last executing test programs: 2m37.473665187s ago: executing program 2 (id=982): close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r0, 0x0) (async) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x4, 0x103) r2 = open(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000001700)=""/4096, 0x1000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) (async) r5 = ioctl$auto_TUNSETVNETHDRSZ2(r2, 0x400454d8, &(0x7f0000000200)) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c120000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fddbdf252b000000f7117d8008000f00e0000001aa04f94622fea67e482b4b07ac3d2b1ecdf42e75041f02d4e18eefe5207b8e60da56b3ad436d0dd57f9c9bf1a52e947cd86c6ecd3b6e1debae35bb885e92e6542b1d756dc8d09c57d1cd3a51da66e9bdac2da2a77e92d0ea0565366b5777be4d249e0915e98ac6344756d4cc7a1708a0f5ebfb6a9ee65741cf9b3df25fdab1a98ccb3d2332375cee809593ec92891dc93e32a6702784b678c3142ad555452a4f7a990fd8ead76bcbe16838cf364714c1bcf2e6699a51a15a2171b7b61196fa58eeaad9ff4af0383af9fa9337ec1274108664375ee642ffdaeaf25d9a5a9346dd091874f510df22997ee77b6ae43edcc062362f50dcb354051321e60a6872daf75607d0ba72479e818079e693c99259c04ebdb4b9f25b7da7f5b6bcbe11e52836f421ce7a99549ada20665bbb59c37456246805968fb2e24d0a0317c013f848c63fa538af821835d6d6dd9d0c3fe963380e90961b3865aa3c69607c15b14719031edc49885311cfdbd42ac5346e5722398b75a505b806d4ce708a44f454b490cd4039648ec5a23c320b2fb1a27c419ecda7bd6b7553097ab98a67714f738c5c273882ebf42aa6044d034794c8509f696f67f689067d298fd05dfac4c2ce97f92912644b5b2bf3848d4266bdf2e78f4c2811bb85a7ad8cf21a860bb8c451ae4830e93b3c2727d474cc91f4a3320ca5fa13b322dcafa8ec875e01cf738dd722480623f73b07820c519e931100a879a970f340a7f1611c62d1dd6b1694440302bb3bbfd5a021abbf7b5f6c13f5ef4723a8827961888f8a9bb6067d8c883af94048ec339564b00527e2abdd316f010b05fe9281a07b4ec1d28e4c4c8fc4a8d2eab50e3d07d6b81adee3f368b4672952dc66e7f74d514da756e6b169c40fe5b0fcb8fd903f23e872c5dc536a0b7bea23e9316939af07a0fce28eea67c7b810346396caeb1d2a3446ef614b86c5b84bb65d4a0855db2a6987fb9109b339b3eb3f0eed8d0d710c7390435ed72732c63fdad637ef140ecfe9418235542880581ccc9838d9f44edfb8df0a7a72b019f84b4e6e78876390ab63abde4c37e0bccaf87836f575adc2fbc78713b769c6399fa9d4ebe404f80960d659236672104ac8123e74015e9d1aa63c52549dcad8ff4e81577813429ff7338764ab996652caad50838e00b29bed57986fad3534edf8f66d78d600aa2263e540635a2cf5cdc33cd773e5fd5599515bed955f540ec532228e3a2cab04ccf1c1c8139885d8a92573780f7b125b08c6c7eba242300618c57f69a92552dc6695d6b29b5513e65781cc8fe26bb0710e725e8ab831b964c805d3f7f9989ba45a81396299f12ccaac03da6993cf6068e49e637e7b56d66534786d214362477903b276c4796412ce616c261bf36ba47828799d948c7eb44184da22d45e6b66e09760c432c15ac305d921696cd7aa96b10a4e84d50ab02b4f7f75841a98e2a55d6b37c978f016e415638bfc6e40ce15f76944648cc9deb0a8d9cd3db0a18b9c121a23c153c8446f23d691c39f309fa9fc7ddc1e5b5bd8782a5bf5fdb9f57da1b4d5789cff85f70b36046185ce8fc0dc23a15e6a674cb5f8c007cd6bb680e3d93dfc8bb37750673dbf255a772690f6676ad96c136d888ff8f2ec9e14bb9cb8fd8bbc915652865848ad92a0ff79a9f2118672ca46dbd97d00f018c783d894e1fe311189c0205c477e06f38dada5e2afa6d9ab303954417de4947f132c2d45f9b758b636ec0bd46108402a435e1e1efb60d7b9269be98a56b87cdadd564a0525d4de27301999771a691c083cea5637f43651fec1940a2222a549ca926c1fc921b3eb8c34b80cd19bb9df893361c4288570b3ce77aa59bc4fee0c472acad64578be2905392ea60eff32d92831ea0a48da649161f9dba15d43b71f3dcfdc120ea8270c8c2840ca39a71059e725ee75f0ebf24f77d03f24123c60d270a30a5ab973c5d52d0234c38ab227080bd0e0aa2b82427757a3c705ccee3215be73dbcf9fa33807610df4771821f64bbd99ef97499d6a99791429c6ffbb8d36a6890e784faa9d34ea580aaa350673ceb4559ef7bd913697836c775680b0564439161be8d18db473cb6df94dedc7568dbaf28c3ca85754bf1f7d218e4d05682005aaac084371d7c66d8fd9363e9d3c10fea76c39b6b596e35086bad2cb307f3122db34e4efd39890d237242efb4eed524ca5fbffef2a8a9889f0b23463a701ed57f655a42770ff7466453b24becf1d4f786e46be42e9f1e6a2a2cdba25c340b7b44a064875afbafbf1252b9dfb21489140a73bb3bca559315a11fe4a7a65f790ce6b40875896485d864049303bf752c45d6c124b29cf6a2f1a928efda13b5b01d648808236c7955d9a19f7904a3b1109a782130c6f489fb5e380694f50914c5241ba52e515eb5140111513aebe0bf191972c579d392cce3e9255bf575f2ec77b9c1f0c1fda96cf332337e4c8bdbd707b9eb13dabdf39f88ee0dfda81dde5b9422cceae28f4a6e3115075d0a8e796b3fac0052356fa54f74a90b36ab3b43f8d55d7827f011ab4e7a86d11a61619493772becf81169396ad44c10c8c65abe0e36c6579d240f8a68340cf76fb87966be72b31b514739f8748b89a012ec67a764cf82dcfb84be316c71917bc3c44d48edf48f49ea13e3dac00b8bd86304ec0a16a1323acc705d46f91e666131dcfe5344480c32f30690dc84916d53099067f29039aee284357c4e7f8706848399dfcd4158432c052c95d9a59f65676bb54d4015b4fd8839422b496542cde234aa2f760ea33782f3042d0073ac811513926eb1fdd6135a2861011ff01fb41c6194a0a8736d24c7cca37a21d0d27d6eb3cb1b6f0d32eee7a80dc4f17405a9cd457f2a3d33077db1b66f7c65f3f5c257a3cd06374cc5983ce7e73019788e2a29b5ea0b9280e41ab76793d93514c6b14e46727c7708d7089dab853a4470979b1bb59792d026d9d5ff2b57a984d66a2bef104498cfe8bedd5debd57e5774eb54774386d63b7864aa099086e017afa179fd18e077553c0012429839012d53dd3f0e2b42c9cadf3b6b81facb7305e071ad619488177e6229b7718d458d90c3caf5b115557d59d797c0834e68540b5ce9b1336035f603d8ccacf3909c87817964b1c8213b6761c929bf6143651c70ec7af3ddd6dc407eef1b89fb8b688d81865c0085b81741d3ee33bce47eeb0e07c2e1b8ed0c4bb8665880d1acdff00ff377aa841cd7b86edc8f97ab10186ef24eecd24da0523a783f02671312e007be217a051723929fadb55066485db6cb79fcfd61b3761f2bdce81a3aa61b79554d463846fa2f9ad25e437eb2c21c685978c9cd6e9588b3d365ee7449a6c0d1baa207c5fb7178f99ebdf40f94cf2f935b8acdcc1de69b227edadf10d5ecd1f9b2323e922672846e8a851acc67fd1a63f1627bf1affe07c48600c801a582f8a5fa55eb39fd790d2a0deec5f1153518c8c73e021c4d7b18ad7d0ce2195a64bc17fc99c07cee558507ad7ed408580687177467479d054d14dd0d357e030b648be190bc058f52dc35aad52f84b6fb4e8d021c351222f3bf1a261009e21d8d163119eb297d8ed9764c76dc0909ceabbcd6d965c9b582ed11efc224f884818d1fd46243b85781aac4824a71a086e249ea16171d1831ce0b1a2ac5f1419b9b73b060ceb7eb6a1cb17e150acfc450553ef262cef3871e28a5b5adfaa6415b866daa6a1a2d4afcdf672bdaf7ee00a8f5e20b5d304e10960d98431545ffd60ac997d1b716d364f35bf637ac752e115bb33b8d4465d2e756f54364c906daf18df1c50598af9e35e3039ccba39f575627a1e794be505f8f2c4555dc8951b2ddd774ce7320ee471eb2ed70c4beaf83b87556c364054308143961f6eb7e657f02bae41aaaaec02891cb14dc13786796d814a97e8d5f475496ac873cc460bdb24391ae6e6ccbc29fbd08dd28b4c47f9379d179de1054996df68657400cd6726cdfd1c66b9f4d6350f7432a34b5332b2986c1be30fe63497eb494d275889b5e8ae08f926c45658e94ae9e9dde80c23217d53fcf48583f4bcccfae5bd59e7a50c3362cd126ebc262cee70ec8acc28d666972d0e3317dc2d91c7c37df2d077e05702d130018f4eb64fe7f8a9b14bbe5a4e3b5366111f5887280c052650f7c56c852162b96595706a9a3192f9dff72ffab552e7040b3e17df22868035199157f770545ca6148b87668f2675517b6dec6281fa6dd7c43fe167c7904eac0d40bf72d7a52c94b33955db78536a65fd48b59f8fa99cf22d1350e903294936b02d3d7fe685ee9ba3c6733599d3fc09a0049ee7e9c8834b6e37725930091c956583152417c85933bde9a2851333e6374bcc50483f140e839dcf2a6b1daa884587759823060a789cd12ccdff4058433f7beab33608e1fa78ae0f94781c3a6c1824cf8a6e23bf9e2bcd579722a754a4e77c212155669ccf4c88dfdc5383c8479ebda9c84b26eedf45e0315d0068163fde293af51efa6070f5cea2f0bf87d204d85b53f71d6f67f40aa2182b4405dfaed13d31487269ca26b6a88cc15fa20c131c553ad6d95eca0b4ddeb2e0b9b4d15476a7d641d6d87be3bac6ca5e8c4798864ed6adc14c5fe2a70755dfb04e9d17c50d1087081253ed615f4d8880b30aedc3bf9c49d8234fa889b943879d4acd625982026b6733f549ff0c15eeab782e8c9752676899b914c740d033a04656ca1b38f3a1b06e0e5f9e1dc569fd3ed20657c906a502b3a8386ac3502d47bb2cf5395cd606befb119187540f85a7204249aa20b70bc1f68f5a42fbe15e7bcbbe73ecc83fa4711684a6c1d63c0cd3a02e010fb919e84a88482364b835057cb61262f8faebea10db7be39309c354c665f5ebb2646736b3f0ddcd035a97ba25fbda0a71bce1c16877199bc364e890250de81000c46b2a25d654a5cb97382465b3ee4e12f89ee97d103d718bd83e64bbe07180784f46471eb699d9aaace4491580ad734042389995080f87b248b826ae67d95ba33d1504d6f48d33b6a6c7f4bef21ae59ce7a3b6cc438d7536ad95f75a66c0d04e9772145a63d78751ef13979c543a9ea3dd13bf54ca1bb4829f040f14070ee718c84534612346b48b33d0ffbfd9b72671bdc74e5aa24352d45df1637e31be553f6f0d03433de1977f23f7d6f8dcba1546b3c0bba9a9e057de8d6919d1d4fcc790812dc2ba952d4cfff49426ae58b461e84604e63992c75d31e7560430e8d4bceb3d82608234e2855c30dbf021c5a54d2ff1df52eae9f9bfc87b08a64f9d17157789e0b04bd69bd83aee313f2847b43cb5e8418c4c7a3df07417201801b936b695b1b548b1c9362b50d1b86fc2bb4888c05678803c3db1f949a07a873ad5088077199e8c91b378777bbdead052f36cb809747a474c485d575a6c4f54b61e9527f9b93cdd8da6a25781838c47d8141a9124c43e4855313c526b0cb6def5289cd325f1b4c180a02afd5c89f4e4c063a525ac25d9cd3c73773315eb81598072e3a4ea305911267df1ecdb8ea07801c8ff20aec172796a77322a978b38e682700a46ad981b295563bea797aec00960289e18ff8423de31c8f4cb69c55d9265815e0b2aeeec079ae2ca322081159dc05cdd0d19c143405b94c569d96cb58210640f506ee7fda14879443bbaa9da83720d1104ddb62e51c6d07d5caf77fb05e05649c4f6cfd08b14959ea1a8aa1d9dcf131c2eb1809bc5232cacc93514267fd5b8a7fbec278d2c701a0bb453e15aa08215df793c59da0603ab4e3bdb634e10dd3a036d7c749fa01e2000cf8008004100", @ANYRES32=r5, @ANYBLOB="263b3495", @ANYRES32=r2, @ANYBLOB="0400e780040073800400fc80af00e68023d43bbd0fae24c0576ff3711740469cbdd5116e0fb7e145b88401777c80ff3ac51c6b1ca8d0c8f13c47a9de349f8f11e594cf7eb11c7d26c5877e3d2b448cd143ae5fcb7955032ea2a64a28d022c824c2ab586ed4a1850b78e8e7f31c7c50449ea95d94b7310bfbb6091ddcf2cf89feae4d85a3cf076c33e01efa06b209f9110447447b05d7edcb7a781569d9d3305b87a93d992a56031d0926dd9e83882a0da377579277b955bd01eb1b00040025003d0016800400c780f5b4e91dfc4308a39a30e50295b751c8bddd097700992931965de0c2503ac96a74ccf70b74ac25b85e0ef953bd12f5692cfe18956900000091359fd982d8101d6e73c93b807d38b693bcdcba13f5f778ab926b8093458f4fc19200220363c59aca102d308ae65cce9f60def09f30feb168c2d0c4b8c51f6a1126ed1f58f80908d068d0892e22d4f787d425a9e9aab0dbbf8642aed6032bbc9fe21ff80250ebe80e13509e9c6ea963b0e8c9b0743cb2bf6f8c76af9415ab54cb73beea6cc2f15aa5947d0bdffab64f9e080c316fd0f75afb3300251283cda0576d8926491680b9fc3a0c5ead79a58a6d0d83f59a038130ee2b7c26680563aa6cbe7d78855c62a6653b35e11a59a581e05f6dd0baedc800"], 0x120c}, 0x1, 0x0, 0x0, 0x44800}, 0x8000) (async) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, r3, 0x10) bpf$auto(0xa, &(0x7f00000005c0)=@query={@target_ifindex, 0x4, 0x0, 0x2, 0x7f, @count=0x80000001, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) r7 = socket(0x2, 0x1, 0x106) r8 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x200, 0x0) read$auto_proc_pid_attr_operations_base(r8, 0x0, 0x0) (async) setsockopt$auto(r7, 0x1, 0x21, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/mode\x00', 0x181002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r6, 0xa, &(0x7f0000000100)="ccb609b0d5714a66cdd518c33bb2dca83c67518b126d3d0929639404d731309d498dfedfc16e40fd184950ea9162f08a3f", 0xffff) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) mincore$auto(0x4, 0x8ab, 0x0) (async) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x6}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0x2000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2m37.337706228s ago: executing program 2 (id=983): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x6, 0xffffffff}, 0x405b3}, 0x208, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1000be3131c2a15762a1399af7f1d65080664af9bae9a7da99aa2c07b397cf0f6d39a2feea7c94a7eb72b2b13cab9f40b6e86baa80ae6e913bc27f14e8360a7100df3b6ba9c999fdd35bb1eadf406ba31b8690f594abbb9fd662660227714ca4bdd88b2c56aa53f41c406bf4e35a538233fa4d24", @ANYBLOB="88b4", @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x40) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) ioctl$auto_USBDEVFS_CONTROL32(r2, 0xc0105500, &(0x7f0000000140)={0x7a, 0x7d, 0x1ff, 0x0, 0xfc, 0x7, 0x4020000a}) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) madvise$auto(0x110c230000, 0x8031ca, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) iopl$auto(0x1) poll$auto(&(0x7f0000003640)={r6, 0x7, 0x9}, 0x204, 0x100000) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x406101, 0x0) ioctl$auto(0xffffffffffffffff, 0x7ff, r0) 2m34.554063476s ago: executing program 2 (id=986): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff4, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeca301, 0x29) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) write$auto(0x3, 0x0, 0x100082) r0 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) writev$auto(0x1, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x5, 0x1, 0x9, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x5) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) 2m31.562434798s ago: executing program 2 (id=995): mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr1\x00', 0x6a6d83, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 2m31.374893707s ago: executing program 2 (id=996): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb2, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x49, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) r1 = socket(0x28, 0x4, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044101}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2ac360d2, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x4, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) pwrite64$auto(0xc8, &(0x7f00000006c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x05#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8f\xb8\x94;\x01,\xfc\xd9\xd4L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\xf00\xc3\xb9o^\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xac\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xb5!\x1f\x9ad\b!\xddBD\xd9\xcf\xc4\x15\xd2\xfc.\xc38\xed\xe0\x8c!\x95\xe6K\xe2 f\v\x12\xf6\\\x11\xe7\xad\x88ZL\xfd\xb6\x18\xae\xa6\xc3\xb3E\x95\xe1\x0e\x97Q\x10\xd04\xcf\x11\xd7\xd1\xcbd\xe3\x19\x91r\xcb!c%\x8f\xae\xb4\x84\x994\x8a\x9a\xea$\x03U\x8b[\xdcFE\xc2\xd8v\x05\xa2\xc7\xed\xad_\x8f\xcb\x80\xc9\xed4\x97\xfc \xfa\x03g[\xc6\x00\xf5\x8c\xae\'\xc3V:\xed\xc5\x05\xc3PE\xf8\xedF\xc1\xd5:n\xc0@\x80qq\xbd\xcc\xaa\x9e\x0e\xad\xed\xab\x04\xfd\xdb\xfa\xfb\x1e\xdd\x16dw\x96\x84>Rb\xf0R\xe2\xa9K\xb9\xa2\xda{\xfc\x81\xd9\xbaE\nGR\xc6R\xc4\x12\xdb\xddFz\\\x94\t`)Z\x10\xa2\xcb^\xad\tf\xb0\x13P\xbe\n4\xe8\t\xca\x9e\xa1\xdd#\xaa\x85\xfe\x1d\x87\x8a8\r\x8a\x1f\x8d\xf2+\x88\xf8\x05\xe7\xe12\x18O\x94:3\r\xe6\x80\xeb\xbfP\x19\x11k\x8d\xbe\xe7>\x81BzVdO\x13\x93\xe9ts\x1e\x0f\xd8\xd0\xe0\xa3\x15\x13\t,\xfd\xad\xdc\xc8\f\x88\xbf\xcaH\x115;\x8d8,5m\x86%\xd6\x858\xbe\x86\xf9\xff,\xcc\\h\xacb \xed\xdf\x82QZ\x1f\xaa\x91\xf4j\xa0\xd1\xfeB\xa2%1\xff\xc3\x89\xf0k\'\x8b{\xd6\xa8\xe9/\x81H\xbc\xa1&\xcd\x1a\xa0\xc1\xef\xab/}\xa7\x1a\vm\x90\xaf>S\xdd\x05X-+}i\xd6\xd7\xc9\xe6\x9b\xbd\xb5z\xb6k\xc6\xd4\r ', 0x7fff, 0x100000000) bind$auto(r1, 0x0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x1, 0x4000000000e0, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)={0x101000, 0x0, 0x12}, 0x18) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket(0xa, 0x2, 0x0) socket(0x1a, 0x3, 0x4) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) 2m30.084014335s ago: executing program 2 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1ce9c523}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7527}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x4000) 2m14.802751764s ago: executing program 32 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1ce9c523}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7527}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x4000) 2m0.568723674s ago: executing program 0 (id=1058): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) (async) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socket(0xa, 0x801, 0x84) (async) r1 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) (async) close_range$auto(0x0, 0xfffff004, 0x2) epoll_ctl$auto_EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x4de5efc, 0x5}) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) 1m58.342612166s ago: executing program 0 (id=1065): madvise$auto_MADV_GUARD_REMOVE(0x1, 0x3, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x19, 0x3, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x6, 0x10001, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x4, 0x8, 0x67) madvise$auto_MADV_GUARD_REMOVE(0xffffffff, 0xfffffffffffeffff, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x5, 0x8, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x7f40, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x8, 0x3, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x3, 0x8, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x40, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x102, 0xe4, 0x67) madvise$auto_MADV_GUARD_REMOVE(0xc, 0x2, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x9d, 0x3, 0x67) madvise$auto_MADV_GUARD_REMOVE(0xb99, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x5, 0x1, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x7, 0x5, 0x67) madvise$auto_MADV_GUARD_REMOVE(0xffffffffffffff7f, 0x7f, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x9, 0x8, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x1, 0x2, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x200, 0x6, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x101, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0xb7d8, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x18000000, 0x6, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x2, 0x3d0a, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x1, 0x68, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x7, 0x100000001, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x6, 0x80, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x4, 0x7, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x1, 0x0, 0x67) madvise$auto_MADV_GUARD_REMOVE(0x586b, 0x3, 0x67) 1m58.148884194s ago: executing program 0 (id=1066): socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xa56, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfdf3) r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002bc0)=""/82, 0x52) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x8, 0x1, 0x400000006) eventfd2$auto(0x9, 0x1) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) shmctl$auto_SHM_STAT(0xdf8, 0xd, &(0x7f0000001640)={{0x8, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x1f39, 0x6}, 0xfffffff8, 0xfffffffffffffff8, 0xe, 0xfffffffffc000000, @inferred, @inferred, 0x102, 0x0, &(0x7f0000000640)="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", &(0x7f0000000540)="fa334603f4242b9662760a00320da8d69ada0b05461c8f4ee2c35c2ee6fd995afa888931dadb6f96ce5a95bb434a7875932621824171982c2cb0c1d3da6c524a9b7117c721ff75c9295ef5b3c33f4eda8726c086728610fa394bb9dbacad5cab7c4c667997cc6cb494dde027218cf0d6e75f8452126a9c173f347ae7d2e6695931eed5469a31"}) msgctl$auto(0x7, 0x9, &(0x7f0000001740)={{0xdb, r2, 0xffffffffffffffff, 0x1, 0x1000, 0xc564, 0x3}, &(0x7f00000016c0)=0x8, &(0x7f0000001700)=0x9, 0x401, 0x3, 0x5, 0x603, 0x8, 0x4, 0x0, 0x3, @raw=0x4}) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r3, 0x4008550c, 0xffffffffffffffff) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0, 0x0) 1m57.206474765s ago: executing program 0 (id=1071): socket(0x2, 0x6, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x18, 0x0, 0x1b, 0x70bd25, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x208, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1e0, 0x2, 0x0, 0x1, [@nested={0x1d9, 0xda, 0x0, 0x1, [@generic="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", @typed={0xc, 0x139, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x4}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0x6ceb, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1m56.102459137s ago: executing program 0 (id=1074): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x6, 0xd}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x0) read$auto(r1, 0x0, 0x0) mmap$auto(0x1, 0x3, 0xe2, 0x939b, 0x405, 0x10) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r2, 0x8, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) getcwd$auto(&(0x7f00000011c0)='/^ev/hwrng\x00U\xbbll\x8c\x92\v[\xaa\xf5\xc9\xf1\xf7\x7f\x94Q\xc0\xc3\xbe\xea\xf8<\xdf\xee_!\xc2$c\'%yh\xbb\x0f\xcca\xdd\xeb', 0xc32) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) pread64$auto(r4, 0x0, 0xffff, 0xa) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000001080), 0x10000, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0x0) rt_sigaction$auto(0xfff, &(0x7f00000012c0)={&(0x7f0000001200)=&(0x7f0000001040)=0xb, 0x7, &(0x7f0000001280)=&(0x7f0000001240)=0x2b, {0x706}}, &(0x7f0000001400)={&(0x7f0000001340)=&(0x7f0000001300)=0x8, 0x2, &(0x7f00000013c0)=&(0x7f0000001380)=0x2}, 0x8) 1m55.132149185s ago: executing program 0 (id=1080): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004891}, 0xc000) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040044}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m45.343886s ago: executing program 4 (id=1105): r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0xffffffffffffffff, 0x151d, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x72d7, 0x7}, 0xffffffff, 0x80) writev$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0x3}, 0x8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex_requeue$auto(&(0x7f0000000080)={0x0, 0x39c3c00000000, 0xdd54}, 0x80800001, 0x1007fc, 0x8001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xffffffff80000000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000040)={0x7, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a|6'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$auto(r1, 0x6, 0xfdb, &(0x7f00000000c0)='/proc/swaps\x00', &(0x7f0000000100)=0x6) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) r5 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x800, 0x0) read$auto_set_tracer_fops_trace(r5, 0x0, 0x0) epoll_create$auto(0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) 1m43.346356609s ago: executing program 4 (id=1109): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x2e, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x42, 0xffffffbffffffffa, 0x1ffdd, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x10000000007, 0x800, 0x7, 0x8, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r1], 0x1ac}}, 0x40001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m43.139350376s ago: executing program 4 (id=1111): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0xf6c, 0x0, 0x0, 0x8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto_XFS_DAX_ALWAYS(r2, 0x3, &(0x7f0000001180)='\x00', &(0x7f00000011c0)="7d302c1c1dff73eb6c4b9796310aa4223cd3240ce0ea9110b43466eec57e9185974331bba24e5fa27fda5e81c01a9e", 0x1) r4 = socket(0x2, 0x2, 0x1) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '$\x00'}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x7, 0x2, '(8\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r4, 0x4, r2}, 0x10) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x2, 0x0, 0x702955be, 0x2000000000005c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0xea, 0xffffffffffffffff, 0x7, 0x5, 0x4, 0x7, 0x10001, 0x0, 0x0, @attach_prog_fd=r3, 0x17e, 0x4, 0x80000001, 0x5, 0x3}, 0x5) getsockopt$auto_SO_TXTIME(r0, 0x7, 0x3d, &(0x7f0000000080)='$\x00', &(0x7f0000001100)=0x6) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10000, 0x100000001, 0x2, 0xf9, r0, 0x200000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001140)='/dev/dsp1\x00', 0x24882, 0x0) 1m42.174149057s ago: executing program 4 (id=1114): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffffd, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70f9fedbdf250b000000080037000100000008000300", @ANYRES32=r4, @ANYBLOB="04000700"], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x890) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="abe613f34fbd3caa44ef8dc989c1606ab0207fee31ebbee0e63229ce2ed95f4d9a6d4807804666ae38409c5e6258d0897744f906d1", @ANYRES16=r5, @ANYRESHEX=r3], 0x14}}, 0x4000000) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4ad03, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x6d4382, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') fremovexattr$auto(r7, &(0x7f0000000240)='\xe8\x8b:\x1e\x98$\xddGi\x82\x12\xc1,platform/duoiY_hcd\xb0z\x85.4/usb5/descripto') openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x61, 0x100201000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x80003) 1m39.889390945s ago: executing program 33 (id=1080): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004891}, 0xc000) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040044}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m25.836866066s ago: executing program 34 (id=1120): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto_mousedev_fops_mousedev(r0, &(0x7f0000000080)="d773e535", 