last executing test programs:

6.262182591s ago: executing program 3 (id=521):
timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000000580)={@sival_int=0xbf, @raw=0x200, 0x4}, &(0x7f00000005c0)=0x1)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/status\x00', 0x200, 0x0)
lseek$auto(r0, 0x5, 0x0)
mlockall$auto(0x7)

6.069440594s ago: executing program 3 (id=523):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2) (async)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x200000000002d57, 0xeb1, r0, 0x8000)
mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x7fff)
socket(0x28, 0x80000, 0x5) (async)
r3 = socket(0x28, 0x80000, 0x5)
io_uring_setup$auto(0x1, 0x0)
r4 = getsockopt$auto(r3, 0x0, 0x33, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
uname$auto(0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0)
write$auto(r5, 0x0, 0x3)
r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/aid\x00', 0x802, 0x0)
prctl$auto_PR_SME_SET_VL(0x3f, 0x9, 0x0, 0x5, 0x8b00)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e48fedc", @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e48fedc", @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
write$auto(r6, 0x0, 0x4) (async)
write$auto(r6, 0x0, 0x4)
clock_gettime$auto(0x7ffffffd, 0x0) (async)
clock_gettime$auto(0x7ffffffd, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x6c000, 0x63) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x6c000, 0x63)
acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') (async)
acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t')
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/152, 0xffffffffffffffb4)
timer_create$auto(0xfffffffc, 0x0, 0x0) (async)
timer_create$auto(0xfffffffc, 0x0, 0x0)

4.528023911s ago: executing program 2 (id=527):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x2, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc)
getrandom$auto(0x0, 0x6000000, 0x3)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
madvise$auto(0x110c230000, 0x1, 0x9)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
read$auto_clk_dump_fops_(r0, &(0x7f0000000080)=""/81, 0x51)

4.405208628s ago: executing program 1 (id=529):
madvise$auto_MADV_POPULATE_WRITE(0x8533, 0xfffffffffffffff9, 0x17)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video11\x00', 0x280, 0x0)
ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x80085617, 0x0)
pipe$auto(0x0)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto_MADV_POPULATE_WRITE(0x5, 0xd00a, 0x17)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})

4.403689338s ago: executing program 3 (id=530):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x4000f82, 0x2, 0x2, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0)
write$auto(r0, 0x0, 0x81)
acct$auto(&(0x7f0000000000)='/dev/fb0\x00')
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
write$auto_console_fops_tty_io(r1, 0x0, 0x0)
bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000180)=@token_create={0x9, <r2=>0xffffffffffffffff}, 0x7)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', <r5=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000000680)={0x0, 0x59, &(0x7f0000000640)={&(0x7f0000000280)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000004)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
setgroups$auto(0x9, &(0x7f0000000040)=0x1)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

4.313866522s ago: executing program 2 (id=531):
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) (async)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r0, 0x0) (async, rerun: 32)
bpf$auto(0xd, 0x0, 0x6f5) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15) (async)
madvise$auto(0x0, 0x2000000080000001, 0x3) (async)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, 0x0) (async, rerun: 64)
prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0x1ff, 0x0, 0x3, 0xffffffffffff3ae6) (rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) (async)
close_range$auto(0x2, 0x8, 0x4677) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_stat\x00', 0x2, 0x0)
read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

4.21423363s ago: executing program 1 (id=532):
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9)
r0 = socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e2, 0x91)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
fcntl$auto_F_SETLK(r1, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket(0x10, 0x2, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
timer_create$auto(0xb, &(0x7f00000001c0)={@sival_ptr=0x0, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0)
timer_gettime$auto(0x0, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0xc0000001, <r2=>0x8}, 0x6f4)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto(0x3, 0x89e1, 0x91)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_SOCK_GET(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="8d4329bd7008ffdb063ffedfa23d65a4e60c"], 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000003fc0), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r0, @ANYBLOB="ffff2bbd7000fedbdf250300"], 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20000c50)
r6 = setfsuid$auto(0xee00)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r6, r7, r6)
msgctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000300)={{0xa36b, <r8=>0xee00, 0x0, 0x5, 0xffffff7e, 0xffffffff, 0x5}, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x1, 0xfffffffffffffffa, 0x9, 0x1, 0xfffffffffffffff8, 0x2, 0x9a, 0x3, 0x1, @raw=0x3, @raw=0xfffffeff})
shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000000540)={{0x1, <r9=>0xee00, 0xffffffffffffffff, 0x5, 0x7, 0x2, 0x1000}, 0x7fffffff, 0xd2f, 0x3, 0xd1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000380)="92f26a3b727862c5fcce7f9bb78b09d2090a66f9594d552735bc36fe181ebf60388240eee7466356d0879bfc012ae3884521cabce04374d75d0e7a0194a8d1599681b0565e52c2aa5af22520a52e5e2811a67963e48a62449938feb1b9ff568bf0490c067bea8d54b447687723cdd70a7ca898b0b2676f84c21de858ae24ca9b29fb7f77c68657e502d06da3ed0f022359d2b7007c6bc843ba4ac1ce3a2f1ffeebe5bd75b97f3d97aeda50c33d4ad6598cc391250c87089148e26831294ba102b72ed73e78f7427fdb5c599a36aa1ee565953462", &(0x7f0000000480)="0555f4313a9cc4cc9ebc0c6aa7532b307d9a8cfc80afa1a99070be6402be5e995aef102d06bfdb6566f4fb2b32897ec38d1dd5ad045fd74293014c9494661a3c422ae882b93bc1a40895fb57454a8ae53424df8091efafd1cf61028cb6d3c1195c871c9f5b2dbca2cb22da154e3c3f27444e965a0c4e96d26ceed91c36fa4f3f40e6f9566923bc974ed00f2bc9e9156ce5deb4ceca6a165f0a2057faaff7e6d9ea6acabf063295"})
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r5, @ANYBLOB="22002abd7000ffdbdf250200000085000500cd531111980357361349887d210909080a0d000e4a2c1b290e08950b49dd2d271e9c90cc703e7ec00dd3141f03813b04257ccf51d5ec61c758d06e91aff18616fdb2144689181c0a69017e304ce35ffcf546178263d588e2185fcaf8758dc583ba3b02df73a8957b030ae71b7fd29f092361660bc31c67441dbbdaf1807d4582f6000000080002002a01000008000900080000002c000a80040052000800f000", @ANYRES32=r6, @ANYBLOB="0800bc00", @ANYRES32=r2, @ANYBLOB="140069800800a900", @ANYRES32=r8, @ANYBLOB="0800c100", @ANYRES32=r9, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

3.903391953s ago: executing program 1 (id=533):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"})
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xd00)

3.854198651s ago: executing program 3 (id=534):
lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x40001c, 0xfffe, 0x63, 0x0, 0xee00, 0x0, 0xffff, 0x8, 0x80000000000000a, 0x140000402, 0x40000000000001, 0x9, 0x1000, 0xd, 0x6, 0x2})
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000240)="3f720d31d7ee30c262da7e6c342337e214a66f5373e13567d57dc0926cb474349aa53004f4d5bcefbdf184432587f9bf7a47fa6dba8a078c1c22011dfd786012fbbf123ba1da7ff61b05fd84cd2abc625ff7b4debd4dab", 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0xb, 0x0, 0x5, 0xb}, 0xfff}, 0x5, 0x311)

3.578213527s ago: executing program 1 (id=535):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0xa, 0x0, 0x3)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
r1 = gettid()
rt_sigqueueinfo$auto(r1, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r1, 0x0, @sival_ptr=0x0}}})
clone3$auto(0x0, 0x9)
clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5)
clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='i'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.577199033s ago: executing program 3 (id=536):
r0 = socket(0x22, 0x1, 0x80000000)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
unshare$auto(0x40000080)
sendmmsg$auto(r0, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000240)="4c0c580000000000fe04", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x80000002, 0x100)
setsockopt$auto(r1, 0x29, 0x10, 0x0, 0x1)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
r3 = socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(r3, &(0x7f0000000100)=@rc={0x1f, @none, 0x8}, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

3.327983845s ago: executing program 0 (id=537):
mmap$auto(0x0, 0x2020009, 0xbe, 0xeb1, 0xfffffffffffffffa, 0x2000000000008000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xc, 0x2e, 0x80000000000, 0x3}, 0x6f4)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000680)="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", 0x658)
madvise$auto(0x0, 0xffffffffffff0005, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0)
r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/hci1:200\x00', 0x40800, 0x0)
fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x4, 0x1000, 0x0)
mmap$auto(0x81, 0x4020009, 0x8, 0xeb1, r1, 0x8000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x1f40)
write$auto(r1, 0x0, 0x1)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500009c8814816b5e81"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x2)
madvise$auto(0x0, 0x200007, 0x19)
mlock$auto(0x5, 0xffff)
mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
msync$auto(0x7ff, 0x7, 0x8)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)

3.168934766s ago: executing program 0 (id=538):
mmap$auto(0x0, 0xf2d, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x5, 0xb)
io_uring_setup$auto(0x2, 0x0)
socket(0x10, 0x5, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2b4040, 0x0)
socketpair$auto(0x3, 0x5, 0x1, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x10, 0x8, 0x100000, 0x7ffffffff003, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffb, 0xeb, 0xfffffffffffffffe, 0x8003, 0xfffffffffffffffc, 0x2})
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r1 = clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0)
r2 = socket(0x3, 0x2, 0x98)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f00000001c0)="60a5a09e35c186a926615d253a665546c3fde3e0f3629744a0a31b61a665d3d09947ba612a67352cdf186dbf68d3a47f8a1595cd0985fa7ff68ce9b5c46ac949e138", 0x2}, 0x6, 0x0)
setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c)
connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x7, 0x7, 0x90, 0xfc}, 0x54)
write$auto(0x3, 0x0, 0xfdf3)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xd)
bind$auto(0x3, 0x0, 0x6b)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x3}}, 0x1ff)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000002c0)="3e2aa0b8eb7b5188aa75103bea769da548c06f7c85b861377b9acecb03f37597fc597a5109e46ad8cf3481749d99197baad805df4037b4b7739739c5ffcd6fc0788521d0e2bd6eb4bddf0ffc3ed56465c70efcbb536adf4c0a33763f4950536382cb38df19f00f35c94ec4230dd6f77bcc734809c2779184d59efc7368d4380e363e4a76511b36fa72c18736d12551bb79233f6b61dfc1eeb3bb01a4fe95aab78c12f54371bc68402a437368ab18c8c96537be5887fb80d3e3577eaf24b65331f8ab141ead61bc2db6cc22470ff582dc138c0f79ba0544dd1aa9e7e60f49d85618911bb9e8da90a37943c8dba7d263209e44c512d721e76a8b2dbc9b59881a7324bf4997cafad3edfeb5cce83db82d2b53", 0xc, &(0x7f0000000180)={0x0, 0xc6}, 0x5, 0x0, 0x8000000000000000, 0xb}, 0x800fff}, 0x5, 0x312)

3.032813451s ago: executing program 2 (id=539):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/d3cold_allowed\x00', 0x20000, 0x0)
write$auto(r1, &(0x7f0000000100)=']((+X\x00', 0x3)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, r0, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
write$auto(r2, &(0x7f00000000c0)='..\n\x06\x01K', 0x7f0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xc, 0xeb1, r1, 0x8000)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r4, 0x0, 0x1f40)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = socket(0x10, 0x2, 0x0)
bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, r6, @relative_fd, 0x5}, 0x7fff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
read$auto(r3, &(0x7f0000000100)='\x00', 0xbe62)
r7 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x2441, 0x0)
readv$auto(r7, &(0x7f00000000c0)={&(0x7f0000000040), 0x8}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004884}, 0x40050)
r8 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/fragmentation_threshold\x00', 0x10000, 0x0)
fremovexattr$auto(r8, &(0x7f0000000180)='/proc/thread-self/net/afs/sysname\x00')
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd3/events_async\x00', 0x40082, 0x0)
sendmmsg$auto(r9, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x2, 0x9}, 0x9}, 0x2, 0x0)

2.895520485s ago: executing program 2 (id=540):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x175880, 0x0)
mmap$auto(0x9175, 0x202000d, 0x7, 0xeb1, r0, 0x8003)
unshare$auto(0x40000080) (async)
mmap$auto(0x6, 0x8, 0x400, 0x9b72, r0, 0x4000000000000101) (async, rerun: 64)
socket(0xa, 0x2, 0xea) (rerun: 64)
getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/neigh/gre0/anycast_delay\x00', 0x82, 0x0) (async)
r1 = socket(0x11, 0x80003, 0x300) (async, rerun: 32)
socket(0x25, 0x1, 0x1) (rerun: 32)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1a040, 0x0) (async, rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8, 0xd, 0x8, 0x948b, 0x8000000000000000, 0x100000000, 0xa, 0x80000000080, 0x1fffe000000000, 0x80000001, 0x5, 0x6d3c, 0x200000000000005, 0x2]}, 0x0)
mbind$auto(0x7, 0x601, 0x4, &(0x7f0000000500)=0x10001, 0x403, 0x7) (async)
socket(0xa, 0x801, 0x84) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async)
write$auto(r1, &(0x7f0000000080)='\x00', 0x8) (async, rerun: 64)
socket(0x1e, 0x1, 0x0) (async, rerun: 64)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
open(0x0, 0x13df42, 0xdc) (rerun: 32)
socket(0x1, 0x2, 0x106) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 64)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy3/hwsim/ps\x00', 0x200840, 0x0) (rerun: 64)
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r2, 0x4004550a, 0x0)
prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0)

2.72997255s ago: executing program 1 (id=541):
r0 = socket(0x25, 0x5, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x9b)
rseq$auto(&(0x7f0000000000)={0x8000, 0x401, 0x660, 0x1, 0x6, 0xffffffff}, 0x7, 0x0, 0x6)
pidfd_open$auto(0x0, 0x6)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800)
socket(0xf, 0x3, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x7, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_TIOCMSET2(r1, 0x5418, &(0x7f00000000c0))
msync$auto(0x1ffff000, 0x80100000000005, 0x3)
mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)

2.409097212s ago: executing program 0 (id=542):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
close_range$auto(r0, 0x8, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r2) (async)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x10a, 0x100, 0x3fc}]})
unshare$auto(0x40000080) (async)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x60742, 0x0)
readahead$auto(r3, 0x10000000e, 0x0)
write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100)

1.884816822s ago: executing program 0 (id=543):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"})
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf4ff)

1.672329871s ago: executing program 0 (id=544):
r0 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2000d, 0xe5, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x80045500, 0x38)
r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r3, 0x3b8a, 0x38)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x400800, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x3}, 0x6a)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x20009, 0xdf, 0xeb1, r1, 0x8000)
ioctl$auto(0xc8, 0x800454d7, 0x5c8d)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
unshare$auto(0x40000080)
mbind$auto(0x8000, 0x7f, 0x2, 0x0, 0x3, 0x1)
prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
io_setup$auto(0x7ffe, &(0x7f0000000000))
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)

1.09719419s ago: executing program 3 (id=545):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x7ffd, 0x12)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x30, 0x80000006, 0x4)
r0 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

927.513022ms ago: executing program 2 (id=546):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
mmap$auto(0x5, 0x4000b, 0x6, 0x9b72, 0x7, 0x2)
sysfs$auto(0x2002, 0x8, 0x0)
fsopen$auto(0x0, 0x1) (async)
r0 = fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
bpf$auto(0x0, &(0x7f00000001c0)=@link_detach, 0x6ef)
io_cancel$auto(0x6, 0x0, 0x0)
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x40, 0x0) (async)
openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x40, 0x0)
r1 = socket(0x26, 0x80805, 0x0)
dup2$auto(0x0, 0x3)
open(&(0x7f00000001c0)='./file0\x00', 0x60342, 0x15b)
mmap$auto(0x4, 0x400008, 0xdf, 0x61da, 0xffffffffffffffff, 0x5)
open(0x0, 0x7ffd, 0x12)
umount2$auto(0x0, 0x4)
mmap$auto(0x0, 0x40000000006, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x0, 0x200007, 0x19) (async)
madvise$auto(0x0, 0x200007, 0x19)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000325bd7000fedbdf251300000005003700ff00252b167106c100002c001f002f7379732f6b65726e656c2f64656275672f6e666373696d2f6e6663312f64726f706672616d650005002b0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x81)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r1, 0x8000) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r1, 0x8000)
r3 = io_uring_setup$auto(0x40000b, 0x0)
io_uring_register$auto(r3, 0x21, &(0x7f0000000240), 0x8)
madvise$auto(0x0, 0x2003f0, 0x100)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
epoll_create$auto(0x4) (async)
epoll_create$auto(0x4)
mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000)
mseal$auto(0x0, 0x7dda, 0x0) (async)
mseal$auto(0x0, 0x7dda, 0x0)

208.784143ms ago: executing program 2 (id=547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf251400000008002700350900000800010006000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x4000000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0xa, 0x1, 0x100)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0)
sendfile$auto(r2, r2, 0x0, 0x7fff)
unshare$auto(0xa4)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYBLOB="00012cbd7000fcdbdf250a00000005000200000000000600010061c5000008000a000c000000060001005d00000008000a001803000006000100b438000008000a000100010008000a000200000008000a0006"], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x20000040)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x0, 0x408)
adjtimex$auto(0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xc41a, 0xdf, 0xeb1, r4, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r6, 0x0, 0x20)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
socket(0x2c, 0x3, 0x0)
shutdown$auto(0x200000003, 0x2)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r3, 0x0, 0x9)

