last executing test programs: 5m46.533374092s ago: executing program 2 (id=1175): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) socket(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, 0x401, 0x8000) mmap$auto(0x2, 0x400008, 0xdf, 0x10000011, r1, 0x1000000008000) socket(0x2, 0x1, 0x106) socket(0x18, 0x2, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = getpid() connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x840) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x400, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) ioctl$auto_I2C_RDWR(r3, 0x707, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m46.077353665s ago: executing program 2 (id=1180): mmap$auto(0x0, 0x2020009, 0x3, 0x100eb1, 0xfd, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xac40, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130008", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, 0x0, 0x22480, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x5070c2, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(0x3, 0x89f3, 0x38) (async, rerun: 32) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) (rerun: 32) 5m44.963661202s ago: executing program 2 (id=1186): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='J\x00'], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 12) 5m44.329972687s ago: executing program 2 (id=1187): mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket(0xa, 0x3, 0x7) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) pipe$auto(0x0) r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) read$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000100)=""/4096, 0x1000) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) 5m44.265591605s ago: executing program 2 (id=1188): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x18, 0x2, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) 5m43.1983191s ago: executing program 2 (id=1192): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x200) (async) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) readv$auto(0xffffffffffffffff, 0x0, 0x410) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) (async) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hw_conf\x00', 0x20486, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) socket(0x11, 0x80003, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c00, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)={0x6, &(0x7f0000000040)={0x2, 0x5, 0xd, @raw=0x1}}) 5m40.320023946s ago: executing program 0 (id=1203): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 5m39.345269481s ago: executing program 0 (id=1205): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="1c8f") mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0xa, 0x6, "00000000000000000000000000000004", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r1) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) ioctl$auto(0xffffffffffffffff, 0x4b2f, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40) r4 = socket(0x5, 0x80000, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf) r7 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0xff, 0x6, &(0x7f00000001c0)={{0x9, 0x10}, {0x7, 0x8000}, 0x4, 0x0, 0xfffffffffffffffe, 0xed1, 0xb, 0x100, 0x10, 0x823e, 0x0, 0x455, 0x80, 0x1, 0xfb, 0x8000000000000001}) r8 = geteuid() setreuid$auto(r8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xbd7569cee91a2570}, 0xc, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="6a849f2d9d9d212ab12c3a1aa6d69bb3d9e82a924ea08b5af92f13ca9db7a912a6c9ed4c76f69bef6edd2cbfaf18ebd0", @ANYRES16=0x0, @ANYBLOB="01072cbd7000fcdbdf250200000004100500b4d0eda91427ce0d708c3db0ed036a9925ae96692a2459dac5a5ffc89c70c374aa7b39b0c1bf7a2606fef9cdea94c27a8c6ad5252a6c42e0aae6a8d3773f60865f88e68b30a371422a02fa7c2283874103cf2347f1e69eddd4a7413b3b3a9d3a33d19648db87be8de24f1b5912d9cbc43352da8292e91d255a0d3caa58d5638d714ac08d2a394f74407e9dabe19126ecd1575edf97a04a6b0a7f6c0ec0ffda7bc93cc2f752ab6b26375f3655940da212b98c7f7bedf675aa9e6b316f86bc8043bb3e9ecd3ddc5ba8a2c4b0e727b56e9561de14e70d274a1496c490b94a7f3bc00f8c082a9ed3d430eb9d165d93caa1dfb36de0de5c78fc73c2bb0dd816e7866f9cb5242881e44dc603a7f8fdba7cfef2206ed6eb25454361014ecefae61f17f450bdb6dbf4174bc7989f5c546e4795cc2fc7273c2febd022ce79652b116e0f80f5038254ffa0a52311bfd79a6b2bf7a1e59027ae4112f12b890cf39bfffedbc2c54092eaecd26e1bc933c8241840d55193666a6cf6e9a7a8d51afd29527b162180ed0569262d8f1d197a6b670437458bce387dd045a68934873063e9a8e7e2af4741c0763ef0ad089b96c80c22bfe3b0f48ac5750bd47419de3a08d7768566e8fd8814d9cee410f8a24367b35d2ff8700e1b292dd257294104d0597bce66d79efcca9e69df5d9243e48eeb814e01fa2f1fc18ae9b0602595fe0e150b1ddc66268163184cea2f443930451c78e5fb3dcac9a5ed744bd3d0c98c0fe3a3e6bf9a841118d9bebaa486449c6ff47616fb7b0cf626799bcfc2cdc21dae8ce9dec47b165fb1a806a99a01a309ee7edac0d9bac4630e65c1b7d9112231d024c1a19817ab71d23a3bd60f2062b7c7bce09f699800705baabd0f46ac33c0c8fb6494dcb57fcdcd162b2c710fada7cee7e7be15f6a38c56122fd5680d3a04c14ee2a664bda413b5c4ae73b6e9b43682ad866c2f29e57f6a89b15cddcd82b0ddd10446bff916818ad3a0fdc9615768f9931ab14249993ad80aa6c2ec0a6a06dfeebf88c0bc69bacea9536621cc69bfa17c3a0df452a9f55aaa360929c89dc2519cab80287dc46be1b9dd941c875df43563aa19bfee1fb300df064260d9e3a561b5a335653ef80968722a51a67b738d3cf70a595454fc622600e6e605b91d082c283ef651bc8b99ff51186fa4f3b960330b1fb47fa42e844090057ea60ec35f16c695c1474956798736e7a5059f15ca2acddf3d9f8a371a47be6080197121b085c1a3ffb65ee8be27369ed45a0e45d21d1d6aac29a8e446f4094616fc94de270dfaf955ce95eba60faa11d07b8b1ffadc5cba0e9e06a3353a6306c165e173c0291ead8448f2ee2611557584caf897b57801e9441b118c7cecf7c98aa47236726623e696c863c9873f4230d4510a23e47147f2f7ce4b8aa2389feefaf055539a228b2422efa499eab6d0e827b73264338b5dbf6a63d9714e3157c4b109356697fd0cda2f7fa7eca7c7d9aeea52587c260c1412d32dd64c14329545827ae77f44e6b8c57030f250c60190df4478489eacf3ad7640f080db4d23e801799539f1c8763f28fc1aa625929c8c7a34c3df3e097c8fab90fe1112fb67fc81ba76ce2c24adcdb39ed8249c50f3067804075d0d91a4fcd79f7bc2550f38c30660a21d2bf35f06fb2f27400796effbb3e0189f9dcca6e7bbd21092f8fa0cd062ebe29ebdef1e9dfd52254a787670753a15e2c7993a7d0abd161d486349d0cf65bc31feb960b1dd95c5f99ade599317233a99521905594ee2fb8c6bf01f996e1899e18c0ee43254ee57b4725f3f67e713a5e4a48cd648a8f7544cd5230473682dc5f53ae2410590a47f647a5bfc21d1548e13619e602b18be1c7819e2c5b26d9c9af4bc5f5c14cc9dd38f97911bbd85fc664ee4a721c021c6bac3dae8ab70389a090c160bef489f2d9fbdb5ecbd06017d1d00f22e262c2058e8ea39592671a3ceda0ea684a0be20c410cef71a7b6e914d2736e95c691cb82607f2d486c251daec7dbd246639bae2f3295b065b54605032aa535c7d5fff7fbb7ad456c44726f57959eedcfeb3923ba9031c660b8030f376678bf768e7bdfddb9ddc5d64c034d0f6548703781efc210a737505078b806fa3bfca76d1d67d1c89bf6edee1d363d92e1fce7779260052a4b0917812ffcaab3f93250186eb40ec628c5e58a89aa36da978875765b6f5f52d3f463afb355ae9ecf8be8cf05a42efd4bf90f0f748f3eb5bf8004ad3048412ae868041a12107e341eda417a1d1a307c36b1f1939cabbac80ecbca17fc9ace544b55f5dc49e7c595f513b7149974c070991792f031d14cab38753678a2b33064fd890d7e120001f8d20338bcd91b5d1f3f1e71b0c4c10b313c80fb62e4321e12857fa439b8852311e65c65bd15ae73022e3aa37537f3d61c9c7e44524f39e287bd520f9e861d4a0293d392de57a423ecba8142f62737cb1adec36b71c16b5709cb3c178ae57c7add4fdb294951d1bd3c08536ca153f4e87d046dcf66a30dd784bb1ff7674d1ce17ba47bf6b44200ebc25b4428a721ed02c972132e2f0a5883e3f88d6d6ce1810de828b402092e2c0b20c4b88aa84cb05bfa51df677eca138d8b4ce5a6f4a8a601726f54b19502d52660e3af270613a901f7c237ab3fcd425915e77de7e59a1b2ce5164904978c872a439908b83613806aa1f548b1db24f27f1866e0bd52b25ef6858c6e8f1c8b644f122c7f2739c938e9cba82dd93e7e25d53a482887837cad20c1961adb6d7ee64e89cec31e2ef0cc0ed3a2b7bd24b19f915d0e09996f45981bb7fcab9126b5013f711650f79205a04a27b38e3becea49a064f9aa02faad105cad9e3d6922038cedc788f88473bff32b42b922218ce4f000efd1c8c921e7590803124a2595569af98f31f07c3be9ac64871a823be1fd75cb7bf411b4e0aa212469422189acaada364db1be53b9603e806320a8fb93f8e03cb2681509035053ba97f7093c74e69bec19823ac3c42ae638f37f46dc53f5080f616a0b205702ce6cfb3a125009e3cc1881ebccf8618fd0e5b47d8bbf6006dbea0e480ca86b8bc21f3a2dde17b78f53efcb0175e031d1f114b615911bcf64cc8f278a3099394a377d08a5e997f648ae920bec39cc242f27652f9d6032d8084d4a89efb49f6816c65203e759cc56a982103a64a0f9cb309243442d232443e9e5663d0a13cf09a217991c3aec3b14f84758df836b6ad7cba841993e99904d5421af73372d224d08e305119f2eef373b58022f2a753df115bd65a481669c64df4912a6e1319f024923bef85abd6093962152760d4707ec18754bf32cad935b17f1e3f179c9493925eb0bd04e49e24d65a61c4505d4c65cf838c0bef5c67fef82be20973989a210d11c61ed6f760b2e54e0ca5ab592a242441587ef0e58415a6277b0010f5939e9e29db91e688f94dd8c120caeb6d2a4f52be7cc7109854cd1db1cef3ca0b86a98d7e363740ad7361e949b3d72d6b146bce25c2f3f404119554891c48989d42f563f4c1c8b78a207cf5f3280d39297eab2e87168575ca934f149289a871b21f3ac2a2727dfb2bc3fafa8390792bc214d88428bd3413a141aa93acd71a1080aeed774fc79e7b40a071f33a2ab6e36555c230917b6a7c95c53a0d6dca50038b3d4839921656250129d51660eca3907d8d394a2935b6286969a4aed36964c200031a4fc7522ea3085dfa6d805b96cea0e4cf93c512dc5026fd6d73d6695fe0dcef6adb5f04be2f91b5bc67a7c4d5287b5c58bcd35a37c6fab580894105cce7c6a835c73687eda009804fc3498b561cf5302aa1872f0d9b754138dcdc8c464c3cfd60548d67fb38a460a237db7267167747c958f10d6e2bae72b3b26940ca77df708497b5f576951905b0d216123a0468235bf2725008a1728020eab3930d8e03af3767507ab86256460c45528e3ac0d0b53d5ad3edd4d70ce7ba47c375081c3556a97cfbf94792ad21a6357dcd96ddac43f1e0eda2c0747f6d20f5c7e2c8b22d5cd72e96b1bae0195a2fd22f71719a1228f1515ec75928574667736dc4bd44cd6e285ac4bbf865eb1ab9282361619a78ae80d5d3e0e5173d0d323d88788f09a1c4b45dc3162bcf3f1a7023f4f95b0633bc00c6b2ba4cd4985803b1f9d233e9426b81ebf7c3dfe29d04eee29e6966a058446abc1bf6bab87a3e31cee188a3f3b089c388524433f23a9a17933ea0dda399a2cde3e09856579fa259ce19e5e6ffb09954db1e0fe3658c605801bf0feb23a20494c6f033e65b1a2fabd74d17222f9806c284ce0336909ac058e10a7e7f7ab95301f6e4178b51b62364bd14455945467a43bb910b2e814a6ed103fa9ba27330a024cf3fefed4ca443753052c5653320a1a7e6a1b6594b94fb63141ed51bf231d88a5f441b268474696fc15bd7e224ba4deb94c4dcc285ec5240ea04e7ef8059a6f25018f8ce9aa796ae66003e71e2496625cf9d715b25b7ae006c673f5cf55f63f445d92e92c1947927deee44fce6447bf693dd08df4efd6d6f649e9c63b0767cb5aa20aeeb494c42b2c24b022b67a47393310f4999c31575acb22a785743d7801c889a2e955aefa70eeefc9d80ba93047d2de89ec7e80d5c0a0193ee0e615b0955283556d6de1a0ce99a078bf7b2cbd7cccb4eddd3efdb69f2f462a4331860c2a74ab3db9eacd2d29c356d51cbbc7819a78f5de04f30b2595b3f307c5cd18d10d335c8ff37dcf4fd203a43c41282e4b538d9c4b585065154158c428ccacd567b941936aa57cccbb4e517a82c631fa16940dbd9fc7d7ccb80afc2509698b3d9f8a7bf8198b3cf6ca69904600d0324d60322ed4a608b7cbb4dcc2b33961c1e253b4713715de6da93d8a4c74f30f1895136918bf7930fac1bc34b574f60df0e0f35cd555a3630369465e1dc285ce1301e9ed77a651914d764056bd623ad9da41524486711f461d6d047b2342ab981f8078cdee09ec6fdd47460cb02e757a3b47693ca2fe735736040110e04d3c6d850cddcf54deb153974e209ee88036d2b4ff63694e7c108954e2d0d38d47d0698e4a1234af98fe7ced846ea66dbd54af5645e46fd8827b438eed20b277425177b0d6ae2ebf244ac64c33d4cfedf4a2fe8b487787c290cab109f36fc2c63a364bc62d319ff621c6d3af18d2496ef9527a71d72a35f24f2654e34a02f3ec407a9dcdf2e1db338cab01afd3d3da9939f038134c5fad361dd37ac2fbf317e1ef098c93cc0cd21e8c9caa97bd5f7ecc29c6b222361dc95d5a61e1783158b85a72f31849a5cfac991311cbb1c88d550e6c317dc3bd610efef7234b4bb6d126b6b14958fe70b3af3e5d96c1a1884d0b4197386afe15cfcd2b70f3187914d9c3eb946e43ee72f6d26a838c68370ceaf75aca136764ecc828715fbd65e85b694cb3a8a2fd4d0c28a67a3315accabc3dac0634cd4496f64beabe5282441be8054d8627855048868dc73e626ef9c464bdd0cba633378d717c00a21481b8a7fd027e6056a41e1b48c5343ca07e09aec0928f18f08d77d1c257b63b33ebb190dc42959034061e31f371a32bc044295008dfb6f6f40647a69ef01527c38018d0efa5e78ed58b28565eafdd49816623efe84d5bec0abbb6520b754e6579220967430bb0e94ef008bc48ca1b76fd2249ae304c44dd53dc7e55e9203b94b2ae4ec28c222d9b0f3c73bb23ff8fe3a4ffdb07009393e9e0130b4b522524e6543bf46aef12998044a650f0117ed88c94a1edda35599f38d1926f34d1cfdc281df68fd18d6af8c9d08836795eda3fdec08000800", @ANYRES32=r6, @ANYBLOB="4400060001000000000000000100000001000000030000000000000001f8ffffffffffff05000000000000000c000000000000000700000000000000010000000000008008000100000400000500030000000000ff010a809f32a28c13e3f48fe3d51f503c3b20c0d73e8aef4f9e2b3f12c4c7fb3c5f86d493f0f5dec3ab6aba9dffc2fcbdc3bee663640320dbdf398afa22166b9d4e8f985accf6624808a2fb2565bf3a12d1eb17d728b9714c143aeecce551f87cf890e7711599949452744feabf97b63cbcbe515304b834c1c44991a5a7e1f7d1e4f912cf753e05d85bca3bb6ccbd00ca73c374aff3acc15af0e8fbea5e6f4eeb3a020e12afe32de2ab6d67595fe88999f7c5fc4caf97d5a5778248e9df3b76be49b1ca2e76c2c0a63b6ea07d02b426014c80040006800c00a100040000000000000014002b00fe80000000000000000000000000000a04008f804922f4135f9364a9a57791474cc80f6ba712afac7494790422fd717d9fb387d9056f8beab7cfcff82961ef6e5b1c722aee579c2b98ce08cc6974d16d190bfdb48c451d73a89c48fc562038e87793bff0e3283b086383e682e1dad06875c5b5175c43e2696c45c93edd16508d4b4bb913b916907a300308002900", @ANYRES32=r7, @ANYBLOB="0400ed80397d0c639fe984d3177b60d32313d376109ec9af3e112526c073f2e5f71bf1daeb17a6d3e1a9b61c8fd9270d4d0c06b0ac8efc366bedadac591c9808a6", @ANYRES32=r8, @ANYBLOB='\x00'], 0x1274}, 0x1, 0x0, 0x0, 0x20008000}, 0xc800) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000380)={{0x5, r8, 0xee00, 0x7000, 0x8, 0x4, 0xfff9}, 0x0, 0x0, 0x1, 0xc50, 0xfffffffffffffee2, 0xd, 0x87, 0x2, 0x1000, 0x9, @raw=0x5, @inferred=r2}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r3, 0x0, 0x8840) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f00000002c0)={0x0, 0x84}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m38.585344481s ago: executing program 0 (id=1210): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x2, 0x9}, 0x9}, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto_PR_SET_TIMING(0xe, 0x4, 0xffffffffffffffff, 0x3, 0x2) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r1) 5m37.356569878s ago: executing program 0 (id=1213): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 5m35.936752383s ago: executing program 0 (id=1216): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="130026bd7000fddbdf251701000008000300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x400c810) 5m34.831526926s ago: executing program 0 (id=1219): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$auto(r1, 0x0, 0x2) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.3/usb16/16-0:1.0/ep_81/direction\x00', 0x1c200, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x1f400, 0x300, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) write$auto(0x3, 0x0, 0x3f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, r3, 0x81000000) write$auto(r0, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) 5m27.751478745s ago: executing program 32 (id=1192): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x200) (async) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) readv$auto(0xffffffffffffffff, 0x0, 0x410) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) (async) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hw_conf\x00', 0x20486, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) socket(0x11, 0x80003, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c00, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)={0x6, &(0x7f0000000040)={0x2, 0x5, 0xd, @raw=0x1}}) 5m19.655882757s ago: executing program 33 (id=1219): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$auto(r1, 0x0, 0x2) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.3/usb16/16-0:1.0/ep_81/direction\x00', 0x1c200, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x1f400, 0x300, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) write$auto(0x3, 0x0, 0x3f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, r3, 0x81000000) write$auto(r0, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) 3m2.334815223s ago: executing program 1 (id=1720): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/pcm0p/sub2/xrun_injection\x00', 0x38240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/91, 0x94) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x4000, 0xffffffffffff0005, 0x19) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r2, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x5, 0x1, 0xa9, 0x4}, 0x6f4) flock$auto(r3, 0x2) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000380), 0x200201, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fb1\x00', 0x4c0, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r4 = bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) sendmsg$auto_ILA_CMD_FLUSH(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000052ce4d4b908153e98cbd13caf9149a3bb96174d5062c28f95d2965d7575a4b0db827b50f653ec764ac96d8cedac3b6f5303851a6497a072c9225a4b9aa9236ef17ae775cb117", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf250400000005000700c00000000c00030000080000000000000500070003000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 2m57.344549468s ago: executing program 1 (id=1733): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x5, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2m55.619288626s ago: executing program 1 (id=1734): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x11, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x200, 0x1) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x2885c3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) io_uring_setup$auto(0x81c5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) sendto$auto(r0, 0x0, 0x5, 0x1ff, 0x0, 0x5) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x141000, 0x0) 2m50.804669869s ago: executing program 1 (id=1751): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/afs/sysname\x00', 0x189d80, 0x0) pread64$auto(r0, 0x0, 0xf429, 0xb) 2m50.206830102s ago: executing program 1 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_DATA={0x4}]}, 0x20}, 0x1, 0xfcffffffffffffff, 0x0, 0x1}, 0x8010) 2m49.940092114s ago: executing program 1 (id=1756): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) socket(0x10, 0x3, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x48841, 0x8) ioctl$auto(r3, 0x8925, 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) mprotect$auto(0xdb4, 0x7, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x167e01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdef) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x4004000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, r8, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xffffffff}]}, 0x24}}, 0x4000000) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000240)={{0x80, 0xee01, 0xee01, 0x5, 0x2fb1, 0x9e580000, 0x6}, 0x5, 0x8, 0x3, 0x2, @inferred, @raw=0x400, 0x0, 0x0, &(0x7f0000000080)="9a37c1ee8f9c15fff5a90760b49a58ea61406e1f2d2af6768946c6dece71de3b682d2a5568f22f2ebd399cea61ae86948385d04dcfc33d8d30c20289f727f0f251703f6513b08b8d1eae29c9197804285829567246a32c02706904a7ad1c9007551bfc46ed5b1a6edc2abe84704ed01eea7d3b7bb79f0c9f5c468174698aa1c67e2cce538f380529f7fa31843ae215fbb6a4c682d00ea6e191420866b63ab3e5af80f5b472202e55d21e36e3c9a043e2502af4a9fda77bdcdc8430352b0e672c9faa62b2bb5fe11b32a8695f525de1907ec7e28d90ff07ab0d2e9a3290b7de1ef05721fa64bc12f5fc42", &(0x7f0000000180)="127011339aec70816affeb599ab99b7fc6f72a03cbacd435eb32d9d317c7de8740fa4396ec688bcfc4b5bdc6cc5003074232863460c4ac0efa47db8a8ab1b9cb8ff3d91a44cef32bd1bc98fd184567c531823241af2c2bf9c60f1474bdae3f2b489f7d6fc56871e65af68c4b2a32452c3b2ae42a2cb9930cd2b30ab4ddfacd74a40545e14bf086a8bc35e40e9b30d3763c2785ed5eb481e3d3de9cdcb2d845"}) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="24030000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="00000010002d800400f1000800d400", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x40840) 2m34.618533319s ago: executing program 34 (id=1756): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) socket(0x10, 0x3, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x48841, 0x8) ioctl$auto(r3, 0x8925, 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) mprotect$auto(0xdb4, 0x7, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x167e01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdef) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x4004000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, r8, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xffffffff}]}, 0x24}}, 0x4000000) shmctl$auto_SHM_INFO(0x5, 0xe, &(0x7f0000000240)={{0x80, 0xee01, 0xee01, 0x5, 0x2fb1, 0x9e580000, 0x6}, 0x5, 0x8, 0x3, 0x2, @inferred, @raw=0x400, 0x0, 