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = pidfd_open$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70f9fedbdf250b000000080037000100000008000300", @ANYRES32=r4, @ANYBLOB="04000700"], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x890) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="abe613f34fbd3caa44ef8dc989c1606ab0207fee31ebbee0e63229ce2ed95f4d9a6d4807804666ae38409c5e6258d0897744f906d1", @ANYRES16=r5, @ANYRESHEX=r3], 0x14}}, 0x4000000) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4ad03, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x6d4382, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') fremovexattr$auto(r7, &(0x7f0000000240)='\xe8\x8b:\x1e\x98$\xddGi\x82\x12\xc1,platform/duoiY_hcd\xb0z\x85.4/usb5/descripto') openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x61, 0x100201000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x80003) 1m10.191154817s ago: executing program 3 (id=1234): r0 = semctl$auto(0x7, 0x5, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="80050000", @ANYRESDEC=r0, @ANYBLOB="02002bbd7000fcdbdf25010000000400e2000000002000328005000300020000000500030002000000040005000800040000000000000be24c183fde5b9d4eaa60152c220b90f9370ed909cb387efd44283302b1f53dcde4e9bc252c784fea90af25c968b063e49d0c7166e007d16e", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00', 0x7, 0x3) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x81, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid$auto(r2) sched_getattr$auto(r3, &(0x7f0000000000)={0x5, 0x80000001, 0x2, 0xc19, 0x1, 0x0, 0xfffffffffffffff8, 0x4, 0xfff, 0x1}, 0xfff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffffff, 0x8001) mmap$auto(0x0, 0x801004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getpgid(0x0) socket(0xa, 0x801, 0x106) 1m9.166462243s ago: executing program 3 (id=1238): close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) socket(0xa, 0x4, 0x106) (async, rerun: 64) socket(0x2b, 0x1, 0x1) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x220c0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 64) socket(0x8, 0x2, 0x7) (async, rerun: 64) socket(0x22, 0x2, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) (async, rerun: 64) fstatfs$auto(r1, &(0x7f0000000080)={0x2, 0x7fffffffffffffff, 0x8, 0x4, 0xa, 0xffffffffffffff01, 0x9, {[0x7, 0xf]}, 0x63ac, 0x401, 0x6, [0x1, 0x7, 0x6b23, 0x1]}) (async, rerun: 64) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r2, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0x20000000000, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/16, 0x10) (async, rerun: 64) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) (rerun: 64) r4 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4\x00', 0x442802, 0x0) recvmmsg$auto(r4, &(0x7f0000000680)={{&(0x7f0000000340)="28e86da7cb3ef8e1acfe9315aa2474e7183167d8baae33bf2527768157e512ae4e10b7589d914920fa8dba1cc1fe3d67f99c05884a79d2be8e273e56c929ce79f37261e2af55633b891e75cf74e5c80f22079b549d0a3d375c65b4370baf23fed28e3bb9437357ed8e8fd0ff26047ffef16e5e699feb4cd095aff1dd93c75d36fd600b0669ac7b5be69233b16f65dc8ca25609f4917fa74b04463c56a11c5a0c093b2c75051325103261719e1fd90d59a48add5f48adce64b1359acd79651315b678c1ca4785181a1c81e5876b61", 0x1d, &(0x7f0000000540)={&(0x7f0000000440)="f5088ffc70a7cfae87796e0c33084bd0a12ce5990bdc0337be9105415b203a499b3516cdf6065652a42dd90f56c7faf5c8d419d44409f78c776dfb72dee92e6e428861c618d9411b1176a04e81b14d2253ff40a6470528ae1d5a3f8dfb09ff1ec2e650c40fd1fb702de90d8c8d6509339722c79924e1433c59e7b451e5cfeaa5ac566ea8354f60db877b8609a3a80f712022fd9734cbaa6cfb9a25ed3e0744bfba23f581ea03e48e87e6ec0750c865be21412b099b07df8fdc6545d85a691b9ae613115ee4aff2c7b6557f7f47ba1fd926b3174eb8", 0x7ff}, 0x6, &(0x7f0000000580)="75072c528026ec57fbc30b3ac67949ff2774d3898186419ecbf89bf1a3913e5e110c75efd01507948dd8f81b0ca04f753042ad5a06926ecaab028bc7af85fe1530f75152d7b17fd212ffd006d30556939e297f5bcd7098656d909f7a741dd1e4887ce0e80a0752da609f532a838276a4488d047825b2eba208a911310f4813d5ffdd67a62a3786642c22aab7fcb70f3523aabeff1d690505cb3823be6839fe3718fbd57eaf6b25c78f7f90ddb096a43f6c19ccaa36780cee5341b7d767359896a4557d4679f87db2f2c37f87273e", 0x2, 0x7}, 0x1}, 0x8, 0xc, &(0x7f00000006c0)={0x6, 0x7f}) (async) shmctl$auto(0x3, 0xffffffff, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x4, 0x3, 0x2, 0x3}, 0xe25, 0x3ff, 0x1, 0x10, @inferred, @inferred, 0x9, 0x0, 0x0, 0x0}) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, 0x0, 0x10a, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, r5) (async) sendmsg$auto_CTRL_CMD_GETFAMILY2(r5, 0x0, 0x4000) (async, rerun: 32) setreuid$auto(0x4, 0x8) (async, rerun: 32) mknod$auto(0x0, 0x63c1, 0x7ff) r6 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r6, 0x29, 0x11, 0x0, 0x1fe) 1m8.62976973s ago: executing program 3 (id=1243): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x80044dfe, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x6, 0x1f, 0x0, 0x3d) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x400009, 0xe0, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x22, 0x0, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r1, 0x0, 0x594c, 0x7) unshare$auto(0x40000080) 1m5.157128961s ago: executing program 3 (id=1257): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x6, 0x0) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) socket(0x23, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x800, 0x300) io_uring_setup$auto(0x6, 0x0) pipe$auto(0x0) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r4, 0x0, 0x7) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0) ioctl$auto(r5, 0x5111, 0x3) preadv$auto(r5, &(0x7f00000001c0)={&(0x7f0000000080)="3b078720b009f139a4c924bc982546f14008688ed5278ec25f7a7ae236c7005cffb4926dfc0a8372d9aaa7889a8432b4a156db7ee0099eee32f92f640892ebc052a9aa89b7b2bd151ccb7283eded900a6e2832deca8a1b7f52cc304560815a4bcdde53476b645b0dbc4864bc36141c2604233dc2a40206ab0d67c31b44b7d1b8f39f46461c87100779759d018e60509138bc6ed25a2629db4d9dcf1449e8dae1598a73e9979593fc7de520353eaa8ebefb976e002178487fcce7b5300b518f1af3c8dfb47350ac21ae92699d40dff4b6180d", 0x4}, 0x1b70000000000, 0x6, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/tx_packets\x00', 0xc4482, 0x0) mmap$auto(0x8, 0x9, 0x3, 0x32d4, 0x10000, 0x80000001) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(r3, 0xffffffff800454dd, r0) 1m3.843687379s ago: executing program 3 (id=1260): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x24004141) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0x221c2, 0xe8) r4 = socket(0x28, 0x1, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r3) connect$auto(r4, &(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x40049409, 0x0) r5 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r5, 0x5, 0xc, &(0x7f0000000180)='\x00\x0e\x8cg\xae\x05\xc8\t\xb57\xb4\xd1\x8c\x9e(;I\xd2\xf4B\x03\x1f\x8b\x1a\xf8A\x95\f\xc5\xcf?\xd4[\xc9\xd0j\xa8\xe2\xe6]\x98\xd6\xac\xa6)R\xd0\xdbb\x8e\xc1iZ\xa1`a\xb577\xc6\xb2\xde\x11\x05\x8a\x1fm\t\xdb\x04\x94\xce\x14\xa4\x13\xcb\xafo\xfa\x7f\xa0\xfb&\x82\xbf\xd7\xba\x19\x0e\xe2\x16x\x96\xe1\xda\xbf8Oa\x030\xf8\x8aG\xb7\xa1\x0f\xd8\xd6\x03\xe9\x81\x1f\x1cdR\xb2g\x9ccSdX\xfez\xb1j\xf1\xe0\x05\xa6GJ>\xe4\xd8\xc3\x19\xda59o\xc8\xc6\xf7\xf9Q~\x93\xc4\xa2?\xf4\x9f\xa1E\x0e\xcc\xb8\x01:\xda\xb1g\x97\xb2\xa7\xccL\x98\x1f\xcc\xc9P\xef{|J\xefK!0~>a\x9c\x01\x928\xa7\xb4\x1c\x18}\xfb\xed/x\xc7\xd7\xad\x1e\x89\be\x06o\b\xf83\xabeO\x00', &(0x7f0000000040)=0xfffffffe) 1m3.350117671s ago: executing program 3 (id=1262): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto(r0, 0x0, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0xfffffffe) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x280000, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERNAME(r1, 0x4, 0x1c, 0x0, &(0x7f0000000100)=0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x441, 0x0) unshare$auto(0x20000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(r1, r1, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) setns(0xffffffffffffffff, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0xd4d0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x68500, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) socket(0x15, 0x5, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 56.032389797s ago: executing program 5 (id=1286): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x159280, 0x0) write$auto_vcs_fops_vc_screen(r0, &(0x7f0000000040)="ed9a9b8d7b8afc0490e5af016dc214eb40062813f194a763d9ac4417895976625d1bb28b43726d7a85dc030c2942327be65c006af756a7506e46ffc1662d3c96292d79b19d290ea176bdb258f6eeddd0901537dd105c43e176eebadbfd03a5f6839a18f0d40c5deec3cbc64274c8141f795bb6b237acb23b2221d872f853561a1b963459b3d1ac9b6b5fb6153e555a8dfdb41e31987afdf7e5798b2c05d9a08fe6048e8b56dd56cf9a1089bff7b010501eec9bf389483888da2992ceb62c2240cb4aafb5", 0xc4) (async) r1 = fspick$auto(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x9) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000180)="75990a0dbb2a6c16ff5680f77a519bdb357595c3b99533f2b6b881fd671855a59e42209f2b56ffbd742522023fa6fa54293317ca2fe61a3b8aa87ed1ae61efdd74c8dd4012c1147d3ad74de1e8558ae1d23d0ba1ea155d3d67fcb31bd4e03d21159ab6a689cc86fa16bd9fb0dcf6f5eeeda6aa1fab5aa4b2795053373288beb6fd44345724bf0b7476a9feff2b40112762b3f3677ad203ef2ef33ac7de632ece8a6969535b301b00a495e7bdac86a2ffd2d83c4497a46126dfde8fdc291395fd2dfb71d569fa108a8c1dc4c6c47d2195772df78e901a5bb6413b6f8ac503ef0a6938aacf999a539095486ebeeae6be", 0x3) msgctl$auto_IPC_INFO(0xfffffffb, 0x3, &(0x7f0000000300)={{0x2, 0x0, 0xee01, 0x3, 0x8, 0x1ff, 0x6}, &(0x7f0000000280)=0xff, &(0x7f00000002c0)=0x8, 0x5, 0x400, 0x7f, 0x76, 0x7b, 0x2, 0x3ff, 0x2, @inferred=0xffffffffffffffff, @raw=0xd}) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x7, &(0x7f0000000380)={@siginfo_0_0={0xc636, 0x5, 0x8001, @_rt={0x0, r2, @sival_int=0xfcf2}}}, 0x4) (async) read$auto_mon_fops_binary_mon_bin(r1, &(0x7f0000000400)=""/10, 0xa) syz_clone(0x0, &(0x7f0000000440)="55c495848f33a161b44cba673bf8cd9be539b73086f7fb3c372bf2856465ff14d36dc41e12c409ec3052", 0x2a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="d841667f31ee9ae960a53db238fc927bd2ee122a324c8b4e995d4d90") sendmmsg$auto(r0, &(0x7f0000001640)={{&(0x7f0000000540)="fba9e00bbe307a1bd5785b18414cd99c9f160db290d7e3e5951e59e20509588cc34cc524a1c1d97c18b5135ac86b4fbffafa102d1e9621fc8b3430e6570bf5b8c2", 0xd6e2, &(0x7f00000015c0)={&(0x7f00000005c0)="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"}, 0x8, &(0x7f0000001600)="6c4677985a033b2341b7a3b1fb9cab399faccb56", 0xffffffffffffff00, 0x4}, 0x5}, 0xffff8001, 0xd) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001680)='/dev/ptyvf\x00', 0x800, 0x0) (async, rerun: 64) ioctl$auto_LOOP_CTL_GET_FREE(r1, 0x4c82, r3) (async, rerun: 64) r6 = ioctl$auto_TUNSETPERSIST(r1, 0x400454cb, &(0x7f00000016c0)=0xdec) ioctl$auto_LOOP_CTL_REMOVE(r6, 0x4c81, r3) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, 0x0) r7 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000001700)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x201, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r7, 0x40085875, &(0x7f0000001740)={r5, 0x4}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001780)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x561200, 0x0) (async) kill$auto(r4, 0x7) (async) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r6, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) kexec_load$auto(0x5, 0x10000, &(0x7f0000001940)={@buf=&(0x7f00000018c0)="716751872bc8831652097b42eceb5d08d239e405564e7e6b73d2c594334971e574ea6b2eda5ed1ad01611cc5165b788e5bdaa464f193e8a30c7589dbc45fe6f732010ac7d5cf5653f7906266abf886cc6ab070373f507260f1694470d87516f8371eca69f3ad", 0x81, 0x401, 0x9}, 0xffff) (async, rerun: 64) ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000001980)=0x298e) (rerun: 64) flock$auto(r1, 0xa) (async) recvmmsg$auto(r1, &(0x7f0000001b80)={{&(0x7f00000019c0)="636341670d9614ac9beb26f4418f9be7807f5b4cc666e8d7900e2f4ea8cb812326a639db7932d872a15d92edc6a3b1c9cc2eaa3a7215bbd00bef5b96efab762707ebc58de1887ea326903d6d7360abead5dbe9c5d6071d67295d185cbbcb0891", 0xcb1, &(0x7f0000001a80)={&(0x7f0000001a40)="239b5794dc5e6b5bdc4943f2c3f7c3258b416274b17c2818737ecb87a67bf6be56", 0x9}, 0x8, &(0x7f0000001ac0)="924715ec3094dcab225531a08c11ef58621aa74c7b4398767dbc0e41e2eba148999c168820875fa9c62e03662c2e22a060c175dd62b6bcb1d0a0085e70b23e846b1d4e14ad260085b1bc14dcd75cebb2ac9d9097c6186371a2cf0ee5b490bebd752e5154baa8333ea77070b0e4a6bf1ab477376b58c93da87527006688eeef528767417ba57860c1e2982ddb35e79a7ad2b0edb101ba1a205fcfa8201e", 0xff, 0xffff01f1}, 0x7}, 0x7, 0x0, &(0x7f0000001bc0)={0x3, 0x6}) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001c40), r8) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x10}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x200c010) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/nbd8\x00', 0x2000, 0x0) (async, rerun: 64) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001d80), 0x82, 0x0) (async) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001e00), r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e40)={'ip6_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)={0x158, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}]}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x4008045) 55.753994888s ago: executing program 5 (id=1288): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port5/disable\x00', 0x58ab02, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x400}, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x101) (async) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000000c0)={&(0x7f0000000000)=0x3, 0x0, &(0x7f0000000440)="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", &(0x7f0000000040)=0x2}) 55.678456534s ago: executing program 5 (id=1290): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x10300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x36fb) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r2, 0x0, 0x5) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/004/001\x00', 0x305881, 0x0) getpgid(r0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xc, 0xffffffffffffffff, 0x9, 0xa2a0, 0x7fffffffb000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) brk$auto(0x7fffffffefff) mmap$auto(0x400, 0x20000000001, 0x17, 0x1020000000000eb1, 0xffffffffffffffff, 0x7fff) rseq$auto(0x0, 0x4, 0xffffffa3, 0x400008) r3 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/times\x00', 0x50d041, 0x0) mmap$auto(0x0, 0x400005, 0x101, 0x11, r3, 0x7ffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x4000000, 0x22, 0x3, 0x14, 0x4, 0x8000) fsconfig$auto_SHMEM_HUGE_FORCE(r1, 0x8, &(0x7f00000000c0)='\x9b\x1b\x00\x00\x00\x00\xe3\xbd\xc7\xece\xcb0 \xc9\x96\xb9g\xe9\x82/CK\xab\xa1\xae\x81v\xffd\xff\x82\xa12j\xf0b\xa5\bgb\x7fR\xb5^\x9e\x05\xfcB8\x95V\x97P\x93\xcd\x8a\xbd\xd2S#\x00\xb5\'\xf4W\r\xf8\a\xbb\x98\xbec\xcf\xf0\xf5V2r1) (async) r3 = getpgid(0xffffffffffffffff) nanosleep$auto(&(0x7f0000000080)={0xfb5, 0x3}, &(0x7f00000000c0)={0x10000, 0x8}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty1\x00', 0x1, 0x0) (async) ioctl$auto_BLKGETSIZE(r2, 0x1260, 0x0) close$auto(r2) (async) fadvise64$auto(r4, 0x101, 0xf, 0x5) (async) ioctl$auto_FIONREAD(r1, 0x541b, 0x237) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x1, 0xc352, 0x9, 0x3) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', &(0x7f0000000180)="b3135c647b3a0f98dea56a", 0x10000, 0x6) (async) msgctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000240)={{0xa35, 0xee01, 0xee01, 0x871, 0x7c9, 0xfffff6a4, 0xa2d9}, &(0x7f00000001c0)=0xd0, &(0x7f0000000200)=0x5, 0x3ff, 0x8, 0x7, 0x6, 0x4, 0x1ff, 0x4, 0x400, @inferred=r3, @raw=0xaaa}) shmctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000440)={{0xff, r5, 0xffffffffffffffff, 0x0, 0x9, 0xd, 0xff}, 0x1b2e, 0x7fff, 0x2, 0x8001, @raw=0xb4c, @inferred=r3, 0x5, 0x0, &(0x7f00000002c0)="d2a810713b25dc9b6c4043fdab53afdf37fc77892654b7bb6c2f9abeacf0fe1ec7a9231952c44640a03d8a8991b0b2cf359d5c107df524f64c482683264d53a5aeac4b107833f1d0ea9d0089ce3a78ad5f84c20dd5b88042b8acccf39b4ae5aa48222baefc090e7848736a9435dcc56908bff69c9596298dd49eab7222748934e7f6f93847971902e24a797f938e9c60", &(0x7f0000000380)="162e0d7af10aed6e12faf2ded6f9977f7be6a8a03accab175a0b12f61721841511185ace7469936c984a4cccba06dae435d77e6084df379f9133995229e3c7745212940d2d92c32777e2326b7fb878ab04f5fa8be2c25a7bfa46fbc29d222cd94d0cdf5a2c11e76515d87a9afa8783970f222634ae7b5004a8be8481d87e997507b28e0f59290d4523945d9f3c4c4c8b27e70896485fb58ac0ed0b6fb6687bc03cebe59cf79219712924f9bc822d2f7a59f02d1f3380ceb95c"}) ioctl$auto_BLKIOOPT(r2, 0x1279, 0x0) (async) splice$auto(0xffffffffffffffff, &(0x7f00000004c0)=0xffffffffffffff84, 0xffffffffffffffff, &(0x7f0000000500)=0x7, 0xbf, 0x2) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) (async) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000580)={0x1, 0xc0, {0x1, 0x9, 0x6, 0x8001, 0xc76, 0x5, 0x9b, 0x7, 0x4000000}}) (async) read$auto_hpet_fops_hpet(r2, &(0x7f00000005c0)=""/79, 0x4f) (async) write$auto(r0, &(0x7f0000000640)='\x00', 0x996) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x45c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x800}, @NL802154_ATTR_PEER={0x15d, 0x28, 0x0, 0x1, [@generic="1b9f56ee2c395a40d0a8d063ddbc7b72ac6219fc0b03a4a2cdf443c44fd42aa2be501c027f400720b95300c1e1ee50aa47619ad2610e51a6fa9c3b6d32216e29b882d899cf83cb05c02f0c9829b5c97c28607069563f1d41e2bed86b2f4c422aa73bfe14e9f10c1a1e3177e8467ac03f3c87ca3bbdb87e9c17dc0cc435586de9141b5e3d89cb126fe9d5d3aff0453ae4d98a9327bf761449bcb8f02665fbccfa1ff4de3096dc2a29e70ef677c59e981fe8aa87cb3a6cfc581b72a3a4182d8c9aca58ee0ff20da105778b75ef95a306", @nested={0x14, 0x29, 0x0, 0x1, [@nested={0x4, 0x69}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x18}]}, @generic="c7a11c795cf79281885aacf2d2ecd49ecaeebf7fd6eea6a915bea826d17b1b01221f7ce51108d429969c79c88bb8c97526f6906aa1aef01f1f543a8dea1c024ec97d8c4a7b6fdc1735380bd01891e716142f71147f07e84d7bd80ca899021fa9be08", @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@private0}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffbe42}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x10000}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x30}, @NL802154_ATTR_COORDINATOR={0x2b0, 0x1e, 0x0, 0x1, [@nested={0x15a, 0x11e, 0x0, 0x1, [@generic="81791257fa9f794a7b4ce9e3908c4090fde7d66d3cc5537f9a7e0e14a2e6ab049c5943fbf20c12c3853e32808a44bc9e9a6679fe6b62346d43762314c43d49a0ee332c94d04b5c0a4d5039f02f973b29c4f50cf301733086bbffb2fb85c412de8999b15f19ecc6c609195d5c0dfdd6fbbfd1256d338859423a4f963db0165c661ac5ca436f924ca0c0614bf3d1abe4c0e221e4587f7dae768d45e3f99232", @generic="b8d4de38d88cd88e953a0394582443f1936b13570a639d46d7ce65b334498575eff309869d98d4e761c66f83d7bafb3c19ba39f49b991777a8cfd1490b7dc0ba669615f2142ebd7d9bc277f4acfdf1238e11d1521ac850a5f970ec83944e5539880af2d7d54d1c3ed81eebbdabb1892914a0d1cd0fe835036b734fde5d875f85db186c4967ef3b8e90f5d4b23a0593ae24257e68ef652e3629e24bae17de86f689756b0b0d68acf8b966b8b8", @nested={0x4, 0x60}, @nested={0x4, 0xf6}, @nested={0x4, 0x102}]}, @nested={0x132, 0xa7, 0x0, 0x1, [@generic="1e118daee32b84ec4b9c17375a2a7353f99c4e25f0626438755e2c39b25081d2678b37a301a54e2a918f6803767844d172d64f7158016444a104bc3094fff9d23311b2c04de5f57f9f94a04bf1fdafb8628c242b1556b52abcfd76f5e19757c1e38a9593459c349b362167d7f8296719921a5e6782114fc4359f41c9f1ef3cf68ad5d7cb8ef5c364b1d78b360b508865b0748bdb85ec8da34a85a62b2890885ada0cc91e2902c9b899a4683ba1f7ddeee2b1dc1f80e8b31315bf0a", @generic="d6c969c3bec1aaa1b752daec5409b0ef3507535f9637493e766c1af331d8866869475eecd05c44f65b50d88792edcbbcf0e8b6042c4c2da98e474c07d280ff1555996db4476b6762679b372cdf83968372d622970ff9101899c8626eb0db74a4ca618726301e70", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @nested={0x4, 0xfd}]}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0xb1}, @typed={0xc, 0x97, 0x0, 0x0, @u64=0xfffffffffffffff9}, @nested={0x8, 0x133, 0x0, 0x1, [@nested={0x4, 0x2c}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) (async) setresuid$auto(r8, 0xee01, r5) (async) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/neigh/team_slave_0/base_reachable_time_ms\x00', 0x70d800, 0x0) (async) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000c40)={@raw=0x4, 0x7, 0xc12, @unused, @subvolid=0x7fffffff}) (async) ioctl$auto_BCH_IOCTL_DISK_REMOVE(r0, 0x4010bc05, &(0x7f0000001c40)={0x4}) (async) ioctl$auto_BCH_IOCTL_DATA(r0, 0x4070bc0a, &(0x7f0000001c80)={0x6, 0x5, 0x2, 0x10000, {0xfff, 0xe249, 0x2}, {0x4, 0x4, 0x10}, @scrub={0x7f}}) (async) statx$auto(0xffffffffffffffff, &(0x7f0000001d40)='./file0\x00', 0x4, 0x0, &(0x7f0000001d80)={0xfffff000, 0x9, 0x1, 0x3, r5, r6, 0x5, 0x2, 0x2, 0x9, 0x0, 0x8000000000000000, {0x4, 0x6eeb}, {0x8, 0x6}, {0x6, 0x1}, {0xdb5, 0x1}, 0x100, 0xcb4, 0x7, 0x0, 0xffe, 0x0, 0x1, 0x6, 0x6, 0xf, 0x7ff, 0xfffffffc, [0x1, 0x7, 0xfff, 0x1ba, 0x2, 0x7, 0x9, 0x8, 0x1]}) 55.065859527s ago: executing program 5 (id=1293): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0285629, r1) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r2, &(0x7f0000001c80)=""/12, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x0, 0x7, &(0x7f0000000180)={0x8000000000000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000500)={0xe}) r3 = socket(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf25040000001400018008000200000000000800010002"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000180)="3c453f9a379beac02ba34f1e28d492d839eb7d12dc41981259f0c6c1647ee86e7231f744276911161b7b5db67298436d2c5a2a3f3e8e3dba4625a017df33a15a0b4711", 0x63) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f00000000c0)={&(0x7f0000000740)="4ade001d321e3d8c0554c0d4531219a83fc7e72df1cdd8f8795cedc83c9615eab9c91bf1d7f2800b51be7a78da49ee1d05bebe484021d70fcecd403d19bef8688b4250dd7f981cc134b8f72894d04da12aaaed35820decf9c51c51f1060000000000000083e86690dd936512c09b4955e2c435b4", 0x7f}, 0x6, 0xb) shmctl$auto(0x3, 0x8, &(0x7f0000000340)={{0x9, 0xffffffffffffffff, 0x0, 0x9, 0x2, 0x2, 0x4}, 0x2, 0x8000200, 0x4, 0x8009, @raw, @raw=0x8, 0xfffa, 0x0, &(0x7f0000000680)="3c3be0170121eddda84cd1874a52a06567342b7bfd7bc467423fa609cdf73fec0d49698ec1980fef3a9018b91a10702835edddfc6220e18780c602b6751e1f3f87722c24711243775ea95eda289fe75a0d0b38737f7745aaee987c5108b79a18d7ee4959ed3f9150d54cb9c14e35070098e90c624dcd46dfac103b15a8506f2528fc6c2a5c0bb2", &(0x7f0000000200)="0e2c427b930a95615c060000000f488b96756e50692208901d98e584bfc91bf4f1965bddbe6a864355f735de6383813769b553cac75b09073fa43d583672aff6251a91bedf948e39136727191286ccb4bfc0b39c00"/97}) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000540)={@_si_pad}, 0x1, &(0x7f00000005c0)={{0x8, 0x1}, {0x404, 0x9}, 0x800000000009, 0x101, 0x40, 0x0, 0x8001, 0x2, 0x100, 0x7, 0x6, 0x1, 0x0, 0x18000000000, 0x6, 0x7f}) 48.013769397s ago: executing program 35 (id=1262): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto(r0, 0x0, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0xfffffffe) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x280000, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERNAME(r1, 0x4, 0x1c, 0x0, &(0x7f0000000100)=0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x441, 0x0) unshare$auto(0x20000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(r1, r1, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) setns(0xffffffffffffffff, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0xd4d0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x68500, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) socket(0x15, 0x5, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 39.945382723s ago: executing program 36 (id=1293): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0285629, r1) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r2, &(0x7f0000001c80)=""/12, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x0, 0x7, &(0x7f0000000180)={0x8000000000000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000500)={0xe}) r3 = socket(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf25040000001400018008000200000000000800010002"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000180)="3c453f9a379beac02ba34f1e28d492d839eb7d12dc41981259f0c6c1647ee86e7231f744276911161b7b5db67298436d2c5a2a3f3e8e3dba4625a017df33a15a0b4711", 0x63) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f00000000c0)={&(0x7f0000000740)="4ade001d321e3d8c0554c0d4531219a83fc7e72df1cdd8f8795cedc83c9615eab9c91bf1d7f2800b51be7a78da49ee1d05bebe484021d70fcecd403d19bef8688b4250dd7f981cc134b8f72894d04da12aaaed35820decf9c51c51f1060000000000000083e86690dd936512c09b4955e2c435b4", 