203.431554ms ago: executing program 0 (id=548):
mmap$auto(0x0, 0x200007, 0x0, 0x40ebe, 0xd, 0x300000000000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0x4020ae46, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0)
r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/state\x00', 0x8c0002, 0x0)
r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001580), 0x521201, 0x0)
ioctl$auto_I2C_PEC(r3, 0x708, &(0x7f00000015c0)="22b49af9bdcff2a9be0cb5f7f6389cdf8ae904ee2d4c548fcbd4500a30c93ab7faff12134f6d676a254e68987c191e98afb673c514daa755052bf7d31cd1d738dce75241f6bea2c0c52e0f423cf46c9b0ad5075a2ca77b5ceb8d3010eda1ee504bb31c54bc129f0645094b50566b91383c8e23798ac9b15674562f66c2586e1cc7499ff3c8c032074877f9feb2bf34cd27f3073503d4a48c189c17b74b1cc33a0ef53fe93f7351084a08e8619972662bbeec4d07cbd2f188911cefc63e281b6e1a482312abfcb67e85a15029d34be652f070131083667cd87738118b2f1947fa55c4e15dc2bd090c32a281fbc6d049ea15fbb48539054f2daaeec3221f097f6e97ec349306390f9d4ca6b2b4da27c659a2f87e4909e923c660edd15b65f07ef92a7efef18be574f20d7916c7c7351fec416187334a0cebff607d80438fee8d05fc12c02e8d8ea88e89eff17e5915e3c954db97b1f6a0ad11f7d14d8c47233d6ee49a207c3f7329a620063716012001bb320dc9c7244c742e50c43fdbd483e3fb1f5b71b5539fe1f8a0d66af4a85902a40b2f1f3fdef3fb355c7db45b6ecabaa9f04c131f526439281a66b92d6246a41d21e7e071791710d15854dec0ea09aa1550a60270d33fcc2698941be9b9961517b1328f49def77818b8e028c767818454b767068dfa993545aeec6f1c406f01140ed8472b8f654292913a0ae34e01d7f18b7a9cae63b8af90899fa6b57ebeb95fd2f5358fbc50be00b4329a79f412cf89c1c8b9c3ed6ea065fb774feecd4177e6c390af0835a486f12ccd6cbfa574ec7036d5b9f9a12d30e6292cd7a0b1afdea862d4969898af373b3b0210409fa86d057defd55580e84a6c1dacc843c4e303c757e8884ec99403f47b711068e03bd8fbbb442119348bb6997cb85cbcf4f31b92b293208590faf5e72398aa87c68092df8b5d7116fd81b4c1646cc0f04fda66c47ef8a63fc7cec024b54b77a6ce5097efd13e3b9d83191e55dba4a5352b7b42e6a4741f8d3a8495417cc7fade4127b3dd605126570910ffc090b1dfda879b4eab48be9c09629f254de1c5a4ba3904a90f0a4ec1879ee16e8d9a799ba455b52d95ddd9816881544041ac7965e5dd992cd4a7f508e08c73cf43a2045c6dc4db64c0f9d4d93d296946179e0d027e07153ccdaaa5ed71c53fb0b893aec8338fee5e026ceb5af2fff15adbd4ed4ef7aa301d769496679cd1a74c84e2edb7eb6766010ffefc38df3ea3afaa5aef072e3442dd2e4656d913333e86116e9138d89eff28195d42776b261f8a1716fdfbebaa82f817a473c1ad1338887ed71417049ca949e7bb230f67b6ab92ab92b1f807148d494a5e9f74e6b3f074e12bed6278c7d00cc9fd9b065fe9f7476f191b7f79b80e776242152a722c1b7c3617e7bca33843cbbe0d7f90044b05465c3e440d4da541443ff85bdeee6e9bc740b49af30701dd22cbf7ebbf3b9fafb3c6e1793986ae00ca7d3bdf4954a84e7bd9d5c8631f7bf3b0de06373ee6d8058b8724cbccc3ef492f1c27ff62d3d65eaff4040e2a43ed082a4aa5f2d07dd707d141f29e91173467dfe97c0899bdabae81e47a7ba2cdb5648fef6bca2524ed90a801b67c67abfd37efc3d8b7bf264dde09ab22a9ddd56fab28a1bff55e0eb8b92fb3deda51de4c8a705fef163c19985705b443ed9ead9b892b5aeb3b0b5a5d4b73c380e755b7ad0aafc7d690798f500017b0585bf5bdeb1755a032e7ed3e7bb7e4f0533b5542b39fcbc70e1eb43beb9f90c42876d8746cd4a02af5629aba6d2103a0cfc16e8323cb23571c7e958e86ffc6aac8fe345d280b06c3379f9ba5bc2ec07c8b2b41c25798cdf30932884355be048f6a86af6501f0e76ff25a6d83d83e8ff8a0d0a7a4462fd0102f2d8e48f7d8c51b3903a6535e3df478dbc309c472fbac90baa9c863489618349867796f5f45956cbb8e42e6cc62fcbdc2fd711b12ecf02e5ee0607f66e23837e573abb297bcd44b0613ea2b8662f8e898b2f4e99093f6a8b82527e4eaab78d346ac66234d6872c361a70ee0cdab8ddc4a4a093b0af332daa192e449ddb800bff153d7dd02aacf55b137d2bd1daf1aaec30f70b733ffab719f60892900c9469bf60cfb217c02c852818b14f342dcb9290a8589da5a75b7a7c1246282f665eb459eb710aef3f6a0dab4e6c60b2c6db2de7b2be64c3919ab595cc10648ea71566562ac864f963110eb69eea409926462ca8e1091723b9c2d1eabeaff6873795229841ccd999f5575a6df5d74dfe812edde90c031da4d3d34045f46514b94a37dedd3b9b27760393b602baeb0c9406a61102058a2181e120c76e5f514f1e797e0379c0c521a698ec5c6f6c1ffdc7316c13f6e245a83b72244f917d2d6d974b67e1fe8fa86cb473f88fbb6e26914ec14f61dc5172a3e2b1faa6462f2be4347ad9509e5e408b4ea8cd7ac5543609aad6da86b8a1777c56eaaab85d218e3d0f40d72f3658335be963cabce1b7c35f9d4296a0590541bb3daacb5a72dd26a607eb23ca93f469f2231602afa9560d1fd0c22bfd780a9116ef966ba21c20a9d7315dc34886ef4bb364d51c903b5517ff2603f11894c50ea01067b216327be3058a95e2b70e8434b7d12cc615595835e6c3c14a4488c1fd63bbba3f544684ee097aa0b69095c264eb7d914e7fd0394a379569b66b48c6f5f6fa620b6c78c6d7008620e5e6b42a89bf8d723a277fd955a16e1ce06d29209902a58f88666969d66450b4427f06cfd6c515c7d3d7dfcbd263417692e59e3f1bff8c6f3d043a57f46b1ab05498e853f868983c08b66f3a4d98ba5446a580757ff1ba0daba368cb6c3c67de5a58edf35c90e8243f6b298bc446a32ecf60aa55a6cc5518de564f3426020a54dfdb0b2f778691c4c6f164e3cb3370c0b8e86f34881aa15633bcb8d7aa9aeb60ce2b12b58871318c8bc6c5894c7bb222f8af798dfabee36f9c369633f7a7fbba7da089547716603cecea3ef3bb27334628835f6721da6f3c9732379f70655d1285942ff9dcdca325b7eaa2a2f5a0d055de9e435437388d0856d43bf09dc8deaac00c96012bef5a1b70b1fb53076036cc4d8ed7bd41ad69404414d61fdfdcd9034f88bee60a33080cd9f66c30a7d4f58f922b8b19ed8b98e91819dc34d08bbd89457021395691f320154fcf15648871c0d1569e62758a59c8f37715b0796c122857b0764597169a965a0b1f78c9336dd3e2514b23ab98031c63c0d856f95b920b00cde052b25b405da899b465c574d359b6bc2c7dc35a488c7b1d1090d7ffbe4a115746bfcfd6b36ed10910fed14571c5e786cc8a21df5bec34e8e853c65bcc99422f07acd9d422be1c7dee599394fa825ac6b5db1fa4c13b875fc76599c3125700cc77c95944f071dc408834af4127791ffd9eb100bc730ec7c40b4c8a26fe939e658d8f079c0da9a8823943ffc3dcdfc354c1a4a14c470c31a32dee68820629835c130c7512ca3f65ad7d0c06939e1347c84aac59b5fd4751108b5a3a2275bc1037fde0055b2ce768f853166c75f563e48e4717205103fe8c9e169625eab957a78581282202fc83e073406b61e778f28580e11f584c96130cb374e5dd19e7a052f91111e8b15fd6f4339cbaba4ac234f0aefd0c424eba8d51d2f1a8d0d03537e2af0024e66b864142da476e298243f4ef91dcb6a179d46f1239d47d2b4913dc2ec58a191b19f39b576e74acaa697a8bf9fc84ae793efd01045ba2146b9de9ca5d65f62d51a179982cfc4382990a83db4f70010fd40aab342e851822df9aa1f59422b3273242390ed59d5d57b84c49f74307e3884deafb99d03ec620fbeb7e4a704cb948bb117933f66096e9159bd83eace2b334e6d44f51619d3ced6153a623b767b21788fcdbb521f3c370fb1a78545a638c2528826373cba4f8e0ef4b20c5608a9f73068a6c74b087e11e066cb706d68f42c2c59b4340a8b68320483aeab88b4476eb426049601978f42cbac29989dbde02fe9d81aa77f0c0786d4667c417b521e8539e456edfcd20e856314291069e711185bf302489c8689ac0ca3baaabb565e773cd3c103e7a21b29da0991cf62d69f925b12e36675c3fb57e083c748b59da5f3709b99ca5aac8c167893ee7a08689e3b9779a3de4b54d8d1b725754a532862fc0e697698c3d4f73f9784160998c60acd4f69e3e7de7cde123a384d59c265ab4cd6c70a91807ce9859c5e67dd9113627c8fd7c4d0083bdc630ac27e2e8fb24ac1c89d7561b91f9c1ec3e88dcb6115628c2d40c0ba3892d404d97f9be16b9d7e293b1262c1bf5f4f8e8a4bc1ae41a322f40bf4d969e17ee6649a00c864a52f99bb7e59fcaa8ee15b289b3d65e2270c5e0d0913fa7aa8094c33e5f308eb9c1c9ce0859ba69036043d6d4e33bcbb8a5fc3918a4a233fb7dd3c71e40fa9a488c1fa93388bbb404fd18d3fca8433e302c96754fb0535f2cf1ff079fa798496fef3e8be1e700f52a9ae8ea6fb8ca71753a56e69175c436fe789c719247be76da4f96beda150deb80befcabb69dc64c44370f3cd14acb068bc601ccaf429c1d8f6f1689c7fefa2985dc6c6a8b9d1e00cf98bb093e0c5981bd73b9d2f3f7afb0db4f0753797a67147a0cc7306f4b3ff32258fc348017351b84a0ba2ca186e08e70e8c47d5b150d0ae130d674f899e1f0f12e9d60308ebcc00c4abc25e4c423069b30d38aea6238818d0ebec77bd5883b332d163e729c34f13c462b0313ed69fa059a32ed79cd7ce4c99e4405ce48c784d91d5deee69acd3e24b85934c62003f13c33356f4f931116f4735ef1cd7af7f170c7dee27ededbfc5ccb80391c37830bc974a371b7a009c36895e61bc2624122154df23d19638188f5eb135620d77cd2269712aa84d6e4a4041f60e2a2d4e8c5055b611c6e0a4997a3e959cd75f2486201aa2e730a0d6af980ad789f7d486f923ae9683c3ae6255175b581da72c811a96aa9e7e202e798ff2c7645216c32ef40476522c0cb13a84bc9b799e2a2b69fd525b888cd2b2780b148c424b3a4e2e78a1ad195a963f9437af2af120a188d6f8e274bd35accb127d4c7cad315ebdb41fc27c158ac7866af39053ac4ef7393c8613667d922c859e2409336181731acba201b5bb305c175d9106de6de91adb7f6de4ea10fe1a00cc6d92429a131e9723af81b6e62761e9d29af3ed2d9a8a1d9f142546a6396c80e9984da727e19ecf285b57c9f657412f747a453fd69146b02e10ae3df0bfa86d3dc94e939c1f8396c93258822d02b5f271ae011e7d67f23ad6f315124f494a519ce4e94bccd4665b930789ea81f6e335d6c87eb7fb518470581df8179654a234beb4ffc5eaff1833d4986d3b1808967d72e8777b8e7d7692aa9b99fde13fce5d90f390ab65340707902e41c34f55a17e62e0c775a80c3f630f076e9215b5da86e12c9575f19ad97369e3f16d24501571632d54881add70d9b8c1d4b3f14d216df7b2935dc6b343aa396faca32ac6939fd6566f15d52b99e223b2b08efd91e1ace80ba41446bd72b9fb8f7fcdc1140605cdcc323e04f96060c88c638fee94ce8571eb6adedaa558e2a15347f7a98d622fd0fd5cb057591f756fc9b4fbf8cef418fec11429803276d3297ba2831cde2954402015d426e88184d5ddf68bd821fbe603e1f5370d9a3ea2b9ed0092007637371161b1a14f5e97df8b4f9fd3229d71e4d20c51dd19b877a9837a71d73a68eadb4c4d13b0fb4d0c9001f702de66c05505c7b2296d89b9abc51efaf04f0fa82072f60b3125483d942c8db148e3aa7f")
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, &(0x7f0000000380)=""/4096, 0x1000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x373042, 0x0)
read$auto(r5, 0x0, 0x100000001)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/nfsfs/volumes\x00', 0x0, 0x0)
pread64$auto(r7, 0x0, 0x200000000006, 0x20fe)
landlock_add_rule$auto(r2, 0x2, &(0x7f0000001500)="4f09d6d7887038ae24e81622cc73fa341002fff9f257edfb43184625cb4c7c61395b86773dae386e65769579e915cec8d675360bb53fe8cd1382824932a2858884086861523b07a7a064a1fade7fa9405cf5b8f15b9eb0df635d495b294985f117e6f3c64037a8c26826c144a364b6423416611c72dc8667c96530094318a07c", 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = gettid()
process_vm_writev$auto(r9, &(0x7f0000002980)={0x0, 0x7fb}, 0x7, &(0x7f0000002a40)={0x0, 0x1}, 0xbf18, 0x100000000000000)
waitid$auto_P_PGID(0x2, r9, &(0x7f0000000180)={@siginfo_0_0={0x4, 0x2, 0x6, @_sigfault={&(0x7f00000025c0)="8236dff5c2d362afe74480a4345794dcb33a0bce81f6ce23d198b8deb6df34a6cb6df721d05f09d982ee2dc03be318962b63cce55e174c276f6068a5b931b86197e2d628a59ae0b0cf7ee3d6c2597930e01bb2c7b3c9d0a7d57cf382b8330c409959fabc57df56fef9af982833179bcada8eb5cc3facb2e5f0831039e3554a4d59b80c21f1dbbe72edabcc9af3fa3aa69882c2f17779d1833651c24a3a67ba1967ae5c8f4f825fb34103f86fdbe84f1a8ad1", @_trapno=0x80}}}, 0xc, &(0x7f0000000200)={{0x8, 0x1}, {0x6, 0x7}, 0x8000000000800000, 0x1, 0x10, 0x1, 0xd, 0x2, 0x8000000000000000, 0xdef, 0x4, 0xe6, 0xf, 0x3, 0x17cda4dd, 0x3ff})
waitid$auto_P_PID(0x1, r9, &(0x7f0000001380)={@siginfo_0_0={0x8, 0x2, 0x2, @_sigsys={&(0x7f0000000300)="a7f5819805e44b60c7cb4bb0d0b0d438f41354e4f0f547d22433dbac62ff9b4bcbd0b896c369d86a9206de4978f963efce55659c5d3761f31e161dabec1a17a20fd0d87b6b656da26f0ad2266b17979ca1baeac170575a10be0bcfec46a2548903271b98ca33850612d3f0bd0b01", 0x401, 0x4}}}, 0xfffffff3, &(0x7f0000001400)={{0x9, 0x2}, {0x2, 0x9}, 0x9, 0x0, 0xb, 0x7f, 0x7, 0x401, 0x4, 0x7fffffff, 0x4, 0x800, 0x0, 0x2, 0x3, 0xd59})
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x9eff, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd70000000df257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x5c, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xfc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0xd}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7f}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x1e, 0x14e, "841eb9b0eb7217430f96b604680406e6e96149036e87fbd059cb"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "8ed50aa6b58878"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48815}, 0xc4)

0s ago: executing program 1 (id=549):
mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
setgroups$auto(0xe32, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0x163041, 0x0)
mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xf, 0x7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x80002, 0x0)
read$auto(r1, 0x0, 0x6)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0x3}, 0x7)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x210800, 0x0)
write$auto(r0, 0x0, 0xfdef)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0)
mmap$auto(0x0, 0x1, 0x7fffffff, 0x44eb1, 0x3, 0x300000000000)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x9, 0x0)
bind$auto(r2, 0x0, 0x67)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
socket(0xa, 0x3, 0x3)
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
getpid()

kernel console output (not intermixed with test programs):