0x0, &(0x7f0000000080)="9a37c1ee8f9c15fff5a90760b49a58ea61406e1f2d2af6768946c6dece71de3b682d2a5568f22f2ebd399cea61ae86948385d04dcfc33d8d30c20289f727f0f251703f6513b08b8d1eae29c9197804285829567246a32c02706904a7ad1c9007551bfc46ed5b1a6edc2abe84704ed01eea7d3b7bb79f0c9f5c468174698aa1c67e2cce538f380529f7fa31843ae215fbb6a4c682d00ea6e191420866b63ab3e5af80f5b472202e55d21e36e3c9a043e2502af4a9fda77bdcdc8430352b0e672c9faa62b2bb5fe11b32a8695f525de1907ec7e28d90ff07ab0d2e9a3290b7de1ef05721fa64bc12f5fc42", &(0x7f0000000180)="127011339aec70816affeb599ab99b7fc6f72a03cbacd435eb32d9d317c7de8740fa4396ec688bcfc4b5bdc6cc5003074232863460c4ac0efa47db8a8ab1b9cb8ff3d91a44cef32bd1bc98fd184567c531823241af2c2bf9c60f1474bdae3f2b489f7d6fc56871e65af68c4b2a32452c3b2ae42a2cb9930cd2b30ab4ddfacd74a40545e14bf086a8bc35e40e9b30d3763c2785ed5eb481e3d3de9cdcb2d845"}) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="24030000", @ANYRES16=r8, @ANYBLOB="080a28bd7000ffdbdf253e0000000800dc0080000000ed0250808fb72aa5846cc17062f4a0edf9233c592ecd1a98873ff9e7ccd093c330db6a660c831dd2c3d105178f90cc659edb230c361d35386ed6e798b48980e157a29e5f08660a6ab87e41aa5c04b5edf7843f6c15bbb114e82bdef51615f41f5d7ce3b157e8844818deb37a27a44255377ec32601b9db19c1b07c947a60a76f61e470948f7f16d1d04139fba7bdab6f674243b8efd88ef5211c19e86a4c1d98e6d9f5196abec374960922beea536a01e2e33fdce6b9fd47b9e634456f96b8f6cedd4c689083ca1ce56633f2ee0cf87f1feb1a42ed04e165ca7e0008009349d8699fbff5a2041442afcabf4aea222253e77cf7a8d758b8cfea340e226b1c510bbde259d1e897ca27d189d651d235a34b5e42fb017600a4fba6a4f149b0498aed2a3754d145316c1b05e9b20a0d68423e27c8e03ec023805418e1f0f95a463a850672389a04b3e37e461be7f048e6135ad59672e836fe3f0000b371aed340581601ce31f01a6b42d5e0c978415af847945c80db06c0765925ec9fba49441e425522a9d2b3fb599a155fb7a95efb7c94fc835ae58d52e70c351f445695d18f6902a8c2024ec72b8fed55d1cfc9c13d7ce92499c363fdc37733ff9e8e68861f45a1efb2b1312d5add5c319bc52adb1e2cf11e9760c277da7f1bdfd0f7f546d7e083c03be971bfa0bbed4836b280485b73cb595f43896c48ccb326e700ed80df89953cacb005d1ab6f02cd530dd62621b1cc5b5900e27decdc75636c9fda19b19414287205b125683b0865c5017c54a5cee9872d28472183ba29784051362f7d7c28bfa8567fd21600a6f4e3dcc09c13960271116b2603606ab5606d6688db8a636ffc582951439b6bab754889f42d53a9b7b8b6371c3fc904a75826fdd0137cfea7d007372e5160324ac0d0b20ce9e054982c769ef672f3182ced7bbdf756d36cc4790587e90c2c8119448d13b27d2a77073bc269a135ba4045e7b2bc8c37304a474ca3d5591a57359defca4051d288be4d18775bbe382fe80170c14cec04004780000c003a800800e800", @ANYRES32=r10, @ANYBLOB="00000010002d800400f1000800d400", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x40840) 15.851378876s ago: executing program 4 (id=2304): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 14.497150193s ago: executing program 4 (id=2310): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 12.141233156s ago: executing program 4 (id=2318): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) rt_sigtimedwait$auto(&(0x7f0000000180)={0x4}, &(0x7f0000000440)={@_si_pad}, &(0x7f00000004c0)={0x9, 0x7}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_BSSID={0x23, 0xf5, "673c94c4ef7114b07258e5cc0c5e8ebec0daf99f71dad04d8ea6be1766b70d"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x66, 0x9d, "7cacab4c5850683663a098beb8ef8c2fc753aae6cb4c2b63d25812c81693eb15ac1fe3b19c9c988d412b891062cd5ecc833b463067c6b3a2dd2741155a7afd3a7159411dc1d6ba3ae7c6801a565339c16e5acf7cdbbd08153d5f424b9713edd1e953"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x44044) pidfd_send_signal$auto(r0, 0x51f, &(0x7f0000000040)={@_si_pad}, 0x1) unshare$auto(0x7) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 10.385946438s ago: executing program 4 (id=2326): r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=0x6, @target_fd=0x2, 0x7, 0x10005, @bpf_attr_link_create_4_1={0xd}}, 0xa3) pipe$auto(0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) pread64$auto(0xffffffffffffffff, 0x0, 0xf429, 0xb) 10.329143597s ago: executing program 3 (id=2327): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 9.355352522s ago: executing program 4 (id=2331): r0 = getsockopt$auto(0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x24044890) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r1, 0x0, 0x40) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001440), r1) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x1, 0x2, 0x2, 0xb, 0x2e, 0x8000, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(0x0, 0x161342, 0x100) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x1f40) madvise$auto(0x0, 0x20499d, 0x9) 9.165419663s ago: executing program 3 (id=2332): socket(0x2, 0x80002, 0x73) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x3e, &(0x7f0000000040)='\t\x00T\xce\xb3O1\xa8\x98HgGKt\xc1\x91Cy\n\x106\xe3\xd8\x96\xe9\xf9\x7f`\x10\xbd\x06P\xec\xab\xd8\xb7\xb5\x9eW\x10w\xf0\xbf\x86\xca\x8bii', &(0x7f0000000080)=0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) close_range$auto(0x2, 0x8, 0xff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/short_retry_limit\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80000000, 0xffffffffffffffff) syz_clone(0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380), &(0x7f00000013c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0xfffffffffffff000, 0x200, 0x4000000000df, 0x40000000001eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0xec, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x7f, 0x2020009, 0x5, 0xeb5, r3, 0x8) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x404, 0x1ff, 0x7, 0x48, 0x1ff, 0xda4c, 0x4, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0xfffffffe, 0x800000, 0x7, 0x8, 0x7ff, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x1, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x11b3, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfbfffffffffffffc, 0x9, 0x100000000a38, 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x4000000000, 0x7, 0x3]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 8.484760123s ago: executing program 6 (id=2334): mmap$auto(0x0, 0x2020009, 0x3, 0x100eb1, 0xfd, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x4, 0x6, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x882, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) setsockopt$auto(0x200000000000003, 0x1, 0x2a, 0x0, 0x301) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) 8.158494338s ago: executing program 6 (id=2335): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) rt_sigtimedwait$auto(&(0x7f0000000180)={0x4}, &(0x7f0000000440)={@_si_pad}, &(0x7f00000004c0)={0x9, 0x7}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_BSSID={0x23, 0xf5, "673c94c4ef7114b07258e5cc0c5e8ebec0daf99f71dad04d8ea6be1766b70d"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x66, 0x9d, "7cacab4c5850683663a098beb8ef8c2fc753aae6cb4c2b63d25812c81693eb15ac1fe3b19c9c988d412b891062cd5ecc833b463067c6b3a2dd2741155a7afd3a7159411dc1d6ba3ae7c6801a565339c16e5acf7cdbbd08153d5f424b9713edd1e953"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x44044) pidfd_send_signal$auto(r0, 0x51f, &(0x7f0000000040)={@_si_pad}, 0x1) unshare$auto(0x7) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 7.615115125s ago: executing program 3 (id=2336): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare$auto(0x40000080) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x26, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x3fd, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup2$auto(0x5, 0x4) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0x0) 6.985181126s ago: executing program 6 (id=2338): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) rt_sigtimedwait$auto(&(0x7f0000000180)={0x4}, &(0x7f0000000440)={@_si_pad}, &(0x7f00000004c0)={0x9, 0x7}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_BSSID={0x23, 0xf5, "673c94c4ef7114b07258e5cc0c5e8ebec0daf99f71dad04d8ea6be1766b70d"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x44044) pidfd_send_signal$auto(r0, 0x51f, &(0x7f0000000040)={@_si_pad}, 0x1) unshare$auto(0x7) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 5.900464157s ago: executing program 3 (id=2340): r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)=""/1, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=0x6, @target_fd=0x2, 0x7, 0x10005, @bpf_attr_link_create_4_1={0xd}}, 0xa3) pipe$auto(0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) pread64$auto(0xffffffffffffffff, 0x0, 0xf429, 0xb) 5.831162286s ago: executing program 6 (id=2341): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 5.4037509s ago: executing program 3 (id=2343): ioperm$auto(0x7, 0x6, 0x2) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) memfd_secret$auto(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05070000700070e5b76f3b32d15ec848df5aa40e0aa6e721aa98a301de27e1f2de2272c02efd00"/50], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) getsockopt$auto(0x9, 0x0, 0x81, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="24150000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="a000a58099008680ae68c4c2bc46dbf2fa096f261b23684e0e00a30026282a255b40235d2f0000000c00f10009000000000000000800f500", @ANYRES32=0x0, @ANYBLOB="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"/4509], 0x1524}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x9, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, 0xfffffffffffffffe) finit_module$auto(0x1, 0xfffffffffffffffc, 0x1) ppoll$auto(0x0, 0x31, 0x0, 0x0, 0x99) 4.765335192s ago: executing program 6 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x3, 0x8, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)=0x801) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x80) 4.606177665s ago: executing program 5 (id=2346): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x4) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) remap_file_pages$auto(0x6a27, 0xffc, 0x0, 0x3, 0x4) mincore$auto(0x1000, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, 0x0, 0x20000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = socket(0xb, 0x801, 0x84) r3 = getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0xc0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r4 = gettid() ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f00000005c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="000429bd7000ffdbdf251c0000006800018008000100", @ANYRES32=0x0, @ANYRES8=r3, @ANYRESOCT=r4, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES8=r1, @ANYBLOB="72038b50f5542b5d253152cca170df08848ef067f1d6b1270d8cd12d321b439e877e8d710788d1827abe58ae6b71953e7da696368287ee51e2e89e4f1f19defefc517a36e179474507611c57ae7c0a10bde75a29b3a0ce350722ae24f2fd42a3a309063566e7113144f312a7d4ef1f5170013840a9df92149d1b5d717ef726ea", @ANYBLOB="14000200626f6e645f736c6176655f31000000000c00018008000300010000005c000180140002006e6963766630000000000000000000000800030000000000080001", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES64=r1, @ANYBLOB="66d9e133efaca6e82473319831ee1df19f0100", @ANYRES32=r5, @ANYBLOB="14000200767863616e310000000000000000000014000200766c616e3100000000000000000000000800030006000000"], 0x168}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000010) process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) copy_file_range$auto(0x2, 0x0, r1, 0x0, 0x6, 0x9) process_madvise$auto_MADV_COLLAPSE(r3, &(0x7f0000000180)={&(0x7f00000000c0)="482a8a29167cb2d0e818d8ab0470cf4c33c779958935a3147c659057b22dd57353992bcf0302ec3d70cd8389bedbb112e2cc054646e510be5f059fd1c0f470f6f484d5fadb04baa894f76383fe7d869d650f8ce91bc4b4334cabb13b90864ae60461dc2375ddf580a33284ac7bb57038bc26e3b5ad44ef1e019a3600b0d75bd5fd595e56b5e1d9f8070495e105b85b7d97d6d6d521854ac9f00f55e6ba32b210cba030f9fd05a91618752b4bf197c4", 0x3}, 0x1f4, 0x19, 0x2) madvise$auto(0xb812, 0x89ce, 0xc) fsetxattr$auto(r0, &(0x7f0000000040)='#}\x00', &(0x7f0000000080), 0x3, 0x0) 3.064082068s ago: executing program 4 (id=2347): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) rt_sigtimedwait$auto(&(0x7f0000000180)={0x4}, &(0x7f0000000440)={@_si_pad}, &(0x7f00000004c0)={0x9, 0x7}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_BSSID={0x23, 0xf5, "673c94c4ef7114b07258e5cc0c5e8ebec0daf99f71dad04d8ea6be1766b70d"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x66, 0x9d, "7cacab4c5850683663a098beb8ef8c2fc753aae6cb4c2b63d25812c81693eb15ac1fe3b19c9c988d412b891062cd5ecc833b463067c6b3a2dd2741155a7afd3a7159411dc1d6ba3ae7c6801a565339c16e5acf7cdbbd08153d5f424b9713edd1e953"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x44044) pidfd_send_signal$auto(r0, 0x51f, &(0x7f0000000040)={@_si_pad}, 0x1) unshare$auto(0x7) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 2.88946628s ago: executing program 3 (id=2348): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x11, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x2885c3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) io_uring_setup$auto(0x81c5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x141000, 0x0) 2.483193779s ago: executing program 5 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd7c, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @fd=r0}]}]}, 0x24}, 0x1, 0x0, 0xfffffffffffffff0, 0x40}, 0x800) 2.237766167s ago: executing program 5 (id=2350): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) rt_sigtimedwait$auto(&(0x7f0000000180)={0x4}, &(0x7f0000000440)={@_si_pad}, &(0x7f00000004c0)={0x9, 0x7}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000400), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_BSSID={0x23, 0xf5, "673c94c4ef7114b07258e5cc0c5e8ebec0daf99f71dad04d8ea6be1766b70d"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x44044) pidfd_send_signal$auto(r0, 0x51f, &(0x7f0000000040)={@_si_pad}, 0x1) unshare$auto(0x7) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 1.181599902s ago: executing program 5 (id=2352): openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/udp_ports_table1\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf7, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat$auto(&(0x7f0000000040)='./file0\x00', 0x81) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x8, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x1ffffe, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffff, 0x7, 0x10]}, 0x1fe, 0x81) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) 1.180856072s ago: executing program 6 (id=2353): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x8000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/maps\x00', 0x8100, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB], 0x4d0}}, 0x4000000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r7, @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SAE_PASSWORD={0x4e, 0x115, "f4aefa392886fc0479c1ac5918466dd16427c991bc255d6adc5cf8f4373aabaa5a2dbe3494aad7c537ffb50e78c4c4b324f5d758da340a81a54c1e37106e7daab3357b2556256b8ae3cb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x4) mmap$auto(0x0, 0x9, 0x1, 0x8b72, 0x1000000002, 0x8000) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xf00, 0x0) readv$auto(0x3, 0x0, 0x6) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r8, 0x0, 0x594c, 0x7) r9 = socket(0x2, 0x1, 0x106) setsockopt$auto(r9, 0x1, 0x21, 0x0, 0x9) unshare$auto(0x40000080) socket(0x1d, 0x3, 0x6) 936.161499ms ago: executing program 5 (id=2354): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x0, 0x5, 0xfffffffffffffffb) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x8000000000000001, 0x7, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000100)='\xe6cf\xbbF\xdeT\xa4\t,\a6\xae\xa3\x87\x82\xbd+\xfdx\xf4E\xd6\x9c\xbc\xcc\xfce4$\x03\xb9`\xc7\xc0\xd2\xaf\xba \xc6h\xee\x19\x94\xef\xed\xd0\xe7\xa3,\xae\xa1|\xcf}\b\xfc\x84#Sw\xdd\fU\a\x8c\x18)\xd6\x9a\xacwf9\xc0m=\xf3y\xd1WB\xcdMMN+\x83I}\xeb\xc5\xe0\xc0:oe\x0ed\x14G\xb2/\xe1-\x89\xdaT\x1d\xdd.\xe6\bKY', 0xffffffffffffffff) r8 = fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x597dfb0, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) socket(0x23, 0x4, 0xa) mmap$auto(0x0, 0x100100ffffffff, 0x3, 0xeb4, r6, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2a, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8) 0s ago: executing program 5 (id=2355): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40010) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x12, 0xfffffffffffffffc, 0x0) r2 = socket(0xa, 0x2, 0x73) fcntl$auto(r2, 0x407, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xc00e0000) kernel console output (not intermixed with test programs): 000000000005 [ 415.166805][T11226] RBP: 00007f199d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.166822][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.166840][T11226] R13: 0000000000000000 R14: 00007f199d1a6080 R15: 00007ffe91cd7bc8 [ 415.166878][T11226] [ 415.805294][T11229] block nbd0: not configured, cannot reconfigure [ 416.605135][T11258] block nbd0: not configured, cannot reconfigure [ 417.293613][T11270] can: request_module (can-proto-0) failed. [ 418.244300][T11282] can: request_module (can-proto-0) failed. [ 418.797608][T11296] block nbd0: not configured, cannot reconfigure [ 418.820868][T11296] ubi0: attaching mtd0 [ 418.840223][T11296] ubi0: scanning is finished [ 418.854443][T11300] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.1327'. [ 418.914765][T11296] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 419.617183][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 419.676972][T11296] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 420.188872][T11320] block nbd0: not configured, cannot reconfigure [ 420.898389][T11327] can: request_module (can-proto-0) failed. [ 421.228975][T11333] can: request_module (can-proto-0) failed. [ 421.480233][T11324] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 423.055829][T11371] bridge0: port 3(bond0) entered blocking state [ 423.062219][T11371] bridge0: port 3(bond0) entered disabled state [ 423.101131][T11371] bond0: entered allmulticast mode [ 423.114829][T11371] bond_slave_0: entered allmulticast mode [ 423.146037][T11371] bond_slave_1: entered allmulticast mode [ 423.165655][T11371] bond0: entered promiscuous mode [ 423.193585][T11371] bond_slave_0: entered promiscuous mode [ 423.199840][T11371] bond_slave_1: entered promiscuous mode [ 423.209882][T11371] bridge0: port 3(bond0) entered blocking state [ 423.216699][T11371] bridge0: port 3(bond0) entered forwarding state [ 423.800838][T11381] can: request_module (can-proto-0) failed. [ 423.839356][T11384] block nbd0: not configured, cannot reconfigure [ 425.244661][T11391] can: request_module (can-proto-0) failed. [ 426.990047][T11405] can: request_module (can-proto-0) failed. [ 427.952689][T11410] can: request_module (can-proto-0) failed. [ 429.335994][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 429.350666][T11434] vxcan1: entered promiscuous mode [ 429.376306][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 429.386062][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 430.764933][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 435.019872][T11500] can: request_module (can-proto-0) failed. [ 437.141729][T11531] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 439.163431][T11556] block nbd0: not configured, cannot reconfigure [ 439.741546][T11560] can: request_module (can-proto-0) failed. [ 441.702884][T11588] can: request_module (can-proto-0) failed. syzkaller syzkaller login: [ 443.944636][T11625] nvme_fabrics: missing parameter 'transport=%s' [ 443.951020][T11625] nvme_fabrics: missing parameter 'nqn=%s' [ 444.130340][T11633] FAULT_INJECTION: forcing a failure. [ 444.130340][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 444.174932][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.1.1402 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 444.174970][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 444.174986][T11633] Call Trace: [ 444.174994][T11633] [ 444.175005][T11633] dump_stack_lvl+0x16c/0x1f0 [ 444.175053][T11633] should_fail_ex+0x50a/0x650 [ 444.175085][T11633] ? fs_reclaim_acquire+0xae/0x150 [ 444.175130][T11633] ? genl_start+0x1e7/0x960 [ 444.175169][T11633] should_failslab+0xc2/0x120 [ 444.175205][T11633] __kmalloc_cache_noprof+0x68/0x420 [ 444.175234][T11633] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 444.175280][T11633] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 444.175335][T11633] genl_start+0x1e7/0x960 [ 444.175391][T11633] __netlink_dump_start+0x615/0x980 [ 444.175433][T11633] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 444.175480][T11633] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 444.175523][T11633] ? genl_rcv_msg+0x580/0x800 [ 444.175573][T11633] ? __pfx_genl_get_cmd+0x10/0x10 [ 444.175611][T11633] ? __pfx_genl_start+0x10/0x10 [ 444.175650][T11633] ? __pfx_genl_dumpit+0x10/0x10 [ 444.175690][T11633] ? __pfx_genl_done+0x10/0x10 [ 444.175738][T11633] ? __radix_tree_lookup+0x21f/0x2c0 [ 444.175786][T11633] genl_rcv_msg+0x470/0x800 [ 444.175833][T11633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.175878][T11633] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 444.175937][T11633] netlink_rcv_skb+0x165/0x410 [ 444.175975][T11633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.176022][T11633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.176077][T11633] ? down_read+0xc9/0x330 [ 444.176120][T11633] ? __pfx_down_read+0x10/0x10 [ 444.176164][T11633] ? netlink_deliver_tap+0x1ae/0xca0 [ 444.176206][T11633] genl_rcv+0x28/0x40 [ 444.176243][T11633] netlink_unicast+0x53c/0x7f0 [ 444.176286][T11633] ? __pfx_netlink_unicast+0x10/0x10 [ 444.176324][T11633] ? __phys_addr_symbol+0x30/0x80 [ 444.176373][T11633] ? __check_object_size+0x488/0x710 [ 444.176416][T11633] netlink_sendmsg+0x8b8/0xd70 [ 444.176460][T11633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.176514][T11633] ____sys_sendmsg+0x9ae/0xb40 [ 444.176550][T11633] ? copy_msghdr_from_user+0x10b/0x160 [ 444.176596][T11633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.176650][T11633] ___sys_sendmsg+0x135/0x1e0 [ 444.176699][T11633] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.176761][T11633] ? __pfx_lock_release+0x10/0x10 [ 444.176794][T11633] ? trace_lock_acquire+0x14e/0x1f0 [ 444.176834][T11633] ? __fget_files+0x206/0x3a0 [ 444.176873][T11633] __sys_sendmsg+0x16e/0x220 [ 444.176902][T11633] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.176953][T11633] do_syscall_64+0xcd/0x250 [ 444.176997][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.177037][T11633] RIP: 0033:0x7fd2e138cda9 [ 444.177058][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.177085][T11633] RSP: 002b:00007fd2e2231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.177110][T11633] RAX: ffffffffffffffda RBX: 00007fd2e15a5fa0 RCX: 00007fd2e138cda9 [ 444.177128][T11633] RDX: 0000000004004000 RSI: 0000000020000200 RDI: 0000000000000003 [ 444.177144][T11633] RBP: 00007fd2e2231090 R08: 0000000000000000 R09: 0000000000000000 [ 444.177159][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.177174][T11633] R13: 0000000000000000 R14: 00007fd2e15a5fa0 R15: 00007ffe55ed7168 [ 444.177209][T11633] [ 445.318001][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.324349][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.779788][T11658] openvswitch: HfR: Dropping previously announced user features [ 446.825266][T11651] can: request_module (can-proto-0) failed. [ 446.864992][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 446.874055][T11658] HfR: left promiscuous mode [ 447.611159][T11654] can: request_module (can-proto-0) failed. [ 448.171878][T11673] block nbd0: not configured, cannot reconfigure [ 448.774819][T11678] can: request_module (can-proto-0) failed. [ 450.598700][T11705] can: request_module (can-proto-0) failed. [ 451.371402][T11714] HfR: entered promiscuous mode [ 451.425569][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 451.489408][T11714] HfR: left promiscuous mode [ 452.517165][T11729] block nbd0: not configured, cannot reconfigure [ 452.678824][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1429'. [ 452.738401][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.774654][T11737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.827025][T11737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.835398][T11737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.611600][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 455.036587][T11762] can: request_module (can-proto-0) failed. [ 455.790588][T11780] block nbd0: not configured, cannot reconfigure [ 458.496694][T11821] block nbd0: not configured, cannot reconfigure [ 458.944233][T11831] can: request_module (can-proto-0) failed. [ 459.791433][T11830] can: request_module (can-proto-0) failed. [ 460.653493][T11857] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1464'. [ 462.042456][T11867] Process accounting resumed [ 462.619617][T11894] FAULT_INJECTION: forcing a failure. [ 462.619617][T11894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.685912][T11894] CPU: 1 UID: 0 PID: 11894 Comm: syz.1.1475 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 462.685951][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 462.685968][T11894] Call Trace: [ 462.685977][T11894] [ 462.685989][T11894] dump_stack_lvl+0x16c/0x1f0 [ 462.686111][T11894] should_fail_ex+0x50a/0x650 [ 462.686157][T11894] _copy_to_user+0x32/0xd0 [ 462.686202][T11894] simple_read_from_buffer+0xd0/0x160 [ 462.686253][T11894] proc_fail_nth_read+0x198/0x270 [ 462.686300][T11894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.686348][T11894] ? rw_verify_area+0xcf/0x680 [ 462.686394][T11894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.686439][T11894] vfs_read+0x1df/0xbf0 [ 462.686468][T11894] ? __fget_files+0x1fc/0x3a0 [ 462.686502][T11894] ? __pfx___mutex_lock+0x10/0x10 [ 462.686549][T11894] ? __pfx_vfs_read+0x10/0x10 [ 462.686589][T11894] ? __fget_files+0x206/0x3a0 [ 462.686634][T11894] ksys_read+0x12b/0x250 [ 462.686663][T11894] ? __pfx_ksys_read+0x10/0x10 [ 462.686726][T11894] do_syscall_64+0xcd/0x250 [ 462.686800][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.686846][T11894] RIP: 0033:0x7fd2e138b7bc [ 462.686870][T11894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.686899][T11894] RSP: 002b:00007fd2e2231030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.686928][T11894] RAX: ffffffffffffffda RBX: 00007fd2e15a5fa0 RCX: 00007fd2e138b7bc [ 462.686948][T11894] RDX: 000000000000000f RSI: 00007fd2e22310a0 RDI: 0000000000000003 [ 462.686966][T11894] RBP: 00007fd2e2231090 R08: 0000000000000000 R09: 0000000000000007 [ 462.686984][T11894] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 462.687002][T11894] R13: 0000000000000001 R14: 00007fd2e15a5fa0 R15: 00007ffe55ed7168 [ 462.687114][T11894] [ 464.437308][T11918] block nbd0: not configured, cannot reconfigure [ 465.289242][T11937] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L,ªRsVÈ;' with parent 'ieee80211' already present! [ 465.849673][T11943] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1489'. [ 466.885005][T11964] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1495'. [ 466.917931][T11964] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1495'. [ 466.937908][T11964] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1495'. [ 466.957682][T11964] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1495'. [ 466.971063][T11964] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1495'. [ 468.336825][T11975] block nbd0: not configured, cannot reconfigure [ 468.394871][T11971] can: request_module (can-proto-0) failed. [ 468.506435][T11979] ubi0: attaching mtd0 [ 468.525928][T11979] ubi0: scanning is finished [ 468.530677][T11979] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 468.716244][T11979] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 468.985823][T11983] can: request_module (can-proto-0) failed. [ 470.645767][T12016] block nbd0: not configured, cannot reconfigure [ 470.810023][T12019] block nbd0: not configured, cannot reconfigure [ 471.647359][T12025] can: request_module (can-proto-0) failed. [ 474.174839][T12080] block nbd0: not configured, cannot reconfigure [ 475.336838][T12086] can: request_module (can-proto-0) failed. [ 476.420867][T12098] futex_wake_op: syz.3.1524 tries to shift op by 64; fix this program [ 476.430151][T12096] can: request_module (can-proto-0) failed. [ 479.919042][T12143] can: request_module (can-proto-0) failed. [ 479.989621][ T54] Bluetooth: hci5: unexpected subevent 0x04 length: 122 > 11 [ 480.351123][T12155] block nbd0: not configured, cannot reconfigure [ 481.317706][T12173] block nbd0: not configured, cannot reconfigure [ 481.946910][T12187] vivid-003: ================= START STATUS ================= [ 481.971998][T12187] vivid-003: Radio HW Seek Mode: Bounded [ 481.990483][T12187] vivid-003: Radio Programmable HW Seek: false [ 482.006567][T12187] vivid-003: RDS Rx I/O Mode: Block I/O [ 482.014217][T12187] vivid-003: Generate RBDS Instead of RDS: false [ 482.020799][T12187] vivid-003: RDS Reception: true [ 482.079906][T12187] vivid-003: RDS Program Type: 0 inactive [ 482.100233][T12187] vivid-003: RDS PS Name: inactive [ 482.122571][T12187] vivid-003: RDS Radio Text: inactive [ 482.197202][T12187] vivid-003: RDS Traffic Announcement: false inactive [ 482.204091][T12187] vivid-003: RDS Traffic Program: false inactive [ 482.240077][T12187] vivid-003: RDS Music: false inactive [ 482.304722][T12187] vivid-003: ================== END STATUS ================== [ 486.408632][T12262] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1567'. [ 486.963904][T12276] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1571'. [ 487.051683][T12276] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(4.16384.4294967295), cmd(3) [ 488.340203][T12292] block nbd0: not configured, cannot reconfigure [ 488.910445][T12300] can: request_module (can-proto-0) failed. [ 489.642652][T12318] can: request_module (can-proto-0) failed. [ 491.601171][T12342] can: request_module (can-proto-0) failed. [ 492.039837][T12354] block nbd0: not configured, cannot reconfigure [ 492.661416][T12345] Process accounting paused [ 493.222695][T12375] HfR: entered promiscuous mode [ 493.233442][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 493.260540][T12375] HfR: left promiscuous mode [ 495.164035][T12403] block nbd0: not configured, cannot reconfigure [ 497.814849][T12438] can: request_module (can-proto-0) failed. [ 498.624399][T12427] netlink: zone id is out of range [ 498.646643][T12427] netlink: zone id is out of range [ 498.654973][T12427] netlink: zone id is out of range [ 498.773187][T12450] block nbd0: not configured, cannot reconfigure [ 498.802249][T12427] netlink: zone id is out of range [ 498.842142][T12427] netlink: zone id is out of range [ 498.869190][T12427] netlink: zone id is out of range [ 498.874372][T12427] netlink: zone id is out of range [ 499.016047][T12427] netlink: zone id is out of range [ 499.066401][T12427] netlink: zone id is out of range [ 499.071592][T12427] netlink: zone id is out of range [ 501.410768][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1618'. [ 501.439925][T12487] vxcan1: entered promiscuous mode [ 502.641574][T12506] can: request_module (can-proto-0) failed. [ 503.405791][T12524] block nbd0: not configured, cannot reconfigure [ 505.798422][T12558] ubi13: attaching mtd0 [ 505.802646][T12558] ubi13 error: ubi_attach_mtd_dev: bad VID header (13) or data offsets (77) [ 506.120342][ T29] audit: type=1800 audit(4294967347.339:39): pid=12562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1641" name="discovery_nqn" dev="configfs" ino=34417 res=0 errno=0 [ 506.688508][T12574] block nbd0: not configured, cannot reconfigure [ 506.757414][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.763824][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.657421][T12590] FAULT_INJECTION: forcing a failure. [ 507.657421][T12590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.684595][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.3.1640 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 507.684636][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 507.684653][T12590] Call Trace: [ 507.684662][T12590] [ 507.684673][T12590] dump_stack_lvl+0x16c/0x1f0 [ 507.684722][T12590] should_fail_ex+0x50a/0x650 [ 507.684767][T12590] ? __pfx___might_resched+0x10/0x10 [ 507.684812][T12590] should_fail_alloc_page+0xe7/0x130 [ 507.684873][T12590] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 507.684933][T12590] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 507.684979][T12590] ? __pfx_mark_lock+0x10/0x10 [ 507.685018][T12590] ? hlock_class+0x4e/0x130 [ 507.685067][T12590] ? mark_lock+0xb5/0xc60 [ 507.685103][T12590] ? hlock_class+0x4e/0x130 [ 507.685161][T12590] ? mark_lock+0xb5/0xc60 [ 507.685198][T12590] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.685240][T12590] ? __pfx_mark_lock+0x10/0x10 [ 507.685275][T12590] ? mark_lock+0xb5/0xc60 [ 507.685331][T12590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.685377][T12590] ? policy_nodemask+0xea/0x4e0 [ 507.685422][T12590] alloc_pages_mpol+0x1fc/0x540 [ 507.685465][T12590] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 507.685505][T12590] ? find_held_lock+0x2d/0x110 [ 507.685574][T12590] folio_alloc_mpol_noprof+0x36/0x2f0 [ 507.685622][T12590] shmem_alloc_folio+0x135/0x160 [ 507.685663][T12590] shmem_alloc_and_add_folio+0x48e/0xc10 [ 507.685716][T12590] ? shmem_huge_global_enabled+0x72/0x6b0 [ 507.685759][T12590] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 507.685809][T12590] ? shmem_allowable_huge_orders+0xd0/0x410 [ 507.685884][T12590] shmem_get_folio_gfp+0x689/0x1530 [ 507.685941][T12590] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 507.685994][T12590] ? filemap_map_pages+0xf92/0x16b0 [ 507.686050][T12590] shmem_fault+0x200/0xae0 [ 507.686100][T12590] ? __pfx_shmem_fault+0x10/0x10 [ 507.686163][T12590] ? do_pte_missing+0xde9/0x3e10 [ 507.686199][T12590] ? __pfx_lock_release+0x10/0x10 [ 507.686246][T12590] __do_fault+0x10a/0x490 [ 507.686295][T12590] do_pte_missing+0xecf/0x3e10 [ 507.686334][T12590] ? __pfx_lock_release+0x10/0x10 [ 507.686382][T12590] __handle_mm_fault+0x1166/0x2c60 [ 507.686431][T12590] ? __pfx___handle_mm_fault+0x10/0x10 [ 507.686466][T12590] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 507.686529][T12590] ? find_vma+0xc0/0x140 [ 507.686577][T12590] ? __pfx_find_vma+0x10/0x10 [ 507.686633][T12590] handle_mm_fault+0x3fa/0xaa0 [ 507.686677][T12590] do_user_addr_fault+0x7a3/0x13f0 [ 507.686729][T12590] exc_page_fault+0x5c/0xc0 [ 507.686774][T12590] asm_exc_page_fault+0x26/0x30 [ 507.686818][T12590] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 507.686855][T12590] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 507.686885][T12590] RSP: 0018:ffffc9000cd8f478 EFLAGS: 00050206 [ 507.686911][T12590] RAX: 0000000000000001 RBX: 0000000000000b10 RCX: 0000000000000098 [ 507.686929][T12590] RDX: ffffed1006a6b0cd RSI: 0000000000001000 RDI: ffff8880353585cc [ 507.686949][T12590] RBP: 0000000000000588 R08: 0000000000000001 R09: ffffed1006a6b0cc [ 507.686968][T12590] R10: ffff888035358663 R11: 0000000000000000 R12: 0000000000000000 [ 507.686987][T12590] R13: ffff8880353580dc R14: 0000000000000b10 R15: 0000000000000588 [ 507.687028][T12590] _copy_from_user+0x98/0xd0 [ 507.687071][T12590] csum_and_copy_from_iter_full+0x218/0x1eb0 [ 507.687131][T12590] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 507.687183][T12590] ? rcu_is_watching+0x12/0xc0 [ 507.687232][T12590] ? trace_kmalloc+0x2d/0xd0 [ 507.687277][T12590] ? __kmalloc_node_track_caller_noprof+0x23b/0x520 [ 507.687319][T12590] ? __pfx_rcu_is_watching+0x1/0x10 [ 507.687366][T12590] ? __alloc_skb+0x164/0x380 [ 507.687421][T12590] ip_generic_getfrag+0x175/0x260 [ 507.687459][T12590] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 507.687498][T12590] ? __pfx___alloc_skb+0x10/0x10 [ 507.687543][T12590] ? do_syscall_64+0xcd/0x250 [ 507.687588][T12590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.687637][T12590] raw_getfrag+0x1ed/0x270 [ 507.687686][T12590] __ip_append_data+0x34f7/0x4160 [ 507.687733][T12590] ? __pfx_raw_getfrag+0x10/0x10 [ 507.687793][T12590] ? __pfx___ip_append_data+0x10/0x10 [ 507.687830][T12590] ? kasan_save_track+0x14/0x30 [ 507.687863][T12590] ? __kasan_kmalloc+0xaa/0xb0 [ 507.687924][T12590] ip_append_data+0x10f/0x1a0 [ 507.687967][T12590] ? __pfx_raw_getfrag+0x10/0x10 [ 507.688014][T12590] raw_sendmsg+0xd66/0x3870 [ 507.688075][T12590] ? __pfx_raw_sendmsg+0x10/0x10 [ 507.688141][T12590] ? find_held_lock+0x2d/0x110 [ 507.688203][T12590] ? __pfx___might_resched+0x10/0x10 [ 507.688246][T12590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.688295][T12590] ? aa_sk_perm+0x2f5/0xb20 [ 507.688354][T12590] ? find_held_lock+0x2d/0x110 [ 507.688406][T12590] ? __pfx_raw_sendmsg+0x10/0x10 [ 507.688454][T12590] inet_sendmsg+0x119/0x140 [ 507.688499][T12590] sock_write_iter+0x4ac/0x5b0 [ 507.688541][T12590] ? __pfx_sock_write_iter+0x10/0x10 [ 507.688601][T12590] ? rw_verify_area+0xcf/0x680 [ 507.688655][T12590] vfs_write+0x5ae/0x1150 [ 507.688687][T12590] ? __pfx_sock_write_iter+0x10/0x10 [ 507.688732][T12590] ? __pfx_vfs_write+0x10/0x10 [ 507.688766][T12590] ? __fget_files+0x40/0x3a0 [ 507.688820][T12590] ksys_write+0x207/0x250 [ 507.688852][T12590] ? __pfx_ksys_write+0x10/0x10 [ 507.688896][T12590] do_syscall_64+0xcd/0x250 [ 507.688947][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.688992][T12590] RIP: 0033:0x7f199cf8cda9 [ 507.689016][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.689046][T12590] RSP: 002b:00007f199de7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.689073][T12590] RAX: ffffffffffffffda RBX: 00007f199d1a6080 RCX: 00007f199cf8cda9 [ 507.689092][T12590] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 507.689111][T12590] RBP: 00007f199de7c090 R08: 0000000000000000 R09: 0000000000000000 [ 507.689130][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.689157][T12590] R13: 0000000000000000 R14: 00007f199d1a6080 R15: 00007ffe91cd7bc8 [ 507.689198][T12590] [ 508.791159][T12592] HfR: entered promiscuous mode [ 508.919653][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 509.050739][T12592] HfR: left promiscuous mode [ 509.776574][T12598] can: request_module (can-proto-0) failed. [ 510.809947][T12610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.109053][T12610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.168894][ T29] audit: type=1800 audit(4294967352.379:40): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1647" name="dbroot" dev="configfs" ino=35354 res=0 errno=0 [ 511.234017][ T29] audit: type=1804 audit(4294967352.389:41): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1647" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=35354 res=1 errno=0 [ 511.474240][T12610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.549521][T12620] Process accounting resumed [ 511.558119][T12620] db_root: cannot open:  [ 511.917000][T12610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.966825][T12626] db_root: cannot open:  [ 512.906776][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1653'. [ 512.978873][T12646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.993212][T12646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.121425][T12646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.133226][T12646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.230026][T12634] db_root: cannot open:  [ 513.716355][T12648] db_root: cannot open:  [ 513.838021][T12654] HfR: entered promiscuous mode [ 513.864862][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1656'. [ 513.884654][T12654] HfR: left promiscuous mode [ 515.207090][T12673] usbip-vudc usbip-vudc.0: gadget not bound [ 516.878123][T12655] db_root: cannot open:  [ 517.414713][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'. [ 517.654991][T12693] db_root: cannot open:  [ 518.841135][T12709] FAULT_INJECTION: forcing a failure. [ 518.841135][T12709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.906409][T12709] CPU: 1 UID: 0 PID: 12709 Comm: syz.1.1670 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 518.906453][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 518.906472][T12709] Call Trace: [ 518.906480][T12709] [ 518.906492][T12709] dump_stack_lvl+0x16c/0x1f0 [ 518.906545][T12709] should_fail_ex+0x50a/0x650 [ 518.906579][T12709] ? __pfx___might_resched+0x10/0x10 [ 518.906627][T12709] should_fail_alloc_page+0xe7/0x130 [ 518.906671][T12709] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 518.906733][T12709] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 518.906775][T12709] ? hlock_class+0x4e/0x130 [ 518.906823][T12709] ? mark_lock+0xb5/0xc60 [ 518.906864][T12709] ? __pfx_mark_lock+0x10/0x10 [ 518.906905][T12709] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 518.906965][T12709] ? hlock_class+0x4e/0x130 [ 518.907014][T12709] ? mark_lock+0xb5/0xc60 [ 518.907050][T12709] ? hlock_class+0x4e/0x130 [ 