last executing test programs: 4m41.114516408s ago: executing program 1 (id=381): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec27\x00', 0x1c1901, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, 0x0) (async) open(0x0, 0xe4800, 0x6a) (async) socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0xffff0001, 0x2f1b8ba4, 0x4, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8}, 0xa3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800030000000000080016"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 4m40.71056041s ago: executing program 1 (id=384): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0xffffffffffffffff, 0x20008, 0xdc, 0xeb1, 0x40000000000a5, 0x8000) (async) msync$auto(0x1ffff000, 0x80100000000005, 0x3) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x100000, 0x8000000000000000, 0x0) (rerun: 64) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b", @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = fanotify_init$auto(0xba, 0x0) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) (async) fanotify_mark$auto(r2, 0x205, 0x100002, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24044950}, 0x40000) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) shmctl$auto_IPC_RMID(0x0, 0x0, 0x0) (rerun: 64) read$auto_ptdump_curknl_fops_(0xffffffffffffffff, &(0x7f0000000280)=""/13, 0xd) (async) open_tree$auto(r2, &(0x7f0000000340)='./file0\x00', 0x4) (async) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) (async) ioperm$auto(0x7, 0x6, 0x2) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000380)=""/170, 0xaa) (async) clone$auto(0xd, 0x5, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 64) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) (rerun: 64) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/194, 0xc2) close_range$auto(0x2, 0x8, 0x9) 4m37.393225165s ago: executing program 1 (id=397): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x2f) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x24000802) socket(0x36, 0x800, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4m31.249756174s ago: executing program 1 (id=409): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (rerun: 64) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0) (async) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/loop13/pm_only\x00', 0xa00c0, 0x0) close_range$auto(r0, 0xa, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async, rerun: 64) mmap$auto(0x5, 0x4, 0x8, 0x17, r1, 0x200) (async, rerun: 64) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x100000001, 0x8, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x1, 0x7fffffff, 0x5, 0x7, 0x7, 0x61, 0x40000103}) (async) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) close_range$auto(r2, 0x8, 0xfffffffb) (rerun: 32) 4m29.117213749s ago: executing program 1 (id=418): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto_def_blk_fops_fs(r0, &(0x7f00000006c0)="bac73ebcde7ec098eb4bc09b980c25b3220e814fec2b1a0d1d2d04fcbfb4e5f759b5b4129f98d3b5629b0d3ad7b13fc2c32bbd0f621ff3b31c85481bec1ab90311d5754d4d10da5e05a23575b39df03c21024a85a49edc61dafa15848d6f117093da1766bc0b13a69ea501644b22f13075615a", 0x73) ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x80040, 0x80, 0x3}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0xe1fcedb87bec7e1e, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x3, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) getsockopt$auto(0x6, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x20801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f2127bd7000fcdbdf252100000020002c8014006a0000000000000000000000ffff640101000800fb000200000008000300", @ANYRES32=r3, @ANYBLOB="2f51ff67e9b1781649b72a58061983164a8b036be83f35c3d9f408243ddaf9885600000000000009000000"], 0x3c}}, 0x4000000) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) 4m20.491277644s ago: executing program 1 (id=450): r0 = getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) (async, rerun: 32) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card2\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x2, 0x0) (async) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, &(0x7f00000001c0)) (async, rerun: 32) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504f9ffff04000b0600000000"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000e3, 0x44eb1, 0x6, 0xfffffffffffffffd) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2a82, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81) (async) madvise$auto(0x0, 0x20000a, 0x4) (async) pread64$auto(r1, 0x0, 0x594c, 0x7) (async) unshare$auto(0xffe) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x90) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x20400, 0x0) 4m5.218110115s ago: executing program 32 (id=450): r0 = getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) (async, rerun: 32) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card2\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x2, 0x0) (async) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, &(0x7f00000001c0)) (async, rerun: 32) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504f9ffff04000b0600000000"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000e3, 0x44eb1, 0x6, 0xfffffffffffffffd) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2a82, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81) (async) madvise$auto(0x0, 0x20000a, 0x4) (async) pread64$auto(r1, 0x0, 0x594c, 0x7) (async) unshare$auto(0xffe) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x90) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x20400, 0x0) 3m49.450649386s ago: executing program 3 (id=542): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) symlinkat$auto(0x0, r2, &(0x7f0000000080)=':,\x00') socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) read$auto(r0, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) (async) symlinkat$auto(0x0, r2, &(0x7f0000000080)=':,\x00') (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) unshare$auto(0x40000080) (async) 3m48.584761749s ago: executing program 3 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) pipe$auto(0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x890) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd12\x00', 0x139000, 0x0) 3m48.108367286s ago: executing program 3 (id=550): msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 32) capget$auto(&(0x7f00000000c0)={0xe}, &(0x7f0000000140)={0x9, 0x8, 0x800}) (async) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4004891}, 0x4040000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(r1, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x6) socket(0x2, 0x1, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/pcmC0D0c\x00', 0x1a101, 0x0) mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r3, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) mlock$auto(0xfbe8, 0x4) (rerun: 32) 3m46.43471959s ago: executing program 3 (id=555): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, 0xffffffffffffffff) timerfd_create$auto(0xc4bb, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x4030ae7b, 0xffffffffffffffff) (async) timerfd_create$auto(0xc4bb, 0x8001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) (async) 3m42.565236668s ago: executing program 3 (id=567): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) seccomp$auto(0x81, 0x6, &(0x7f00000000c0)="e5eeaca4ebfaf145e5bc78c57d08b1920665e360ad106bf290585186dd2d1bb5316beedf72122e58f6c0d2d71d9fa083751c4df880554f5c865d48d897ec3c72d8d1147d99d981046d89d4f0f945cc924e9fdefa84187f581287") 3m32.422226664s ago: executing program 3 (id=583): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) ioctl$auto_OTPLOCK(r0, 0x800c4d10, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) socket(0xa, 0x806, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0xc, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22ed00, 0x0) socket(0x2, 0x1, 0x106) r4 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x8fd, 0x5) ioctl$auto(r0, 0x8, r4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f00000000c0)={@padding, 0x70}) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) ioctl$auto_XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000240)={0xe, @raw=0x5, @raw=0x3, 0x9f00, 0x9, '\x00', {0x3, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xa, 0x64faeec1, 0x100, {0x400000000000000, 0x9}, {0x8, 0x1}, {0x8, 0xc0be00}, 0x5, 0x5, 0x4, 0x0, 0x7, 0x7ff, 0x8, 0x7, 0xf6be, 0x0, '\x00', 0x8fa7, 0xc31, 0x401, 0x6}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) 3m17.270500049s ago: executing program 33 (id=583): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) ioctl$auto_OTPLOCK(r0, 0x800c4d10, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) socket(0xa, 0x806, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0xc, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x22ed00, 0x0) socket(0x2, 0x1, 0x106) r4 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x8fd, 0x5) ioctl$auto(r0, 0x8, r4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f00000000c0)={@padding, 0x70}) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) ioctl$auto_XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000240)={0xe, @raw=0x5, @raw=0x3, 0x9f00, 0x9, '\x00', {0x3, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xa, 0x64faeec1, 0x100, {0x400000000000000, 0x9}, {0x8, 0x1}, {0x8, 0xc0be00}, 0x5, 0x5, 0x4, 0x0, 0x7, 0x7ff, 0x8, 0x7, 0xf6be, 0x0, '\x00', 0x8fa7, 0xc31, 0x401, 0x6}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) 1m48.428689184s ago: executing program 5 (id=914): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) (async) capset$auto(0x0, &(0x7f00000000c0)={0x400, 0x2, 0x80}) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x208803, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x1, 0x800000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) fadvise64$auto_POSIX_FADV_RANDOM(0xffffffffffffffff, 0xffff, 0x5915007, 0x1) (async) semctl$auto(0x5, 0x7ff, 0x0, 0x5) (async) futex$auto(0x0, 0x6, 0x10000, &(0x7f0000000140)={0x4f, 0x1}, 0x0, 