macvtap: entered promiscuous mode
[  100.003148][ T5845] veth1_vlan: entered promiscuous mode
[  100.013682][ T5849] veth1_macvtap: entered promiscuous mode
[  100.076107][ T5846] veth0_macvtap: entered promiscuous mode
[  100.094896][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.106123][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.119360][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.143097][ T5846] veth1_macvtap: entered promiscuous mode
[  100.172800][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.184263][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.184431][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.201247][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.216210][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.243567][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.254565][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.264327][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.273571][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.314321][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.326670][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.342265][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.343564][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.359822][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.359871][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.361805][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.389695][ T5845] veth0_macvtap: entered promiscuous mode
[  100.404120][ T5845] veth1_macvtap: entered promiscuous mode
[  100.442073][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.453895][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.466849][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.478066][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.490026][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.513696][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.523328][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.532820][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.542930][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.584859][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.634165][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.645760][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.668806][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.683028][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.710476][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.738669][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.755180][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.809386][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.822218][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.832338][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.842939][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.852864][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.863526][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.875720][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.901155][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.915433][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.950892][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.970010][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.972991][ T5861] Bluetooth: hci1: command tx timeout
[  100.982609][ T5851] Bluetooth: hci0: command tx timeout
[  100.994493][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.006797][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.049955][ T5851] Bluetooth: hci3: command tx timeout
[  101.055410][ T5861] Bluetooth: hci2: command tx timeout
[  101.064902][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.165928][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.187076][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.372615][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.387773][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.440249][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.451291][ T5912] random: crng reseeded on system resumption
[  101.465501][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.476126][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.515209][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.691886][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.724740][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.338781][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[  103.051687][ T5861] Bluetooth: hci0: command tx timeout
[  103.052603][ T5851] Bluetooth: hci1: command tx timeout
[  103.128310][ T5851] Bluetooth: hci3: command tx timeout
[  103.128708][ T5861] Bluetooth: hci2: command tx timeout
[  103.524674][ T5947] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0.  Contact your vendor for updates.
[  103.630584][ T5947] FAULT_INJECTION: forcing a failure.
[  103.630584][ T5947] name failslab, interval 1, probability 0, space 0, times 1
[  103.719817][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.1.6 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  103.719872][ T5947] Tainted: [I]=FIRMWARE_WORKAROUND
[  103.719884][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.719907][ T5947] Call Trace:
[  103.719917][ T5947]  <TASK>
[  103.719933][ T5947]  dump_stack_lvl+0x16c/0x1f0
[  103.719992][ T5947]  should_fail_ex+0x512/0x640
[  103.720029][ T5947]  ? __kmalloc_noprof+0xbf/0x510
[  103.720081][ T5947]  ? lsm_blob_alloc+0x68/0x90
[  103.720130][ T5947]  should_failslab+0xc2/0x120
[  103.720160][ T5947]  __kmalloc_noprof+0xd2/0x510
[  103.720218][ T5947]  lsm_blob_alloc+0x68/0x90
[  103.720269][ T5947]  security_sk_alloc+0x30/0x270
[  103.720306][ T5947]  sk_prot_alloc+0x1c7/0x2a0
[  103.720360][ T5947]  sk_alloc+0x36/0xc20
[  103.720401][ T5947]  __netlink_create+0x5e/0x2c0
[  103.720450][ T5947]  __netlink_kernel_create+0xed/0x750
[  103.720499][ T5947]  ? __pfx___netlink_kernel_create+0x10/0x10
[  103.720543][ T5947]  ? proc_create_reg+0xe3/0x180
[  103.720579][ T5947]  xfrm_user_net_init+0xc6/0x190
[  103.720620][ T5947]  ? __pfx_xfrm_user_net_init+0x10/0x10
[  103.720661][ T5947]  ? __pfx_xfrm_netlink_rcv+0x10/0x10
[  103.720702][ T5947]  ? __pfx_tls_init_net+0x10/0x10
[  103.720733][ T5947]  ? tls_proc_init+0x58/0x70
[  103.720775][ T5947]  ? __pfx_xfrm_user_net_init+0x10/0x10
[  103.720812][ T5947]  ops_init+0x1df/0x5f0
[  103.720853][ T5947]  setup_net+0x21e/0x850
[  103.720893][ T5947]  ? __pfx_setup_net+0x10/0x10
[  103.720928][ T5947]  ? lockdep_init_map_type+0x5c/0x280
[  103.720954][ T5947]  ? __pfx_down_read_killable+0x10/0x10
[  103.720984][ T5947]  ? debug_mutex_init+0x37/0x70
[  103.721020][ T5947]  copy_net_ns+0x2a6/0x5f0
[  103.721064][ T5947]  create_new_namespaces+0x3ea/0xad0
[  103.721111][ T5947]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  103.721152][ T5947]  ksys_unshare+0x45b/0xa40
[  103.721195][ T5947]  ? __pfx_ksys_unshare+0x10/0x10
[  103.721235][ T5947]  ? xfd_validate_state+0x5d/0x180
[  103.721266][ T5947]  ? rcu_is_watching+0x12/0xc0
[  103.721306][ T5947]  __x64_sys_unshare+0x31/0x40
[  103.721347][ T5947]  do_syscall_64+0xcd/0x260
[  103.721389][ T5947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.721416][ T5947] RIP: 0033:0x7fed2ef8e169
[  103.721437][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.721470][ T5947] RSP: 002b:00007fed2fd23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  103.721495][ T5947] RAX: ffffffffffffffda RBX: 00007fed2f1b5fa0 RCX: 00007fed2ef8e169
[  103.721513][ T5947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  103.721529][ T5947] RBP: 00007fed2f010a68 R08: 0000000000000000 R09: 0000000000000000
[  103.721545][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.721560][ T5947] R13: 0000000000000000 R14: 00007fed2f1b5fa0 R15: 00007ffc906ae1d8
[  103.721594][ T5947]  </TASK>
[  104.195497][ T5920] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  104.203032][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  104.240914][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  104.301656][ T5920] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  104.311188][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  104.339897][ T5952] Invalid ELF header magic: != ELF
[  104.402070][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  104.448772][ T5920] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  104.454857][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  104.479842][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  104.500454][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  104.506581][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  104.553079][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.053300][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  105.288456][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  105.866110][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[  106.122989][ T5953] geneve1: entered promiscuous mode
[  106.220258][ T5953] geneve1: entered allmulticast mode
[  106.232075][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'.
[  106.328281][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout
[  106.405719][ T5953] Zero length message leads to an empty skb
[  106.488959][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout
[  106.568689][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.776062][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'.
[  106.794575][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  107.087569][ T5984] random: crng reseeded on system resumption
[  107.368439][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.855218][ T5981] random: crng reseeded on system resumption
[  108.407470][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.481660][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'.
[  108.567907][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.648362][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  108.877402][ T5990] random: crng reseeded on system resumption
[  109.447789][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.110570][ T6028] Invalid ELF header magic: != ELF
[  110.139498][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'.
[  110.488757][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.647353][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.727416][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  111.425663][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[  111.573119][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'.
[  112.111683][ T6049] netlink: 'syz.0.25': attribute type 2 has an invalid length.
[  112.461672][ T6052] netlink: 'syz.0.34': attribute type 2 has an invalid length.
[  113.442695][ T6076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'.
[  113.569926][ T6056] random: crng reseeded on system resumption
[  115.178922][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'.
[  115.598097][ T6093] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0.  Contact your vendor for updates.
[  115.714980][ T6093] FAULT_INJECTION: forcing a failure.
[  115.714980][ T6093] name failslab, interval 1, probability 0, space 0, times 0
[  115.750183][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.3.32 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  115.750237][ T6093] Tainted: [I]=FIRMWARE_WORKAROUND
[  115.750248][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  115.750267][ T6093] Call Trace:
[  115.750276][ T6093]  <TASK>
[  115.750288][ T6093]  dump_stack_lvl+0x16c/0x1f0
[  115.750352][ T6093]  should_fail_ex+0x512/0x640
[  115.750387][ T6093]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  115.750442][ T6093]  should_failslab+0xc2/0x120
[  115.750473][ T6093]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  115.750521][ T6093]  ? __proc_create+0xc3/0x8c0
[  115.750555][ T6093]  ? __proc_create+0x2ce/0x8c0
[  115.750595][ T6093]  __proc_create+0x2ce/0x8c0
[  115.750631][ T6093]  ? __pfx___proc_create+0x10/0x10
[  115.750673][ T6093]  ? _raw_write_unlock+0x28/0x50
[  115.750717][ T6093]  ? proc_register+0x314/0x5f0
[  115.750756][ T6093]  proc_create_reg+0x7d/0x180
[  115.750793][ T6093]  ? __pfx_can_reset_stats_proc_show+0x10/0x10
[  115.750837][ T6093]  proc_create_net_single+0x86/0x170
[  115.750874][ T6093]  ? __pfx_proc_create_net_single+0x10/0x10
[  115.750925][ T6093]  can_init_proc+0x112/0x4d0
[  115.750967][ T6093]  can_pernet_init+0x1e4/0x370
[  115.751008][ T6093]  ? __pfx_can_pernet_init+0x10/0x10
[  115.751043][ T6093]  ops_init+0x1df/0x5f0
[  115.751092][ T6093]  setup_net+0x21e/0x850
[  115.751141][ T6093]  ? __pfx_setup_net+0x10/0x10
[  115.751183][ T6093]  ? lockdep_init_map_type+0x5c/0x280
[  115.751214][ T6093]  ? __pfx_down_read_killable+0x10/0x10
[  115.751250][ T6093]  ? debug_mutex_init+0x37/0x70
[  115.751290][ T6093]  copy_net_ns+0x2a6/0x5f0
[  115.751341][ T6093]  create_new_namespaces+0x3ea/0xad0
[  115.751387][ T6093]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  115.751430][ T6093]  ksys_unshare+0x45b/0xa40
[  115.751474][ T6093]  ? __pfx_ksys_unshare+0x10/0x10
[  115.751512][ T6093]  ? xfd_validate_state+0x5d/0x180
[  115.751542][ T6093]  ? rcu_is_watching+0x12/0xc0
[  115.751587][ T6093]  __x64_sys_unshare+0x31/0x40
[  115.751632][ T6093]  do_syscall_64+0xcd/0x260
[  115.751679][ T6093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.751708][ T6093] RIP: 0033:0x7f37da78e169
[  115.751730][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.751761][ T6093] RSP: 002b:00007f37db558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  115.751791][ T6093] RAX: ffffffffffffffda RBX: 00007f37da9b5fa0 RCX: 00007f37da78e169
[  115.751810][ T6093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  115.751828][ T6093] RBP: 00007f37da810a68 R08: 0000000000000000 R09: 0000000000000000
[  115.751847][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.751865][ T6093] R13: 0000000000000000 R14: 00007f37da9b5fa0 R15: 00007ffe2ba0f728
[  115.751905][ T6093]  </TASK>
[  116.378256][ T6107] netlink: 'syz.1.37': attribute type 2 has an invalid length.
[  116.384688][ T6099] Invalid ELF header magic: != ELF
[  116.882428][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'.
[  117.175392][ T6116] Invalid ELF header magic: != ELF
[  117.461679][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'.
[  117.504880][ T6126] geneve1: entered promiscuous mode
[  117.528562][ T6126] geneve1: entered allmulticast mode
[  117.726583][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'.
[  117.767198][ T6120] geneve1: entered promiscuous mode
[  117.772543][ T6120] geneve1: entered allmulticast mode
[  118.613914][ T6135] random: crng reseeded on system resumption
[  118.759152][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'.
[  119.277518][ T6162] netlink: 'syz.3.49': attribute type 2 has an invalid length.
[  120.256905][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  120.265802][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  120.957510][ T6200] random: crng reseeded on system resumption
[  120.957614][ T6202] netlink: 'syz.3.58': attribute type 2 has an invalid length.
[  121.309462][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'.
[  121.776853][ T6216] Invalid ELF header magic: != ELF
[  123.153938][ T6243] netlink: 'syz.0.67': attribute type 2 has an invalid length.
[  123.322314][ T6228] random: crng reseeded on system resumption
[  123.465491][ T6253] syz.0.69(6253): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  123.830811][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'.
[  124.706943][ T6283] ksmbd: Unknown IPC event: 14, ignore.
[  125.019884][ T6286] netlink: 'syz.1.77': attribute type 2 has an invalid length.
[  125.029545][ T6288] netlink: 7 bytes leftover after parsing attributes in process `syz.2.78'.
[  125.215021][ T6268] random: crng reseeded on system resumption
[  125.749622][ T6305] mmap: syz.2.82 (6305) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.134243][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'.
[  126.175788][ T6296] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  126.576405][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'.
[  127.574815][ T6334] netlink: 'syz.2.88': attribute type 2 has an invalid length.
[  127.816616][ T6332] FAULT_INJECTION: forcing a failure.
[  127.816616][ T6332] name failslab, interval 1, probability 0, space 0, times 0
[  127.842413][ T6339] openvswitch: netlink: Key type 261 is out of range max 32
[  127.902713][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.3.87 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  127.902764][ T6332] Tainted: [I]=FIRMWARE_WORKAROUND
[  127.902775][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  127.902792][ T6332] Call Trace:
[  127.902803][ T6332]  <TASK>
[  127.902814][ T6332]  dump_stack_lvl+0x16c/0x1f0
[  127.902865][ T6332]  should_fail_ex+0x512/0x640
[  127.902900][ T6332]  ? fs_reclaim_acquire+0xae/0x150
[  127.902940][ T6332]  ? tomoyo_encode2+0x100/0x3e0
[  127.902980][ T6332]  should_failslab+0xc2/0x120
[  127.903010][ T6332]  __kmalloc_noprof+0xd2/0x510
[  127.903055][ T6332]  ? d_absolute_path+0x136/0x1a0
[  127.903096][ T6332]  tomoyo_encode2+0x100/0x3e0
[  127.903144][ T6332]  tomoyo_encode+0x29/0x50
[  127.903184][ T6332]  tomoyo_realpath_from_path+0x18f/0x6e0
[  127.903250][ T6332]  tomoyo_path_number_perm+0x245/0x580
[  127.903287][ T6332]  ? tomoyo_path_number_perm+0x237/0x580
[  127.903328][ T6332]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  127.903369][ T6332]  ? find_held_lock+0x2b/0x80
[  127.903446][ T6332]  ? find_held_lock+0x2b/0x80
[  127.903485][ T6332]  ? hook_file_ioctl_common+0x145/0x410
[  127.903529][ T6332]  ? __fget_files+0x20e/0x3c0
[  127.903582][ T6332]  security_file_ioctl+0x9b/0x240
[  127.903624][ T6332]  __x64_sys_ioctl+0xb7/0x200
[  127.903665][ T6332]  do_syscall_64+0xcd/0x260
[  127.903716][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.903749][ T6332] RIP: 0033:0x7f37da78e169
[  127.903773][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.903802][ T6332] RSP: 002b:00007f37db558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  127.903832][ T6332] RAX: ffffffffffffffda RBX: 00007f37da9b5fa0 RCX: 00007f37da78e169
[  127.903853][ T6332] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000003
[  127.903871][ T6332] RBP: 00007f37db558090 R08: 0000000000000000 R09: 0000000000000000
[  127.903890][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.903909][ T6332] R13: 0000000000000000 R14: 00007f37da9b5fa0 R15: 00007ffe2ba0f728
[  127.903951][ T6332]  </TASK>
[  127.905081][ T6332] ERROR: Out of memory at tomoyo_realpath_from_path.
[  128.559227][ T6344] FAULT_INJECTION: forcing a failure.
[  128.559227][ T6344] name failslab, interval 1, probability 0, space 0, times 0
[  128.672114][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.0.91 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  128.672170][ T6344] Tainted: [I]=FIRMWARE_WORKAROUND
[  128.672192][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.672212][ T6344] Call Trace:
[  128.672223][ T6344]  <TASK>
[  128.672235][ T6344]  dump_stack_lvl+0x16c/0x1f0
[  128.672289][ T6344]  should_fail_ex+0x512/0x640
[  128.672327][ T6344]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  128.672382][ T6344]  should_failslab+0xc2/0x120
[  128.672413][ T6344]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  128.672466][ T6344]  ? shmem_alloc_inode+0x25/0x50
[  128.672509][ T6344]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  128.672545][ T6344]  shmem_alloc_inode+0x25/0x50
[  128.672581][ T6344]  alloc_inode+0x61/0x240
[  128.672618][ T6344]  new_inode+0x22/0x1c0
[  128.672650][ T6344]  ? trace_cap_capable+0x18d/0x200
[  128.672685][ T6344]  shmem_get_inode+0x19a/0xfb0
[  128.672729][ T6344]  ? __vm_enough_memory+0x184/0x3f0
[  128.672771][ T6344]  __shmem_file_setup+0x16f/0x300
[  128.672824][ T6344]  shmem_zero_setup+0x93/0x1a0
[  128.672858][ T6344]  __mmap_region+0x2036/0x27c0
[  128.672913][ T6344]  ? __pfx___mmap_region+0x10/0x10
[  128.672962][ T6344]  ? trace_sched_exit_tp+0xde/0x130
[  128.673041][ T6344]  ? __pfx___schedule+0x10/0x10
[  128.673131][ T6344]  ? trace_cap_capable+0x18d/0x200
[  128.673167][ T6344]  ? cap_capable+0xb3/0x250
[  128.673212][ T6344]  mmap_region+0x1ab/0x3f0
[  128.673272][ T6344]  do_mmap+0xd8e/0x11b0
[  128.673319][ T6344]  ? __pfx_do_mmap+0x10/0x10
[  128.673359][ T6344]  ? __pfx_down_write_killable+0x10/0x10
[  128.673399][ T6344]  vm_mmap_pgoff+0x281/0x450
[  128.673445][ T6344]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  128.673479][ T6344]  ? __fget_files+0x204/0x3c0
[  128.673535][ T6344]  ? __x64_sys_futex+0x1e0/0x4c0
[  128.673579][ T6344]  ? __x64_sys_futex+0x1e9/0x4c0
[  128.673631][ T6344]  ksys_mmap_pgoff+0x7d/0x5c0
[  128.673669][ T6344]  ? rcu_is_watching+0x12/0xc0
[  128.673713][ T6344]  __x64_sys_mmap+0x125/0x190
[  128.673756][ T6344]  do_syscall_64+0xcd/0x260
[  128.673807][ T6344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.673841][ T6344] RIP: 0033:0x7fc98ef8e169
[  128.673866][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.673897][ T6344] RSP: 002b:00007fc98fd16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  128.673928][ T6344] RAX: ffffffffffffffda RBX: 00007fc98f1b6080 RCX: 00007fc98ef8e169
[  128.673950][ T6344] RDX: 00000000000000e1 RSI: 0000000000000001 RDI: 0000000000000000
[  128.673969][ T6344] RBP: 00007fc98f010a68 R08: 0000000000000401 R09: 0000000000008000
[  128.673990][ T6344] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  128.674009][ T6344] R13: 0000000000000000 R14: 00007fc98f1b6080 R15: 00007ffe97efdbe8
[  128.674050][ T6344]  </TASK>
[  128.958478][    C1] vkms_vblank_simulate: vblank timer overrun
[  129.596958][ T6350] random: crng reseeded on system resumption
[  129.675382][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'.
[  130.635029][ T6386] HfR: entered promiscuous mode
[  130.688561][ T6387] netlink: 'syz.3.98': attribute type 2 has an invalid length.
[  131.941591][ T6405] FAULT_INJECTION: forcing a failure.
[  131.941591][ T6405] name failslab, interval 1, probability 0, space 0, times 0
[  131.993347][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.2.102 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  131.993398][ T6405] Tainted: [I]=FIRMWARE_WORKAROUND
[  131.993410][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.993428][ T6405] Call Trace:
[  131.993438][ T6405]  <TASK>
[  131.993449][ T6405]  dump_stack_lvl+0x16c/0x1f0
[  131.993499][ T6405]  should_fail_ex+0x512/0x640
[  131.993533][ T6405]  ? fs_reclaim_acquire+0xae/0x150
[  131.993572][ T6405]  ? tomoyo_encode2+0x100/0x3e0
[  131.993611][ T6405]  should_failslab+0xc2/0x120
[  131.993641][ T6405]  __kmalloc_noprof+0xd2/0x510
[  131.993687][ T6405]  ? d_absolute_path+0x136/0x1a0
[  131.993728][ T6405]  tomoyo_encode2+0x100/0x3e0
[  131.993778][ T6405]  tomoyo_encode+0x29/0x50
[  131.993819][ T6405]  tomoyo_realpath_from_path+0x18f/0x6e0
[  131.993882][ T6405]  tomoyo_path_number_perm+0x245/0x580
[  131.993917][ T6405]  ? tomoyo_path_number_perm+0x237/0x580
[  131.993959][ T6405]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  131.993999][ T6405]  ? find_held_lock+0x2b/0x80
[  131.994075][ T6405]  ? find_held_lock+0x2b/0x80
[  131.994114][ T6405]  ? hook_file_ioctl_common+0x145/0x410
[  131.994157][ T6405]  ? __fget_files+0x20e/0x3c0
[  131.994210][ T6405]  security_file_ioctl+0x9b/0x240
[  131.994252][ T6405]  __x64_sys_ioctl+0xb7/0x200
[  131.994294][ T6405]  do_syscall_64+0xcd/0x260
[  131.994345][ T6405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.994382][ T6405] RIP: 0033:0x7f739bd8e169
[  131.994407][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.994436][ T6405] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  131.994466][ T6405] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  131.994485][ T6405] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000003
[  131.994502][ T6405] RBP: 00007f739cb84090 R08: 0000000000000000 R09: 0000000000000000
[  131.994521][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.994537][ T6405] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  131.994574][ T6405]  </TASK>
[  132.213047][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.220924][ T6405] ERROR: Out of memory at tomoyo_realpath_from_path.
[  133.282362][ T6416] random: crng reseeded on system resumption
[  133.367702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[  133.412089][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'.
[  133.963246][ T6436] FAULT_INJECTION: forcing a failure.
[  133.963246][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  133.979987][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.0.109 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  133.980034][ T6436] Tainted: [I]=FIRMWARE_WORKAROUND
[  133.980045][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  133.980062][ T6436] Call Trace:
[  133.980071][ T6436]  <TASK>
[  133.980082][ T6436]  dump_stack_lvl+0x16c/0x1f0
[  133.980143][ T6436]  should_fail_ex+0x512/0x640
[  133.980181][ T6436]  _copy_from_iter+0x2a4/0x15b0
[  133.980221][ T6436]  ? __alloc_skb+0x200/0x380
[  133.980257][ T6436]  ? __pfx__copy_from_iter+0x10/0x10
[  133.980296][ T6436]  ? __lock_acquire+0xaa4/0x1ba0
[  133.980352][ T6436]  netlink_sendmsg+0x829/0xdd0
[  133.980400][ T6436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.980456][ T6436]  ____sys_sendmsg+0xa95/0xc70
[  133.980485][ T6436]  ? copy_msghdr_from_user+0x10a/0x160
[  133.980523][ T6436]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.980555][ T6436]  ? kfree+0x252/0x4d0
[  133.980588][ T6436]  ? __pfx__kstrtoull+0x10/0x10
[  133.980640][ T6436]  ___sys_sendmsg+0x134/0x1d0
[  133.980685][ T6436]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.980756][ T6436]  ? __pfx___might_resched+0x10/0x10
[  133.980804][ T6436]  __sys_sendmmsg+0x200/0x420
[  133.980846][ T6436]  ? __pfx___sys_sendmmsg+0x10/0x10
[  133.980896][ T6436]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  133.980962][ T6436]  ? fput+0x70/0xf0
[  133.980988][ T6436]  ? ksys_write+0x1b9/0x240
[  133.981027][ T6436]  ? __pfx_ksys_write+0x10/0x10
[  133.981064][ T6436]  ? rcu_is_watching+0x12/0xc0
[  133.981106][ T6436]  __x64_sys_sendmmsg+0x9c/0x100