518.907127][T12709] ? hlock_class+0x4e/0x130 [ 518.907177][T12709] ? __lock_acquire+0xcc5/0x3c40 [ 518.907226][T12709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.907274][T12709] ? policy_nodemask+0xea/0x4e0 [ 518.907318][T12709] alloc_pages_mpol+0x1fc/0x540 [ 518.907361][T12709] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 518.907414][T12709] ? __lock_acquire+0x15a9/0x3c40 [ 518.907460][T12709] folio_alloc_mpol_noprof+0x36/0x2f0 [ 518.907507][T12709] vma_alloc_folio_noprof+0xee/0x1b0 [ 518.907552][T12709] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 518.907599][T12709] ? find_held_lock+0x2d/0x110 [ 518.907657][T12709] do_pte_missing+0x202f/0x3e10 [ 518.907707][T12709] __handle_mm_fault+0x1166/0x2c60 [ 518.907755][T12709] ? __pfx___handle_mm_fault+0x10/0x10 [ 518.907790][T12709] ? follow_page_pte+0x3ac/0x1490 [ 518.907822][T12709] ? __pfx_lock_release+0x10/0x10 [ 518.907887][T12709] handle_mm_fault+0x3fa/0xaa0 [ 518.907931][T12709] __get_user_pages+0x773/0x36f0 [ 518.907974][T12709] ? __pfx_mt_find+0x10/0x10 [ 518.908019][T12709] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 518.908059][T12709] ? __pfx___get_user_pages+0x10/0x10 [ 518.908097][T12709] ? __mm_populate+0x21d/0x380 [ 518.908140][T12709] populate_vma_page_range+0x27f/0x3a0 [ 518.908196][T12709] ? __pfx_populate_vma_page_range+0x10/0x10 [ 518.908230][T12709] ? __pfx_find_vma_intersection+0x10/0x10 [ 518.908281][T12709] ? vm_mmap_pgoff+0x29b/0x3a0 [ 518.908318][T12709] __mm_populate+0x1d6/0x380 [ 518.908353][T12709] ? __pfx___mm_populate+0x10/0x10 [ 518.908391][T12709] ? up_write+0x1b2/0x520 [ 518.908435][T12709] vm_mmap_pgoff+0x2d3/0x3a0 [ 518.908470][T12709] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 518.908507][T12709] ? __x64_sys_futex+0x1e1/0x4c0 [ 518.908537][T12709] ? __x64_sys_futex+0x1ea/0x4c0 [ 518.908570][T12709] ksys_mmap_pgoff+0x7d/0x5c0 [ 518.908616][T12709] ? rcu_is_watching+0x12/0xc0 [ 518.908665][T12709] __x64_sys_mmap+0x125/0x190 [ 518.908728][T12709] do_syscall_64+0xcd/0x250 [ 518.908795][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.908842][T12709] RIP: 0033:0x7fd2e138cda9 [ 518.908867][T12709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.908898][T12709] RSP: 002b:00007fd2e2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 518.908928][T12709] RAX: ffffffffffffffda RBX: 00007fd2e15a5fa0 RCX: 00007fd2e138cda9 [ 518.908950][T12709] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 518.908970][T12709] RBP: 00007fd2e140e2a0 R08: ffffffffffffffff R09: 0000000000008000 [ 518.908991][T12709] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 518.909011][T12709] R13: 0000000000000000 R14: 00007fd2e15a5fa0 R15: 00007ffe55ed7168 [ 518.909052][T12709] [ 518.940472][T12702] db_root: cannot open:  [ 519.174701][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 521.316167][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'. [ 521.444629][T12716] ipvlan1: entered allmulticast mode [ 521.450661][T12716] veth0_vlan: entered allmulticast mode [ 522.650955][T12744] nbd: must specify a device to reconfigure [ 524.198518][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 524.388887][T12736] db_root: cannot open:  [ 524.562286][T12745] db_root: cannot open:  [ 525.687386][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1684'. [ 526.146548][T12759] db_root: cannot open:  [ 526.320429][T12672] db_root: cannot open:  [ 526.512088][T12774] can: request_module (can-proto-0) failed. [ 527.208373][T12780] db_root: cannot open:  [ 527.254055][T12789] nbd: must specify a device to reconfigure [ 527.934277][T12791] db_root: cannot open:  [ 528.618353][T12806] can: request_module (can-proto-0) failed. [ 529.637637][T12801] db_root: cannot open:  [ 529.761700][T12820] can: request_module (can-proto-0) failed. [ 530.693078][T12832] can: request_module (can-proto-0) failed. [ 530.933759][T12838] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L,ªRsVÈ;' with parent 'ieee80211' already present! [ 531.821197][T12842] can: request_module (can-proto-0) failed. [ 532.422526][T12856] nbd: must specify a device to reconfigure [ 534.222356][T12850] db_root: cannot open:  [ 534.338242][T12828] db_root: cannot open:  [ 534.377250][T12869] FAULT_INJECTION: forcing a failure. [ 534.377250][T12869] name failslab, interval 1, probability 0, space 0, times 0 [ 534.404611][T12869] CPU: 0 UID: 0 PID: 12869 Comm: syz.1.1708 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 534.404648][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 534.404665][T12869] Call Trace: [ 534.404674][T12869] [ 534.404684][T12869] dump_stack_lvl+0x16c/0x1f0 [ 534.404733][T12869] should_fail_ex+0x50a/0x650 [ 534.404767][T12869] ? fs_reclaim_acquire+0xae/0x150 [ 534.404817][T12869] should_failslab+0xc2/0x120 [ 534.404866][T12869] __kmalloc_node_noprof+0xd1/0x520 [ 534.404903][T12869] ? __pfx_aa_file_perm+0x10/0x10 [ 534.404936][T12869] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 534.404974][T12869] __kvmalloc_node_noprof+0xad/0x1a0 [ 534.405008][T12869] seq_read_iter+0x82a/0x12b0 [ 534.405059][T12869] ? __mutex_trylock_common+0xea/0x250 [ 534.405110][T12869] kernfs_fop_read_iter+0x414/0x580 [ 534.405167][T12869] ? rw_verify_area+0xcf/0x680 [ 534.405218][T12869] vfs_read+0x886/0xbf0 [ 534.405256][T12869] ? __pfx_vfs_read+0x10/0x10 [ 534.405314][T12869] ksys_read+0x12b/0x250 [ 534.405344][T12869] ? __pfx_ksys_read+0x10/0x10 [ 534.405384][T12869] do_syscall_64+0xcd/0x250 [ 534.405435][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.405478][T12869] RIP: 0033:0x7fd2e138cda9 [ 534.405503][T12869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.405533][T12869] RSP: 002b:00007fd2e2231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.405561][T12869] RAX: ffffffffffffffda RBX: 00007fd2e15a5fa0 RCX: 00007fd2e138cda9 [ 534.405579][T12869] RDX: 00000000000000fa RSI: 0000000020000180 RDI: 0000000000000003 [ 534.405612][T12869] RBP: 00007fd2e2231090 R08: 0000000000000000 R09: 0000000000000000 [ 534.405627][T12869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.405642][T12869] R13: 0000000000000000 R14: 00007fd2e15a5fa0 R15: 00007ffe55ed7168 [ 534.405674][T12869] [ 535.023688][T12873] can: request_module (can-proto-0) failed. [ 536.686806][T12907] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1717'. [ 536.707737][T12907] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1717'. [ 537.910077][T12919] db_root: cannot open:  [ 538.026752][T12891] db_root: cannot open:  [ 538.487175][T12930] db_root: cannot open:  [ 538.969306][T12931] db_root: cannot open:  [ 540.162138][T12934] db_root: cannot open:  [ 540.506646][T12948] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L,ªRsVÈ;' with parent 'ieee80211' already present! [ 540.671324][T12947] db_root: cannot open:  [ 541.037743][T12953] db_root: cannot open:  [ 541.252777][T12959] block nbd0: not configured, cannot reconfigure [ 542.032208][T12958] Process accounting paused [ 543.801274][T12976] can: request_module (can-proto-0) failed. [ 544.795247][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1737'. [ 545.540029][T12999] Invalid ELF header magic: != ELF [ 546.220171][T13009] block nbd0: not configured, cannot reconfigure [ 546.618509][T13019] block nbd0: not configured, cannot reconfigure [ 547.361411][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 547.413199][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1744'. [ 547.504799][ T29] audit: type=1800 audit(4294967388.679:42): pid=13026 uid=8 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1744" name="file0" dev="tmpfs" ino=2324 res=0 errno=0 [ 549.686652][T13056] block nbd0: not configured, cannot reconfigure [ 556.562589][T13121] block nbd0: not configured, cannot reconfigure [ 559.110584][T13154] nvme_fabrics: missing parameter 'transport=%s' [ 559.130230][T13154] nvme_fabrics: missing parameter 'nqn=%s' [ 560.059695][T13169] block nbd0: not configured, cannot reconfigure [ 560.372851][ T54] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 560.625161][T13173] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1780'. [ 560.654630][T13173] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1780'. [ 560.677678][T13173] netlink: 134 bytes leftover after parsing attributes in process `syz.3.1780'. [ 560.694441][T13173] netlink: 134 bytes leftover after parsing attributes in process `syz.3.1780'. [ 560.854647][T13176] vivid-003: ================= START STATUS ================= [ 560.862514][T13176] vivid-003: Radio HW Seek Mode: Bounded [ 560.872632][T13176] vivid-003: Radio Programmable HW Seek: false [ 560.882751][T13176] vivid-003: RDS Rx I/O Mode: Block I/O [ 560.894580][T13176] vivid-003: Generate RBDS Instead of RDS: false [ 560.900988][T13176] vivid-003: RDS Reception: true [ 560.936764][T13176] vivid-003: RDS Program Type: 0 inactive [ 560.942603][T13176] vivid-003: RDS PS Name: inactive [ 560.974041][T13176] vivid-003: RDS Radio Text: inactive [ 561.018776][T13176] vivid-003: RDS Traffic Announcement: false inactive [ 561.044612][T13176] vivid-003: RDS Traffic Program: false inactive [ 561.051091][T13176] vivid-003: RDS Music: false inactive [ 561.090136][T13176] vivid-003: ================== END STATUS ================== [ 562.488293][T13198] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 562.567125][T13198] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 563.403594][T13215] futex_wake_op: syz.4.1790 tries to shift op by 64; fix this program [ 565.974280][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 565.984040][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.993062][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 566.001689][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 566.009467][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 566.016830][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.541486][T13238] chnl_net:caif_netlink_parms(): no params data found [ 566.837515][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.869439][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.881599][T13238] bridge_slave_0: entered allmulticast mode [ 566.899216][T13238] bridge_slave_0: entered promiscuous mode [ 566.915877][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.944182][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.952019][T13238] bridge_slave_1: entered allmulticast mode [ 566.985834][T13238] bridge_slave_1: entered promiscuous mode [ 567.301526][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.347994][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.520153][T13238] team0: Port device team_slave_0 added [ 567.625589][T13238] team0: Port device team_slave_1 added [ 567.830939][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.845980][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.909095][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.024687][T13271] block nbd0: not configured, cannot reconfigure [ 568.033707][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.046841][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.099104][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.123568][ T5147] Bluetooth: hci0: command tx timeout [ 568.214978][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.221320][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.530876][T13238] hsr_slave_0: entered promiscuous mode [ 568.555306][T13238] hsr_slave_1: entered promiscuous mode [ 568.561506][T13238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.604669][T13238] Cannot create hsr debugfs directory [ 569.425136][T13238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.506365][T13238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.565664][T13238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.665643][T13238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.876974][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.920247][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.954093][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.961346][T11222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.016320][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.023504][T11222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.115856][T13238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.208063][ T5147] Bluetooth: hci0: command tx timeout [ 570.663853][T13238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.318615][T13238] veth0_vlan: entered promiscuous mode [ 571.359848][T13238] veth1_vlan: entered promiscuous mode [ 571.446604][T13238] veth0_macvtap: entered promiscuous mode [ 571.477058][T13238] veth1_macvtap: entered promiscuous mode [ 571.528654][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.559616][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.601672][T13238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.640053][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.671205][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.702929][T13238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.751315][T13238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.770521][T13238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.808147][T13238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.828053][T13238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.121827][T11236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.144906][T11236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.181675][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'. [ 572.267753][T11220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.288069][ T5147] Bluetooth: hci0: command tx timeout [ 572.294619][T11220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.319364][T13306] Process accounting resumed [ 572.324192][T13306] db_root: cannot open:  [ 572.789669][T13312] nbd: must specify a device to reconfigure [ 573.550719][T13308] db_root: cannot open:  [ 574.354714][ T5147] Bluetooth: hci0: command tx timeout [ 574.874885][T13321] db_root: cannot open:  [ 575.895666][T13338] db_root: cannot open:  [ 576.888684][T13361] nbd: must specify a device to reconfigure [ 577.427476][T13367] block nbd0: not configured, cannot reconfigure [ 578.535622][T13353] db_root: cannot open:  [ 578.690345][T13378] HfR: entered promiscuous mode [ 578.767829][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1828'. [ 578.828076][T13378] HfR: left promiscuous mode [ 579.659917][T13067] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 581.086571][T13410] block nbd0: not configured, cannot reconfigure [ 581.428994][T13416] block nbd0: not configured, cannot reconfigure [ 582.173495][T13388] db_root: cannot open:  [ 583.060989][T13429] db_root: cannot open:  [ 584.124001][T13462] block nbd0: not configured, cannot reconfigure [ 584.467468][T13339] db_root: cannot open:  [ 584.576909][T13450] net_ratelimit: 353 callbacks suppressed [ 584.576932][T13450] netlink: zone id is out of range [ 584.617002][T13450] netlink: zone id is out of range [ 584.659173][T13450] netlink: zone id is out of range [ 584.785206][T13450] netlink: zone id is out of range [ 584.857545][T13450] netlink: zone id is out of range [ 585.016544][T13450] netlink: zone id is out of range [ 585.021720][T13450] netlink: zone id is out of range [ 585.042779][T13481] ubi4: attaching mtd0 [ 585.076792][T13481] ubi4: scanning is finished [ 585.081494][T13481] ubi4 error: ubi_read_volume_table: the layout volume was not found [ 585.138398][T13450] netlink: zone id is out of range [ 585.144141][T13450] netlink: zone id is out of range [ 585.240328][T13450] netlink: zone id is out of range [ 585.268091][T13481] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 585.361219][T13335] db_root: cannot open:  [ 585.689419][T13452] db_root: cannot open:  [ 586.241032][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1856'. [ 586.478131][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.494105][T13505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.526153][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.537242][T13505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.080668][T13501] db_root: cannot open:  [ 587.495007][T13525] block nbd0: not configured, cannot reconfigure [ 588.216179][T13522] db_root: cannot open:  [ 588.531449][T13538] db_root: cannot open:  [ 589.409736][T13565] block nbd0: not configured, cannot reconfigure [ 589.595566][T13552] db_root: cannot open:  [ 590.360109][T13576] db_root: cannot open:  [ 590.440308][T13570] db_root: cannot open:  [ 590.624904][T13577] db_root: cannot open:  [ 590.801833][T13582] db_root: cannot open:  [ 591.221090][T13588] db_root: cannot open:  [ 591.682792][T13592] db_root: cannot open:  [ 592.551090][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1882'. [ 592.623921][T13604] db_root: cannot open:  [ 594.686884][T13640] block nbd0: not configured, cannot reconfigure [ 595.785059][T13635] db_root: cannot open:  [ 596.383681][T13656] db_root: cannot open:  [ 597.495496][T13686] block nbd0: not configured, cannot reconfigure [ 597.647098][T13643] db_root: cannot open:  [ 597.659397][T13688] block nbd0: not configured, cannot reconfigure [ 598.398852][T13698] FAULT_INJECTION: forcing a failure. [ 598.398852][T13698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.420288][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.5.1901 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 598.420326][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 598.420343][T13698] Call Trace: [ 598.420350][T13698] [ 598.420361][T13698] dump_stack_lvl+0x16c/0x1f0 [ 598.420409][T13698] should_fail_ex+0x50a/0x650 [ 598.420448][T13698] _copy_from_iter+0x29b/0x1400 [ 598.420489][T13698] ? trace_lock_acquire+0x14e/0x1f0 [ 598.420518][T13698] ? __alloc_skb+0x200/0x380 [ 598.420565][T13698] ? __pfx__copy_from_iter+0x10/0x10 [ 598.420602][T13698] ? __virt_addr_valid+0x1a4/0x590 [ 598.420635][T13698] ? __virt_addr_valid+0x5e/0x590 [ 598.420661][T13698] ? __phys_addr_symbol+0x30/0x80 [ 598.420708][T13698] ? __check_object_size+0x488/0x710 [ 598.420748][T13698] netlink_sendmsg+0x813/0xd70 [ 598.420794][T13698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.420848][T13698] ____sys_sendmsg+0x9ae/0xb40 [ 598.420885][T13698] ? copy_msghdr_from_user+0x10b/0x160 [ 598.420934][T13698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.420970][T13698] ? __lock_acquire+0xcc5/0x3c40 [ 598.421021][T13698] ___sys_sendmsg+0x135/0x1e0 [ 598.421071][T13698] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.421135][T13698] ? trace_lock_acquire+0x14e/0x1f0 [ 598.421199][T13698] __sys_sendmmsg+0x201/0x420 [ 598.421232][T13698] ? __pfx___sys_sendmmsg+0x10/0x10 [ 598.421273][T13698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 598.421348][T13698] ? fput+0x67/0x440 [ 598.421382][T13698] ? ksys_write+0x1ba/0x250 [ 598.421409][T13698] ? __pfx_ksys_write+0x10/0x10 [ 598.421444][T13698] __x64_sys_sendmmsg+0x9c/0x100 [ 598.421470][T13698] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.421507][T13698] do_syscall_64+0xcd/0x250 [ 598.421552][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.421592][T13698] RIP: 0033:0x7f651b18cda9 [ 598.421613][T13698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.421639][T13698] RSP: 002b:00007f651c09d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 598.421664][T13698] RAX: ffffffffffffffda RBX: 00007f651b3a6080 RCX: 00007f651b18cda9 [ 598.421682][T13698] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 598.421698][T13698] RBP: 00007f651c09d090 R08: 0000000000000000 R09: 0000000000000000 [ 598.421715][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.421732][T13698] R13: 0000000000000000 R14: 00007f651b3a6080 R15: 00007fff49ff2858 [ 598.421765][T13698] [ 599.281485][T13663] db_root: cannot open:  [ 599.355832][T13706] netlink: 'syz.5.1904': attribute type 33 has an invalid length. [ 599.365773][T13706] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1904'. [ 599.466399][T13704] net_ratelimit: 353 callbacks suppressed [ 599.466422][T13704] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 599.631030][T13712] FAULT_INJECTION: forcing a failure. [ 599.631030][T13712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.678807][T13712] CPU: 1 UID: 0 PID: 13712 Comm: syz.5.1906 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 599.678848][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 