0x7f}, 0x6, 0xb) shmctl$auto(0x3, 0x8, &(0x7f0000000340)={{0x9, 0xffffffffffffffff, 0x0, 0x9, 0x2, 0x2, 0x4}, 0x2, 0x8000200, 0x4, 0x8009, @raw, @raw=0x8, 0xfffa, 0x0, &(0x7f0000000680)="3c3be0170121eddda84cd1874a52a06567342b7bfd7bc467423fa609cdf73fec0d49698ec1980fef3a9018b91a10702835edddfc6220e18780c602b6751e1f3f87722c24711243775ea95eda289fe75a0d0b38737f7745aaee987c5108b79a18d7ee4959ed3f9150d54cb9c14e35070098e90c624dcd46dfac103b15a8506f2528fc6c2a5c0bb2", &(0x7f0000000200)="0e2c427b930a95615c060000000f488b96756e50692208901d98e584bfc91bf4f1965bddbe6a864355f735de6383813769b553cac75b09073fa43d583672aff6251a91bedf948e39136727191286ccb4bfc0b39c00"/97}) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000540)={@_si_pad}, 0x1, &(0x7f00000005c0)={{0x8, 0x1}, {0x404, 0x9}, 0x800000000009, 0x101, 0x40, 0x0, 0x8001, 0x2, 0x100, 0x7, 0x6, 0x1, 0x0, 0x18000000000, 0x6, 0x7f}) 35.616660565s ago: executing program 1 (id=1354): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0, 0x0) 35.448282886s ago: executing program 1 (id=1355): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x3) mbind$auto(0x0, 0x100000004, 0x80, 0x0, 0x6, 0x2) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r2, 0x0, 0x20) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000020000000400000005001100000000003b40c0e4c8a365aa85b49e1a8d9cd7a3958e7ed72393d75762e59588ef802921598b1fff0524410711f82a17b8b593f819663722e02756d2e4698fc0271d71fd6f3cfed517f8454a3ab4768cd95e95d8309a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x64) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_STAT(0x1, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) add_key$auto(&(0x7f0000000000)='\x00', 0x0, &(0x7f0000000240), 0x2, 0x31f) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x2, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0) 31.318143191s ago: executing program 1 (id=1365): unshare$auto(0x40000080) r0 = open(&(0x7f0000000140)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) getdents$auto(r0, &(0x7f0000000080)={0x7, 0x101, 0x3ff}, 0x1fd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x68200, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 29.045872585s ago: executing program 1 (id=1367): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0xe3db) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x1, 0xfffffffc) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) r2 = timerfd_create$auto(0x6, 0x0) futimesat$auto(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x40, 0xffffffffffffffff}) (async) connect$auto(0x3, 0x0, 0x54) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) socket(0xa, 0x3, 0x2c) (async) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000001c0), 0x189002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/45, 0x2d) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2900, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)=0x6) read$auto(r4, &(0x7f0000000140)='/dev/ppp\x00', 0x5) (async) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)="adf61293aede64f3b269db3b30da5d2ad390daa7ca151ec16902f59ba28d894043eee7b145e9f0976ce13ab371fedccf2f2e6f284df8f8c9eb85b38afca3830db2b577931916224a792ce97eeec17aabdb673bda5beccffcbf5362fad40aadd24c7c771442e45a0a20bde376fa6aa439479e4b9ae40671150d6a6872fe014b836039fc34625d21448b54a6f24e2b2439bdff3f019619e7a187126c34ac86788dfb993c465ebc1be3c5e091f56fb42be9560cf1bfb2ff41d39935410bc3b299bf9e", 0xc1) (async) write$auto(0xffffffffffffffff, 0x0, 0x2) 27.437943966s ago: executing program 1 (id=1371): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0, 0x0) 27.192848994s ago: executing program 1 (id=1373): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x3, 0xb2f7, 0x6f, 0x110, 0x5, 0xf) (async) prctl$auto(0x1003f, 0x7fffffffbffffffd, 0x4, 0x200000000000003, 0xa) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x24cc, 0x10001, 0x8, 0x410, 0xffffffffffffffff, 0x2000000) modify_ldt$auto(0x11, 0x0, 0x10) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x04') 11.754621991s ago: executing program 37 (id=1373): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x3, 0xb2f7, 0x6f, 0x110, 0x5, 0xf) (async) prctl$auto(0x1003f, 0x7fffffffbffffffd, 0x4, 0x200000000000003, 0xa) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x24cc, 0x10001, 0x8, 0x410, 0xffffffffffffffff, 0x2000000) modify_ldt$auto(0x11, 0x0, 0x10) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x04') 8.370848731s ago: executing program 8 (id=1428): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7fffffffffffffff) socket(0xa, 0x6, 0x4000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0x4, 0x1002020009, 0x3, 0x1000eb1, 0xfffffffffffffffa, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = open(&(0x7f0000000140)='./file0\x00', 0x3a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000001440)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rB\xf1\x81\xf4!!\t\xbfABJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0xe) sendmsg$auto_NCSI_CMD_PKG_INFO(r1, 0x0, 0x44088) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_nsim_dev_health_break_fops_health(r0, &(0x7f0000000340)="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", 0xfffffffffffffea8) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="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"/361], 0x174}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000815) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0xa, 0x40000000000006, 0x10, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 7.091323145s ago: executing program 7 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)={0x90, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x6b, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="fc99d1dc136478f64f93aabdba8c7b10a58e4c5c83a828f02c9e1c1c1d9c1f224003e2b01a60afedeaab5de830536ba7c3e006be65efc30893c475316a593c0bc8801a77979dff2bb9ebefee32c12c77366212", @typed={0x8, 0x6b, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xe4, 0x0, 0x0, @binary}, @nested={0x4, 0x101}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x90}}, 0x4000000) 6.797543618s ago: executing program 7 (id=1435): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf46", 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x22180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x9ba4133ca0d05eca, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) 6.156014386s ago: executing program 8 (id=1436): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x9, 0x837, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', &(0x7f0000000140)=0x200) (async) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r1) (async) write$auto(r0, 0x0, 0x5) 5.677849212s ago: executing program 8 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r2 = fcntl$getown(0xffffffffffffffff, 0x9) (async) r3 = clone$auto(0x7ff, 0x81, &(0x7f0000000080)=0x7d8d2769, &(0x7f00000000c0)=0x7f, 0x8) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_NAME={0x7, 0x1, '!+\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r1}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_NAME={0xc, 0x1, '+*#/-#+\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r0) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x7, 0x2, '!+\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_NAME={0x9, 0x2, '%$\xb2(\x00'}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0xa, 0x2, 'bond0\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004080) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/pagemap\x00', 0x2000, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) r6 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000440)=0x1000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000000480)={0x1340, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x100}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_FILS_DISCOVERY={0x10e8, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc5, 0x3, "411c2ecadfe20d6b277379cb1400b6825b87f7dcc73a91bf55832728e08b2c81f9aea60257b4b53cb464b0b6196c6313ec22d8d5b8bd3ab8edc2a9d9a80e142fa71a2c05c3e349e865a5088aa5650cde3399c14b09dcf736f4435b7be1266b25b1f6c45ecc4c05edbc0719743370b5264a900ab92eaa0018d3e8d2a1052fc95abc7c1b4bf4028293c4636ea99de645c0371dce9d2defce202c5047e1aa0092df198d824de533f041b31a392444c5f2be37d2d8c8bf24d7f798c245020fc9c4593b"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x1004, 0x3, "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"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1000}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x17f, 0x84, 0x0, 0x1, [@typed={0x4, 0xa1}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r6}, @nested={0x109, 0xa7, 0x0, 0x1, [@typed={0x5, 0x12e, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x133}, @typed={0xc, 0xa0, 0x0, 0x0, @u64=0xa8}, @generic="a152a71ba9b85b93de08ac867ef67eeaa2dd1cf1c83947c2ed79908bdcd0a3cbc078065519f9dc766ed3c738e0914b8da2008861963ae5c584ab1cee5da1b7253a4c0bbf426a0f4ab0dfb4e14f92453d57e7fafc30c6e1051188aa0f826fcfe904b400999d565be439c5b729eb01b666faa4391b903e803a54f20918767d200a8cc26a6ba1cc2ec0a49749a34bdf4ab9987bb2117cb62f16b5a3eb71a04f8376828f035bc92e8fceb01aec83cd6fcea60cb40246eb954df3b273f1f4255acb54acbc8867532a09b52b76f76274edf7f2df80b065e66ddfa9485c9bf92c", @typed={0x8, 0xb8, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xa9}, @nested={0x4, 0x94}]}, @generic="1c4e660116b891b51fb5bfe141272ca74c9b33e9d4d70ca56b6133a75d07eb48daeb0cf75238744dd7b40e39bdfd92802c530e4327be790fee22d82da38e054c385f91a8b5930255b1a54019cee51125c17a038b3f25ddf735049f7a4fff8c724a6b21"]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xd78}, @NL80211_ATTR_EHT_CAPABILITY={0x9e, 0x136, "39d1b4be5f1a97a7f7f5b4a48e3e7452b0a0b5542b6060a73d9457e708f75653614ba254e1489ba29b81a99d6dc5555d335dbe5936955ba8568f4bb153e26e954b466efd8961ac9e7bb92eea96f3b9f5c3784a8d091b7ceb47a5a7430f83e29f76deeed2efac72df1d4212090e0b5d6378d3122b6d2738b6705a1a2fc662b5e741be5b10c200142d02f69f19fdb554e3e43d14d9ce91492368ee"}]}, 0x1340}, 0x1, 0x0, 0x0, 0x1}, 0x400e0) (async) mknod$auto(&(0x7f0000001840)='./file0\x00', 0x80, 0xffffffff) (async) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r6, 0x40085503, &(0x7f0000001880)={0x4, 0x20, 0x1, "090a495998d6dc7e789127780a66c46fdd6816c960e054f4e017a6b12bcb81bf731dc07da285a6f1a7d56885ded0ba900887af505b2642ac4e1d01f78b67263c6500a2ed7e9ff786d44660c659c70bc32e01f774c6d3dbe3ab8255caca608e9fd708d8682b2eda5f2050788ee2d303af5cf3fc9f86d1ac01fc4892b5afd36516f96ef22eb8da01adcd5dfe8cdb7a2b0a8488147159bc86aa22ce0c23ebbd803bee7be478162a1ee32d6d967b71a24bd6c3bec53eb4fe29cdb14abb10998192b1f40b7657f33f2ae6e0598214ae9712bc4e07e59a184866f4d31e3f77f7108b4ccd3469ed671a33b5d7777213"}) (async) r7 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001980)='/proc/thread-self/projid_map\x00', 0x40c000, 0x0) r8 = syz_open_procfs$namespace(r3, &(0x7f0000001a00)='ns/mnt\x00') sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa4, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x58b}, @NL80211_ATTR_MLO_TTLM_DLINK={0x67, 0x148, "acb1b87f697f7fed86a9b5e7146f353f3a03735197cb9de3f52f486d6e507f9464995f549567f300d325d013c4deb6023583a464b01f5cff2e0e4058e4518a0b0234b1b84e4f3bca5a7682566bcac4e138ae89c8debeaacd011216f5d322ef918008c6"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}]}, 0xa4}}, 0x4008010) (async) r9 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001bc0), r6) sendmsg$auto_NLBL_MGMT_C_ADD(r6, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x60, r9, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x21, 0x1, '/proc/thread-self/projid_map\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) shmctl$auto_IPC_RMID(0x101, 0x0, &(0x7f0000001dc0)={{0xe, 0x0, 0xee00, 0xfffffff8, 0x8, 0x1, 0x90}, 0xffff6b5a, 0xffffffff846f1ccb, 0x9b, 0x8, @inferred=r3, @raw=0x2, 0x8, 0x0, &(0x7f0000001d00)="9d1c946ee3ebcdca", &(0x7f0000001d40)="da8f1b25d15ead1a41c58c560c9420794a97eb6de6cab353282e7b3f5e4dcec5d9841e222abb7cc39a57a500c10a788ac0129aba113364430294710899fd2ed8edb859983a4ec4c4558b58300cc799543bf7798ccaff433b5397fcea682f2765b0bcca48847683c896c6daa6e534694bc75d6da6f73977d2"}) (async) shmctl$auto_SHM_UNLOCK(0x3, 0xc, &(0x7f0000001f00)={{0x4723, 0xffffffffffffffff, 0xee01, 0x1000, 0x3, 0x8, 0x4}, 0x2, 0x6, 0x8, 0x5, @raw=0x6, @raw=0xffff8000, 0x2, 0x0, &(0x7f0000001e40)="3676550399d0278b0541a91be1dd7b72d77bf07cc0a7fb276892b50c480a083f2ecebe0e744ed69695bb587cb726e4722c8eb8cedd706eaeb10ab7516674c42dcad27bc13af78c629b76a24e3077757af55cfafe939d3acedd5d1563b3ed636051c8ca9468e583aa7a282c224349117c097fdb68", &(0x7f0000001ec0)}) setreuid$auto(r10, r12) (async, rerun: 64) inotify_add_watch$auto(r8, &(0x7f0000001f80)='./file0\x00', 0x6c) (async, rerun: 64) r13 = ioctl$auto_TUNSETOWNER(r6, 0x400454cc, &(0x7f0000001fc0)=0x9) sendmmsg$auto(r13, &(0x7f0000002200)={{&(0x7f0000002000)="ec045e2cbad0b0b3d8007da26f979bcf1b9ddf1add00d1ecc90a35e5274403cb677a8d071761645aa2b06605d73e88446e6ece7428ea4cf8d32f2fc22bca0bb1215ead86c7482ff259a7bfd8ebb1887608703cb4d582da6d63bd51654b66144976f5fd8a8840f0fbc86775a3d5c2c866e06d088f7352fe32561d05550344", 0x8, &(0x7f0000002180)={&(0x7f0000002080)="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", 0xfff}, 0x3dc, &(0x7f00000021c0)="e7ed3da4512ef8b91e", 0x1c7, 0x9}, 0x1}, 0x8, 0x7) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000002240)='/dev/snd/controlC0\x00', 0xf81, 0x0) ioctl$auto_RTC_PIE_ON(r13, 0x7005, 0x0) (async) rt_sigqueueinfo$auto(r11, 0x5, &(0x7f0000002280)={@siginfo_0_0={0x80000000, 0x5, 0x2, @_kill={r3, r10}}}) (async) r14 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002340), r13) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000002380)={'nr0\x00', 0x0}) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000002680)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f0000002400)={0x230, r14, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x75}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x181}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 5.551897985s ago: executing program 8 (id=1439): mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_STAT(0x1, 0x2, 0x0) unshare$auto(0x8) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0x401, 0x4000008000) madvise$auto(0x4, 0xf9, 0x7fffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) epoll_create$auto(0x6) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 4.023064149s ago: executing program 7 (id=1440): r0 = socket(0x10, 0x2, 0x0) (async) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "ffff030000000000"}, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0xc814) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) splice$auto(r0, &(0x7f00000001c0)=0x9, r0, &(0x7f0000000240)=0xfffffffffffffe01, 0x4, 0x2) 3.745964362s ago: executing program 7 (id=1441): msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f00000001c0)={{0x200, 0x0, 0x0, 0x7eff, 0xb, 0x401, 0xff}, &(0x7f00000000c0)=0x6, 0x0, 0xa, 0x400000000009, 0x5, 0xfffffffffffff001, 0x3, 0x5, 0x0, 0x7, @raw=0x4b0, @raw=0x40}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x9) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}}, 0x5, 0x20000000) socket(0xa, 0x3, 0x3c) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/loginuid\x00', 0x80400, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x1, 0x4d, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x6858) shutdown$auto(0x200000003, 0x2) 3.390595298s ago: executing program 8 (id=1443): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r1, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9}}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}]}, 0x38}}, 0x8080) socket(0x15, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) fsconfig$auto(r0, 0xd, &(0x7f0000000140)='/-(}\x00', &(0x7f0000001240)="a353b3d176a182e02d1ecb7ec3379e2d5dd0fc324e6bef604c6a9619752b65ca7ea3489d844798ecd57a39780ee13e13b55f3e524e0a780b22663126531fb741899a792558c90b38330ed7341031bccc8fe64294908fd26520db9395ba", 0xee00) (async) fsconfig$auto(r0, 0xd, &(0x7f0000000140)='/-(}\x00', &(0x7f0000001240)="a353b3d176a182e02d1ecb7ec3379e2d5dd0fc324e6bef604c6a9619752b65ca7ea3489d844798ecd57a39780ee13e13b55f3e524e0a780b22663126531fb741899a792558c90b38330ed7341031bccc8fe64294908fd26520db9395ba", 0xee00) getsockopt$auto(0xffffffffffffffff, 0x10d, 0x10, 0x0, &(0x7f0000000000)=0xb) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/cec9\x00', 0x2000, 0x0) timerfd_create$auto(0x9, 0x0) (async) r2 = timerfd_create$auto(0x9, 0x0) futimesat$auto(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x40, 0xffffffffffffffff}) ioctl$auto_CEC_G_MODE(r2, 0x80046108, &(0x7f0000002500)=0xff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rt_cache\x00', 0xa182, 0x0) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rt_cache\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000240)=""/4096, 0x1000) (async) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000240)=""/4096, 0x1000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x3, 0x9, 0x2, 0x1000948b, 0x5, 0x15f4da0a, 0x57b, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xc, 0x2, 0x10001]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x3, 0x9, 0x2, 0x1000948b, 0x5, 0x15f4da0a, 0x57b, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xc, 0x2, 0x10001]}, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0xa, 0x3, 0x2c) (async) socket(0xa, 0x3, 0x2c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x1, 0xf1, 0xb0, @raw=0x68e8}}) 3.218360671s ago: executing program 6 (id=1444): mmap$auto(0x0, 0x4020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) flock$auto(0x1, 0x6) fanotify_init$auto(0x5, 0x2) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xdd6, 0x1, 0x4, 0x0, 0x1, 0x80000000368e, 0x8, {0x110000000, 0x10000}, 0x100000000000, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x2}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r1) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6a1c0000828778d86ff6572d37290ba70455e1bb31d854639c980fc64b4befaa000000004df8a27f67634b1097f8235e7c9b2fd8d85952ddcd1d180a8ad45f04d70700f856e1089410f634d2687b58829f3b33848f9bd572bf121e737852dc0b83eca3107f94e75e3f95f13e79393ad87b3a11060000000000000034103fee404cc148e413a500000000000000", @ANYRES16=r2, @ANYBLOB="01032abd7000fbdbdf250a00000008000a0023342517", @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20008810) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x1, &(0x7f0000000440)={@_si_pad}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f712035effbbf217b8d8961076539f54346fbfd1928aa4144aad01fcfb20306728955328922b3e456f4138006bbeaa70804a0e53807734fe5d3716e525d67182e32ae6d03b87e4eefe7e8ae0d89e84a9754f8bc6a797e0572e8a92f7b83c44c0302cbd421364e9ac73b3088d0fb3779b93644a9cff43d4240dac30ffaff72820db211e7807ec1dcfb177a77b7dc6"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x400c8d4) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000700)=""/4096, 0x1000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) r7 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r7, 0x0, 0x0) pwrite64$auto(0x2, 0x0, 0x0, 0x5) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 3.099244562s ago: executing program 7 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="270000f7f7049b8732ccf75a7500"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000011c0)=""/118, 0x76) mmap$auto(0x0, 0x2000b, 0x4, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xfdf3) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) write$auto(0xca, &(0x7f0000000040)='\x04\x92K\xfa8j\xf0L3\x9b<\xe9\'\xa7H\xef\x9bOa\rVwx\xbfZp\xd55>h6~Dz\xe4\x00}\xf1\x1d\x00.R\xd5\x89|d\v', 0x10) (async, rerun: 32) bpf$auto(0x5, &(0x7f0000000000)=@test={0x9, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) (rerun: 32) socket(0xa, 0x2, 0x0) (async) unshare$auto(0x40000080) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7) mmap$auto(0x0, 0x20409, 0x4000000000df, 0xeb1, 0x0, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) (async, rerun: 32) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) fcntl$auto(0xffffffffffffffff, 0xfffffffd, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) 2.390501605s ago: executing program 6 (id=1446): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r2 = io_uring_setup$auto(0x8, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) (async) readv$auto(r1, &(0x7f00000002c0)={0x0, 0x7}, 0x8) (async) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x63}, 0x1) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x4821c0, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) faccessat2$auto(r2, &(0x7f0000001080)=':,\x00', 0x0, 0x7) (async) read$auto(r3, 0x0, 0x20) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x2d2802, 0x48) faccessat$auto(r4, 0x0, 0x2) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x30, 0xffffffffffffffff, 0x7ffffffffffffffc) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) prctl$auto_PR_SCHED_CORE_CREATE(0x8000, 0x1, 0x0, 0x4, 0x1) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xc44c1, 0x0) (async) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) (async) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, 0xfffffffffffffffd) 1.797632348s ago: executing program 6 (id=1447): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/aid\x00', 0x220c01, 0x0) set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4) r0 = waitid$auto_P_ALL(0x0, 0xf47c, &(0x7f00000001c0)={@_si_pad}, 0x643, &(0x7f0000000280)={{0x4db}, {0x80, 0x3}, 0x3, 0x1, 0x55, 0x64, 0xc, 0xffffffffffff1f02, 0x3, 0x2, 0xb0, 0x40, 0x6d67, 0x3, 0x10000, 0xffffffffffff81ea}) bpf$auto(0x2, &(0x7f0000000100)=@task_fd_query={r0, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0xfffffffffffffffe}, 0x6f4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x5870, 0x6, 0xeb1, 0xfffffffffffffff7, 0xd9) getsockopt$auto(0xffffffffffffffff, 0x24, 0xfffffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r1) semctl$auto_SEM_STAT_ANY(0xe, 0xfffffffb, 0x14, 0x7) sendmsg$auto_OVS_VPORT_CMD_GET(r1, 0x0, 0x20000004) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) socket(0xa, 0x2, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x11, 0xffff, &(0x7f0000000040)=@ax25={0x3, @bcast, 0x6}, 0x16) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) flock$auto(0xffffffffffffffff, 0x4) socket(0x2, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0x2b, 0x4, 0xff4) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x44243, 0xe1d2b27bdc14aabc) 1.686648051s ago: executing program 8 (id=1448): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x4b67, 0x38) 616.456225ms ago: executing program 6 (id=1449): close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) (async) socket(0x2, 0x3, 0x100) (async) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) (async) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), r1) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 505.886685ms ago: executing program 7 (id=1450): syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x450400, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000300)={0x7, 0xffff, 0x70}, 0x1f4, 0x0) semctl$auto_GETNCNT(0x0, 0x0, 0xe, 0xa8) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x15) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/pci0000:00/0000:00:04.0/resource1\x00', 0x80401, 0x0) write$auto(r0, 0x0, 0x800f) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) getsockopt$auto(0xffffffffffffffff, 0xe0000000, 0x7, &(0x7f00000000c0)='{]\x00', &(0x7f0000000100)=0x1) 276.409202ms ago: executing program 6 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)={0x90, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x6b, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="fc99d1dc136478f64f93aabdba8c7b10a58e4c5c83a828f02c9e1c1c1d9c1f224003e2b01a60afedeaab5de830536ba7c3e006be65efc30893c475316a593c0bc8801a77979dff2bb9ebefee32c12c77366212", @typed={0x8, 0x6b, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xe4, 0x0, 0x0, @binary}, @nested={0x4, 0x101}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x90}}, 0x4000000) 0s ago: executing program 6 (id=1452): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB]) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0, 0x0) kernel console output (not intermixed with test programs): [T10060] dump_stack_lvl+0x16c/0x1f0 [ 