[  133.981143][ T6436]  ? lockdep_hardirqs_on+0x7c/0x110
[  133.981180][ T6436]  do_syscall_64+0xcd/0x260
[  133.981224][ T6436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.981252][ T6436] RIP: 0033:0x7fc98ef8e169
[  133.981273][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.981298][ T6436] RSP: 002b:00007fc98fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  133.981324][ T6436] RAX: ffffffffffffffda RBX: 00007fc98f1b5fa0 RCX: 00007fc98ef8e169
[  133.981342][ T6436] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  133.981359][ T6436] RBP: 00007fc98fd37090 R08: 0000000000000000 R09: 0000000000000000
[  133.981388][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  133.981405][ T6436] R13: 0000000000000000 R14: 00007fc98f1b5fa0 R15: 00007ffe97efdbe8
[  133.981461][ T6436]  </TASK>
[  134.230650][    C1] vkms_vblank_simulate: vblank timer overrun
[  134.612438][ T6440] netlink: 'syz.1.108': attribute type 2 has an invalid length.
[  135.316718][ T6448] FAULT_INJECTION: forcing a failure.
[  135.316718][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.364524][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.2.113 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  135.364575][ T6448] Tainted: [I]=FIRMWARE_WORKAROUND
[  135.364587][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  135.364604][ T6448] Call Trace:
[  135.364615][ T6448]  <TASK>
[  135.364626][ T6448]  dump_stack_lvl+0x16c/0x1f0
[  135.364677][ T6448]  should_fail_ex+0x512/0x640
[  135.364719][ T6448]  _copy_from_user+0x2e/0xd0
[  135.364772][ T6448]  kstrtouint_from_user+0xd6/0x1d0
[  135.364821][ T6448]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  135.364868][ T6448]  ? __lock_acquire+0xaa4/0x1ba0
[  135.364935][ T6448]  proc_fail_nth_write+0x83/0x250
[  135.364979][ T6448]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  135.365034][ T6448]  vfs_write+0x25c/0x1180
[  135.365074][ T6448]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  135.365122][ T6448]  ? __pfx___mutex_lock+0x10/0x10
[  135.365168][ T6448]  ? __pfx_vfs_write+0x10/0x10
[  135.365222][ T6448]  ? __fget_files+0x20e/0x3c0
[  135.365285][ T6448]  ksys_write+0x12a/0x240
[  135.365328][ T6448]  ? __pfx_ksys_write+0x10/0x10
[  135.365368][ T6448]  ? rcu_is_watching+0x12/0xc0
[  135.365417][ T6448]  do_syscall_64+0xcd/0x260
[  135.365467][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.365498][ T6448] RIP: 0033:0x7f739bd8cc1f
[  135.365522][ T6448] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  135.365550][ T6448] RSP: 002b:00007f739cb84030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  135.365577][ T6448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f739bd8cc1f
[  135.365596][ T6448] RDX: 0000000000000001 RSI: 00007f739cb840a0 RDI: 0000000000000004
[  135.365614][ T6448] RBP: 00007f739cb84090 R08: 0000000000000000 R09: 0000000000000000
[  135.365632][ T6448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  135.365650][ T6448] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  135.365690][ T6448]  </TASK>
[  135.748953][ T6471] FAULT_INJECTION: forcing a failure.
[  135.748953][ T6471] name failslab, interval 1, probability 0, space 0, times 0
[  135.762694][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.0.119 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  135.762744][ T6471] Tainted: [I]=FIRMWARE_WORKAROUND
[  135.762755][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  135.762773][ T6471] Call Trace:
[  135.762783][ T6471]  <TASK>
[  135.762794][ T6471]  dump_stack_lvl+0x16c/0x1f0
[  135.762845][ T6471]  should_fail_ex+0x512/0x640
[  135.762880][ T6471]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  135.762933][ T6471]  should_failslab+0xc2/0x120
[  135.762963][ T6471]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  135.763009][ T6471]  ? __kasan_kmalloc+0xaa/0xb0
[  135.763052][ T6471]  ? __inet_diag_dump_start+0x8f/0x7f0
[  135.763092][ T6471]  ? __alloc_skb+0x2b2/0x380
[  135.763137][ T6471]  __alloc_skb+0x2b2/0x380
[  135.763175][ T6471]  ? __pfx___alloc_skb+0x10/0x10
[  135.763222][ T6471]  ? aa_get_newest_label+0x375/0x680
[  135.763258][ T6471]  netlink_dump+0x698/0xd00
[  135.763303][ T6471]  ? trace_cap_capable+0x18d/0x200
[  135.763335][ T6471]  ? __pfx_netlink_dump+0x10/0x10
[  135.763399][ T6471]  ? __inet_diag_dump_start+0x434/0x7f0
[  135.763452][ T6471]  __netlink_dump_start+0x6d6/0x990
[  135.763503][ T6471]  inet_diag_rcv_msg_compat+0x275/0x2d0
[  135.763556][ T6471]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  135.763601][ T6471]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  135.763643][ T6471]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  135.763684][ T6471]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  135.763732][ T6471]  ? sock_diag_rcv_msg+0x33a/0x790
[  135.763775][ T6471]  sock_diag_rcv_msg+0x36f/0x790
[  135.763815][ T6471]  netlink_rcv_skb+0x16a/0x440
[  135.763862][ T6471]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  135.763901][ T6471]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.763970][ T6471]  ? netlink_deliver_tap+0x1ae/0xd30
[  135.764022][ T6471]  netlink_unicast+0x53a/0x7f0
[  135.764073][ T6471]  ? __pfx_netlink_unicast+0x10/0x10
[  135.764116][ T6471]  ? __lock_acquire+0xaa4/0x1ba0
[  135.764177][ T6471]  netlink_sendmsg+0x8d1/0xdd0
[  135.764230][ T6471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.764293][ T6471]  ____sys_sendmsg+0xa95/0xc70
[  135.764325][ T6471]  ? copy_msghdr_from_user+0x10a/0x160
[  135.764366][ T6471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.764402][ T6471]  ? kfree+0x252/0x4d0
[  135.764437][ T6471]  ? __pfx__kstrtoull+0x10/0x10
[  135.764494][ T6471]  ___sys_sendmsg+0x134/0x1d0
[  135.764544][ T6471]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.764625][ T6471]  ? __pfx___might_resched+0x10/0x10
[  135.764679][ T6471]  __sys_sendmmsg+0x200/0x420
[  135.764726][ T6471]  ? __pfx___sys_sendmmsg+0x10/0x10
[  135.764782][ T6471]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  135.764848][ T6471]  ? fput+0x70/0xf0
[  135.764877][ T6471]  ? ksys_write+0x1b9/0x240
[  135.764919][ T6471]  ? __pfx_ksys_write+0x10/0x10
[  135.764960][ T6471]  ? rcu_is_watching+0x12/0xc0
[  135.765006][ T6471]  __x64_sys_sendmmsg+0x9c/0x100
[  135.765047][ T6471]  ? lockdep_hardirqs_on+0x7c/0x110
[  135.765090][ T6471]  do_syscall_64+0xcd/0x260
[  135.765139][ T6471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.765171][ T6471] RIP: 0033:0x7fc98ef8e169
[  135.765194][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.765223][ T6471] RSP: 002b:00007fc98fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  135.765253][ T6471] RAX: ffffffffffffffda RBX: 00007fc98f1b5fa0 RCX: 00007fc98ef8e169
[  135.765272][ T6471] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  135.765289][ T6471] RBP: 00007fc98fd37090 R08: 0000000000000000 R09: 0000000000000000
[  135.765307][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.765324][ T6471] R13: 0000000000000000 R14: 00007fc98f1b5fa0 R15: 00007ffe97efdbe8
[  135.765363][ T6471]  </TASK>
[  136.413755][ T6476] process 'syz.0.120' launched '/dev/fd/6' with NULL argv: empty string added
[  136.576598][ T6480] netlink: 'syz.2.121': attribute type 2 has an invalid length.
[  136.948660][ T6473] random: crng reseeded on system resumption
[  137.625398][ T6501] type: 4278190080 invalid
[  137.856129][ T6495] random: crng reseeded on system resumption
[  138.014162][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  138.021863][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  138.250029][ T6504] Invalid ELF header magic: != ELF
[  138.450181][ T6514] FAULT_INJECTION: forcing a failure.
[  138.450181][ T6514] name failslab, interval 1, probability 0, space 0, times 0
[  138.486161][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.0.128 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  138.486214][ T6514] Tainted: [I]=FIRMWARE_WORKAROUND
[  138.486226][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.486254][ T6514] Call Trace:
[  138.486264][ T6514]  <TASK>
[  138.486276][ T6514]  dump_stack_lvl+0x16c/0x1f0
[  138.486327][ T6514]  should_fail_ex+0x512/0x640
[  138.486362][ T6514]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  138.486414][ T6514]  should_failslab+0xc2/0x120
[  138.486443][ T6514]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  138.486488][ T6514]  ? __kasan_kmalloc+0xaa/0xb0
[  138.486530][ T6514]  ? __inet_diag_dump_start+0x8f/0x7f0
[  138.486570][ T6514]  ? __alloc_skb+0x2b2/0x380
[  138.486614][ T6514]  __alloc_skb+0x2b2/0x380
[  138.486652][ T6514]  ? __pfx___alloc_skb+0x10/0x10
[  138.486698][ T6514]  ? aa_get_newest_label+0x375/0x680
[  138.486739][ T6514]  netlink_dump+0x698/0xd00
[  138.486785][ T6514]  ? trace_cap_capable+0x18d/0x200
[  138.486817][ T6514]  ? __pfx_netlink_dump+0x10/0x10
[  138.486881][ T6514]  ? __inet_diag_dump_start+0x434/0x7f0
[  138.486934][ T6514]  __netlink_dump_start+0x6d6/0x990
[  138.486985][ T6514]  inet_diag_rcv_msg_compat+0x275/0x2d0
[  138.487031][ T6514]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  138.487076][ T6514]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  138.487120][ T6514]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  138.487163][ T6514]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  138.487209][ T6514]  ? sock_diag_rcv_msg+0x33a/0x790
[  138.487258][ T6514]  sock_diag_rcv_msg+0x36f/0x790
[  138.487298][ T6514]  netlink_rcv_skb+0x16a/0x440
[  138.487345][ T6514]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  138.487383][ T6514]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.487453][ T6514]  ? netlink_deliver_tap+0x1ae/0xd30
[  138.487506][ T6514]  netlink_unicast+0x53a/0x7f0
[  138.487560][ T6514]  ? __pfx_netlink_unicast+0x10/0x10
[  138.487604][ T6514]  ? __lock_acquire+0xaa4/0x1ba0
[  138.487666][ T6514]  netlink_sendmsg+0x8d1/0xdd0
[  138.487720][ T6514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.487784][ T6514]  ____sys_sendmsg+0xa95/0xc70
[  138.487815][ T6514]  ? copy_msghdr_from_user+0x10a/0x160
[  138.487857][ T6514]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.487893][ T6514]  ? kfree+0x252/0x4d0
[  138.487929][ T6514]  ? __pfx__kstrtoull+0x10/0x10
[  138.487987][ T6514]  ___sys_sendmsg+0x134/0x1d0
[  138.488033][ T6514]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.488115][ T6514]  ? __pfx___might_resched+0x10/0x10
[  138.488168][ T6514]  __sys_sendmmsg+0x200/0x420
[  138.488216][ T6514]  ? __pfx___sys_sendmmsg+0x10/0x10
[  138.488304][ T6514]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  138.488368][ T6514]  ? fput+0x70/0xf0
[  138.488396][ T6514]  ? ksys_write+0x1b9/0x240
[  138.488442][ T6514]  ? __pfx_ksys_write+0x10/0x10
[  138.488484][ T6514]  ? rcu_is_watching+0x12/0xc0
[  138.488529][ T6514]  __x64_sys_sendmmsg+0x9c/0x100
[  138.488570][ T6514]  ? lockdep_hardirqs_on+0x7c/0x110
[  138.488615][ T6514]  do_syscall_64+0xcd/0x260
[  138.488664][ T6514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.488696][ T6514] RIP: 0033:0x7fc98ef8e169
[  138.488720][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.488749][ T6514] RSP: 002b:00007fc98fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  138.488778][ T6514] RAX: ffffffffffffffda RBX: 00007fc98f1b5fa0 RCX: 00007fc98ef8e169
[  138.488798][ T6514] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  138.488816][ T6514] RBP: 00007fc98fd37090 R08: 0000000000000000 R09: 0000000000000000
[  138.488833][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.488850][ T6514] R13: 0000000000000000 R14: 00007fc98f1b5fa0 R15: 00007ffe97efdbe8
[  138.488888][ T6514]  </TASK>
[  139.288543][ T6520] netlink: 'syz.0.132': attribute type 2 has an invalid length.
[  140.186914][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.137'.
[  140.262590][ T6535] random: crng reseeded on system resumption
[  140.753177][ T6562] netlink: 'syz.3.143': attribute type 2 has an invalid length.
[  141.886498][ T6578] tipc: Started in network mode
[  141.910507][ T6578] tipc: Node identity ee00, cluster identity 4711
[  141.933292][ T6578] tipc: Node number set to 60928
[  142.319146][ T6568] bridge0: port 3(team0) entered blocking state
[  142.325668][ T6568] bridge0: port 3(team0) entered disabled state
[  142.398506][ T6568] team0: entered allmulticast mode
[  142.403897][ T6568] team_slave_0: entered allmulticast mode
[  142.410624][ T6568] team_slave_1: entered allmulticast mode
[  142.450788][ T6568] team0: entered promiscuous mode
[  142.516151][ T6568] team_slave_0: entered promiscuous mode
[  142.587810][ T6568] team_slave_1: entered promiscuous mode
[  142.658010][ T6568] bridge0: port 3(team0) entered blocking state
[  142.664701][ T6568] bridge0: port 3(team0) entered forwarding state
[  142.743209][ T6602] FAULT_INJECTION: forcing a failure.
[  142.743209][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.827431][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.3.152 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  142.827483][ T6602] Tainted: [I]=FIRMWARE_WORKAROUND
[  142.827494][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  142.827512][ T6602] Call Trace:
[  142.827526][ T6602]  <TASK>
[  142.827538][ T6602]  dump_stack_lvl+0x16c/0x1f0
[  142.827588][ T6602]  should_fail_ex+0x512/0x640
[  142.827630][ T6602]  _copy_from_user+0x2e/0xd0
[  142.827672][ T6602]  copy_msghdr_from_user+0x98/0x160
[  142.827715][ T6602]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  142.827764][ T6602]  ? kfree+0x252/0x4d0
[  142.827801][ T6602]  ? __pfx__kstrtoull+0x10/0x10
[  142.827867][ T6602]  ___sys_sendmsg+0xfe/0x1d0
[  142.827911][ T6602]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.827991][ T6602]  ? __pfx___might_resched+0x10/0x10
[  142.828046][ T6602]  __sys_sendmmsg+0x200/0x420
[  142.828094][ T6602]  ? __pfx___sys_sendmmsg+0x10/0x10
[  142.828150][ T6602]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  142.828217][ T6602]  ? fput+0x70/0xf0
[  142.828248][ T6602]  ? ksys_write+0x1b9/0x240
[  142.828292][ T6602]  ? __pfx_ksys_write+0x10/0x10
[  142.828334][ T6602]  ? rcu_is_watching+0x12/0xc0
[  142.828380][ T6602]  __x64_sys_sendmmsg+0x9c/0x100
[  142.828422][ T6602]  ? lockdep_hardirqs_on+0x7c/0x110
[  142.828466][ T6602]  do_syscall_64+0xcd/0x260
[  142.828518][ T6602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.828550][ T6602] RIP: 0033:0x7f37da78e169
[  142.828574][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.828604][ T6602] RSP: 002b:00007f37db558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  142.828633][ T6602] RAX: ffffffffffffffda RBX: 00007f37da9b5fa0 RCX: 00007f37da78e169
[  142.828654][ T6602] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  142.828673][ T6602] RBP: 00007f37db558090 R08: 0000000000000000 R09: 0000000000000000
[  142.828692][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.828710][ T6602] R13: 0000000000000000 R14: 00007f37da9b5fa0 R15: 00007ffe2ba0f728
[  142.828750][ T6602]  </TASK>
[  144.107122][ T6617] FAULT_INJECTION: forcing a failure.
[  144.107122][ T6617] name failslab, interval 1, probability 0, space 0, times 0
[  144.208485][ T6618] netlink: 342 bytes leftover after parsing attributes in process `syz.2.156'.
[  144.217827][ T6617] CPU: 1 UID: 0 PID: 6617 Comm: syz.2.156 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  144.217879][ T6617] Tainted: [I]=FIRMWARE_WORKAROUND
[  144.217891][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.217910][ T6617] Call Trace:
[  144.217920][ T6617]  <TASK>
[  144.217932][ T6617]  dump_stack_lvl+0x16c/0x1f0
[  144.217988][ T6617]  should_fail_ex+0x512/0x640
[  144.218022][ T6617]  ? __kmalloc_noprof+0xbf/0x510
[  144.218074][ T6617]  ? __register_sysctl_table+0xb3/0x1900
[  144.218110][ T6617]  should_failslab+0xc2/0x120
[  144.218140][ T6617]  __kmalloc_noprof+0xd2/0x510
[  144.218198][ T6617]  __register_sysctl_table+0xb3/0x1900
[  144.218235][ T6617]  ? is_module_address+0x5f/0xf0
[  144.218272][ T6617]  ? __pfx___register_sysctl_table+0x10/0x10
[  144.218306][ T6617]  ? is_module_address+0x69/0xf0
[  144.218335][ T6617]  ? register_net_sysctl_sz+0x228/0x3e0
[  144.218400][ T6617]  mpls_dev_sysctl_register+0x185/0x2a0
[  144.218447][ T6617]  ? pcpu_alloc_noprof+0x1f5/0x1470
[  144.218496][ T6617]  ? __pfx_mpls_dev_sysctl_register+0x10/0x10
[  144.218562][ T6617]  mpls_dev_notify+0x4ab/0xa20
[  144.218617][ T6617]  notifier_call_chain+0xb9/0x410
[  144.218664][ T6617]  ? __pfx_mpls_dev_notify+0x10/0x10
[  144.218729][ T6617]  call_netdevice_notifiers_info+0xbe/0x140
[  144.218789][ T6617]  register_netdevice+0x182e/0x2270
[  144.218844][ T6617]  ? __pfx_register_netdevice+0x10/0x10
[  144.218905][ T6617]  __ip_tunnel_create+0x4a8/0x680
[  144.218956][ T6617]  ? __pfx___ip_tunnel_create+0x10/0x10
[  144.219017][ T6617]  ip_tunnel_init_net+0x22f/0x7d0
[  144.219071][ T6617]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  144.219129][ T6617]  ? trace_kmalloc+0x2b/0xd0
[  144.219173][ T6617]  ? lockdep_init_map_type+0x5c/0x280
[  144.219208][ T6617]  ? __pfx_ipgre_init_net+0x10/0x10
[  144.219245][ T6617]  ops_init+0x1df/0x5f0
[  144.219293][ T6617]  setup_net+0x21e/0x850
[  144.219340][ T6617]  ? __pfx_setup_net+0x10/0x10
[  144.219382][ T6617]  ? lockdep_init_map_type+0x5c/0x280
[  144.219411][ T6617]  ? __pfx_down_read_killable+0x10/0x10
[  144.219447][ T6617]  ? debug_mutex_init+0x37/0x70
[  144.219490][ T6617]  copy_net_ns+0x2a6/0x5f0
[  144.219542][ T6617]  create_new_namespaces+0x3ea/0xad0
[  144.219597][ T6617]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  144.219646][ T6617]  ksys_unshare+0x45b/0xa40
[  144.219701][ T6617]  ? __pfx_ksys_unshare+0x10/0x10
[  144.219748][ T6617]  ? xfd_validate_state+0x5d/0x180
[  144.219785][ T6617]  ? rcu_is_watching+0x12/0xc0
[  144.219836][ T6617]  __x64_sys_unshare+0x31/0x40
[  144.219883][ T6617]  do_syscall_64+0xcd/0x260
[  144.219932][ T6617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.219964][ T6617] RIP: 0033:0x7f739bd8e169
[  144.219989][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.220018][ T6617] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  144.220047][ T6617] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  144.220067][ T6617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  144.220085][ T6617] RBP: 00007f739be10a68 R08: 0000000000000000 R09: 0000000000000000
[  144.220103][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.220121][ T6617] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  144.220162][ T6617]  </TASK>
[  144.225715][ T6599] random: crng reseeded on system resumption
[  146.675170][ T6651] tipc: Started in network mode
[  146.693045][ T6651] tipc: Node identity ee00, cluster identity 4711
[  146.715358][ T6651] tipc: Node number set to 60928
[  147.981969][ T6668] FAULT_INJECTION: forcing a failure.
[  147.981969][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.027846][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.2.172 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  148.027897][ T6668] Tainted: [I]=FIRMWARE_WORKAROUND
[  148.027908][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  148.027926][ T6668] Call Trace:
[  148.027936][ T6668]  <TASK>
[  148.027948][ T6668]  dump_stack_lvl+0x16c/0x1f0
[  148.028000][ T6668]  should_fail_ex+0x512/0x640
[  148.028042][ T6668]  _copy_to_user+0x32/0xd0
[  148.028085][ T6668]  simple_read_from_buffer+0xcb/0x170
[  148.028132][ T6668]  proc_fail_nth_read+0x197/0x270
[  148.028177][ T6668]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  148.028228][ T6668]  ? rw_verify_area+0xcf/0x680
[  148.028265][ T6668]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  148.028309][ T6668]  vfs_read+0x1de/0xc70
[  148.028357][ T6668]  ? __pfx___mutex_lock+0x10/0x10
[  148.028412][ T6668]  ? __pfx_vfs_read+0x10/0x10
[  148.028466][ T6668]  ? __fget_files+0x20e/0x3c0
[  148.028524][ T6668]  ksys_read+0x12a/0x240
[  148.028566][ T6668]  ? __pfx_ksys_read+0x10/0x10
[  148.028606][ T6668]  ? rcu_is_watching+0x12/0xc0
[  148.028658][ T6668]  do_syscall_64+0xcd/0x260
[  148.028708][ T6668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.028740][ T6668] RIP: 0033:0x7f739bd8cb7c
[  148.028764][ T6668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  148.028793][ T6668] RSP: 002b:00007f739cb84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  148.028822][ T6668] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8cb7c
[  148.028843][ T6668] RDX: 000000000000000f RSI: 00007f739cb840a0 RDI: 0000000000000004
[  148.028861][ T6668] RBP: 00007f739cb84090 R08: 0000000000000000 R09: 0000000000000000
[  148.028880][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.028898][ T6668] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  148.028940][ T6668]  </TASK>
[  149.332345][ T6683] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[  149.347599][ T6683] netlink: 230 bytes leftover after parsing attributes in process `syz.1.176'.
[  150.502171][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.183'.
[  150.531350][ T6713] Invalid ELF header magic: != ELF
[  150.719742][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'.
[  151.713691][ T6723] netlink: 'syz.2.188': attribute type 2 has an invalid length.
[  151.732396][ T6723] FAULT_INJECTION: forcing a failure.
[  151.732396][ T6723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.751141][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.2.188 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  151.751189][ T6723] Tainted: [I]=FIRMWARE_WORKAROUND
[  151.751199][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.751214][ T6723] Call Trace:
[  151.751223][ T6723]  <TASK>
[  151.751234][ T6723]  dump_stack_lvl+0x16c/0x1f0
[  151.751283][ T6723]  should_fail_ex+0x512/0x640
[  151.751323][ T6723]  _copy_from_user+0x2e/0xd0
[  151.751361][ T6723]  copy_msghdr_from_user+0x98/0x160
[  151.751403][ T6723]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  151.751462][ T6723]  ___sys_sendmsg+0xfe/0x1d0
[  151.751504][ T6723]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.751591][ T6723]  __sys_sendmsg+0x16d/0x220
[  151.751631][ T6723]  ? __pfx___sys_sendmsg+0x10/0x10
[  151.751682][ T6723]  ? rcu_is_watching+0x12/0xc0
[  151.751723][ T6723]  do_syscall_64+0xcd/0x260
[  151.751765][ T6723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.751791][ T6723] RIP: 0033:0x7f739bd8e169
[  151.751811][ T6723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.751834][ T6723] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.751859][ T6723] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  151.751877][ T6723] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000008
[  151.751895][ T6723] RBP: 00007f739cb84090 R08: 0000000000000000 R09: 0000000000000000
[  151.751913][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.751931][ T6723] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  151.751967][ T6723]  </TASK>
[  151.956075][ T6726] netlink: 'syz.0.187': attribute type 2 has an invalid length.
[  152.548211][ T6737] kAFS: Invalid Command on /proc/fs/afs/cells file
[  152.627775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.638151][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  153.426182][ T6732] random: crng reseeded on system resumption
[  154.236613][ T6754] could not allocate digest TFM handle 
[  154.713472][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'.
[  154.893305][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'.
[  155.023402][ T6771] can: request_module (can-proto-3) failed.
[  155.369406][ T6749] syz.1.193 uses obsolete (PF_INET,SOCK_PACKET)
[  155.480905][ T6749] ptrace attach of "./syz-executor exec"[5845] was attempted by ""[6749]
[  155.597504][ T6778] can: request_module (can-proto-3) failed.
[  156.221296][ T6792] FAULT_INJECTION: forcing a failure.
[  156.221296][ T6792] name failslab, interval 1, probability 0, space 0, times 0
[  156.272048][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.2.198 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  156.272099][ T6792] Tainted: [I]=FIRMWARE_WORKAROUND
[  156.272110][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.272128][ T6792] Call Trace:
[  156.272137][ T6792]  <TASK>
[  156.272149][ T6792]  dump_stack_lvl+0x16c/0x1f0
[  156.272199][ T6792]  should_fail_ex+0x512/0x640
[  156.272234][ T6792]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  156.272288][ T6792]  should_failslab+0xc2/0x120
[  156.272317][ T6792]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  156.272366][ T6792]  ? __alloc_skb+0x2b2/0x380
[  156.272419][ T6792]  __alloc_skb+0x2b2/0x380
[  156.272462][ T6792]  ? __pfx___alloc_skb+0x10/0x10
[  156.272506][ T6792]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  156.272549][ T6792]  ? __lock_acquire+0xaa4/0x1ba0
[  156.272603][ T6792]  netlink_alloc_large_skb+0x69/0x130
[  156.272651][ T6792]  netlink_sendmsg+0x6a1/0xdd0
[  156.272705][ T6792]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.272767][ T6792]  ____sys_sendmsg+0xa95/0xc70
[  156.272799][ T6792]  ? copy_msghdr_from_user+0x10a/0x160
[  156.272841][ T6792]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.272890][ T6792]  ___sys_sendmsg+0x134/0x1d0
[  156.272935][ T6792]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.273027][ T6792]  __sys_sendmsg+0x16d/0x220
[  156.273069][ T6792]  ? __pfx___sys_sendmsg+0x10/0x10
[  156.273138][ T6792]  do_syscall_64+0xcd/0x260
[  156.273188][ T6792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.273220][ T6792] RIP: 0033:0x7f739bd8e169
[  156.273243][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.273273][ T6792] RSP: 002b:00007f739cb63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.273302][ T6792] RAX: ffffffffffffffda RBX: 00007f739bfb6080 RCX: 00007f739bd8e169
[  156.273322][ T6792] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000008
[  156.273341][ T6792] RBP: 00007f739cb63090 R08: 0000000000000000 R09: 0000000000000000
[  156.273360][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.273379][ T6792] R13: 0000000000000000 R14: 00007f739bfb6080 R15: 00007ffd6e290e48
[  156.273435][ T6792]  </TASK>
[  156.580697][ T6791] netlink: 'syz.2.198': attribute type 2 has an invalid length.
[  156.961311][ T6796] device-mapper: ioctl: Invalid ioctl structure: name ��������, dev 400008000010006

