440)=ANY=[@ANYBLOB='l\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800e0000800000008006200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000780106806b01f280130023002f70726f632f73656c662f6d656d000008c9d451718186ef0f145a4d958b53cebcfe438680acf0147b604b417d325fe3c850cac7fb32489905cfaf0bd1a2c2612373e78432623f1012ed9d27cee61cf77a1e0360f73a9f793fb5fe4485a9cbae3ce1e7ff1d23f0d0aa97e1e6bf7cf53bf89a4339b0cb4a301a26c185a36ab00c6155c008b87c8a1e264cc7375eabb29a27157cbe58ba8de303d6eed371099086ef220fc44de4b45c935a9f7a308b558d0b381728de27b7a1e1df774970d94aa4aa857bcb447f09610b88a7a3c48e409bc031922afe35ff366378251efdedf396f807b9db4213fe75cf1aede0475a1c1abcd0c843fd08003900", @ANYRES32=0x0, @ANYBLOB="0400558004001680d126208daca71b0f3108d0e68081c9e015a55f8e8ef40efa3fb842b9d1f72a8ffcc9b8b94b1b4706d039f84bc23eebaf13099930336cbe34c45fe840ea4b28cbe31dafbfd42a923270c38f07478f93e39607039e11d4dfd0fdf670df676c0008001b00", @ANYRES32, @ANYBLOB="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"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.97593788s ago: executing program 5 (id=818): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x8e\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) mmap$auto(0x6, 0x2020009, 0x86e183694, 0x16, r0, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/sit0/regen_max_retry\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x1ff) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0) unshare$auto(0x40000080) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(0x3, 0x0, 0xfdef) socket(0x2, 0x1, 0xcfc2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) 6.582683103s ago: executing program 4 (id=819): r0 = semctl$auto(0x7, 0x5, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="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", @ANYBLOB="3e1763e5a9feb72737784b2419ddf793dd659d99eaa8eff715a690cf4e28ec0dadfb1bbb4a583ac726060a624ebc2c17dfdf4a718eafa73a1385271f6ce2d89468e41847595e9d3ac672a5fabdf4cc1317e936901ebfa16d655ef8711a52fc1c980eaa935b6984e5964ef4bab9189fe45d2bb0d9919f4d1528b58eafa29dd81325da5e134ed50e", @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x6, 0x1, 0x80) mmap$auto(0x0, 0x4020009, 0xdb, 0x14, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/max_vfs\x00', 0x480c2, 0x0) write$auto(r1, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x10, 0x2, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x402, 0x0) userfaultfd$auto(0xfffffffe) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x10008000) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x141000, 0x81) settimeofday$auto(&(0x7f0000000040)={0x1000, 0x52c7}, &(0x7f0000000080)={0x748, 0x4e}) open(&(0x7f00000002c0)='./file0\x00', 0x103001, 0x120) futimesat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) 6.580584868s ago: executing program 3 (id=820): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20000003) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) 5.953826918s ago: executing program 1 (id=821): r0 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)="0c0e9b4f6141ac2eb84270cd00981efc94e9d56c612382fcf1146d65ac", 0xc0, &(0x7f0000000040)="e3234d1b5bc4c459c2af6d89b793d7cecc12492e105350cf2e402a9d3294c1f6d3a711ba538e9e7d6269b469d9b3f1b72c2b43771ee011907aa039c578f67d9be69d8b5179de9379ac202d73a54cd3", 0xe0000000, &(0x7f00000000c0)="db9b7f14b68a34dca5a58dbf971360877027458a1358aae1428f3382b9082125636f3f624e00be706a63782a1ecf66143c89ac220e6eafa660068ba6dfd79ec65300659a8b7dfabf766c17dd539dd20be19f365a3a97cb546e15a1df470d4fc43b318c1cc04e2afc2908586386329b2c74aecfba028b157de66e1743df9131eddbb599fcde4e4f967b09fd32a8961ffe72306e83b317f8d2d259ec23ec916e7f550f22b81c08e4b3caa82a57154ed470ba6e9ee0637ab4e41d34525e51be3761f6846de49e7b90850bf693d86dfee7bf328d2d4cbf9c2172f3f5d5a8", &(0x7f00000001c0)}) setsockopt$auto(r1, 0x100, 0x5, &(0x7f0000000240)=']!+..%\x00', 0x401) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyu7\x00', 0x80000, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000002c0)=r2) ioctl$auto(r3, 0x8, r2) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyx9\x00', 0x44040, 0x0) r5 = timerfd_create$auto_CLOCK_TAI(0xb, 0x947) write$auto_console_fops_tty_io(r5, &(0x7f0000000340)="7d577c747d30c424052ba3844b51fd30d5e26ea5ef1d5554be8190921013b6fbc35973be4d1ce0331cb0041ea5ca12cce7af18b8cb25c437869fcfe6f6a1d3b6b638972b61a3fa29b9b77262ca5251c5e3d5f5aa341053a601ec943acae2bcf552568becfc4315f09bf626708b7380018f8f953ab2df09fa828c023f83dba61f515991232a78acd5df2a69c40862255edd49d97fdd3e9bc99c20decea0ac374675a5eb3fd3a4e235e8f312ed", 0xac) sendmmsg$auto(r2, &(0x7f0000000600)={{&(0x7f0000000400)="3cee1c8a9c71", 0x2, &(0x7f0000000540)={&(0x7f0000000440)="ce01da809b61ef5402199c9e4f67a1fa9d24335efb97f000182937bf9225b1cd9ac8fabd99477c9c6080d7f6d7dbf210464f18b8844a7187bd70ff625facdbaeeb24200e341346f67c90a6c890c9eb33580ffd447baf39084829d91195433669decc34a868ac6962d22243967003e57ed72d8c7f2f33da216f811ef4309c4ec354427848d3a6354630ed8147b38d55feeb2bc73d85a6b476e9cfe130a462b6e1d6496a6b8d3ecd4102506bc20402a21ac71d8860d63fc5f34f79e3d707332abb09e882990b85970ae8ad9b1f85b182466dd9c3758a24", 0x4}, 0x7fffffffffffffff, &(0x7f0000000580)="c14ee094f3b0278ccf24d8e425414ff65cff3ecda7dc95857554d5839b4d06a51d51963e808f80645f09f5f07fcd526ebe1f17f1755ff9ad750c4d4f602c2a51801d97b962f30effdf64e5", 0x3ff, 0xff}, 0x7fff}, 0x1000, 0x1ff) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyqd\x00', 0x20002, 0x0) shmat$auto(0x7, &(0x7f0000000680)='\'!\x00', 0x44) getsockopt$auto(r4, 0xa, 0x3df, &(0x7f00000006c0)='\x00', &(0x7f0000000700)=0x9) sendmmsg$auto(r3, &(0x7f0000000980)={{&(0x7f0000000740)="2e480fac2ec40a0ac97c1bf0eb43b14938c23bcd120686d05cd0f49ebf2a0ece6052150767865d756067e3febb7c8644e398198cb0beb74ce3872eadba1faa557d01898051d6be49aea810d3ed2e4196918b381fcb78a2eaa77c5d03f2c33b74cfbe93e381217b63d0218465e6f7f5653d3250168605e46abd4d2c10a09fde987d046a2783b0628714aa45ff449e4981b67ec11e0b535527cf3e6bc51b1c3e768703a04546550ad0875c80765e5f429aa1", 0x1, &(0x7f0000000840)={&(0x7f0000000800)="1601da195ea184bf486ed019ac45499a70d935", 0x800000000000}, 0x0, &(0x7f0000000880)="08fde2726b2fa8387bbb74bf85f5cc0f13f6804dd3ea7440269aa0f0eaea16f14be9cf40a4c559102fcdb961e232e1526890ca5ecb9a672dbfeed83df8af3e62d97a606b9a7cb992629b4c62553df0af29049d076b9371a18295ac776b6bdc4d8df4622eef57a8b365b60ebd4c0c7aa025ff76806055f1856a83d134df2bbd34d96f4e5893e2b780606d68c42e2e83c1f1e7c89130917c771f2a55e784c3962beea9e43b26bde8b4b716271eba2f9f73a5cfc51c2536e9802b9f8aad3433a9f4ed6ebb89", 0x7, 0xc1}, 0x9d3f}, 0x0, 0x2af) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f00000009c0), 0x444602, 0x0) r8 = fcntl$getown(r6, 0x9) ioctl$auto_LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$auto_TCSBRKP(r2, 0x5425, &(0x7f0000000a00)="929c467a9bd8a5cd7ea9a33c6ccfd586c53ecac0ba154e65fadbdd48bdd55317fbc72912") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'erspan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c081}, 0x84) r10 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/snd/midiC2D2\x00', 0x80000, 0x0) pidfd_send_signal$auto(r4, 0x3, &(0x7f0000000bc0)={@_si_pad}, 0x80) getsockopt$auto_SO_DEBUG(r2, 0x1, 0x1, &(0x7f0000000c40)='/dev/snd/midiC2D2\x00', &(0x7f0000000c80)=0x5) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/thread-self/setgroups\x00', 0x4000, 0x0) fcntl$auto(r10, 0x9c0, r8) ioctl$auto_TIOCGSID(r2, 0x5429, &(0x7f0000000d00)="00601088692a5cbe0a471a267e66307e3c95b26f5dec23369d5fb212311ee8ca0b5043daeeb4759a3e80ab953c8cc0f1e27554da2a199acb127027fc2692e08ab43e7911ddb7611c76d7d64435fa2b6e261f4812ba3c5b44182bd6e0cee127d1adf0") sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x98, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0x69, 0x6, "583f43276d55aa467c4bcfb4b035f60ec3707d150790d4ac3baeb3595397128611a07464389efc472147b1f2721b54b96a1e0737dd0113f150a7382619d3ea3ab8001f6ddbe0d08c29b2bbc15419efcc827fc00207687ffe12ade9019913ad82cce8a01a0f"}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x81}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x8010) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f80), r1) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x94, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_KEK={0x3e, 0xf2, "4ec1ffe9ba9357218802daf48970e3fb5509dc0979207c5806a69f7e38b30d4eb522c9521625788fd4dfeec9da84311f025049b0dc02b80d1098"}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x502a}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2a9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xfc}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fanotify_mark$auto(r2, 0x81, 0x7, 0xffffffffffffffff, &(0x7f0000001140)='./file0\x00') 5.644083138s ago: executing program 3 (id=822): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c0400, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88d4) mmap$auto(0xf729, 0x20009, 0x4000010000df, 0xeb1, 0x401, 0x8400) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x54, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x503642, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) read$auto_rtc_dev_fops_dev(0xffffffffffffffff, &(0x7f0000000280)=""/198, 0xc6) getsockopt$auto(r0, 0x85, 0x84, 0x0, &(0x7f0000000000)=0x9119) 5.637905324s ago: executing program 1 (id=823): rt_sigqueueinfo$auto(0x0, 0xfffffff9, &(0x7f0000000000)={@siginfo_0_0={0x2, 0x3, 0xffffffb7, @_rt={0x0, 0xee01, @sival_ptr=0x0}}}) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd2/sched/write2_fifo_list\x00', 0x2aa00, 0x0) read$auto(r0, 0x0, 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) ioctl$auto_TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0xd) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a) ioctl$auto(r1, 0x5646, 0x7) 5.499631864s ago: executing program 4 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf250100000018000780db0001800800df370180000000000800", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x38}, 0x1, 0x400000000000000, 0x0, 0x4}, 0x8880) 4.993764514s ago: executing program 4 (id=825): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.6569957s ago: executing program 5 (id=826): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r1 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_make_request/space\x00', 0x48981, 0x0) write$auto(r1, &(0x7f0000000200)='0\x00\xa6C\x1b\xad\xb1\x9e\xc8Tt\xa8\x87\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\xaf\x14\x8a\xcf\xe8\xe8,-d\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xf6\xf1\xe9\x17\xb3\xc1\x13\x00\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3Ch\x03&\x1c\r&\xf9i\xa8\x01\xdbBr\'\x83\'d`\x05\x10\x9d\x8f*E\xfb\x9c\rTD\xa3\xc5\x1bWZ\xb8Q7]E\x84v\x17M\xd3\xf3\x1c\xd4.\vA\xad\x88\x85\xe3vi\xd6', 0x4) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xca301, 0x0) open(0x0, 0x161342, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x1) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) clone$auto(0x6, 0x9, 0x0, 0x0, 0xe08) mmap$auto(0x5, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x1a3, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) 4.194244591s ago: executing program 3 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r0, &(0x7f00000002c0)={{&(0x7f00000001c0)="e5991fb4904ad10debbcc75da7260454406c4b41d4580db2f9c9cd30b97e960b98f59bc546aef5d4214ea683b392f9f8", 0x7, &(0x7f0000000240)={&(0x7f0000000200)="8136d05b87ef958444a3a7f0aed4bd6cf62690bd0ce7d9fc81898ab3c82972f9a953dcb9310847a60ee215204bf0", 0x3}, 0x3, &(0x7f0000000280)="7aa5e7ee40e54397317f0ad4a7f9cc5cf93f874e5774955993a77349b5c1bfbd688941d4152395b94c27e01c4eff631198e5fee0f08d1a0fecbd", 0xbdec, 0xf082}, 0xd}, 0x3, 0x7) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/tracing/set_event\x00', 0xa00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyxd\x00', 0x90103, 0x0) pread64$auto(r1, 0x0, 0xc404, 0x1000) syz_clone(0x300600, &(0x7f0000000300)="13dfd7de42e9b0ed15e7b063240d684b0500883ade4e1f7519b570c58bd48431989b0f39fbcb5d112739a613c12e5fcde698d31044ce5a247468f4d12e22a10564dc6764d50215e0c0d24bac6656ce8f075c53a89d8b94dcef265e1e6c95c0d551900946f9434962d8e5ec029becdd1ec545e01aa66b3253b52ae116a3d8b60c6fb7ce063a94c22f214ed03d8fca120cdcdd61be5e445fc7ea5cd2d4", 0x9c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="0276d88cdafa41228f082180a70ffc6fd6ca6a409e53cee94c382940d36f86ae106360f0e6be7d7a5b830b4d0326fcf8d2399273872b933a5c2a445e9d6f05f3ea2251d74031e6ba57409d1c43313f470e21ca529d7d9fb8baa856fdb429a6787adce263b35ede78202292a7ce1543ef882f2555e9e1e089b60afcec742a9b7d80dc6360136bb01a8190352dedab4a662b85f027aec1045761c6b2897048e7f6c239a1de7e7007b96216ac1022783c77998699caa6751b1e271a48336e9d1f0b61499da05c456dedde50544a7845304a1f2885db683a2c9262fef322b6f9ee58b43bc6ec49345a13b6") syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r2 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r2) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2b, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 3.83794097s ago: executing program 1 (id=828): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x22, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) msgctl$auto(0x2, 0xf8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, 0x0, 0x48010) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) clone$auto(0x5, 0xa81, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) 3.787012341s ago: executing program 4 (id=829): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) shutdown$auto(r0, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r1 = open(0x0, 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4200, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x5, 0x0, 0x200056f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) writev$auto(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x4}, 0x9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/README\x00', 0x80000, 0x0) close_range$auto(r2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/209, 0xd1) madvise$auto(0x0, 0x2003f0, 0x15) getgid() 3.276381091s ago: executing program 5 (id=830): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x181842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9, 0x2000000}}, 0x0) timer_settime$auto(0x0, 0x3ff, &(0x7f0000000040)={{0x401, 0x9}, {0x8, 0xec4d}}, &(0x7f0000000080)={{0x700000000, 0x6}, {0x1, 0x6}}) read$auto_fuse_dir_operations_dir(0xffffffffffffffff, &(0x7f0000000180)=""/158, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd73004edbdf258e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x5609, r5) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000001180)={0x8}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=r8, @ANYBLOB="080061000300000008006200ff070000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r10) 2.451149629s ago: executing program 1 (id=831): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20000003) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) 1.832305473s ago: executing program 5 (id=832): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x90000, 0x30, 0x10}, 0x18) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mount_setattr$auto(r0, &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000100)={0x7fffffff, 0xb, 0x0, @inferred=r1}, 0x1) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/devices/virtual/iscsi_transport/iser/caps\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000c80)=""/74, 0x4a) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r5 = socket(0x2, 0x3, 0xa) mlockall$auto(0xfffffffd) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r2) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r6, @ANYBLOB="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"], 0x104}}, 0x40) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="18062abd7001ffdbdf251f0000000400d800"], 0x18}}, 0x8000) r9 = socket(0x15, 0x2, 0x302) r10 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/lockdep_stats\x00', 0x400, 0x0) read$auto_proc_iter_file_ops_compat_inode(r10, &(0x7f0000000540)=""/104, 0x68) setsockopt$auto(r9, 0x107, 0x9, 0x0, 0x20008004) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 1.726296571s ago: executing program 4 (id=833): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) semctl$auto(0x100, 0xfffffffffffffffa, 0x3, 0x8) ioctl$auto(r0, 0x560a, 0x7) r1 = socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0xfffffffc, 0xfffffffc, 0x0) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@bpf_attr_11={0xfdfe, 0xee5, 0xf753, 0x6, 0xffffffff, 0x8, 0x8, r1}, 0xfffffff3) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_GET_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x2e4, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_NONCES={0xdc, 0xf3, "685a14b072f5a5e4918cf218fc44eb6e85cfa2227f326344572e012a3958ce3edb84ffdb0e3e65dcf80159326f0577029fecc5d9fd6f0af51f75c2e55ed3051a06f1b5c76294e685ea90164c42a087de70a8d69df42f44e0afb25fe66bcc9697e72a0b48f86bc2e509ad1209afd4d7c25db1ca970e8b1c92fa64ff44d2d10a6f9a0e725f62076ea0e10f5622d399ad9dfccf7fbdc263522079caa8f27dcf43895082386f9fb677afbad2f6a96237b7f928b3fee8485c947c3ff2aea45760ba7723f521a69d39e873471e963ead11799d8276873b7f52a4a2"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xb}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0x5b, 0x1a, "b347a0b3a9295c63130ef48377273fabd5cc04aa507e4b1d492a04a565bf3bc1ccc5cea1fd33509e85d82dd4d953b70aade77b66a468a556dd2e1fea1ef0ad01df57b1a4a9854c66834d43ef55acdfb79d84a6e3858e06"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}, @NL80211_ATTR_FILS_DISCOVERY={0x17c, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xfbe}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x5}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x10001}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x29, 0x3, "db2e5da2505d0790d9baff69a34f92d3bbd4df004e9b51e71cd66ce6b9e57d4134a580307f"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x2d, 0x3, "c2fa41e77551096593f795ff7758cb68dbe6ef7afe37844e253b32d9e2166e9cb1760d6a93060ad5c7"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xfb, 0x3, "71f909aa6e32c3214edfe8535169d5f90f89fecb56cd3571b8f0cc5cf9cd932bd7b0feaf53ba99da14eb03ce638484093b5e2f09257da002b99fbf6bd9e1b28674694a9cd2534255b123b4fcf8cbded778de20573a09e0fa64e9235311c726b0b2c7463a51928bae8aa4b6a65f8770a936b59a4ffd39877d308538c7668a65bcdcb0fa880ac7b13e563cb3c6df83fe97924ebbc34ff07fa806a5e5d8c6846d1e6624eaae1a6e2fe5bf2903a84b02ee7fbf92d26626de83af3378a94112cff26da084543465df155c5bbd71f772eedc4c1b4d966c4563ac013c1717aa2ed65d455e0fcba853f02526e128f1a9609686e3e7fad64aeebed0"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80005}, 