338.267597][T10060] should_fail_ex+0x512/0x640 [ 338.267636][T10060] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 338.267687][T10060] should_failslab+0xc2/0x120 [ 338.267744][T10060] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 338.267782][T10060] ? __proc_create+0xc3/0x8c0 [ 338.267819][T10060] ? __proc_create+0x2ce/0x8c0 [ 338.267861][T10060] __proc_create+0x2ce/0x8c0 [ 338.267900][T10060] ? __pfx___proc_create+0x10/0x10 [ 338.267955][T10060] _proc_mkdir+0xb9/0x200 [ 338.267993][T10060] ? __pfx__proc_mkdir+0x10/0x10 [ 338.268029][T10060] ? trace_kmem_cache_alloc+0x28/0xc0 [ 338.268075][T10060] ? crng_make_state+0x48e/0x6d0 [ 338.268120][T10060] proc_net_ns_init+0x265/0x410 [ 338.268161][T10060] ? __pfx_proc_net_ns_init+0x10/0x10 [ 338.268199][T10060] ops_init+0x1df/0x5f0 [ 338.268249][T10060] setup_net+0x21e/0x850 [ 338.268299][T10060] ? __pfx_setup_net+0x10/0x10 [ 338.268341][T10060] ? lockdep_init_map_type+0x5c/0x280 [ 338.268388][T10060] ? __pfx_down_read_killable+0x10/0x10 [ 338.268422][T10060] ? debug_mutex_init+0x37/0x70 [ 338.268459][T10060] copy_net_ns+0x2a6/0x5f0 [ 338.268512][T10060] create_new_namespaces+0x3ea/0xad0 [ 338.268560][T10060] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 338.268603][T10060] ksys_unshare+0x45b/0xa40 [ 338.268650][T10060] ? __pfx_ksys_unshare+0x10/0x10 [ 338.268704][T10060] ? xfd_validate_state+0x5d/0x180 [ 338.268739][T10060] ? rcu_is_watching+0x12/0xc0 [ 338.268781][T10060] __x64_sys_unshare+0x31/0x40 [ 338.268827][T10060] do_syscall_64+0xcd/0x230 [ 338.268876][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.268908][T10060] RIP: 0033:0x7efe7f38e169 [ 338.268933][T10060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.268963][T10060] RSP: 002b:00007efe80278038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 338.268992][T10060] RAX: ffffffffffffffda RBX: 00007efe7f5b5fa0 RCX: 00007efe7f38e169 [ 338.269030][T10060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 338.269049][T10060] RBP: 00007efe7f410a68 R08: 0000000000000000 R09: 0000000000000000 [ 338.269068][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.269087][T10060] R13: 0000000000000000 R14: 00007efe7f5b5fa0 R15: 00007ffeffe522d8 [ 338.269129][T10060] [ 339.317717][T10079] WARNING! power/level is deprecated; use power/control instead [ 339.597123][T10090] syz.3.869: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 339.662354][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.3.869 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 339.662401][T10090] Tainted: [U]=USER [ 339.662409][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.662425][T10090] Call Trace: [ 339.662433][T10090] [ 339.662443][T10090] dump_stack_lvl+0x16c/0x1f0 [ 339.662487][T10090] warn_alloc+0x248/0x3a0 [ 339.662522][T10090] ? __pfx_warn_alloc+0x10/0x10 [ 339.662565][T10090] ? __get_vm_area_node+0x1b9/0x300 [ 339.662608][T10090] ? __get_vm_area_node+0x1e5/0x300 [ 339.662660][T10090] __vmalloc_node_range_noprof+0x1110/0x1540 [ 339.662700][T10090] ? __do_sys_listmount+0x1c2/0xed0 [ 339.662750][T10090] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.662811][T10090] __kvmalloc_node_noprof+0x2ff/0x600 [ 339.662844][T10090] ? __do_sys_listmount+0x1c2/0xed0 [ 339.662888][T10090] ? __do_sys_listmount+0x1c2/0xed0 [ 339.662938][T10090] ? __do_sys_listmount+0x1c2/0xed0 [ 339.662980][T10090] __do_sys_listmount+0x1c2/0xed0 [ 339.663030][T10090] ? __x64_sys_futex+0x1e0/0x4c0 [ 339.663063][T10090] ? __x64_sys_futex+0x1e9/0x4c0 [ 339.663097][T10090] ? __pfx___do_sys_listmount+0x10/0x10 [ 339.663158][T10090] ? xfd_validate_state+0x5d/0x180 [ 339.663202][T10090] do_syscall_64+0xcd/0x230 [ 339.663247][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.663275][T10090] RIP: 0033:0x7fe3a2f8e169 [ 339.663297][T10090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.663330][T10090] RSP: 002b:00007fe3a3d4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 339.663356][T10090] RAX: ffffffffffffffda RBX: 00007fe3a31b6160 RCX: 00007fe3a2f8e169 [ 339.663375][T10090] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 339.663392][T10090] RBP: 00007fe3a3010a68 R08: 0000000000000000 R09: 0000000000000000 [ 339.663409][T10090] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 339.663425][T10090] R13: 0000000000000000 R14: 00007fe3a31b6160 R15: 00007fff0b533c48 [ 339.663461][T10090] [ 339.663470][T10090] Mem-Info: [ 339.894594][T10090] active_anon:12817 inactive_anon:9 isolated_anon:0 [ 339.894594][T10090] active_file:6669 inactive_file:43520 isolated_file:0 [ 339.894594][T10090] unevictable:1368 dirty:662 writeback:0 [ 339.894594][T10090] slab_reclaimable:10413 slab_unreclaimable:95353 [ 339.894594][T10090] mapped:23963 shmem:1407 pagetables:893 [ 339.894594][T10090] sec_pagetables:0 bounce:0 [ 339.894594][T10090] kernel_misc_reclaimable:0 [ 339.894594][T10090] free:1327443 free_pcp:9673 free_cma:0 [ 339.948030][T10090] Node 0 active_anon:51164kB inactive_anon:36kB active_file:26664kB inactive_file:171780kB unevictable:4008kB isolated(anon):0kB isolated(file):0kB mapped:95760kB dirty:2616kB writeback:0kB shmem:3064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.982278][T10090] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:8kB writeback:0kB shmem:2568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.014743][T10090] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.043785][T10090] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 340.057356][T10090] Node 0 DMA32 free:1430200kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:51116kB inactive_anon:36kB active_file:26664kB inactive_file:167612kB unevictable:4008kB writepending:2616kB present:3129332kB managed:2541756kB mlocked:2472kB bounce:0kB free_pcp:3960kB local_pcp:972kB free_cma:0kB [ 340.107312][T10090] lowmem_reserve[]: 0 0 1 1 1 [ 340.112228][T10090] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 340.140083][T10090] lowmem_reserve[]: 0 0 0 0 0 [ 340.144886][T10090] Node 1 Normal free:3868464kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:34936kB local_pcp:30108kB free_cma:0kB [ 340.164430][T10088] [U]  [ 340.177401][T10088] [U] [ 340.180160][T10088] [U] [ 340.182913][T10088] [U] [ 340.219359][T10088] [U] [ 340.222161][T10088] [U] [ 340.224927][T10088] [U] [ 340.227692][T10088] [U] [ 340.232450][T10088] [U] [ 340.235230][T10088] [U] [ 340.237979][T10088] [U] [ 340.240727][T10088] [U] [ 340.245793][T10088] [U] [ 340.248569][T10088] [U] [ 340.251323][T10088] [U] [ 340.254068][T10088] [U] [ 340.289257][T10088] [U] [ 340.292038][T10088] [U] [ 340.294796][T10088] [U] [ 340.297554][T10088] [U] [ 340.305458][T10106] [U] [ 340.312976][T10090] lowmem_reserve[]: 0 0 0 0 0 [ 340.350540][T10090] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 340.366393][T10090] Node 0 DMA32: 2383*4kB (ME) 2364*8kB (UME) 1434*16kB (UME) 1169*32kB (UME) 773*64kB (UME) 348*128kB (UME) 179*256kB (UME) 97*512kB (UME) 38*1024kB (UME) 19*2048kB (UME) 263*4096kB (UM) = 1433372kB [ 340.386813][T10090] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 340.431880][T10090] Node 1 Normal: 221*4kB (U) 66*8kB (UME) 54*16kB (UE) 14*32kB (UE) 3*64kB (UE) 4*128kB (UME) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UE) 8*2048kB (UME) 938*4096kB (UM) = 3868516kB [ 340.468876][T10090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.497301][T10090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.521152][T10090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.558940][T10090] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 340.599315][T10090] 50770 total pagecache pages [ 340.604573][T10090] 9 pages in swap cache [ 340.636534][T10090] Free swap = 122912kB [ 340.653239][T10090] Total swap = 124996kB [ 340.671443][T10090] 2097051 pages RAM [ 340.675441][T10090] 0 pages HighMem/MovableOnly [ 340.688807][T10090] 429570 pages reserved [ 340.693019][T10090] 0 pages cma reserved [ 344.051300][T10191] Invalid ELF header magic: != ELF [ 344.198938][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 344.275727][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 346.353748][T10234] syz.1.901(10234): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 347.116656][T10255] netlink: 342 bytes leftover after parsing attributes in process `syz.0.905'. [ 347.619236][T10246] kvm_create_vm_debugfs: 14 callbacks suppressed [ 347.619258][T10246] KVM: debugfs: duplicate directory 10246-4 [ 347.689802][T10246] KVM: debugfs: duplicate directory 10246-5 [ 348.472881][ T5848] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 348.472923][ T5848] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 348.488832][ T5848] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 348.488900][ T5848] Bluetooth: hci1: Malformed LE Event: 0x0d [ 349.188019][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.218269][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.226223][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.247690][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.274948][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.307420][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.334801][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.372724][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.411482][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.443463][T10314] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 349.667714][T10321] openvswitch: netlink: IP tunnel dst address not specified [ 350.273725][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 350.283937][ T5848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 350.296770][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: kworker/u9:4 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 350.296809][ T5848] Tainted: [U]=USER [ 350.296817][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.296832][ T5848] Workqueue: hci3 hci_rx_work [ 350.296863][ T5848] Call Trace: [ 350.296870][ T5848] [ 350.296879][ T5848] dump_stack_lvl+0x16c/0x1f0 [ 350.296916][ T5848] sysfs_warn_dup+0x7f/0xa0 [ 350.296938][ T5848] sysfs_create_dir_ns+0x24b/0x2b0 [ 350.296959][ T5848] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 350.296980][ T5848] ? find_held_lock+0x2b/0x80 [ 350.297009][ T5848] ? do_raw_spin_unlock+0x172/0x230 [ 350.297033][ T5848] kobject_add_internal+0x2c4/0x9b0 [ 350.297076][ T5848] kobject_add+0x16e/0x240 [ 350.297104][ T5848] ? __pfx_kobject_add+0x10/0x10 [ 350.297126][ T5848] ? do_raw_spin_unlock+0x172/0x230 [ 350.297148][ T5848] ? kobject_put+0xab/0x5a0 [ 350.297191][ T5848] device_add+0x288/0x1a70 [ 350.297217][ T5848] ? __pfx_dev_set_name+0x10/0x10 [ 350.297256][ T5848] ? __pfx_device_add+0x10/0x10 [ 350.297292][ T5848] ? mgmt_send_event_skb+0x2fb/0x460 [ 350.297338][ T5848] hci_conn_add_sysfs+0x17e/0x230 [ 350.297382][ T5848] le_conn_complete_evt+0x1075/0x1d70 [ 350.297429][ T5848] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 350.297454][ T5848] ? bt_warn+0xe4/0x120 [ 350.297474][ T5848] ? __pfx_bt_warn+0x10/0x10 [ 350.297503][ T5848] hci_le_conn_complete_evt+0x23c/0x370 [ 350.297535][ T5848] hci_le_meta_evt+0x2f3/0x5e0 [ 350.297562][ T5848] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 350.297592][ T5848] hci_event_packet+0x669/0x1190 [ 350.297617][ T5848] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 350.297645][ T5848] ? __pfx_hci_event_packet+0x10/0x10 [ 350.297686][ T5848] ? kcov_remote_start+0x3c9/0x6d0 [ 350.297717][ T5848] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.297755][ T5848] hci_rx_work+0x2c5/0x16b0 [ 350.297781][ T5848] ? rcu_is_watching+0x12/0xc0 [ 350.297808][ T5848] process_one_work+0x9cc/0x1b70 [ 350.297842][ T5848] ? __pfx_process_one_work+0x10/0x10 [ 350.297871][ T5848] ? assign_work+0x1a0/0x250 [ 350.297908][ T5848] worker_thread+0x6c8/0xf10 [ 350.297942][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 350.297964][ T5848] kthread+0x3c2/0x780 [ 350.298018][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298050][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298091][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298126][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298159][ T5848] ? rcu_is_watching+0x12/0xc0 [ 350.298195][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298236][ T5848] ret_from_fork+0x45/0x80 [ 350.298258][ T5848] ? __pfx_kthread+0x10/0x10 [ 350.298292][ T5848] ret_from_fork_asm+0x1a/0x30 [ 350.298342][ T5848] [ 350.628199][ T5848] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 350.643533][ T5848] Bluetooth: hci3: failed to register connection device [ 352.159872][T10364] zram: Added device: zram1 [ 354.074896][T10417] could not allocate digest TFM handle binfmt_misc [ 354.447131][T10440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.468097][T10440] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.521290][T10440] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.609982][T10440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.616155][T10440] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 354.711492][T10440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.720290][T10440] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 354.760425][T10440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.787389][T10440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.845553][T10440] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.547388][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.644799][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.774104][T10471] netlink: 350 bytes leftover after parsing attributes in process `syz.1.945'. [ 356.797384][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.803493][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.026175][T10486] futex_wake_op: syz.2.951 tries to shift op by 64; fix this program [ 358.632574][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.707739][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.867539][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.873750][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.550988][T10527] random: crng reseeded on system resumption [ 360.707445][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.947372][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.386614][T10542] netlink: 338 bytes leftover after parsing attributes in process `syz.2.959'. [ 361.451159][T10542] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 361.834568][T10570] syz.3.965 (10570): drop_caches: 0 [ 363.314982][T10607] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 363.780043][T10611] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 364.394539][T10625] FAULT_INJECTION: forcing a failure. [ 364.394539][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 364.418493][T10625] CPU: 0 UID: 0 PID: 10625 Comm: syz.2.976 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 364.418547][T10625] Tainted: [U]=USER [ 364.418558][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.418576][T10625] Call Trace: [ 364.418586][T10625] [ 364.418598][T10625] dump_stack_lvl+0x16c/0x1f0 [ 364.418649][T10625] should_fail_ex+0x512/0x640 [ 364.418687][T10625] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 364.418731][T10625] should_failslab+0xc2/0x120 [ 364.418774][T10625] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 364.418814][T10625] ? ptlock_alloc+0x1f/0x70 [ 364.418853][T10625] ptlock_alloc+0x1f/0x70 [ 364.418892][T10625] pte_alloc_one+0x6d/0x380 [ 364.418933][T10625] __pte_alloc+0x6d/0x3c0 [ 364.418978][T10625] ? __pfx___pte_alloc+0x10/0x10 [ 364.419022][T10625] ? __pfx___might_resched+0x10/0x10 [ 364.419059][T10625] ? copy_page_range+0x197d/0x5fe0 [ 364.419094][T10625] copy_page_range+0x3a29/0x5fe0 [ 364.419166][T10625] ? __pfx_copy_page_range+0x10/0x10 [ 364.419250][T10625] ? __pfx___might_resched+0x10/0x10 [ 364.419286][T10625] ? __pfx_mas_store+0x10/0x10 [ 364.419312][T10625] ? __vma_enter_locked+0x163/0x3f0 [ 364.419359][T10625] ? copy_process+0x85dd/0x91a0 [ 364.419402][T10625] ? down_write+0x14d/0x200 [ 364.419457][T10625] ? up_write+0x1b2/0x520 [ 364.419522][T10625] copy_process+0x862b/0x91a0 [ 364.419596][T10625] ? __pfx_copy_process+0x10/0x10 [ 364.419642][T10625] ? try_to_wake_up+0xa2f/0x1680 [ 364.419681][T10625] ? plist_check_head+0xa3/0x150 [ 364.419715][T10625] ? find_held_lock+0x2b/0x80 [ 364.419754][T10625] ? wake_up_q+0xb0/0x160 [ 364.419782][T10625] ? do_raw_spin_unlock+0x172/0x230 [ 364.419818][T10625] kernel_clone+0xfc/0x960 [ 364.419862][T10625] ? __pfx_futex_wake+0x10/0x10 [ 364.419929][T10625] ? __pfx_kernel_clone+0x10/0x10 [ 364.420001][T10625] __do_sys_clone+0xce/0x120 [ 364.420045][T10625] ? __pfx___do_sys_clone+0x10/0x10 [ 364.420089][T10625] ? ksys_unshare+0x687/0xa40 [ 364.420158][T10625] ? rcu_is_watching+0x12/0xc0 [ 364.420203][T10625] do_syscall_64+0xcd/0x230 [ 364.420254][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.420287][T10625] RIP: 0033:0x7efe7f38e169 [ 364.420314][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.420345][T10625] RSP: 002b:00007efe80277fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 364.420376][T10625] RAX: ffffffffffffffda RBX: 00007efe7f5b5fa0 RCX: 00007efe7f38e169 [ 364.420423][T10625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 364.420443][T10625] RBP: 00007efe7f410a68 R08: 0000000000000000 R09: 0000000000000000 [ 364.420463][T10625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 364.420482][T10625] R13: 0000000000000000 R14: 00007efe7f5b5fa0 R15: 00007ffeffe522d8 [ 364.420525][T10625] [ 364.823968][T10625] validate_nla: 23 callbacks suppressed [ 364.823993][T10625] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 365.897507][T10657] FAULT_INJECTION: forcing a failure. [ 365.897507][T10657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.960694][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.2.983 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 365.960746][T10657] Tainted: [U]=USER [ 365.960757][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.960775][T10657] Call Trace: [ 365.960786][T10657] [ 365.960799][T10657] dump_stack_lvl+0x16c/0x1f0 [ 365.960853][T10657] should_fail_ex+0x512/0x640 [ 365.960899][T10657] should_fail_alloc_page+0xe7/0x130 [ 365.960947][T10657] prepare_alloc_pages+0x3c2/0x610 [ 365.961001][T10657] ? rcu_is_watching+0x12/0xc0 [ 365.961038][T10657] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 365.961080][T10657] ? __kernel_text_address+0xd/0x40 [ 365.961112][T10657] ? unwind_get_return_address+0x59/0xa0 [ 365.961153][T10657] ? arch_stack_walk+0xa6/0x100 [ 365.961206][T10657] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 365.961248][T10657] ? stack_trace_save+0x8e/0xc0 [ 365.961285][T10657] ? rcu_is_watching+0x12/0xc0 [ 365.961316][T10657] ? irqentry_exit+0x3b/0x90 [ 365.961376][T10657] ? __lock_acquire+0xaa4/0x1ba0 [ 365.961419][T10657] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.961482][T10657] ? policy_nodemask+0xea/0x4e0 [ 365.961527][T10657] alloc_pages_mpol+0x1fb/0x550 [ 365.961569][T10657] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 365.961606][T10657] ? __page_table_check_ptes_set+0x1ae/0x420 [ 365.961647][T10657] ? find_held_lock+0x2b/0x80 [ 365.961691][T10657] alloc_pages_noprof+0x131/0x390 [ 365.961734][T10657] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 365.961769][T10657] get_free_pages_noprof+0xc/0x40 [ 365.961833][T10657] kasan_populate_vmalloc_pte+0x2d/0x160 [ 365.961870][T10657] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 365.961906][T10657] __apply_to_page_range+0x617/0xd60 [ 365.961942][T10657] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 365.961985][T10657] ? __pfx___apply_to_page_range+0x10/0x10 [ 365.962018][T10657] ? alloc_vmap_area+0x872/0x2970 [ 365.962076][T10657] alloc_vmap_area+0x919/0x2970 [ 365.962155][T10657] ? __pfx_alloc_vmap_area+0x10/0x10 [ 365.962214][T10657] __get_vm_area_node+0x1a7/0x300 [ 365.962273][T10657] __vmalloc_node_range_noprof+0x277/0x1540 [ 365.962305][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 365.962368][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 365.962426][T10657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.962476][T10657] __kvmalloc_node_noprof+0x2ff/0x600 [ 365.962513][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 365.962562][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 365.962617][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 365.962663][T10657] __do_sys_listmount+0x1c2/0xed0 [ 365.962728][T10657] ? __x64_sys_futex+0x1e0/0x4c0 [ 365.962765][T10657] ? __x64_sys_futex+0x1e9/0x4c0 [ 365.962802][T10657] ? __pfx___do_sys_listmount+0x10/0x10 [ 365.962853][T10657] ? xfd_validate_state+0x5d/0x180 [ 365.962902][T10657] do_syscall_64+0xcd/0x230 [ 365.962950][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.962982][T10657] RIP: 0033:0x7efe7f38e169 [ 365.963007][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.963037][T10657] RSP: 002b:00007efe80236038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 365.963066][T10657] RAX: ffffffffffffffda RBX: 00007efe7f5b6160 RCX: 00007efe7f38e169 [ 365.963086][T10657] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 365.963104][T10657] RBP: 00007efe7f410a68 R08: 0000000000000000 R09: 0000000000000000 [ 365.963122][T10657] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 365.963140][T10657] R13: 0000000000000000 R14: 00007efe7f5b6160 R15: 00007ffeffe522d8 [ 365.963178][T10657] [ 365.963254][T10657] warn_alloc: 1 callbacks suppressed [ 365.963270][T10657] syz.2.983: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.353885][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.2.983 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 366.353937][T10657] Tainted: [U]=USER [ 366.353947][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.353965][T10657] Call Trace: [ 366.353975][T10657] [ 366.353986][T10657] dump_stack_lvl+0x16c/0x1f0 [ 366.354037][T10657] warn_alloc+0x248/0x3a0 [ 366.354078][T10657] ? __pfx_warn_alloc+0x10/0x10 [ 366.354118][T10657] ? kfree+0x2b6/0x4d0 [ 366.354156][T10657] ? __get_vm_area_node+0x1e5/0x300 [ 366.354217][T10657] __vmalloc_node_range_noprof+0xd31/0x1540 [ 366.354263][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 366.354322][T10657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.354372][T10657] __kvmalloc_node_noprof+0x2ff/0x600 [ 366.354408][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 366.354459][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 366.354514][T10657] ? __do_sys_listmount+0x1c2/0xed0 [ 366.354560][T10657] __do_sys_listmount+0x1c2/0xed0 [ 366.354617][T10657] ? __x64_sys_futex+0x1e0/0x4c0 [ 366.354663][T10657] ? __x64_sys_futex+0x1e9/0x4c0 [ 366.354701][T10657] ? __pfx___do_sys_listmount+0x10/0x10 [ 366.354747][T10657] ? xfd_validate_state+0x5d/0x180 [ 366.354793][T10657] do_syscall_64+0xcd/0x230 [ 366.354841][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.354873][T10657] RIP: 0033:0x7efe7f38e169 [ 366.354897][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.354927][T10657] RSP: 002b:00007efe80236038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 366.354956][T10657] RAX: ffffffffffffffda RBX: 00007efe7f5b6160 RCX: 00007efe7f38e169 [ 366.354976][T10657] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 366.354995][T10657] RBP: 00007efe7f410a68 R08: 0000000000000000 R09: 0000000000000000 [ 366.355033][T10657] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 366.355051][T10657] R13: 0000000000000000 R14: 00007efe7f5b6160 R15: 00007ffeffe522d8 [ 366.355105][T10657] [ 366.355115][T10657] Mem-Info: [ 366.641848][T10657] active_anon:24858 inactive_anon:9 isolated_anon:0 [ 366.641848][T10657] active_file:5736 inactive_file:51137 isolated_file:0 [ 366.641848][T10657] unevictable:769 dirty:649 writeback:0 [ 366.641848][T10657] slab_reclaimable:10775 slab_unreclaimable:96184 [ 366.641848][T10657] mapped:38227 shmem:12042 pagetables:1040 [ 366.641848][T10657] sec_pagetables:0 bounce:0 [ 366.641848][T10657] kernel_misc_reclaimable:0 [ 366.641848][T10657] free:1309649 free_pcp:8777 free_cma:0 [ 366.687270][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.747474][T10657] Node 0 active_anon:100732kB inactive_anon:36kB active_file:22944kB inactive_file:204536kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:152904kB dirty:2596kB writeback:0kB shmem:46800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12116kB