syzkaller
syzkaller login: [  159.031541][ T6824] bridge0: port 3(team0) entered blocking state
[  159.052481][ T6824] bridge0: port 3(team0) entered disabled state
[  159.122302][ T6824] team0: entered allmulticast mode
[  159.128956][ T6824] team_slave_0: entered allmulticast mode
[  159.134745][ T6824] team_slave_1: entered allmulticast mode
[  159.143708][ T6824] team0: entered promiscuous mode
[  159.149867][ T6824] team_slave_0: entered promiscuous mode
[  159.155787][ T6824] team_slave_1: entered promiscuous mode
[  159.163495][ T6824] bridge0: port 3(team0) entered blocking state
[  159.169971][ T6824] bridge0: port 3(team0) entered forwarding state
[  159.585135][ T6839] netlink: 342 bytes leftover after parsing attributes in process `syz.1.208'.
[  159.810690][ T6832] FAULT_INJECTION: forcing a failure.
[  159.810690][ T6832] name failslab, interval 1, probability 0, space 0, times 0
[  159.823739][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.1.208 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  159.823786][ T6832] Tainted: [I]=FIRMWARE_WORKAROUND
[  159.823796][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  159.823813][ T6832] Call Trace:
[  159.823822][ T6832]  <TASK>
[  159.823832][ T6832]  dump_stack_lvl+0x16c/0x1f0
[  159.823880][ T6832]  should_fail_ex+0x512/0x640
[  159.823911][ T6832]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  159.823958][ T6832]  should_failslab+0xc2/0x120
[  159.823983][ T6832]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  159.824027][ T6832]  ? __kernfs_new_node+0xd2/0x8a0
[  159.824076][ T6832]  __kernfs_new_node+0xd2/0x8a0
[  159.824123][ T6832]  ? __pfx___kernfs_new_node+0x10/0x10
[  159.824175][ T6832]  ? find_held_lock+0x2b/0x80
[  159.824211][ T6832]  ? kernfs_root+0xee/0x2a0
[  159.824270][ T6832]  kernfs_new_node+0x13c/0x1e0
[  159.824308][ T6832]  __kernfs_create_file+0x53/0x350
[  159.824348][ T6832]  sysfs_add_file_mode_ns+0x207/0x3c0
[  159.824398][ T6832]  sysfs_merge_group+0x1aa/0x340
[  159.824425][ T6832]  ? __pfx_sysfs_merge_group+0x10/0x10
[  159.824456][ T6832]  ? __pfx_dev_add_physical_location+0x10/0x10
[  159.824501][ T6832]  ? bus_to_subsys+0x12d/0x160
[  159.824538][ T6832]  dpm_sysfs_add+0x237/0x280
[  159.824565][ T6832]  device_add+0x9a6/0x1a70
[  159.824597][ T6832]  ? __pfx_device_add+0x10/0x10
[  159.824625][ T6832]  ? lockdep_init_map_type+0x5c/0x280
[  159.824652][ T6832]  ? __init_waitqueue_head+0xca/0x150
[  159.824700][ T6832]  netdev_register_kobject+0x182/0x3a0
[  159.824750][ T6832]  register_netdevice+0x13dc/0x2270
[  159.824797][ T6832]  ? __pfx_register_netdevice+0x10/0x10
[  159.824849][ T6832]  __ip_tunnel_create+0x4a8/0x680
[  159.824892][ T6832]  ? __pfx___ip_tunnel_create+0x10/0x10
[  159.824943][ T6832]  ip_tunnel_init_net+0x22f/0x7d0
[  159.824987][ T6832]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  159.825037][ T6832]  ? trace_kmalloc+0x2b/0xd0
[  159.825065][ T6832]  ? lockdep_init_map_type+0x5c/0x280
[  159.825095][ T6832]  ? __pfx_ipgre_init_net+0x10/0x10
[  159.825128][ T6832]  ops_init+0x1df/0x5f0
[  159.825170][ T6832]  setup_net+0x21e/0x850
[  159.825211][ T6832]  ? __pfx_setup_net+0x10/0x10
[  159.825248][ T6832]  ? lockdep_init_map_type+0x5c/0x280
[  159.825281][ T6832]  ? __pfx_down_read_killable+0x10/0x10
[  159.825312][ T6832]  ? debug_mutex_init+0x37/0x70
[  159.825351][ T6832]  copy_net_ns+0x2a6/0x5f0
[  159.825398][ T6832]  create_new_namespaces+0x3ea/0xad0
[  159.825446][ T6832]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  159.825489][ T6832]  ksys_unshare+0x45b/0xa40
[  159.825532][ T6832]  ? __pfx_ksys_unshare+0x10/0x10
[  159.825572][ T6832]  ? xfd_validate_state+0x5d/0x180
[  159.825605][ T6832]  ? rcu_is_watching+0x12/0xc0
[  159.825647][ T6832]  __x64_sys_unshare+0x31/0x40
[  159.825689][ T6832]  do_syscall_64+0xcd/0x260
[  159.825733][ T6832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.825760][ T6832] RIP: 0033:0x7fed2ef8e169
[  159.825782][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.825810][ T6832] RSP: 002b:00007fed2fd23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  159.825836][ T6832] RAX: ffffffffffffffda RBX: 00007fed2f1b5fa0 RCX: 00007fed2ef8e169
[  159.825854][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  159.825871][ T6832] RBP: 00007fed2f010a68 R08: 0000000000000000 R09: 0000000000000000
[  159.825887][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.825904][ T6832] R13: 0000000000000000 R14: 00007fed2f1b5fa0 R15: 00007ffc906ae1d8
[  159.825940][ T6832]  </TASK>
[  162.082713][ T6870] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  163.834972][ T6885] random: crng reseeded on system resumption
[  163.913277][ T6886] bridge0: port 3(team0) entered blocking state
[  163.930156][ T6886] bridge0: port 3(team0) entered disabled state
[  163.936725][ T6886] team0: entered allmulticast mode
[  164.007584][ T6886] team_slave_0: entered allmulticast mode
[  164.013402][ T6886] team_slave_1: entered allmulticast mode
[  164.050946][ T6886] team0: entered promiscuous mode
[  164.077644][ T6886] team_slave_0: entered promiscuous mode
[  164.090668][ T6886] team_slave_1: entered promiscuous mode
[  164.105362][ T6886] bridge0: port 3(team0) entered blocking state
[  164.111826][ T6886] bridge0: port 3(team0) entered forwarding state
[  164.150066][ T6906] kAFS: Invalid Command on /proc/fs/afs/cells file
[  165.069464][ T6915] netlink: 326 bytes leftover after parsing attributes in process `syz.3.230'.
[  165.137971][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.147062][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.475700][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[  166.989402][ T6943] Invalid ELF header magic: != ELF
[  167.185183][ T6952] netlink: 21 bytes leftover after parsing attributes in process `syz.0.233'.
[  167.196982][ T6953] netlink: 21 bytes leftover after parsing attributes in process `syz.0.233'.
[  167.406037][ T6957] netlink: 'syz.2.240': attribute type 2 has an invalid length.
[  167.465876][ T6957] FAULT_INJECTION: forcing a failure.
[  167.465876][ T6957] name failslab, interval 1, probability 0, space 0, times 0
[  167.478821][ T6957] CPU: 1 UID: 0 PID: 6957 Comm: syz.2.240 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  167.478870][ T6957] Tainted: [I]=FIRMWARE_WORKAROUND
[  167.478882][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  167.478900][ T6957] Call Trace:
[  167.478910][ T6957]  <TASK>
[  167.478921][ T6957]  dump_stack_lvl+0x16c/0x1f0
[  167.478972][ T6957]  should_fail_ex+0x512/0x640
[  167.479015][ T6957]  should_failslab+0xc2/0x120
[  167.479045][ T6957]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  167.479093][ T6957]  ? skb_clone+0x190/0x3f0
[  167.479135][ T6957]  ? __lock_acquire+0x5ca/0x1ba0
[  167.479190][ T6957]  skb_clone+0x190/0x3f0
[  167.479233][ T6957]  dev_queue_xmit_nit+0x3e7/0xca0
[  167.479290][ T6957]  dev_hard_start_xmit+0x5b6/0x740
[  167.479325][ T6957]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  167.479386][ T6957]  __dev_queue_xmit+0x7eb/0x43e0
[  167.479439][ T6957]  ? __pfx___dev_queue_xmit+0x10/0x10
[  167.479509][ T6957]  ? __asan_memcpy+0x3c/0x60
[  167.479552][ T6957]  ? __asan_memcpy+0x3c/0x60
[  167.479594][ T6957]  ? __skb_clone+0x570/0x760
[  167.479640][ T6957]  netlink_deliver_tap+0xa87/0xd30
[  167.479695][ T6957]  netlink_unicast+0x5df/0x7f0
[  167.479747][ T6957]  ? __pfx_netlink_unicast+0x10/0x10
[  167.479792][ T6957]  ? __lock_acquire+0xaa4/0x1ba0
[  167.479853][ T6957]  netlink_sendmsg+0x8d1/0xdd0
[  167.479908][ T6957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.479971][ T6957]  ____sys_sendmsg+0xa95/0xc70
[  167.480002][ T6957]  ? copy_msghdr_from_user+0x10a/0x160
[  167.480044][ T6957]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.480095][ T6957]  ___sys_sendmsg+0x134/0x1d0
[  167.480140][ T6957]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.480237][ T6957]  __sys_sendmsg+0x16d/0x220
[  167.480280][ T6957]  ? __pfx___sys_sendmsg+0x10/0x10
[  167.480345][ T6957]  ? rcu_is_watching+0x12/0xc0
[  167.480396][ T6957]  do_syscall_64+0xcd/0x260
[  167.480446][ T6957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.480478][ T6957] RIP: 0033:0x7f739bd8e169
[  167.480502][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.480531][ T6957] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.480559][ T6957] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  167.480579][ T6957] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000008
[  167.480599][ T6957] RBP: 00007f739cb84090 R08: 0000000000000000 R09: 0000000000000000
[  167.480619][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.480637][ T6957] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  167.480679][ T6957]  </TASK>
[  168.407824][ T6965] kAFS: Invalid Command on /proc/fs/afs/cells file
[  168.434735][   T30] audit: type=1800 audit(1744861798.692:2): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name=07 dev="tmpfs" ino=346 res=0 errno=0
[  169.261776][ T6975] netlink: 'syz.1.246': attribute type 1 has an invalid length.
[  169.282610][ T6975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'.
[  169.368333][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  169.407405][ T6975] netlink: 'syz.1.246': attribute type 1 has an invalid length.
[  171.023933][ T6994] 
[  171.612629][ T6985] random: crng reseeded on system resumption
[  171.842001][ T7002] netlink: 'syz.0.252': attribute type 2 has an invalid length.
[  172.400978][ T7013] FAULT_INJECTION: forcing a failure.
[  172.400978][ T7013] name failslab, interval 1, probability 0, space 0, times 0
[  172.455508][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.1.255 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  172.455563][ T7013] Tainted: [I]=FIRMWARE_WORKAROUND
[  172.455575][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  172.455594][ T7013] Call Trace:
[  172.455604][ T7013]  <TASK>
[  172.455616][ T7013]  dump_stack_lvl+0x16c/0x1f0
[  172.455671][ T7013]  should_fail_ex+0x512/0x640
[  172.455707][ T7013]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  172.455756][ T7013]  should_failslab+0xc2/0x120
[  172.455787][ T7013]  __kmalloc_cache_noprof+0x6a/0x3e0
[  172.455834][ T7013]  ? open_substream+0xec/0x9b0
[  172.455876][ T7013]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.455923][ T7013]  open_substream+0xec/0x9b0
[  172.455961][ T7013]  rawmidi_open_priv+0x543/0x6e0
[  172.456006][ T7013]  snd_rawmidi_open+0x4cc/0xbf0
[  172.456053][ T7013]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  172.456093][ T7013]  ? __pfx_default_wake_function+0x10/0x10
[  172.456142][ T7013]  ? kobject_get_unless_zero+0x156/0x1e0
[  172.456198][ T7013]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  172.456236][ T7013]  snd_open+0x1fe/0x450
[  172.456283][ T7013]  ? __pfx_snd_open+0x10/0x10
[  172.456328][ T7013]  chrdev_open+0x231/0x6a0
[  172.456378][ T7013]  ? __pfx_apparmor_file_open+0x10/0x10
[  172.456420][ T7013]  ? __pfx_chrdev_open+0x10/0x10
[  172.456474][ T7013]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  172.456528][ T7013]  do_dentry_open+0x741/0x1c10
[  172.456575][ T7013]  ? __pfx_chrdev_open+0x10/0x10
[  172.456634][ T7013]  vfs_open+0x82/0x3f0
[  172.456672][ T7013]  path_openat+0x1e5e/0x2d40
[  172.456747][ T7013]  ? __pfx_path_openat+0x10/0x10
[  172.456805][ T7013]  do_filp_open+0x20b/0x470
[  172.456859][ T7013]  ? __pfx_do_filp_open+0x10/0x10
[  172.456956][ T7013]  ? alloc_fd+0x471/0x7d0
[  172.457013][ T7013]  do_sys_openat2+0x11b/0x1d0
[  172.457047][ T7013]  ? __pfx_do_sys_openat2+0x10/0x10
[  172.457099][ T7013]  __x64_sys_openat+0x174/0x210
[  172.457136][ T7013]  ? __pfx___x64_sys_openat+0x10/0x10
[  172.457174][ T7013]  ? rcu_is_watching+0x12/0xc0
[  172.457226][ T7013]  do_syscall_64+0xcd/0x260
[  172.457280][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.457311][ T7013] RIP: 0033:0x7fed2ef8e169
[  172.457335][ T7013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.457365][ T7013] RSP: 002b:00007fed2fd23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  172.457395][ T7013] RAX: ffffffffffffffda RBX: 00007fed2f1b5fa0 RCX: 00007fed2ef8e169
[  172.457415][ T7013] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  172.457436][ T7013] RBP: 00007fed2f010a68 R08: 0000000000000000 R09: 0000000000000000
[  172.457456][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.457475][ T7013] R13: 0000000000000000 R14: 00007fed2f1b5fa0 R15: 00007ffc906ae1d8
[  172.457516][ T7013]  </TASK>
[  173.054247][   T30] audit: type=1800 audit(1744861803.312:3): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file0" dev="tmpfs" ino=297 res=0 errno=0
[  173.342249][ T7012] FAULT_INJECTION: forcing a failure.
[  173.342249][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.355688][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.0.254 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  173.355731][ T7012] Tainted: [I]=FIRMWARE_WORKAROUND
[  173.355742][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  173.355756][ T7012] Call Trace:
[  173.355765][ T7012]  <TASK>
[  173.355776][ T7012]  dump_stack_lvl+0x16c/0x1f0
[  173.355825][ T7012]  should_fail_ex+0x512/0x640
[  173.355875][ T7012]  _copy_to_iter+0x2a4/0x15a0
[  173.355917][ T7012]  ? chacha_block_generic+0x189/0x260
[  173.355947][ T7012]  ? __pfx__copy_to_iter+0x10/0x10
[  173.355990][ T7012]  ? __pfx___might_resched+0x10/0x10
[  173.356030][ T7012]  ? crng_make_state+0x48e/0x6d0
[  173.356070][ T7012]  get_random_bytes_user+0x17f/0x3c0
[  173.356104][ T7012]  ? __pfx_get_random_bytes_user+0x10/0x10
[  173.356139][ T7012]  ? do_writev+0x218/0x330
[  173.356190][ T7012]  ? do_futex+0x122/0x350
[  173.356245][ T7012]  ? import_ubuf+0x1b6/0x220
[  173.356285][ T7012]  __x64_sys_getrandom+0x183/0x290
[  173.356326][ T7012]  ? __pfx___x64_sys_getrandom+0x10/0x10
[  173.356368][ T7012]  ? xfd_validate_state+0x5d/0x180
[  173.356408][ T7012]  ? rcu_is_watching+0x12/0xc0
[  173.356457][ T7012]  do_syscall_64+0xcd/0x260
[  173.356507][ T7012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.356540][ T7012] RIP: 0033:0x7fc98ef8e169
[  173.356565][ T7012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.356595][ T7012] RSP: 002b:00007fc98fd37038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[  173.356624][ T7012] RAX: ffffffffffffffda RBX: 00007fc98f1b5fa0 RCX: 00007fc98ef8e169
[  173.356644][ T7012] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000
[  173.356663][ T7012] RBP: 00007fc98f010a68 R08: 0000000000000000 R09: 0000000000000000
[  173.356681][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.356698][ T7012] R13: 0000000000000000 R14: 00007fc98f1b5fa0 R15: 00007ffe97efdbe8
[  173.356737][ T7012]  </TASK>
[  174.896371][ T7029] Invalid ELF header magic: != ELF
[  175.944170][ T7032] kexec: Could not allocate control_code_buffer
[  177.688449][ T7066] Invalid ELF header magic: != ELF
[  178.187811][ T7078] openvswitch: netlink: Key type 287 is out of range max 32
[  178.721944][ T7080] random: crng reseeded on system resumption
[  179.245810][ T7094] FAULT_INJECTION: forcing a failure.
[  179.245810][ T7094] name failslab, interval 1, probability 0, space 0, times 0
[  179.282520][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.0.274 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  179.282575][ T7094] Tainted: [I]=FIRMWARE_WORKAROUND
[  179.282587][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  179.282605][ T7094] Call Trace:
[  179.282615][ T7094]  <TASK>
[  179.282627][ T7094]  dump_stack_lvl+0x16c/0x1f0
[  179.282681][ T7094]  should_fail_ex+0x512/0x640
[  179.282718][ T7094]  ? __kmalloc_noprof+0xbf/0x510
[  179.282772][ T7094]  ? ops_init+0x77/0x5f0
[  179.282814][ T7094]  should_failslab+0xc2/0x120
[  179.282844][ T7094]  __kmalloc_noprof+0xd2/0x510
[  179.282902][ T7094]  ops_init+0x77/0x5f0
[  179.282951][ T7094]  setup_net+0x21e/0x850
[  179.283000][ T7094]  ? __pfx_setup_net+0x10/0x10
[  179.283042][ T7094]  ? lockdep_init_map_type+0x5c/0x280
[  179.283074][ T7094]  ? __pfx_down_read_killable+0x10/0x10
[  179.283110][ T7094]  ? debug_mutex_init+0x37/0x70
[  179.283155][ T7094]  copy_net_ns+0x2a6/0x5f0
[  179.283208][ T7094]  create_new_namespaces+0x3ea/0xad0
[  179.283274][ T7094]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  179.283325][ T7094]  ksys_unshare+0x45b/0xa40
[  179.283376][ T7094]  ? __pfx_ksys_unshare+0x10/0x10
[  179.283423][ T7094]  ? xfd_validate_state+0x5d/0x180
[  179.283461][ T7094]  ? rcu_is_watching+0x12/0xc0
[  179.283511][ T7094]  __x64_sys_unshare+0x31/0x40
[  179.283559][ T7094]  do_syscall_64+0xcd/0x260
[  179.283610][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.283643][ T7094] RIP: 0033:0x7fc98ef8e169
[  179.283669][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.283699][ T7094] RSP: 002b:00007fc98fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  179.283729][ T7094] RAX: ffffffffffffffda RBX: 00007fc98f1b5fa0 RCX: 00007fc98ef8e169
[  179.283750][ T7094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  179.283770][ T7094] RBP: 00007fc98f010a68 R08: 0000000000000000 R09: 0000000000000000
[  179.283790][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.283809][ T7094] R13: 0000000000000000 R14: 00007fc98f1b5fa0 R15: 00007ffe97efdbe8
[  179.283851][ T7094]  </TASK>
[  179.751500][   T30] audit: type=1326 audit(1744861810.022:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7100 comm="syz.0.276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98ef8e169 code=0x0
[  179.908870][ T7109] program syz.2.275 is using a deprecated SCSI ioctl, please convert it to SG_IO