0x3) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x3ff, 0x0, 0x1}, 0xed71388}, 0x2, 0x9) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 1m47.449884542s ago: executing program 5 (id=919): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x84) clone$auto(0x20003b46, 0x3, 0x0, 0x0, 0x2) (async, rerun: 32) socket(0xa, 0x801, 0x84) (rerun: 32) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x1c) (async) ustat$auto(0xffff, &(0x7f0000000000)={0xf1, 0x87, "baf47d421a78", "f65c2ce26eb5"}) 1m46.621488384s ago: executing program 5 (id=922): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vimc.0/media3/uevent\x00', 0xe0a40, 0x0) (async) r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x2003f0, 0x10) (async, rerun: 64) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu1/cache/index0/id\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000480)=""/142, 0x8e) 1m41.686671371s ago: executing program 5 (id=940): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ftruncate$auto(r0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) chmod$auto(0x0, 0x4) r1 = io_uring_setup$auto(0x6, 0x0) r2 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x5, 0x7) ioctl$auto(r1, 0x40106f52, r2) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x29, 0x0, 0x9) madvise$auto(0x3, 0x6, 0xfffffffe) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)="623611a6f59782425ce908506196e865dc1b5e5f5f78611d2f5c66ad8d62f9b16b4c448b84812e8d795f80d182ff384b8f8db24da0b23e0c67d16bf147b697a3e373e3c1a702278990e9c40854a93794b91e7970c3e5") 1m35.702625143s ago: executing program 5 (id=957): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x8100, 0x3}, 0x22) 1m25.601858438s ago: executing program 5 (id=981): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x7ffe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyz6\x00', 0x800, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x2100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x800}) r2 = socket(0x3e, 0x3, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) process_madvise$auto(0x3, 0x0, 0x7, 0xc15, 0x8000000000000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r2, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) modify_ldt$auto(0x0, 0x0, 0x5749) 1m10.374507726s ago: executing program 34 (id=981): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x7ffe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyz6\x00', 0x800, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x2100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x800}) r2 = socket(0x3e, 0x3, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) process_madvise$auto(0x3, 0x0, 0x7, 0xc15, 0x8000000000000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r2, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) modify_ldt$auto(0x0, 0x0, 0x5749) 21.758241248s ago: executing program 6 (id=1172): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x1e, 0xa505}, 0x800}, 0x4, 0x800006) prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0xf4ff) madvise$auto(0x0, 0xa36, 0xf) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 20.466376519s ago: executing program 6 (id=1178): sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) socket(0xa, 0x6, 0x0) (async) ioctl$auto(0x3, 0x890b, 0x91) unshare$auto(0x40000080) (async) madvise$auto(0x0, 0x20200, 0x15) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0xc, 0x0, 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000540)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb=j\a\xf1y\xb3\"', 0x81) (async) ioctl$auto(r2, 0x9, r1) r3 = memfd_create$auto(&(0x7f0000000100)='nbd\x00', 0x8a78) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x4, 0x1ff) sendto$auto(r0, 0x0, 0xfffffffffffffffe, 0x7, &(0x7f0000000440)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x21) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2d, 0xa, 0x4) (async) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, &(0x7f0000000140)=""/177, 0xb1) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS0\x00', 0x68040, 0x0) ppoll$auto(&(0x7f0000000080)={r4, 0x1, 0x400}, 0x5, 0x0, 0x0, 0x8) (async) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) 14.990538438s ago: executing program 6 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b41, 0x1) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x129800, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x9210641e, r2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x28) setsockopt$auto(r1, 0x7, 0x1ff, &(0x7f0000000340)='\x00', 0x5) r3 = wait4$auto(0x0, &(0x7f00000000c0)=0x5, 0x9, &(0x7f0000000500)={{0x2, 0x4}, {0xffffffffffffff27, 0x1}, 0x3, 0x805, 0x2b475717, 0x4, 0x80, 0x77, 0x8, 0x6, 0x2, 0xca6a, 0xd8, 0xbbed, 0xfffffffffffffffc, 0x8000000000000001}) r4 = syz_clone3(&(0x7f0000000180)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, r3, 0x0, 0x0], 0x4}, 0x58) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/trace_marker_raw\x00', 0x446083, 0x0) capset$auto(&(0x7f0000000000)={0x4, 0xffffffffffffffff}, &(0x7f00000000c0)={0x5, 0x80000001, 0xfffffffb}) r5 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000018c0), 0x55) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r5, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) r6 = setfsuid$auto(0xee00) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x40, 0x8, 0xffffffffffffffff, 0x9, 0xee00, 0xee00, 0x0, 0x6, 0x1, 0xf65d, 0x6, 0x0, 0x100, 0x8000000000000000, 0xfffffffffffffff8, 0xd, 0x4}, 0x6) shmctl$auto_SHM_UNLOCK(0x1, 0xc, &(0x7f0000000200)={{0xcbe, r6, r7, 0x1ff, 0x6, 0x1ea, 0x3ff}, 0x200, 0x2, 0x5, 0x7ff, @raw=0x7c4, @raw=0x2, 0x1, 0x0, &(0x7f0000000180)="458c0c1f5a813156f6f39830cda881735a28d394c7374c5f32e2a4d25a67d0cd900593cdfbf0af", &(0x7f00000001c0)="9a9ef43c3625d5e063abf2bc6533efefcf37b2f53698f060b4b6d1ae741f"}) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f00000002c0)={{0x401, 0xee01, 0xffffffffffffffff, 0x3, 0x9, 0x54a, 0x9}, 0x2, 0x3, 0x3, 0x2, @raw=0x8001, @inferred=r4, 0x0, 0x0, &(0x7f0000000100)="a2dfea253a8bd7dd23123c2f026f6278d53029d3daf71a765994af34e9228bb2bb5b935f56d8c9c619ec", &(0x7f0000000200)="cac5448eda621e8bcf021c70d5cbbe75ac16a92495a9be1c100b63e4ea11bbe23e6e3201de0943b8b0c0798eba8a7202fba3558abe139410d06c28ee7d7472a48331ecd14dd9ac656f7f8822b59185de30c6e80b453b30062553fa2d67be790c5288848ba5a60a23072c5fc17e4f611bfd14b5b61bcb1b877139446825c45d6bdc75bd4d364d35d178761f903dbb834496b2f208e3901a60cd20f8978946e4b0f2539d0a289a1a243dd798bd4ebadccdce57f546cf8e13b75d4ffc60db"}) 11.084603124s ago: executing program 6 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050323bd652cfbdbdf250600001f08000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) 9.774650421s ago: executing program 6 (id=1213): mmap$auto(0x1020000000000002, 0x1, 0x40000000df, 0x9b75, 0xffffffffffffffff, 0x2000028ffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x38400, 0x0) unshare$auto(0x40000080) ioperm$auto(0x8000000000006, 0x7fff, 0x1) set_mempolicy$auto(0x2, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) mmap$auto(0x10001, 0x4020005, 0x2, 0x18, r0, 0x8001) unshare$auto(0x800) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, r1, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0xd, 0xba03) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) write$auto(0xca, 0x0, 0x10) sendfile$auto(r3, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd1/queue/scheduler\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/213, 0xd5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x80, 0x0) 6.376643122s ago: executing program 4 (id=1224): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/quirks\x00', 0x80000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000004c00)='/dev/video21\x00', 0x20280, 0x0) read$auto_stats_fops_(r1, &(0x7f00000000c0)=""/85, 0x55) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/33, 0x21) 6.111631175s ago: executing program 6 (id=1225): r0 = socket(0x10, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x2100, 0x0) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0xf82, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(r2, &(0x7f0000000100)={0x0, 0x101d0}, 0x40000000000400) (async) readv$auto(r2, &(0x7f0000000100)={0x0, 0x101d0}, 0x40000000000400) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x5}, {0x300, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = semctl$auto(0x8, 0x806, 0x13, 0x46) socket(0x9, 0x2, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x7111}, 0x400000000008) (async) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x7111}, 0x400000000008) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x10000) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), r3) (async) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), r3) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8170000", @ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="05020380907d3eb96d110b20a47f0b90dbd6b40a8606b6b20f4cd10dd5f6df9d6e2ec904581a704c59cceaa117267b792b9f20d63025a88646f3ac63dc6047eb77cc8561b2d97e93db96f0d4fc87e09a8300f8ff33017a9c09dd3de70dd56844587ab9f44e9a6e9a2d5d4dd344db67d6e3801398c6047eaf", @ANYBLOB="040084c00400288012001200", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="89da415b4096e98c0b0d476fccf05a79fc9256cf133ace2e8fae10294997e1f7f7f05b3612", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0], 0x17c8}, 0x1, 0x0, 0x0, 0x890}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)=""/129, 0x81) (async) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)=""/129, 0x81) getsockopt$auto(0x4, 0x6, 0x19, 0xfffffffffffffffc, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0xf32}, 0x2, 0x0, 0xfffffffffffffffd, 0x4}, 0x8}, 0x100, 0x5, &(0x7f0000000000)={0x8, 0xcb}) 6.010588767s ago: executing program 4 (id=1226): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b41, 0x1) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x129800, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x9210641e, r2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x28) setsockopt$auto(r1, 0x7, 0x1ff, &(0x7f0000000340)='\x00', 0x5) r3 = wait4$auto(0x0, &(0x7f00000000c0)=0x5, 0x9, &(0x7f0000000500)={{0x2, 