pagetables:4160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.781206][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.857378][T10657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:2568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.888694][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.960443][T10657] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.991479][T10657] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 366.998660][T10657] Node 0 DMA32 free:1346272kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:105248kB inactive_anon:36kB active_file:22952kB inactive_file:202916kB unevictable:1540kB writepending:2652kB present:3129332kB managed:2541756kB mlocked:4kB bounce:0kB free_pcp:2456kB local_pcp:1300kB free_cma:0kB [ 367.030603][T10657] lowmem_reserve[]: 0 0 1 1 1 [ 367.035412][T10657] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 367.107044][T10657] lowmem_reserve[]: 0 0 0 0 0 [ 367.122550][T10657] Node 1 Normal free:3872052kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:31316kB local_pcp:31312kB free_cma:0kB [ 367.153368][T10657] lowmem_reserve[]: 0 0 0 0 0 [ 367.158508][T10657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 367.171813][T10657] Node 0 DMA32: 225*4kB (UE) 627*8kB (UE) 107*16kB (UME) 142*32kB (UME) 741*64kB (UME) 284*128kB (UME) 174*256kB (UME) 100*512kB (UME) 41*1024kB (UME) 18*2048kB (UME) 262*4096kB (M) = 1343692kB [ 367.191837][T10657] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 367.204920][T10657] Node 1 Normal: 226*4kB (UM) 70*8kB (UME) 57*16kB (UME) 17*32kB (UME) 8*64kB (UME) 6*128kB (UME) 1*256kB (U) 8*512kB (UM) 3*1024kB (UE) 7*2048kB (UME) 939*4096kB (UM) = 3872104kB [ 367.223798][T10657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.234349][T10657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.244245][T10657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.254358][T10657] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 367.264258][T10657] 71368 total pagecache pages [ 367.269624][T10657] 9 pages in swap cache [ 367.273821][T10657] Free swap = 122912kB [ 367.278692][T10657] Total swap = 124996kB [ 367.283342][T10657] 2097051 pages RAM [ 367.287197][T10657] 0 pages HighMem/MovableOnly [ 367.294572][T10657] 429570 pages reserved [ 367.299189][T10657] 0 pages cma reserved [ 368.509242][T10681] syz.0.985 (10681): attempted to duplicate a private mapping with mremap. This is not supported. [ 368.605601][T10685] random: crng reseeded on system resumption [ 369.411234][T10699] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 369.438388][T10699] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.664212][ T30] audit: type=1804 audit(4294967302.800:5): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.989" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 369.688269][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.531802][T10743] ima: policy update failed [ 372.539306][ T30] audit: type=1802 audit(4294967305.700:6): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.997" res=0 errno=0 [ 373.837023][T10782] lo: entered allmulticast mode [ 373.928018][T10779] lo: left allmulticast mode [ 374.021745][T10784] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.028527][T10784] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 375.107143][T10802] cgroup: fork rejected by pids controller in /syz3 [ 375.389458][T10801] vivid-003: ================= START STATUS ================= [ 375.399164][T10801] vivid-003: Radio HW Seek Mode: Bounded [ 375.407137][T10801] vivid-003: Radio Programmable HW Seek: false [ 375.418405][T10801] vivid-003: RDS Rx I/O Mode: Block I/O [ 375.435295][T10801] vivid-003: Generate RBDS Instead of RDS: false [ 375.457119][T10801] vivid-003: RDS Reception: true [ 375.478877][T10801] vivid-003: RDS Program Type: 0 inactive [ 375.498510][T10801] vivid-003: RDS PS Name: inactive [ 375.510627][T10801] vivid-003: RDS Radio Text: inactive [ 375.531930][T10801] vivid-003: RDS Traffic Announcement: false inactive [ 375.550615][T10801] vivid-003: RDS Traffic Program: false inactive [ 375.577282][T10801] vivid-003: RDS Music: false inactive [ 375.587792][T10801] vivid-003: ================== END STATUS ================== [ 376.715612][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 377.890854][T10964] bond0: (slave bond_slave_0): Releasing backup interface [ 379.156510][T10987] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 382.420308][T11014] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1025'. [ 383.767917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.774295][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.697727][T11047] FAULT_INJECTION: forcing a failure. [ 385.697727][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 385.710558][T11047] CPU: 1 UID: 0 PID: 11047 Comm: syz.0.1030 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 385.710608][T11047] Tainted: [U]=USER [ 385.710618][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.710638][T11047] Call Trace: [ 385.710648][T11047] [ 385.710659][T11047] dump_stack_lvl+0x16c/0x1f0 [ 385.710709][T11047] should_fail_ex+0x512/0x640 [ 385.710746][T11047] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 385.710790][T11047] should_failslab+0xc2/0x120 [ 385.710833][T11047] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 385.710870][T11047] ? d_instantiate+0x77/0x90 [ 385.710907][T11047] ? alloc_empty_file+0x55/0x1e0 [ 385.710955][T11047] alloc_empty_file+0x55/0x1e0 [ 385.710998][T11047] alloc_file_pseudo+0x13a/0x230 [ 385.711046][T11047] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 385.711091][T11047] ? alloc_fd+0x471/0x7d0 [ 385.711126][T11047] sock_alloc_file+0x50/0x210 [ 385.711173][T11047] __sys_socket+0x1c0/0x260 [ 385.711206][T11047] ? __pfx___sys_socket+0x10/0x10 [ 385.711240][T11047] ? rcu_is_watching+0x12/0xc0 [ 385.711280][T11047] __x64_sys_socket+0x72/0xb0 [ 385.711311][T11047] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.711355][T11047] do_syscall_64+0xcd/0x230 [ 385.711405][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.711444][T11047] RIP: 0033:0x7f63a878e169 [ 385.711469][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.711502][T11047] RSP: 002b:00007f63a95e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 385.711532][T11047] RAX: ffffffffffffffda RBX: 00007f63a89b6080 RCX: 00007f63a878e169 [ 385.711553][T11047] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 385.711571][T11047] RBP: 00007f63a8810a68 R08: 0000000000000000 R09: 0000000000000000 [ 385.711590][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.711608][T11047] R13: 0000000000000000 R14: 00007f63a89b6080 R15: 00007ffe16876038 [ 385.711647][T11047] [ 387.759626][T11059] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1033'. [ 388.389694][T11062] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 388.424511][T11062] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 388.465120][T11062] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 388.989578][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.002617][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.018668][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.047619][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.055410][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.298277][T11064] chnl_net:caif_netlink_parms(): no params data found [ 391.107389][ T5848] Bluetooth: hci4: command tx timeout [ 391.160234][T10830] syz.3.1007 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 391.174334][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.3.1007 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 391.174380][T10830] Tainted: [U]=USER [ 391.174390][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.174406][T10830] Call Trace: [ 391.174415][T10830] [ 391.174426][T10830] dump_stack_lvl+0x16c/0x1f0 [ 391.174473][T10830] dump_header+0x101/0x930 [ 391.174519][T10830] oom_kill_process+0x270/0xa60 [ 391.174565][T10830] out_of_memory+0x350/0x1700 [ 391.174615][T10830] ? __pfx_out_of_memory+0x10/0x10 [ 391.174677][T10830] mem_cgroup_out_of_memory+0x205/0x270 [ 391.174726][T10830] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 391.174783][T10830] ? do_raw_spin_unlock+0x172/0x230 [ 391.174835][T10830] try_charge_memcg+0xa07/0x10c0 [ 391.174884][T10830] ? __pfx_try_charge_memcg+0x10/0x10 [ 391.174926][T10830] ? __print_lock_name+0x51/0xe0 [ 391.174959][T10830] ? rcu_read_unlock+0x17/0x60 [ 391.175014][T10830] charge_memcg+0x8a/0x230 [ 391.175055][T10830] __mem_cgroup_charge+0x2b/0x1e0 [ 391.175104][T10830] shmem_alloc_and_add_folio+0x514/0xc20 [ 391.175154][T10830] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 391.175199][T10830] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 391.175248][T10830] shmem_get_folio_gfp+0x687/0x1530 [ 391.175294][T10830] ? __lock_acquire+0xaa4/0x1ba0 [ 391.175338][T10830] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 391.175380][T10830] ? __pte_offset_map_lock+0x155/0x2f0 [ 391.175432][T10830] shmem_write_begin+0x160/0x300 [ 391.175478][T10830] ? __pfx_shmem_write_begin+0x10/0x10 [ 391.175521][T10830] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 391.175554][T10830] ? __pfx_timestamp_truncate+0x10/0x10 [ 391.175595][T10830] generic_perform_write+0x3cd/0x930 [ 391.175656][T10830] ? __pfx_generic_perform_write+0x10/0x10 [ 391.175700][T10830] ? inode_needs_update_time.part.0+0x191/0x270 [ 391.175748][T10830] shmem_file_write_iter+0x10e/0x140 [ 391.175798][T10830] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 391.175844][T10830] __kernel_write_iter+0x317/0xa90 [ 391.175881][T10830] ? __pfx___kernel_write_iter+0x10/0x10 [ 391.175914][T10830] ? __up_read+0x1f8/0x750 [ 391.175967][T10830] ? dump_user_range+0x73d/0xb30 [ 391.176020][T10830] dump_user_range+0x418/0xb30 [ 391.176077][T10830] ? __pfx_dump_user_range+0x10/0x10 [ 391.176116][T10830] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 391.176152][T10830] ? __pfx_writenote+0x10/0x10 [ 391.176202][T10830] elf_core_dump+0x288a/0x3a90 [ 391.176264][T10830] ? __pfx_elf_core_dump+0x10/0x10 [ 391.176308][T10830] ? kasan_save_stack+0x42/0x60 [ 391.176339][T10830] ? kasan_save_stack+0x33/0x60 [ 391.176389][T10830] ? kasan_save_track+0x14/0x30 [ 391.176440][T10830] ? find_held_lock+0x2b/0x80 [ 391.176471][T10830] ? 0xffffffffff600000 [ 391.176516][T10830] ? rcu_is_watching+0x12/0xc0 [ 391.176548][T10830] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 391.176590][T10830] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.176694][T10830] ? do_coredump+0x3183/0x4480 [ 391.176729][T10830] do_coredump+0x3183/0x4480 [ 391.176780][T10830] ? __pfx_do_coredump+0x10/0x10 [ 391.176821][T10830] ? stack_trace_save+0x8e/0xc0 [ 391.176850][T10830] ? __pfx_stack_trace_save+0x10/0x10 [ 391.176879][T10830] ? stack_depot_save_flags+0x28/0xa50 [ 391.176914][T10830] ? __lock_acquire+0xaa4/0x1ba0 [ 391.176958][T10830] ? __kasan_slab_free+0x51/0x70 [ 391.176988][T10830] ? kmem_cache_free+0x2d4/0x4d0 [ 391.177016][T10830] ? __sigqueue_free+0xba/0x2a0 [ 391.177054][T10830] ? get_signal+0xcba/0x26d0 [ 391.177083][T10830] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 391.177170][T10830] ? proc_coredump_connector+0x2d1/0x4f0 [ 391.177204][T10830] ? __pfx_proc_coredump_connector+0x10/0x10 [ 391.177257][T10830] ? rcu_is_watching+0x12/0xc0 [ 391.177296][T10830] get_signal+0x22e3/0x26d0 [ 391.177353][T10830] ? __pfx_get_signal+0x10/0x10 [ 391.177393][T10830] ? __pfx_force_sig+0x10/0x10 [ 391.177440][T10830] arch_do_signal_or_restart+0x8f/0x7a0 [ 391.177510][T10830] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.177561][T10830] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 391.177601][T10830] ? do_error_trap+0x214/0x240 [ 391.177654][T10830] irqentry_exit_to_user_mode+0x13f/0x280 [ 391.177695][T10830] asm_exc_stack_segment+0x26/0x30 [ 391.177721][T10830] RIP: 0033:0x7fe3a2f8e171 [ 391.177742][T10830] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 391.177769][T10830] RSP: 002b:0100000000000005 EFLAGS: 00010217 [ 391.177790][T10830] RAX: 0000000000000000 RBX: 00007fe3a31b6080 RCX: 00007fe3a2f8e169 [ 391.177807][T10830] RDX: 0000000000000000 RSI: 0100000000000005 RDI: 0000000020003b46 [ 391.177823][T10830] RBP: 00007fe3a3010a68 R08: 0000000000000002 R09: 0000000000000000 [ 391.177839][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.177854][T10830] R13: 0000000000000001 R14: 00007fe3a31b6080 R15: 00007fff0b533c48 [ 391.177890][T10830] [ 391.777466][T11064] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.784682][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.827691][T11064] bridge_slave_0: entered allmulticast mode [ 391.852304][T11064] bridge_slave_0: entered promiscuous mode [ 391.919287][T11064] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.964468][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.971735][T10830] memory: usage 307200kB, limit 307200kB, failcnt 17473 [ 391.987822][T11064] bridge_slave_1: entered allmulticast mode [ 392.024899][T11064] bridge_slave_1: entered promiscuous mode [ 392.191438][T10830] memory+swap: usage 419764kB, limit 9007199254740988kB, failcnt 0 [ 392.240809][T10830] kmem: usage 3472kB, limit 9007199254740988kB, failcnt 0 [ 392.337866][T10830] Memory cgroup stats for /syz3: [ 392.338200][T10830] cache 308867072 [ 392.371262][T10830] rss 2117632 [ 392.386568][T10830] rss_huge 0 [ 392.406668][T10830] shmem 308867072 [ 392.423856][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.441902][T10830] mapped_file 0 [ 392.447140][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.464340][T10830] dirty 0 [ 392.477148][T10830] writeback 0 [ 392.482681][T10830] workingset_refault_anon 5015 [ 392.490595][T10830] workingset_refault_file 56 [ 392.495307][T10830] swap 115265536 [ 392.501344][T10830] swapcached 32768 [ 392.505180][T10830] pgpgin 462459 [ 392.519349][T10830] pgpgout 389085 [ 392.532738][T10830] pgfault 240128 [ 392.536344][T10830] pgmajfault 1127 [ 392.567611][T10830] inactive_anon 120086528 [ 392.572108][T10830] active_anon 190795776 [ 392.597404][T10830] inactive_file 0 [ 392.614569][T11064] team0: Port device team_slave_0 added [ 392.622846][T10830] active_file 0 [ 392.626352][T10830] unevictable 0 [ 392.630081][T10830] hierarchical_memory_limit 314572800 [ 392.635488][T10830] hierarchical_memsw_limit 9223372036854771712 [ 392.645158][T11064] team0: Port device team_slave_1 added [ 392.667529][T10830] total_cache 308867072 [ 392.671740][T10830] total_rss 2117632 [ 392.675573][T10830] total_rss_huge 0 [ 392.707678][T10830] total_shmem 308867072 [ 392.711982][T10830] total_mapped_file 0 [ 392.715996][T10830] total_dirty 0 [ 392.726238][T10830] total_writeback 0 [ 392.731043][T10830] total_workingset_refault_anon 5015 [ 392.736372][T10830] total_workingset_refault_file 56 [ 392.741864][T10830] total_swap 115265536 [ 392.745970][T10830] total_swapcached 32768 [ 392.765592][T10830] total_pgpgin 462459 [ 392.769776][T10830] total_pgpgout 389085 [ 392.773877][T10830] total_pgfault 240128 [ 392.778350][T10830] total_pgmajfault 1127 [ 392.782541][T10830] total_inactive_anon 120086528 [ 392.789330][T10830] total_active_anon 190795776 [ 392.795438][T10830] total_inactive_file 0 [ 392.802378][T10830] total_active_file 0 [ 392.806430][T10830] total_unevictable 0 [ 392.827744][T10830] anon_cost 0 [ 392.831091][T10830] file_cost 0 [ 392.834417][T10830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1007,pid=10834,uid=0 [ 392.883663][T10830] Memory cgroup out of memory: Killed process 10834 (syz.3.1007) total-vm:102600kB, anon-rss:3120kB, file-rss:23800kB, shmem-rss:128kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 392.905744][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.915805][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.977576][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.187524][ T5848] Bluetooth: hci4: command tx timeout [ 393.532274][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.548841][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.607279][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.267757][ T5848] Bluetooth: hci4: command tx timeout [ 396.343796][T10834] syz.3.1007 (10834) used greatest stack depth: 20264 bytes left [ 396.378763][T10833] syz.3.1007 (10833) used greatest stack depth: 19640 bytes left [ 396.384758][T11064] hsr_slave_0: entered promiscuous mode [ 396.405674][T11064] hsr_slave_1: entered promiscuous mode [ 396.418796][T11064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.426446][T11064] Cannot create hsr debugfs directory [ 397.357413][ T5848] Bluetooth: hci4: command tx timeout [ 398.656109][T11064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.740844][T11064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.792012][T11064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.816101][T11064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.415037][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.483412][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.526047][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.533289][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.560109][T10973] syz.1.1016 (10973) used greatest stack depth: 18440 bytes left [ 399.577167][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.584460][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.433004][T11148] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1048'. [ 400.658205][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.373647][T11192] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1055'. [ 402.436291][T11064] veth0_vlan: entered promiscuous mode [ 402.491791][T11064] veth1_vlan: entered promiscuous mode [ 402.686655][T11064] veth0_macvtap: entered promiscuous mode [ 402.749099][T11064] veth1_macvtap: entered promiscuous mode [ 402.867094][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.917546][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.928466][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.939525][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.950009][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.961875][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.055236][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.079978][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.099750][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.396235][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.437074][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.447154][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.460070][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.470325][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.492321][T11215] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1059'. [ 403.508070][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.540487][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.559261][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.588988][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.748126][T11064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.756903][T11064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.770425][T11064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.787836][T11064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.196808][ T6602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.225205][ T6602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.692302][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.727314][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.979746][T11229] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[11229] [ 405.111066][T11061] syz.1.1033 (11061) used greatest stack depth: 18152 bytes left [ 405.242873][T11248] netlink: 'syz.1.1067': attribute type 2 has an invalid length. [ 405.322295][T11253] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1035'. [ 405.901179][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1070'. [ 413.354196][ T5848] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 413.354242][ T5848] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 413.376430][ T5848] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 413.376557][ T5848] Bluetooth: hci2: Malformed LE Event: 0x0d [ 415.329325][T11408] random: crng reseeded on system resumption [ 416.198248][T11411] Invalid ELF header magic: != ELF [ 417.331200][T11431] ima: policy update failed [ 417.336197][ T30] audit: type=1802 audit(4294967299.520:7): pid=11431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1102" res=0 errno=0 [ 417.621026][T11438] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1103'. [ 417.630774][T11441] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1103'. [ 419.824898][T11465] netlink: 'syz.4.1109': attribute type 64 has an invalid length. [ 419.832921][T11465] netlink: 74 bytes leftover after parsing attributes in process `syz.4.1109'. [ 419.847023][T11465] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1109'. [ 421.131182][ T5848] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 421.167268][ T30] audit: type=1800 audit(4294967305.877:8): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1114" name="dbroot" dev="configfs" ino=40311 res=0 errno=0 [ 421.431331][T11495] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 421.461152][T11495] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 423.006875][T11521] program syz.3.1123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.038586][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.049804][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.058905][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.068281][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.076109][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.396514][T11536] chnl_net:caif_netlink_parms(): no params data found [ 424.759792][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.767062][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.775855][T11536] bridge_slave_0: entered allmulticast mode [ 424.784759][T11536] bridge_slave_0: entered promiscuous mode [ 424.801422][T11536] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.817377][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.824643][T11536] bridge_slave_1: entered allmulticast mode [ 424.833142][T11536] bridge_slave_1: entered promiscuous mode [ 425.004486][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.051229][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.350607][T11536] team0: Port device team_slave_0 added [ 425.414797][T11536] team0: Port device team_slave_1 added [ 425.510882][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.524813][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.552230][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.565478][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.573495][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.623895][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.868681][T11536] hsr_slave_0: entered promiscuous mode [ 425.875477][T11536] hsr_slave_1: entered promiscuous mode [ 425.890343][T11536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.911159][T11536] Cannot create hsr debugfs directory [ 426.147460][ T5848] Bluetooth: hci5: command tx timeout [ 426.873561][T11536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.910343][T11536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.934720][T11536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.946134][T11536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.124012][T11536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.170525][T11536] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.189212][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.196416][T10044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.229385][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.236596][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.866842][T11536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.919448][ T5848] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 428.228217][ T5848] Bluetooth: hci5: command tx timeout [ 428.936775][T11536] veth0_vlan: entered promiscuous mode [ 429.144444][T11536] veth1_vlan: entered promiscuous mode [ 429.500886][T11536] veth0_macvtap: entered promiscuous mode [ 