0x4b3019936b0ace72) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/options\x00', 0x48302, 0x0) pread64$auto(r4, 0x0, 0x100000001, 0x400000000000100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x2006, 0x4) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) 1.258714554s ago: executing program 1 (id=834): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x10, 0x2, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) 838.507817ms ago: executing program 4 (id=835): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1000001b, 0x7181, 0x1ffdb, 0x7, 0x4, 0x9, 0x9, 0x3, 0x4, 0x1, 0xd6, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x670, 0x0, 0x0, 0xf, 0x6000000000000000, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000380)="a6da19b2184713ab0fb2c4ff41d795e747d674a20e166d85d83e949d47de3f64ad11085e7ead820518dd80791ffebae5ea6ae6e0a1aa114e71fdd4c80698044050a605b1e9a00f52441fd32a753511960e4e39aa217223ee1400fdb014d28dbf3d5f3901d22f30e915e0b605e4ca5f9f2d01c9000142560ed9ae95513e7d2123292d1f30130bba207cf43688feb77e5d2eface5c0bd5ee76fd8cd6723fe3297eba0c3f65a69bb9c63732224987321f14c6ab080520", 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0xca, 0x4020c, 0x800000000008, 0x9b72, 0x7, 0x28003) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x1000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x88080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) 322.730999ms ago: executing program 3 (id=836): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r1, 0x80, 0xffffffff, 0x0, 0x4) mmap$auto(0x2, 0xa10004, 0xffb, 0x50, r1, 0x8000) ioctl$auto(0xffffffffffffffff, 0x541d, r1) getpgid$auto(0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="f8140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b10123805200bf005b9afd6487a780919c2c6c1ce99a4e2aa11833046b6cc4d6613285942aa733eac78bf367eecd79a05c5a5236475654b1fded4a7f2a8f33f41e57619c6a9d038d1830d8cfd72e072d9e466f99ebfc0000e0150208000b00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="9e00c380dfd070200928ab2093fcf2ebe4cce7f0166f09b08b09893aea7849933340d841698ac5c83060947ecd57cb6322b5d660c8ff9399488def948cd58979a383e0af235851a6e6e7d0be83d6943bd74d8499b7df05ccfac6c7f1199d146e0f00f42e615f928380978c45072aed2872a6c84ddb98e39a6e5f62a86ed4df559d25a46bc7cba95440aaf18585d76207da849ef9036b0800e000ac1e01010000000400ec002800328008000400", @ANYRES32=0x0, @ANYBLOB="0500020001000000040005000400050008000400", @ANYRES32=0x0, @ANYBLOB="0400e8ff0300e8ef921d5200", @ANYRES32=0x0, @ANYBLOB="05001c0008000000"], 0x14f8}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004090) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x6}}]}, 0x1c}}, 0x4020880) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xd680000000) 0s ago: executing program 1 (id=837): read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) (async) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0xe, 0x3, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x143702, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video30\x00', 0x2381, 0x0) (async) mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) socket(0xa, 0x6, 0xf5) set_tid_address$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x800, 0x8a) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r1 = bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r0}, 0x40) (async, rerun: 64) mbind$auto(0x0, 0x4, 0x5, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8800, 0x3f) (async) mmap$auto(0x8, 0x400008, 0xdf, 0x9b74, r2, 0x8000) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x80, 0x11, 0x80008917, 0x5}, 0x3, 0x6, 0x2, 0x4, @raw=0x7, @raw=0x9, 0x42, 0x0, &(0x7f00000002c0)="ed120346cf4d572333044514f7fee60a85df5fd4fc3daeeadaea44608af9d300a9325167f3a8d0ff45b7220d53f66fdef077c43b4bb93b43f4a7329ad8facae282cafa25168a68a1686af749b8", &(0x7f0000000a80)="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"}) (async) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000003c0)={0xfffffffffffffff0, @raw=0x4, @inferred=r3, 0x3, 0x3, '\x00', {0x10001, 0x2, 0x5, 0x0, 0x0, 0x7, 0x6, 0x401, {0xb}, {0x9, 0xfffffe01}, {0x7, 0x8}, 0xfffffffffffffff7, 0x10000, 0x3, 0x5c2b, 0x8, 0x6, 0x8001, 0x3cf, 0x7fff, 0x9, '\x00', 0x800, 0x7, 0x81}}) setreuid$auto(r4, r5) shmget$auto(0x8, 0x10563, 0x568d1af2) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101) (async) acct$auto(&(0x7f0000000040)='/dev/sequencer2\x00') (async) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async, rerun: 64) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r7, 0x800, r6) (async) open(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x472a42, 0x41) kernel console output (not intermixed with test programs): 1 UID: 0 PID: 7490 Comm: syz.0.271 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 256.108705][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.108722][ T7490] Call Trace: [ 256.108732][ T7490] [ 256.108742][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 256.108777][ T7490] should_fail_ex+0x512/0x640 [ 256.108811][ T7490] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 256.108860][ T7490] should_failslab+0xc2/0x120 [ 256.108891][ T7490] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 256.108937][ T7490] ? sock_alloc_inode+0x25/0x1c0 [ 256.108978][ T7490] ? __pfx_sock_alloc_inode+0x10/0x10 [ 256.109012][ T7490] sock_alloc_inode+0x25/0x1c0 [ 256.109046][ T7490] alloc_inode+0x61/0x240 [ 256.109079][ T7490] sock_alloc+0x40/0x280 [ 256.109114][ T7490] __sock_create+0xc1/0x8d0 [ 256.109160][ T7490] __sys_socket+0x14d/0x260 [ 256.109200][ T7490] ? __pfx___sys_socket+0x10/0x10 [ 256.109242][ T7490] ? do_user_addr_fault+0x843/0x1370 [ 256.109289][ T7490] __x64_sys_socket+0x72/0xb0 [ 256.109326][ T7490] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.109371][ T7490] do_syscall_64+0xcd/0x490 [ 256.109418][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.109449][ T7490] RIP: 0033:0x7f1830390887 [ 256.109473][ T7490] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.109500][ T7490] RSP: 002b:00007f18312dcfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 256.109529][ T7490] RAX: ffffffffffffffda RBX: 00007f18305b5fa0 RCX: 00007f1830390887 [ 256.109550][ T7490] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 256.109566][ T7490] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 256.109584][ T7490] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 256.109601][ T7490] R13: 0000000000000000 R14: 00007f18305b5fa0 R15: 00007ffc43e028a8 [ 256.109641][ T7490] [ 256.109655][ T7490] net_ratelimit: 22 callbacks suppressed [ 256.109670][ T7490] socket: no more sockets [ 259.097678][ T7532] Invalid ELF header magic: != ELF [ 259.543327][ T7538] tipc: Started in network mode [ 259.568114][ T7538] tipc: Node identity ffffffff, cluster identity 4711 [ 259.604261][ T7538] tipc: Node number set to 4294967295 [ 260.664606][ T7559] netlink: 306 bytes leftover after parsing attributes in process `syz.2.285'. [ 260.697733][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 260.746130][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 261.096955][ T7563] .SV: entered promiscuous mode [ 261.137434][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.144855][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.300878][ T7593] netlink: 306 bytes leftover after parsing attributes in process `syz.2.294'. [ 262.363020][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 262.396700][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 263.375265][ T7606] netlink: 306 bytes leftover after parsing attributes in process `syz.1.298'. [ 263.441942][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 263.467411][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 263.701502][ T7598] Invalid ELF header magic: != ELF [ 265.282337][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 265.965369][ T7644] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 266.818673][ T7652] __nla_validate_parse: 1 callbacks suppressed [ 266.818697][ T7652] netlink: 306 bytes leftover after parsing attributes in process `syz.3.306'. [ 266.911079][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 266.920406][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 267.135630][ T7658] FAULT_INJECTION: forcing a failure. [ 267.135630][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 267.222481][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.3.308 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 267.222528][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.222545][ T7658] Call Trace: [ 267.222555][ T7658] [ 267.222567][ T7658] dump_stack_lvl+0x16c/0x1f0 [ 267.222598][ T7658] should_fail_ex+0x512/0x640 [ 267.222635][ T7658] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 267.222683][ T7658] should_failslab+0xc2/0x120 [ 267.222716][ T7658] __kmalloc_cache_noprof+0x6a/0x3e0 [ 267.222758][ T7658] ? ww_mutex_lock+0x37/0x160 [ 267.222785][ T7658] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 267.222840][ T7658] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 267.222888][ T7658] drm_atomic_get_crtc_state+0x16e/0x450 [ 267.222934][ T7658] drm_atomic_get_plane_state+0x436/0x590 [ 267.222975][ T7658] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 267.223020][ T7658] ? __pfx___might_resched+0x10/0x10 [ 267.223063][ T7658] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 267.223167][ T7658] drm_client_modeset_commit_locked+0x14d/0x580 [ 267.223219][ T7658] drm_client_modeset_commit+0x4f/0x80 [ 267.223267][ T7658] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 267.223312][ T7658] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 267.223348][ T7658] drm_fbdev_client_restore+0x2c/0x40 [ 267.223379][ T7658] drm_client_dev_restore+0x1f6/0x2a0 [ 267.223431][ T7658] drm_release+0x2c4/0x360 [ 267.223477][ T7658] ? __pfx_drm_release+0x10/0x10 [ 267.223516][ T7658] __fput+0x402/0xb70 [ 267.223561][ T7658] task_work_run+0x150/0x240 [ 267.223607][ T7658] ? __pfx_task_work_run+0x10/0x10 [ 267.223653][ T7658] ? __pfx___do_sys_close_range+0x10/0x10 [ 267.223712][ T7658] exit_to_user_mode_loop+0xeb/0x110 [ 267.223762][ T7658] do_syscall_64+0x3f6/0x490 [ 267.223800][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.223831][ T7658] RIP: 0033:0x7f912458e969 [ 267.223858][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.223884][ T7658] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.223913][ T7658] RAX: 0000000000000000 RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 267.223932][ T7658] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 267.223949][ T7658] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 267.223966][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.223984][ T7658] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 267.224028][ T7658] [ 268.453396][ T7658] capability: warning: `syz.3.308' uses 32-bit capabilities (legacy support in use) [ 269.124948][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 270.569067][ T7688] Invalid ELF header magic: != ELF [ 279.345741][ T7791] netlink: 62 bytes leftover after parsing attributes in process `syz.0.330'. [ 281.621939][ T7827] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 281.630069][ T7827] netlink: 314 bytes leftover after parsing attributes in process `syz.3.335'. [ 281.642469][ T7827] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 281.694989][ T7827] netlink: 314 bytes leftover after parsing attributes in process `syz.3.335'. [ 283.472339][ T7840] sd 0:0:1:0: PR command failed: 1026 [ 283.482884][ T7840] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 283.498277][ T7840] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 286.860948][ T7895] Invalid ELF header magic: != ELF [ 287.984166][ T7905] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 289.184645][ T7914] pty pty233: ldisc open failed (-12), clearing slot 233 [ 290.092422][ T7938] FAULT_INJECTION: forcing a failure. [ 290.092422][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 290.168426][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.1.350 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 290.168474][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.168497][ T7938] Call Trace: [ 290.168506][ T7938] [ 290.168517][ T7938] dump_stack_lvl+0x16c/0x1f0 [ 290.168555][ T7938] should_fail_ex+0x512/0x640 [ 290.168589][ T7938] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 290.168636][ T7938] should_failslab+0xc2/0x120 [ 290.168668][ T7938] __kmalloc_cache_noprof+0x6a/0x3e0 [ 290.168707][ T7938] ? ww_mutex_lock+0x37/0x160 [ 290.168737][ T7938] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 290.168792][ T7938] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 290.168844][ T7938] drm_atomic_get_crtc_state+0x16e/0x450 [ 290.168894][ T7938] drm_atomic_get_plane_state+0x436/0x590 [ 290.168938][ T7938] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 290.168981][ T7938] ? __pfx___might_resched+0x10/0x10 [ 290.169025][ T7938] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 290.169124][ T7938] drm_client_modeset_commit_locked+0x14d/0x580 [ 290.169177][ T7938] drm_client_modeset_commit+0x4f/0x80 [ 290.169220][ T7938] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 290.169263][ T7938] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 290.169296][ T7938] drm_fbdev_client_restore+0x2c/0x40 [ 290.169326][ T7938] drm_client_dev_restore+0x1f6/0x2a0 [ 290.169379][ T7938] drm_release+0x2c4/0x360 [ 290.169423][ T7938] ? __pfx_drm_release+0x10/0x10 [ 290.169460][ T7938] __fput+0x402/0xb70 [ 290.169506][ T7938] task_work_run+0x150/0x240 [ 290.169555][ T7938] ? __pfx_task_work_run+0x10/0x10 [ 290.169601][ T7938] ? __pfx___do_sys_close_range+0x10/0x10 [ 290.169658][ T7938] exit_to_user_mode_loop+0xeb/0x110 [ 290.169707][ T7938] do_syscall_64+0x3f6/0x490 [ 290.169743][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.169774][ T7938] RIP: 0033:0x7f93c8b8e969 [ 290.169799][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.169828][ T7938] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 290.169859][ T7938] RAX: 0000000000000000 RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 290.169879][ T7938] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 290.169897][ T7938] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 290.169915][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.169933][ T7938] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 290.169976][ T7938] [ 291.244125][ T7955] Invalid ELF header magic: != ELF [ 292.978041][ T7978] Invalid ELF header magic: != ELF [ 297.883662][ T8034] FAULT_INJECTION: forcing a failure. [ 297.883662][ T8034] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 297.927252][ T8034] CPU: 1 UID: 0 PID: 8034 Comm: syz.3.365 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 297.927295][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.927314][ T8034] Call Trace: [ 297.927323][ T8034] [ 297.927335][ T8034] dump_stack_lvl+0x16c/0x1f0 [ 297.927369][ T8034] should_fail_ex+0x512/0x640 [ 297.927411][ T8034] should_fail_alloc_page+0xe7/0x130 [ 297.927446][ T8034] prepare_alloc_pages+0x3c2/0x610 [ 297.927491][ T8034] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 297.927542][ T8034] ? __schedule+0x1181/0x5de0 [ 297.927602][ T8034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.927655][ T8034] ? __pfx___schedule+0x10/0x10 [ 297.927711][ T8034] ? find_held_lock+0x2b/0x80 [ 297.927742][ T8034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.927789][ T8034] ? policy_nodemask+0xea/0x4e0 [ 297.927824][ T8034] alloc_pages_mpol+0x1fb/0x550 [ 297.927857][ T8034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.927899][ T8034] folio_alloc_mpol_noprof+0x36/0x2f0 [ 297.927939][ T8034] vma_alloc_folio_noprof+0xed/0x1e0 [ 297.927975][ T8034] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 297.928008][ T8034] ? find_held_lock+0x2b/0x80 [ 297.928047][ T8034] ? __handle_mm_fault+0x1092/0x5490 [ 297.928109][ T8034] __handle_mm_fault+0x2f21/0x5490 [ 297.928163][ T8034] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.928204][ T8034] ? lock_vma_under_rcu+0x47d/0x970 [ 297.928246][ T8034] ? lock_vma_under_rcu+0x47d/0x970 [ 297.928319][ T8034] handle_mm_fault+0x589/0xd10 [ 297.928362][ T8034] ? __pkru_allows_pkey+0x21/0xb0 [ 297.928403][ T8034] do_user_addr_fault+0x60c/0x1370 [ 297.928446][ T8034] ? rcu_is_watching+0x12/0xc0 [ 297.928489][ T8034] exc_page_fault+0x5c/0xb0 [ 297.928532][ T8034] asm_exc_page_fault+0x26/0x30 [ 297.928560][ T8034] RIP: 0033:0x7f912445a35b [ 297.928586][ T8034] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 297.928613][ T8034] RSP: 002b:00007f9125403fb0 EFLAGS: 00010202 [ 297.928638][ T8034] RAX: 0000000000000000 RBX: 00007f91247b5fa0 RCX: 0000000000000000 [ 297.928657][ T8034] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 297.928676][ T8034] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 297.928693][ T8034] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000000 [ 297.928710][ T8034] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 297.928750][ T8034] [ 298.449210][ T8034] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 298.484542][ T30] audit: type=1326 audit(6043941332.283:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.3.365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f912458e969 code=0x0 [ 299.294965][ T8044] Invalid ELF header magic: != ELF [ 300.765142][ T5847] Bluetooth: hci2: unexpected subevent 0x01 length: 122 > 18 [ 302.987149][ T8088] Invalid ELF header magic: != ELF [ 303.205108][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.241847][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.258916][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.292268][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.313446][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.661156][ T8090] chnl_net:caif_netlink_parms(): no params data found [ 305.369780][ T5847] Bluetooth: hci4: command tx timeout [ 305.631689][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.639989][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.647199][ T8090] bridge_slave_0: entered allmulticast mode [ 305.661178][ T8090] bridge_slave_0: entered promiscuous mode [ 305.707197][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.724892][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.783023][ T8090] bridge_slave_1: entered allmulticast mode [ 305.817137][ T8090] bridge_slave_1: entered promiscuous mode [ 306.108386][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.545530][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.821594][ T8090] team0: Port device team_slave_0 added [ 306.866071][ T8090] team0: Port device team_slave_1 added [ 307.036771][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.044223][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.128816][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.166792][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.198564][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.278605][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.448736][ T5847] Bluetooth: hci4: command tx timeout [ 307.656371][ T8124] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 307.710624][ T8090] hsr_slave_0: entered promiscuous mode [ 307.737637][ T8090] hsr_slave_1: entered promiscuous mode [ 307.781987][ T8090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.808859][ T8090] Cannot create hsr debugfs directory [ 307.963726][ T5847] Bluetooth: hci2: unexpected subevent 0x01 length: 122 > 18 [ 307.980597][ T5847] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 309.220409][ T8090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.265134][ T8090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.453049][ T8090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.528640][ T51] Bluetooth: hci4: command tx timeout [ 309.577193][ T8090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.293581][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.405804][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.431899][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.439476][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.488855][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.496130][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.704843][ T8152] nbd: must specify at least one socket [ 311.610630][ T51] Bluetooth: hci4: command tx timeout [ 311.870369][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.471294][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 122 > 18 [ 312.481091][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 313.374115][ T8090] veth0_vlan: entered promiscuous mode [ 313.759356][ T8090] veth1_vlan: entered promiscuous mode [ 314.175017][ T8090] veth0_macvtap: entered promiscuous mode [ 314.392342][ T8090] veth1_macvtap: entered promiscuous mode [ 314.584336][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.649054][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.724288][ T8090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.828999][ T8090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.868183][ T8090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.918829][ T8090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.838291][ T8217] mkiss: ax0: crc mode is auto. [ 316.329594][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.372297][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.601543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.618726][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.716506][ T8225] Invalid ELF header magic: != ELF [ 317.676859][ T8241] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 317.700924][ T8241] netlink: 314 bytes leftover after parsing attributes in process `syz.4.375'. [ 317.721789][ T8241] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 317.782515][ T8241] netlink: 314 bytes leftover after parsing attributes in process `syz.4.375'. [ 318.813953][ T8234] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 321.023329][ T8270] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 321.038969][ T8270] size and base must be multiples of 4 kiB [ 321.045012][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.3.407 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 321.045051][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.045064][ T8270] Call Trace: [ 321.045073][ T8270] [ 321.045082][ T8270] dump_stack_lvl+0x16c/0x1f0 [ 321.045111][ T8270] mtrr_del+0xd1/0x110 [ 321.045142][ T8270] mtrr_ioctl+0x922/0xcf0 [ 321.045172][ T8270] ? __pfx_mtrr_ioctl+0x10/0x10 [ 321.045208][ T8270] ? find_held_lock+0x2b/0x80 [ 321.045254][ T8270] ? __fget_files+0x20e/0x3c0 [ 321.045288][ T8270] ? __pfx_mtrr_ioctl+0x10/0x10 [ 321.045317][ T8270] proc_reg_unlocked_ioctl+0x226/0x320 [ 321.045339][ T8270] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 321.045366][ T8270] __x64_sys_ioctl+0x18e/0x210 [ 321.045398][ T8270] do_syscall_64+0xcd/0x490 [ 321.045425][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.045450][ T8270] RIP: 0033:0x7f912458e969 [ 321.045470][ T8270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.045491][ T8270] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.045514][ T8270] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 321.045530][ T8270] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 321.045544][ T8270] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 321.045558][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.045572][ T8270] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 321.045603][ T8270] [ 322.577173][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.584107][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.640044][ T8287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.647493][ T8287] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 322.764525][ T8287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.785602][ T8287] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 322.854637][ T8287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.864671][ T8287] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 322.897864][ T8287] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 322.948545][ T8287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.965145][ T8287] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 322.996156][ T8287] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.095847][ T8287] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 323.164884][ T8287] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.285800][ T8300] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 324.478048][ T8313] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 324.604593][ T5847] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 324.604641][ T5847] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 324.619876][ T5847] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 324.619913][ T5847] Bluetooth: hci2: adv larger than maximum supported [ 324.627196][ T5847] Bluetooth: hci2: adv larger than maximum supported [ 324.635137][ T5847] Bluetooth: hci2: Malformed LE Event: 0x0d [ 324.649783][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 324.813893][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 324.889146][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 324.959093][ T8330] Invalid ELF header magic: != ELF [ 324.978582][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 325.048880][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 325.224618][ T8335] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 326.047530][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.421'. [ 326.143667][ T8344] veth0_macvtap: entered allmulticast mode [ 326.728700][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 326.888684][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 326.978761][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 327.059531][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 327.138802][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.152260][ T8357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 329.048787][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 329.211165][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.272771][ T8380] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 330.508262][ T8399] Invalid ELF header magic: != ELF [ 332.904619][ T8444] Format for deleting device is "id" (uint). [ 332.992515][ T8444] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 333.115396][ T8444] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 333.177407][ T8444] netlink: 330 bytes leftover after parsing attributes in process `syz.4.441'. [ 334.190513][ T8447] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 335.595741][ T8484] FAULT_INJECTION: forcing a failure. [ 335.595741][ T8484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.616417][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.4.450 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 335.616458][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.616474][ T8484] Call Trace: [ 335.616484][ T8484] [ 335.616495][ T8484] dump_stack_lvl+0x16c/0x1f0 [ 335.616528][ T8484] should_fail_ex+0x512/0x640 [ 335.616569][ T8484] should_fail_alloc_page+0xe7/0x130 [ 335.616601][ T8484] prepare_alloc_pages+0x3c2/0x610 [ 335.616643][ T8484] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 335.616689][ T8484] ? __schedule+0x1181/0x5de0 [ 335.616743][ T8484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.616788][ T8484] ? __pfx___schedule+0x10/0x10 [ 335.616839][ T8484] ? find_held_lock+0x2b/0x80 [ 335.616867][ T8484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.616909][ T8484] ? policy_nodemask+0xea/0x4e0 [ 335.616950][ T8484] alloc_pages_mpol+0x1fb/0x550 [ 335.616980][ T8484] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.617027][ T8484] folio_alloc_mpol_noprof+0x36/0x2f0 [ 335.617063][ T8484] vma_alloc_folio_noprof+0xed/0x1e0 [ 335.617096][ T8484] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 335.617128][ T8484] ? find_held_lock+0x2b/0x80 [ 335.617155][ T8484] ? __handle_mm_fault+0x1092/0x5490 [ 335.617196][ T8484] __handle_mm_fault+0x2f21/0x5490 [ 335.617241][ T8484] ? __pfx___handle_mm_fault+0x10/0x10 [ 335.617278][ T8484] ? lock_vma_under_rcu+0x47d/0x970 [ 335.617314][ T8484] ? lock_vma_under_rcu+0x47d/0x970 [ 335.617376][ T8484] handle_mm_fault+0x589/0xd10 [ 335.617413][ T8484] ? __pkru_allows_pkey+0x21/0xb0 [ 335.617452][ T8484] do_user_addr_fault+0x60c/0x1370 [ 335.617491][ T8484] ? rcu_is_watching+0x12/0xc0 [ 335.617526][ T8484] exc_page_fault+0x5c/0xb0 [ 335.617570][ T8484] asm_exc_page_fault+0x26/0x30 [ 335.617597][ T8484] RIP: 0033:0x7f5656e5a35b [ 335.617622][ T8484] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 335.617649][ T8484] RSP: 002b:00007f5657d71fb0 EFLAGS: 00010202 [ 335.617674][ T8484] RAX: 0000000000000000 RBX: 00007f56571b5fa0 RCX: 0000000000000000 [ 335.617693][ T8484] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 335.617710][ T8484] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 335.617727][ T8484] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000000 [ 335.617744][ T8484] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 335.617783][ T8484] [ 335.617802][ T8484] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 335.871399][ T30] audit: type=1326 audit(6043941369.643:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.4.450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 336.899297][ T8501] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 337.086079][ T5843] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 337.086117][ T5843] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 337.086151][ T5843] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 337.086201][ T5843] Bluetooth: hci1: adv larger than maximum supported [ 337.086239][ T5843] Bluetooth: hci1: adv larger than maximum supported [ 337.086256][ T5843] Bluetooth: hci1: Malformed LE Event: 0x0d [ 338.108145][ T8503] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 338.319502][ T8522] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 338.366879][ T8522] size and base must be multiples of 4 kiB [ 338.430943][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.3.459 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 338.430988][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.431002][ T8522] Call Trace: [ 338.431012][ T8522] [ 338.431024][ T8522] dump_stack_lvl+0x16c/0x1f0 [ 338.431061][ T8522] mtrr_del+0xd1/0x110 [ 338.431106][ T8522] mtrr_ioctl+0x922/0xcf0 [ 338.431143][ T8522] ? __pfx_mtrr_ioctl+0x10/0x10 [ 338.431189][ T8522] ? find_held_lock+0x2b/0x80 [ 338.431239][ T8522] ? __fget_files+0x20e/0x3c0 [ 338.431284][ T8522] ? __pfx_mtrr_ioctl+0x10/0x10 [ 338.431319][ T8522] proc_reg_unlocked_ioctl+0x226/0x320 [ 338.431349][ T8522] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 338.431379][ T8522] __x64_sys_ioctl+0x18e/0x210 [ 338.431422][ T8522] do_syscall_64+0xcd/0x490 [ 338.431456][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.431485][ T8522] RIP: 0033:0x7f912458e969 [ 338.431510][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.431535][ T8522] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.431565][ T8522] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 338.431586][ T8522] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 338.431604][ T8522] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.431622][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.431640][ T8522] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 338.431678][ T8522] [ 340.525100][ T8558] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 340.594015][ T5843] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 340.594094][ T5843] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 340.611540][ T5843] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 340.611579][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 340.619575][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 340.626536][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d [ 342.928805][ T8571] can: request_module (can-proto-0) failed. [ 343.183604][ T8581] Invalid ELF header magic: != ELF [ 344.751003][ T8598] FAULT_INJECTION: forcing a failure. [ 344.751003][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 344.790975][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.3.475 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 344.791003][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.791014][ T8598] Call Trace: [ 344.791020][ T8598] [ 344.791028][ T8598] dump_stack_lvl+0x16c/0x1f0 [ 344.791061][ T8598] should_fail_ex+0x512/0x640 [ 344.791084][ T8598] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 344.791117][ T8598] should_failslab+0xc2/0x120 [ 344.791137][ T8598] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 344.791173][ T8598] ? sk_prot_alloc+0x60/0x2a0 [ 344.791199][ T8598] sk_prot_alloc+0x60/0x2a0 [ 344.791222][ T8598] sk_alloc+0x36/0xc20 [ 344.791251][ T8598] rds_create+0x9e/0x5f0 [ 344.791279][ T8598] __sock_create+0x338/0x8d0 [ 344.791309][ T8598] __sys_socket+0x14d/0x260 [ 344.791333][ T8598] ? __pfx___sys_socket+0x10/0x10 [ 344.791364][ T8598] ? xfd_validate_state+0x61/0x180 [ 344.791393][ T8598] __x64_sys_socket+0x72/0xb0 [ 344.791416][ T8598] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.791445][ T8598] do_syscall_64+0xcd/0x490 [ 344.791465][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.791483][ T8598] RIP: 0033:0x7f912458e969 [ 344.791498][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.791515][ T8598] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 344.791533][ T8598] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 344.791544][ T8598] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 344.791554][ T8598] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 344.791564][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.791575][ T8598] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 344.791596][ T8598] [ 346.358416][ T8619] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 346.489224][ T8621] nbd: must specify at least one socket [ 346.506996][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 346.507025][ T5843] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 346.522352][ T5843] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 346.522390][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 346.529760][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 346.536671][ T5843] Bluetooth: hci2: Malformed LE Event: 0x0d [ 349.756056][ T8657] nbd: must specify at least one socket [ 349.819881][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 349.991915][ T8660] FAULT_INJECTION: forcing a failure. [ 349.991915][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 350.040207][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.4.489 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 350.040254][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.040271][ T8660] Call Trace: [ 350.040282][ T8660] [ 350.040294][ T8660] dump_stack_lvl+0x16c/0x1f0 [ 350.040337][ T8660] should_fail_ex+0x512/0x640 [ 350.040372][ T8660] ? fs_reclaim_acquire+0xae/0x150 [ 350.040414][ T8660] should_failslab+0xc2/0x120 [ 350.040448][ T8660] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 350.040513][ T8660] ? security_inode_alloc+0x3b/0x2b0 [ 350.040573][ T8660] security_inode_alloc+0x3b/0x2b0 [ 350.040622][ T8660] inode_init_always_gfp+0xce4/0x1030 [ 350.040674][ T8660] alloc_inode+0x86/0x240 [ 350.040706][ T8660] sock_alloc+0x40/0x280 [ 350.040741][ T8660] __sock_create+0xc1/0x8d0 [ 350.040786][ T8660] __sys_socket+0x14d/0x260 [ 350.040825][ T8660] ? __pfx___sys_socket+0x10/0x10 [ 350.040868][ T8660] ? do_user_addr_fault+0x843/0x1370 [ 350.040915][ T8660] __x64_sys_socket+0x72/0xb0 [ 350.040954][ T8660] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.041001][ T8660] do_syscall_64+0xcd/0x490 [ 350.041034][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.041065][ T8660] RIP: 