0x4}, {0xffffffffffffff27, 0x1}, 0x3, 0x805, 0x2b475717, 0x4, 0x80, 0x77, 0x8, 0x6, 0x2, 0xca6a, 0xd8, 0xbbed, 0xfffffffffffffffc, 0x8000000000000001}) r4 = syz_clone3(&(0x7f0000000180)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, r3, 0x0, 0x0], 0x4}, 0x58) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/trace_marker_raw\x00', 0x446083, 0x0) capset$auto(&(0x7f0000000000)={0x4, 0xffffffffffffffff}, &(0x7f00000000c0)={0x5, 0x80000001, 0xfffffffb}) r5 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000018c0), 0x55) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r5, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) setfsuid$auto(0xee00) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x40, 0x8, 0xffffffffffffffff, 0x9, 0xee00, 0xee00, 0x0, 0x6, 0x1, 0xf65d, 0x6, 0x0, 0x100, 0x8000000000000000, 0xfffffffffffffff8, 0xd, 0x4}, 0x6) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f00000002c0)={{0x401, 0xee01, 0xffffffffffffffff, 0x3, 0x9, 0x54a, 0x9}, 0x2, 0x3, 0x3, 0x2, @raw=0x8001, @inferred=r4, 0x0, 0x0, &(0x7f0000000100)="a2dfea253a8bd7dd23123c2f026f6278d53029d3daf71a765994af34e9228bb2bb5b935f56d8c9c619ec", &(0x7f0000000200)="cac5448eda621e8bcf021c70d5cbbe75ac16a92495a9be1c100b63e4ea11bbe23e6e3201de0943b8b0c0798eba8a7202fba3558abe139410d06c28ee7d7472a48331ecd14dd9ac656f7f8822b59185de30c6e80b453b30062553fa2d67be790c5288848ba5a60a23072c5fc17e4f611bfd14b5b61bcb1b877139446825c45d6bdc75bd4d364d35d178761f903dbb834496b2f208e3901a60cd20f8978946e4b0f2539d0a289a1a243dd798bd4ebadccdce57f546cf8e13b75d4ffc60db"}) 5.577599557s ago: executing program 4 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x114, r1, 0x1, 0x5, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0xff, 0x11, 'we\xe4\xe26\x9b\x89Wdr\x97tD\xbb\x13\x99\x0fR\xb9\x1a}\xad\xc5\xacS\xac\x13Q\xb4\xe9Nf\xcb\xbc=\x15\xed\x91I[\x01\xeap\xc2\b\x99\xc1\xab\x8ck;\xa9\x84\x06\xb2O\x11\x88\v\xd3\xfe\xfc\xf0\xfbS\xa8\xe2%\x85:,7x\xb8G\x06\xe2pe\x83\xbe2\x0e\xf1\xfe\xbc\x0f=\x9c;v\xd8\x0e\x16M\xfa5\x00F\x83\xab0\f[\x87\xff\t\xe8\x80\x83\'\x80\xfa\xb7\xe8\xf2\xdd @\xab\xd5\x860\x1azC\x0f\xe0\x8a\x15\xe9\x83\xa5\xabu\x17\xf3\xbbq\xb1\xd3\xcc\xaeO\xe2\x94\x1e_\xe6\xb1\xb2\xa6\\bOF8\xbb\xf2Il@\xc0\xaa\x9a\xa6P|q\x93\t,\xa6\x9f\xb8h\xf2V\x9b\a\xaa\xf4n8H-1\xdf\xb7\x9c\xc5S\x1f\xfc\xb0\x16nh\x06\x8fL\xef\xef\xd0\x03f|\xfe\xe0\x02-.Q.`\xfb\xca\xe1\xe9%W3\xb7\xdd\xcd\x02\xd7\x88\ap\t\x1f\xed\x8f\xb8\xd2\xee\xcb\xe6#\x18\x80/I\xe64\xca\xdb\x0e;\xc1'}]}, 0x114}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 5.20258078s ago: executing program 0 (id=1229): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2, "24229ba6405fe4fc8b79b54d7e17"}, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) (async) open(0x0, 0xeee00, 0x31) mmap$auto(0x8000, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8) (async) mmap$auto(0x8000, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x1e1401, 0xe5) r0 = gettid() rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000010c0)="dc") openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev6\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0xc040563d, 0x38) (async) ioctl$auto(0x3, 0xc040563d, 0x38) tkill$auto(r0, 0x7) (async) tkill$auto(r0, 0x7) write$auto(0x3, 0x0, 0x100082) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x10, 0x800, 0xef) (async) socket(0x10, 0x800, 0xef) getsockname$auto(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, &(0x7f0000000280)=0xaea) (async) getsockname$auto(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000140)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00\x94O\xeb2\xdb\xd0\f\xa2\x93\x98G6x:h\x05\xce\xff\x86\xa2\xe9\x9f\xbf\x82\xbd\xd8\x90\xf0\xe4\xef\x16\xe2\xea\xb3\x893T\xc8\xfb\xda\x9b\xe3\xf7\x9d\x92\xa8d-\xb2p\xf7\x7fW\xcaV\xd6\xd2\x0f\xdfjW\xb5K', 0x2000e) 5.127352098s ago: executing program 4 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x6}}, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x401) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x1, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd50009ddbdf251100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) write$auto(r0, &(0x7f0000000000)='@\x00', 0xfe) process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) 4.740937724s ago: executing program 2 (id=1231): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x885b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r0 = gettid() r1 = open(0x0, 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000000)="bd94fb", 0x3) io_uring_setup$auto(0x2, 0x0) setreuid$auto(0x15, 0x5) setuid$auto(0xe) rt_sigqueueinfo$auto(r0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlock2$auto(0x1, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r5, &(0x7f0000000180)=""/244, 0xf4) 4.438270736s ago: executing program 4 (id=1232): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) inotify_init1$auto(0x0) (async) timerfd_create$auto(0x4401, 0x1) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x1, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) select$auto(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x5}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8a81, 0x0) (rerun: 32) socket(0x27, 0x5, 0x3) (async) io_uring_setup$auto(0x7, 0x0) (async, rerun: 64) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, 0x0, 0x40002, 0x0) (rerun: 64) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(r0, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xaea2, 0x0) 4.122682125s ago: executing program 0 (id=1233): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r0, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = open(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x961064a0, 0x600000000200007) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) 3.479302498s ago: executing program 2 (id=1234): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x82041, 0x0) mmap$auto(0x0, 0x400009, 0x20000000000df, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) prctl$auto_SECCOMP_MODE_FILTER(0x4, 0x2, 0x0, 0x4, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty63\x00', 0x800, 0x0) mmap$auto(0x6, 0xa00006, 0xfffffffffffffff8, 0x40eb1, 0x602, 0x300000000001) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x2, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x81) (async) write$auto(0xffffffffffffffff, 0x0, 0x81) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffefffffffffffa, 0xfffffffffffffffd, 0xd4, 0x1, 0x9, 0x0, 0x1, 0x368e, 0x29d0, {0xddb5, 0x10000}, 0x5, 0x1, 0x4, 0x7f, 0x0, 0x80000004, 0x84, 0xffffffffffff628f, 0xa747, 0xdeb1, 0x800}) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffefffffffffffa, 0xfffffffffffffffd, 0xd4, 0x1, 0x9, 0x0, 0x1, 0x368e, 0x29d0, {0xddb5, 0x10000}, 0x5, 0x1, 0x4, 0x7f, 0x0, 0x80000004, 0x84, 0xffffffffffff628f, 0xa747, 0xdeb1, 0x800}) r3 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, 0x0, 0xa3d2) (async) write$auto(r4, 0x0, 0xa3d2) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x1000000000000009, 0x4, 0x4000000000df, 0x100000013, r3, 0x3323) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/personality\x00', 0x240c01, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90bb6aa1", @ANYRES16=0x0, @ANYBLOB="3c00c4816e3b802362f9b335f2cec59e6de6de4f71550c9c4e0b35f6252a4552d8bb7965242e509f073bec2daac721c5f7ed882fe7bc79f6ec058838e49287bef66889f5c5de017a66556ddbad9b3bcb440f01efa1d2b72a692173792868898a46064076d78ffc5986a602283501c61a763d0fa68b6ef4e0b7d8f7e5e8f9b0457821dbf1e43c7c2a699be10cb730fa8bd040937c862237c4f918d40f5147ba92298eca148727f4ca1f18329562b05c9c68f102a59b23207c9a7f11404b092619bcd2412b1ef1beb698af30f499a6ee35e5d21c4513ab24636000"/230], 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000300)=""/112, 0x70) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x4000000040eb2, 0x4, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x4000000040eb2, 0x4, 0x300000000000) 3.451058133s ago: executing program 0 (id=1235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x40, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x501201, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x103440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x595c00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.10/usb30/ep_00/bmAttributes\x00', 0x12b5c0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xa4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) pipe2$auto(0x0, 0x80) bpf$auto(0x7, &(0x7f00000000c0)=@raw_tracepoint={0x9, 0x0, 0x0, 0x8001}, 0x3d) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x2, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r2, 0x0, 0xfffffffffff) write$auto(0x3, 0x0, 0xfffffdef) 1.798671946s ago: executing program 2 (id=1236): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = getsockopt$auto_SO_BSDCOMPAT(r0, 0xffff35b5, 0xe, &(0x7f0000000000)='ethtool\x00', &(0x7f0000000140)) ioctl$auto_USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fdatasync$auto(0x68a3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1.79802483s ago: executing program 0 (id=1237): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x100002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x800, 0x6) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x83) listen$auto(0x3, 0x81) 1.797732619s ago: executing program 4 (id=1238): bpf$auto(0x12, 0x0, 0xcf) mmap$auto(0xffffffff, 0x5, 0xdf, 0xbb72, 0x2, 0x8004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd1, 0x3, 0x502d, 0x0, 0x5, 0x1, 0x2, {0x1, 0x40000010000}, 0x4, 0x6, 0xffffffffffffffe0, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/carrier_down_count\x00', 0x40000, 0x0) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munlock$auto(0x9, 