429.549103][T11536] veth1_macvtap: entered promiscuous mode [ 429.611962][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.625885][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.635914][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.648654][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.658570][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.669205][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.679353][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.690395][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.700395][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.711005][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.722313][T11536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.764090][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.778399][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.792802][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.805122][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.816366][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.827057][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.845145][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.860487][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.870920][T11536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.882285][T11536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.895521][T11536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.955904][T11536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.977396][T11536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.986201][T11536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.011069][T11536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.285648][T10054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.306867][T10054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.314353][ T5848] Bluetooth: hci5: command tx timeout [ 430.406945][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.426303][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.355900][T11648] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1148'. [ 431.780294][T11662] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 432.035189][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 432.388288][ T5848] Bluetooth: hci5: command tx timeout [ 434.574296][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 434.755454][T11701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.992777][T11701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.643519][T11715] Invalid ELF header magic: != ELF [ 436.962974][T11738] Invalid ELF header magic: != ELF [ 437.361072][T11747] tipc: Enabling of bearer rejected, media not registered [ 437.532048][T11747] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1169'. [ 438.186052][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 438.197001][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 438.205783][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 438.214244][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 438.228577][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 438.346574][T11739] kexec: Could not allocate control_code_buffer [ 439.085944][T11761] chnl_net:caif_netlink_parms(): no params data found [ 439.201846][T11784] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1175'. [ 439.218315][T11784] netlink: 'syz.1.1175': attribute type 2 has an invalid length. [ 439.226257][T11784] netlink: 'syz.1.1175': attribute type 3 has an invalid length. [ 439.234276][T11784] netlink: 98 bytes leftover after parsing attributes in process `syz.1.1175'. [ 439.280213][T11784] Invalid ELF header magic: != ELF [ 439.821702][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.843761][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.854251][T11794] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1178'. [ 439.863789][T11761] bridge_slave_0: entered allmulticast mode [ 439.871666][T11761] bridge_slave_0: entered promiscuous mode [ 439.920698][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.944374][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.958732][T11761] bridge_slave_1: entered allmulticast mode [ 439.974547][T11761] bridge_slave_1: entered promiscuous mode [ 440.261811][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.304834][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.314520][ T5848] Bluetooth: hci6: command tx timeout [ 440.431674][T11761] team0: Port device team_slave_0 added [ 440.449116][T11761] team0: Port device team_slave_1 added [ 440.581936][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.589731][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.663210][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.718784][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.725977][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.769899][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.337174][T11761] hsr_slave_0: entered promiscuous mode [ 441.378607][T11761] hsr_slave_1: entered promiscuous mode [ 441.417935][T11761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.425655][T11761] Cannot create hsr debugfs directory [ 442.093780][T11761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.134594][T11761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.253693][T11761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.357346][T11761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.391888][ T5848] Bluetooth: hci6: command tx timeout [ 442.929234][T11827] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.069230][T11827] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 443.241909][T11761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.314723][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.556574][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.563865][T10044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.665048][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.672320][T10053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.477370][ T5848] Bluetooth: hci6: command tx timeout [ 444.483182][T11761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.596329][T11861] FAULT_INJECTION: forcing a failure. [ 444.596329][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 444.623047][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.3.1192 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 444.623107][T11861] Tainted: [U]=USER [ 444.623119][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.623140][T11861] Call Trace: [ 444.623150][T11861] [ 444.623163][T11861] dump_stack_lvl+0x16c/0x1f0 [ 444.623217][T11861] should_fail_ex+0x512/0x640 [ 444.623255][T11861] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 444.623294][T11861] should_failslab+0xc2/0x120 [ 444.623338][T11861] __kmalloc_cache_noprof+0x6a/0x3e0 [ 444.623370][T11861] ? do_raw_spin_lock+0x12c/0x2b0 [ 444.623401][T11861] ? single_open+0x4d/0x1f0 [ 444.623450][T11861] ? __pfx_tracing_clock_show+0x10/0x10 [ 444.623501][T11861] single_open+0x4d/0x1f0 [ 444.623546][T11861] tracing_clock_open+0xa7/0x100 [ 444.623592][T11861] do_dentry_open+0x741/0x1c10 [ 444.623628][T11861] ? __pfx_tracing_clock_open+0x10/0x10 [ 444.623679][T11861] vfs_open+0x82/0x3f0 [ 444.623729][T11861] path_openat+0x1e5e/0x2d40 [ 444.623779][T11861] ? __pfx_path_openat+0x10/0x10 [ 444.623825][T11861] do_filp_open+0x20b/0x470 [ 444.623860][T11861] ? __pfx_do_filp_open+0x10/0x10 [ 444.623924][T11861] ? alloc_fd+0x471/0x7d0 [ 444.623975][T11861] do_sys_openat2+0x11b/0x1d0 [ 444.624023][T11861] ? __pfx_do_sys_openat2+0x10/0x10 [ 444.624087][T11861] __x64_sys_openat+0x174/0x210 [ 444.624136][T11861] ? __pfx___x64_sys_openat+0x10/0x10 [ 444.624185][T11861] ? rcu_is_watching+0x12/0xc0 [ 444.624229][T11861] do_syscall_64+0xcd/0x230 [ 444.624279][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.624312][T11861] RIP: 0033:0x7fe3a2f8e169 [ 444.624337][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.624370][T11861] RSP: 002b:00007fe3a3d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 444.624402][T11861] RAX: ffffffffffffffda RBX: 00007fe3a31b5fa0 RCX: 00007fe3a2f8e169 [ 444.624423][T11861] RDX: 0000000000022400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 444.624443][T11861] RBP: 00007fe3a3010a68 R08: 0000000000000000 R09: 0000000000000000 [ 444.624461][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.624480][T11861] R13: 0000000000000000 R14: 00007fe3a31b5fa0 R15: 00007fff0b533c48 [ 444.624520][T11861] [ 445.208504][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.214897][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.336111][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 445.761548][T11761] veth0_vlan: entered promiscuous mode [ 445.825455][T11761] veth1_vlan: entered promiscuous mode [ 445.966974][T11761] veth0_macvtap: entered promiscuous mode [ 445.986214][T11761] veth1_macvtap: entered promiscuous mode [ 446.089240][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.120522][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.171005][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.182950][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.193412][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.207660][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.231206][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.242230][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.252816][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.269050][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.293320][T11761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.322813][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.340670][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.362632][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.393928][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.487391][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.524477][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.555383][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.558040][ T5848] Bluetooth: hci6: command tx timeout [ 446.654342][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.766040][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.816563][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.844806][T11761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.876101][T11761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.901727][T11761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.115207][T11761] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.167675][T11761] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.184766][T11761] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.197281][T11761] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.580070][ T6602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.607546][ T6602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.784064][T10054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.795420][T10054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 451.059368][T11995] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1222'. [ 451.103748][T11989] erspan0: entered allmulticast mode [ 451.456992][T12000] unsupported nla_type 32969 [ 454.055419][T12051] .SR: entered promiscuous mode [ 454.574437][T12066] mmap: syz.1.1242 (12066): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 455.136619][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 463.995448][ T5848] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 464.798184][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1277'. [ 464.854017][T12255] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1278'. [ 465.906823][ T30] audit: type=1800 audit(4294967299.520:9): pid=12273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1281" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 465.967894][T12271] FAULT_INJECTION: forcing a failure. [ 465.967894][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 465.981232][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.6.1283 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 465.981285][T12271] Tainted: [U]=USER [ 465.981296][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.981316][T12271] Call Trace: [ 465.981326][T12271] [ 465.981338][T12271] dump_stack_lvl+0x16c/0x1f0 [ 465.981390][T12271] should_fail_ex+0x512/0x640 [ 465.981446][T12271] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 465.981497][T12271] should_failslab+0xc2/0x120 [ 465.981542][T12271] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 465.981589][T12271] ? kstrdup_const+0x63/0x80 [ 465.981646][T12271] kstrdup+0x53/0x100 [ 465.981693][T12271] kstrdup_const+0x63/0x80 [ 465.981738][T12271] __kernfs_new_node+0x9b/0x8a0 [ 465.981773][T12271] ? do_syscall_64+0xcd/0x230 [ 465.981820][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.981867][T12271] ? __pfx___kernfs_new_node+0x10/0x10 [ 465.981910][T12271] ? find_held_lock+0x2b/0x80 [ 465.981945][T12271] ? kernfs_root+0xee/0x2a0 [ 465.981984][T12271] kernfs_new_node+0x13c/0x1e0 [ 465.982029][T12271] kernfs_create_dir_ns+0x4c/0x1a0 [ 465.982073][T12271] sysfs_create_dir_ns+0x13a/0x2b0 [ 465.982105][T12271] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 465.982133][T12271] ? find_held_lock+0x2b/0x80 [ 465.982174][T12271] ? do_raw_spin_unlock+0x172/0x230 [ 465.982207][T12271] kobject_add_internal+0x2c4/0x9b0 [ 465.982265][T12271] kobject_init_and_add+0x11b/0x190 [ 465.982297][T12271] ? __pfx_kobject_init_and_add+0x10/0x10 [ 465.982338][T12271] ? up_write+0x1b2/0x520 [ 465.982397][T12271] sysfs_slab_add+0x18e/0x1e0 [ 465.982434][T12271] do_kmem_cache_create+0x530/0x730 [ 465.982475][T12271] ? __kmem_cache_create_args+0x205/0x390 [ 465.982520][T12271] __kmem_cache_create_args+0x225/0x390 [ 465.982563][T12271] mon_text_open+0x313/0x4f0 [ 465.982608][T12271] ? __pfx_mon_text_open+0x10/0x10 [ 465.982647][T12271] ? __debugfs_file_get+0x1fe/0x840 [ 465.982687][T12271] ? __pfx_mon_text_ctor+0x10/0x10 [ 465.982727][T12271] ? __pfx_apparmor_file_open+0x10/0x10 [ 465.982768][T12271] ? lockdown_is_locked_down+0x3f/0x130 [ 465.982814][T12271] ? bpf_lsm_locked_down+0x9/0x10 [ 465.982856][T12271] ? __pfx_mon_text_open+0x10/0x10 [ 465.982892][T12271] full_proxy_open_regular+0x1b6/0x360 [ 465.982934][T12271] do_dentry_open+0x741/0x1c10 [ 465.982968][T12271] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 465.983021][T12271] vfs_open+0x82/0x3f0 [ 465.983071][T12271] path_openat+0x1e5e/0x2d40 [ 465.983122][T12271] ? __pfx_path_openat+0x10/0x10 [ 465.983168][T12271] do_filp_open+0x20b/0x470 [ 465.983202][T12271] ? __pfx_do_filp_open+0x10/0x10 [ 465.983267][T12271] ? alloc_fd+0x471/0x7d0 [ 465.983310][T12271] do_sys_openat2+0x11b/0x1d0 [ 465.983356][T12271] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.983420][T12271] __x64_sys_openat+0x174/0x210 [ 465.983467][T12271] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.983516][T12271] ? rcu_is_watching+0x12/0xc0 [ 465.983560][T12271] do_syscall_64+0xcd/0x230 [ 465.983619][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.983652][T12271] RIP: 0033:0x7f072238e169 [ 465.983677][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.983708][T12271] RSP: 002b:00007f07201f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.983738][T12271] RAX: ffffffffffffffda RBX: 00007f07225b5fa0 RCX: 00007f072238e169 [ 465.983759][T12271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 465.983780][T12271] RBP: 00007f0722410a68 R08: 0000000000000000 R09: 0000000000000000 [ 465.983799][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.983818][T12271] R13: 0000000000000000 R14: 00007f07225b5fa0 R15: 00007ffe5c9c1668 [ 465.983860][T12271] [ 465.983876][T12271] kobject: kobject_add_internal failed for mon_text_ffff88807d3d5000 (error: -12 parent: slab) [ 466.384413][T12271] SLUB: Unable to add cache mon_text_ffff88807d3d5000 to sysfs [ 469.628213][T12324] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 469.639952][T12324] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 469.906645][T12336] Invalid ELF header magic: != ELF [ 471.130477][T12352] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[12352] [ 472.391176][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 476.035812][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.048181][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.056490][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.066362][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.074884][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.743672][T12441] chnl_net:caif_netlink_parms(): no params data found [ 477.181451][T12441] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.199568][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.209661][T12441] bridge_slave_0: entered allmulticast mode [ 477.259599][T12441] bridge_slave_0: entered promiscuous mode [ 477.283979][T12441] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.299240][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.327527][T12441] bridge_slave_1: entered allmulticast mode [ 477.345838][T12441] bridge_slave_1: entered promiscuous mode [ 477.463943][T12441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.501803][T12441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.634560][T12441] team0: Port device team_slave_0 added [ 477.674876][T12441] team0: Port device team_slave_1 added [ 477.869932][T12441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.876946][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.907165][T12441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.942661][T12441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.950118][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.976893][T12441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.103402][T12441] hsr_slave_0: entered promiscuous mode [ 478.110999][T12441] hsr_slave_1: entered promiscuous mode [ 478.118788][T12441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.134173][T12441] Cannot create hsr debugfs directory [ 478.147669][ T5848] Bluetooth: hci2: command tx timeout [ 478.700063][T12441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.737397][T12441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.769044][T12441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.797556][T12441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.203272][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.286759][T12441] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.350055][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.357332][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.400855][T12492] HfR: entered promiscuous mode [ 479.466266][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.473564][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.031972][T12501] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1328'. [ 480.245892][ T5848] Bluetooth: hci2: command tx timeout [ 480.355703][T12441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.833193][T12441] veth0_vlan: entered promiscuous mode [ 480.850716][T12441] veth1_vlan: entered promiscuous mode [ 480.918797][T12441] veth0_macvtap: entered promiscuous mode [ 480.930942][T12441] veth1_macvtap: entered promiscuous mode [ 480.954398][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.985383][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.004066][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.015158][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.025821][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.038714][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.051246][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.062758][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.073053][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.085167][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.096844][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.109065][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.121126][T12441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.140865][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.151718][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.163148][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.174460][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.184757][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.205903][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.216220][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.228674][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.239048][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.251496][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.261921][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.273665][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.284278][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.296822][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.310718][T12441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.373342][T12441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.388330][T12441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.398049][T12441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.409122][T12441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.726859][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.756214][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.856568][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.883276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.307516][ T5848] Bluetooth: hci2: command tx timeout [ 482.792003][T12531] ubi0: attaching mtd0 [ 482.804630][T12531] ubi0: scanning is finished [ 482.818039][T12531] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 482.961270][T12531] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 483.031141][T12538] CIFS mount error: No usable UNC path provided in device string! [ 483.031141][T12538] [ 483.045904][T12538] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 483.170372][T12537] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[12537] [ 484.130351][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 484.147862][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 484.168316][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 484.183611][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 484.197911][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 484.387683][ T5848] Bluetooth: hci2: command tx timeout [ 485.097309][ T30] audit: type=1800 audit(4294967326.686:10): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1342" name="members" dev="configfs" ino=47482 res=0 errno=0 [ 485.141933][T12557] chnl_net:caif_netlink_parms(): no params data found [ 485.793165][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.808904][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.829884][T12557] bridge_slave_0: entered allmulticast mode [ 485.844499][T12557] bridge_slave_0: entered promiscuous mode [ 485.869042][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.886632][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.904382][T12557] bridge_slave_1: entered allmulticast mode [ 485.919913][T12557] bridge_slave_1: entered promiscuous mode [ 486.016852][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.051824][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.192625][T12557] team0: Port device team_slave_0 added [ 486.233922][T12557] team0: Port device team_slave_1 added [ 486.307389][ T5848] Bluetooth: hci8: command tx timeout [ 486.380131][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.403405][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.445092][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.474559][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.486611][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.527758][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.808095][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'. [ 486.845787][T12557] hsr_slave_0: entered promiscuous mode [ 486.869608][T12557] hsr_slave_1: entered promiscuous mode [ 486.876038][T12557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.886749][T12557] Cannot create hsr debugfs directory [ 487.065540][T12611] openvswitch: .SR: Dropping previously announced user features [ 487.966047][T12557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 