0033:0x7f5656f90887 [ 350.041090][ T8660] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.041118][ T8660] RSP: 002b:00007f5657d71fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 350.041155][ T8660] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f90887 [ 350.041177][ T8660] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 350.041195][ T8660] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 350.041213][ T8660] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 350.041231][ T8660] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 350.041272][ T8660] [ 350.041341][ T8660] socket: no more sockets [ 350.151470][ T30] audit: type=1326 audit(6043941383.963:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.4.489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 350.373896][ T8650] veth0_macvtap: entered allmulticast mode [ 350.464558][ T8666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 350.508314][ T8666] size and base must be multiples of 4 kiB [ 350.530382][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.3.491 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 350.530428][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.530447][ T8666] Call Trace: [ 350.530457][ T8666] [ 350.530469][ T8666] dump_stack_lvl+0x16c/0x1f0 [ 350.530506][ T8666] mtrr_del+0xd1/0x110 [ 350.530545][ T8666] mtrr_ioctl+0x922/0xcf0 [ 350.530583][ T8666] ? __pfx_mtrr_ioctl+0x10/0x10 [ 350.530621][ T8666] ? find_held_lock+0x2b/0x80 [ 350.530656][ T8666] ? __fget_files+0x20e/0x3c0 [ 350.530699][ T8666] ? __pfx_mtrr_ioctl+0x10/0x10 [ 350.530737][ T8666] proc_reg_unlocked_ioctl+0x226/0x320 [ 350.530764][ T8666] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 350.530794][ T8666] __x64_sys_ioctl+0x18e/0x210 [ 350.530835][ T8666] do_syscall_64+0xcd/0x490 [ 350.530868][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.530911][ T8666] RIP: 0033:0x7f912458e969 [ 350.530937][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.530967][ T8666] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.530998][ T8666] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 350.531018][ T8666] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 350.531036][ T8666] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 350.531052][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.531069][ T8666] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 350.531107][ T8666] [ 351.821040][ T8675] Invalid ELF header magic: != ELF [ 351.966091][ T8684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 352.004902][ T8684] size and base must be multiples of 4 kiB [ 352.011105][ T8684] CPU: 0 UID: 0 PID: 8684 Comm: syz.4.496 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 352.011146][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.011163][ T8684] Call Trace: [ 352.011173][ T8684] [ 352.011184][ T8684] dump_stack_lvl+0x16c/0x1f0 [ 352.011218][ T8684] mtrr_del+0xd1/0x110 [ 352.011256][ T8684] mtrr_ioctl+0x922/0xcf0 [ 352.011293][ T8684] ? __pfx_mtrr_ioctl+0x10/0x10 [ 352.011338][ T8684] ? find_held_lock+0x2b/0x80 [ 352.011376][ T8684] ? __fget_files+0x20e/0x3c0 [ 352.011418][ T8684] ? __pfx_mtrr_ioctl+0x10/0x10 [ 352.011453][ T8684] proc_reg_unlocked_ioctl+0x226/0x320 [ 352.011480][ T8684] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 352.011513][ T8684] __x64_sys_ioctl+0x18e/0x210 [ 352.011552][ T8684] do_syscall_64+0xcd/0x490 [ 352.011585][ T8684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.011623][ T8684] RIP: 0033:0x7f5656f8e969 [ 352.011647][ T8684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.011674][ T8684] RSP: 002b:00007f5657d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.011703][ T8684] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f8e969 [ 352.011720][ T8684] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000004 [ 352.011736][ T8684] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 352.011752][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.011768][ T8684] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 352.011804][ T8684] [ 353.216585][ T8696] netlink: 206 bytes leftover after parsing attributes in process `syz.0.498'. [ 354.095225][ T8694] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 354.323509][ T8701] Format for deleting device is "id" (uint). [ 354.336944][ T8703] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 354.361584][ T8701] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 354.376517][ T8701] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 354.384485][ T8701] netlink: 330 bytes leftover after parsing attributes in process `syz.3.500'. [ 354.413577][ T8708] FAULT_INJECTION: forcing a failure. [ 354.413577][ T8708] name failslab, interval 1, probability 0, space 0, times 0 [ 354.436868][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.1.502 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 354.436912][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.436928][ T8708] Call Trace: [ 354.436940][ T8708] [ 354.437012][ T8708] dump_stack_lvl+0x16c/0x1f0 [ 354.437048][ T8708] should_fail_ex+0x512/0x640 [ 354.437081][ T8708] ? fs_reclaim_acquire+0xae/0x150 [ 354.437120][ T8708] should_failslab+0xc2/0x120 [ 354.437151][ T8708] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 354.437198][ T8708] ? security_inode_alloc+0x3b/0x2b0 [ 354.437251][ T8708] security_inode_alloc+0x3b/0x2b0 [ 354.437294][ T8708] inode_init_always_gfp+0xce4/0x1030 [ 354.437342][ T8708] alloc_inode+0x86/0x240 [ 354.437375][ T8708] sock_alloc+0x40/0x280 [ 354.437409][ T8708] __sock_create+0xc1/0x8d0 [ 354.437463][ T8708] __sys_socket+0x14d/0x260 [ 354.437501][ T8708] ? __pfx___sys_socket+0x10/0x10 [ 354.437540][ T8708] ? do_user_addr_fault+0x843/0x1370 [ 354.437586][ T8708] __x64_sys_socket+0x72/0xb0 [ 354.437621][ T8708] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.437666][ T8708] do_syscall_64+0xcd/0x490 [ 354.437698][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.437728][ T8708] RIP: 0033:0x7f93c8b90887 [ 354.437751][ T8708] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.437777][ T8708] RSP: 002b:00007f93c9a06fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 354.437812][ T8708] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b90887 [ 354.437831][ T8708] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 354.437848][ T8708] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 354.437864][ T8708] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 354.437881][ T8708] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 354.437919][ T8708] [ 354.438147][ T8708] socket: no more sockets [ 354.739066][ T30] audit: type=1326 audit(6043941388.533:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.1.502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c8b8e969 code=0x0 [ 355.495076][ T8722] Invalid ELF header magic: != ELF [ 355.573430][ T8716] Invalid ELF header magic: != ELF [ 357.712274][ T8742] block nbd3: Unsupported socket: shutdown callout must be supported. [ 358.066661][ T8749] netlink: 29 bytes leftover after parsing attributes in process `syz.4.511'. [ 358.584124][ T8763] lo: entered allmulticast mode [ 358.721669][ T8765] lo: left allmulticast mode [ 359.607340][ T8776] Invalid ELF header magic: != ELF [ 360.396595][ T8781] mkiss: ax0: crc mode is auto. [ 360.590475][ T8786] Invalid ELF header magic: != ELF [ 360.996864][ T8792] block nbd3: Unsupported socket: shutdown callout must be supported. [ 361.311419][ T8796] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 362.252907][ T8800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 362.283522][ T8800] size and base must be multiples of 4 kiB [ 362.298631][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.1.522 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 362.298673][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.298690][ T8800] Call Trace: [ 362.298700][ T8800] [ 362.298711][ T8800] dump_stack_lvl+0x16c/0x1f0 [ 362.298745][ T8800] mtrr_del+0xd1/0x110 [ 362.298782][ T8800] mtrr_ioctl+0x922/0xcf0 [ 362.298820][ T8800] ? __pfx_mtrr_ioctl+0x10/0x10 [ 362.298889][ T8800] ? find_held_lock+0x2b/0x80 [ 362.298940][ T8800] ? __fget_files+0x20e/0x3c0 [ 362.298984][ T8800] ? __pfx_mtrr_ioctl+0x10/0x10 [ 362.299023][ T8800] proc_reg_unlocked_ioctl+0x226/0x320 [ 362.299053][ T8800] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 362.299086][ T8800] __x64_sys_ioctl+0x18e/0x210 [ 362.299128][ T8800] do_syscall_64+0xcd/0x490 [ 362.299160][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.299191][ T8800] RIP: 0033:0x7f93c8b8e969 [ 362.299216][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.299244][ T8800] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.299273][ T8800] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 362.299293][ T8800] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 362.299310][ T8800] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 362.299326][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.299343][ T8800] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 362.299383][ T8800] [ 363.762330][ T8807] block nbd7: not configured, cannot reconfigure [ 365.293161][ T5843] Bluetooth: hci1: unexpected subevent 0x01 length: 122 > 18 [ 365.433241][ T8834] block nbd3: Unsupported socket: shutdown callout must be supported. [ 367.816298][ T8859] FAULT_INJECTION: forcing a failure. [ 367.816298][ T8859] name failslab, interval 1, probability 0, space 0, times 0 [ 367.848639][ T8859] CPU: 1 UID: 0 PID: 8859 Comm: syz.3.535 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 367.848682][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.848699][ T8859] Call Trace: [ 367.848708][ T8859] [ 367.848720][ T8859] dump_stack_lvl+0x16c/0x1f0 [ 367.848756][ T8859] should_fail_ex+0x512/0x640 [ 367.848795][ T8859] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 367.848844][ T8859] should_failslab+0xc2/0x120 [ 367.848884][ T8859] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 367.848930][ T8859] ? sock_alloc_inode+0x25/0x1c0 [ 367.848968][ T8859] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.849000][ T8859] sock_alloc_inode+0x25/0x1c0 [ 367.849036][ T8859] alloc_inode+0x61/0x240 [ 367.849070][ T8859] sock_alloc+0x40/0x280 [ 367.849100][ T8859] __sock_create+0xc1/0x8d0 [ 367.849152][ T8859] __sys_socket+0x14d/0x260 [ 367.849193][ T8859] ? __pfx___sys_socket+0x10/0x10 [ 367.849235][ T8859] ? do_user_addr_fault+0x843/0x1370 [ 367.849281][ T8859] __x64_sys_socket+0x72/0xb0 [ 367.849316][ T8859] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.849360][ T8859] do_syscall_64+0xcd/0x490 [ 367.849394][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.849426][ T8859] RIP: 0033:0x7f9124590887 [ 367.849451][ T8859] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.849479][ T8859] RSP: 002b:00007f9125403fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 367.849508][ T8859] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f9124590887 [ 367.849526][ T8859] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 367.849542][ T8859] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 367.849558][ T8859] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 367.849576][ T8859] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 367.849613][ T8859] [ 367.849628][ T8859] socket: no more sockets [ 368.079840][ T30] audit: type=1326 audit(6043941401.883:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f912458e969 code=0x0 [ 370.185661][ T8885] FAULT_INJECTION: forcing a failure. [ 370.185661][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 370.205023][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.1.540 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 370.205071][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.205088][ T8885] Call Trace: [ 370.205099][ T8885] [ 370.205112][ T8885] dump_stack_lvl+0x16c/0x1f0 [ 370.205149][ T8885] should_fail_ex+0x512/0x640 [ 370.205185][ T8885] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 370.205222][ T8885] should_failslab+0xc2/0x120 [ 370.205256][ T8885] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 370.205287][ T8885] ? apply_subsystem_event_filter+0x3df/0x1450 [ 370.205335][ T8885] kstrdup+0x53/0x100 [ 370.205383][ T8885] apply_subsystem_event_filter+0x3df/0x1450 [ 370.205437][ T8885] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 370.205490][ T8885] ? _copy_from_user+0x59/0xd0 [ 370.205535][ T8885] subsystem_filter_write+0x95/0x120 [ 370.205576][ T8885] ? __pfx_subsystem_filter_write+0x10/0x10 [ 370.205615][ T8885] vfs_write+0x2a0/0x1150 [ 370.205668][ T8885] ? __pfx___mutex_lock+0x10/0x10 [ 370.205700][ T8885] ? __pfx_vfs_write+0x10/0x10 [ 370.205759][ T8885] ? __fget_files+0x20e/0x3c0 [ 370.205817][ T8885] ksys_write+0x12a/0x250 [ 370.205879][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 370.205942][ T8885] do_syscall_64+0xcd/0x490 [ 370.205977][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.206008][ T8885] RIP: 0033:0x7f93c8b8e969 [ 370.206041][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.206070][ T8885] RSP: 002b:00007f93c99e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.206098][ T8885] RAX: ffffffffffffffda RBX: 00007f93c8db6080 RCX: 00007f93c8b8e969 [ 370.206118][ T8885] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 370.206136][ T8885] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 370.206155][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.206173][ T8885] R13: 0000000000000000 R14: 00007f93c8db6080 R15: 00007ffc0ee9dd88 [ 370.206216][ T8885] [ 372.963650][ T8909] FAULT_INJECTION: forcing a failure. [ 372.963650][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 373.039293][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.4.547 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 373.039340][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.039357][ T8909] Call Trace: [ 373.039367][ T8909] [ 373.039379][ T8909] dump_stack_lvl+0x16c/0x1f0 [ 373.039414][ T8909] should_fail_ex+0x512/0x640 [ 373.039451][ T8909] ? fs_reclaim_acquire+0xae/0x150 [ 373.039492][ T8909] should_failslab+0xc2/0x120 [ 373.039524][ T8909] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 373.039573][ T8909] ? security_inode_alloc+0x3b/0x2b0 [ 373.039624][ T8909] security_inode_alloc+0x3b/0x2b0 [ 373.039671][ T8909] inode_init_always_gfp+0xce4/0x1030 [ 373.039723][ T8909] alloc_inode+0x86/0x240 [ 373.039757][ T8909] sock_alloc+0x40/0x280 [ 373.039794][ T8909] __sock_create+0xc1/0x8d0 [ 373.039842][ T8909] __sys_socket+0x14d/0x260 [ 373.039884][ T8909] ? __pfx___sys_socket+0x10/0x10 [ 373.039928][ T8909] ? do_user_addr_fault+0x843/0x1370 [ 373.039975][ T8909] __x64_sys_socket+0x72/0xb0 [ 373.040012][ T8909] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.040060][ T8909] do_syscall_64+0xcd/0x490 [ 373.040102][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.040133][ T8909] RIP: 0033:0x7f5656f90887 [ 373.040158][ T8909] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.040187][ T8909] RSP: 002b:00007f5657d71fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 373.040217][ T8909] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f90887 [ 373.040237][ T8909] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 373.040255][ T8909] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 373.040274][ T8909] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 373.040292][ T8909] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 373.040332][ T8909] [ 373.040367][ T8909] socket: no more sockets [ 373.143126][ T30] audit: type=1326 audit(6043941406.