0x29b9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setitimer$auto(0x2, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(0x0, r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000080", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250d0000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000100f34a1b8bdd8ba0fd973c97d59db1f4a2dfbdd01bfb794779376376161b9c68408913ad28830022642085d8757a4f4cf5a384260d5213d5a62fe77d696978c443a442340e7a5892c17c37137f3ba49a985d9c26b324fbd2fdd8e4690285063f4ae1abaa8aa677a312e9f94e4c471ba10e633f89147780af3c83ea0ccf5255d3e5b0640ae2b3141a15ad1af01ef544d512d4655cf16cb88e895ed4bcbc69adc724d99b62a68cbdafac2a3577f2d9b79a3c48d8ea205bfc704018a847ce10b65952d263c840aa7766a07554a6e561a43ab3045b", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="05000f000400000005002400180000000800270008000000"], 0x34}, 0x1, 0x0, 0x0, 0xfd981f7067d945d1}, 0x4080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x800, 0x0) 1.411019477s ago: executing program 2 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = semctl$auto_SETVAL(0x29, 0x9, 0x10, 0xf9) r3 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) lstat$auto(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x20000, 0x6, 0x0, 0xfffff5ed, 0xee00, 0xee01, 0x0, 0x8c79, 0x8000000000000000, 0x3, 0x885, 0x8, 0xfffffffffffffffc, 0x100000000, 0x4, 0xb, 0xb}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000001c0)={0x1230, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xe9}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x2}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_SEC_DEVICE={0x10ce, 0x2e, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x471a2397}, @typed={0x8, 0xd6, 0x0, 0x0, @pid=r2}, @generic="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", @generic="0b9685aa47e8ca9c44dd064272c2fca88c8fbe11d799e5c6fb0a7c8c816910f23ac54944ccdb137399d20f813fe407dd7ea6e7d3529793a820b88515353c36c23badd0018aed449c2d01ea8a869449d287268ab80a25faf28af7d2581642698987d356a0c24a5a35dd882749175c3d49f0ad055a010c3c32a930007e20176c6088ecbd9da58624f8a0ddce7aa764da78049f13be46d67e9fd4f15c550880c444e726fb29d4403f78e63e9ec0f52d2231122d", @typed={0x8, 0xa6, 0x0, 0x0, @fd=r3}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x108, 0x2e, 0x0, 0x1, [@typed={0xb, 0x13a, 0x0, 0x0, @str='*u$-!*\x00'}, @nested={0xda, 0xae, 0x0, 0x1, [@generic="360bf8088a460ed60ac83a23781ed14534721d9d84dbe14e0081d3dbb6adee516153a7c9358eedf8462c70ec538fbfdc1f256f489a64383329e627c3989277563e9cfeaf28151fc77c013d75376fc6ab435af52fcb9f167b849b67546243c818633b33ee6b23b6d702ced1f4405b7f12d49b6751089d67f4629d0077fa164e8a44f3118eed5bbb229dd3e60f242bfe5276ae12e0f46b0a855dd74db2c2d9bceefe7e19656b88b510a76123b1ae107918af7c1be6a39825ae01a0bea89c1c8a643f4cabb3a78b163f808fbdd62261", @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x6}]}]}, 0x1230}, 0x1, 0x0, 0x0, 0x8000}, 0x24048054) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000001c0)={0x1230, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xe9}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x2}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_SEC_DEVICE={0x10ce, 0x2e, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x471a2397}, @typed={0x8, 0xd6, 0x0, 0x0, @pid=r2}, @generic="f905cde2ceaa86470a5968a4d3304e57f076242cf07c8ccbc33bf59620d3bca5554ee5eaee7df907e1b729535201a9a3a6380a68fe4dd0abb1ce9f20476143c587fee82af25264346fe8bcfe87c3f9e511b756b8bd91b15d3cd7a7906fd571c75e630a063c92608d73a3faf5732c4ae21165dce5944111d4647b6769db8ce9a600e84482af2cc29e96b870f227633b81df975b4d161aa87723cf1c8d2f2967cf700d9c33d3f57087780c804094d7465b6bb632ff458bbde4d8e1dc65e92b754e656c1ec4e4aa68bbfa11799c2a615e9126beea4a64107510b5ee1d812394ac142bff5fdbeaafe4e3c4577ae89d90bbc15b58cc46d082305c0bb0c4a8a5337ea6a7a2996141f1b0fea14fcc777cf749e4fb96d7796ea2f47af11540a3b41967034647b6dbc44340cc8b17c939fdfc0458cc85fabb9e4699a6e24687cde32600786e09b6b62d1f7991d44fd0d52ea0653b1269564e318e5d921c5e1d188108d3cd1d4b530fd1967384b14788cb0a5cee833d29d7d3055ac2570f8a908c69b5ba3ba0a683b3981a9f0739bf01901a421d093f40659271ef7e6edcd661b6a1925b919a6f770ec3192c9b51b79fc9e7220bc6dece7236a2970a959cb702bf3607fb1d78f3e1010e40cdb14a68abf9cd788db733765f8c19741ad480e23559518c376033c0b1669ef2191fc4153ffb24bda5b54940868434d60debf6edb0016218c3fed513dcba97c9f4a865ab83ee1191e24facb7b9e09a817d8ddf39e326a20420e5075278578bbcb5a8dd43eb753b09f376b21c5a2b86f1b9b86fc0299ee86a3d673f7f2b8b7beb332b18ea38e4b0bc43d5b7996b548bb19ff026103f4906d1cc5f40e04c24f9b8d567eb8403f049cf5fc4434277438b5e6136c0a7dea99fc60143d22314c551ff62a40f38dde28d13586073aa0f820169c550d6d9df49f25e08a508286a57e5d524ee5799d4e9799a786c48f128349f75766872f9470f9f58e96929e9d4aec903257d3996ad76ec81ea0d8355d876432014322db2d28785b61e8da077f90fb8db12b08df1d55dbd8c0e16f78f0dc780476a3defe0a26e258c8c16c3e6745979a45d86f8762d45d9a8732fb50713214554aecd8a42116d1987df48bccb7b9e8b033d789f59d50d87019647a3f29cdc6701cd6a97fbc50e09e81e1e7511f845db6ad57e10eaa9c72ea32c98c00bc5fb0eac483edbdc92dd172f63eb7751fbac453cb04140f388bb404fb6c7f51759bac7ed32c77d2c27b70ab0d3a60bf91d3c86cc2bed4d89e1dba6a41ecec9ccdeb30ceba544eb9605c1088d8bc76a2a613ca17bfa999fa6ae0ee9589a1a0e5e779ce64268404c74b155f14d6895b79c00faca13fa27b0fbc5526b8ddc279300bcda098c5a3408c922172ba6bc8bb306087190e2284ef12e42ecc9a3c05ece050a6bff374aee86eea776ef181ea8866e9dd1e0ade3bcf48faa8a9030526ae5351c16f1843afa3efa36644cd4c6ec22960822611305f835363bdee5a73e13be1c579512a5d7be5ad5b22699bf61ca0754583bcf81209180d6f6e9ccaf9d675ffb952c1be956cc6bc0eb0bdff1a201ab9cc65cc50255aeea5fcba46efa7e0fa23032962ec3ca907a23192bc06034be1a6d6fe4777c95100b69a163c1fd2685c36625a42e40849bad7628c946e30c5e4df5585a9e4016be2f237bb67d4c634361d57eedee416b21aadfefb5e0b5b7dafa5b837054bcaa54c54f64fb255111abd82fdf8b592c49bacf8ea464186dd1ae4aa8c60ed96b306a6ce5acaf2a83062f35c2880ada5633fe27d178354bd248c886395df0412325a1885bd8211167856799aea33d46561555b53c9e49e27a997c54b9e4e61916017390eb7022e537e24a41fb0c4c42764532aa07bdc1950435df8bb82b1071245664af303270b3a7d55959141cd98339bf107223441b7558c6604ed3550fd1796f4e439805c4b453205708bfbe0bb174d0dff0fccce42b4e423ada1ecfbe996b3b69e95030a12c57a8d8b1b74ad7e645e72d0bd078ab4be01c9c97bcab010e03be9585573d576c727bcc6a13f06606e77ff29bc20193e5e037da955c82c42a9f82ac14339a3004977dadf254164a5d87832880ed076fabf9f81da5f56b665784199644b06a4a09373b9b7b295bd3f97fb01b0172a7b53db54a705a97ff2a85d5efd3a5d6e0618de5ec5727fdd54333a96371153ab0c96e79fd3d039aa96e50407ec6517a8f09d6bfa12c7d1094ed72744a093db3029bc8a1c295514a6c9d2f6bc43761edf48765556204e495232a47bb13dd5357a72289d1505bc8f7e5fc8666f5b49f1cadd54bc8c3ab956bea46930b73ad4879fc52997b3f43ed11e1201fb66c06162cdbb18c6a61015731b3e1647129963f9c76ca608d21af2c09f3195807d6680301b9445ae9487b972de9c6ea65cf295571621c490f7327693070b6695b956a5166676f8e63efd90bc8f3b087f42ffdd02e5e5b913956971b61398dc7f3978e912250c96cd27ebb83cb9999a6dc20c70d6c7ab12e16968990d384fa130f3edf3f7c282501a1f9ab46d885ed6bf1f69ab2958bc01745c0e7b2aa6e29ffddfd29c17a35d61a7f25d56ce225029a9afa4e55f5dea877a76eecd5441e6e58a3deb7efe9632d1ecfd1f858da5546f3636aec09d9234059ad1ee93d4286644d6c5c9b382b78b8890f38ea096b342c539cbcaaf13d65904fe54518657951045c957e0499b99be28a7cc5813efa5e249664e9170dd3ed70b6c14aecba82422406bbd5d9c6710d297235e67bc449e276531817488b471c2f9d2149964fed3cba405ab312c25b35176f69667ce6283c212a393b86661d4b93bdd19ecaf8db868d1cc35e194e01d08ab23912074f65381fd2ae20a25e09cd9ca9886e16782ecca89d6471a51e4bc3e723a9e3019d813a8be19301daa240100e05387b8e08c89caf8cee9e0bce4dc5905794f3b23bc9f4cbb183067e16c8e9e1cf129ccbcbd8487c87b4313effc040e8e0b343e916301717ee08bfe029979ea0e3693f2b8f5704da1be3360fc2e93bb126460545e71386b90eb1de72d5e9f4e632874c3b84b3d9856cd2620d2480473c50f112c228f966c479a79fbbb79c5464844c1116ccaa978d8f5a9c4a05025a52c618c52e82dead8ae01a9829306d9397fbc291af72a94669dd48ccb664391c68f861ccdf013a33d0c6b308fc8bbfaecf92afad548dc8485bd8973f52b241cfd7fe1fd2f5fcabbcebfe455a9eb6c4cb3018d4e83f10427f9126a91723a3184e2885f204064361f5b70d6c8dc61681670cf697d14c310d37a4e777fd534109af9e72f5128757fc7924a4bceb6e3a2da857caad2c0e137456bcbf481197a0679256b44ece20966571ee59a77c3eaa79716ffe763cd3bd9a2a2b272de8fe5c52bc9f41dc15860414456fcc127ee8a54eaa52f6e62db8ef553d86970cdb9fec0abf0f65585cb81ea9b5741f6621b7020328bee4bedee7064768bf68585e8fa51ac9733355446af021f18bf0f946a5242843b400e40103710842fbf73db5d155a8261da633ac9b1aa7d59a0599f3bdf4caca6c4d3d793159533e906545b7a2b527a1384b5831eb4eebeddec0c1af4d25a0b28599480b8d783ed0c3a7d41e2010c4ee3d66ff4fad88f3b9d2a93df2a26bc048ec49cf8854f37f1c3512c17e4f224c99d7765c13b8746e2e62dd22fd63708d9c6d6f10bf0a62de8995e803d63a6f0ab75a90dcb57b744c94296bdfea70a16e033bdf2264464e620d0f53ca4c9a896e609418e177da54f7250cbe29078a3f6c60c1d7bd6b1e4ea1c4d25d6a1e4c366bdf02e7ea996981e421ee099d8af168d6eb8e210223289067263c2850a5207743eb087127a7f4171e5f56c82738882643bbacdd7381d4c2f5fc0d6e2609098f5fd96afa062ae916f7c151acd5af8bba4a8e59a4f26f314ef42c426c67a6183d3c061a5d6000a22bc017b83704016f3e098b25845d6ffe96e6787d395c0bb55080f3799e5f778d6b25c9b0dd3ffd4e8ea45bea00f8aec156ce5d961a76f456dc8829414d16af8a8e2750e2e91abd0a0ed01b2c8723b1a080bdca06fa1d75b0a540659a8c4206bbb51fc987db42a18cfe3a3bd02f791bc6bef3debad382038e89f097892ee329a7a8441a1b7be090621cf17b562ce92ea9e78c9b0c83bc7c4993ef0bd3b7e945c21ac8c6688e49d85879dec2aab014f8added8a1e0361b352a58fa2c9fdcf022b98d02567fe3a58f5099e9b2ea7faefa658f42498684b02695dbe2e3fd89f2f985e90764c91fec0fae5839b2d05128bf1a3e547d595d87759c967a59f3b201aa8edb03694ca98e1fa91b65fbead83b4706e9937f80109693a68a087dbf7bc9c76020887169777f0230de9434f45ea062e896ae20c0ed931152f7b5c1011dad93c9692c6862300e33e921a6f4777ec74708ddccb7b527a0bc7231af086785b90fff8c6e9b8ac8aa6b9a5158c5fee298cf7efa86e2705cfa63b151ed78a2cf7e26a3b978c587f7c5246e4ed2dce059b6371d27c47a2cdcfa30b3afb6c9f1b33fa2a21816ee792f8120edd6305d7ae377f3a8a0a45dae6b648348633139528665906df972020cc0208cd7995c360bc24136711c9a11a949303f19befa7ecbccf6884e5db54e08b08c3a66023ca4bbbbf4114826add9c1333e384519373b9abaea9141ff604287f6e779de7282087bf6d6293bf50140929d4eae97ec076e6d1180305f2449ea47a8491ebaea46b55a33fc9d89551c95e0908089918fb8fe2efb888979e057ffcd969d1fcc9c850f66f38ddee1be966fd5cad626712527c052d77e6973c9f584efba2810fb7cbdd58cc4f4b7a6e605ebd4e7d35fbc1a45d1635e59253aa4c337c0b05949f255acd7799a7e407d72170ee0feec1c00f777132af60841c54577a7634799043e83cae2511564e0235fe21de997a432c52d3ccbe9bcea33a9c86a2c39f10df182839f0168cca22b4e60d82dd68ec3af15c830e564efece8dfb537b58d89da935c0b3a51aab5faa070daf9c2d1c42cd5ce550d0f5ba401b72c10ec15670b0c96b224dce1ebaeb397701aa04179a22c12d1d89e22e56b1890b63e4b8123372d9e48809ff2ed1b0ce6bfa16ed06ef8cfdef99ccd433e4c2c818691b9e6b5cca02fe1cb42884f56bba3c8cd5db05c550b39b546f679c1689e1bbae527e21863e97f42d62012998e1f855307487595854ecf9a04f97d50568c55d72e586e6354e9043d504f3a3004c142bbe8c4842554c1ac40a717adf5272e47a9aada793eee31d53da7ebee91f23e111e92fd2dce04030c36ee8b31670a25646c91fb6de593033f841ef33bae818c682d2fabda883354bf4270fb41d1e7f246e5c7265f259bb332fde7a4103f1b260a0fa32f639287b98d4212d52b04e9579db986c973f153e41aacffb287f2d398aa58d06e9b81cc8e54fae35d2f68513e2091e21cac019a2e03ab2e0fa9e526a289ac514ff4cb5477475d42fe6bbee4a45a4374f07680fa3235e0354088ff335e75a7336a7b19f305e6491807dc433ae8fca22810e5a744ceeaab384f716f9792d910bb25b9806612816c49458d241abe7ea99cf2901ddea408b9e0b953b04cf316aaf4c338ffe3dd7b93f54f7d36b98d3a2213e7911ac2738e49c5b77ea0830610054019af431514a2fa65683ec6105cb2da1417ece7f714ff89f4c418f65cc2cc4b717dd054b9f3c05acaef579907a7c60cf1666b8be27c4714ee4775dc4f2770b8fcd5065d11b7b42975fbcf07475cec4f874a93ab2c8cf8110cf4264169ca7afd", @generic="0b9685aa47e8ca9c44dd064272c2fca88c8fbe11d799e5c6fb0a7c8c816910f23ac54944ccdb137399d20f813fe407dd7ea6e7d3529793a820b88515353c36c23badd0018aed449c2d01ea8a869449d287268ab80a25faf28af7d2581642698987d356a0c24a5a35dd882749175c3d49f0ad055a010c3c32a930007e20176c6088ecbd9da58624f8a0ddce7aa764da78049f13be46d67e9fd4f15c550880c444e726fb29d4403f78e63e9ec0f52d2231122d", @typed={0x8, 0xa6, 0x0, 0x0, @fd=r3}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x108, 0x2e, 0x0, 0x1, [@typed={0xb, 0x13a, 0x0, 0x0, @str='*u$-!