599.678866][T13712] Call Trace: [ 599.678874][T13712] [ 599.678886][T13712] dump_stack_lvl+0x16c/0x1f0 [ 599.678937][T13712] should_fail_ex+0x50a/0x650 [ 599.678971][T13712] ? __pfx___might_resched+0x10/0x10 [ 599.679018][T13712] should_fail_alloc_page+0xe7/0x130 [ 599.679061][T13712] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 599.679122][T13712] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 599.679167][T13712] ? __pfx_mark_lock+0x10/0x10 [ 599.679204][T13712] ? __pfx_mark_lock+0x10/0x10 [ 599.679259][T13712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 599.679326][T13712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.679372][T13712] ? policy_nodemask+0xea/0x4e0 [ 599.679417][T13712] alloc_pages_mpol+0x1fc/0x540 [ 599.679459][T13712] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 599.679501][T13712] ? find_held_lock+0x2d/0x110 [ 599.679559][T13712] folio_alloc_mpol_noprof+0x36/0x2f0 [ 599.679609][T13712] shmem_alloc_folio+0x135/0x160 [ 599.679652][T13712] shmem_alloc_and_add_folio+0x48e/0xc10 [ 599.679706][T13712] ? shmem_huge_global_enabled+0x72/0x6b0 [ 599.679752][T13712] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 599.679807][T13712] ? shmem_allowable_huge_orders+0xd0/0x410 [ 599.679863][T13712] shmem_get_folio_gfp+0x689/0x1530 [ 599.679919][T13712] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 599.679978][T13712] ? __pfx_mark_lock+0x10/0x10 [ 599.680032][T13712] shmem_fault+0x200/0xae0 [ 599.680080][T13712] ? __pfx_shmem_fault+0x10/0x10 [ 599.680141][T13712] ? __pfx_lock_release+0x10/0x10 [ 599.680183][T13712] ? __pfx_filemap_map_pages+0x10/0x10 [ 599.680231][T13712] ? mark_held_locks+0x9f/0xe0 [ 599.680279][T13712] ? pte_alloc_one+0x2b8/0x390 [ 599.680329][T13712] ? __pfx_filemap_map_pages+0x10/0x10 [ 599.680377][T13712] __do_fault+0x10a/0x490 [ 599.680424][T13712] ? __pfx_filemap_map_pages+0x10/0x10 [ 599.680473][T13712] do_pte_missing+0x1a8/0x3e10 [ 599.680511][T13712] ? __pfx_lock_release+0x10/0x10 [ 599.680560][T13712] __handle_mm_fault+0x1166/0x2c60 [ 599.680609][T13712] ? __pfx___handle_mm_fault+0x10/0x10 [ 599.680643][T13712] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 599.680706][T13712] ? find_vma+0xc0/0x140 [ 599.680755][T13712] ? __pfx_find_vma+0x10/0x10 [ 599.680811][T13712] handle_mm_fault+0x3fa/0xaa0 [ 599.680856][T13712] do_user_addr_fault+0x7a3/0x13f0 [ 599.680907][T13712] exc_page_fault+0x5c/0xc0 [ 599.680952][T13712] asm_exc_page_fault+0x26/0x30 [ 599.680995][T13712] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 599.681032][T13712] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 599.681062][T13712] RSP: 0018:ffffc9000bfa79c0 EFLAGS: 00050202 [ 599.681087][T13712] RAX: 4c56207c2009656d RBX: 0000000000000000 RCX: 000000000000003c [ 599.681106][T13712] RDX: ffffed1008299009 RSI: ffff8880414c800b RDI: 0000000000000000 [ 599.681126][T13712] RBP: ffffc9000bfa7bd0 R08: 0000000000000000 R09: ffffed1008299008 [ 599.681146][T13712] R10: ffff8880414c8046 R11: 0000000000000001 R12: 000000000000003c [ 599.681165][T13712] R13: ffff8880414c800b R14: 0000000000000000 R15: 000000000000003c [ 599.681205][T13712] _copy_to_iter+0x52f/0x1400 [ 599.681284][T13712] ? __pfx__copy_to_iter+0x10/0x10 [ 599.681322][T13712] ? __virt_addr_valid+0x1a4/0x590 [ 599.681368][T13712] ? __virt_addr_valid+0x5e/0x590 [ 599.681394][T13712] ? __phys_addr_symbol+0x30/0x80 [ 599.681441][T13712] ? __check_object_size+0x488/0x710 [ 599.681484][T13712] seq_read_iter+0x725/0x12b0 [ 599.681532][T13712] ? aa_file_perm+0x4d5/0xfe0 [ 599.681584][T13712] seq_read+0x39f/0x4e0 [ 599.681625][T13712] ? __pfx_seq_read+0x10/0x10 [ 599.681690][T13712] ? __pfx_seq_read+0x10/0x10 [ 599.681731][T13712] proc_reg_read+0x23d/0x330 [ 599.681760][T13712] ? __pfx_proc_reg_read+0x10/0x10 [ 599.681791][T13712] vfs_read+0x1df/0xbf0 [ 599.681819][T13712] ? __fget_files+0x1fc/0x3a0 [ 599.681846][T13712] ? __pfx_lock_release+0x10/0x10 [ 599.681879][T13712] ? __pfx_vfs_read+0x10/0x10 [ 599.681907][T13712] ? lock_acquire+0x2f/0xb0 [ 599.681937][T13712] ? __fget_files+0x40/0x3a0 [ 599.681969][T13712] ? __fget_files+0x206/0x3a0 [ 599.682006][T13712] __x64_sys_pread64+0x1f6/0x250 [ 599.682037][T13712] ? __pfx___x64_sys_pread64+0x10/0x10 [ 599.682076][T13712] do_syscall_64+0xcd/0x250 [ 599.682119][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.682156][T13712] RIP: 0033:0x7f651b18cda9 [ 599.682177][T13712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.682202][T13712] RSP: 002b:00007f651c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 599.682225][T13712] RAX: ffffffffffffffda RBX: 00007f651b3a5fa0 RCX: 00007f651b18cda9 [ 599.682242][T13712] RDX: 000000000000f429 RSI: 0000000000000000 RDI: 0000000000000003 [ 599.682263][T13712] RBP: 00007f651c0be090 R08: 0000000000000000 R09: 0000000000000000 [ 599.682279][T13712] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 599.682295][T13712] R13: 0000000000000000 R14: 00007f651b3a5fa0 R15: 00007fff49ff2858 [ 599.682329][T13712] [ 599.969703][T13700] db_root: cannot open:  [ 601.032474][T13709] db_root: cannot open:  [ 601.352202][T13738] block nbd0: not configured, cannot reconfigure [ 602.114312][T13609] db_root: cannot open:  [ 602.463291][T13740] Process accounting paused [ 603.654724][ T29] audit: type=1804 audit(4294967444.849:43): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1922" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=35354 res=1 errno=0 [ 604.022701][T13780] Process accounting resumed [ 605.182376][T13801] can: request_module (can-proto-0) failed. [ 605.625452][T13809] block nbd0: not configured, cannot reconfigure [ 605.829195][T13808] block nbd0: not configured, cannot reconfigure [ 606.852650][T13828] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L,ªRsVÈ;' [ 606.887965][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.4.1936 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 606.888005][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 606.888022][T13828] Call Trace: [ 606.888030][T13828] [ 606.888040][T13828] dump_stack_lvl+0x16c/0x1f0 [ 606.888086][T13828] sysfs_warn_dup+0x7f/0xa0 [ 606.888128][T13828] sysfs_do_create_link_sd+0x124/0x140 [ 606.888174][T13828] sysfs_create_link+0x61/0xc0 [ 606.888217][T13828] device_add+0x62e/0x1a70 [ 606.888259][T13828] ? __pfx_device_add+0x10/0x10 [ 606.888293][T13828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.888335][T13828] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 606.888391][T13828] wiphy_register+0x1c7a/0x2860 [ 606.888425][T13828] ? netdev_run_todo+0x8fc/0x13d0 [ 606.888463][T13828] ? __pfx_wiphy_register+0x10/0x10 [ 606.888517][T13828] ieee80211_register_hw+0x23ff/0x3ff0 [ 606.888563][T13828] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 606.888592][T13828] ? net_generic+0xea/0x2a0 [ 606.888651][T13828] ? lockdep_init_map_type+0x16d/0x7d0 [ 606.888702][T13828] ? rcu_is_watching+0x12/0xc0 [ 606.888750][T13828] ? trace_hrtimer_init+0x1a6/0x230 [ 606.888790][T13828] ? __hrtimer_init+0x106/0x2c0 [ 606.888867][T13828] mac80211_hwsim_new_radio+0x2c47/0x56d0 [ 606.888948][T13828] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 606.889000][T13828] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 606.889065][T13828] hwsim_new_radio_nl+0xb42/0x12b0 [ 606.889119][T13828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 606.889182][T13828] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 606.889236][T13828] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 606.889299][T13828] genl_family_rcv_msg_doit+0x202/0x2f0 [ 606.889353][T13828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 606.889404][T13828] ? trace_cap_capable+0x1a2/0x210 [ 606.889465][T13828] ? bpf_lsm_capable+0x9/0x10 [ 606.889510][T13828] ? security_capable+0x7e/0x260 [ 606.889558][T13828] ? ns_capable+0xd7/0x110 [ 606.889605][T13828] genl_rcv_msg+0x565/0x800 [ 606.889661][T13828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.889723][T13828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 606.889791][T13828] netlink_rcv_skb+0x165/0x410 [ 606.889837][T13828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.889892][T13828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.889956][T13828] ? down_read+0xc9/0x330 [ 606.890007][T13828] ? __pfx_down_read+0x10/0x10 [ 606.890071][T13828] ? netlink_deliver_tap+0x1ae/0xca0 [ 606.890115][T13828] genl_rcv+0x28/0x40 [ 606.890156][T13828] netlink_unicast+0x53c/0x7f0 [ 606.890200][T13828] ? __pfx_netlink_unicast+0x10/0x10 [ 606.890242][T13828] ? __phys_addr_symbol+0x30/0x80 [ 606.890287][T13828] ? __check_object_size+0x488/0x710 [ 606.890333][T13828] netlink_sendmsg+0x8b8/0xd70 [ 606.890379][T13828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.890433][T13828] ____sys_sendmsg+0x9ae/0xb40 [ 606.890469][T13828] ? copy_msghdr_from_user+0x10b/0x160 [ 606.890518][T13828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.890577][T13828] ___sys_sendmsg+0x135/0x1e0 [ 606.890628][T13828] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.890702][T13828] ? __pfx_lock_release+0x10/0x10 [ 606.890739][T13828] ? trace_lock_acquire+0x14e/0x1f0 [ 606.890782][T13828] ? __fget_files+0x206/0x3a0 [ 606.890826][T13828] __sys_sendmsg+0x16e/0x220 [ 606.890855][T13828] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.890883][T13828] ? __x64_sys_futex+0x1e1/0x4c0 [ 606.890938][T13828] do_syscall_64+0xcd/0x250 [ 606.890988][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.891030][T13828] RIP: 0033:0x7fc2b938cda9 [ 606.891053][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.891080][T13828] RSP: 002b:00007fc2ba291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.891108][T13828] RAX: ffffffffffffffda RBX: 00007fc2b95a5fa0 RCX: 00007fc2b938cda9 [ 606.891127][T13828] RDX: 0000000004000800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 606.891145][T13828] RBP: 00007fc2b940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 606.891164][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.891182][T13828] R13: 0000000000000000 R14: 00007fc2b95a5fa0 R15: 00007ffc50ee9de8 [ 606.891221][T13828] [ 607.933371][T13843] can: request_module (can-proto-0) failed. [ 608.171084][T13851] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1941'. [ 608.923975][T13866] block nbd0: not configured, cannot reconfigure [ 609.559923][T13874] block nbd0: not configured, cannot reconfigure [ 612.560162][T13920] block nbd0: not configured, cannot reconfigure [ 613.384692][T13927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 613.447292][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.489987][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.545330][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.558339][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.254672][T13937] FAULT_INJECTION: forcing a failure. [ 614.254672][T13937] name failslab, interval 1, probability 0, space 0, times 0 [ 614.276880][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.5.1962 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 614.276918][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 614.276936][T13937] Call Trace: [ 614.276944][T13937] [ 614.276955][T13937] dump_stack_lvl+0x16c/0x1f0 [ 614.277004][T13937] should_fail_ex+0x50a/0x650 [ 614.277037][T13937] ? fs_reclaim_acquire+0xae/0x150 [ 614.277095][T13937] should_failslab+0xc2/0x120 [ 614.277132][T13937] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 614.277171][T13937] ? kstrdup_const+0x63/0x80 [ 614.277229][T13937] kstrdup+0x42/0xb0 [ 614.277269][T13937] kstrdup_const+0x63/0x80 [ 614.277328][T13937] __kernfs_new_node+0x9c/0x890 [ 614.277378][T13937] ? hlock_class+0x4e/0x130 [ 614.277431][T13937] ? __pfx___kernfs_new_node+0x10/0x10 [ 614.277487][T13937] ? __pfx___lock_acquire+0x10/0x10 [ 614.277526][T13937] kernfs_new_node+0x186/0x240 [ 614.277555][T13937] ? lock_acquire.part.0+0x11b/0x380 [ 614.277593][T13937] kernfs_create_dir_ns+0x4c/0x150 [ 614.277627][T13937] sysfs_create_dir_ns+0x13b/0x2b0 [ 614.277670][T13937] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 614.277712][T13937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 614.277752][T13937] ? kobject_add_internal+0x12d/0x990 [ 614.277800][T13937] ? class_dir_child_ns_type+0xd/0x60 [ 614.277840][T13937] kobject_add_internal+0x2c8/0x990 [ 614.277891][T13937] kobject_add+0x16f/0x240 [ 614.277917][T13937] ? __pfx_kobject_add+0x10/0x10 [ 614.277944][T13937] ? lock_acquire+0x2f/0xb0 [ 614.277979][T13937] ? get_device_parent+0x11f/0x4e0 [ 614.278011][T13937] ? kobject_put+0xab/0x5a0 [ 614.278069][T13937] device_add+0x289/0x1a70 [ 614.278105][T13937] ? __pfx___debug_object_init+0x10/0x10 [ 614.278145][T13937] ? alloc_workqueue+0x199/0x200 [ 614.278188][T13937] ? __pfx_device_add+0x10/0x10 [ 614.278227][T13937] ? lockdep_init_map_type+0x16d/0x7d0 [ 614.278269][T13937] nfc_register_device+0x41/0x3c0 [ 614.278311][T13937] nci_register_device+0x7f4/0xb80 [ 614.278344][T13937] ? __pfx_nci_register_device+0x10/0x10 [ 614.278390][T13937] virtual_ncidev_open+0x141/0x220 [ 614.278426][T13937] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 614.278461][T13937] misc_open+0x35a/0x420 [ 614.278491][T13937] ? __pfx_misc_open+0x10/0x10 [ 614.278521][T13937] chrdev_open+0x237/0x6a0 [ 614.278551][T13937] ? __pfx_apparmor_file_open+0x10/0x10 [ 614.278580][T13937] ? __pfx_chrdev_open+0x10/0x10 [ 614.278615][T13937] ? file_set_fsnotify_mode+0x163/0x5d0 [ 614.278660][T13937] do_dentry_open+0x735/0x1c40 [ 614.278689][T13937] ? __pfx_chrdev_open+0x10/0x10 [ 614.278722][T13937] ? inode_permission+0xdd/0x5f0 [ 614.278779][T13937] vfs_open+0x82/0x3f0 [ 614.278841][T13937] ? may_open+0x1f2/0x400 [ 614.278891][T13937] path_openat+0x1e88/0x2d80 [ 614.278942][T13937] ? __pfx_path_openat+0x10/0x10 [ 614.278979][T13937] ? __pfx___lock_acquire+0x10/0x10 [ 614.279015][T13937] ? lock_acquire.part.0+0x11b/0x380 [ 614.279061][T13937] ? find_held_lock+0x2d/0x110 [ 614.279118][T13937] do_filp_open+0x20c/0x470 [ 614.279155][T13937] ? __pfx_do_filp_open+0x10/0x10 [ 614.279188][T13937] ? find_held_lock+0x2d/0x110 [ 614.279268][T13937] ? alloc_fd+0x41f/0x760 [ 614.279314][T13937] do_sys_openat2+0x17a/0x1e0 [ 614.279359][T13937] ? __pfx_do_sys_openat2+0x10/0x10 [ 614.279406][T13937] ? __pfx___might_resched+0x10/0x10 [ 614.279461][T13937] __x64_sys_openat+0x175/0x210 [ 614.279508][T13937] ? __pfx___x64_sys_openat+0x10/0x10 [ 614.279572][T13937] do_syscall_64+0xcd/0x250 [ 614.279625][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.279672][T13937] RIP: 0033:0x7f651b18cda9 [ 614.279696][T13937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.279728][T13937] RSP: 002b:00007f651c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 614.279758][T13937] RAX: ffffffffffffffda RBX: 00007f651b3a5fa0 RCX: 00007f651b18cda9 [ 614.279778][T13937] RDX: 0000000000000002 RSI: 0000000020000400 RDI: ffffffffffffff9c [ 614.279798][T13937] RBP: 00007f651b20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 614.279818][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.279837][T13937] R13: 0000000000000000 R14: 00007f651b3a5fa0 R15: 00007fff49ff2858 [ 614.279879][T13937] [ 614.280252][T13937] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) [ 616.043156][T13992] FAULT_INJECTION: forcing a failure. [ 616.043156][T13992] name failslab, interval 1, probability 0, space 0, times 0 [ 616.074916][T13992] CPU: 1 UID: 0 PID: 13992 Comm: syz.5.1973 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 616.074956][T13992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 616.074975][T13992] Call Trace: [ 616.074983][T13992] [ 616.074994][T13992] dump_stack_lvl+0x16c/0x1f0 [ 616.075044][T13992] should_fail_ex+0x50a/0x650 [ 616.075078][T13992] ? fs_reclaim_acquire+0xae/0x150 [ 616.075130][T13992] should_failslab+0xc2/0x120 [ 616.075169][T13992] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 616.075206][T13992] ? __alloc_skb+0x2b3/0x380 [ 616.075259][T13992] __alloc_skb+0x2b3/0x380 [ 616.075305][T13992] ? __pfx___alloc_skb+0x10/0x10 [ 616.075351][T13992] ? do_softirq+0xf0/0xf0 [ 616.075392][T13992] ? rt_set_nexthop.constprop.0+0x323/0x12d0 [ 616.075436][T13992] ? __local_bh_enable_ip+0xa4/0x120 [ 616.075477][T13992] ? find_held_lock+0x2d/0x110 [ 616.075529][T13992] alloc_skb_with_frags+0xe4/0x850 [ 616.075561][T13992] ? ip_route_output_key_hash+0x162/0x2e0 [ 616.075607][T13992] ? xfrm_lookup_with_ifid+0xaf4/0x1f40 [ 616.075666][T13992] sock_alloc_send_pskb+0x7f1/0x980 [ 616.075710][T13992] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 616.075758][T13992] ? ip_route_output_key_hash+0x16c/0x2e0 [ 616.075810][T13992] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 616.075856][T13992] ? __pfx_lock_release+0x10/0x10 [ 616.075896][T13992] ? xfrm_lookup_route+0x6a/0x200 [ 616.075958][T13992] raw_sendmsg+0x19db/0x3870 [ 616.076007][T13992] ? hlock_class+0x4e/0x130 [ 616.076049][T13992] ? __pfx_raw_sendmsg+0x10/0x10 [ 616.076113][T13992] ? __pfx___might_resched+0x10/0x10 [ 616.076149][T13992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 616.076193][T13992] ? aa_sk_perm+0x2f5/0xb20 [ 616.076249][T13992] ? __pfx_raw_sendmsg+0x10/0x10 [ 616.076290][T13992] inet_sendmsg+0x119/0x140 [ 616.076331][T13992] ____sys_sendmsg+0x907/0xb40 [ 616.076384][T13992] ? copy_msghdr_from_user+0x10b/0x160 [ 616.076434][T13992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.076470][T13992] ? __lock_acquire+0xcc5/0x3c40 [ 616.076510][T13992] ? hlock_class+0x4e/0x130 [ 616.076556][T13992] ? __lock_acquire+0x15a9/0x3c40 [ 616.076602][T13992] ___sys_sendmsg+0x135/0x1e0 [ 616.076662][T13992] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.076709][T13992] ? __pfx___lock_acquire+0x10/0x10 [ 616.076779][T13992] ? __pfx___might_resched+0x10/0x10 [ 616.076819][T13992] ? __might_fault+0xe3/0x190 [ 616.076865][T13992] __sys_sendmmsg+0x201/0x420 [ 616.076900][T13992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 616.076942][T13992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.077003][T13992] ? fput+0x67/0x440 [ 616.077043][T13992] ? ksys_write+0x1ba/0x250 [ 616.077072][T13992] ? __pfx_ksys_write+0x10/0x10 [ 616.077109][T13992] __x64_sys_sendmmsg+0x9c/0x100 [ 616.077138][T13992] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.077181][T13992] do_syscall_64+0xcd/0x250 [ 616.077230][T13992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.077274][T13992] RIP: 0033:0x7f651b18cda9 [ 616.077298][T13992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.077325][T13992] RSP: 002b:00007f651c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.077353][T13992] RAX: ffffffffffffffda RBX: 00007f651b3a5fa0 RCX: 00007f651b18cda9 [ 616.077373][T13992] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 616.077390][T13992] RBP: 00007f651c0be090 R08: 0000000000000000 R09: 0000000000000000 [ 616.077406][T13992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.077423][T13992] R13: 0000000000000000 R14: 00007f651b3a5fa0 R15: 00007fff49ff2858 [ 616.077460][T13992] [ 616.674029][T14001] block nbd0: not configured, cannot reconfigure [ 618.186571][T14028] nbd: socks must be embedded in a SOCK_ITEM attr [ 618.203894][T14028] block nbd0: shutting down sockets [ 619.194771][T14043] Invalid ELF header magic: != ELF [ 619.334420][T14047] FAULT_INJECTION: forcing a failure. [ 619.334420][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 619.543607][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.4.1987 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 619.543648][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 619.543666][T14047] Call Trace: [ 619.543674][T14047] [ 619.543685][T14047] dump_stack_lvl+0x16c/0x1f0 [ 619.543735][T14047] should_fail_ex+0x50a/0x650 [ 619.543776][T14047] should_failslab+0xc2/0x120 [ 619.543816][T14047] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 619.543854][T14047] ? dst_alloc+0x99/0x1a0 [ 619.543908][T14047] dst_alloc+0x99/0x1a0 [ 619.543948][T14047] rt_dst_alloc+0x35/0x3a0 [ 619.543985][T14047] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 619.544032][T14047] ? __lock_acquire+0x2682/0x3c40 [ 619.544074][T14047] ip_route_output_key_hash+0x138/0x2e0 [ 619.544117][T14047] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 619.544171][T14047] ? hlock_class+0x4e/0x130 [ 619.544222][T14047] tcp_v4_connect+0x7df/0x1b80 [ 619.544272][T14047] ? __pfx_tcp_v4_connect+0x10/0x10 [ 