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.4.547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 374.969336][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.988904][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.997406][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.019332][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.029506][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.116210][ T8926] zswap: compressor not available [ 376.038651][ T5843] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 376.038703][ T5843] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 376.053702][ T5843] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 376.114519][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 377.013740][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 377.093111][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 377.128744][ T5843] Bluetooth: hci5: command tx timeout [ 377.246974][ T8959] sd 0:0:1:0: PR command failed: 1026 [ 377.252805][ T8959] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 377.277218][ T8959] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 377.442741][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.522468][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.568078][ T8934] bridge_slave_0: entered allmulticast mode [ 377.598890][ T8934] bridge_slave_0: entered promiscuous mode [ 378.095190][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.155647][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.170082][ T8934] bridge_slave_1: entered allmulticast mode [ 378.191581][ T8934] bridge_slave_1: entered promiscuous mode [ 378.361837][ T8966] FAULT_INJECTION: forcing a failure. [ 378.361837][ T8966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.418989][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.1.558 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 378.419032][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.419048][ T8966] Call Trace: [ 378.419058][ T8966] [ 378.419070][ T8966] dump_stack_lvl+0x16c/0x1f0 [ 378.419107][ T8966] should_fail_ex+0x512/0x640 [ 378.419158][ T8966] should_fail_alloc_page+0xe7/0x130 [ 378.419191][ T8966] prepare_alloc_pages+0x3c2/0x610 [ 378.419237][ T8966] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 378.419286][ T8966] ? __schedule+0x1181/0x5de0 [ 378.419345][ T8966] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.419397][ T8966] ? __pfx___schedule+0x10/0x10 [ 378.419452][ T8966] ? find_held_lock+0x2b/0x80 [ 378.419481][ T8966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.419527][ T8966] ? policy_nodemask+0xea/0x4e0 [ 378.419558][ T8966] alloc_pages_mpol+0x1fb/0x550 [ 378.419592][ T8966] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 378.419633][ T8966] folio_alloc_mpol_noprof+0x36/0x2f0 [ 378.419671][ T8966] vma_alloc_folio_noprof+0xed/0x1e0 [ 378.419703][ T8966] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 378.419736][ T8966] ? find_held_lock+0x2b/0x80 [ 378.419765][ T8966] ? __handle_mm_fault+0x1092/0x5490 [ 378.419810][ T8966] __handle_mm_fault+0x2f21/0x5490 [ 378.419860][ T8966] ? __pfx___handle_mm_fault+0x10/0x10 [ 378.419896][ T8966] ? lock_vma_under_rcu+0x47d/0x970 [ 378.419927][ T8966] ? lock_vma_under_rcu+0x47d/0x970 [ 378.419989][ T8966] handle_mm_fault+0x589/0xd10 [ 378.420028][ T8966] ? __pkru_allows_pkey+0x21/0xb0 [ 378.420067][ T8966] do_user_addr_fault+0x60c/0x1370 [ 378.420106][ T8966] ? rcu_is_watching+0x12/0xc0 [ 378.420148][ T8966] exc_page_fault+0x5c/0xb0 [ 378.420194][ T8966] asm_exc_page_fault+0x26/0x30 [ 378.420220][ T8966] RIP: 0033:0x7f93c8a5a35b [ 378.420242][ T8966] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 378.420268][ T8966] RSP: 002b:00007f93c9a06fb0 EFLAGS: 00010202 [ 378.420291][ T8966] RAX: 0000000000000000 RBX: 00007f93c8db5fa0 RCX: 0000000000000000 [ 378.420308][ T8966] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 378.420325][ T8966] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 378.420341][ T8966] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000000 [ 378.420356][ T8966] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 378.420392][ T8966] [ 378.420409][ T8966] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 378.551288][ T30] audit: type=1326 audit(6043941412.213:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.1.558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c8b8e969 code=0x0 [ 378.816232][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.853580][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.032102][ T8934] team0: Port device team_slave_0 added [ 379.066198][ T8934] team0: Port device team_slave_1 added [ 379.208810][ T5843] Bluetooth: hci5: command tx timeout [ 379.349355][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.454703][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.481219][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.498635][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.680750][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.719990][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.875261][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.354079][ T8934] hsr_slave_0: entered promiscuous mode [ 380.391820][ T8934] hsr_slave_1: entered promiscuous mode [ 380.475987][ T8934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.485724][ T8934] Cannot create hsr debugfs directory [ 381.288893][ T5843] Bluetooth: hci5: command tx timeout [ 381.938155][ T8990] Invalid ELF header magic: != ELF [ 382.195847][ T8934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.313501][ T8934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.392077][ T8934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.538650][ T8934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.936583][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.111369][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.133965][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.141265][ T7151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.334871][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.343142][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.370558][ T5843] Bluetooth: hci5: command tx timeout [ 383.509732][ T5843] Bluetooth: hci2: unexpected subevent 0x01 length: 122 > 18 [ 383.803073][ T8988] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 384.017681][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.024391][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.102256][ T9001] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 384.242431][ T5843] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 384.242477][ T5843] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 384.254354][ T9008] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 384.260638][ T5843] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 384.266576][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 384.276990][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 384.284450][ T5843] Bluetooth: hci4: Malformed LE Event: 0x0d [ 384.334977][ T9008] nbd: error processing sock list [ 384.678110][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.089020][ T9024] FAULT_INJECTION: forcing a failure. [ 385.089020][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 385.188562][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.1.568 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 385.188608][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.188626][ T9024] Call Trace: [ 385.188636][ T9024] [ 385.188649][ T9024] dump_stack_lvl+0x16c/0x1f0 [ 385.188682][ T9024] should_fail_ex+0x512/0x640 [ 385.188716][ T9024] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 385.188759][ T9024] should_failslab+0xc2/0x120 [ 385.188790][ T9024] __kmalloc_cache_noprof+0x6a/0x3e0 [ 385.188841][ T9024] ? create_filter_start.constprop.0+0xa5/0x300 [ 385.188893][ T9024] create_filter_start.constprop.0+0xa5/0x300 [ 385.188933][ T9024] apply_subsystem_event_filter+0x185/0x1450 [ 385.188981][ T9024] ? __might_fault+0xe3/0x190 [ 385.189025][ T9024] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 385.189073][ T9024] ? _copy_from_user+0x59/0xd0 [ 385.189116][ T9024] subsystem_filter_write+0x95/0x120 [ 385.189158][ T9024] ? __pfx_subsystem_filter_write+0x10/0x10 [ 385.189196][ T9024] vfs_write+0x2a0/0x1150 [ 385.189248][ T9024] ? __pfx___mutex_lock+0x10/0x10 [ 385.189280][ T9024] ? __pfx_vfs_write+0x10/0x10 [ 385.189338][ T9024] ? __fget_files+0x20e/0x3c0 [ 385.189392][ T9024] ksys_write+0x12a/0x250 [ 385.189437][ T9024] ? __pfx_ksys_write+0x10/0x10 [ 385.189495][ T9024] do_syscall_64+0xcd/0x490 [ 385.189527][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.189559][ T9024] RIP: 0033:0x7f93c8b8e969 [ 385.189584][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.189612][ T9024] RSP: 002b:00007f93c99e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.189642][ T9024] RAX: ffffffffffffffda RBX: 00007f93c8db6080 RCX: 00007f93c8b8e969 [ 385.189661][ T9024] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 385.189679][ T9024] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.189696][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.189714][ T9024] R13: 0000000000000000 R14: 00007f93c8db6080 R15: 00007ffc0ee9dd88 [ 385.189756][ T9024] [ 385.832500][ T9029] FAULT_INJECTION: forcing a failure. [ 385.832500][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 385.876893][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.4.571 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 385.876936][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.876953][ T9029] Call Trace: [ 385.876964][ T9029] [ 385.876977][ T9029] dump_stack_lvl+0x16c/0x1f0 [ 385.877015][ T9029] should_fail_ex+0x512/0x640 [ 385.877052][ T9029] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 385.877101][ T9029] should_failslab+0xc2/0x120 [ 385.877135][ T9029] __kmalloc_cache_noprof+0x6a/0x3e0 [ 385.877181][ T9029] ? create_filter_start.constprop.0+0xa5/0x300 [ 385.877228][ T9029] create_filter_start.constprop.0+0xa5/0x300 [ 385.877287][ T9029] apply_subsystem_event_filter+0x185/0x1450 [ 385.877339][ T9029] ? __might_fault+0xe3/0x190 [ 385.877387][ T9029] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 385.877441][ T9029] ? _copy_from_user+0x59/0xd0 [ 385.877489][ T9029] subsystem_filter_write+0x95/0x120 [ 385.877533][ T9029] ? __pfx_subsystem_filter_write+0x10/0x10 [ 385.877570][ T9029] vfs_write+0x2a0/0x1150 [ 385.877623][ T9029] ? __pfx___mutex_lock+0x10/0x10 [ 385.877655][ T9029] ? __pfx_vfs_write+0x10/0x10 [ 385.877715][ T9029] ? __fget_files+0x20e/0x3c0 [ 385.877773][ T9029] ksys_write+0x12a/0x250 [ 385.877827][ T9029] ? __pfx_ksys_write+0x10/0x10 [ 385.877887][ T9029] do_syscall_64+0xcd/0x490 [ 385.877923][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.877954][ T9029] RIP: 0033:0x7f5656f8e969 [ 385.877981][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.878010][ T9029] RSP: 002b:00007f5657d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.878040][ T9029] RAX: ffffffffffffffda RBX: 00007f56571b6080 RCX: 00007f5656f8e969 [ 385.878059][ T9029] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 385.878077][ T9029] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.878095][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.878113][ T9029] R13: 0000000000000000 R14: 00007f56571b6080 R15: 00007ffdebb8daf8 [ 385.878157][ T9029] [ 386.827989][ T8934] veth0_vlan: entered promiscuous mode [ 386.865876][ T8934] veth1_vlan: entered promiscuous mode [ 387.124312][ T9042] Invalid ELF header magic: != ELF [ 387.607998][ T8934] veth0_macvtap: entered promiscuous mode [ 387.677263][ T8934] veth1_macvtap: entered promiscuous mode [ 388.090231][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.355037][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.396847][ T8934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.433027][ T8934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.455851][ T8934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.467425][ T8934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.559611][ T9060] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 388.714406][ T5843] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 388.714449][ T5843] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 388.733002][ T5843] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 388.733042][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 388.742145][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 388.749450][ T5843] Bluetooth: hci4: Malformed LE Event: 0x0d [ 389.247402][ T9050] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 389.255337][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.275053][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.417385][ T7150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.453888][ T7150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.228080][ T9078] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 392.682383][ T9102] can: request_module (can-proto-3) failed. [ 393.189650][ T9098] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 393.455091][ T9112] FAULT_INJECTION: forcing a failure. [ 393.455091][ T9112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.472479][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.4.585 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 393.472522][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.472540][ T9112] Call Trace: [ 393.472550][ T9112] [ 393.472562][ T9112] dump_stack_lvl+0x16c/0x1f0 [ 393.472597][ T9112] should_fail_ex+0x512/0x640 [ 393.472640][ T9112] should_fail_alloc_page+0xe7/0x130 [ 393.472676][ T9112] prepare_alloc_pages+0x3c2/0x610 [ 393.472722][ T9112] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 393.472783][ T9112] ? __schedule+0x1181/0x5de0 [ 393.472845][ T9112] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.472899][ T9112] ? __pfx___schedule+0x10/0x10 [ 393.472957][ T9112] ? find_held_lock+0x2b/0x80 [ 393.472988][ T9112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.473035][ T9112] ? policy_nodemask+0xea/0x4e0 [ 393.473069][ T9112] alloc_pages_mpol+0x1fb/0x550 [ 393.473102][ T9112] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 393.473145][ T9112] folio_alloc_mpol_noprof+0x36/0x2f0 [ 393.473184][ T9112] vma_alloc_folio_noprof+0xed/0x1e0 [ 393.473220][ T9112] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 393.473254][ T9112] ? find_held_lock+0x2b/0x80 [ 393.473284][ T9112] ? __handle_mm_fault+0x1092/0x5490 [ 393.473332][ T9112] __handle_mm_fault+0x2f21/0x5490 [ 393.473385][ T9112] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.473426][ T9112] ? lock_vma_under_rcu+0x47d/0x970 [ 393.473467][ T9112] ? lock_vma_under_rcu+0x47d/0x970 [ 393.473540][ T9112] handle_mm_fault+0x589/0xd10 [ 393.473584][ T9112] ? __pkru_allows_pkey+0x21/0xb0 [ 393.473626][ T9112] do_user_addr_fault+0x60c/0x1370 [ 393.473670][ T9112] ? rcu_is_watching+0x12/0xc0 [ 393.473705][ T9112] exc_page_fault+0x5c/0xb0 [ 393.473753][ T9112] asm_exc_page_fault+0x26/0x30 [ 393.473790][ T9112] RIP: 0033:0x7f5656e5a35b [ 393.473814][ T9112] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 393.473842][ T9112] RSP: 002b:00007f5657d71fb0 EFLAGS: 00010202 [ 393.473866][ T9112] RAX: 0000000000000000 RBX: 00007f56571b5fa0 RCX: 0000000000000000 [ 393.473884][ T9112] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 393.473903][ T9112] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 393.473921][ T9112] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000000 [ 393.473939][ T9112] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 393.473979][ T9112] [ 393.473998][ T9112] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 393.721191][ T30] audit: type=1326 audit(6043941427.513:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.4.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 395.043186][ T9125] Invalid ELF header magic: != ELF [ 395.897573][ T9131] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 395.979113][ T9131] nbd: error processing sock list [ 397.962816][ T9158] sd 0:0:1:0: PR command failed: 1026 [ 398.006061][ T9158] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 398.030049][ T9158] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 398.373409][ T9165] FAULT_INJECTION: forcing a failure. [ 398.373409][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 398.468574][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.5.595 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 398.468619][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.468637][ T9165] Call Trace: [ 398.468648][ T9165] [ 398.468660][ T9165] dump_stack_lvl+0x16c/0x1f0 [ 398.468702][ T9165] should_fail_ex+0x512/0x640 [ 398.468738][ T9165] ? fs_reclaim_acquire+0xae/0x150 [ 398.468791][ T9165] should_failslab+0xc2/0x120 [ 398.468823][ T9165] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 398.468869][ T9165] ? security_inode_alloc+0x3b/0x2b0 [ 398.468915][ T9165] security_inode_alloc+0x3b/0x2b0 [ 398.468958][ T9165] inode_init_always_gfp+0xce4/0x1030 [ 398.469006][ T9165] alloc_inode+0x86/0x240 [ 398.469038][ T9165] sock_alloc+0x40/0x280 [ 398.469072][ T9165] __sock_create+0xc1/0x8d0 [ 398.469116][ T9165] __sys_socket+0x14d/0x260 [ 398.469152][ T9165] ? __pfx___sys_socket+0x10/0x10 [ 398.469187][ T9165] ? do_user_addr_fault+0x843/0x1370 [ 398.469234][ T9165] __x64_sys_socket+0x72/0xb0 [ 398.469268][ T9165] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.469313][ T9165] do_syscall_64+0xcd/0x490 [ 398.469346][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.469375][ T9165] RIP: 0033:0x7f60d9990887 [ 398.469410][ T9165] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.469438][ T9165] RSP: 002b:00007f60da8cefa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 398.469467][ T9165] RAX: ffffffffffffffda RBX: 00007f60d9bb5fa0 RCX: 00007f60d9990887 [ 398.469487][ T9165] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 398.469505][ T9165] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 398.469530][ T9165] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 398.469549][ T9165] R13: 0000000000000000 R14: 00007f60d9bb5fa0 R15: 00007ffe0d628dc8 [ 398.469587][ T9165] [ 398.471536][ T9165] socket: no more sockets [ 398.698655][ T30] audit: type=1326 audit(6043941432.473:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.5.595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60d998e969 code=0x0 [ 399.123391][ T9138] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 399.625977][ T9178] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 399.883921][ T9183] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 399.948152][ T9183] nbd: error processing sock list [ 406.549666][ T9242] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 409.624075][ T9264] FAULT_INJECTION: forcing a failure. [ 409.624075][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 409.815174][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.5.614 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 409.815202][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.815219][ T9264] Call Trace: [ 409.815226][ T9264] [ 409.815234][ T9264] dump_stack_lvl+0x16c/0x1f0 [ 409.815257][ T9264] should_fail_ex+0x512/0x640 [ 409.815285][ T9264] ? fs_reclaim_acquire+0xae/0x150 [ 409.815311][ T9264] should_failslab+0xc2/0x120 [ 409.815331][ T9264] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 409.815361][ T9264] ? security_inode_alloc+0x3b/0x2b0 [ 409.815461][ T9264] security_inode_alloc+0x3b/0x2b0 [ 409.815502][ T9264] inode_init_always_gfp+0xce4/0x1030 [ 409.815535][ T9264] alloc_inode+0x86/0x240 [ 409.815556][ T9264] sock_alloc+0x40/0x280 [ 409.815577][ T9264] __sock_create+0xc1/0x8d0 [ 409.815606][ T9264] __sys_socket+0x14d/0x260 [ 409.815633][ T9264] ? __pfx___sys_socket+0x10/0x10 [ 409.815659][ T9264] ? xfd_validate_state+0x61/0x180 [ 409.815683][ T9264] ? __pfx___do_sys_close_range+0x10/0x10 [ 409.815717][ T9264] __x64_sys_socket+0x72/0xb0 [ 409.815744][ T9264] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.815774][ T9264] do_syscall_64+0xcd/0x490 [ 409.815794][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.815814][ T9264] RIP: 0033:0x7f60d998e969 [ 409.815830][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.815849][ T9264] RSP: 002b:00007f60da8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 409.815867][ T9264] RAX: ffffffffffffffda RBX: 00007f60d9bb6080 RCX: 00007f60d998e969 [ 409.815879][ T9264] RDX: 0000000000000000 RSI: 0000000000000801 RDI: 0000000000000028 [ 409.815890][ T9264] RBP: 00007f60d9a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 409.815900][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.815911][ T9264] R13: 