487.992946][T12557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 488.011206][T12557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 488.107117][T12557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 488.387497][ T5848] Bluetooth: hci8: command tx timeout [ 489.119833][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.255822][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.445549][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.452822][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.546714][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.554016][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.644355][T12557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.696085][T12557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network syzkaller syzkaller login: [ 490.189278][T12666] FAULT_INJECTION: forcing a failure. [ 490.189278][T12666] name failslab, interval 1, probability 0, space 0, times 0 [ 490.237410][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.6.1361 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 490.237467][T12666] Tainted: [U]=USER [ 490.237478][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.237498][T12666] Call Trace: [ 490.237509][T12666] [ 490.237522][T12666] dump_stack_lvl+0x16c/0x1f0 [ 490.237576][T12666] should_fail_ex+0x512/0x640 [ 490.237614][T12666] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 490.237653][T12666] should_failslab+0xc2/0x120 [ 490.237697][T12666] __kmalloc_cache_noprof+0x6a/0x3e0 [ 490.237728][T12666] ? do_raw_spin_lock+0x12c/0x2b0 [ 490.237771][T12666] ? single_open+0x4d/0x1f0 [ 490.237819][T12666] ? __pfx_tracing_clock_show+0x10/0x10 [ 490.237869][T12666] single_open+0x4d/0x1f0 [ 490.237913][T12666] tracing_clock_open+0xa7/0x100 [ 490.237968][T12666] do_dentry_open+0x741/0x1c10 [ 490.238006][T12666] ? __pfx_tracing_clock_open+0x10/0x10 [ 490.238057][T12666] vfs_open+0x82/0x3f0 [ 490.238106][T12666] path_openat+0x1e5e/0x2d40 [ 490.238155][T12666] ? __pfx_path_openat+0x10/0x10 [ 490.238200][T12666] do_filp_open+0x20b/0x470 [ 490.238235][T12666] ? __pfx_do_filp_open+0x10/0x10 [ 490.238298][T12666] ? alloc_fd+0x471/0x7d0 [ 490.238339][T12666] do_sys_openat2+0x11b/0x1d0 [ 490.238384][T12666] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.238443][T12666] __x64_sys_openat+0x174/0x210 [ 490.238490][T12666] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.238540][T12666] ? rcu_is_watching+0x12/0xc0 [ 490.238584][T12666] do_syscall_64+0xcd/0x230 [ 490.238635][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.238668][T12666] RIP: 0033:0x7f072238e169 [ 490.238693][T12666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.238725][T12666] RSP: 002b:00007f07201f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.238756][T12666] RAX: ffffffffffffffda RBX: 00007f07225b5fa0 RCX: 00007f072238e169 [ 490.238777][T12666] RDX: 0000000000022500 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 490.238798][T12666] RBP: 00007f0722410a68 R08: 0000000000000000 R09: 0000000000000000 [ 490.238816][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.238835][T12666] R13: 0000000000000000 R14: 00007f07225b5fa0 R15: 00007ffe5c9c1668 [ 490.238874][T12666] [ 490.694520][ T5848] Bluetooth: hci8: command tx timeout [ 490.980106][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.025474][T12557] veth0_vlan: entered promiscuous mode [ 492.120456][T12557] veth1_vlan: entered promiscuous mode [ 492.230143][T12557] veth0_macvtap: entered promiscuous mode [ 492.388622][ T5848] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 492.388667][ T5848] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 492.404778][ T5848] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 492.404823][ T5848] Bluetooth: hci3: adv larger than maximum supported [ 492.412345][ T5848] Bluetooth: hci3: Malformed LE Event: 0x0d [ 492.437587][T12557] veth1_macvtap: entered promiscuous mode [ 492.500117][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.510811][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.520745][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.531398][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.541523][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.577507][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.588427][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.617581][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.637271][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.657260][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.692357][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.707559][ T5848] Bluetooth: hci8: command tx timeout [ 492.717634][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.728391][T12681] openvswitch: netlink: IP tunnel dst address not specified [ 492.738357][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.749225][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.761779][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.775508][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.786497][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.797335][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.807992][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.819578][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.847766][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.867511][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.887250][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.907288][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.927263][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.943757][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.973084][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.991424][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.012226][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.027991][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.047228][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.072185][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.194078][T12557] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.207286][T12557] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.216061][T12557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.235689][T12557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.842621][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.869971][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.964816][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.983018][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.403638][T12713] FAULT_INJECTION: forcing a failure. [ 494.403638][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 494.456372][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.8.1334 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 494.456430][T12713] Tainted: [U]=USER [ 494.456442][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.456461][T12713] Call Trace: [ 494.456471][T12713] [ 494.456484][T12713] dump_stack_lvl+0x16c/0x1f0 [ 494.456545][T12713] should_fail_ex+0x512/0x640 [ 494.456583][T12713] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 494.456622][T12713] should_failslab+0xc2/0x120 [ 494.456667][T12713] __kmalloc_cache_noprof+0x6a/0x3e0 [ 494.456699][T12713] ? __lock_acquire+0xaa4/0x1ba0 [ 494.456745][T12713] ? snd_timer_instance_new+0x47/0x2e0 [ 494.456803][T12713] snd_timer_instance_new+0x47/0x2e0 [ 494.456856][T12713] snd_seq_timer_open+0x1cc/0x5e0 [ 494.456903][T12713] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 494.456951][T12713] ? find_held_lock+0x2b/0x80 [ 494.456991][T12713] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 494.457034][T12713] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.457080][T12713] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 494.457129][T12713] queue_use+0xe3/0x250 [ 494.457162][T12713] snd_seq_queue_alloc+0x2e5/0x550 [ 494.457209][T12713] snd_seq_ioctl_create_queue+0xa9/0x380 [ 494.457259][T12713] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 494.457314][T12713] alloc_seq_queue+0xda/0x180 [ 494.457366][T12713] ? __pfx_alloc_seq_queue+0x10/0x10 [ 494.457442][T12713] ? mark_held_locks+0x49/0x80 [ 494.457487][T12713] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.457541][T12713] snd_seq_oss_open+0x38c/0xa20 [ 494.457602][T12713] odev_open+0x6f/0x90 [ 494.457648][T12713] ? __pfx_odev_open+0x10/0x10 [ 494.457695][T12713] soundcore_open+0x409/0x580 [ 494.457745][T12713] ? __pfx_soundcore_open+0x10/0x10 [ 494.457792][T12713] chrdev_open+0x231/0x6a0 [ 494.457828][T12713] ? __pfx_apparmor_file_open+0x10/0x10 [ 494.457874][T12713] ? __pfx_chrdev_open+0x10/0x10 [ 494.457916][T12713] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 494.457978][T12713] do_dentry_open+0x741/0x1c10 [ 494.458016][T12713] ? __pfx_chrdev_open+0x10/0x10 [ 494.458064][T12713] vfs_open+0x82/0x3f0 [ 494.458116][T12713] path_openat+0x1e5e/0x2d40 [ 494.458168][T12713] ? __pfx_path_openat+0x10/0x10 [ 494.458214][T12713] do_filp_open+0x20b/0x470 [ 494.458250][T12713] ? __pfx_do_filp_open+0x10/0x10 [ 494.458317][T12713] ? alloc_fd+0x471/0x7d0 [ 494.458360][T12713] do_sys_openat2+0x11b/0x1d0 [ 494.458407][T12713] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.458472][T12713] __x64_sys_openat+0x174/0x210 [ 494.458529][T12713] ? __pfx___x64_sys_openat+0x10/0x10 [ 494.458579][T12713] ? rcu_is_watching+0x12/0xc0 [ 494.458625][T12713] do_syscall_64+0xcd/0x230 [ 494.458676][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.458708][T12713] RIP: 0033:0x7f0ec8f8e169 [ 494.458734][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.458768][T12713] RSP: 002b:00007f0ec9e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.458799][T12713] RAX: ffffffffffffffda RBX: 00007f0ec91b5fa0 RCX: 00007f0ec8f8e169 [ 494.458820][T12713] RDX: 00000000001c8300 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 494.458842][T12713] RBP: 00007f0ec9010a68 R08: 0000000000000000 R09: 0000000000000000 [ 494.458861][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.458880][T12713] R13: 0000000000000000 R14: 00007f0ec91b5fa0 R15: 00007ffdd6cb7b68 [ 494.458922][T12713] [ 494.854979][T12717] FAULT_INJECTION: forcing a failure. [ 494.854979][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.248287][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.8.1334 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 495.248346][T12717] Tainted: [U]=USER [ 495.248356][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.248376][T12717] Call Trace: [ 495.248386][T12717] [ 495.248399][T12717] dump_stack_lvl+0x16c/0x1f0 [ 495.248453][T12717] should_fail_ex+0x512/0x640 [ 495.248499][T12717] strncpy_from_user+0x3b/0x2e0 [ 495.248541][T12717] getname_flags.part.0+0x8f/0x550 [ 495.248606][T12717] getname_flags+0x93/0xf0 [ 495.248656][T12717] do_sys_openat2+0xb8/0x1d0 [ 495.248716][T12717] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.248764][T12717] ? __sys_sendmsg+0x199/0x220 [ 495.248815][T12717] __x64_sys_openat+0x174/0x210 [ 495.248862][T12717] ? __pfx___x64_sys_openat+0x10/0x10 [ 495.248912][T12717] ? rcu_is_watching+0x12/0xc0 [ 495.248957][T12717] do_syscall_64+0xcd/0x230 [ 495.249006][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.249038][T12717] RIP: 0033:0x7f0ec8f8e169 [ 495.249063][T12717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.249095][T12717] RSP: 002b:00007f0ec9e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.249134][T12717] RAX: ffffffffffffffda RBX: 00007f0ec91b6080 RCX: 00007f0ec8f8e169 [ 495.249155][T12717] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 495.249175][T12717] RBP: 00007f0ec9010a68 R08: 0000000000000000 R09: 0000000000000000 [ 495.249212][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.249232][T12717] R13: 0000000000000000 R14: 00007f0ec91b6080 R15: 00007ffdd6cb7b68 [ 495.249273][T12717] [ 495.928802][T12712] Invalid ELF header magic: != ELF [ 499.158835][ T30] audit: type=1800 audit(4294967348.779:11): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1382" name="file0" dev="tmpfs" ino=315 res=0 errno=0 [ 503.005441][T12838] netlink: 93 bytes leftover after parsing attributes in process `syz.8.1395'. [ 503.128248][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1396'. [ 503.313709][T12842] zswap: compressor not available [ 503.517005][T12854] pty pty58: ldisc open failed (-12), clearing slot 58 [ 504.108357][T12868] Â: entered promiscuous mode [ 505.934250][T12884] FAULT_INJECTION: forcing a failure. [ 505.934250][T12884] name failslab, interval 1, probability 0, space 0, times 0 [ 505.947712][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.8.1407 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 505.947753][T12884] Tainted: [U]=USER [ 505.947760][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.947774][T12884] Call Trace: [ 505.947781][T12884] [ 505.947789][T12884] dump_stack_lvl+0x16c/0x1f0 [ 505.947826][T12884] should_fail_ex+0x512/0x640 [ 505.947852][T12884] ? __kvmalloc_node_noprof+0x122/0x600 [ 505.947881][T12884] should_failslab+0xc2/0x120 [ 505.947912][T12884] __kvmalloc_node_noprof+0x135/0x600 [ 505.947937][T12884] ? xfpregs_get+0xb8/0x150 [ 505.947969][T12884] ? __pfx_xfpregs_get+0x10/0x10 [ 505.948020][T12884] ? regset_get_alloc+0xec/0x1f0 [ 505.948067][T12884] ? regset_get_alloc+0xec/0x1f0 [ 505.948097][T12884] regset_get_alloc+0xec/0x1f0 [ 505.948133][T12884] elf_core_dump+0x10a2/0x3a90 [ 505.948185][T12884] ? __pfx_elf_core_dump+0x10/0x10 [ 505.948221][T12884] ? kasan_save_stack+0x33/0x60 [ 505.948246][T12884] ? kasan_save_track+0x14/0x30 [ 505.948271][T12884] ? __kasan_kmalloc+0xaa/0xb0 [ 505.948295][T12884] ? do_coredump+0x17aa/0x4480 [ 505.948326][T12884] ? get_signal+0x22e3/0x26d0 [ 505.948352][T12884] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 505.948443][T12884] ? do_coredump+0x3183/0x4480 [ 505.948473][T12884] do_coredump+0x3183/0x4480 [ 505.948516][T12884] ? __pfx_do_coredump+0x10/0x10 [ 505.948551][T12884] ? stack_trace_save+0x8e/0xc0 [ 505.948577][T12884] ? __pfx_stack_trace_save+0x10/0x10 [ 505.948615][T12884] ? stack_depot_save_flags+0x28/0xa50 [ 505.948643][T12884] ? __lock_acquire+0xaa4/0x1ba0 [ 505.948681][T12884] ? __kasan_slab_free+0x51/0x70 [ 505.948706][T12884] ? kmem_cache_free+0x2d4/0x4d0 [ 505.948730][T12884] ? __sigqueue_free+0xba/0x2a0 [ 505.948761][T12884] ? get_signal+0xcba/0x26d0 [ 505.948786][T12884] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 505.948857][T12884] ? proc_coredump_connector+0x2d1/0x4f0 [ 505.948886][T12884] ? __pfx_proc_coredump_connector+0x10/0x10 [ 505.948921][T12884] ? rcu_is_watching+0x12/0xc0 [ 505.948947][T12884] get_signal+0x22e3/0x26d0 [ 505.948984][T12884] ? __pfx_get_signal+0x10/0x10 [ 505.949013][T12884] ? fpu__clear_user_states+0x16a/0x260 [ 505.949054][T12884] ? rcu_is_watching+0x12/0xc0 [ 505.949076][T12884] ? __local_bh_enable_ip+0xa4/0x120 [ 505.949107][T12884] arch_do_signal_or_restart+0x8f/0x7a0 [ 505.949143][T12884] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 505.949193][T12884] syscall_exit_to_user_mode+0x150/0x2a0 [ 505.949228][T12884] do_syscall_64+0xda/0x230 [ 505.949263][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.949285][T12884] RIP: 0033:0x7f0ec8e4f750 [ 505.949304][T12884] Code: 10 83 e0 01 83 e2 01 88 15 a2 5f e9 00 88 05 9f 5f e9 00 c3 50 48 8d 35 20 13 1c 00 48 8d 3d 26 13 1c 00 31 c0 e8 30 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 505.949326][T12884] RSP: 002b:00007f0ec9e96a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.949347][T12884] RAX: 0000000000000000 RBX: 00007f0ec91b5fa0 RCX: 00007f0ec8f8e169 [ 505.949362][T12884] RDX: 00007f0ec9e96a80 RSI: 00007f0ec9e96bb0 RDI: 000000000000000b [ 505.949376][T12884] RBP: 00007f0ec9010a68 R08: 0000000000000000 R09: 0000000000000000 [ 505.949390][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.949403][T12884] R13: 0000000000000000 R14: 00007f0ec91b5fa0 R15: 00007ffdd6cb7b68 [ 505.949431][T12884] [ 506.637348][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.643730][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 509.382550][T12935] netlink: 'syz.8.1416': attribute type 11 has an invalid length. [ 509.743791][T12937] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1417'. [ 509.845867][T12937] sctp: [Deprecated]: syz.6.1417 (pid 12937) Use of int in max_burst socket option. [ 509.845867][T12937] Use struct sctp_assoc_value instead [ 510.822785][T12945] FAULT_INJECTION: forcing a failure. [ 510.822785][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 510.837607][T12942] netlink: 'syz.6.1418': attribute type 10 has an invalid length. [ 510.845603][T12942] netlink: 230 bytes leftover after parsing attributes in process `syz.6.1418'. [ 510.854927][T12945] CPU: 1 UID: 0 PID: 12945 Comm: syz.7.1419 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 510.854978][T12945] Tainted: [U]=USER [ 510.854988][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.855007][T12945] Call Trace: [ 510.855017][T12945] [ 510.855028][T12945] dump_stack_lvl+0x16c/0x1f0 [ 510.855099][T12945] should_fail_ex+0x512/0x640 [ 510.855136][T12945] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 510.855177][T12945] should_failslab+0xc2/0x120 [ 510.855220][T12945] __kmalloc_cache_noprof+0x6a/0x3e0 [ 510.855252][T12945] ? __lock_acquire+0xaa4/0x1ba0 [ 510.855297][T12945] ? snd_timer_instance_new+0x47/0x2e0 [ 510.855356][T12945] snd_timer_instance_new+0x47/0x2e0 [ 510.855423][T12945] snd_seq_timer_open+0x1cc/0x5e0 [ 510.855470][T12945] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 510.855517][T12945] ? find_held_lock+0x2b/0x80 [ 510.855558][T12945] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 510.855601][T12945] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.855647][T12945] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 510.855697][T12945] queue_use+0xe3/0x250 [ 510.855732][T12945] snd_seq_queue_alloc+0x2e5/0x550 [ 510.855776][T12945] snd_seq_ioctl_create_queue+0xa9/0x380 [ 510.855827][T12945] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 510.855886][T12945] alloc_seq_queue+0xda/0x180 [ 510.855939][T12945] ? __pfx_alloc_seq_queue+0x10/0x10 [ 510.856016][T12945] ? mark_held_locks+0x49/0x80 [ 510.856061][T12945] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.856107][T12945] snd_seq_oss_open+0x38c/0xa20 [ 510.856168][T12945] odev_open+0x6f/0x90 [ 510.856214][T12945] ? __pfx_odev_open+0x10/0x10 [ 510.856261][T12945] soundcore_open+0x409/0x580 [ 510.856312][T12945] ? __pfx_soundcore_open+0x10/0x10 [ 510.856359][T12945] chrdev_open+0x231/0x6a0 [ 510.856404][T12945] ? __pfx_apparmor_file_open+0x10/0x10 [ 510.856449][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 510.856499][T12945] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 510.856561][T12945] do_dentry_open+0x741/0x1c10 [ 510.856600][T12945] ? __pfx_chrdev_open+0x10/0x10 [ 510.856648][T12945] vfs_open+0x82/0x3f0 [ 510.856699][T12945] path_openat+0x1e5e/0x2d40 [ 510.856751][T12945] ? __pfx_path_openat+0x10/0x10 [ 510.856798][T12945] do_filp_open+0x20b/0x470 [ 510.856834][T12945] ? __pfx_do_filp_open+0x10/0x10 [ 510.856901][T12945] ? alloc_fd+0x471/0x7d0 [ 510.856944][T12945] do_sys_openat2+0x11b/0x1d0 [ 510.856992][T12945] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.857057][T12945] __x64_sys_openat+0x174/0x210 [ 510.857107][T12945] ? __pfx___x64_sys_openat+0x10/0x10 [ 510.857158][T12945] ? rcu_is_watching+0x12/0xc0 [ 510.857207][T12945] do_syscall_64+0xcd/0x230 [ 510.857260][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.857292][T12945] RIP: 0033:0x7f1b2c58e169 [ 510.857317][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.857352][T12945] RSP: 002b:00007f1b2a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.857390][T12945] RAX: ffffffffffffffda RBX: 00007f1b2c7b5fa0 RCX: 00007f1b2c58e169 [ 510.857414][T12945] RDX: 00000000001c8300 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 510.857436][T12945] RBP: 00007f1b2c610a68 R08: 0000000000000000 R09: 0000000000000000 [ 510.857456][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.857476][T12945] R13: 0000000000000000 R14: 00007f1b2c7b5fa0 R15: 00007ffd08390208 [ 510.857520][T12945] [ 511.340247][T12945] FAULT_INJECTION: forcing a failure. [ 511.340247][T12945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 511.390419][T12945] CPU: 1 UID: 0 PID: 12945 Comm: syz.7.1419 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 511.390476][T12945] Tainted: [U]=USER [ 511.390487][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 511.390506][T12945] Call Trace: [ 511.390516][T12945] [ 511.390528][T12945] dump_stack_lvl+0x16c/0x1f0 [ 511.390600][T12945] should_fail_ex+0x512/0x640 [ 511.390645][T12945] get_futex_key+0x49e/0x1000 [ 511.390685][T12945] ? __pfx_get_futex_key+0x10/0x10 [ 511.390735][T12945] futex_wake+0xe7/0x4e0 [ 511.390782][T12945] ? __pfx_futex_wake+0x10/0x10 [ 511.390830][T12945] ? kmem_cache_free+0x2d4/0x4d0 [ 511.390865][T12945] ? fd_install+0x225/0x750 [ 511.390892][T12945] ? putname+0x154/0x1a0 [ 511.390937][T12945] do_futex+0x1e3/0x350 [ 511.390976][T12945] ? __pfx_do_futex+0x10/0x10 [ 511.391024][T12945] __x64_sys_futex+0x1e0/0x4c0 [ 511.391075][T12945] ? __x64_sys_openat+0x174/0x210 [ 511.391117][T12945] ? __pfx___x64_sys_futex+0x10/0x10 [ 511.391154][T12945] ? rcu_is_watching+0x12/0xc0 [ 511.391193][T12945] do_syscall_64+0xcd/0x230 [ 511.391239][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.391269][T12945] RIP: 0033:0x7f1b2c58e169 [ 511.391292][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.391327][T12945] RSP: 002b:00007f1b2a3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 511.391358][T12945] RAX: ffffffffffffffda RBX: 00007f1b2c7b5fa8 RCX: 00007f1b2c58e169 [ 511.391379][T12945] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b2c7b5fac [ 511.391397][T12945] RBP: 00007f1b2c7b5fa0 R08: 00007f1b2d30e000 R09: 0000000000000000 [ 511.391416][T12945] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f1b2c7b5fac [ 511.391434][T12945] R13: 0000000000000000 R14: 00007ffd08390120 R15: 00007ffd08390208 [ 511.391471][T12945] [ 512.750177][T12968] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 512.759515][T12968] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 512.767851][T12968] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 512.776853][T12968] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 512.785682][T12968] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.652002][T12982] FAULT_INJECTION: forcing a failure. [ 513.652002][T12982] name failslab, interval 1, probability 0, space 0, times 0 [ 513.688103][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.7.1427 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 513.688160][T12982] Tainted: [U]=USER [ 513.688172][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.688192][T12982] Call Trace: [ 513.688202][T12982] [ 513.688215][T12982] dump_stack_lvl+0x16c/0x1f0 [ 513.688267][T12982] should_fail_ex+0x512/0x640 [ 513.688304][T12982] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 513.688353][T12982] should_failslab+0xc2/0x120 [ 513.688398][T12982] __kmalloc_cache_noprof+0x6a/0x3e0 [ 513.688432][T12982] ? lockdep_init_map_type+0x5c/0x280 [ 513.688478][T12982] ? rfkill_fop_open+0x1b6/0x750 [ 513.688518][T12982] ? __pfx_rfkill_fop_open+0x10/0x10 [ 513.688552][T12982] rfkill_fop_open+0x1b6/0x750 [ 513.688593][T12982] ? __pfx_rfkill_fop_open+0x10/0x10 [ 513.688630][T12982] misc_open+0x35a/0x420 [ 513.688673][T12982] ? __pfx_misc_open+0x10/0x10 [ 513.688715][T12982] chrdev_open+0x231/0x6a0 [ 513.688751][T12982] ? __pfx_apparmor_file_open+0x10/0x10 [ 513.688794][T12982] ? __pfx_chrdev_open+0x10/0x10 [ 513.688835][T12982] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 513.688895][T12982] do_dentry_open+0x741/0x1c10 [ 513.688932][T12982] ? __pfx_chrdev_open+0x10/0x10 [ 513.688978][T12982] vfs_open+0x82/0x3f0 [ 513.689029][T12982] path_openat+0x1e5e/0x2d40 [ 513.689079][T12982] ? __pfx_path_openat+0x10/0x10 [ 513.689126][T12982] do_filp_open+0x20b/0x470 [ 513.689161][T12982] ? __pfx_do_filp_open+0x10/0x10 [ 513.689238][T12982] ? alloc_fd+0x471/0x7d0 [ 513.689281][T12982] do_sys_openat2+0x11b/0x1d0 [ 513.689328][T12982] ? __pfx_do_sys_openat2+0x10/0x10 [ 513.689397][T12982] __x64_sys_openat+0x174/0x210 [ 513.689445][T12982] ? __pfx___x64_sys_openat+0x10/0x10 [ 513.689496][T12982] ? rcu_is_watching+0x12/0xc0 [ 513.689542][T12982] do_syscall_64+0xcd/0x230 [ 513.689593][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.689626][T12982] RIP: 0033:0x7f1b2c58e169 [ 513.689652][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.689684][T12982] RSP: 002b:00007f1b2a3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.689714][T12982] RAX: ffffffffffffffda RBX: 00007f1b2c7b6160 RCX: 00007f1b2c58e169 [ 513.689736][T12982] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 513.689756][T12982] RBP: 00007f1b2c610a68 R08: 0000000000000000 R09: 0000000000000000 [ 513.689776][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.689795][T12982] R13: 0000000000000000 R14: 00007f1b2c7b6160 R15: 00007ffd08390208 [ 513.689837][T12982] [ 514.101400][T12968] Bluetooth: hci4: command 0x0406 tx timeout [ 514.337454][T12967] chnl_net:caif_netlink_parms(): no params data found [ 514.832918][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.843498][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.869145][ T5848] Bluetooth: hci9: command tx timeout [ 514.892047][T12967] bridge_slave_0: entered allmulticast mode [ 514.920583][T12967] bridge_slave_0: entered promiscuous mode [ 514.930620][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.937999][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.945308][T12967] bridge_slave_1: entered allmulticast mode [ 514.954375][T12967] bridge_slave_1: entered promiscuous mode [ 515.133532][T12999] FAULT_INJECTION: forcing a failure. [ 515.133532][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 515.167403][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.7.1431 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 515.167459][T12999] Tainted: [U]=USER [ 515.167470][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.167489][T12999] Call Trace: [ 515.167500][T12999] [ 515.167512][T12999] dump_stack_lvl+0x16c/0x1f0 [ 515.167563][T12999] should_fail_ex+0x512/0x640 [ 515.167600][T12999] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 515.167640][T12999] should_failslab+0xc2/0x120 [ 515.167685][T12999] __kmalloc_cache_noprof+0x6a/0x3e0 [ 515.167717][T12999] ? __lock_acquire+0xaa4/0x1ba0 [ 515.167774][T12999] ? snd_timer_instance_new+0x47/0x2e0 [ 515.167829][T12999] snd_timer_instance_new+0x47/0x2e0 [ 515.167880][T12999] snd_seq_timer_open+0x1cc/0x5e0 [ 515.167924][T12999] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 515.167970][T12999] ? find_held_lock+0x2b/0x80 [ 515.168009][T12999] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 515.168050][T12999] ? lockdep_hardirqs_on+0x7c/0x110 [ 515.168094][T12999] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 515.168142][T12999] queue_use+0xe3/0x250 [ 515.168183][T12999] snd_seq_queue_alloc+0x2e5/0x550 [ 515.168225][T12999] snd_seq_ioctl_create_queue+0xa9/0x380 [ 515.168275][T12999] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 515.168331][T12999] alloc_seq_queue+0xda/0x180 [ 515.168382][T12999] ? __pfx_alloc_seq_queue+0x10/0x10 [ 515.168456][T12999] ? mark_held_locks+0x49/0x80 [ 515.168499][T12999] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.168542][T12999] snd_seq_oss_open+0x38c/0xa20 [ 515.168599][T12999] odev_open+0x6f/0x90 [ 515.168642][T12999] ? __pfx_odev_open+0x10/0x10 [ 515.168688][T12999] soundcore_open+0x409/0x580 [ 515.168737][T12999] ? __pfx_soundcore_open+0x10/0x10 [ 515.168782][T12999] chrdev_open+0x231/0x6a0 [ 515.168818][T12999] ? __pfx_apparmor_file_open+0x10/0x10 [ 515.168861][T12999] ? __pfx_chrdev_open+0x10/0x10 [ 515.168898][T12999] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 515.168956][T12999] do_dentry_open+0x741/0x1c10 [ 515.168993][T12999] ? __pfx_chrdev_open+0x10/0x10 [ 515.169039][T12999] vfs_open+0x82/0x3f0 [ 515.169089][T12999] path_openat+0x1e5e/0x2d40 [ 515.169138][T12999] ? __pfx_path_openat+0x10/0x10 [ 515.169191][T12999] do_filp_open+0x20b/0x470 [ 515.169225][T12999] ? __pfx_do_filp_open+0x10/0x10 [ 515.169291][T12999] ? alloc_fd+0x471/0x7d0 [ 515.169333][T12999] do_sys_openat2+0x11b/0x1d0 [ 515.169378][T12999] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.169441][T12999] __x64_sys_openat+0x174/0x210 [ 515.169488][T12999] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.169538][T12999] ? rcu_is_watching+0x12/0xc0 [ 515.169582][T12999] do_syscall_64+0xcd/0x230 [ 515.169632][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.169663][T12999] RIP: 0033:0x7f1b2c58e169 [ 515.169688][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.169720][T12999] RSP: 002b:00007f1b2a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.169750][T12999] RAX: ffffffffffffffda RBX: 00007f1b2c7b5fa0 RCX: 00007f1b2c58e169 [ 515.169772][T12999] RDX: 00000000001c8300 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 515.169792][T12999] RBP: 00007f1b2c610a68 R08: 0000000000000000 R09: 0000000000000000 [ 515.169812][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.169831][T12999] R13: 0000000000000000 R14: 00007f1b2c7b5fa0 R15: 00007ffd08390208 [ 515.169872][T12999] [ 515.604693][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.621436][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.654432][T12999] FAULT_INJECTION: forcing a failure. [ 515.654432][T12999] name fail_futex, interval 1, probability 0, space 0, times 0 [ 515.667548][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.7.1431 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 515.667600][T12999] Tainted: [U]=USER [ 515.667611][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.667629][T12999] Call Trace: [ 515.667638][T12999] [ 515.667651][T12999] dump_stack_lvl+0x16c/0x1f0 [ 515.667703][T12999] should_fail_ex+0x512/0x640 [ 515.667747][T12999] get_futex_key+0x49e/0x1000 [ 515.667787][T12999] ? __pfx_get_futex_key+0x10/0x10 [ 515.667838][T12999] futex_wake+0xe7/0x4e0 [ 515.667885][T12999] ? __pfx_futex_wake+0x10/0x10 [ 515.667943][T12999] ? kmem_cache_free+0x2d4/0x4d0 [ 515.667979][T12999] ? fd_install+0x225/0x750 [ 515.668005][T12999] ? putname+0x154/0x1a0 [ 515.668051][T12999] do_futex+0x1e3/0x350 [ 515.668089][T12999] ? __pfx_do_futex+0x10/0x10 [ 515.668137][T12999] __x64_sys_futex+0x1e0/0x4c0 [ 515.668178][T12999] ? __x64_sys_openat+0x174/0x210 [ 515.668226][T12999] ? __pfx___x64_sys_futex+0x10/0x10 [ 515.668269][T12999] ? rcu_is_watching+0x12/0xc0 [ 515.668314][T12999] do_syscall_64+0xcd/0x230 [ 515.668364][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.668394][T12999] RIP: 0033:0x7f1b2c58e169 [ 515.668419][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.668450][T12999] RSP: 002b:00007f1b2a3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.668480][T12999] RAX: ffffffffffffffda RBX: 00007f1b2c7b5fa8 RCX: 00007f1b2c58e169 [ 515.668501][T12999] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b2c7b5fac [ 515.668520][T12999] RBP: 00007f1b2c7b5fa0 R08: 00007f1b2d30e000 R09: 0000000000000000 [ 515.668539][T12999] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f1b2c7b5fac [ 515.668570][T12999] R13: 0000000000000000 R14: 00007ffd08390120 R15: 00007ffd08390208 [ 515.668610][T12999] [ 516.116291][T12967] team0: Port device team_slave_0 added [ 516.244953][T12967] team0: Port device team_slave_1 added [ 516.361122][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.369507][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.412557][T13011] Invalid ELF header magic: != ELF [ 516.447483][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.593758][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.600915][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.638423][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.948479][ T5848] Bluetooth: hci9: command tx timeout [ 517.041272][T12967] hsr_slave_0: entered promiscuous mode [ 517.059981][T12967] hsr_slave_1: entered promiscuous mode [ 517.066510][T12967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.102048][T12967] Cannot create hsr debugfs directory [ 517.170537][T13017] sctp: [Deprecated]: syz.8.1436 (pid 13017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.170537][T13017] Use struct sctp_sack_info instead [ 519.027579][ T5848] Bluetooth: hci9: command tx timeout [ 519.170250][T12967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 519.223075][T12967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 519.265601][T12967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 519.331556][T12967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 519.849959][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.935292][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.971716][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.978864][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.091683][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.098932][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.423442][T12967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network syzkaller syzkaller login: [ 521.117507][ T5848] Bluetooth: hci9: command tx timeout [ 521.859060][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.670413][T13129] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 522.670413][T13129] The task syz.7.1450 (13129) triggered the difference, watch for misbehavior. [ 523.104198][T12967] veth0_vlan: entered promiscuous mode [ 523.150696][T12967] veth1_vlan: entered promiscuous mode [ 523.235782][T12967] veth0_macvtap: entered promiscuous mode [ 523.241864][T12967] veth1_macvtap: entered promiscuous mode [ 523.270707][ T31] INFO: task syz.2.1001:10769 blocked for more than 143 seconds. [ 523.270748][ T31] Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 523.270780][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.270795][ T31] task:syz.2.1001 state:D stack:27688 pid:10769 tgid:10766 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 523.270905][ T31] Call Trace: [ 523.270916][ T31] [ 523.270961][ T31] __schedule+0x116f/0x5de0 [ 523.271021][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 523.271078][ T31] ? __pfx___schedule+0x10/0x10 [ 523.271128][ T31] ? find_held_lock+0x2b/0x80 [ 523.271165][ T31] ? schedule+0x2d7/0x3a0 [ 523.271218][ T31] schedule+0xe7/0x3a0 [ 523.271267][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.271312][ T31] __mutex_lock+0x6c7/0xb90 [ 523.271365][ T31] ? nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.271408][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.271470][ T31] ? net_generic+0xea/0x2a0 [ 523.271512][ T31] ? nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.271550][ T31] nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.271598][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 523.271658][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.271712][ T31] ? rcu_is_watching+0x12/0xc0 [ 523.271760][ T31] ? bpf_lsm_capable+0x9/0x10 [ 523.271798][ T31] ? security_capable+0x7e/0x260 [ 523.271841][ T31] genl_rcv_msg+0x55c/0x800 [ 523.271880][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.271912][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 523.271950][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 523.271995][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 523.272050][ T31] netlink_rcv_skb+0x16a/0x440 [ 523.272099][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.272134][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.272202][ T31] ? __pfx_down_read+0x10/0x10 [ 523.272234][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 523.272300][ T31] genl_rcv+0x28/0x40 [ 523.272347][ T31] netlink_unicast+0x53a/0x7f0 [ 523.272401][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 523.272449][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 523.272505][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 523.272570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.272637][ T31] ____sys_sendmsg+0xa95/0xc70 [ 523.272671][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 523.272717][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.272756][ T31] ? find_held_lock+0x2b/0x80 [ 523.272793][ T31] ? do_pte_missing+0x87c/0x3fb0 [ 523.272836][ T31] ___sys_sendmsg+0x134/0x1d0 [ 523.272886][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.272983][ T31] __sys_sendmsg+0x16d/0x220 [ 523.273031][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.273077][ T31] ? find_held_lock+0x2b/0x80 [ 523.273125][ T31] ? do_user_addr_fault+0x843/0x1370 [ 523.273174][ T31] do_syscall_64+0xcd/0x230 [ 523.273228][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.273270][ T31] RIP: 0033:0x7efe7f38e169 [ 523.273297][ T31] RSP: 002b:00007efe80257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.273331][ T31] RAX: ffffffffffffffda RBX: 00007efe7f5b6080 RCX: 00007efe7f38e169 [ 523.273355][ T31] RDX: 0000000000000084 RSI: 00002000000000c0 RDI: 0000000000000004 [ 523.273378][ T31] RBP: 00007efe7f410a68 R08: 0000000000000000 R09: 0000000000000000 [ 523.273400][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.273421][ T31] R13: 0000000000000001 R14: 00007efe7f5b6080 R15: 00007ffeffe522d8 [ 523.273471][ T31] [ 523.273511][ T31] [ 523.273511][ T31] Showing all locks held in the system: [ 523.273525][ T31] 1 lock held by khungtaskd/31: [ 523.273544][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 523.273665][ T31] 3 locks held by kworker/1:4/5879: [ 523.273685][ T31] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 523.273768][ T31] #1: ffffc9000426fd18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 523.273853][ T31] #2: ffff88803093d240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 523.273950][ T31] 5 locks held by kworker/u8:13/6580: [ 523.273971][ T31] 3 locks held by kworker/u8:22/6595: [ 523.273993][ T31] 3 locks held by kworker/u8:49/10053: [ 523.274013][ T31] #0: ffff888030f42148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 523.274096][ T31] #1: ffffc900045efd18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 523.274181][ T31] #2: ffffffff9012c8a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 523.274286][ T31] 2 locks held by syz.2.1001/10767: [ 523.274304][ T31] #0: ffffffff901ce950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.274401][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.274489][ T31] 2 locks held by syz.2.1001/10769: [ 523.274508][ T31] #0: ffffffff901ce950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.274612][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.274700][ T31] 2 locks held by syz-executor/11064: [ 523.274719][ T31] #0: ffff8880306ea0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 523.274831][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 523.274932][ T31] 2 locks held by syz.0.1080/11309: [ 523.274952][ T31] #0: ffffffff901ce950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.275050][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 523.275524][ T31] 2 locks held by syz.3.1262/12173: [ 523.275545][ T31] #0: ffff88814376e0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 523.275660][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 523.275760][ T31] 2 locks held by syz.5.1293/12314: [ 523.275780][ T31] #0: ffffffff901ce950 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.275877][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 523.275965][ T31] 2 locks held by syz.1.1373/12730: [ 523.275985][ T31] #0: ffff8880913560e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 523.276103][ T31] #1: ffffffff8e7cc028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 523.276202][ T31] 1 lock held by syz-executor/12967: [ 523.276221][ T31] #0: ffffffff9012c8a8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4e4/0x1c70 [ 523.276332][ T31] 1 lock held by syz.8.1437/13026: [ 523.276352][ T31] 2 locks held by getty/13087: [ 523.276370][ T31] #0: ffff88803649a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 523.276466][ T31] #1: ffffc900047ab2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 523.276557][ T31] 6 locks held by syz.8.1448/13112: [ 523.276578][ T31] [ 523.276586][ T31] ============================================= [ 523.276586][ T31] [ 523.276614][ T31] NMI backtrace for cpu 1 [ 523.276635][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 523.276682][ T31] Tainted: [U]=USER [ 523.276692][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.276710][ T31] Call Trace: [ 523.276720][ T31] [ 523.276732][ T31] dump_stack_lvl+0x116/0x1f0 [ 523.276777][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 523.276814][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.276846][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 523.276886][ T31] watchdog+0xf70/0x12c0 [ 523.276939][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.276980][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.277026][ T31] ? __kthread_parkme+0x19e/0x250 [ 523.277071][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.277115][ T31] kthread+0x3c2/0x780 [ 523.277167][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277211][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277262][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277308][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277353][ T31] ? rcu_is_watching+0x12/0xc0 [ 523.277386][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277435][ T31] ret_from_fork+0x45/0x80 [ 523.277465][ T31] ? __pfx_kthread+0x10/0x10 [ 523.277514][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.277579][ T31] [ 523.277910][ T31] Sending NMI from CPU 1 to CPUs 0: [ 523.277945][ C0] NMI backtrace for cpu 0 [ 523.277964][ C0] CPU: 0 UID: 0 PID: 13026 Comm: syz.8.1437 Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 523.278002][ C0] Tainted: [U]=USER [ 523.278020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.278034][ C0] RIP: 0010:__lock_acquire+0x1e4/0x1ba0 [ 523.278071][ C0] Code: c0 41 09 c5 8b 84 24 b8 00 00 00 c1 e0 15 41 09 c5 8b 43 20 25 ff 1f 00 00 41 09 c5 8b 84 24 c0 00 00 00 44 89 6b 20 89 43 24 f7 b0 ff ff 48 89 df 44 0f b6 a8 c4 00 00 00 e8 e7 b0 ff ff 0f [ 523.278096][ C0] RSP: 0018:ffffc90002fa6e38 EFLAGS: 00000002 [ 523.278116][ C0] RAX: 0000000000000000 RBX: ffff88803655a8f0 RCX: 0000000000020000 [ 523.278132][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803655a8f0 [ 523.278151][ C0] RBP: ffff88803655a8f0 R08: 0000000000000000 R09: 0000000000000001 [ 523.278167][ C0] R10: 0000000000000000 R11: ffffffff8e3bf440 R12: 0000000000000000 [ 523.278183][ C0] R13: 0000000000020007 R14: ffff888036559e00 R15: 0000000000000000 [ 523.278199][ C0] FS: 0000000000000000(0000) GS:ffff8881249bf000(0000) knlGS:0000000000000000 [ 523.278222][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.278239][ C0] CR2: 0000001b32118ff8 CR3: 000000005814a000 CR4: 00000000003526f0 [ 523.278255][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.278271][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.278287][ C0] Call Trace: [ 523.278294][ C0] [ 523.278305][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 523.278342][ C0] lock_acquire+0x179/0x350 [ 523.278375][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 523.278411][ C0] unwind_next_frame+0xd1/0x20a0 [ 523.278440][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 523.278469][ C0] ? __unwind_start+0x574/0x7f0 [ 523.278497][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 523.278526][ C0] __unwind_start+0x45f/0x7f0 [ 523.278556][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 523.278586][ C0] arch_stack_walk+0x73/0x100 [ 523.278619][ C0] ? __unwind_start+0x574/0x7f0 [ 523.278651][ C0] stack_trace_save+0x8e/0xc0 [ 523.278677][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 523.278705][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 523.278741][ C0] save_stack+0x160/0x1f0 [ 523.278779][ C0] ? __pfx_save_stack+0x10/0x10 [ 523.278811][ C0] ? page_ext_put+0x3e/0xd0 [ 523.278841][ C0] __reset_page_owner+0x84/0x1a0 [ 523.278870][ C0] free_unref_folios+0x999/0x1630 [ 523.278899][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.278922][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 523.278955][ C0] folios_put_refs+0x56f/0x740 [ 523.278992][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 523.279034][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 523.279076][ C0] shmem_undo_range+0x58f/0x1150 [ 523.279113][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 523.279156][ C0] ? find_held_lock+0x2b/0x80 [ 523.279180][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 523.279212][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 523.279246][ C0] ? stack_trace_save+0x8e/0xc0 [ 523.279276][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 523.279327][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 523.279360][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 523.279398][ C0] ? find_held_lock+0x2b/0x80 [ 523.279423][ C0] ? evict+0x3a2/0x920 [ 523.279453][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 523.279486][ C0] evict+0x3e3/0x920 [ 523.279515][ C0] ? __pfx_evict+0x10/0x10 [ 523.279547][ C0] ? iput+0x519/0x880 [ 523.279579][ C0] iput+0x521/0x880 [ 523.279606][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 523.279648][ C0] dentry_unlink_inode+0x29c/0x480 [ 523.279678][ C0] __dentry_kill+0x1d0/0x600 [ 523.279709][ C0] dput.part.0+0x4b1/0x9b0 [ 523.279741][ C0] dput+0x1f/0x30 [ 523.279770][ C0] __fput+0x51c/0xb70 [ 523.279801][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.279833][ C0] task_work_run+0x14d/0x240 [ 523.279856][ C0] ? __pfx_task_work_run+0x10/0x10 [ 523.279880][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 523.279905][ C0] do_exit+0xafb/0x2c30 [ 523.279944][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 523.279976][ C0] ? __pfx_do_exit+0x10/0x10 [ 523.280022][ C0] do_group_exit+0xd3/0x2a0 [ 523.280060][ C0] get_signal+0x2673/0x26d0 [ 523.280093][ C0] ? force_sig_fault+0xc4/0x100 [ 523.280123][ C0] ? __pfx_get_signal+0x10/0x10 [ 523.280157][ C0] arch_do_signal_or_restart+0x8f/0x7a0 [ 523.280194][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 523.280231][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 523.280279][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 523.280317][ C0] asm_exc_page_fault+0x26/0x30 [ 523.280340][ C0] RIP: 0033:0x7f0ec8f8e171 [ 523.280357][ C0] Code: Unable to access opcode bytes at 0x7f0ec8f8e147. [ 523.280368][ C0] RSP: 002b:0000000000000081 EFLAGS: 00010217 [ 523.280386][ C0] RAX: 0000000000000000 RBX: 00007f0ec91b5fa0 RCX: 00007f0ec8f8e169 [ 523.280402][ C0] RDX: 0000200000000080 RSI: 0000000000000081 RDI: 00000000000007ff [ 523.280417][ C0] RBP: 00007f0ec9010a68 R08: 0000000000000008 R09: 0000000000000000 [ 523.280432][ C0] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 523.280447][ C0] R13: 0000000000000000 R14: 00007f0ec91b5fa0 R15: 00007ffdd6cb7b68 [ 523.280473][ C0] [ 523.302624][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 523.302655][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 523.302703][ T31] Tainted: [U]=USER [ 523.302714][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.302733][ T31] Call Trace: [ 523.302744][ T31] [ 523.302756][ T31] dump_stack_lvl+0x3d/0x1f0 [ 523.302805][ T31] panic+0x71c/0x800 [ 523.302853][ T31] ? __pfx_panic+0x10/0x10 [ 523.302941][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 523.302981][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.303014][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 523.303051][ T31] ? watchdog+0xdda/0x12c0 [ 523.303096][ T31] ? watchdog+0xdcd/0x12c0 [ 523.303147][ T31] watchdog+0xdeb/0x12c0 [ 523.303200][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.303244][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.303299][ T31] ? __kthread_parkme+0x19e/0x250 [ 523.303344][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.303391][ T31] kthread+0x3c2/0x780 [ 523.303441][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303487][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303533][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303581][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303629][ T31] ? rcu_is_watching+0x12/0xc0 [ 523.303664][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303715][ T31] ret_from_fork+0x45/0x80 [ 523.303745][ T31] ? __pfx_kthread+0x10/0x10 [ 523.303794][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.303863][ T31] [ 523.304018][ T31] Kernel Offset: disabled