619.544313][T14047] ? __pfx_mark_lock+0x10/0x10 [ 619.544359][T14047] __inet_stream_connect+0x3c7/0x1020 [ 619.544398][T14047] ? find_held_lock+0x2d/0x110 [ 619.544459][T14047] ? __pfx___inet_stream_connect+0x10/0x10 [ 619.544498][T14047] ? __pfx_lock_release+0x10/0x10 [ 619.544533][T14047] ? mark_held_locks+0x9f/0xe0 [ 619.544565][T14047] ? __local_bh_enable_ip+0xa4/0x120 [ 619.544607][T14047] inet_stream_connect+0x57/0xa0 [ 619.544645][T14047] kernel_connect+0xdd/0x140 [ 619.544674][T14047] ? __pfx_kernel_connect+0x10/0x10 [ 619.544716][T14047] ? mark_held_locks+0x9f/0xe0 [ 619.544749][T14047] ? __local_bh_enable_ip+0xa4/0x120 [ 619.544790][T14047] smc_connect+0x4c7/0x760 [ 619.544825][T14047] ? __pfx_smc_connect+0x10/0x10 [ 619.544854][T14047] __sys_connect_file+0x13e/0x1a0 [ 619.544896][T14047] __sys_connect+0x14f/0x170 [ 619.544934][T14047] ? __pfx___sys_connect+0x10/0x10 [ 619.544985][T14047] ? __pfx_ksys_write+0x10/0x10 [ 619.545020][T14047] __x64_sys_connect+0x72/0xb0 [ 619.545055][T14047] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.545093][T14047] do_syscall_64+0xcd/0x250 [ 619.545137][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.545176][T14047] RIP: 0033:0x7fc2b938cda9 [ 619.545196][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.545221][T14047] RSP: 002b:00007fc2ba291038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 619.545245][T14047] RAX: ffffffffffffffda RBX: 00007fc2b95a5fa0 RCX: 00007fc2b938cda9 [ 619.545262][T14047] RDX: 0000000000000055 RSI: 00000000200000c0 RDI: 0000000000000003 [ 619.545279][T14047] RBP: 00007fc2ba291090 R08: 0000000000000000 R09: 0000000000000000 [ 619.545295][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.545311][T14047] R13: 0000000000000000 R14: 00007fc2b95a5fa0 R15: 00007ffc50ee9de8 [ 619.545352][T14047] [ 620.230039][T14050] block nbd0: not configured, cannot reconfigure [ 621.556421][T14070] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1994'. [ 621.576505][T14070] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1994'. [ 621.606238][T14070] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1994'. [ 621.656073][T14070] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1994'. [ 621.674947][T14070] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1994'. [ 622.778654][ T5147] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 622.778702][ T5147] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 622.794497][ T5147] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 622.794581][ T5147] Bluetooth: hci5: adv larger than maximum supported [ 622.802206][ T5147] Bluetooth: hci5: Malformed LE Event: 0x0d [ 625.116486][ T29] audit: type=1806 audit(4294967466.319:44): xattr=A0E90B1C res=-22 [ 625.368667][T14145] block nbd0: not configured, cannot reconfigure [ 626.965910][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 627.072036][T14183] FAULT_INJECTION: forcing a failure. [ 627.072036][T14183] name failslab, interval 1, probability 0, space 0, times 0 [ 627.072112][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.3.2022 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 627.072143][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 627.072160][T14183] Call Trace: [ 627.072169][T14183] [ 627.072179][T14183] dump_stack_lvl+0x16c/0x1f0 [ 627.072224][T14183] should_fail_ex+0x50a/0x650 [ 627.072256][T14183] ? fs_reclaim_acquire+0xae/0x150 [ 627.072304][T14183] should_failslab+0xc2/0x120 [ 627.072341][T14183] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 627.072381][T14183] ? kstrdup_const+0x63/0x80 [ 627.072433][T14183] kstrdup+0x42/0xb0 [ 627.072476][T14183] kstrdup_const+0x63/0x80 [ 627.072519][T14183] __kernfs_new_node+0x9c/0x890 [ 627.072569][T14183] ? hlock_class+0x4e/0x130 [ 627.072613][T14183] ? __pfx___kernfs_new_node+0x10/0x10 [ 627.072685][T14183] ? __pfx___lock_acquire+0x10/0x10 [ 627.072739][T14183] kernfs_new_node+0x186/0x240 [ 627.072768][T14183] ? lock_acquire.part.0+0x11b/0x380 [ 627.072804][T14183] kernfs_create_dir_ns+0x4c/0x150 [ 627.072839][T14183] sysfs_create_dir_ns+0x13b/0x2b0 [ 627.072881][T14183] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 627.072923][T14183] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 627.072963][T14183] ? kobject_add_internal+0x12d/0x990 [ 627.073009][T14183] ? class_dir_child_ns_type+0xd/0x60 [ 627.073067][T14183] kobject_add_internal+0x2c8/0x990 [ 627.073116][T14183] kobject_add+0x16f/0x240 [ 627.073139][T14183] ? __pfx_kobject_add+0x10/0x10 [ 627.073164][T14183] ? lock_acquire+0x2f/0xb0 [ 627.073191][T14183] ? get_device_parent+0x11f/0x4e0 [ 627.073220][T14183] ? kobject_put+0xab/0x5a0 [ 627.073261][T14183] ? device_add+0xc02/0x1a70 [ 627.073301][T14183] device_add+0x289/0x1a70 [ 627.073336][T14183] ? rcu_is_watching+0x12/0xc0 [ 627.073378][T14183] ? __pfx_device_add+0x10/0x10 [ 627.073442][T14183] device_create_groups_vargs+0x1f8/0x270 [ 627.073486][T14183] device_create+0xe9/0x130 [ 627.073525][T14183] ? __pfx_device_create+0x10/0x10 [ 627.073561][T14183] ? __pfx_lock_release+0x10/0x10 [ 627.073598][T14183] ? is_console_locked+0x9/0x20 [ 627.073627][T14183] ? con_is_visible+0x65/0x150 [ 627.073664][T14183] ? csi_J+0x547/0xad0 [ 627.073701][T14183] ? gotoxy+0x188/0x380 [ 627.073734][T14183] vcs_make_sysfs+0x32/0x80 [ 627.073768][T14183] vc_allocate+0x502/0x880 [ 627.073808][T14183] ? __pfx_vc_allocate+0x10/0x10 [ 627.073849][T14183] ? lock_acquire+0x2f/0xb0 [ 627.073880][T14183] ? con_install+0x9a/0x600 [ 627.073927][T14183] con_install+0xa2/0x600 [ 627.073970][T14183] ? __pfx_con_install+0x10/0x10 [ 627.074035][T14183] ? __pfx_con_install+0x10/0x10 [ 627.074079][T14183] tty_init_dev.part.0+0x99/0x660 [ 627.074130][T14183] tty_open+0xac1/0xf80 [ 627.074176][T14183] ? chrdev_open+0x596/0x6a0 [ 627.074218][T14183] ? __pfx_tty_open+0x10/0x10 [ 627.074263][T14183] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 627.074309][T14183] ? lock_acquire+0x2f/0xb0 [ 627.074343][T14183] ? chrdev_open+0x36b/0x6a0 [ 627.074392][T14183] ? __pfx_tty_open+0x10/0x10 [ 627.074456][T14183] chrdev_open+0x237/0x6a0 [ 627.074493][T14183] ? __pfx_chrdev_open+0x10/0x10 [ 627.074535][T14183] ? file_set_fsnotify_mode+0x163/0x5d0 [ 627.074587][T14183] do_dentry_open+0x735/0x1c40 [ 627.074620][T14183] ? __pfx_chrdev_open+0x10/0x10 [ 627.074662][T14183] ? inode_permission+0xdd/0x5f0 [ 627.074709][T14183] vfs_open+0x82/0x3f0 [ 627.074747][T14183] ? may_open+0x1f2/0x400 [ 627.074793][T14183] path_openat+0x1e88/0x2d80 [ 627.074841][T14183] ? __pfx_path_openat+0x10/0x10 [ 627.074874][T14183] ? __pfx___lock_acquire+0x10/0x10 [ 627.074907][T14183] ? lock_acquire.part.0+0x11b/0x380 [ 627.074943][T14183] ? find_held_lock+0x2d/0x110 [ 627.074995][T14183] do_filp_open+0x20c/0x470 [ 627.075029][T14183] ? __pfx_do_filp_open+0x10/0x10 [ 627.075059][T14183] ? find_held_lock+0x2d/0x110 [ 627.075135][T14183] ? alloc_fd+0x41f/0x760 [ 627.075180][T14183] do_sys_openat2+0x17a/0x1e0 [ 627.075222][T14183] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.075281][T14183] __x64_sys_openat+0x175/0x210 [ 627.075324][T14183] ? __pfx___x64_sys_openat+0x10/0x10 [ 627.075384][T14183] do_syscall_64+0xcd/0x250 [ 627.075433][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.075476][T14183] RIP: 0033:0x7f199cf8cda9 [ 627.075498][T14183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.075526][T14183] RSP: 002b:00007f199de9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 627.075553][T14183] RAX: ffffffffffffffda RBX: 00007f199d1a5fa0 RCX: 00007f199cf8cda9 [ 627.075573][T14183] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 627.075592][T14183] RBP: 00007f199d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 627.075610][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.075627][T14183] R13: 0000000000000000 R14: 00007f199d1a5fa0 R15: 00007ffe91cd7bc8 [ 627.075675][T14183] [ 627.086560][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'. [ 627.091231][T14183] kobject: kobject_add_internal failed for vcs29 (error: -12 parent: vc) [ 627.482490][T14198] block nbd0: not configured, cannot reconfigure [ 628.306128][T14203] block nbd0: not configured, cannot reconfigure [ 628.378447][T14183] tty tty29: ldisc open failed (-12), clearing slot 28 [ 628.393318][T14189] tty tty29: ldisc open failed (-12), clearing slot 28 [ 629.234209][T14217] FAULT_INJECTION: forcing a failure. [ 629.234209][T14217] name failslab, interval 1, probability 0, space 0, times 0 [ 629.254573][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.5.2029 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 629.254612][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 629.254630][T14217] Call Trace: [ 629.254639][T14217] [ 629.254650][T14217] dump_stack_lvl+0x16c/0x1f0 [ 629.254701][T14217] should_fail_ex+0x50a/0x650 [ 629.254737][T14217] ? fs_reclaim_acquire+0xae/0x150 [ 629.254786][T14217] should_failslab+0xc2/0x120 [ 629.254845][T14217] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 629.254880][T14217] ? lock_acquire+0x2f/0xb0 [ 629.254917][T14217] ? __proc_create+0xa4/0x8b0 [ 629.254950][T14217] ? __proc_create+0x2c3/0x8b0 [ 629.254991][T14217] __proc_create+0x2c3/0x8b0 [ 629.255027][T14217] ? __pfx___proc_create+0x10/0x10 [ 629.255064][T14217] ? _raw_write_unlock+0x28/0x50 [ 629.255122][T14217] _proc_mkdir+0xbb/0x200 [ 629.255158][T14217] ? __pfx__proc_mkdir+0x10/0x10 [ 629.255192][T14217] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 629.255238][T14217] ? __pfx_netfilter_net_init+0x10/0x10 [ 629.255284][T14217] netfilter_net_init+0x37b/0x4b0 [ 629.255314][T14217] ? sysctl_net_init+0x27/0x30 [ 629.255357][T14217] ops_init+0x1df/0x5f0 [ 629.255392][T14217] setup_net+0x21f/0x860 [ 629.255425][T14217] ? __pfx_setup_net+0x10/0x10 [ 629.255453][T14217] ? down_read_killable+0xcc/0x380 [ 629.255494][T14217] ? __pfx_down_read_killable+0x10/0x10 [ 629.255529][T14217] ? debug_mutex_init+0x37/0x70 [ 629.255584][T14217] copy_net_ns+0x2b4/0x6c0 [ 629.255618][T14217] create_new_namespaces+0x3ea/0xad0 [ 629.255671][T14217] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 629.255719][T14217] ksys_unshare+0x45d/0xa40 [ 629.255767][T14217] ? __pfx_ksys_unshare+0x10/0x10 [ 629.255814][T14217] ? xfd_validate_state+0x5d/0x180 [ 629.255867][T14217] __x64_sys_unshare+0x31/0x40 [ 629.255917][T14217] do_syscall_64+0xcd/0x250 [ 629.255967][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.256010][T14217] RIP: 0033:0x7f651b18cda9 [ 629.256033][T14217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.256062][T14217] RSP: 002b:00007f651c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 629.256092][T14217] RAX: ffffffffffffffda RBX: 00007f651b3a5fa0 RCX: 00007f651b18cda9 [ 629.256111][T14217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 629.256130][T14217] RBP: 00007f651b20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 629.256149][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.256168][T14217] R13: 0000000000000000 R14: 00007f651b3a5fa0 R15: 00007fff49ff2858 [ 629.256205][T14217] [ 629.256218][T14217] cannot create netfilter proc entry [ 629.639814][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.651651][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.901379][T14230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2032'. [ 630.837045][T14245] block nbd0: not configured, cannot reconfigure [ 630.855886][T14245] ubi0: attaching mtd0 [ 630.861215][T14245] ubi0: scanning is finished [ 630.869265][T14245] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 631.365569][T14245] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 631.824677][T14230] syz.3.2032 (14230) used greatest stack depth: 20992 bytes left [ 632.072728][T14258] block nbd0: not configured, cannot reconfigure [ 632.962022][T14258] Process accounting resumed [ 633.026408][T14258] db_root: cannot open:  [ 633.167445][T14210] db_root: cannot open:  [ 633.529046][T14278] ptrace attach of "./syz-executor exec"[10901] was attempted by ""[14278] [ 635.486566][T14275] db_root: cannot open:  [ 635.716842][T14302] block nbd0: not configured, cannot reconfigure [ 636.532918][T14301] db_root: cannot open:  [ 636.608478][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2050'. [ 636.762405][T14315] FAULT_INJECTION: forcing a failure. [ 636.762405][T14315] name failslab, interval 1, probability 0, space 0, times 0 [ 636.821180][T14315] CPU: 0 UID: 0 PID: 14315 Comm: syz.6.2052 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 636.821222][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.821240][T14315] Call Trace: [ 636.821249][T14315] [ 636.821260][T14315] dump_stack_lvl+0x16c/0x1f0 [ 636.821307][T14315] should_fail_ex+0x50a/0x650 [ 636.821341][T14315] ? fs_reclaim_acquire+0xae/0x150 [ 636.821392][T14315] should_failslab+0xc2/0x120 [ 636.821430][T14315] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 636.821466][T14315] ? ioctx_alloc+0x1a1/0x1fb0 [ 636.821516][T14315] ioctx_alloc+0x1a1/0x1fb0 [ 636.821565][T14315] ? __might_fault+0x13b/0x190 [ 636.821605][T14315] ? __pfx_lock_release+0x10/0x10 [ 636.821640][T14315] ? trace_lock_acquire+0x14e/0x1f0 [ 636.821672][T14315] ? __pfx_ioctx_alloc+0x10/0x10 [ 636.821716][T14315] ? lock_acquire+0x2f/0xb0 [ 636.821747][T14315] ? __might_fault+0xe3/0x190 [ 636.821786][T14315] ? __might_fault+0xe3/0x190 [ 636.821839][T14315] __x64_sys_io_setup+0xc9/0x210 [ 636.821890][T14315] do_syscall_64+0xcd/0x250 [ 636.821937][T14315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.821980][T14315] RIP: 0033:0x7fe1f798cda9 [ 636.822002][T14315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.822031][T14315] RSP: 002b:00007fe1f8765038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 636.822057][T14315] RAX: ffffffffffffffda RBX: 00007fe1f7ba5fa0 RCX: 00007fe1f798cda9 [ 636.822076][T14315] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 000000000000ffff [ 636.822094][T14315] RBP: 00007fe1f7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.822112][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.822130][T14315] R13: 0000000000000000 R14: 00007fe1f7ba5fa0 R15: 00007ffe8d9d9228 [ 636.822165][T14315] [ 637.204766][T14316] can: request_module (can-proto-0) failed. [ 637.569486][T14311] db_root: cannot open:  [ 637.686304][T14323] HfR: entered promiscuous mode [ 637.747297][T14328] FAULT_INJECTION: forcing a failure. [ 637.747297][T14328] name failslab, interval 1, probability 0, space 0, times 0 [ 637.765356][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2054'. [ 637.771181][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.3.2056 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 637.771218][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 637.771235][T14328] Call Trace: [ 637.771243][T14328] [ 637.771254][T14328] dump_stack_lvl+0x16c/0x1f0 [ 637.771301][T14328] should_fail_ex+0x50a/0x650 [ 637.771333][T14328] ? fs_reclaim_acquire+0xae/0x150 [ 637.771383][T14328] should_failslab+0xc2/0x120 [ 637.771419][T14328] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 637.771455][T14328] ? __alloc_skb+0x2b3/0x380 [ 637.771504][T14328] __alloc_skb+0x2b3/0x380 [ 637.771547][T14328] ? __pfx___alloc_skb+0x10/0x10 [ 637.771589][T14328] ? do_syscall_64+0xcd/0x250 [ 637.771630][T14328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.771676][T14328] ? raw_getfrag+0x1f4/0x270 [ 637.771720][T14328] __ip_append_data+0x30c3/0x4160 [ 637.771774][T14328] ? __pfx_raw_getfrag+0x10/0x10 [ 637.771828][T14328] ? __pfx___ip_append_data+0x10/0x10 [ 637.771863][T14328] ? kasan_save_track+0x14/0x30 [ 637.771893][T14328] ? __kasan_kmalloc+0xaa/0xb0 [ 637.771930][T14328] ip_append_data+0x10f/0x1a0 [ 637.771968][T14328] ? __pfx_raw_getfrag+0x10/0x10 [ 637.772010][T14328] raw_sendmsg+0xd66/0x3870 [ 637.772066][T14328] ? __pfx_raw_sendmsg+0x10/0x10 [ 637.772118][T14328] ? find_held_lock+0x2d/0x110 [ 637.772175][T14328] ? __pfx___might_resched+0x10/0x10 [ 637.772214][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 637.772257][T14328] ? aa_sk_perm+0x2f5/0xb20 [ 637.772310][T14328] ? find_held_lock+0x2d/0x110 [ 637.772356][T14328] ? __pfx_raw_sendmsg+0x10/0x10 [ 637.772398][T14328] inet_sendmsg+0x119/0x140 [ 637.772441][T14328] sock_write_iter+0x4ac/0x5b0 [ 637.772479][T14328] ? __pfx_sock_write_iter+0x10/0x10 [ 637.772534][T14328] ? rw_verify_area+0xcf/0x680 [ 637.772587][T14328] vfs_write+0x5ae/0x1150 [ 637.772616][T14328] ? __pfx_sock_write_iter+0x10/0x10 [ 637.772655][T14328] ? __pfx_vfs_write+0x10/0x10 [ 637.772686][T14328] ? __fget_files+0x40/0x3a0 [ 637.772734][T14328] ksys_write+0x207/0x250 [ 637.772790][T14328] ? __pfx_ksys_write+0x10/0x10 [ 637.772829][T14328] do_syscall_64+0xcd/0x250 [ 637.772875][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.772915][T14328] RIP: 0033:0x7f199cf8cda9 [ 637.772936][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.772964][T14328] RSP: 002b:00007f199de7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.772989][T14328] RAX: ffffffffffffffda RBX: 00007f199d1a6080 RCX: 00007f199cf8cda9 [ 637.773007][T14328] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 637.773024][T14328] RBP: 00007f199de7c090 R08: 0000000000000000 R09: 0000000000000000 [ 637.773041][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.773057][T14328] R13: 0000000000000000 R14: 00007f199d1a6080 R15: 00007ffe91cd7bc8 [ 637.773094][T14328] [ 638.134586][T14323] HfR: left promiscuous mode [ 638.560527][T14324] db_root: cannot open:  [ 640.023672][T14349] db_root: cannot open:  [ 641.011440][T14356] db_root: cannot open:  [ 641.520827][T14374] db_root: cannot open:  [ 641.597126][T14365] db_root: cannot open:  [ 642.630230][T14385] db_root: cannot open:  [ 643.688873][T14409] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2076'. [ 643.764631][T14409] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 644.273300][T14398] db_root: cannot open:  [ 644.647072][T14422] db_root: cannot open:  [ 644.933327][T14432] db_root: cannot open:  [ 645.617997][T14437] db_root: cannot open:  [ 646.198990][T14460] FAULT_INJECTION: forcing a failure. [ 646.198990][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 646.251801][T14460] CPU: 1 UID: 0 PID: 14460 Comm: syz.4.2087 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 646.251843][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 646.251860][T14460] Call Trace: [ 646.251868][T14460] [ 646.251879][T14460] dump_stack_lvl+0x16c/0x1f0 [ 646.251930][T14460] should_fail_ex+0x50a/0x650 [ 646.251969][T14460] should_failslab+0xc2/0x120 [ 646.252007][T14460] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 646.252044][T14460] ? skb_clone+0x190/0x3f0 [ 646.252079][T14460] skb_clone+0x190/0x3f0 [ 646.252109][T14460] netlink_deliver_tap+0xafd/0xca0 [ 646.252194][T14460] netlink_unicast+0x5e1/0x7f0 [ 646.252254][T14460] ? __pfx_netlink_unicast+0x10/0x10 [ 646.252303][T14460] ? __phys_addr_symbol+0x30/0x80 [ 646.252353][T14460] ? __check_object_size+0x488/0x710 [ 646.252397][T14460] netlink_sendmsg+0x8b8/0xd70 [ 646.252449][T14460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.252505][T14460] ____sys_sendmsg+0x9ae/0xb40 [ 646.252544][T14460] ? copy_msghdr_from_user+0x10b/0x160 [ 646.252593][T14460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.252630][T14460] ? __lock_acquire+0xcc5/0x3c40 [ 646.252684][T14460] ___sys_sendmsg+0x135/0x1e0 [ 646.252736][T14460] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.252802][T14460] ? trace_lock_acquire+0x14e/0x1f0 [ 646.252864][T14460] __sys_sendmmsg+0x201/0x420 [ 646.252898][T14460] ? __pfx___sys_sendmmsg+0x10/0x10 [ 646.252941][T14460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.253009][T14460] ? fput+0x67/0x440 [ 646.253047][T14460] ? ksys_write+0x1ba/0x250 [ 646.253077][T14460] ? __pfx_ksys_write+0x10/0x10 [ 646.253115][T14460] __x64_sys_sendmmsg+0x9c/0x100 [ 646.253142][T14460] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.253196][T14460] do_syscall_64+0xcd/0x250 [ 646.253249][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.253302][T14460] RIP: 0033:0x7fc2b938cda9 [ 646.253325][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.253353][T14460] RSP: 002b:00007fc2ba24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 646.253381][T14460] RAX: ffffffffffffffda RBX: 00007fc2b95a6160 RCX: 00007fc2b938cda9 [ 646.253400][T14460] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 646.253417][T14460] RBP: 00007fc2ba24f090 R08: 0000000000000000 