syzkaller
syzkaller login: [  181.757891][ T7128] netlink: 'syz.0.280': attribute type 2 has an invalid length.

syzkaller
syzkaller login: [  184.772496][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  184.977391][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  185.540814][ T7178] random: crng reseeded on system resumption
[  187.087638][ T7196] netlink: 'syz.3.295': attribute type 11 has an invalid length.
[  187.521493][ T7198] Invalid ELF header magic: != ELF

syzkaller
syzkaller login: [  188.127869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  188.663718][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  189.322034][ T7224] FAULT_INJECTION: forcing a failure.
[  189.322034][ T7224] name failslab, interval 1, probability 0, space 0, times 0
[  189.357042][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.2.302 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  189.357095][ T7224] Tainted: [I]=FIRMWARE_WORKAROUND
[  189.357107][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  189.357126][ T7224] Call Trace:
[  189.357136][ T7224]  <TASK>
[  189.357148][ T7224]  dump_stack_lvl+0x16c/0x1f0
[  189.357201][ T7224]  should_fail_ex+0x512/0x640
[  189.357243][ T7224]  ? fs_reclaim_acquire+0xae/0x150
[  189.357287][ T7224]  ? tomoyo_encode2+0x100/0x3e0
[  189.357329][ T7224]  should_failslab+0xc2/0x120
[  189.357361][ T7224]  __kmalloc_noprof+0xd2/0x510
[  189.357409][ T7224]  ? d_absolute_path+0x136/0x1a0
[  189.357453][ T7224]  tomoyo_encode2+0x100/0x3e0
[  189.357504][ T7224]  tomoyo_encode+0x29/0x50
[  189.357547][ T7224]  tomoyo_realpath_from_path+0x18f/0x6e0
[  189.357613][ T7224]  tomoyo_path_number_perm+0x245/0x580
[  189.357650][ T7224]  ? tomoyo_path_number_perm+0x237/0x580
[  189.357692][ T7224]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  189.357774][ T7224]  ? d_alloc_parallel+0x979/0x12e0
[  189.357818][ T7224]  ? current_check_access_path+0x33c/0x460
[  189.357864][ T7224]  ? __pfx_current_check_access_path+0x10/0x10
[  189.357919][ T7224]  tomoyo_path_mknod+0x10c/0x190
[  189.357971][ T7224]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  189.358025][ T7224]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  189.358067][ T7224]  security_path_mknod+0x161/0x310
[  189.358111][ T7224]  lookup_open.isra.0+0xc17/0x1580
[  189.358164][ T7224]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  189.358230][ T7224]  ? __pfx_down_write+0x10/0x10
[  189.358257][ T7224]  ? mnt_get_write_access+0x20c/0x300
[  189.358304][ T7224]  path_openat+0x905/0x2d40
[  189.358370][ T7224]  ? __pfx_path_openat+0x10/0x10
[  189.358429][ T7224]  do_filp_open+0x20b/0x470
[  189.358479][ T7224]  ? __pfx_do_filp_open+0x10/0x10
[  189.358560][ T7224]  ? alloc_fd+0x471/0x7d0
[  189.358624][ T7224]  do_sys_openat2+0x11b/0x1d0
[  189.358658][ T7224]  ? __pfx_do_sys_openat2+0x10/0x10
[  189.358711][ T7224]  __x64_sys_openat+0x174/0x210
[  189.358748][ T7224]  ? __pfx___x64_sys_openat+0x10/0x10
[  189.358787][ T7224]  ? rcu_is_watching+0x12/0xc0
[  189.358841][ T7224]  do_syscall_64+0xcd/0x260
[  189.358892][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.358925][ T7224] RIP: 0033:0x7f739bd8e169
[  189.358951][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.358982][ T7224] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  189.359012][ T7224] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  189.359033][ T7224] RDX: 0000000000040141 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  189.359053][ T7224] RBP: 00007f739be10a68 R08: 0000000000000000 R09: 0000000000000000
[  189.359073][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.359092][ T7224] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  189.359136][ T7224]  </TASK>
[  189.718895][ T7224] ERROR: Out of memory at tomoyo_realpath_from_path.
[  191.701978][ T7226] random: crng reseeded on system resumption
[  192.249881][ T7277] rnbd_client L213: map_device: Parameters missing
[  192.853460][ T7281] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  192.946941][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.315'.
[  193.117868][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  193.445498][ T7296] bond0: option all_slaves_active: invalid value ()
[  193.760357][ T7291] Invalid ELF header magic: != ELF
[  193.953924][ T7304] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  194.023382][ T7304] CIFS mount error: No usable UNC path provided in device string!
[  194.023382][ T7304] 
[  194.045633][ T7304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  195.468116][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[  195.489409][ T7317] netlink: 354 bytes leftover after parsing attributes in process `syz.2.322'.
[  196.740727][ T7342] random: crng reseeded on system resumption
[  198.971148][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'.
[  199.146483][ T7387] netlink: 'syz.2.332': attribute type 2 has an invalid length.
[  199.453449][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  199.466432][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  200.065574][ T7418] Invalid ELF header magic: != ELF
[  200.162243][ T7420] bond0: entered promiscuous mode
[  200.177488][ T7420] bond0: entered allmulticast mode
[  202.811215][ T7482] could not allocate digest TFM handle 
[  203.130963][ T7459] cgroup: fork rejected by pids controller in /syz0
[  204.705367][ T7540] Invalid ELF header magic: != ELF
[  206.260841][ T7564] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[7564]
[  208.144230][ T7608] netlink: 'syz.1.360': attribute type 2 has an invalid length.
[  209.997986][ T7619] random: crng reseeded on system resumption
[  210.229966][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.711466][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.970084][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.024193][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.040735][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.058573][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.072181][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.081312][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  211.291648][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.005992][ T7654] random: crng reseeded on system resumption
[  212.093232][   T13] team0: left allmulticast mode
[  212.111811][   T13] team_slave_0: left allmulticast mode
[  212.133124][   T13] team_slave_1: left allmulticast mode
[  212.153269][   T13] team0: left promiscuous mode
[  212.165533][   T13] team_slave_0: left promiscuous mode
[  212.177099][   T13] team_slave_1: left promiscuous mode
[  212.186463][   T13] bridge0: port 3(team0) entered disabled state
[  212.277910][   T13] bridge_slave_1: left allmulticast mode
[  212.283705][   T13] bridge_slave_1: left promiscuous mode
[  212.291287][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.401210][   T13] bridge_slave_0: left allmulticast mode
[  212.406942][   T13] bridge_slave_0: left promiscuous mode
[  212.468308][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.851170][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'.
[  212.857722][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'.
[  213.127735][ T5861] Bluetooth: hci0: command tx timeout
[  213.380273][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.399580][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.413580][   T13] bond0 (unregistering): Released all slaves
[  213.487841][ T7673] netlink: 'syz.3.370': attribute type 2 has an invalid length.
[  214.014144][ T7655] chnl_net:caif_netlink_parms(): no params data found
[  214.141283][ T5861] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  215.009257][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.027464][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.061658][ T7655] bridge_slave_0: entered allmulticast mode
[  215.078883][ T7655] bridge_slave_0: entered promiscuous mode
[  215.217291][ T5861] Bluetooth: hci0: command tx timeout
[  215.307873][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.315078][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.384069][ T7655] bridge_slave_1: entered allmulticast mode
[  215.409450][ T7655] bridge_slave_1: entered promiscuous mode
[  215.467386][   T13] hsr_slave_0: left promiscuous mode
[  215.493126][   T13] hsr_slave_1: left promiscuous mode
[  215.500904][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.518319][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.543142][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.561983][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.576525][ T7738] random: crng reseeded on system resumption
[  215.646237][   T13] veth1_macvtap: left promiscuous mode
[  215.667534][   T13] veth0_macvtap: left promiscuous mode
[  215.675138][   T13] veth1_vlan: left promiscuous mode
[  215.683618][   T13] veth0_vlan: left promiscuous mode
[  216.436176][   T13] team0 (unregistering): Port device team_slave_1 removed
[  216.474854][   T13] team0 (unregistering): Port device team_slave_0 removed
[  217.002403][ T7744] usb usb15: usbfs: process 7744 (syz.3.381) did not claim interface 0 before use
[  217.055768][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.120026][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.297593][ T5861] Bluetooth: hci0: command tx timeout
[  217.460889][ T7655] team0: Port device team_slave_0 added
[  217.509860][ T7655] team0: Port device team_slave_1 added
[  217.717871][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.725044][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.763574][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.813955][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.832720][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.898216][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.116119][ T7655] hsr_slave_0: entered promiscuous mode
[  218.124162][ T7655] hsr_slave_1: entered promiscuous mode
[  219.305824][ T7794] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  219.367639][ T5861] Bluetooth: hci0: command tx timeout
[  219.457452][ T7796] netlink: 'syz.2.390': attribute type 2 has an invalid length.
[  219.497651][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[  219.557398][ T7805] ceph: Failed to parse sending metrics switch value 'P^'
[  219.835552][ T7805] Invalid ELF header magic: != ELF
[  219.904624][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[  220.039998][ T5861] Bluetooth: hci2: Unable to find connection for big 0xd2
[  220.052367][ T5851] Bluetooth: hci2: Unable to find connection for big 0xd2
[  220.288802][ T7655] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  220.323496][ T7798] random: crng reseeded on system resumption
[  220.346306][ T7655] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  220.366056][ T7655] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  220.400260][ T7655] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  220.614984][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.713268][ T7655] 8021q: adding VLAN 0 to HW filter on device team0
[  220.737951][ T7826] MTRR 1 not used
[  220.785157][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.792417][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.834823][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.842088][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.425511][ T7844] netlink: 302 bytes leftover after parsing attributes in process `syz.3.397'.
[  221.630607][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.670791][ T7850] FAULT_INJECTION: forcing a failure.
[  221.670791][ T7850] name failslab, interval 1, probability 0, space 0, times 0
[  221.697378][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.1.398 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  221.697432][ T7850] Tainted: [I]=FIRMWARE_WORKAROUND
[  221.697443][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  221.697466][ T7850] Call Trace:
[  221.697476][ T7850]  <TASK>
[  221.697487][ T7850]  dump_stack_lvl+0x16c/0x1f0
[  221.697541][ T7850]  should_fail_ex+0x512/0x640
[  221.697585][ T7850]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  221.697640][ T7850]  should_failslab+0xc2/0x120
[  221.697671][ T7850]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  221.697721][ T7850]  ? sk_prot_alloc+0x60/0x2a0
[  221.697777][ T7850]  sk_prot_alloc+0x60/0x2a0
[  221.697829][ T7850]  sk_alloc+0x36/0xc20
[  221.697869][ T7850]  inet_create+0x3a1/0x1090
[  221.697900][ T7850]  ? inet_create+0x93/0x1090
[  221.697939][ T7850]  __sock_create+0x335/0x8d0
[  221.697978][ T7850]  udp_sock_create4+0xa6/0x450
[  221.698024][ T7850]  ? __pfx_udp_sock_create4+0x10/0x10
[  221.698074][ T7850]  ? lockdep_hardirqs_on+0x7c/0x110
[  221.698121][ T7850]  ? crng_make_state+0x48e/0x6d0
[  221.698161][ T7850]  rxrpc_open_socket+0x4f5/0x6b0
[  221.698208][ T7850]  ? __pfx_rxrpc_open_socket+0x10/0x10
[  221.698269][ T7850]  ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10
[  221.698317][ T7850]  ? rcu_is_watching+0x12/0xc0
[  221.698363][ T7850]  rxrpc_lookup_local+0xa01/0x1220
[  221.698414][ T7850]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  221.698464][ T7850]  ? __local_bh_enable_ip+0xa4/0x120
[  221.698512][ T7850]  rxrpc_sendmsg+0x375/0x5f0
[  221.698574][ T7850]  ____sys_sendmsg+0xa95/0xc70
[  221.698607][ T7850]  ? copy_msghdr_from_user+0x10a/0x160
[  221.698650][ T7850]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.698690][ T7850]  ? try_to_wake_up+0xa2f/0x1680
[  221.698739][ T7850]  ___sys_sendmsg+0x134/0x1d0
[  221.698785][ T7850]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.698883][ T7850]  __sys_sendmsg+0x16d/0x220
[  221.698928][ T7850]  ? __pfx___sys_sendmsg+0x10/0x10
[  221.698970][ T7850]  ? __x64_sys_futex+0x1e0/0x4c0
[  221.699029][ T7850]  ? rcu_is_watching+0x12/0xc0
[  221.699081][ T7850]  do_syscall_64+0xcd/0x260
[  221.699133][ T7850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.699166][ T7850] RIP: 0033:0x7fed2ef8e169
[  221.699192][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.699223][ T7850] RSP: 002b:00007fed2fd23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.699254][ T7850] RAX: ffffffffffffffda RBX: 00007fed2f1b5fa0 RCX: 00007fed2ef8e169
[  221.699275][ T7850] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007
[  221.699295][ T7850] RBP: 00007fed2f010a68 R08: 0000000000000000 R09: 0000000000000000
[  221.699314][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.699333][ T7850] R13: 0000000000000000 R14: 00007fed2f1b5fa0 R15: 00007ffc906ae1d8
[  221.699375][ T7850]  </TASK>
[  222.026059][ T7655] veth0_vlan: entered promiscuous mode
[  222.043763][ T7655] veth1_vlan: entered promiscuous mode
[  222.082175][ T7655] veth0_macvtap: entered promiscuous mode
[  222.137097][ T7655] veth1_macvtap: entered promiscuous mode
[  222.310894][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.337895][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.348504][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.360595][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.371137][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.382143][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.396201][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.436917][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.450384][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.461849][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.497386][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.526261][ T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.541966][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.590883][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.662158][ T7655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.700434][ T7655] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.729776][ T7655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.753746][ T7655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.162446][ T7873] Invalid ELF header magic: != ELF
[  223.752854][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.791568][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.871917][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.896964][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.001588][ T7920] i2c i2c-0: delete_device: Extra parameters
[  225.128263][ T7926] random: crng reseeded on system resumption
[  225.304323][ T7930] capability: warning: `syz.0.405' uses 32-bit capabilities (legacy support in use)
[  225.358370][ T7920] i2c i2c-0: delete_device: Can't parse I2C address
[  226.746945][ T7960] netlink: 5108 bytes leftover after parsing attributes in process `syz.1.410'.
[  227.740333][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'.
[  230.625845][ T8041] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  230.645778][ T8041] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  230.684360][ T8041] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  230.690711][ T8041] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  230.783590][ T8041] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  230.798358][ T8041] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  230.885673][ T8041] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  231.379745][ T8069] netlink: 338 bytes leftover after parsing attributes in process `syz.1.427'.
[  231.390205][ T8069] netlink: 338 bytes leftover after parsing attributes in process `syz.1.427'.
[  231.844822][ T8099] Invalid ELF header magic: != ELF
[  232.247648][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout
[  232.647411][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout
[  232.733816][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout
[  232.807396][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  234.813619][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout
[  234.887536][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  235.319273][ T8135] random: crng reseeded on system resumption
[  235.465627][ T8156] FAULT_INJECTION: forcing a failure.
[  235.465627][ T8156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.519607][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.0.442 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  235.519663][ T8156] Tainted: [I]=FIRMWARE_WORKAROUND