0000000000000000 R14: 00007f60d9bb6080 R15: 00007ffe0d628dc8 [ 409.815934][ T9264] [ 410.183571][ T9264] socket: no more sockets [ 411.000344][ T9273] Invalid ELF header magic: != ELF [ 413.716838][ T9316] size and base must be multiples of 4 kiB [ 413.881914][ T9316] CPU: 1 UID: 0 PID: 9316 Comm: syz.4.625 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 413.881959][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.881987][ T9316] Call Trace: [ 413.881996][ T9316] [ 413.882008][ T9316] dump_stack_lvl+0x16c/0x1f0 [ 413.882044][ T9316] mtrr_del+0xd1/0x110 [ 413.882090][ T9316] mtrr_ioctl+0x922/0xcf0 [ 413.882130][ T9316] ? __pfx_mtrr_ioctl+0x10/0x10 [ 413.882174][ T9316] ? find_held_lock+0x2b/0x80 [ 413.882215][ T9316] ? __fget_files+0x20e/0x3c0 [ 413.882281][ T9316] ? __pfx_mtrr_ioctl+0x10/0x10 [ 413.882320][ T9316] proc_reg_unlocked_ioctl+0x226/0x320 [ 413.882350][ T9316] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 413.882384][ T9316] __x64_sys_ioctl+0x18e/0x210 [ 413.882437][ T9316] do_syscall_64+0xcd/0x490 [ 413.882474][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.882505][ T9316] RIP: 0033:0x7f5656f8e969 [ 413.882530][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.882559][ T9316] RSP: 002b:00007f5657d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.882589][ T9316] RAX: ffffffffffffffda RBX: 00007f56571b6080 RCX: 00007f5656f8e969 [ 413.882609][ T9316] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 413.882627][ T9316] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 413.882646][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.882664][ T9316] R13: 0000000000000000 R14: 00007f56571b6080 R15: 00007ffdebb8daf8 [ 413.882704][ T9316] [ 414.309856][ T9302] Invalid ELF header magic: != ELF [ 414.888211][ T5843] Bluetooth: hci1: unexpected subevent 0x01 length: 122 > 18 [ 414.897379][ T5843] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 416.834678][ T9335] block nbd7: not configured, cannot reconfigure [ 417.813600][ T9339] zswap: compressor not available [ 418.102141][ T9353] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 418.224463][ T5846] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 418.224510][ T5846] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 418.240775][ T5846] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 418.240835][ T5846] Bluetooth: hci5: adv larger than maximum supported [ 418.248245][ T5846] Bluetooth: hci5: adv larger than maximum supported [ 418.256504][ T5846] Bluetooth: hci5: Malformed LE Event: 0x0d [ 418.732285][ T9363] Invalid ELF header magic: != ELF [ 420.621857][ T9386] size and base must be multiples of 4 kiB [ 420.629309][ T9386] CPU: 1 UID: 0 PID: 9386 Comm: syz.1.641 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 420.629349][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.629367][ T9386] Call Trace: [ 420.629378][ T9386] [ 420.629389][ T9386] dump_stack_lvl+0x16c/0x1f0 [ 420.629427][ T9386] mtrr_del+0xd1/0x110 [ 420.629467][ T9386] mtrr_ioctl+0x922/0xcf0 [ 420.629508][ T9386] ? __pfx_mtrr_ioctl+0x10/0x10 [ 420.629554][ T9386] ? find_held_lock+0x2b/0x80 [ 420.629598][ T9386] ? __fget_files+0x20e/0x3c0 [ 420.629645][ T9386] ? __pfx_mtrr_ioctl+0x10/0x10 [ 420.629684][ T9386] proc_reg_unlocked_ioctl+0x226/0x320 [ 420.629714][ T9386] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 420.629745][ T9386] __x64_sys_ioctl+0x18e/0x210 [ 420.629787][ T9386] do_syscall_64+0xcd/0x490 [ 420.629822][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.629852][ T9386] RIP: 0033:0x7f93c8b8e969 [ 420.629877][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.629904][ T9386] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.629933][ T9386] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 420.629954][ T9386] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 420.629982][ T9386] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 420.630000][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.630018][ T9386] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 420.630060][ T9386] [ 420.824325][ T9387] Invalid ELF header magic: != ELF [ 422.255654][ T9401] random: crng reseeded on system resumption [ 423.915771][ T9419] FAULT_INJECTION: forcing a failure. [ 423.915771][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 423.968547][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.1.648 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 423.968594][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.968614][ T9419] Call Trace: [ 423.968625][ T9419] [ 423.968637][ T9419] dump_stack_lvl+0x16c/0x1f0 [ 423.968674][ T9419] should_fail_ex+0x512/0x640 [ 423.968711][ T9419] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 423.968759][ T9419] should_failslab+0xc2/0x120 [ 423.968790][ T9419] __kmalloc_cache_noprof+0x6a/0x3e0 [ 423.968834][ T9419] ? apply_subsystem_event_filter+0x3c0/0x1450 [ 423.968882][ T9419] apply_subsystem_event_filter+0x3c0/0x1450 [ 423.968946][ T9419] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 423.969001][ T9419] ? _copy_from_user+0x59/0xd0 [ 423.969048][ T9419] subsystem_filter_write+0x95/0x120 [ 423.969092][ T9419] ? __pfx_subsystem_filter_write+0x10/0x10 [ 423.969129][ T9419] vfs_write+0x2a0/0x1150 [ 423.969177][ T9419] ? __pfx___mutex_lock+0x10/0x10 [ 423.969208][ T9419] ? __pfx_vfs_write+0x10/0x10 [ 423.969264][ T9419] ? __fget_files+0x20e/0x3c0 [ 423.969321][ T9419] ksys_write+0x12a/0x250 [ 423.969373][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 423.969432][ T9419] do_syscall_64+0xcd/0x490 [ 423.969466][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.969497][ T9419] RIP: 0033:0x7f93c8b8e969 [ 423.969522][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.969550][ T9419] RSP: 002b:00007f93c99e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.969579][ T9419] RAX: ffffffffffffffda RBX: 00007f93c8db6080 RCX: 00007f93c8b8e969 [ 423.969599][ T9419] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 423.969617][ T9419] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 423.969635][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.969654][ T9419] R13: 0000000000000000 R14: 00007f93c8db6080 R15: 00007ffc0ee9dd88 [ 423.969696][ T9419] [ 426.063373][ T9445] FAULT_INJECTION: forcing a failure. [ 426.063373][ T9445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.164509][ T9445] CPU: 0 UID: 0 PID: 9445 Comm: syz.5.653 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 426.164557][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.164577][ T9445] Call Trace: [ 426.164587][ T9445] [ 426.164599][ T9445] dump_stack_lvl+0x16c/0x1f0 [ 426.164636][ T9445] should_fail_ex+0x512/0x640 [ 426.164680][ T9445] should_fail_alloc_page+0xe7/0x130 [ 426.164713][ T9445] prepare_alloc_pages+0x3c2/0x610 [ 426.164761][ T9445] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 426.164814][ T9445] ? __schedule+0x1181/0x5de0 [ 426.164877][ T9445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 426.164934][ T9445] ? __pfx___schedule+0x10/0x10 [ 426.165004][ T9445] ? find_held_lock+0x2b/0x80 [ 426.165038][ T9445] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.165089][ T9445] ? policy_nodemask+0xea/0x4e0 [ 426.165128][ T9445] alloc_pages_mpol+0x1fb/0x550 [ 426.165164][ T9445] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 426.165211][ T9445] folio_alloc_mpol_noprof+0x36/0x2f0 [ 426.165254][ T9445] vma_alloc_folio_noprof+0xed/0x1e0 [ 426.165293][ T9445] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 426.165329][ T9445] ? find_held_lock+0x2b/0x80 [ 426.165361][ T9445] ? __handle_mm_fault+0x1092/0x5490 [ 426.165412][ T9445] __handle_mm_fault+0x2f21/0x5490 [ 426.165467][ T9445] ? __pfx___handle_mm_fault+0x10/0x10 [ 426.165511][ T9445] ? lock_vma_under_rcu+0x47d/0x970 [ 426.165553][ T9445] ? lock_vma_under_rcu+0x47d/0x970 [ 426.165629][ T9445] handle_mm_fault+0x589/0xd10 [ 426.165674][ T9445] ? __pkru_allows_pkey+0x21/0xb0 [ 426.165717][ T9445] do_user_addr_fault+0x60c/0x1370 [ 426.165765][ T9445] ? rcu_is_watching+0x12/0xc0 [ 426.165802][ T9445] exc_page_fault+0x5c/0xb0 [ 426.165851][ T9445] asm_exc_page_fault+0x26/0x30 [ 426.165881][ T9445] RIP: 0033:0x7f60d985a35b [ 426.165906][ T9445] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 426.165936][ T9445] RSP: 002b:00007f60da8cefb0 EFLAGS: 00010202 [ 426.165971][ T9445] RAX: 0000000000000000 RBX: 00007f60d9bb5fa0 RCX: 0000000000000000 [ 426.165990][ T9445] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 426.166010][ T9445] RBP: 00007f60d9a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 426.166030][ T9445] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000000 [ 426.166050][ T9445] R13: 0000000000000000 R14: 00007f60d9bb5fa0 R15: 00007ffe0d628dc8 [ 426.166092][ T9445] [ 426.549135][ T9445] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 426.639206][ T30] audit: type=1326 audit(6043941459.963:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.5.653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60d998e969 code=0x0 [ 427.530134][ T9449] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 428.192489][ T9466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 428.858554][ T5846] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 428.858586][ T5846] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 428.873977][ T5846] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 428.874002][ T5846] Bluetooth: hci2: adv larger than maximum supported [ 428.881462][ T5846] Bluetooth: hci2: adv larger than maximum supported [ 428.888327][ T5846] Bluetooth: hci2: Malformed LE Event: 0x0d [ 430.149311][ T9487] Invalid ELF header magic: != ELF [ 434.044821][ T9510] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 434.114726][ T5843] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 434.114772][ T5843] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 434.130458][ T5843] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 434.130500][ T5843] Bluetooth: hci5: adv larger than maximum supported [ 434.138745][ T5843] Bluetooth: hci5: adv larger than maximum supported [ 434.147795][ T5843] Bluetooth: hci5: Malformed LE Event: 0x0d [ 434.658790][ T9519] Invalid ELF header magic: != ELF [ 438.170048][ T9562] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 439.092528][ T5843] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 439.092558][ T5843] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 439.107782][ T5843] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 439.107808][ T5843] Bluetooth: hci5: adv larger than maximum supported [ 439.115106][ T5843] Bluetooth: hci5: adv larger than maximum supported [ 439.121844][ T5843] Bluetooth: hci5: Malformed LE Event: 0x0d [ 440.562052][ T9584] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.693532][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 440.693576][ T5843] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 440.703474][ T9589] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.710767][ T5843] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 440.718105][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 440.725629][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 440.732998][ T5843] Bluetooth: hci2: Malformed LE Event: 0x0d [ 440.859310][ T5843] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 440.859354][ T5843] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 440.876110][ T5843] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 440.876148][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 440.883474][ T5843] Bluetooth: hci4: adv larger than maximum supported [ 440.890527][ T5843] Bluetooth: hci4: Malformed LE Event: 0x0d [ 442.182119][ T9606] Invalid ELF header magic: != ELF [ 442.619582][ T9608] Invalid ELF header magic: != ELF [ 444.424446][ T9623] FAULT_INJECTION: forcing a failure. [ 444.424446][ T9623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.595579][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.4.688 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 444.595628][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.595647][ T9623] Call Trace: [ 444.595658][ T9623] [ 444.595679][ T9623] dump_stack_lvl+0x16c/0x1f0 [ 444.595718][ T9623] should_fail_ex+0x512/0x640 [ 444.595765][ T9623] _copy_from_user+0x2e/0xd0 [ 444.595806][ T9623] memdup_user_nul+0x6c/0x120 [ 444.595840][ T9623] subsystem_filter_write+0x6a/0x120 [ 444.595882][ T9623] ? __pfx_subsystem_filter_write+0x10/0x10 [ 444.595918][ T9623] vfs_write+0x2a0/0x1150 [ 444.595971][ T9623] ? __pfx___mutex_lock+0x10/0x10 [ 444.596002][ T9623] ? __pfx_vfs_write+0x10/0x10 [ 444.596060][ T9623] ? __fget_files+0x20e/0x3c0 [ 444.596124][ T9623] ksys_write+0x12a/0x250 [ 444.596169][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 444.596229][ T9623] do_syscall_64+0xcd/0x490 [ 444.596264][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.596295][ T9623] RIP: 0033:0x7f5656f8e969 [ 444.596320][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.596349][ T9623] RSP: 002b:00007f5657d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.596379][ T9623] RAX: ffffffffffffffda RBX: 00007f56571b6160 RCX: 00007f5656f8e969 [ 444.596400][ T9623] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 444.596418][ T9623] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 444.596436][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.596455][ T9623] R13: 0000000000000000 R14: 00007f56571b6160 R15: 00007ffdebb8daf8 [ 444.596496][ T9623] [ 445.132690][ T5843] Bluetooth: hci1: unexpected subevent 0x01 length: 122 > 18 [ 445.140447][ T5843] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 445.480128][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.487116][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.666074][ T9639] can: request_module (can-proto-3) failed. [ 446.723747][ T9652] block nbd5: Unsupported socket: shutdown callout must be supported. [ 448.941078][ T5843] Bluetooth: hci5: unexpected subevent 0x01 length: 122 > 18 [ 449.137021][ T9681] FAULT_INJECTION: forcing a failure. [ 449.137021][ T9681] name failslab, interval 1, probability 0, space 0, times 0 [ 449.184892][ T9683] size and base must be multiples of 4 kiB [ 449.191070][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.1.704 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 449.191110][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.191126][ T9683] Call Trace: [ 449.191135][ T9683] [ 449.191144][ T9683] dump_stack_lvl+0x16c/0x1f0 [ 449.191167][ T9683] mtrr_del+0xd1/0x110 [ 449.191191][ T9683] mtrr_ioctl+0x922/0xcf0 [ 449.191214][ T9683] ? __pfx_mtrr_ioctl+0x10/0x10 [ 449.191242][ T9683] ? find_held_lock+0x2b/0x80 [ 449.191266][ T9683] ? __fget_files+0x20e/0x3c0 [ 449.191298][ T9683] ? __pfx_mtrr_ioctl+0x10/0x10 [ 449.191321][ T9683] proc_reg_unlocked_ioctl+0x226/0x320 [ 449.191340][ T9683] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 449.191359][ T9683] __x64_sys_ioctl+0x18e/0x210 [ 449.191385][ T9683] do_syscall_64+0xcd/0x490 [ 449.191405][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.191424][ T9683] RIP: 0033:0x7f93c8b8e969 [ 449.191439][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.191457][ T9683] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.191475][ T9683] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 449.191487][ T9683] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 449.191497][ T9683] RBP: 00007f93c9a08090 R08: 0000000000000000 R09: 0000000000000000 [ 449.191508][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.191518][ T9683] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 449.191540][ T9683] [ 449.191566][ T9683] FAULT_INJECTION: forcing a failure. [ 449.191566][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.262154][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.4.703 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 449.262191][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.262206][ T9681] Call Trace: [ 449.262215][ T9681] [ 449.262225][ T9681] dump_stack_lvl+0x16c/0x1f0 [ 449.262256][ T9681] should_fail_ex+0x512/0x640 [ 449.262287][ T9681] ? __kmalloc_noprof+0xbf/0x510 [ 449.262330][ T9681] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 449.262369][ T9681] should_failslab+0xc2/0x120 [ 449.262397][ T9681] __kmalloc_noprof+0xd2/0x510 [ 449.262436][ T9681] ? __pfx___mutex_trylock_common+0x10/0x10 [ 449.262480][ T9681] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 449.262527][ T9681] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 449.262566][ T9681] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.262603][ T9681] ? genl_get_cmd+0x194/0x580 [ 449.262650][ T9681] ? __radix_tree_lookup+0x21f/0x2c0 [ 449.262696][ T9681] genl_rcv_msg+0x55c/0x800 [ 449.262737][ T9681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.262773][ T9681] ? __pfx_nbd_genl_connect+0x10/0x10 [ 449.262823][ T9681] netlink_rcv_skb+0x158/0x420 [ 449.262855][ T9681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.262893][ T9681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.262949][ T9681] ? netlink_deliver_tap+0x1ae/0xd30 [ 449.262987][ T9681] genl_rcv+0x28/0x40 [ 449.263018][ T9681] netlink_unicast+0x53a/0x7f0 [ 449.263055][ T9681] ? __pfx_netlink_unicast+0x10/0x10 [ 449.263099][ T9681] netlink_sendmsg+0x8d1/0xdd0 [ 449.263137][ T9681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.263185][ T9681] ____sys_sendmsg+0xa98/0xc70 [ 449.263220][ T9681] ? copy_msghdr_from_user+0x10a/0x160 [ 449.263246][ T9681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.263299][ T9681] ___sys_sendmsg+0x134/0x1d0 [ 449.263328][ T9681] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.263392][ T9681] ? __pfx_vfs_write+0x10/0x10 [ 449.263431][ T9681] ? do_sys_openat2+0x157/0x1d0 [ 449.263466][ T9681] __sys_sendmsg+0x16d/0x220 [ 449.263494][ T9681] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.263547][ T9681] do_syscall_64+0xcd/0x490 [ 449.263576][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.263603][ T9681] RIP: 0033:0x7f5656f8e969 [ 449.263625][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.263650][ T9681] RSP: 002b:00007f5657d73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.263676][ T9681] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f8e969 [ 449.263694][ T9681] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000001 [ 449.263710][ T9681] RBP: 00007f5657d73090 R08: 0000000000000000 R09: 0000000000000000 [ 449.263726][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.263742][ T9681] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 449.263779][ T9681] [ 449.712221][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.1.704 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 449.712251][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.712263][ T9683] Call Trace: [ 449.712269][ T9683] [ 449.712278][ T9683] dump_stack_lvl+0x16c/0x1f0 [ 449.712301][ T9683] should_fail_ex+0x512/0x640 [ 449.712327][ T9683] _copy_to_user+0x32/0xd0 [ 449.712354][ T9683] simple_read_from_buffer+0xcb/0x170 [ 449.712382][ T9683] proc_fail_nth_read+0x197/0x270 [ 449.712408][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.712434][ T9683] ? rw_verify_area+0xcf/0x680 [ 449.712459][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.712483][ T9683] vfs_read+0x1e1/0xc60 [ 449.712514][ T9683] ? __pfx___mutex_lock+0x10/0x10 [ 449.712533][ T9683] ? __pfx_vfs_read+0x10/0x10 [ 449.712567][ T9683] ? __fget_files+0x20e/0x3c0 [ 449.712601][ T9683] ksys_read+0x12a/0x250 [ 449.712636][ T9683] ? __pfx_ksys_read+0x10/0x10 [ 449.712664][ T9683] ? fput+0x70/0xf0 [ 449.712688][ T9683] do_syscall_64+0xcd/0x490 [ 449.712708][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.712727][ T9683] RIP: 0033:0x7f93c8b8d37c [ 449.712743][ T9683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 449.712761][ T9683] RSP: 002b:00007f93c9a08030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.712779][ T9683] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8d37c [ 449.712791][ T9683] RDX: 000000000000000f RSI: 00007f93c9a080a0 RDI: 0000000000000007 [ 449.712801][ T9683] RBP: 00007f93c9a08090 R08: 0000000000000000 R09: 0000000000000000 [ 449.712812][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.712822][ T9683] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 449.712845][ T9683] [ 449.961182][ T9679] CIFS: VFS: Unsupported security flags: 0x10 [ 450.006816][ T5848] Bluetooth: hci4: unexpected subevent 0x01 length: 122 > 18 [ 450.135192][ T9685] FAULT_INJECTION: forcing a failure. [ 450.135192][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.187967][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.4.705 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 450.188010][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.188027][ T9685] Call Trace: [ 450.188037][ T9685] [ 450.188049][ T9685] dump_stack_lvl+0x16c/0x1f0 [ 450.188085][ T9685] should_fail_ex+0x512/0x640 [ 450.188127][ T9685] _copy_from_user+0x2e/0xd0 [ 450.188167][ T9685] kstrtouint_from_user+0xd6/0x1d0 [ 450.188197][ T9685] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 450.188236][ T9685] ? __lock_acquire+0xb8a/0x1c90 [ 450.188295][ T9685] proc_fail_nth_write+0x83/0x250 [ 450.188334][ T9685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 450.188385][ T9685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 450.188426][ T9685] vfs_write+0x2a0/0x1150 [ 450.188472][ T9685] ? __pfx___mutex_lock+0x10/0x10 [ 450.188503][ T9685] ? __pfx_vfs_write+0x10/0x10 [ 450.188556][ T9685] ? __fget_files+0x20e/0x3c0 [ 450.188610][ T9685] ksys_write+0x12a/0x250 [ 450.188652][ T9685] ? __pfx_ksys_write+0x10/0x10 [ 450.188707][ T9685] ? fput+0x70/0xf0 [ 450.188746][ T9685] do_syscall_64+0xcd/0x490 [ 450.188780][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.188809][ T9685] RIP: 0033:0x7f5656f8d41f [ 450.188833][ T9685] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 450.188861][ T9685] RSP: 002b:00007f5657d73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 450.188890][ T9685] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5656f8d41f [ 450.188909][ T9685] RDX: 0000000000000001 RSI: 00007f5657d730a0 RDI: 0000000000000009 [ 450.188927][ T9685] RBP: 00007f5657d73090 R08: 0000000000000000 R09: 0000000000000000 [ 450.188944][ T9685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 450.188960][ T9685] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 450.189001][ T9685] [ 452.550869][ T9711] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 453.158147][ T9731] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.382909][ T5848] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 453.382953][ T5848] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 453.401165][ T5848] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 453.401207][ T5848] Bluetooth: hci5: adv larger than maximum supported [ 453.408331][ T5848] Bluetooth: hci5: adv larger than maximum supported [ 453.415500][ T5848] Bluetooth: hci5: Malformed LE Event: 0x0d [ 454.674381][ T9755] block nbd5: Unsupported socket: shutdown callout must be supported. [ 455.726878][ T9768] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 457.594970][ T9789] Invalid ELF header magic: != ELF [ 460.234548][ T9814] FAULT_INJECTION: forcing a failure. [ 460.234548][ T9814] name failslab, interval 1, probability 0, space 0, times 0 [ 460.295000][ T9814] CPU: 0 UID: 0 PID: 9814 Comm: syz.1.726 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 460.295031][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.295042][ T9814] Call Trace: [ 460.295049][ T9814] [ 460.295057][ T9814] dump_stack_lvl+0x16c/0x1f0 [ 460.295081][ T9814] should_fail_ex+0x512/0x640 [ 460.295103][ T9814] ? fs_reclaim_acquire+0xae/0x150 [ 460.295129][ T9814] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 460.295151][ T9814] should_failslab+0xc2/0x120 [ 460.295171][ T9814] __kmalloc_noprof+0xd2/0x510 [ 460.295206][ T9814] tomoyo_realpath_from_path+0xc2/0x6e0 [ 460.295229][ T9814] ? tomoyo_profile+0x47/0x60 [ 460.295262][ T9814] tomoyo_path_number_perm+0x245/0x580 [ 460.295290][ T9814] ? tomoyo_path_number_perm+0x237/0x580 [ 460.295322][ T9814] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.295375][ T9814] ? find_held_lock+0x2b/0x80 [ 460.295394][ T9814] ? hook_file_ioctl_common+0x145/0x410 [ 460.295427][ T9814] ? __fget_files+0x20e/0x3c0 [ 460.295457][ T9814] security_file_ioctl+0x9b/0x240 [ 460.295476][ T9814] __x64_sys_ioctl+0xb7/0x210 [ 460.295501][ T9814] do_syscall_64+0xcd/0x490 [ 460.295521][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.295540][ T9814] RIP: 0033:0x7f93c8b8e969 [ 460.295555][ T9814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.295572][ T9814] RSP: 002b:00007f93c99e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.295596][ T9814] RAX: ffffffffffffffda RBX: 00007f93c8db6080 RCX: 00007f93c8b8e969 [ 460.295608][ T9814] RDX: 1000000000000004 RSI: 00000000c02064c9 RDI: 0000000000000005 [ 460.295619][ T9814] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 460.295630][ T9814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.295640][ T9814] R13: 0000000000000000 R14: 00007f93c8db6080 R15: 00007ffc0ee9dd88 [ 460.295662][ T9814] [ 460.295670][ T9814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.832308][ T9826] random: crng reseeded on system resumption [ 464.189101][ T9857] netlink: 326 bytes leftover after parsing attributes in process `syz.1.733'. [ 464.533155][ T9857] ›: renamed from hsr0 (while UP) [ 465.423617][ T30] audit: type=1326 audit(6043941499.223:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.1.737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c8b8e969 code=0x0 [ 465.445579][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.467810][ T9864] FAULT_INJECTION: forcing a failure. [ 465.467810][ T9864] name failslab, interval 1, probability 0, space 0, times 0 [ 465.594672][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.4.735 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 465.594715][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.594732][ T9864] Call Trace: [ 465.594743][ T9864] [ 465.594754][ T9864] dump_stack_lvl+0x16c/0x1f0 [ 465.594790][ T9864] should_fail_ex+0x512/0x640 [ 465.594825][ T9864] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 465.594871][ T9864] should_failslab+0xc2/0x120 [ 465.594911][ T9864] __kmalloc_cache_noprof+0x6a/0x3e0 [ 465.594954][ T9864] ? nfc_allocate_device+0x15b/0x5e0 [ 465.594993][ T9864] nfc_allocate_device+0x15b/0x5e0 [ 465.595023][ T9864] ? __init_swait_queue_head+0xca/0x150 [ 465.595073][ T9864] nci_allocate_device+0x23b/0x430 [ 465.595119][ T9864] virtual_ncidev_open+0x6f/0x220 [ 465.595164][ T9864] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 465.595209][ T9864] misc_open+0x35a/0x420 [ 465.595240][ T9864] ? __pfx_misc_open+0x10/0x10 [ 465.595265][ T9864] chrdev_open+0x234/0x6a0 [ 465.595294][ T9864] ? __pfx_apparmor_file_open+0x10/0x10 [ 465.595326][ T9864] ? __pfx_chrdev_open+0x10/0x10 [ 465.595360][ T9864] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 465.595408][ T9864] do_dentry_open+0x741/0x1c10 [ 465.595456][ T9864] ? __pfx_chrdev_open+0x10/0x10 [ 465.595496][ T9864] vfs_open+0x82/0x3f0 [ 465.595536][ T9864] path_openat+0x1de4/0x2cb0 [ 465.595596][ T9864] ? __pfx_path_openat+0x10/0x10 [ 465.595643][ T9864] ? __lock_acquire+0xb8a/0x1c90 [ 465.595689][ T9864] do_filp_open+0x20b/0x470 [ 465.595734][ T9864] ? __pfx_do_filp_open+0x10/0x10 [ 465.595807][ T9864] ? alloc_fd+0x471/0x7d0 [ 465.595863][ T9864] do_sys_openat2+0x11b/0x1d0 [ 465.595898][ T9864] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.595957][ T9864] __x64_sys_openat+0x174/0x210 [ 465.595995][ T9864] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.596049][ T9864] do_syscall_64+0xcd/0x490 [ 465.596093][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.596125][ T9864] RIP: 0033:0x7f5656f8e969 [ 465.596151][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.596181][ T9864] RSP: 002b:00007f5657d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.596211][ T9864] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f8e969 [ 465.596231][ T9864] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 465.596251][ T9864] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 465.596268][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.596286][ T9864] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 465.596323][ T9864] [ 466.741763][ T9878] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 468.652793][ T9893] FAULT_INJECTION: forcing a failure. [ 468.652793][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 468.667122][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.1.743 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 468.667150][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.667161][ T9893] Call Trace: [ 468.667167][ T9893] [ 468.667174][ T9893] dump_stack_lvl+0x16c/0x1f0 [ 468.667197][ T9893] should_fail_ex+0x512/0x640 [ 468.667220][ T9893] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 468.667253][ T9893] should_failslab+0xc2/0x120 [ 468.667272][ T9893] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 468.667302][ T9893] ? __alloc_skb+0x2b2/0x380 [ 468.667324][ T9893] __alloc_skb+0x2b2/0x380 [ 468.667340][ T9893] ? __pfx___alloc_skb+0x10/0x10 [ 468.667361][ T9893] ? netlink_has_listeners+0x20f/0x430 [ 468.667386][ T9893] alloc_uevent_skb+0x7d/0x210 [ 468.667411][ T9893] kobject_uevent_env+0xca4/0x1870 [ 468.667439][ T9893] ? down_write+0x14d/0x200 [ 468.667464][ T9893] set_disk_ro+0x1b3/0x210 [ 468.667484][ T9893] ? __pfx_set_disk_ro+0x10/0x10 [ 468.667503][ T9893] ? nbd_start_device+0x172/0xcd0 [ 468.667530][ T9893] ? up_write+0x1b2/0x520 [ 468.667560][ T9893] nbd_start_device+0x811/0xcd0 [ 468.667585][ T9893] ? __nla_parse+0x40/0x60 [ 468.667615][ T9893] nbd_genl_connect+0x120e/0x1c20 [ 468.667644][ T9893] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.667681][ T9893] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 468.667709][ T9893] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 468.667742][ T9893] genl_family_rcv_msg_doit+0x209/0x2f0 [ 468.667771][ T9893] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.667798][ T9893] ? genl_get_cmd+0x194/0x580 [ 468.667830][ T9893] ? __radix_tree_lookup+0x21f/0x2c0 [ 468.667863][ T9893] genl_rcv_msg+0x55c/0x800 [ 468.667892][ T9893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.667921][ T9893] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.667954][ T9893] netlink_rcv_skb+0x158/0x420 [ 468.667977][ T9893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.668005][ T9893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.668038][ T9893] ? netlink_deliver_tap+0x1ae/0xd30 [ 468.668063][ T9893] genl_rcv+0x28/0x40 [ 468.668086][ T9893] netlink_unicast+0x53a/0x7f0 [ 468.668112][ T9893] ? __pfx_netlink_unicast+0x10/0x10 [ 468.668147][ T9893] netlink_sendmsg+0x8d1/0xdd0 [ 468.668175][ T9893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.668207][ T9893] ____sys_sendmsg+0xa98/0xc70 [ 468.668232][ T9893] ? copy_msghdr_from_user+0x10a/0x160 [ 468.668251][ T9893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.668287][ T9893] ___sys_sendmsg+0x134/0x1d0 [ 468.668307][ T9893] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.668348][ T9893] ? __pfx_vfs_write+0x10/0x10 [ 468.668377][ T9893] ? do_sys_openat2+0x157/0x1d0 [ 468.668407][ T9893] __sys_sendmsg+0x16d/0x220 [ 468.668436][ T9893] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.668494][ T9893] do_syscall_64+0xcd/0x490 [ 468.668537][ T9893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.668568][ T9893] RIP: 0033:0x7f93c8b8e969 [ 468.668591][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.668620][ T9893] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.668646][ T9893] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 468.668672][ T9893] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000001 [ 468.668688][ T9893] RBP: 00007f93c9a08090 R08: 0000000000000000 R09: 0000000000000000 [ 468.668704][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.668720][ T9893] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 468.668761][ T9893] [ 471.073861][ T7898] svc: failed to register nfsdv3 RPC service (errno 512). [ 471.159984][ T7898] svc: failed to register nfsaclv3 RPC service (errno 512). [ 471.440828][ T5843] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 471.440874][ T5843] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 471.457564][ T5843] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 471.457659][ T5843] Bluetooth: hci1: Malformed LE Event: 0x0d [ 473.468166][ T30] audit: type=1326 audit(6043941507.263:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.4.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 475.464053][ T9951] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 475.686316][ T5843] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 475.686359][ T5843] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 475.701699][ T5843] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 475.701724][ T5843] Bluetooth: hci5: adv larger than maximum supported [ 475.709133][ T5843] Bluetooth: hci5: Malformed LE Event: 0x0d [ 478.189375][ T9984] Invalid ELF header magic: != ELF [ 478.943669][ T9986] zswap: compressor not available [ 479.304297][ T9980] zswap: compressor not available [ 480.669861][T10032] FAULT_INJECTION: forcing a failure. [ 480.669861][T10032] name failslab, interval 1, probability 0, space 0, times 0 [ 480.797089][T10032] CPU: 0 UID: 0 PID: 10032 Comm: syz.5.769 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 480.797130][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.797147][T10032] Call Trace: [ 480.797156][T10032] [ 480.797165][T10032] dump_stack_lvl+0x16c/0x1f0 [ 480.797189][T10032] should_fail_ex+0x512/0x640 [ 480.797212][T10032] ? fs_reclaim_acquire+0xae/0x150 [ 480.797237][T10032] ? tomoyo_encode2+0x100/0x3e0 [ 480.797256][T10032] should_failslab+0xc2/0x120 [ 480.797277][T10032] __kmalloc_noprof+0xd2/0x510 [ 480.797306][T10032] ? d_absolute_path+0x136/0x1a0 [ 480.797330][T10032] tomoyo_encode2+0x100/0x3e0 [ 480.797354][T10032] tomoyo_encode+0x29/0x50 [ 480.797373][T10032] tomoyo_realpath_from_path+0x18f/0x6e0 [ 480.797401][T10032] tomoyo_path_perm+0x274/0x460 [ 480.797428][T10032] ? tomoyo_path_perm+0x260/0x460 [ 480.797459][T10032] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 480.797514][T10032] ? __d_lookup+0x25c/0x4a0 [ 480.797543][T10032] tomoyo_path_unlink+0x91/0xe0 [ 480.797569][T10032] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 480.797591][T10032] ? d_lookup+0xe7/0x190 [ 480.797618][T10032] security_path_unlink+0x145/0x2b0 [ 480.797649][T10032] do_unlinkat+0x463/0x6a0 [ 480.797668][T10032] ? __pfx_do_unlinkat+0x10/0x10 [ 480.797694][T10032] ? getname_flags.part.0+0x1c5/0x550 [ 480.797719][T10032] __x64_sys_unlink+0xc5/0x110 [ 480.797736][T10032] do_syscall_64+0xcd/0x490 [ 480.797757][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.797776][T10032] RIP: 0033:0x7f60d998e969 [ 480.797792][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.797817][T10032] RSP: 002b:00007f60da8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 480.797835][T10032] RAX: ffffffffffffffda RBX: 00007f60d9bb6080 RCX: 00007f60d998e969 [ 480.797847][T10032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 480.797858][T10032] RBP: 00007f60da8af090 R08: 0000000000000000 R09: 0000000000000000 [ 480.797869][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.797879][T10032] R13: 0000000000000001 R14: 00007f60d9bb6080 R15: 00007ffe0d628dc8 [ 480.797902][T10032] [ 480.797920][T10032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.239733][T10032] Invalid ELF header magic: != ELF [ 482.177683][T10051] Invalid ELF header magic: != ELF [ 483.871301][T10071] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 484.146579][T10076] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 484.253880][T10076] nbd: error processing sock list [ 484.506567][ T30] audit: type=1326 audit(6043941518.303:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10081 comm="syz.4.780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5656f8e969 code=0x0 [ 488.321013][T10126] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 488.345549][T10126] nbd: error processing sock list [ 490.205672][T10164] FAULT_INJECTION: forcing a failure. [ 490.205672][T10164] name failslab, interval 1, probability 0, space 0, times 0 [ 490.268836][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.4.797 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 490.268882][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.268898][T10164] Call Trace: [ 490.268908][T10164] [ 490.268919][T10164] dump_stack_lvl+0x16c/0x1f0 [ 490.268955][T10164] should_fail_ex+0x512/0x640 [ 490.268989][T10164] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 490.269037][T10164] should_failslab+0xc2/0x120 [ 490.269070][T10164] __kmalloc_cache_noprof+0x6a/0x3e0 [ 490.269109][T10164] ? nci_allocate_device+0x105/0x430 [ 490.269155][T10164] nci_allocate_device+0x105/0x430 [ 490.269201][T10164] virtual_ncidev_open+0x6f/0x220 [ 490.269245][T10164] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 490.269287][T10164] misc_open+0x35a/0x420 [ 490.269314][T10164] ? __pfx_misc_open+0x10/0x10 [ 490.269339][T10164] chrdev_open+0x234/0x6a0 [ 490.269367][T10164] ? __pfx_apparmor_file_open+0x10/0x10 [ 490.269397][T10164] ? __pfx_chrdev_open+0x10/0x10 [ 490.269431][T10164] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 490.269480][T10164] do_dentry_open+0x741/0x1c10 [ 490.269534][T10164] ? __pfx_chrdev_open+0x10/0x10 [ 490.269573][T10164] vfs_open+0x82/0x3f0 [ 490.269612][T10164] path_openat+0x1de4/0x2cb0 [ 490.269670][T10164] ? __pfx_path_openat+0x10/0x10 [ 490.269717][T10164] ? __lock_acquire+0xb8a/0x1c90 [ 490.269759][T10164] do_filp_open+0x20b/0x470 [ 490.269803][T10164] ? __pfx_do_filp_open+0x10/0x10 [ 490.269877][T10164] ? alloc_fd+0x471/0x7d0 [ 490.269929][T10164] do_sys_openat2+0x11b/0x1d0 [ 490.269964][T10164] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.270032][T10164] __x64_sys_openat+0x174/0x210 [ 490.270069][T10164] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.270120][T10164] do_syscall_64+0xcd/0x490 [ 490.270153][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.270184][T10164] RIP: 0033:0x7f5656f8e969 [ 490.270208][T10164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.270239][T10164] RSP: 002b:00007f5657d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.270268][T10164] RAX: ffffffffffffffda RBX: 00007f56571b5fa0 RCX: 00007f5656f8e969 [ 490.270288][T10164] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 490.270307][T10164] RBP: 00007f5657010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 490.270323][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.270341][T10164] R13: 0000000000000000 R14: 00007f56571b5fa0 R15: 00007ffdebb8daf8 [ 490.270383][T10164] [ 491.153893][T10170] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 491.834091][T10177] size and base must be multiples of 4 kiB [ 491.937506][T10177] CPU: 0 UID: 0 PID: 10177 Comm: syz.1.799 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 491.937548][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.937561][T10177] Call Trace: [ 491.937568][T10177] [ 491.937575][T10177] dump_stack_lvl+0x16c/0x1f0 [ 491.937598][T10177] mtrr_del+0xd1/0x110 [ 491.937621][T10177] mtrr_ioctl+0x922/0xcf0 [ 491.937644][T10177] ? __pfx_mtrr_ioctl+0x10/0x10 [ 491.937672][T10177] ? find_held_lock+0x2b/0x80 [ 491.937696][T10177] ? __fget_files+0x20e/0x3c0 [ 491.937724][T10177] ? __pfx_mtrr_ioctl+0x10/0x10 [ 491.937747][T10177] proc_reg_unlocked_ioctl+0x226/0x320 [ 491.937765][T10177] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 491.937796][T10177] __x64_sys_ioctl+0x18e/0x210 [ 491.937821][T10177] do_syscall_64+0xcd/0x490 [ 491.937841][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.937860][T10177] RIP: 0033:0x7f93c8b8e969 [ 491.937876][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.937893][T10177] RSP: 002b:00007f93c9a08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.937912][T10177] RAX: ffffffffffffffda RBX: 00007f93c8db5fa0 RCX: 00007f93c8b8e969 [ 491.937924][T10177] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 491.937935][T10177] RBP: 00007f93c8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 491.937946][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.937957][T10177] R13: 0000000000000000 R14: 00007f93c8db5fa0 R15: 00007ffc0ee9dd88 [ 491.937979][T10177] [ 494.310435][T10196] Invalid ELF header magic: != ELF [ 495.241389][ T24] smpboot: CPU 0 is now offline [ 495.535830][ T30] audit: type=1326 audit(6043941529.323:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10212 comm="syz.1.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c8b8e969 code=0x0 [ 497.088362][T10246] zswap: compressor not available [ 497.631778][T10259] FAULT_INJECTION: forcing a failure. [ 497.631778][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 497.722182][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.3.815 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 497.722210][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.722222][T10259] Call Trace: [ 497.722228][T10259] [ 497.722236][T10259] dump_stack_lvl+0x16c/0x1f0 [ 497.722260][T10259] should_fail_ex+0x512/0x640 [ 497.722282][T10259] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 497.722311][T10259] should_failslab+0xc2/0x120 [ 497.722331][T10259] __kmalloc_cache_noprof+0x6a/0x3e0 [ 497.722357][T10259] ? nfc_allocate_device+0x15b/0x5e0 [ 497.722382][T10259] nfc_allocate_device+0x15b/0x5e0 [ 497.722401][T10259] ? __init_swait_queue_head+0xca/0x150 [ 497.722433][T10259] nci_allocate_device+0x23b/0x430 [ 497.722462][T10259] virtual_ncidev_open+0x6f/0x220 [ 497.722501][T10259] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 497.722529][T10259] misc_open+0x35a/0x420 [ 497.722548][T10259] ? __pfx_misc_open+0x10/0x10 [ 497.722564][T10259] chrdev_open+0x234/0x6a0 [ 497.722582][T10259] ? __pfx_apparmor_file_open+0x10/0x10 [ 497.722601][T10259] ? __pfx_chrdev_open+0x10/0x10 [ 497.722620][T10259] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 497.722650][T10259] do_dentry_open+0x741/0x1c10 [ 497.722679][T10259] ? __pfx_chrdev_open+0x10/0x10 [ 497.722701][T10259] vfs_open+0x82/0x3f0 [ 497.722725][T10259] path_openat+0x1de4/0x2cb0 [ 497.722760][T10259] ? __pfx_path_openat+0x10/0x10 [ 497.722789][T10259] ? __lock_acquire+0xb8a/0x1c90 [ 497.722816][T10259] do_filp_open+0x20b/0x470 [ 497.722845][T10259] ? __pfx_do_filp_open+0x10/0x10 [ 497.722889][T10259] ? alloc_fd+0x471/0x7d0 [ 497.722922][T10259] do_sys_openat2+0x11b/0x1d0 [ 497.722943][T10259] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.722974][T10259] __x64_sys_openat+0x174/0x210 [ 497.722997][T10259] ? __pfx___x64_sys_openat+0x10/0x10 [ 497.723029][T10259] do_syscall_64+0xcd/0x490 [ 497.723048][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.723067][T10259] RIP: 0033:0x7f912458e969 [ 497.723083][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.723101][T10259] RSP: 002b:00007f9125405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.723119][T10259] RAX: ffffffffffffffda RBX: 00007f91247b5fa0 RCX: 00007f912458e969 [ 497.723131][T10259] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 497.723142][T10259] RBP: 00007f9124610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 497.723152][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.723163][T10259] R13: 0000000000000000 R14: 00007f91247b5fa0 R15: 00007ffcd7523898 [ 497.723185][T10259] [ 498.182926][ T30] audit: type=1326 audit(6043941531.933:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.3.820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f912458e969 code=0x0 [ 498.531684][T10265] netlink: 'syz.5.818': attribute type 1 has an invalid length. [ 498.734739][T10161] Bluetooth: hci5: command 0x0406 tx timeout [ 499.596648][T10287] vivid-009: ================= START STATUS ================= [ 499.778061][T10287] vivid-009: Enable Output Cropping: true [ 499.880716][T10287] vivid-009: Enable Output Composing: true [ 500.000031][T10287] vivid-009: Enable Output Scaler: true [ 500.099855][T10287] vivid-009: Tx RGB Quantization Range: Automatic [ 500.188585][T10287] vivid-009: Transmit Mode: HDMI [ 500.272613][T10287] vivid-009: Hotplug Present: 0x00000000 [ 500.402045][T10287] vivid-009: RxSense Present: 0x00000000 [ 500.532906][T10287] vivid-009: EDID Present: 0x00000000 [ 500.571286][T10287] vivid-009: ================== END STATUS ================== [ 502.492206][ T30] audit: type=1326 audit(6043941536.293:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.1.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c8b8e969 code=0x0 [ 503.239644][T10330] .SR: entered promiscuous mode [ 503.449676][T10330] Invalid ELF header magic: != ELF [ 504.565896][T10338] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 504.969173][ T31] INFO: task syz.0.516:8768 blocked for more than 143 seconds. [ 504.988963][ T31] Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 [ 505.051845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.097749][ T31] task:syz.0.516 state:D stack:27592 pid:8768 tgid:8767 ppid:5834 task_flags:0x400040 flags:0x00004004 [ 505.191162][ T31] Call Trace: [ 505.223962][ T31] [ 505.247383][ T31] __schedule+0x116a/0x5de0 [ 505.291877][ T31] ? __lock_acquire+0x622/0x1c90 [ 505.335154][ T31] ? __pfx___schedule+0x10/0x10 [ 505.376558][ T31] ? find_held_lock+0x2b/0x80 [ 505.418771][ T31] ? schedule+0x2d7/0x3a0 [ 505.464819][ T31] schedule+0xe7/0x3a0 [ 505.492566][ T31] schedule_preempt_disabled+0x13/0x30 [ 505.537085][ T31] __mutex_lock+0x6c7/0xb90 [ 505.565218][ T31] ? nfsd_nl_version_get_doit+0x18a/0x800 [ 505.606854][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 505.647285][ T31] ? skb_put+0x138/0x1b0 [ 505.676488][ T31] ? genlmsg_put+0x258/0x2d0 [ 505.704075][ T31] ? nfsd_nl_version_get_doit+0x18a/0x800 [ 505.736313][ T31] nfsd_nl_version_get_doit+0x18a/0x800 [ 505.768738][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.797846][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 505.839208][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 505.867121][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 505.919336][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 505.944570][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.984819][ T31] ? __dev_queue_xmit+0x896/0x43e0 [ 506.014286][ T31] ? genl_get_cmd+0x194/0x580 [ 506.046580][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 506.076356][ T31] genl_rcv_msg+0x55c/0x800 [ 506.102023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.149644][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 506.155951][ T31] netlink_rcv_skb+0x158/0x420 [ 506.200760][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.239406][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.275840][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 506.306716][ T31] genl_rcv+0x28/0x40 [ 506.332034][ T31] netlink_unicast+0x53a/0x7f0 [ 506.358145][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 506.393716][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 506.417810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.452885][ T31] ____sys_sendmsg+0xa98/0xc70 [ 506.485205][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 506.519630][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.556021][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 506.583064][ T31] ? try_to_wake_up+0xa2f/0x1680 [ 506.606828][ T31] ___sys_sendmsg+0x134/0x1d0 [ 506.636752][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.678000][ T31] ? __lock_acquire+0x622/0x1c90 [ 506.707300][ T31] __sys_sendmsg+0x16d/0x220 [ 506.734599][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.766940][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 506.792521][ T31] do_syscall_64+0xcd/0x490 [ 506.819883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.854477][ T31] RIP: 0033:0x7f183038e969 [ 506.878034][ T31] RSP: 002b:00007f18312de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.892352][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.898958][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.943359][ T31] RAX: ffffffffffffffda RBX: 00007f18305b5fa0 RCX: 00007f183038e969 [ 506.992968][ T31] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000005 [ 507.056407][ T31] RBP: 00007f1830410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 507.081898][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.124776][ T31] R13: 0000000000000000 R14: 00007f18305b5fa0 R15: 00007ffc43e028a8 [ 507.174049][ T31] [ 507.189420][ T31] [ 507.189420][ T31] Showing all locks held in the system: [ 507.289256][ T31] 1 lock held by khungtaskd/31: [ 507.328711][ T31] #0: ffffffff8e3c4cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 507.367302][ T31] 2 locks held by kworker/u9:0/51: [ 507.408528][ T31] #0: ffff888026700948 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.476858][ T31] #1: ffffc90000bb7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.538067][ T31] 2 locks held by kworker/u9:2/5840: [ 507.574696][ T31] #0: ffff888026707148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.637521][ T31] #1: ffffc90004377d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.695729][ T31] 2 locks held by kworker/u9:3/5843: [ 507.720402][ T31] #0: ffff888026d3a948 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.781300][ T31] #1: ffffc900043a7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.835809][ T31] 2 locks held by kworker/u9:4/5844: [ 507.867955][ T31] #0: ffff888026c34148 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.932260][ T31] #1: ffffc900043b7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.995198][ T31] 2 locks held by kworker/u9:6/5846: [ 508.024044][ T31] #0: ffff888026c15948 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 508.086487][ T31] #1: ffffc900043d7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 508.139260][ T31] 2 locks held by kworker/u9:7/5847: [ 508.167993][ T31] #0: ffff888142f70148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 508.230147][ T31] #1: ffffc900043e7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 508.293443][ T31] 2 locks held by kworker/u9:8/5848: [ 508.322205][ T31] #0: ffff8880267ce148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 508.377416][ T31] #1: ffffc900043f7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 508.440707][ T31] 2 locks held by getty/6231: [ 508.466579][ T31] #0: ffff8880321bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 508.518524][ T31] #1: ffffc900044fd2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 508.567330][ T31] 2 locks held by syz.2.345/7898: [ 508.605264][ T31] #0: ffffffff901edbd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 508.653256][ T31] #1: ffffffff8e7dfc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 508.702413][ T31] 2 locks held by syz.0.516/8768: [ 508.720091][ T31] #0: ffffffff901edbd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 508.753777][ T31] #1: ffffffff8e7dfc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x18a/0x800 [ 508.798019][ T31] 2 locks held by kworker/u9:9/10243: [ 508.822282][ T31] #0: ffff888026d49148 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 508.858512][ T31] #1: ffffc900179d7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 508.907879][ T31] 1 lock held by syz.3.836/10345: [ 508.927689][ T31] #0: ffffffff8e3d0140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 508.963402][ T31] 1 lock held by syz.1.837/10348: [ 508.983482][ T31] #0: ffffffff8e3d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 509.058649][ T31] [ 509.065590][ T31] ============================================= [ 509.065590][ T31] [ 509.140549][ T31] NMI backtrace for cpu 1 [ 509.140568][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 509.140593][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.140603][ T31] Call Trace: [ 509.140610][ T31] [ 509.140617][ T31] dump_stack_lvl+0x116/0x1f0 [ 509.140640][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 509.140664][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 509.140694][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.140721][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 509.140748][ T31] watchdog+0xf70/0x12c0 [ 509.140780][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.140806][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.140837][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.140860][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.140887][ T31] kthread+0x3c2/0x780 [ 509.140914][ T31] ? __pfx_kthread+0x10/0x10 [ 509.140941][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.140960][ T31] ? __pfx_kthread+0x10/0x10 [ 509.140993][ T31] ret_from_fork+0x5d7/0x6f0 [ 509.141017][ T31] ? __pfx_kthread+0x10/0x10 [ 509.141043][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.141071][ T31] [ 509.141080][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 509.268620][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 509.280570][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.290765][ T31] Call Trace: [ 509.294264][ T31] [ 509.297223][ T31] dump_stack_lvl+0x3d/0x1f0 [ 509.301946][ T31] panic+0x71c/0x800 [ 509.305868][ T31] ? __pfx_panic+0x10/0x10 [ 509.310304][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 509.315342][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 509.321194][ T31] ? irq_work_queue+0xce/0x100 [ 509.326064][ T31] ? watchdog+0xdda/0x12c0 [ 509.330762][ T31] ? watchdog+0xdcd/0x12c0 [ 509.335332][ T31] watchdog+0xdeb/0x12c0 [ 509.339712][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.344538][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.349788][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.354944][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.359828][ T31] kthread+0x3c2/0x780 [ 509.363934][ T31] ? __pfx_kthread+0x10/0x10 [ 509.368780][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.373949][ T31] ? __pfx_kthread+0x10/0x10 [ 509.378771][ T31] ret_from_fork+0x5d7/0x6f0 [ 509.383623][ T31] ? __pfx_kthread+0x10/0x10 [ 509.388231][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.393135][ T31] [ 509.396298][ T31] Kernel Offset: disabled [ 509.400834][ T31] Rebooting in 86400 seconds..