R09: 0000000000000000 [ 646.253435][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.253453][T14460] R13: 0000000000000000 R14: 00007fc2b95a6160 R15: 00007ffc50ee9de8 [ 646.253491][T14460] [ 646.686875][T14460] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2087'. [ 646.828062][T14447] db_root: cannot open:  [ 647.256560][T14466] db_root: cannot open:  [ 647.425658][T14472] FAULT_INJECTION: forcing a failure. [ 647.425658][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.464558][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.3.2093 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 647.464594][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 647.464610][T14472] Call Trace: [ 647.464619][T14472] [ 647.464629][T14472] dump_stack_lvl+0x16c/0x1f0 [ 647.464676][T14472] should_fail_ex+0x50a/0x650 [ 647.464714][T14472] _copy_to_iter+0x4a5/0x1400 [ 647.464759][T14472] ? __pfx__copy_to_iter+0x10/0x10 [ 647.464794][T14472] ? __virt_addr_valid+0x1a4/0x590 [ 647.464828][T14472] ? __virt_addr_valid+0x5e/0x590 [ 647.464854][T14472] ? __phys_addr_symbol+0x30/0x80 [ 647.464898][T14472] ? __check_object_size+0x488/0x710 [ 647.464940][T14472] seq_read_iter+0xd00/0x12b0 [ 647.465001][T14472] seq_read+0x39f/0x4e0 [ 647.465045][T14472] ? __pfx_seq_read+0x10/0x10 [ 647.465111][T14472] ? __pfx_seq_read+0x10/0x10 [ 647.465155][T14472] proc_reg_read+0x23d/0x330 [ 647.465186][T14472] ? __pfx_proc_reg_read+0x10/0x10 [ 647.465218][T14472] vfs_read+0x1df/0xbf0 [ 647.465257][T14472] ? __fget_files+0x1fc/0x3a0 [ 647.465286][T14472] ? __pfx_lock_release+0x10/0x10 [ 647.465322][T14472] ? __pfx_vfs_read+0x10/0x10 [ 647.465351][T14472] ? lock_acquire+0x2f/0xb0 [ 647.465383][T14472] ? __fget_files+0x40/0x3a0 [ 647.465416][T14472] ? __fget_files+0x206/0x3a0 [ 647.465455][T14472] __x64_sys_pread64+0x1f6/0x250 [ 647.465486][T14472] ? __pfx___x64_sys_pread64+0x10/0x10 [ 647.465527][T14472] do_syscall_64+0xcd/0x250 [ 647.465573][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.465613][T14472] RIP: 0033:0x7f199cf8cda9 [ 647.465634][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.465661][T14472] RSP: 002b:00007f199de9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 647.465687][T14472] RAX: ffffffffffffffda RBX: 00007f199d1a5fa0 RCX: 00007f199cf8cda9 [ 647.465706][T14472] RDX: 000000000000f429 RSI: 0000000000000000 RDI: 0000000000000003 [ 647.465722][T14472] RBP: 00007f199de9d090 R08: 0000000000000000 R09: 0000000000000000 [ 647.465739][T14472] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 647.465756][T14472] R13: 0000000000000000 R14: 00007f199d1a5fa0 R15: 00007ffe91cd7bc8 [ 647.465792][T14472] [ 647.868440][T14472] db_root: cannot open:  [ 648.448108][T14475] db_root: cannot open:  [ 649.542764][T14481] db_root: cannot open:  [ 649.816419][T14494] netlink: 'syz.3.2099': attribute type 116 has an invalid length. [ 649.967172][T14494] db_root: cannot open:  [ 650.305621][T14506] db_root: cannot open:  [ 650.545911][T14515] block nbd0: not configured, cannot reconfigure [ 651.325873][T14511] db_root: cannot open:  [ 651.645138][T14533] block nbd0: not configured, cannot reconfigure [ 651.954181][T14484] db_root: cannot open:  [ 652.395803][T14530] db_root: cannot open:  [ 652.956105][T14544] : entered promiscuous mode [ 653.660055][T14549] db_root: cannot open:  [ 653.958058][T14566] block nbd0: not configured, cannot reconfigure [ 654.223665][T14563] db_root: cannot open:  [ 654.732656][T14570] db_root: cannot open:  [ 654.991372][T14579] block nbd0: not configured, cannot reconfigure [ 655.524234][T14586] db_root: cannot open:  [ 655.908080][T14578] db_root: cannot open:  [ 656.198593][T14601] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L,ªRsVÈ;' [ 656.294742][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.3.2128 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 656.294789][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 656.294809][T14601] Call Trace: [ 656.294818][T14601] [ 656.294830][T14601] dump_stack_lvl+0x16c/0x1f0 [ 656.294886][T14601] sysfs_warn_dup+0x7f/0xa0 [ 656.294937][T14601] sysfs_do_create_link_sd+0x124/0x140 [ 656.294994][T14601] sysfs_create_link+0x61/0xc0 [ 656.295045][T14601] device_add+0x62e/0x1a70 [ 656.295093][T14601] ? __pfx_device_add+0x10/0x10 [ 656.295135][T14601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 656.295200][T14601] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 656.295267][T14601] wiphy_register+0x1c7a/0x2860 [ 656.295307][T14601] ? netdev_run_todo+0x8fc/0x13d0 [ 656.295352][T14601] ? __pfx_wiphy_register+0x10/0x10 [ 656.295429][T14601] ieee80211_register_hw+0x23ff/0x3ff0 [ 656.295486][T14601] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 656.295523][T14601] ? net_generic+0xea/0x2a0 [ 656.295570][T14601] ? lockdep_init_map_type+0x16d/0x7d0 [ 656.295618][T14601] ? rcu_is_watching+0x12/0xc0 [ 656.295667][T14601] ? trace_hrtimer_init+0x1a6/0x230 [ 656.295711][T14601] ? __hrtimer_init+0x106/0x2c0 [ 656.295762][T14601] mac80211_hwsim_new_radio+0x2c47/0x56d0 [ 656.295842][T14601] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 656.295894][T14601] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 656.295956][T14601] hwsim_new_radio_nl+0xb42/0x12b0 [ 656.296010][T14601] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 656.296075][T14601] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 656.296129][T14601] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 656.296191][T14601] genl_family_rcv_msg_doit+0x202/0x2f0 [ 656.296245][T14601] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 656.296296][T14601] ? trace_cap_capable+0x1a2/0x210 [ 656.296356][T14601] ? bpf_lsm_capable+0x9/0x10 [ 656.296418][T14601] ? security_capable+0x7e/0x260 [ 656.296469][T14601] ? ns_capable+0xd7/0x110 [ 656.296517][T14601] genl_rcv_msg+0x565/0x800 [ 656.296573][T14601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.296624][T14601] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 656.296692][T14601] netlink_rcv_skb+0x165/0x410 [ 656.296737][T14601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.296790][T14601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.296855][T14601] ? down_read+0xc9/0x330 [ 656.296906][T14601] ? __pfx_down_read+0x10/0x10 [ 656.296958][T14601] ? netlink_deliver_tap+0x1ae/0xca0 [ 656.297008][T14601] genl_rcv+0x28/0x40 [ 656.297053][T14601] netlink_unicast+0x53c/0x7f0 [ 656.297102][T14601] ? __pfx_netlink_unicast+0x10/0x10 [ 656.297149][T14601] ? __phys_addr_symbol+0x30/0x80 [ 656.297202][T14601] ? __check_object_size+0x488/0x710 [ 656.297250][T14601] netlink_sendmsg+0x8b8/0xd70 [ 656.297301][T14601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.297362][T14601] ____sys_sendmsg+0x9ae/0xb40 [ 656.297412][T14601] ? copy_msghdr_from_user+0x10b/0x160 [ 656.297466][T14601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.297531][T14601] ___sys_sendmsg+0x135/0x1e0 [ 656.297587][T14601] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.297659][T14601] ? __pfx_lock_release+0x10/0x10 [ 656.297699][T14601] ? trace_lock_acquire+0x14e/0x1f0 [ 656.297746][T14601] ? __fget_files+0x206/0x3a0 [ 656.297794][T14601] __sys_sendmsg+0x16e/0x220 [ 656.297825][T14601] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.297857][T14601] ? __x64_sys_futex+0x1e1/0x4c0 [ 656.297918][T14601] do_syscall_64+0xcd/0x250 [ 656.297971][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.298018][T14601] RIP: 0033:0x7f199cf8cda9 [ 656.298044][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.298076][T14601] RSP: 002b:00007f199de9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.298107][T14601] RAX: ffffffffffffffda RBX: 00007f199d1a5fa0 RCX: 00007f199cf8cda9 [ 656.298128][T14601] RDX: 0000000004000800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 656.298148][T14601] RBP: 00007f199d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 656.298167][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.298187][T14601] R13: 0000000000000000 R14: 00007f199d1a5fa0 R15: 00007ffe91cd7bc8 [ 656.298231][T14601] [ 657.010397][T14600] db_root: cannot open:  [ 657.062101][T14550] db_root: cannot open:  [ 657.285948][T14611] process 'syz.6.2130' launched './file0' with NULL argv: empty string added [ 657.370430][T14613] block nbd0: not configured, cannot reconfigure [ 658.470614][T14606] db_root: cannot open:  [ 658.648738][T14620] can: request_module (can-proto-0) failed. [ 659.103919][T14628] FAULT_INJECTION: forcing a failure. [ 659.103919][T14628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 659.123561][T14628] CPU: 0 UID: 0 PID: 14628 Comm: syz.3.2134 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 659.123602][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 659.123620][T14628] Call Trace: [ 659.123629][T14628] [ 659.123640][T14628] dump_stack_lvl+0x16c/0x1f0 [ 659.123691][T14628] should_fail_ex+0x50a/0x650 [ 659.123724][T14628] ? __pfx___might_resched+0x10/0x10 [ 659.123770][T14628] should_fail_alloc_page+0xe7/0x130 [ 659.123813][T14628] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 659.123866][T14628] ? hlock_class+0x4e/0x130 [ 659.123918][T14628] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 659.123958][T14628] ? __pfx_mark_lock+0x10/0x10 [ 659.123996][T14628] ? hlock_class+0x4e/0x130 [ 659.124043][T14628] ? mark_lock+0xb5/0xc60 [ 659.124077][T14628] ? hlock_class+0x4e/0x130 [ 659.124125][T14628] ? mark_lock+0xb5/0xc60 [ 659.124162][T14628] ? __pfx_mark_lock+0x10/0x10 [ 659.124208][T14628] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 659.124256][T14628] ? hlock_class+0x4e/0x130 [ 659.124314][T14628] ? hlock_class+0x4e/0x130 [ 659.124361][T14628] ? __lock_acquire+0xcc5/0x3c40 [ 659.124395][T14628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 659.124443][T14628] ? policy_nodemask+0xea/0x4e0 [ 659.124485][T14628] alloc_pages_mpol+0x1fc/0x540 [ 659.124525][T14628] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 659.124565][T14628] ? __pfx___lock_acquire+0x10/0x10 [ 659.124611][T14628] alloc_pages_noprof+0x131/0x390 [ 659.124650][T14628] get_free_pages_noprof+0xc/0x40 [ 659.124694][T14628] __pollwait+0x291/0x4c0 [ 659.124747][T14628] ? __pfx___pollwait+0x10/0x10 [ 659.124793][T14628] tcp_poll+0xbf/0xf80 [ 659.124833][T14628] ? __pfx_lock_release+0x10/0x10 [ 659.124873][T14628] ? __pfx_tcp_poll+0x10/0x10 [ 659.124911][T14628] ? lock_acquire+0x2f/0xb0 [ 659.124947][T14628] ? __fget_files+0x40/0x3a0 [ 659.124988][T14628] ? __pfx_tcp_poll+0x10/0x10 [ 659.125028][T14628] sock_poll+0x15e/0x510 [ 659.125069][T14628] ? __pfx_sock_poll+0x10/0x10 [ 659.125102][T14628] do_select+0xd88/0x17e0 [ 659.125156][T14628] ? __pfx_do_select+0x10/0x10 [ 659.125184][T14628] ? __pfx_mark_lock+0x10/0x10 [ 659.125225][T14628] ? mark_lock+0xb5/0xc60 [ 659.125261][T14628] ? __pfx___pollwait+0x10/0x10 [ 659.125317][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125349][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125381][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125413][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125444][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125476][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125508][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125540][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125571][T14628] ? __pfx_pollwake+0x10/0x10 [ 659.125600][T14628] ? trace_lock_acquire+0x14e/0x1f0 [ 659.125634][T14628] ? lock_acquire+0x2f/0xb0 [ 659.125670][T14628] ? __might_fault+0xe3/0x190 [ 659.125711][T14628] ? __might_fault+0xe3/0x190 [ 659.125760][T14628] ? core_sys_select+0x3a6/0xa10 [ 659.125789][T14628] core_sys_select+0x3a6/0xa10 [ 659.125825][T14628] ? __pfx_core_sys_select+0x10/0x10 [ 659.125862][T14628] ? find_held_lock+0x2d/0x110 [ 659.125940][T14628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 659.125996][T14628] kern_select+0x15e/0x1e0 [ 659.126026][T14628] ? __pfx_kern_select+0x10/0x10 [ 659.126062][T14628] ? __pfx_ksys_write+0x10/0x10 [ 659.126098][T14628] __x64_sys_select+0xbd/0x160 [ 659.126126][T14628] ? do_syscall_64+0x91/0x250 [ 659.126172][T14628] ? lockdep_hardirqs_on+0x7c/0x110 [ 659.126223][T14628] do_syscall_64+0xcd/0x250 [ 659.126272][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.126316][T14628] RIP: 0033:0x7f199cf8cda9 [ 659.126340][T14628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.126369][T14628] RSP: 002b:00007f199de5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 659.126397][T14628] RAX: ffffffffffffffda RBX: 00007f199d1a6160 RCX: 00007f199cf8cda9 [ 659.126415][T14628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 659.126431][T14628] RBP: 00007f199de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 659.126448][T14628] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 659.126464][T14628] R13: 0000000000000000 R14: 00007f199d1a6160 R15: 00007ffe91cd7bc8 [ 659.126499][T14628] [ 659.707633][T14634] block nbd0: not configured, cannot reconfigure [ 659.764149][T14626] can: request_module (can-proto-0) failed. [ 659.923162][T14628] db_root: cannot open:  [ 660.437201][T14640] db_root: cannot open:  [ 660.857435][T14654] db_root: cannot open:  [ 660.909891][T14662] block nbd0: not configured, cannot reconfigure [ 661.494763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 662.619812][T14679] can: request_module (can-proto-0) failed. [ 663.173763][T14684] can: request_module (can-proto-0) failed. [ 663.220732][T14682] Process accounting paused [ 663.559038][T14703] block nbd0: not configured, cannot reconfigure [ 664.772811][T14716] block nbd0: not configured, cannot reconfigure [ 665.208791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 666.095683][T14728] can: request_module (can-proto-0) failed. [ 666.983050][T14753] block nbd0: not configured, cannot reconfigure [ 667.090559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 667.249557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 667.295426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 667.620200][T14759] FAULT_INJECTION: forcing a failure. [ 667.620200][T14759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.721940][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.4.2167 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 667.721977][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 667.721994][T14759] Call Trace: [ 667.722002][T14759] [ 667.722014][T14759] dump_stack_lvl+0x16c/0x1f0 [ 667.722061][T14759] should_fail_ex+0x50a/0x650 [ 667.722102][T14759] _copy_to_iter+0x29b/0x1400 [ 667.722144][T14759] ? trace_lock_acquire+0x14e/0x1f0 [ 667.722173][T14759] ? __pfx_lock_release+0x10/0x10 [ 667.722212][T14759] ? __pfx__copy_to_iter+0x10/0x10 [ 667.722250][T14759] ? __virt_addr_valid+0x1a4/0x590 [ 667.722285][T14759] ? __virt_addr_valid+0x5e/0x590 [ 667.722314][T14759] ? __phys_addr_symbol+0x30/0x80 [ 667.722363][T14759] ? __check_object_size+0x488/0x710 [ 667.722408][T14759] seq_read_iter+0xd00/0x12b0 [ 667.722480][T14759] kernfs_fop_read_iter+0x414/0x580 [ 667.722529][T14759] ? rw_verify_area+0xcf/0x680 [ 667.722577][T14759] vfs_read+0x886/0xbf0 [ 667.722611][T14759] ? __pfx_vfs_read+0x10/0x10 [ 667.722663][T14759] ksys_read+0x12b/0x250 [ 667.722691][T14759] ? __pfx_ksys_read+0x10/0x10 [ 667.722730][T14759] do_syscall_64+0xcd/0x250 [ 667.722776][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.722817][T14759] RIP: 0033:0x7fc2b938cda9 [ 667.722838][T14759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.722865][T14759] RSP: 002b:00007fc2ba291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.722891][T14759] RAX: ffffffffffffffda RBX: 00007fc2b95a5fa0 RCX: 00007fc2b938cda9 [ 667.722909][T14759] RDX: 00000000000000fa RSI: 0000000020000180 RDI: 0000000000000003 [ 667.722926][T14759] RBP: 00007fc2ba291090 R08: 0000000000000000 R09: 0000000000000000 [ 667.722943][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.722960][T14759] R13: 0000000000000000 R14: 00007fc2b95a5fa0 R15: 00007ffc50ee9de8 [ 667.722996][T14759] [ 668.071884][T14766] block nbd0: not configured, cannot reconfigure [ 668.115912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 668.125397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 670.888056][T14804] Ignoring unsupported numa_zonelist_order value: [ 670.888056][T14804] [ 671.300779][T14812] block nbd0: not configured, cannot reconfigure [ 671.329362][T14813] block nbd0: not configured, cannot reconfigure [ 672.495072][T14832] FAULT_INJECTION: forcing a failure. [ 672.495072][T14832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.550614][T14832] CPU: 0 UID: 0 PID: 14832 Comm: syz.6.2186 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 672.550653][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 672.550670][T14832] Call Trace: [ 672.550678][T14832] [ 672.550690][T14832] dump_stack_lvl+0x16c/0x1f0 [ 672.550737][T14832] should_fail_ex+0x50a/0x650 [ 672.550775][T14832] _copy_from_user+0x2e/0xd0 [ 672.550817][T14832] memdup_user+0x71/0xd0 [ 672.550864][T14832] strndup_user+0x78/0xe0 [ 672.550913][T14832] __x64_sys_mount+0x138/0x310 [ 672.550951][T14832] ? __pfx___x64_sys_mount+0x10/0x10 [ 672.550986][T14832] ? syscall_user_dispatch+0x77/0x140 [ 672.551038][T14832] do_syscall_64+0xcd/0x250 [ 672.551087][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.551136][T14832] RIP: 0033:0x7fe1f798cda9 [ 672.551158][T14832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.551188][T14832] RSP: 002b:00007fe1f8765038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 672.551215][T14832] RAX: ffffffffffffffda RBX: 00007fe1f7ba5fa0 RCX: 00007fe1f798cda9 [ 672.551235][T14832] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 672.551253][T14832] RBP: 00007fe1f8765090 R08: 0000000000000000 R09: 0000000000000000 [ 672.551271][T14832] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 672.551289][T14832] R13: 0000000000000000 R14: 00007fe1f7ba5fa0 R15: 00007ffe8d9d9228 [ 672.551326][T14832] [ 674.235793][T14855] block nbd0: not configured, cannot reconfigure [ 674.618058][T14847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.641306][T14847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.666609][T14847] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 674.736470][T14847] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 674.757293][T14847] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 674.779038][T14847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 674.796676][T14847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 674.821640][T14847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 675.348866][T14867] block nbd0: not configured, cannot reconfigure [ 676.205094][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 676.675660][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 676.764514][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 676.835024][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.555554][T14909] block nbd0: not configured, cannot reconfigure [ 678.475068][T14924] block nbd0: not configured, cannot reconfigure [ 678.754868][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 678.834585][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 678.916512][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.321931][T14965] block nbd0: not configured, cannot reconfigure [ 680.527096][T14967] FAULT_INJECTION: forcing a failure. [ 680.527096][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 680.544544][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.5.2222 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 680.544581][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 680.544598][T14967] Call Trace: [ 680.544606][T14967] [ 680.544617][T14967] dump_stack_lvl+0x16c/0x1f0 [ 680.544667][T14967] should_fail_ex+0x50a/0x650 [ 680.544701][T14967] ? fs_reclaim_acquire+0xae/0x150 [ 680.544751][T14967] should_failslab+0xc2/0x120 [ 680.544790][T14967] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 680.544828][T14967] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 680.544865][T14967] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 680.544896][T14967] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 680.544930][T14967] alloc_inode+0x5d/0x230 [ 680.544967][T14967] new_inode+0x22/0x210 [ 680.545006][T14967] hugetlbfs_get_inode+0x358/0x740 [ 680.545048][T14967] hugetlb_file_setup+0x15b/0x620 [ 680.545087][T14967] ksys_mmap_pgoff+0x189/0x5c0 [ 680.545142][T14967] __x64_sys_mmap+0x125/0x190 [ 680.545187][T14967] do_syscall_64+0xcd/0x250 [ 680.545233][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.545275][T14967] RIP: 0033:0x7f651b18cda9 [ 680.545297][T14967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.545326][T14967] RSP: 002b:00007f651c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 680.545361][T14967] RAX: ffffffffffffffda RBX: 00007f651b3a5fa0 RCX: 00007f651b18cda9 [ 680.545380][T14967] RDX: 00004000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 680.545399][T14967] RBP: 00007f651b20e2a0 R08: 0000000000000006 R09: 0000300000000000 [ 680.545436][T14967] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 680.545456][T14967] R13: 0000000000000000 R14: 00007f651b3a5fa0 R15: 00007fff49ff2858 [ 680.545494][T14967] [ 681.004648][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.033929][T14974] block nbd0: not configured, cannot reconfigure [ 684.517915][T15017] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 685.517761][ T5147] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 685.517805][ T5147] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 685.533048][ T5147] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 685.533134][ T5147] Bluetooth: hci4: adv larger than maximum supported [ 685.540630][ T5147] Bluetooth: hci4: adv larger than maximum supported [ 685.549704][ T5147] Bluetooth: hci4: adv larger than maximum supported [ 685.556906][ T5147] Bluetooth: hci4: Malformed LE Event: 0x0d [ 685.786470][T15035] block nbd0: not configured, cannot reconfigure [ 687.294719][T15058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2241'. [ 688.530503][T15079] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2247'. [ 688.621217][T15081] block nbd0: not configured, cannot reconfigure [ 688.886958][T15084] block nbd0: not configured, cannot reconfigure [ 691.077530][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.083910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.242068][T15121] FAULT_INJECTION: forcing a failure. [ 691.242068][T15121] name failslab, interval 1, probability 0, space 0, times 0 [ 691.296886][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.4.2258 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 691.296935][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 691.296954][T15121] Call Trace: [ 691.296964][T15121] [ 691.296976][T15121] dump_stack_lvl+0x16c/0x1f0 [ 691.297032][T15121] should_fail_ex+0x50a/0x650 [ 691.297069][T15121] ? fs_reclaim_acquire+0xae/0x150 [ 691.297127][T15121] should_failslab+0xc2/0x120 [ 691.297181][T15121] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 691.297224][T15121] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 691.297277][T15121] acpi_ut_create_generic_state+0x5c/0xb0 [ 691.297320][T15121] acpi_ps_push_scope+0x22/0x230 [ 691.297371][T15121] acpi_ps_parse_loop+0x9f1/0x1ce0 [ 691.297430][T15121] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 691.297476][T15121] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 691.297515][T15121] ? acpi_ds_call_control_method+0x96/0x6d0 [ 691.297579][T15121] acpi_ps_parse_aml+0x3c1/0xcb0 [ 691.297636][T15121] acpi_ps_execute_method+0x55a/0xb30 [ 691.297693][T15121] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 691.297733][T15121] acpi_ns_evaluate+0x76c/0xca0 [ 691.297789][T15121] ? kasan_save_track+0x14/0x30 [ 691.297831][T15121] acpi_evaluate_object+0x1fb/0xa90 [ 691.297879][T15121] ? __lock_acquire+0xcc5/0x3c40 [ 691.297921][T15121] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 691.297980][T15121] acpi_evaluate_integer+0xde/0x200 [ 691.298018][T15121] ? __pfx___lock_acquire+0x10/0x10 [ 691.298058][T15121] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 691.298095][T15121] ? rcu_is_watching+0x12/0xc0 [ 691.298143][T15121] ? trace_contention_end+0xee/0x140 [ 691.298212][T15121] ? __pfx_status_show+0x10/0x10 [ 691.298259][T15121] status_show+0xa1/0x120 [ 691.298306][T15121] ? __pfx_status_show+0x10/0x10 [ 691.298367][T15121] dev_attr_show+0x53/0xe0 [ 691.298409][T15121] ? __pfx_dev_attr_show+0x10/0x10 [ 691.298451][T15121] sysfs_kf_seq_show+0x223/0x3e0 [ 691.298506][T15121] seq_read_iter+0x4f4/0x12b0 [ 691.298576][T15121] kernfs_fop_read_iter+0x414/0x580 [ 691.298618][T15121] ? rw_verify_area+0xcf/0x680 [ 691.298673][T15121] vfs_read+0x886/0xbf0 [ 691.298712][T15121] ? __pfx_vfs_read+0x10/0x10 [ 691.298778][T15121] ksys_read+0x12b/0x250 [ 691.298810][T15121] ? __pfx_ksys_read+0x10/0x10 [ 691.298857][T15121] do_syscall_64+0xcd/0x250 [ 691.298910][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.298957][T15121] RIP: 0033:0x7fc2b938cda9 [ 691.298983][T15121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.299016][T15121] RSP: 002b:00007fc2ba291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.299047][T15121] RAX: ffffffffffffffda RBX: 00007fc2b95a5fa0 RCX: 00007fc2b938cda9 [ 691.299068][T15121] RDX: 0000000000000070 RSI: 0000000020000000 RDI: 0000000000000007 [ 691.299089][T15121] RBP: 00007fc2b940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 691.299108][T15121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.299128][T15121] R13: 0000000000000000 R14: 00007fc2b95a5fa0 R15: 00007ffc50ee9de8 [ 691.299177][T15121] [ 691.299251][T15121] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 691.690752][T15121] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 692.016882][T15136] block nbd0: not configured, cannot reconfigure [ 692.239608][T15139] block nbd0: not configured, cannot reconfigure [ 694.259773][T15147] Process accounting resumed [ 694.356979][T15147] db_root: cannot open:  [ 694.404524][ T5147] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 694.454821][T15050] db_root: cannot open:  [ 694.609467][T15176] db_root: cannot open:  [ 694.925949][T15187] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 695.556039][T15193] block nbd0: not configured, cannot reconfigure [ 695.675381][T15183] db_root: cannot open:  [ 696.032625][T15198] block nbd0: not configured, cannot reconfigure [ 696.107152][T15197] db_root: cannot open:  [ 697.016924][T15202] db_root: cannot open:  [ 697.623285][T15219] db_root: cannot open:  [ 698.289622][T15231] Invalid ELF header magic: != ELF [ 699.689744][T15243] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2286'. [ 699.834812][T15243] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2286'. [ 700.072543][T15246] netlink: 134 bytes leftover after parsing attributes in process `syz.6.2286'. [ 700.087001][T15247] netlink: 134 bytes leftover after parsing attributes in process `syz.6.2286'. [ 700.256925][T15253] block nbd0: not configured, cannot reconfigure [ 700.386314][T15242] db_root: cannot open:  [ 701.594971][T15281] block nbd0: not configured, cannot reconfigure [ 701.948044][T15250] db_root: cannot open:  [ 702.896013][T15307] block nbd0: not configured, cannot reconfigure [ 704.243992][T15324] block nbd0: not configured, cannot reconfigure [ 704.255510][T15312] db_root: cannot open:  [ 704.287939][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2304'. [ 704.439324][T15211] db_root: cannot open:  [ 704.602588][T15327] db_root: cannot open:  [ 704.931402][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'. [ 704.984724][T15332] openvswitch: netlink: IPv6 tunnel dst address is zero [ 705.734657][T15343] block nbd0: not configured, cannot reconfigure [ 705.885130][T15206] db_root: cannot open:  [ 706.215794][T15331] db_root: cannot open:  [ 706.941819][T15357] nbd: must specify an index to disconnect [ 707.005813][ T5147] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 707.005857][ T5147] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 707.020751][ T5147] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 707.020834][ T5147] Bluetooth: hci3: adv larger than maximum supported [ 707.028666][ T5147] Bluetooth: hci3: adv larger than maximum supported [ 707.040184][ T5147] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 707.048196][ T5147] Bluetooth: hci3: Malformed LE Event: 0x0d [ 707.683855][T15356] db_root: cannot open:  [ 707.781348][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'. [ 708.444105][T15377] db_root: cannot open:  [ 709.195526][T15392] db_root: cannot open:  [ 709.196454][T15397] block nbd0: not configured, cannot reconfigure [ 709.395539][T15404] db_root: cannot open:  [ 709.842017][T15416] FAULT_INJECTION: forcing a failure. [ 709.842017][T15416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.868559][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.6.2328 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 709.868610][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 709.868628][T15416] Call Trace: [ 709.868638][T15416] [ 709.868649][T15416] dump_stack_lvl+0x16c/0x1f0 [ 709.868702][T15416] should_fail_ex+0x50a/0x650 [ 709.868744][T15416] _copy_to_user+0x32/0xd0 [ 709.868796][T15416] simple_read_from_buffer+0xd0/0x160 [ 709.868850][T15416] proc_fail_nth_read+0x198/0x270 [ 709.868897][T15416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 709.868947][T15416] ? rw_verify_area+0xcf/0x680 [ 709.868995][T15416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 709.869042][T15416] vfs_read+0x1df/0xbf0 [ 709.869073][T15416] ? __fget_files+0x1fc/0x3a0 [ 709.869107][T15416] ? __pfx___mutex_lock+0x10/0x10 [ 709.869156][T15416] ? __pfx_vfs_read+0x10/0x10 [ 709.869198][T15416] ? __fget_files+0x206/0x3a0 [ 709.869243][T15416] ksys_read+0x12b/0x250 [ 709.869273][T15416] ? __pfx_ksys_read+0x10/0x10 [ 709.869316][T15416] do_syscall_64+0xcd/0x250 [ 709.869366][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.869410][T15416] RIP: 0033:0x7fe1f798b7bc [ 709.869434][T15416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 709.869463][T15416] RSP: 002b:00007fe1f8765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 709.869492][T15416] RAX: ffffffffffffffda RBX: 00007fe1f7ba5fa0 RCX: 00007fe1f798b7bc [ 709.869512][T15416] RDX: 000000000000000f RSI: 00007fe1f87650a0 RDI: 0000000000000004 [ 709.869530][T15416] RBP: 00007fe1f8765090 R08: 0000000000000000 R09: 0000000000000000 [ 709.869549][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.869576][T15416] R13: 0000000000000000 R14: 00007fe1f7ba5fa0 R15: 00007ffe8d9d9228 [ 709.869615][T15416] [ 710.557608][T15410] db_root: cannot open:  [ 710.623597][T15422] Invalid ELF header magic: != ELF [ 710.788795][T15429] HfR: entered promiscuous mode [ 710.904009][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 710.990642][T15432] HfR: left promiscuous mode [ 711.830105][T15444] block nbd0: not configured, cannot reconfigure [ 711.965560][T15441] db_root: cannot open:  [ 712.030236][T15435] db_root: cannot open:  [ 713.176706][T15457] block nbd0: not configured, cannot reconfigure [ 713.729467][T15450] db_root: cannot open:  [ 714.261760][T15463] db_root: cannot open:  [ 715.005821][T15481] Process accounting resumed [ 715.792138][T15474] netlink: zone id is out of range [ 715.804526][T15474] netlink: zone id is out of range [ 715.809726][T15474] netlink: zone id is out of range [ 715.944786][T15474] netlink: zone id is out of range [ 715.949992][T15474] netlink: zone id is out of range [ 716.146689][T15474] netlink: zone id is out of range [ 716.151888][T15474] netlink: zone id is out of range [ 716.233304][T15474] netlink: zone id is out of range [ 716.276486][T15474] netlink: zone id is out of range [ 716.316073][T15474] netlink: zone id is out of range [ 716.770155][T15474] db_root: cannot open:  [ 717.639942][T15411] db_root: cannot open:  [ 717.641308][T15503] block nbd0: not configured, cannot reconfigure [ 718.420822][T15496] db_root: cannot open:  [ 718.501830][T15505] db_root: cannot open:  [ 718.641708][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2352'. [ 718.826918][ T5838] db_root: cannot open:  [ 719.026712][T15513] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.2353'. [ 719.157257][T13822] db_root: cannot open:  [ 719.187121][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2353'. [ 719.208139][ T9639] db_root: cannot open:  [ 719.426335][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 719.446576][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 719.456851][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 719.466251][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 719.475388][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 719.482828][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 719.705636][T15423] db_root: cannot open:  [ 719.955778][T15423] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI [ 719.968431][T15423] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057] [ 719.976977][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.3.2327 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 719.987439][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 719.997533][T15423] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 720.003051][T15423] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ca 14 ca 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 e7 78 93 0f 84 [ 720.022709][T15423] RSP: 0018:ffffc90004eb6fb0 EFLAGS: 00010006 [ 720.028822][T15423] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 720.036832][T15423] RDX: 000000000000000a RSI: 1ffff920009d6e08 RDI: 0000000000000050 [ 720.044846][T15423] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 720.052849][T15423] R10: ffffffff905fbc17 R11: 0000000000000005 R12: 0000000000000050 [ 720.060859][T15423] R13: ffff888064708000 R14: 0000000000000000 R15: 0000000000000000 [ 720.068870][T15423] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 720.077843][T15423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.084468][T15423] CR2: 00007fe50c1d8320 CR3: 0000000033744000 CR4: 00000000003526f0 [ 720.092476][T15423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 720.100485][T15423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 720.108495][T15423] Call Trace: [ 720.111801][T15423] [ 720.114763][T15423] ? die_addr+0x3b/0xa0 [ 720.118970][T15423] ? exc_general_protection+0x155/0x230 [ 720.124563][T15423] ? asm_exc_general_protection+0x26/0x30 [ 720.130343][T15423] ? __lock_acquire+0xe4/0x3c40 [ 720.135255][T15423] ? arch_do_signal_or_restart+0x90/0x7e0 [ 720.141025][T15423] ? asm_exc_page_fault+0x26/0x30 [ 720.146101][T15423] ? __pfx___lock_acquire+0x10/0x10 [ 720.151350][T15423] lock_acquire.part.0+0x11b/0x380 [ 720.156511][T15423] ? path_openat+0x192/0x2d80 [ 720.161237][T15423] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 720.166925][T15423] ? rcu_is_watching+0x12/0xc0 [ 720.171751][T15423] ? trace_lock_acquire+0x14e/0x1f0 [ 720.176988][T15423] ? path_openat+0x192/0x2d80 [ 720.181705][T15423] ? lock_acquire+0x2f/0xb0 [ 720.186260][T15423] ? path_openat+0x192/0x2d80 [ 720.190983][T15423] path_init+0x14a5/0x1ab0 [ 720.195438][T15423] ? path_openat+0x192/0x2d80 [ 720.200163][T15423] ? debug_mutex_init+0x37/0x70 [ 720.205077][T15423] path_openat+0x192/0x2d80 [ 720.209630][T15423] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 720.215513][T15423] ? lockdep_hardirqs_on+0x7c/0x110 [ 720.220775][T15423] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 720.226640][T15423] ? __pfx_mark_lock+0x10/0x10 [ 720.231456][T15423] ? __pfx_path_openat+0x10/0x10 [ 720.236442][T15423] ? kasan_save_stack+0x42/0x60 [ 720.241336][T15423] ? kasan_save_stack+0x33/0x60 [ 720.246231][T15423] ? kasan_save_track+0x14/0x30 [ 720.251140][T15423] ? __kasan_slab_alloc+0x89/0x90 [ 720.256212][T15423] do_filp_open+0x20c/0x470 [ 720.260764][T15423] ? acct_pin_kill+0x2d/0x100 [ 720.265494][T15423] ? __pfx_do_filp_open+0x10/0x10 [ 720.270558][T15423] ? do_exit+0xad8/0x2d70 [ 720.274920][T15423] ? do_group_exit+0xd3/0x2a0 [ 720.279637][T15423] ? get_signal+0x2576/0x2610 [ 720.284387][T15423] file_open_name+0x2a4/0x450 [ 720.289205][T15423] ? __pfx_file_open_name+0x10/0x10 [ 720.294458][T15423] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 720.300147][T15423] ? getname_kernel+0x52/0x370 [ 720.304979][T15423] ? __pfx_target_core_item_dbroot_store+0x10/0x10 [ 720.311546][T15423] filp_open+0x4b/0x80 [ 720.315668][T15423] target_core_item_dbroot_store+0x10d/0x2e0 [ 720.321728][T15423] configfs_write_iter+0x2f6/0x4b0 [ 720.326901][T15423] ? __pfx_configfs_write_iter+0x10/0x10 [ 720.332586][T15423] __kernel_write_iter+0x318/0xa90 [ 720.338096][T15423] ? __pfx___kernel_write_iter+0x10/0x10 [ 720.343791][T15423] __kernel_write+0xf6/0x140 [ 720.348430][T15423] ? __pfx___kernel_write+0x10/0x10 [ 720.353673][T15423] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 720.359359][T15423] ? rcu_is_watching+0x12/0xc0 [ 720.364185][T15423] ? acct_pin_kill+0x2d/0x100 [ 720.368914][T15423] ? lock_acquire+0x2f/0xb0 [ 720.373461][T15423] ? acct_pin_kill+0x2d/0x100 [ 720.378199][T15423] do_acct_process+0xd11/0x1530 [ 720.383090][T15423] ? __pfx_do_acct_process+0x10/0x10 [ 720.388425][T15423] ? do_raw_spin_lock+0x12d/0x2c0 [ 720.393509][T15423] acct_pin_kill+0x2d/0x100 [ 720.398065][T15423] pin_kill+0x194/0x7c0 [ 720.402280][T15423] ? __pfx_pin_kill+0x10/0x10 [ 720.407022][T15423] ? rcu_is_watching+0x12/0xc0 [ 720.411843][T15423] ? __pfx_autoremove_wake_function+0x10/0x10 [ 720.417963][T15423] ? mnt_pin_kill+0x31/0x1e0 [ 720.422611][T15423] ? lock_acquire+0x2f/0xb0 [ 720.427162][T15423] ? mnt_pin_kill+0x31/0x1e0 [ 720.431814][T15423] ? mnt_pin_kill+0x31/0x1e0 [ 720.436479][T15423] mnt_pin_kill+0x61/0x1e0 [ 720.440949][T15423] cleanup_mnt+0x3ac/0x450 [ 720.445427][T15423] task_work_run+0x14e/0x250 [ 720.450062][T15423] ? __pfx_task_work_run+0x10/0x10 [ 720.455220][T15423] do_exit+0xad8/0x2d70 [ 720.459432][T15423] ? __pfx_do_exit+0x10/0x10 [ 720.464058][T15423] do_group_exit+0xd3/0x2a0 [ 720.468601][T15423] get_signal+0x2576/0x2610 [ 720.473186][T15423] ? force_sig_fault+0xad/0xf0 [ 720.478002][T15423] ? __pfx_get_signal+0x10/0x10 [ 720.482900][T15423] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 720.488942][T15423] arch_do_signal_or_restart+0x90/0x7e0 [ 720.494534][T15423] ? trace_irq_disable.constprop.0+0xea/0x140 [ 720.500650][T15423] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 720.506866][T15423] ? __bad_area_nosemaphore+0x334/0x6a0 [ 720.512468][T15423] ? do_user_addr_fault+0x920/0x13f0 [ 720.517813][T15423] irqentry_exit_to_user_mode+0x13f/0x280 [ 720.523613][T15423] asm_exc_page_fault+0x26/0x30 [ 720.528556][T15423] RIP: 0033:0x7f199cf8cdb1 [ 720.533009][T15423] Code: Unable to access opcode bytes at 0x7f199cf8cd87. [ 720.540068][T15423] RSP: 002b:0000000000000009 EFLAGS: 00010217 [ 720.546179][T15423] RAX: 0000000000000000 RBX: 00007f199d1a6080 RCX: 00007f199cf8cda9 [ 720.554191][T15423] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 720.562201][T15423] RBP: 00007f199d00e2a0 R08: 0000000000000006 R09: 0000000000000000 [ 720.570209][T15423] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.578219][T15423] R13: 0000000000000000 R14: 00007f199d1a6080 R15: 00007ffe91cd7bc8 [ 720.586234][T15423] ? 0xffffffff81000000 [ 720.590431][T15423] [ 720.593473][T15423] Modules linked in: [ 720.597412][T15423] ---[ end trace 0000000000000000 ]--- [ 720.602886][T15423] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 720.608395][T15423] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ca 14 ca 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 e7 78 93 0f 84 [ 720.628052][T15423] RSP: 0018:ffffc90004eb6fb0 EFLAGS: 00010006 [ 720.634160][T15423] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 720.642160][T15423] RDX: 000000000000000a RSI: 1ffff920009d6e08 RDI: 0000000000000050 [ 720.650170][T15423] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 720.658172][T15423] R10: ffffffff905fbc17 R11: 0000000000000005 R12: 0000000000000050 [ 720.666171][T15423] R13: ffff888064708000 R14: 0000000000000000 R15: 0000000000000000 [ 720.674170][T15423] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 720.683137][T15423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.689754][T15423] CR2: 00007fe50c1d8320 CR3: 0000000033744000 CR4: 00000000003526f0 [ 720.697758][T15423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 720.705767][T15423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 720.713781][T15423] Kernel panic - not syncing: Fatal exception [ 720.720283][T15423] Kernel Offset: disabled [ 720.724632][T15423] Rebooting in 86400 seconds..