*\x00'}, @nested={0xda, 0xae, 0x0, 0x1, [@generic="360bf8088a460ed60ac83a23781ed14534721d9d84dbe14e0081d3dbb6adee516153a7c9358eedf8462c70ec538fbfdc1f256f489a64383329e627c3989277563e9cfeaf28151fc77c013d75376fc6ab435af52fcb9f167b849b67546243c818633b33ee6b23b6d702ced1f4405b7f12d49b6751089d67f4629d0077fa164e8a44f3118eed5bbb229dd3e60f242bfe5276ae12e0f46b0a855dd74db2c2d9bceefe7e19656b88b510a76123b1ae107918af7c1be6a39825ae01a0bea89c1c8a643f4cabb3a78b163f808fbdd62261", @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x6}]}]}, 0x1230}, 0x1, 0x0, 0x0, 0x8000}, 0x24048054) read$auto(r0, &(0x7f0000001480)='-,\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'veth1_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'veth1_to_hsr\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x174, r1, 0x539, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9d}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x12e, 0x2b, 0x0, 0x1, [@generic="b7698e2dbd8869ee9b016ae0dad9d8ed17ca2947249a654976f514178f8b06e5c39da779", @generic="a2b72d3bfc371fb4023bf4682b785a8999a2ffb418e17537806cd093fe4ce3caf8c996a5934a8844f88b5aaa7a3ba2db789da85ea826fa38db3ebe21a941", @generic="1629b22814ca35d54def8a26c1013caa08e2ae216fbdc83b0f09d9ffbf3052e9e962a9beea0050f202d059e3ce3ac3847e967a5ef7d7338405d10f50382f53c6a417e124a4e5fcb40e490d5d985dc2023e46001caf85d706a15760fc95e5a768f7b7e687ca17d7e17652a58a52a15ea2eb0435994ed967d9b91b33bdb752a76400c6f1bdd3ca70300a940fde2bb0d8fe7a94c10169a56fe1aa72721a5d0ac2cfc11159e96f1b4c20864fc51deb99672ef1555291", @generic="b1d6ac37a0de882ab37c51ce97be39c8c788de3b"]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x174, r1, 0x539, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9d}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x12e, 0x2b, 0x0, 0x1, [@generic="b7698e2dbd8869ee9b016ae0dad9d8ed17ca2947249a654976f514178f8b06e5c39da779", @generic="a2b72d3bfc371fb4023bf4682b785a8999a2ffb418e17537806cd093fe4ce3caf8c996a5934a8844f88b5aaa7a3ba2db789da85ea826fa38db3ebe21a941", @generic="1629b22814ca35d54def8a26c1013caa08e2ae216fbdc83b0f09d9ffbf3052e9e962a9beea0050f202d059e3ce3ac3847e967a5ef7d7338405d10f50382f53c6a417e124a4e5fcb40e490d5d985dc2023e46001caf85d706a15760fc95e5a768f7b7e687ca17d7e17652a58a52a15ea2eb0435994ed967d9b91b33bdb752a76400c6f1bdd3ca70300a940fde2bb0d8fe7a94c10169a56fe1aa72721a5d0ac2cfc11159e96f1b4c20864fc51deb99672ef1555291", @generic="b1d6ac37a0de882ab37c51ce97be39c8c788de3b"]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001780), r0) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x148, r6, 0x180, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@nested={0x10b, 0x5, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x11f}, @generic="2528a1455b6bdc9c5f5884329fbbbf06ea720f1f0f9bc600dd2d7187798dfb4d581d8aa20417e12669af4194b56471a04d53fcf8ff2bb08237097a98ad94b86a8f162085ce2074a45a40e7445699e27a2c59a868ccc41b989087299dfa44cfde5af83bfeb4f7c9d46946561875f6619c25934c50638f8687227ae606b3557a3640fe41e7144b24dcbad2e0fdd801e758ddca4427ebee05ed133573280d940c6985aa5785eee57e12065cc9739f03069683bb615a02cda7c4f104db0f9c78a15224c95c8fe76bd26ab90e4137e5dd9bd8785575dc57166553129275f536b582", @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @typed={0x7, 0x139, 0x0, 0x0, @str='-,\x00'}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x880}, @typed={0x4, 0xbd}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@broadcast}]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) (async) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x148, r6, 0x180, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@nested={0x10b, 0x5, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x11f}, @generic="2528a1455b6bdc9c5f5884329fbbbf06ea720f1f0f9bc600dd2d7187798dfb4d581d8aa20417e12669af4194b56471a04d53fcf8ff2bb08237097a98ad94b86a8f162085ce2074a45a40e7445699e27a2c59a868ccc41b989087299dfa44cfde5af83bfeb4f7c9d46946561875f6619c25934c50638f8687227ae606b3557a3640fe41e7144b24dcbad2e0fdd801e758ddca4427ebee05ed133573280d940c6985aa5785eee57e12065cc9739f03069683bb615a02cda7c4f104db0f9c78a15224c95c8fe76bd26ab90e4137e5dd9bd8785575dc57166553129275f536b582", @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @typed={0x7, 0x139, 0x0, 0x0, @str='-,\x00'}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x880}, @typed={0x4, 0xbd}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@broadcast}]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0x9, 0x9) (async) munmap$auto(0x9, 0x9) utime$auto(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0xc3ea, 0x3}) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_WIPHY_NAME={0xa, 0x2, '{[[&-\x00'}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048881}, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_WIPHY_NAME={0xa, 0x2, '{[[&-\x00'}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048881}, 0x1) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001b80), 0x80, 0x0) ioctl$auto_TUNDETACHFILTER(r8, 0x401054d6, &(0x7f0000001c00)={0x10, &(0x7f0000001bc0)={0x54e7, 0x9, 0x4a, @raw=0x8}}) r9 = socketcall$auto_SYS_BIND(0x2, &(0x7f0000001c40)=0x80000000) ioctl$auto_posix_clock_file_operations_posix_clock(r9, 0x0, &(0x7f0000001c80)="cb70ff09caa57019305f5d137f") semctl$auto_IPC_STAT(0x9, 0x5, 0x2, 0x9) bpf$auto(0x378b, &(0x7f0000001cc0)=@bpf_attr_11={0x0, 0x1, 0x80000000, 0x8001, 0xf8, 0x3ee, 0xe, r7}, 0x1) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000001d80)={0x4, [{0x8, 0x3}, {0x5087, 0x598}, {0x23c, 0x3ff}, {0x9, 0x5}, {0x6, 0x58a9}, {0x3, 0xffff}, {0x30, 0x9}, {0x80000000, 0x5a6f}, {0x1, 0x2}, {0x6, 0xffff}, {0x400, 0x3}, {0xfa, 0x9}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x7}, {0xf, 0x4}, {0x1, 0x7}, {0x1, 0x200}, {0x3, 0x7}, {0x80000000, 0x629}, {0xba5}, {0x2, 0x80000000}, {0x8, 0x5}, {0x4, 0x6c}, {0x7, 0x81}, {0xd, 0xfffffffffffffffb}, {0x1, 0x2}, {0x7ff, 0x1}, {0x3, 0x200}, {0x51, 0x6}, {0x10001, 0x4}, {0x3, 0x80000000}, {0x36, 0x1}, {0x0, 0x9}, {0x3, 0x2c1}, {0x10001, 0x3}, {0x6, 0x81}, {0x4, 0x1}, {0x80, 0x8}, {0x6, 0x10001}, {0x1, 0x7}, {0x7, 0x8000}, {0x10, 0x51}, {0x1, 0xffffffffffff27b2}, {0xd, 0x9}, {0x5, 0x6}, {0x5, 0x7}, {0x6, 0x81}, {0xffffffffffff0000, 0x7}, {0xa, 0x9}, {0xaa, 0xfffffffffffffffb}, {0xfff, 0x3}, {0x0, 0x7a}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0xffffffffffffffff}, {0xfa2c, 0x1}, {0x1, 0x6}, {0xef, 0x7f}, {0x8001, 0x4}, {0x2, 0x7ff}, {0x2, 0x3}, {0x8, 0x10001}, {0x40, 0x7a03}, {0x2, 0x91}, {0x0, 0x9}, {0xa, 0x6}, {0x3, 0x9}, {0x100, 0x5}, {0x3, 0x6}, {0xe04d, 0x8}, {0x9, 0x577}, {0x9, 0x5}, {0xffff}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x6}, {0x0, 0xe}, {0x2, 0x9}, {0xcbe4, 0x9}, {0x1b7d, 0x8}, {0xa3e, 0xff}, {0x7}, {0x1, 0x40}, {0x8000000000000001, 0x9a}, {0x7, 0xc}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x7f}, {0x9, 0x1}, {0xc9ca, 0xfcda}, {0xc, 0x100000000}, {0x4, 0x6}, {0x5, 0x968}, {0x9, 0x49}, {0xab6e}, {0x2, 0x7}, {0x7, 0x10}, {0x1, 0x55c}, {0x687, 0x8}, {0x8, 0x455}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0xe}, {0x0, 0x7c}, {0x91, 0x1}, {0x8001, 0x87}, {0xf, 0x5}, {0x7, 0x5e23}, {0x8ca, 0x1}, {0x7, 0x93}, {0xc, 0x30ee}, {0x190bd9d, 0x1}, {0xfff, 0x8000}, {0x5, 0x7}, {0xff, 0x6f}, {0xe, 0x1000}, {0x9, 0x1}, {0x100, 0xb}, {0x0, 0x7}, {0x8, 0x3}, {0x1, 0xed}, {0x0, 0x92a0}, {0x8, 0x3}, {0x1, 0x452}, {0x4000, 0x7fff}, {0x4e7, 0x1}, {0x5586, 0x35}, {0x6, 0xd}, {0x22e, 0x555}, {0x7, 0x2}, {0x6}, {0x3000000000, 0x2}, {0x3ff, 0x8}, {0x101, 0x7fffffff}, {0x6, 0x8cce}, {0x9, 0x80000000}, {0x5ba9b19e, 0x2}, {0x22c3, 0x3ff}, {0x6d, 0x4}, {0x10001, 0x2}, {0x5, 0x7ff}, {0x3ff, 0x6}, {0xf476, 0x8}, {0x8, 0x400}, {0x6, 0x7ff}, {0x81, 0x7}, {0x16e6, 0x7fffffff}, {0x9, 0xffffffffffffffc0}, {0x3, 0x2d58}, {0x5, 0xa0000}, {0x9, 0xfffffffffffffffa}, {0x7, 0x9}, {0x39, 0xcf}, {0x6, 0xae3d}, {0x80000001, 0xb22}, {0xfff, 0x41}, {0x25f, 0xfffffffffffffff8}, {0x9bea218, 0x7}, {0x0, 0x8}, {0x7}, {0x8, 0x81}, {0x3, 0xfffffffffffffffc}, {0x8, 0x1}, {0x3, 0x3}, {0x10000, 0x1}, {0x800}, {0xbc0d, 0xdc}, {0x5e, 0x5aab889a}, {0xffffffffffffffff, 0x8}, {0x5, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x0, 0xff}, {0x7fffffffffffffff}, {0x8, 0x80000001}, {0x1, 0x45}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x6}, {0xfffffffffffffffb, 0x6}, {0x7, 0x10}, {0x3, 0x5a}, {0x5, 0x5a1}, {0x100, 0x200}, {0x1, 0x36}, {0x5, 0xe7c}, {0x3, 0x7}, {0x2, 0xf4}, {0x7, 0x7ff}, {0x80000000, 0x10000}, {0x858, 0x48b}, {0x1ff, 0xc}, {0x7ec, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {0xff, 0x7}, {0x4, 0x4}, {0x6, 0x101}, {0x8000, 0x3ff}, {0x0, 0x9}, {0xd4, 0x752}, {0x3, 0x8}, {0x84, 0x81}, {0x6}, {0x3, 0xffffffff}, {0x5, 0x8e}, {0xf40, 