[  235.519675][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  235.519693][ T8156] Call Trace:
[  235.519704][ T8156]  <TASK>
[  235.519715][ T8156]  dump_stack_lvl+0x16c/0x1f0
[  235.519766][ T8156]  should_fail_ex+0x512/0x640
[  235.519810][ T8156]  _copy_from_user+0x2e/0xd0
[  235.519850][ T8156]  futex_parse_waitv+0xfc/0x5f0
[  235.519898][ T8156]  ? __pfx_futex_wake_mark+0x10/0x10
[  235.519932][ T8156]  ? __pfx_futex_parse_waitv+0x10/0x10
[  235.519982][ T8156]  ? trace_kmalloc+0x2b/0xd0
[  235.520014][ T8156]  ? __kmalloc_noprof+0x242/0x510
[  235.520103][ T8156]  __do_sys_futex_waitv+0x24d/0x2c0
[  235.520155][ T8156]  ? __pfx___do_sys_futex_waitv+0x10/0x10
[  235.520214][ T8156]  ? rcu_is_watching+0x12/0xc0
[  235.520267][ T8156]  do_syscall_64+0xcd/0x260
[  235.520319][ T8156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.520352][ T8156] RIP: 0033:0x7fc41b38e169
[  235.520377][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.520408][ T8156] RSP: 002b:00007fc41c1be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[  235.520437][ T8156] RAX: ffffffffffffffda RBX: 00007fc41b5b6080 RCX: 00007fc41b38e169
[  235.520458][ T8156] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000
[  235.520476][ T8156] RBP: 00007fc41b410a68 R08: 000000000000623d R09: 0000000000000000
[  235.520496][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.520514][ T8156] R13: 0000000000000000 R14: 00007fc41b5b6080 R15: 00007ffd60fbcc88
[  235.520553][ T8156]  </TASK>
[  236.008373][ T8158] FAULT_INJECTION: forcing a failure.
[  236.008373][ T8158] name failslab, interval 1, probability 0, space 0, times 0
[  236.067333][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.3.441 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  236.067386][ T8158] Tainted: [I]=FIRMWARE_WORKAROUND
[  236.067398][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.067417][ T8158] Call Trace:
[  236.067428][ T8158]  <TASK>
[  236.067440][ T8158]  dump_stack_lvl+0x16c/0x1f0
[  236.067494][ T8158]  should_fail_ex+0x512/0x640
[  236.067531][ T8158]  ? __kmalloc_noprof+0xbf/0x510
[  236.067582][ T8158]  ? lsm_blob_alloc+0x68/0x90
[  236.067630][ T8158]  should_failslab+0xc2/0x120
[  236.067661][ T8158]  __kmalloc_noprof+0xd2/0x510
[  236.067718][ T8158]  lsm_blob_alloc+0x68/0x90
[  236.067767][ T8158]  security_sk_alloc+0x30/0x270
[  236.067803][ T8158]  sk_prot_alloc+0x1c7/0x2a0
[  236.067856][ T8158]  sk_alloc+0x36/0xc20
[  236.067897][ T8158]  __netlink_create+0x5e/0x2c0
[  236.067934][ T8158]  ? __wake_up+0x3f/0x60
[  236.067981][ T8158]  netlink_create+0x39e/0x620
[  236.068022][ T8158]  ? __pfx_genl_bind+0x10/0x10
[  236.068070][ T8158]  ? __pfx_genl_unbind+0x10/0x10
[  236.068123][ T8158]  ? __pfx_genl_release+0x10/0x10
[  236.068157][ T8158]  __sock_create+0x335/0x8d0
[  236.068197][ T8158]  __sys_socket+0x14d/0x260
[  236.068230][ T8158]  ? __pfx___sys_socket+0x10/0x10
[  236.068270][ T8158]  ? rcu_is_watching+0x12/0xc0
[  236.068318][ T8158]  __x64_sys_socket+0x72/0xb0
[  236.068348][ T8158]  ? lockdep_hardirqs_on+0x7c/0x110
[  236.068393][ T8158]  do_syscall_64+0xcd/0x260
[  236.068444][ T8158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.068477][ T8158] RIP: 0033:0x7f37da78e169
[  236.068502][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.068532][ T8158] RSP: 002b:00007f37db516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  236.068563][ T8158] RAX: ffffffffffffffda RBX: 00007f37da9b6160 RCX: 00007f37da78e169
[  236.068584][ T8158] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  236.068604][ T8158] RBP: 00007f37da810a68 R08: 0000000000000000 R09: 0000000000000000
[  236.068623][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.068642][ T8158] R13: 0000000000000000 R14: 00007f37da9b6160 R15: 00007ffe2ba0f728
[  236.068684][ T8158]  </TASK>
[  236.384624][ T8160] FAULT_INJECTION: forcing a failure.
[  236.384624][ T8160] name failslab, interval 1, probability 0, space 0, times 0
[  236.397488][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.0.444 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  236.397542][ T8160] Tainted: [I]=FIRMWARE_WORKAROUND
[  236.397554][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.397573][ T8160] Call Trace:
[  236.397583][ T8160]  <TASK>
[  236.397595][ T8160]  dump_stack_lvl+0x16c/0x1f0
[  236.397648][ T8160]  should_fail_ex+0x512/0x640
[  236.397685][ T8160]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  236.397739][ T8160]  should_failslab+0xc2/0x120
[  236.397769][ T8160]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  236.397817][ T8160]  ? __proc_create+0xc3/0x8c0
[  236.397852][ T8160]  ? __proc_create+0x2ce/0x8c0
[  236.397891][ T8160]  __proc_create+0x2ce/0x8c0
[  236.397928][ T8160]  ? __pfx___proc_create+0x10/0x10
[  236.397978][ T8160]  ? _raw_write_unlock+0x28/0x50
[  236.398023][ T8160]  ? proc_register+0x314/0x5f0
[  236.398064][ T8160]  proc_create_reg+0x7d/0x180
[  236.398101][ T8160]  ? __pfx_can_rcvlist_eff_proc_show+0x10/0x10
[  236.398147][ T8160]  proc_create_net_single+0x86/0x170
[  236.398186][ T8160]  ? __pfx_proc_create_net_single+0x10/0x10
[  236.398237][ T8160]  can_init_proc+0x319/0x4d0
[  236.398280][ T8160]  can_pernet_init+0x1e4/0x370
[  236.398321][ T8160]  ? __pfx_can_pernet_init+0x10/0x10
[  236.398359][ T8160]  ops_init+0x1df/0x5f0
[  236.398411][ T8160]  setup_net+0x21e/0x850
[  236.398462][ T8160]  ? __pfx_setup_net+0x10/0x10
[  236.398505][ T8160]  ? lockdep_init_map_type+0x5c/0x280
[  236.398537][ T8160]  ? __pfx_down_read_killable+0x10/0x10
[  236.398574][ T8160]  ? debug_mutex_init+0x37/0x70
[  236.398619][ T8160]  copy_net_ns+0x2a6/0x5f0
[  236.398673][ T8160]  create_new_namespaces+0x3ea/0xad0
[  236.398731][ T8160]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  236.398782][ T8160]  ksys_unshare+0x45b/0xa40
[  236.398845][ T8160]  ? __pfx_ksys_unshare+0x10/0x10
[  236.398899][ T8160]  ? xfd_validate_state+0x5d/0x180
[  236.398937][ T8160]  ? rcu_is_watching+0x12/0xc0
[  236.398992][ T8160]  __x64_sys_unshare+0x31/0x40
[  236.399041][ T8160]  do_syscall_64+0xcd/0x260
[  236.399093][ T8160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.399124][ T8160] RIP: 0033:0x7fc41b38e169
[  236.399169][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.399201][ T8160] RSP: 002b:00007fc41c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  236.399232][ T8160] RAX: ffffffffffffffda RBX: 00007fc41b5b5fa0 RCX: 00007fc41b38e169
[  236.399254][ T8160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  236.399274][ T8160] RBP: 00007fc41b410a68 R08: 0000000000000000 R09: 0000000000000000
[  236.399294][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.399313][ T8160] R13: 0000000000000000 R14: 00007fc41b5b5fa0 R15: 00007ffd60fbcc88
[  236.399356][ T8160]  </TASK>
[  236.859765][ T8164] delete_channel: no stack
[  237.041231][ T8167] Invalid ELF header magic: != ELF
[  237.053799][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  239.825091][ T8227] netlink: del zone limit has 4 unknown bytes
[  240.977531][ T8235] Invalid ELF header magic: != ELF
[  244.464309][ T8292] Invalid ELF header magic: != ELF
[  244.673866][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'.
[  245.227031][ T8294] bond0: (slave bond_slave_0): Releasing backup interface
[  245.858481][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'.
[  247.741507][ T8348] FAULT_INJECTION: forcing a failure.
[  247.741507][ T8348] name failslab, interval 1, probability 0, space 0, times 0
[  247.804835][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.0.483 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  247.804875][ T8348] Tainted: [I]=FIRMWARE_WORKAROUND
[  247.804884][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  247.804898][ T8348] Call Trace:
[  247.804905][ T8348]  <TASK>
[  247.804917][ T8348]  dump_stack_lvl+0x16c/0x1f0
[  247.804962][ T8348]  should_fail_ex+0x512/0x640
[  247.804987][ T8348]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  247.805027][ T8348]  should_failslab+0xc2/0x120
[  247.805050][ T8348]  __kmalloc_cache_noprof+0x6a/0x3e0
[  247.805081][ T8348]  ? cgroup_file_open+0x93/0x360
[  247.805112][ T8348]  cgroup_file_open+0x93/0x360
[  247.805137][ T8348]  ? __pfx_cgroup_file_open+0x10/0x10
[  247.805166][ T8348]  kernfs_fop_open+0x8c6/0xda0
[  247.805199][ T8348]  ? file_set_fsnotify_mode_from_watchers+0x91/0x640
[  247.805237][ T8348]  do_dentry_open+0x741/0x1c10
[  247.805270][ T8348]  ? __pfx_kernfs_fop_open+0x10/0x10
[  247.805304][ T8348]  vfs_open+0x82/0x3f0
[  247.805330][ T8348]  path_openat+0x1e5e/0x2d40
[  247.805374][ T8348]  ? __pfx_path_openat+0x10/0x10
[  247.805410][ T8348]  ? __lock_acquire+0xaa4/0x1ba0
[  247.805449][ T8348]  do_filp_open+0x20b/0x470
[  247.805484][ T8348]  ? __pfx_do_filp_open+0x10/0x10
[  247.805537][ T8348]  ? _raw_spin_unlock+0x28/0x50
[  247.805565][ T8348]  ? alloc_fd+0x471/0x7d0
[  247.805606][ T8348]  do_sys_openat2+0x11b/0x1d0
[  247.805629][ T8348]  ? __pfx_do_sys_openat2+0x10/0x10
[  247.805665][ T8348]  __x64_sys_open+0x153/0x1e0
[  247.805689][ T8348]  ? __pfx___x64_sys_open+0x10/0x10
[  247.805720][ T8348]  ? rcu_is_watching+0x12/0xc0
[  247.805751][ T8348]  do_syscall_64+0xcd/0x260
[  247.805787][ T8348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.805810][ T8348] RIP: 0033:0x7fc41b38e169
[  247.805828][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.805856][ T8348] RSP: 002b:00007fc41c1be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  247.805878][ T8348] RAX: ffffffffffffffda RBX: 00007fc41b5b6080 RCX: 00007fc41b38e169
[  247.805894][ T8348] RDX: 0000000000000007 RSI: 0000000000101800 RDI: 0000200000000000
[  247.805908][ T8348] RBP: 00007fc41b410a68 R08: 0000000000000000 R09: 0000000000000000
[  247.805927][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.805941][ T8348] R13: 0000000000000000 R14: 00007fc41b5b6080 R15: 00007ffd60fbcc88
[  247.805970][ T8348]  </TASK>
[  248.266863][ T8357] netlink: 'syz.1.487': attribute type 2 has an invalid length.
[  248.541902][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'.
[  248.677034][ T8353] FAULT_INJECTION: forcing a failure.
[  248.677034][ T8353] name failslab, interval 1, probability 0, space 0, times 0
[  248.730667][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.2.485 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  248.730719][ T8353] Tainted: [I]=FIRMWARE_WORKAROUND
[  248.730731][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  248.730748][ T8353] Call Trace:
[  248.730758][ T8353]  <TASK>
[  248.730768][ T8353]  dump_stack_lvl+0x16c/0x1f0
[  248.730841][ T8353]  should_fail_ex+0x512/0x640
[  248.730873][ T8353]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  248.730919][ T8353]  should_failslab+0xc2/0x120
[  248.730945][ T8353]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  248.730983][ T8353]  ? __proc_create+0xc3/0x8c0
[  248.731011][ T8353]  ? __proc_create+0x2ce/0x8c0
[  248.731043][ T8353]  __proc_create+0x2ce/0x8c0
[  248.731080][ T8353]  ? __pfx___proc_create+0x10/0x10
[  248.731113][ T8353]  ? __register_sysctl_table+0x736/0x1900
[  248.731149][ T8353]  ? _raw_spin_unlock+0x28/0x50
[  248.731188][ T8353]  proc_create_reg+0x7d/0x180
[  248.731222][ T8353]  proc_create_net_data+0x8e/0x1b0
[  248.731253][ T8353]  ? __pfx_proc_create_net_data+0x10/0x10
[  248.731292][ T8353]  ? __pfx_arp_net_init+0x10/0x10
[  248.731317][ T8353]  arp_net_init+0x53/0x70
[  248.731340][ T8353]  ops_init+0x1df/0x5f0
[  248.731382][ T8353]  setup_net+0x21e/0x850
[  248.731422][ T8353]  ? __pfx_setup_net+0x10/0x10
[  248.731458][ T8353]  ? lockdep_init_map_type+0x5c/0x280
[  248.731485][ T8353]  ? __pfx_down_read_killable+0x10/0x10
[  248.731515][ T8353]  ? debug_mutex_init+0x37/0x70
[  248.731551][ T8353]  copy_net_ns+0x2a6/0x5f0
[  248.731596][ T8353]  create_new_namespaces+0x3ea/0xad0
[  248.731642][ T8353]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  248.731684][ T8353]  ksys_unshare+0x45b/0xa40
[  248.731726][ T8353]  ? __pfx_ksys_unshare+0x10/0x10
[  248.731774][ T8353]  ? xfd_validate_state+0x5d/0x180
[  248.731806][ T8353]  ? rcu_is_watching+0x12/0xc0
[  248.731919][ T8353]  __x64_sys_unshare+0x31/0x40
[  248.731962][ T8353]  do_syscall_64+0xcd/0x260
[  248.732007][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.732035][ T8353] RIP: 0033:0x7f739bd8e169
[  248.732056][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.732152][ T8353] RSP: 002b:00007f739cb84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  248.732181][ T8353] RAX: ffffffffffffffda RBX: 00007f739bfb5fa0 RCX: 00007f739bd8e169
[  248.732199][ T8353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  248.732216][ T8353] RBP: 00007f739be10a68 R08: 0000000000000000 R09: 0000000000000000
[  248.732232][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.732248][ T8353] R13: 0000000000000000 R14: 00007f739bfb5fa0 R15: 00007ffd6e290e48
[  248.732282][ T8353]  </TASK>
[  251.615414][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.503'.
[  251.740694][ T8407] random: crng reseeded on system resumption
[  251.794594][ T8415] zswap: compressor  not available
[  252.532005][ T5851] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260
[  252.985512][ T8449] FAULT_INJECTION: forcing a failure.
[  252.985512][ T8449] name failslab, interval 1, probability 0, space 0, times 0
[  253.006850][ T8449] CPU: 0 UID: 0 PID: 8449 Comm: syz.0.509 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  253.006907][ T8449] Tainted: [I]=FIRMWARE_WORKAROUND
[  253.006922][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  253.006940][ T8449] Call Trace:
[  253.006951][ T8449]  <TASK>
[  253.006964][ T8449]  dump_stack_lvl+0x16c/0x1f0
[  253.007019][ T8449]  should_fail_ex+0x512/0x640
[  253.007055][ T8449]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  253.007104][ T8449]  should_failslab+0xc2/0x120
[  253.007135][ T8449]  __kmalloc_cache_noprof+0x6a/0x3e0
[  253.007180][ T8449]  ? snd_pcm_oss_change_params_locked+0x211/0x3b40
[  253.007241][ T8449]  ? kasan_save_track+0x14/0x30
[  253.007295][ T8449]  snd_pcm_oss_change_params_locked+0x211/0x3b40
[  253.007356][ T8449]  ? rcu_is_watching+0x12/0xc0
[  253.007402][ T8449]  ? __mutex_lock+0x1ca/0xb90
[  253.007447][ T8449]  ? lockdep_hardirqs_on+0x7c/0x110
[  253.007497][ T8449]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  253.007555][ T8449]  ? __pfx___mutex_lock+0x10/0x10
[  253.007601][ T8449]  ? tomoyo_path_number_perm+0x295/0x580
[  253.007650][ T8449]  ? __lock_acquire+0xaa4/0x1ba0
[  253.007723][ T8449]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  253.007764][ T8449]  snd_pcm_oss_get_formats+0x7e/0x340
[  253.007795][ T8449]  ? find_held_lock+0x2b/0x80
[  253.007835][ T8449]  ? __pfx_snd_pcm_oss_get_formats+0x10/0x10
[  253.007866][ T8449]  ? __might_fault+0x13b/0x190
[  253.007928][ T8449]  snd_pcm_oss_ioctl+0x2efb/0x37a0
[  253.007961][ T8449]  ? find_held_lock+0x2b/0x80
[  253.008000][ T8449]  ? hook_file_ioctl_common+0x145/0x410
[  253.008038][ T8449]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  253.008076][ T8449]  ? __fget_files+0x20e/0x3c0
[  253.008129][ T8449]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  253.008165][ T8449]  __x64_sys_ioctl+0x190/0x200
[  253.008208][ T8449]  do_syscall_64+0xcd/0x260
[  253.008260][ T8449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.008293][ T8449] RIP: 0033:0x7fc41b38e169
[  253.008319][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.008351][ T8449] RSP: 002b:00007fc41c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  253.008382][ T8449] RAX: ffffffffffffffda RBX: 00007fc41b5b5fa0 RCX: 00007fc41b38e169
[  253.008403][ T8449] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000008
[  253.008423][ T8449] RBP: 00007fc41b410a68 R08: 0000000000000000 R09: 0000000000000000
[  253.008443][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.008463][ T8449] R13: 0000000000000000 R14: 00007fc41b5b5fa0 R15: 00007ffd60fbcc88
[  253.008505][ T8449]  </TASK>
[  253.549395][ T8456] netlink: 342 bytes leftover after parsing attributes in process `syz.3.511'.
[  254.137882][ T8459] Invalid ELF header magic: != ELF
[  254.525227][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'.
[  254.897620][ T8478] kernel read not supported for file /\*)A (pid: 8478 comm: syz.2.517)
[  254.947824][   T30] audit: type=1800 audit(4294967631.164:5): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.517" name="\*)A" dev="mqueue" ino=18857 res=0 errno=0
[  254.957877][ T8478] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007
[  255.066693][ T8480] mmap: syz.3.518 (8480): VmData 39428096 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  255.656953][ T5851] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  255.656997][ T5851] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260
[  255.673831][ T5851] Bluetooth: hci1: adv larger than maximum supported
[  255.673880][ T5851] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  255.680926][ T5851] Bluetooth: hci1: Unknown advertising packet type: 0x35
[  255.688247][ T5851] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  255.695327][ T5851] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  255.702526][ T5851] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  255.709933][ T5851] Bluetooth: hci1: adv larger than maximum supported
[  256.206237][ T8484] random: crng reseeded on system resumption
[  257.353225][ T8539] Invalid ELF header magic: != ELF
[  257.491312][ T8536] Invalid ELF header magic: != ELF
[  258.769644][ T8560] random: crng reseeded on system resumption
[  259.146306][ T8590] FAULT_INJECTION: forcing a failure.
[  259.146306][ T8590] name failslab, interval 1, probability 0, space 0, times 0
[  259.179008][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.1.541 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  259.179063][ T8590] Tainted: [I]=FIRMWARE_WORKAROUND
[  259.179075][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  259.179095][ T8590] Call Trace:
[  259.179107][ T8590]  <TASK>
[  259.179127][ T8590]  dump_stack_lvl+0x16c/0x1f0
[  259.179180][ T8590]  should_fail_ex+0x512/0x640
[  259.179219][ T8590]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  259.179276][ T8590]  should_failslab+0xc2/0x120
[  259.179306][ T8590]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  259.179357][ T8590]  ? vm_area_dup+0x25/0x760
[  259.179407][ T8590]  vm_area_dup+0x25/0x760
[  259.179453][ T8590]  __split_vma+0x17f/0x1030
[  259.179505][ T8590]  ? __pfx___split_vma+0x10/0x10
[  259.179572][ T8590]  vma_modify+0x33f/0x410
[  259.179623][ T8590]  vma_modify_policy+0x219/0x2d0
[  259.179674][ T8590]  ? __pfx_vma_modify_policy+0x10/0x10
[  259.179740][ T8590]  ? mas_walk+0x6a6/0x910
[  259.179792][ T8590]  mbind_range+0x175/0x570
[  259.179834][ T8590]  do_mbind+0x848/0xf30
[  259.179884][ T8590]  ? __pfx_do_mbind+0x10/0x10
[  259.179946][ T8590]  ? __pfx_get_nodes+0x10/0x10
[  259.180008][ T8590]  kernel_mbind+0x1e3/0x1f0
[  259.180050][ T8590]  ? __pfx_kernel_mbind+0x10/0x10
[  259.180085][ T8590]  ? rcu_is_watching+0x12/0xc0
[  259.180145][ T8590]  do_syscall_64+0xcd/0x260
[  259.180198][ T8590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.180231][ T8590] RIP: 0033:0x7fed2ef8e169
[  259.180258][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.180290][ T8590] RSP: 002b:00007fed2cdd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  259.180322][ T8590] RAX: ffffffffffffffda RBX: 00007fed2f1b6160 RCX: 00007fed2ef8e169
[  259.180344][ T8590] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000002000
[  259.180364][ T8590] RBP: 00007fed2f010a68 R08: 0000000000000006 R09: 0000000000000002
[  259.180385][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.180405][ T8590] R13: 0000000000000000 R14: 00007fed2f1b6160 R15: 00007ffc906ae1d8
[  259.180447][ T8590]  </TASK>
[  259.845902][ T8601] FAULT_INJECTION: forcing a failure.
[  259.845902][ T8601] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  259.878684][ T8601] CPU: 1 UID: 0 PID: 8601 Comm: syz.0.544 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  259.878742][ T8601] Tainted: [I]=FIRMWARE_WORKAROUND
[  259.878755][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  259.878782][ T8601] Call Trace:
[  259.878793][ T8601]  <TASK>
[  259.878804][ T8601]  dump_stack_lvl+0x16c/0x1f0
[  259.878857][ T8601]  should_fail_ex+0x512/0x640
[  259.878900][ T8601]  should_fail_alloc_page+0xe7/0x130
[  259.878935][ T8601]  prepare_alloc_pages+0x3c2/0x610
[  259.878974][ T8601]  ? rcu_is_watching+0x12/0xc0
[  259.879020][ T8601]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  259.879095][ T8601]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  259.879146][ T8601]  ? do_raw_spin_lock+0x12c/0x2b0
[  259.879182][ T8601]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  259.879216][ T8601]  ? cgroup_rstat_updated+0x2a/0xb20
[  259.879257][ T8601]  ? find_held_lock+0x2b/0x80
[  259.879309][ T8601]  ? __lock_acquire+0xaa4/0x1ba0
[  259.879363][ T8601]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  259.879399][ T8601]  ? policy_nodemask+0xea/0x4e0
[  259.879455][ T8601]  alloc_pages_mpol+0x1fb/0x550
[  259.879489][ T8601]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  259.879532][ T8601]  folio_alloc_mpol_noprof+0x36/0x2f0
[  259.879572][ T8601]  shmem_alloc_folio+0x135/0x160
[  259.879619][ T8601]  shmem_alloc_and_add_folio+0x499/0xc20
[  259.879681][ T8601]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  259.879739][ T8601]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[  259.879807][ T8601]  shmem_get_folio_gfp+0x687/0x1530
[  259.879868][ T8601]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  259.879924][ T8601]  ? filemap_map_pages+0xf6c/0x1680
[  259.879960][ T8601]  shmem_fault+0x1fe/0xa30
[  259.880014][ T8601]  ? __pfx_shmem_fault+0x10/0x10
[  259.880072][ T8601]  ? __pfx_filemap_map_pages+0x10/0x10
[  259.880117][ T8601]  __do_fault+0x10a/0x490
[  259.880150][ T8601]  do_pte_missing+0x1031/0x3fb0
[  259.880200][ T8601]  ? __handle_mm_fault+0x1010/0x2a40
[  259.880252][ T8601]  __handle_mm_fault+0x103d/0x2a40
[  259.880311][ T8601]  ? __pfx___handle_mm_fault+0x10/0x10
[  259.880381][ T8601]  ? find_vma+0xbf/0x140
[  259.880415][ T8601]  ? __pfx_find_vma+0x10/0x10
[  259.880455][ T8601]  handle_mm_fault+0x3fe/0xad0
[  259.880508][ T8601]  do_user_addr_fault+0x7a6/0x1370
[  259.880552][ T8601]  ? rcu_is_watching+0x12/0xc0
[  259.880597][ T8601]  exc_page_fault+0x5c/0xc0
[  259.880644][ T8601]  asm_exc_page_fault+0x26/0x30
[  259.880676][ T8601] RIP: 0010:check_zeroed_user+0x131/0x1b0
[  259.880719][ T8601] Code: 08 76 47 e8 51 d9 ed fc 31 ff 48 89 de e8 b7 d4 ed fc 48 85 db 75 68 e8 3d d9 ed fc 4b 8d 44 35 00 31 ed 4c 29 e0 49 83 ec 08 <48> 8b 00 31 ff 89 ee 48 89 c3 e8 60 d4 ed fc 85 ed 74 ae e8 17 d9
[  259.880752][ T8601] RSP: 0018:ffffc9000b3d7d70 EFLAGS: 00050206
[  259.880787][ T8601] RAX: 000000000001c000 RBX: 0000000000000000 RCX: ffffc9000c16c000
[  259.880808][ T8601] RDX: 0000000000080000 RSI: ffffffff84cd6383 RDI: 0000000000000007
[  259.880829][ T8601] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  259.880849][ T8601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004041
[  259.880868][ T8601] R13: 0000000000000068 R14: 000000000001ffe1 R15: 0000000000000000
[  259.880903][ T8601]  ? check_zeroed_user+0x123/0x1b0
[  259.880955][ T8601]  iommufd_fops_ioctl+0x3cd/0x4e0
[  259.881001][ T8601]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  259.881043][ T8601]  ? hook_file_ioctl_common+0x145/0x410
[  259.881098][ T8601]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  259.881138][ T8601]  __x64_sys_ioctl+0x190/0x200
[  259.881183][ T8601]  do_syscall_64+0xcd/0x260
[  259.881233][ T8601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.881266][ T8601] RIP: 0033:0x7fc41b38e169
[  259.881292][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.881323][ T8601] RSP: 002b:00007fc41c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.881352][ T8601] RAX: ffffffffffffffda RBX: 00007fc41b5b5fa0 RCX: 00007fc41b38e169
[  259.881375][ T8601] RDX: 0000000000000038 RSI: 0000000000003b8a RDI: 0000000000000004
[  259.881395][ T8601] RBP: 00007fc41b410a68 R08: 0000000000000000 R09: 0000000000000000
[  259.881414][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.881433][ T8601] R13: 0000000000000000 R14: 00007fc41b5b5fa0 R15: 00007ffd60fbcc88
[  259.881476][ T8601]  </TASK>
[  260.310826][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.554376][ T8606] FAULT_INJECTION: forcing a failure.
[  260.554376][ T8606] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  260.576459][ T8603] Invalid ELF header magic: != ELF
[  260.605938][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.0.544 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  260.605998][ T8606] Tainted: [I]=FIRMWARE_WORKAROUND
[  260.606011][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  260.606031][ T8606] Call Trace:
[  260.606041][ T8606]  <TASK>
[  260.606053][ T8606]  dump_stack_lvl+0x16c/0x1f0
[  260.606107][ T8606]  should_fail_ex+0x512/0x640
[  260.606163][ T8606]  should_fail_alloc_page+0xe7/0x130
[  260.606197][ T8606]  prepare_alloc_pages+0x3c2/0x610
[  260.606237][ T8606]  ? rcu_is_watching+0x12/0xc0
[  260.606280][ T8606]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  260.606340][ T8606]  ? __lock_acquire+0x5ca/0x1ba0
[  260.606396][ T8606]  ? xas_create+0x1d7/0x1460
[  260.606426][ T8606]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  260.606498][ T8606]  ? __lock_acquire+0x5ca/0x1ba0
[  260.606549][ T8606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  260.606585][ T8606]  ? policy_nodemask+0xea/0x4e0
[  260.606640][ T8606]  alloc_pages_mpol+0x1fb/0x550
[  260.606671][ T8606]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  260.606702][ T8606]  ? filemap_get_entry+0x1a7/0x3b0
[  260.606744][ T8606]  folio_alloc_noprof+0x20/0x2d0
[  260.606779][ T8606]  filemap_alloc_folio_noprof+0x3a1/0x470
[  260.606830][ T8606]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  260.606888][ T8606]  __filemap_get_folio+0x5e9/0xc10
[  260.606933][ T8606]  ioctx_alloc+0x761/0x2060
[  260.607022][ T8606]  ? __pfx_ioctx_alloc+0x10/0x10
[  260.607065][ T8606]  ? __might_fault+0x13b/0x190
[  260.607126][ T8606]  __x64_sys_io_setup+0xc9/0x210
[  260.607175][ T8606]  do_syscall_64+0xcd/0x260
[  260.607230][ T8606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.607263][ T8606] RIP: 0033:0x7fc41b38e169
[  260.607287][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.607317][ T8606] RSP: 002b:00007fc41c19d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  260.607349][ T8606] RAX: ffffffffffffffda RBX: 00007fc41b5b6160 RCX: 00007fc41b38e169
[  260.607371][ T8606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe
[  260.607392][ T8606] RBP: 00007fc41b410a68 R08: 0000000000000000 R09: 0000000000000000
[  260.607412][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.607431][ T8606] R13: 0000000000000000 R14: 00007fc41b5b6160 R15: 00007ffd60fbcc88
[  260.607473][ T8606]  </TASK>
[  260.846722][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.943587][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  260.952874][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  261.384960][ T8616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  261.410019][ T8616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  261.516561][ T8622] 
[  261.518955][ T8622] ======================================================
[  261.526001][ T8622] WARNING: possible circular locking dependency detected
[  261.533053][ T8622] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Tainted: G          I        
[  261.541762][ T8622] ------------------------------------------------------
[  261.548902][ T8622] syz.2.547/8622 is trying to acquire lock:
[  261.554826][ T8622] ffff888055610aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x2d/0x9f0
[  261.565801][ T8622] 
[  261.565801][ T8622] but task is already holding lock:
[  261.573197][ T8622] ffff888055610258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520
[  261.582146][ T8622] 
[  261.582146][ T8622] which lock already depends on the new lock.
[  261.582146][ T8622] 
[  261.592574][ T8622] 
[  261.592574][ T8622] the existing dependency chain (in reverse order) is:
[  261.601617][ T8622] 
[  261.601617][ T8622] -> #2 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  261.609411][ T8622]        lock_sock_nested+0x41/0xf0
[  261.614669][ T8622]        sockopt_lock_sock+0x54/0x70
[  261.620012][ T8622]        do_ipv6_setsockopt+0x204a/0x4420
[  261.625814][ T8622]        ipv6_setsockopt+0xcb/0x170
[  261.631088][ T8622]        udpv6_setsockopt+0x7d/0xd0
[  261.636345][ T8622]        do_sock_setsockopt+0x221/0x470
[  261.641956][ T8622]        __sys_setsockopt+0x1a0/0x230
[  261.647379][ T8622]        __x64_sys_setsockopt+0xbd/0x160
[  261.653067][ T8622]        do_syscall_64+0xcd/0x260
[  261.658152][ T8622]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.664614][ T8622] 
[  261.664614][ T8622] -> #1 (rtnl_mutex){+.+.}-{4:4}:
[  261.671911][ T8622]        __mutex_lock+0x199/0xb90
[  261.677001][ T8622]        do_ipv6_setsockopt+0x2042/0x4420
[  261.682892][ T8622]        ipv6_setsockopt+0xcb/0x170
[  261.688153][ T8622]        tcp_setsockopt+0xa4/0x100
[  261.693333][ T8622]        smc_setsockopt+0x1b3/0xa00
[  261.698680][ T8622]        do_sock_setsockopt+0x221/0x470
[  261.704303][ T8622]        __sys_setsockopt+0x1a0/0x230
[  261.709748][ T8622]        __x64_sys_setsockopt+0xbd/0x160
[  261.715450][ T8622]        do_syscall_64+0xcd/0x260
[  261.720540][ T8622]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.727006][ T8622] 
[  261.727006][ T8622] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  261.735757][ T8622]        __lock_acquire+0x1173/0x1ba0
[  261.741200][ T8622]        lock_acquire+0x179/0x350
[  261.746276][ T8622]        __mutex_lock+0x199/0xb90
[  261.751371][ T8622]        smc_switch_to_fallback+0x2d/0x9f0
[  261.757232][ T8622]        smc_sendmsg+0x13d/0x520
[  261.762228][ T8622]        ____sys_sendmsg+0xa95/0xc70
[  261.767564][ T8622]        ___sys_sendmsg+0x134/0x1d0
[  261.772825][ T8622]        __sys_sendmsg+0x16d/0x220
[  261.778007][ T8622]        do_syscall_64+0xcd/0x260
[  261.783098][ T8622]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.789568][ T8622] 
[  261.789568][ T8622] other info that might help us debug this:
[  261.789568][ T8622] 
[  261.799873][ T8622] Chain exists of:
[  261.799873][ T8622]   &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET6
[  261.799873][ T8622] 
[  261.813594][ T8622]  Possible unsafe locking scenario:
[  261.813594][ T8622] 
[  261.821075][ T8622]        CPU0                    CPU1
[  261.826465][ T8622]        ----                    ----
[  261.831874][ T8622]   lock(sk_lock-AF_INET6);
[  261.836424][ T8622]                                lock(rtnl_mutex);
[  261.842967][ T8622]                                lock(sk_lock-AF_INET6);
[  261.850035][ T8622]   lock(&smc->clcsock_release_lock);
[  261.855451][ T8622] 
[  261.855451][ T8622]  *** DEADLOCK ***
[  261.855451][ T8622] 
[  261.863617][ T8622] 1 lock held by syz.2.547/8622:
[  261.868594][ T8622]  #0: ffff888055610258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520
[  261.878002][ T8622] 
[  261.878002][ T8622] stack backtrace:
[  261.883922][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.2.547 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  261.883971][ T8622] Tainted: [I]=FIRMWARE_WORKAROUND
[  261.883983][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  261.884000][ T8622] Call Trace:
[  261.884010][ T8622]  <TASK>
[  261.884021][ T8622]  dump_stack_lvl+0x116/0x1f0
[  261.884070][ T8622]  print_circular_bug+0x275/0x350
[  261.884121][ T8622]  check_noncircular+0x14c/0x170
[  261.884175][ T8622]  __lock_acquire+0x1173/0x1ba0
[  261.884232][ T8622]  lock_acquire+0x179/0x350
[  261.884259][ T8622]  ? smc_switch_to_fallback+0x2d/0x9f0
[  261.884295][ T8622]  ? __pfx___might_resched+0x10/0x10
[  261.884338][ T8622]  ? register_lock_class+0x41/0x4c0
[  261.884370][ T8622]  __mutex_lock+0x199/0xb90
[  261.884415][ T8622]  ? smc_switch_to_fallback+0x2d/0x9f0
[  261.884445][ T8622]  ? __lock_acquire+0xaa4/0x1ba0
[  261.884494][ T8622]  ? smc_switch_to_fallback+0x2d/0x9f0
[  261.884527][ T8622]  ? __pfx___mutex_lock+0x10/0x10
[  261.884579][ T8622]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  261.884620][ T8622]  ? smc_switch_to_fallback+0x2d/0x9f0
[  261.884650][ T8622]  smc_switch_to_fallback+0x2d/0x9f0
[  261.884685][ T8622]  smc_sendmsg+0x13d/0x520
[  261.884717][ T8622]  ____sys_sendmsg+0xa95/0xc70
[  261.884746][ T8622]  ? copy_msghdr_from_user+0x10a/0x160
[  261.884788][ T8622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.884820][ T8622]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  261.884878][ T8622]  ___sys_sendmsg+0x134/0x1d0
[  261.884920][ T8622]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.884985][ T8622]  __sys_sendmsg+0x16d/0x220
[  261.885027][ T8622]  ? __pfx___sys_sendmsg+0x10/0x10
[  261.885078][ T8622]  ? __x64_sys_futex+0x1e0/0x4c0
[  261.885128][ T8622]  ? rcu_is_watching+0x12/0xc0
[  261.885171][ T8622]  do_syscall_64+0xcd/0x260
[  261.885218][ T8622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.885251][ T8622] RIP: 0033:0x7f739bd8e169
[  261.885274][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.885304][ T8622] RSP: 002b:00007f739cb42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.885333][ T8622] RAX: ffffffffffffffda RBX: 00007f739bfb6160 RCX: 00007f739bd8e169
[  261.885353][ T8622] RDX: 0000000020000040 RSI: 00002000000001c0 RDI: 0000000000000004
[  261.885372][ T8622] RBP: 00007f739be10a68 R08: 0000000000000000 R09: 0000000000000000
[  261.885390][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.885407][ T8622] R13: 0000000000000000 R14: 00007f739bfb6160 R15: 00007ffd6e290e48
[  261.885434][ T8622]  </TASK>
[  262.325884][ T8619] FAULT_INJECTION: forcing a failure.
[  262.325884][ T8619] name fail_futex, interval 1, probability 0, space 0, times 1
[  262.339066][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.2.547 Tainted: G          I         6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) 
[  262.339121][ T8619] Tainted: [I]=FIRMWARE_WORKAROUND
[  262.339135][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  262.339154][ T8619] Call Trace:
[  262.339164][ T8619]  <TASK>
[  262.339175][ T8619]  dump_stack_lvl+0x16c/0x1f0
[  262.339227][ T8619]  should_fail_ex+0x512/0x640
[  262.339268][ T8619]  get_futex_key+0x49e/0x1000
[  262.339310][ T8619]  ? psi_task_change+0x1a2/0x2d0
[  262.339356][ T8619]  ? __pfx_get_futex_key+0x10/0x10
[  262.339399][ T8619]  ? pick_eevdf+0x3be/0x5b0
[  262.339444][ T8619]  ? psi_group_change+0x6dc/0xd20
[  262.339496][ T8619]  ? update_curr+0x74/0x800
[  262.339533][ T8619]  futex_wait_setup+0x78/0x290
[  262.339580][ T8619]  __futex_wait+0x266/0x3c0
[  262.339612][ T8619]  ? __pfx___futex_wait+0x10/0x10
[  262.339643][ T8619]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  262.339691][ T8619]  ? __pfx_futex_wake_mark+0x10/0x10
[  262.339729][ T8619]  futex_wait+0xe8/0x380
[  262.339759][ T8619]  ? __pfx_futex_wait+0x10/0x10
[  262.339793][ T8619]  ? kmem_cache_free+0x2d4/0x4d0
[  262.339840][ T8619]  ? putname+0x154/0x1a0
[  262.339873][ T8619]  do_futex+0x229/0x350
[  262.339918][ T8619]  ? __pfx_do_futex+0x10/0x10
[  262.339968][ T8619]  __x64_sys_futex+0x1e0/0x4c0
[  262.340013][ T8619]  ? __x64_sys_openat+0x174/0x210
[  262.340049][ T8619]  ? __pfx___x64_sys_futex+0x10/0x10
[  262.340096][ T8619]  ? rcu_is_watching+0x12/0xc0
[  262.340136][ T8619]  ? rcu_is_watching+0x12/0xc0
[  262.340180][ T8619]  do_syscall_64+0xcd/0x260
[  262.340228][ T8619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.340261][ T8619] RIP: 0033:0x7f739bd8e169
[  262.340286][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.340317][ T8619] RSP: 002b:00007f739cb840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  262.340347][ T8619] RAX: ffffffffffffffda RBX: 00007f739bfb5fa8 RCX: 00007f739bd8e169
[  262.340368][ T8619] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f739bfb5fa8
[  262.340387][ T8619] RBP: 00007f739bfb5fa0 R08: 0000000000000000 R09: 0000000000000000
[  262.340406][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f739bfb5fac
[  262.340426][ T8619] R13: 0000000000000000 R14: 00007ffd6e290d60 R15: 00007ffd6e290e48
[  262.340455][ T8619]  </TASK>