0x1ff}, {0x9, 0x1}, {0x7, 0xf}, {0x81, 0x100}, {0x3}, {0x9, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0xc, 0x1}, {0x9, 0x9}, {0x1, 0x3ff}, {0x9, 0x80}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0xffffffffffffffff}, {0x2, 0x4}, {0x6, 0xff}, {0x101, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0xffffffffffffff81, 0x10}, {0x0, 0xba}, {0x2, 0x7}, {0x80000000, 0x1}, {0x1, 0x8000000000000000}, {0x6, 0x3}, {0x5, 0x5}, {0x7fff, 0x101}, {0x6, 0x3}, {0x1000, 0x1}, {0x6, 0x1}, {0x3}, {0x0, 0x8}, {0xffffffff, 0x378000000}, {0x6, 0x8}, {0x9ab1, 0x100000000}, {0x3, 0x1}, {0x6, 0x79f6}, {0x3ff, 0x2}, {0x10, 0x100000001}, {0x6, 0x7}, {0x3ff}, {0x1, 0xf}, {0x6, 0xffffffff}, {0x1000, 0xff}], 0xe, "f6e8dedfe79e69"}) waitid$auto_P_PGID(0x2, r10, &(0x7f0000002e40)={@siginfo_0_0={0x3, 0x3, 0x1, @_sigsys={&(0x7f0000002d80)="7919e3303f0c9b98a27342be455563c6767f66e2a27b00e7b8122bc3bac03afd1b96486359eae959fbc92921f23413f010db92517b5eb9835b17e7c51a41b818fed3f7c224110f753287489c6a6da2f06b99e426aa371f20713ec2e265ee2e4c581e03d1af65f9e34568a92e8f5d53698e3c33b6880bca6502db6727acf6f3f0af503b03e5f65a618e54b532475b70da5e", 0x8c59, 0x401}}}, 0x55e4, &(0x7f0000002ec0)={{0x2, 0x80000001}, {0x2, 0x1}, 0x1, 0x2, 0x5, 0x2, 0x1, 0x6, 0x4, 0x4, 0x10, 0x3, 0x1, 0xfff, 0x0, 0x7}) (async) waitid$auto_P_PGID(0x2, r10, &(0x7f0000002e40)={@siginfo_0_0={0x3, 0x3, 0x1, @_sigsys={&(0x7f0000002d80)="7919e3303f0c9b98a27342be455563c6767f66e2a27b00e7b8122bc3bac03afd1b96486359eae959fbc92921f23413f010db92517b5eb9835b17e7c51a41b818fed3f7c224110f753287489c6a6da2f06b99e426aa371f20713ec2e265ee2e4c581e03d1af65f9e34568a92e8f5d53698e3c33b6880bca6502db6727acf6f3f0af503b03e5f65a618e54b532475b70da5e", 0x8c59, 0x401}}}, 0x55e4, &(0x7f0000002ec0)={{0x2, 0x80000001}, {0x2, 0x1}, 0x1, 0x2, 0x5, 0x2, 0x1, 0x6, 0x4, 0x4, 0x10, 0x3, 0x1, 0xfff, 0x0, 0x7}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002fc0), r10) (async) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002fc0), r10) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r8, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x74, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x3ff}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x7, 0x2, '-,\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x1ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003140), r7) (async) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003140), r7) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x58, r12, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x2}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x100}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf, 0xac, "aab62e7ea154de150fa88e"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x42) process_vm_readv$auto(r2, &(0x7f0000003340)={&(0x7f0000003280)="36e18ecf2ac556de2a5356eb22083452b74c7956fc61bcf4af7aa684eca505fa29e386e773860ece2af0d80192661107056ee3ca10e6c970216e5f6afb3100773c880d93c850b185765c5a19b30f0d0dba9685445d08504ace9776653cc45c6859a0b18a9c3970e81f6d037fdfa73d083d4cccdcbbf0d1843aa59e9ecec4b36b281a", 0xc5c2}, 0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003380)="6e82b27c3b068ec629424457d69494827914a558da22e046213cef1974e506a0e39819c94dc5f80a3e8d37271b336e20f9ddc5e753af94642b9a2f89fa87d6011c25c514c13da54ea99344ac5e721aef19db3908c95457773a60", 0x1}, 0x80, 0x571) (async) process_vm_readv$auto(r2, &(0x7f0000003340)={&(0x7f0000003280)="36e18ecf2ac556de2a5356eb22083452b74c7956fc61bcf4af7aa684eca505fa29e386e773860ece2af0d80192661107056ee3ca10e6c970216e5f6afb3100773c880d93c850b185765c5a19b30f0d0dba9685445d08504ace9776653cc45c6859a0b18a9c3970e81f6d037fdfa73d083d4cccdcbbf0d1843aa59e9ecec4b36b281a", 0xc5c2}, 0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003380)="6e82b27c3b068ec629424457d69494827914a558da22e046213cef1974e506a0e39819c94dc5f80a3e8d37271b336e20f9ddc5e753af94642b9a2f89fa87d6011c25c514c13da54ea99344ac5e721aef19db3908c95457773a60", 0x1}, 0x80, 0x571) setsockopt$auto_SO_DEBUG(r7, 0x3, 0x1, &(0x7f0000003440)=')\\\'\\]^\x00', 0x7) sendmsg$auto_ILA_CMD_DEL(r10, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x40, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x2}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xb3af}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4) 1.235375086s ago: executing program 0 (id=1240): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x2a0400, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x20040, 0x0) r3 = signalfd4$auto(r2, &(0x7f0000000040)={0x40}, 0x2000000000079, 0x2) mmap$auto(0x0, 0x400008, 0x3, 0x14, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) prctl$auto(0x2f, 0x5, 0x8, 0x0, 0x3) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x200, 0x80008, 0x7, 0x7fd, "4941ae833e2fc65b6b3cf7cec76d6778353764c03643eeb0dc59c8dd3500f11581866caa0d30530400"}, 0x4, 0x86e, 0xf, @inferred, @integer64={0x11ab, 0xe, 0xa}, "6cc1888a63a4f1b4285854c5368de438f8cc142ef6df1259b073a1183bed0730a1ec603b81363dc61c329714e5311121c7607f45c75500"}) close_range$auto(0x2, 0x8, 0x0) read$auto(r1, 0x0, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffd) sysfs$auto(0x7, 0x2, 0xfffffffffffffffe) r6 = fsopen$auto(0x0, 0x1) ioperm$auto(0x1ff, 0x2, 0x2000000000000149) umask$auto(0x6) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r8 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r8, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) ioctl$auto_SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000001c0)="193a40929b13def2787fa60f5ee20ef534fdc555fd7b3779e269f3c1b1187a6e533c09438cffdcffaaef90e2492c32caba26f9410bb2aa89dc45412ffa887ddae7b5b0b9edf333b8220fe90bcee196f317a8b1fbf9be4b3e149dbe6c3e1b9e39") 1.134607593s ago: executing program 2 (id=1241): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100cda4429629bd7100f9db5f2502000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r5 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r5) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x400, 0x70bd2a, 0x25dfdbf8, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x8000) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r10, r0, 0x0, 0x6) 193.375425ms ago: executing program 2 (id=1242): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r1, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f44, 0xffffffffffffffff) sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x8100, 0x3}, 0x22) 0s ago: executing program 0 (id=1243): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r0, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = open(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x961064a0, 0x600000000200007) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) kernel console output (not intermixed with test programs): i0: empty MTD device detected [ 261.338899][ T7730] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 261.372791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.379154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.390094][ T7730] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 261.397371][ T7730] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 261.433892][ T7730] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 261.467321][ T7730] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 261.512216][ T7730] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 261.525969][ T7730] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3507026629 [ 261.545661][ T7730] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 261.560497][ T7739] ubi0: background thread "ubi_bgt0d" started, PID 7739 [ 262.136755][ T7761] FAULT_INJECTION: forcing a failure. [ 262.136755][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 262.237031][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.0.386 Not tainted 6.14.0-rc4-syzkaller #0 [ 262.237072][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.237090][ T7761] Call Trace: [ 262.237099][ T7761] [ 262.237120][ T7761] dump_stack_lvl+0x16c/0x1f0 [ 262.237166][ T7761] should_fail_ex+0x50a/0x650 [ 262.237219][ T7761] ? fs_reclaim_acquire+0xae/0x150 [ 262.237265][ T7761] should_failslab+0xc2/0x120 [ 262.237296][ T7761] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 262.237348][ T7761] ? shmem_alloc_inode+0x25/0x50 [ 262.237399][ T7761] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 262.237441][ T7761] shmem_alloc_inode+0x25/0x50 [ 262.237487][ T7761] alloc_inode+0x5d/0x230 [ 262.237519][ T7761] new_inode+0x22/0x210 [ 262.237554][ T7761] shmem_get_inode+0x194/0xf00 [ 262.237605][ T7761] ? __vm_enough_memory+0x184/0x3f0 [ 262.237657][ T7761] __shmem_file_setup+0x16f/0x300 [ 262.237695][ T7761] shmem_zero_setup+0x93/0x1b0 [ 262.237737][ T7761] __mmap_region+0x2021/0x2760 [ 262.237772][ T7761] ? __pfx___mmap_region+0x10/0x10 [ 262.237799][ T7761] ? finish_task_switch.isra.0+0x217/0xcc0 [ 262.237849][ T7761] ? __switch_to+0x749/0x1190 [ 262.237891][ T7761] ? hlock_class+0x4e/0x130 [ 262.237925][ T7761] ? mark_lock+0xb5/0xc60 [ 262.237983][ T7761] ? __pfx___schedule+0x10/0x10 [ 262.238067][ T7761] ? cap_capable+0xb3/0x250 [ 262.238106][ T7761] mmap_region+0x1ab/0x3f0 [ 262.238156][ T7761] do_mmap+0xd8d/0x11b0 [ 262.238208][ T7761] ? __pfx_do_mmap+0x10/0x10 [ 262.238252][ T7761] ? __pfx_down_write_killable+0x10/0x10 [ 262.238305][ T7761] vm_mmap_pgoff+0x203/0x3a0 [ 262.238359][ T7761] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 262.238413][ T7761] ? __x64_sys_futex+0x1e1/0x4c0 [ 262.238450][ T7761] ? __x64_sys_futex+0x1ea/0x4c0 [ 262.238496][ T7761] ksys_mmap_pgoff+0x7d/0x5c0 [ 262.238539][ T7761] ? rcu_is_watching+0x12/0xc0 [ 262.238578][ T7761] __x64_sys_mmap+0x125/0x190 [ 262.238630][ T7761] do_syscall_64+0xcd/0x250 [ 262.238675][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.238721][ T7761] RIP: 0033:0x7f170db8d169 [ 262.238747][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.238778][ T7761] RSP: 002b:00007f170b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.238808][ T7761] RAX: ffffffffffffffda RBX: 00007f170dda5fa0 RCX: 00007f170db8d169 [ 262.238829][ T7761] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 262.238848][ T7761] RBP: 00007f170dc0e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 262.238867][ T7761] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 262.238884][ T7761] R13: 0000000000000000 R14: 00007f170dda5fa0 R15: 00007ffdf18fb338 [ 262.238924][ T7761] [ 263.549547][ T7797] FAULT_INJECTION: forcing a failure. [ 263.549547][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 263.573818][ T7797] CPU: 0 UID: 0 PID: 7797 Comm: syz.2.392 Not tainted 6.14.0-rc4-syzkaller #0 [ 263.573860][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.573879][ T7797] Call Trace: [ 263.573888][ T7797] [ 263.573900][ T7797] dump_stack_lvl+0x16c/0x1f0 [ 263.573972][ T7797] should_fail_ex+0x50a/0x650 [ 263.574025][ T7797] ? fs_reclaim_acquire+0xae/0x150 [ 263.574070][ T7797] should_failslab+0xc2/0x120 [ 263.574100][ T7797] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 263.574154][ T7797] ? fib_rules_register+0x30/0x500 [ 263.574201][ T7797] kmemdup_noprof+0x29/0x60 [ 263.574241][ T7797] fib_rules_register+0x30/0x500 [ 263.574287][ T7797] fib4_rules_init+0x1f/0x1c0 [ 263.574346][ T7797] fib_net_init+0x1de/0x3d0 [ 263.574386][ T7797] ? __pfx_fib_net_init+0x10/0x10 [ 263.574428][ T7797] ? do_init_timer+0xc9/0x110 [ 263.574466][ T7797] ? devinet_init_net+0x5c1/0x900 [ 263.574514][ T7797] ? __pfx_fib_net_init+0x10/0x10 [ 263.574551][ T7797] ops_init+0x1df/0x5f0 [ 263.574603][ T7797] setup_net+0x21f/0x860 [ 263.574653][ T7797] ? __pfx_setup_net+0x10/0x10 [ 263.574699][ T7797] ? down_read_killable+0xcc/0x380 [ 263.574745][ T7797] ? __pfx_down_read_killable+0x10/0x10 [ 263.574787][ T7797] ? __raw_spin_lock_init+0x3a/0x110 [ 263.574843][ T7797] ? debug_mutex_init+0x37/0x70 [ 263.574879][ T7797] copy_net_ns+0x2a6/0x5f0 [ 263.574914][ T7797] create_new_namespaces+0x3ea/0xad0 [ 263.574975][ T7797] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 263.575029][ T7797] ksys_unshare+0x45d/0xa40 [ 263.575064][ T7797] ? __pfx_ksys_unshare+0x10/0x10 [ 263.575096][ T7797] ? xfd_validate_state+0x5d/0x180 [ 263.575154][ T7797] __x64_sys_unshare+0x31/0x40 [ 263.575186][ T7797] do_syscall_64+0xcd/0x250 [ 263.575228][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.575273][ T7797] RIP: 0033:0x7f98ed38d169 [ 263.575305][ T7797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.575335][ T7797] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.575364][ T7797] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 263.575384][ T7797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 263.575402][ T7797] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 263.575421][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.575438][ T7797] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 263.575487][ T7797] [ 264.347244][ T7805] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 266.649035][ T7827] input: isc as /devices/virtual/input/input11 [ 266.721689][ T7827] FAULT_INJECTION: forcing a failure. [ 266.721689][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 266.837671][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.1.397 Not tainted 6.14.0-rc4-syzkaller #0 [ 266.837713][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.837733][ T7827] Call Trace: [ 266.837742][ T7827] [ 266.837754][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 266.837801][ T7827] should_fail_ex+0x50a/0x650 [ 266.837852][ T7827] ? fs_reclaim_acquire+0xae/0x150 [ 266.837898][ T7827] should_failslab+0xc2/0x120 [ 266.837937][ T7827] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 266.837992][ T7827] ? __kernfs_new_node+0xd3/0x890 [ 266.838045][ T7827] __kernfs_new_node+0xd3/0x890 [ 266.838093][ T7827] ? __pfx___kernfs_new_node+0x10/0x10 [ 266.838137][ T7827] ? __pfx_lock_release+0x10/0x10 [ 266.838180][ T7827] ? kernfs_add_one+0x39d/0x520 [ 266.838243][ T7827] ? up_write+0x1b2/0x520 [ 266.838298][ T7827] kernfs_new_node+0x186/0x240 [ 266.838355][ T7827] __kernfs_create_file+0x53/0x350 [ 266.838396][ T7827] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 266.838447][ T7827] sysfs_merge_group+0x1b1/0x340 [ 266.838495][ T7827] ? __pfx_sysfs_merge_group+0x10/0x10 [ 266.838559][ T7827] ? __pfx_dev_add_physical_location+0x10/0x10 [ 266.838599][ T7827] ? bus_to_subsys+0x12d/0x160 [ 266.838651][ T7827] dpm_sysfs_add+0x237/0x280 [ 266.838695][ T7827] device_add+0x9a8/0x1a70 [ 266.838741][ T7827] ? __pfx_device_add+0x10/0x10 [ 266.838783][ T7827] ? __pfx_exact_lock+0x10/0x10 [ 266.838837][ T7827] ? kobject_get+0xbb/0x150 [ 266.838883][ T7827] cdev_device_add+0xc2/0x1e0 [ 266.838940][ T7827] evdev_connect+0x3a4/0x4c0 [ 266.838979][ T7827] input_attach_handler.isra.0+0x181/0x260 [ 266.839018][ T7827] input_register_device+0xa84/0x1130 [ 266.839049][ T7827] ? __pfx_uinput_ioctl+0x10/0x10 [ 266.839096][ T7827] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 266.839145][ T7827] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 266.839195][ T7827] ? __pfx_lock_release+0x10/0x10 [ 266.839238][ T7827] ? trace_lock_acquire+0x14e/0x1f0 [ 266.839307][ T7827] ? __fget_files+0x206/0x3a0 [ 266.839360][ T7827] ? __pfx_uinput_ioctl+0x10/0x10 [ 266.839407][ T7827] __x64_sys_ioctl+0x190/0x200 [ 266.839451][ T7827] do_syscall_64+0xcd/0x250 [ 266.839494][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.839541][ T7827] RIP: 0033:0x7fcbaf58d169 [ 266.839567][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.839598][ T7827] RSP: 002b:00007fcbb03df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.839627][ T7827] RAX: ffffffffffffffda RBX: 00007fcbaf7a5fa0 RCX: 00007fcbaf58d169 [ 266.839648][ T7827] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 266.839666][ T7827] RBP: 00007fcbaf60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.839684][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.839702][ T7827] R13: 0000000000000000 R14: 00007fcbaf7a5fa0 R15: 00007ffd2dfe2fc8 [ 266.839741][ T7827] [ 267.127538][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.560121][ T7827] input: failed to attach handler evdev to device input11, error: -12 [ 267.977216][ T7850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.030068][ T7850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.076651][ T7850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.181437][ T7850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.188085][ T7850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.857292][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 269.930986][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.090253][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.250054][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.250062][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.582192][ T7873] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(2.0.7), cmd(12) [ 271.775729][ T5849] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 271.775776][ T5849] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 271.791851][ T5849] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 271.791966][ T5849] Bluetooth: hci2: Malformed LE Event: 0x0d [ 272.020754][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.051973][ T7882] cgroup: fork rejected by pids controller in /syz1 [ 273.835815][ T8086] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000001000 [ 276.939511][ T8123] input: f¬Îú0?\7vÕëJL­§'$d)K‘ƒžïLšÜÈìÆoÝ1oN­cÕâ½Ûj¯@ÍÜqwRÀ=æX as /devices/virtual/input/input12 [ 277.049049][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 277.334581][ T8133] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 277.352236][ T8133] netlink: 230 bytes leftover after parsing attributes in process `syz.0.432'. [ 277.617384][ T8133] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 277.912605][ T8141] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 278.166189][ T8142] can: request_module (can-proto-0) failed. [ 279.323807][ T8176] Invalid ELF header magic: != ELF [ 280.242218][ T8192] netlink: 338 bytes leftover after parsing attributes in process `syz.0.446'. [ 280.250573][ T8194] syz.2.445 uses obsolete (PF_INET,SOCK_PACKET) [ 281.147459][ T8202] vivid-010: ================= START STATUS ================= [ 281.170148][ T8202] vivid-010: Generate PTS: true [ 281.175432][ T8202] vivid-010: Generate SCR: true [ 281.190812][ T8202] tpg source WxH: 640x360 (Y'CbCr) [ 281.195986][ T8202] tpg field: 1 [ 281.221412][ T8202] tpg crop: 640x360@0x0 [ 281.225654][ T8202] tpg compose: 640x360@0x0 [ 281.260309][ T8202] tpg colorspace: 8 [ 281.280895][ T8202] tpg transfer function: 0/0 [ 281.285558][ T8202] tpg Y'CbCr encoding: 0/0 [ 281.310065][ T8202] tpg quantization: 0/0 [ 281.314301][ T8202] tpg RGB range: 0/2 [ 281.318234][ T8202] vivid-010: ================== END STATUS ================== [ 286.898800][ T8202] syz.3.449 (8202) used greatest stack depth: 19920 bytes left [ 289.543014][ T8352] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 290.232014][ T8360] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 291.867665][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 296.170284][ T8450] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 297.572435][ T8467] nvme_fabrics: missing parameter 'transport=%s' [ 297.610061][ T8467] nvme_fabrics: missing parameter 'nqn=%s' [ 298.311553][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 298.410884][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.420647][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.429411][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.440389][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.450994][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 298.458390][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.292879][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 299.334572][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 300.001156][ T8511] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 300.572460][ T5843] Bluetooth: hci4: command tx timeout [ 300.697538][ T7890] syz.1.409 (7890) used greatest stack depth: 19072 bytes left [ 301.431891][ T7894] syz.1.409 (7894) used greatest stack depth: 19040 bytes left [ 302.511117][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.511230][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.511438][ T8488] bridge_slave_0: entered allmulticast mode [ 302.512786][ T8488] bridge_slave_0: entered promiscuous mode [ 302.515368][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.516241][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.516399][ T8488] bridge_slave_1: entered allmulticast mode [ 302.517635][ T8488] bridge_slave_1: entered promiscuous mode [ 302.653374][ T5843] Bluetooth: hci4: command tx timeout [ 302.894797][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.897546][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.447679][ T8488] team0: Port device team_slave_0 added [ 303.811229][ T8488] team0: Port device team_slave_1 added [ 304.735517][ T5843] Bluetooth: hci4: command tx timeout [ 304.956941][ T8555] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 305.257467][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.292695][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.354964][ T8560] Invalid ELF header magic: != ELF [ 305.379433][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.472069][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.492160][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.581627][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.412127][ T8565] syz.0.517 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.813593][ T5843] Bluetooth: hci4: command tx timeout [ 306.956541][ T8488] hsr_slave_0: entered promiscuous mode [ 306.990944][ T8488] hsr_slave_1: entered promiscuous mode [ 306.997129][ T8488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.030043][ T8488] Cannot create hsr debugfs directory [ 308.041672][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'. [ 308.394231][ T8578] bond0: (slave bond_slave_1): Releasing backup interface [ 308.717724][ T7906] syz.1.409 (7906) used greatest stack depth: 18000 bytes left [ 308.816177][ T8488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.923576][ T8488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.016103][ T8488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.104651][ T8488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.165608][ T8591] ptrace attach of "./syz-executor exec"[5835] was attempted by "'â¶FRùJ/X\x22Ëw†¥yß8¤JÈXýRÛH\x0bŠä”\x0d65V÷ºL­àÇ^ë8\x5c¤0@\x221~> ÷E%…à—¡Û\x22\x09›òð„«}#tâþÌÜ«„ÔáŽVžìpÏ”x…iþý.SpJ®ûHÄa\x0c<îSL\x1blÕÿ:Ho…ë#è%Ò¤¥„Š´Í/â~KbÉßûgo@UüˆÑË!Jßô8×XýVT\x0c÷ª@ÆÇ.ÃþFÏþênz£ŠH¶MšÊ‚@Éâgvpí±dCíÔæý?ÖËÒæ‡Þ™t?‚¤à£j’jÁÕÄÇåO·ã7(b»ˆ·3$‰ ¶¸CÍŠ«MEš€š57*;Ê\x5cþYhe<4 j»6€aR\x5cÙæËÚU“Ï}‘|±ŒiË2žˆ*,iÅ.ái¥4#Aç[€ëçc³Y x\x07œž|vJó\x0a¥£¥“˳°$ÃfôG?•ò1QèûwZ&n1”…ˆƒ‚ç`Å]«Œ\x1bÿû¦:0)Ü¢9Ix½ÖÚ¢œ‹\x1b’œf;enÀi^b/ÕyÇC”°ê%¼Z³z\x0c;ª4-\x0a¯ªoÛò§¬‡ðÞÚŒ'î9^Š#–eÌ,wTMI‡ñZ¶…ø ¸â‹<%µÊg^ªþCU¾†-ö!Áw¨¬ÈVSžÝ»nNðdw0ƒx#\x09¸ýÔPƒaÓ+¿H‹šÍ\x0a±½oz?>µñ~Ã=OÅ-yäU¥Ý\x0d˪Ą§m¢÷@·é±W°y€=q,j8“°Ý ÌuwîëÇs‚0zG(µ Øùl‡U÷¿ØÞ/‰UTá·~Éû¸`œ×lQ\x0a^Ø6k”òV)ÙÁ{˜ØZޤÿ-ž:MÕo*ý¬0àÂW²¾ãA.§áú%~ÒëÿÄÌ~²\x0d•yúhÿÚðÁ]èBÜú„¶Á-ë#h—ÊÊ$gp9 LÄWˆ.ó'K¯<`wÅKcØpOœpÈf³CºøVΤìçݦ‚«üsÏ¿F÷çý¿õñL$iáàLv—åô\x0bÜôiÙ¸Ùêb¡4óT–1 Yº%žüdÅuØ{ô\x0dÃR2B´ØŒèÜž•å¶›ƒaS±þ\x0bVM‡Y°ÚôðV¦\x07Ý´\x0b¦Ì’„«oµõ7%›ø·¢>fÉöJ}Ø[þ|h„\x1bz\x1b [ 309.261519][ T8595] ptrace attach of "./syz-executor exec"[5835] was attempted by "ÖÝÊ\x5cI=ã™ûò2-Êx˜\x0aGtØåJ…úþ‰f6\x0dÁ\x0dt|p\x09(êþfq.Yi‘‘˜¤Éô‘\x22»\x0dyöÞ«ªû»øÒ|Š¿. cõ$¨ÉgYJÚ'»s2}ÑtÊ#›TZŠpŠßÚ¼Q‡í\x09&^ÌL0m±Nv\x09b–•±MÀîÎÆÞR7ÄœŒrj…2Ös\x1boa@‡€vå8{ zn£¸Ô´uo¦þ9Èý\x0b–\x0d#‡l™·Téïì¡B²UrΜ>¾Ý×dhÐàÛGmÚ@·s†«J£fÓÓÁ÷[}g¬±®9.œ[o²ùžo¶Í¥WÉŠ/CÐNÂîÞ–‘@\x5cŸ.fñó¹ÊÂ:­¶w{;j \x1bƒé˜ëÐÚ˜<{]t~{­—ì\x22OèóWÉ­k³&\x09ƒ~\x0b :ºþLëêFQ/|÷¢…ØHÃúÞª‡³æ\x07 Bú2×jݼxxD܈éÒÜ‘è‹ÇådÅ™öòo#¤R%YþBOÔ)Üö.î fG/|Uâë#Žîïõ~L!†B¢‚¶rÿM|à£%-çh/¶\x07fø;>'¦¦ðÚaŒÞ|áÄ—Œ%ÞÏ´Is–btú»û¬‹.\x22ÌÄF~õ®·r[\x5cæÔQíÄ{Åíe”Íùüâ®5´¼TÒþE•Ø.ZûçÍÖM»|ñ]ØH\x09Ma Ô¯%îï*‘}¨öhµúª«”å0`“@_,m§(9Ô2ª¿ïèÓ ¢¦5d(±LõV¾=ëμM€pZ\x09œ—ìáØwÐ^¹½Ì,,f»=ã“\x07D8Œc{óÅÜd—aÛ¦üéö°PNà”Þ{ýÜö)\x0dcëTþÉ„pU*áÙelðÆ{@P`¨>ÔGàlnÿäEw3„3¢†£e |Ýš&‡Ÿà_‰‹ìw1¼’ÀPÜwœ>Ö!–Wsî°ý´.áëµ>\x0b‰B¢sÏ{;F¶F8ªè—ÉË`èâÅ×\x09–\x0d=T–„^Mg躈àaÔÆí¶3Óq»9Bc„\x0bG3xfã³`æ§5S=C0Üdq`w8Eæ;„.’©ŒÌV‹'ôš@qš Œ 0:7<·šsjÍ‹‚\x22€}–ú}r€ãZ,w¯)µPj—@ܹÎpÚ7N¡ß×øíDUpŠ/Êêúªf [ 309.423954][ T8600] netlink: 314 bytes leftover after parsing attributes in process `syz.3.522'. [ 309.515160][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.610635][ T8587] kexec: Could not allocate control_code_buffer [ 309.877544][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.953924][ T8604] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(2047.0.67108865), cmd(12) [ 309.968740][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.034008][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.041291][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.109478][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.116698][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.775984][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.046446][ T7901] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 311.593190][ T8488] veth0_vlan: entered promiscuous mode [ 311.605414][ T8488] veth1_vlan: entered promiscuous mode [ 311.658696][ T8488] veth0_macvtap: entered promiscuous mode [ 311.694652][ T8488] veth1_macvtap: entered promiscuous mode [ 311.752340][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.768907][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.779912][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.790883][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.801532][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.813053][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.823613][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.834613][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.849478][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.871660][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.889161][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.908684][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.960480][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.971223][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.982050][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.992531][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.003406][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.015383][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.053064][ T8488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.074062][ T8488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.089049][ T8488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.105636][ T8488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.232225][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.255435][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.295202][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.328582][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.086504][ T8682] FAULT_INJECTION: forcing a failure. [ 313.086504][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 313.141752][ T8682] CPU: 1 UID: 0 PID: 8682 Comm: syz.3.542 Not tainted 6.14.0-rc4-syzkaller #0 [ 313.141789][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.141806][ T8682] Call Trace: [ 313.141815][ T8682] [ 313.141826][ T8682] dump_stack_lvl+0x16c/0x1f0 [ 313.141871][ T8682] should_fail_ex+0x50a/0x650 [ 313.141921][ T8682] ? fs_reclaim_acquire+0xae/0x150 [ 313.141965][ T8682] should_failslab+0xc2/0x120 [ 313.141995][ T8682] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 313.142044][ T8682] ? __xlate_proc_name+0x173/0x210 [ 313.142097][ T8682] ? __proc_create+0x2c0/0x8b0 [ 313.142151][ T8682] __proc_create+0x2c0/0x8b0 [ 313.142214][ T8682] ? __pfx___proc_create+0x10/0x10 [ 313.142277][ T8682] _proc_mkdir+0xbb/0x200 [ 313.142304][ T8682] ? __pfx__proc_mkdir+0x10/0x10 [ 313.142330][ T8682] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 313.142366][ T8682] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 313.142423][ T8682] proc_net_ns_init+0x265/0x410 [ 313.142454][ T8682] ? __pfx_proc_net_ns_init+0x10/0x10 [ 313.142482][ T8682] ops_init+0x1df/0x5f0 [ 313.142532][ T8682] setup_net+0x21f/0x860 [ 313.142583][ T8682] ? __pfx_setup_net+0x10/0x10 [ 313.142627][ T8682] ? down_read_killable+0xcc/0x380 [ 313.142671][ T8682] ? __pfx_down_read_killable+0x10/0x10 [ 313.142714][ T8682] ? __raw_spin_lock_init+0x3a/0x110 [ 313.142766][ T8682] ? debug_mutex_init+0x37/0x70 [ 313.142809][ T8682] copy_net_ns+0x2a6/0x5f0 [ 313.142844][ T8682] create_new_namespaces+0x3ea/0xad0 [ 313.142906][ T8682] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 313.142963][ T8682] ksys_unshare+0x45d/0xa40 [ 313.142997][ T8682] ? __pfx_ksys_unshare+0x10/0x10 [ 313.143028][ T8682] ? xfd_validate_state+0x5d/0x180 [ 313.143073][ T8682] ? syscall_user_dispatch+0x7a/0x130 [ 313.143134][ T8682] __x64_sys_unshare+0x31/0x40 [ 313.143175][ T8682] do_syscall_64+0xcd/0x250 [ 313.143218][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.143263][ T8682] RIP: 0033:0x7faf4298d169 [ 313.143288][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.143318][ T8682] RSP: 002b:00007faf437f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 313.143346][ T8682] RAX: ffffffffffffffda RBX: 00007faf42ba5fa0 RCX: 00007faf4298d169 [ 313.143366][ T8682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 313.143384][ T8682] RBP: 00007faf42a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.143399][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.143416][ T8682] R13: 0000000000000000 R14: 00007faf42ba5fa0 R15: 00007ffc78646e98 [ 313.143454][ T8682] [ 315.242346][ T8719] cgroup: fork rejected by pids controller in /syz3 [ 317.065711][ T8786] random: crng reseeded on system resumption [ 318.327875][ T8802] netlink: 330 bytes leftover after parsing attributes in process `syz.4.560'. [ 318.337232][ T8802] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 319.133393][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 319.194803][ T8816] netlink: 326 bytes leftover after parsing attributes in process `syz.2.564'. [ 320.400330][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.566'. [ 321.991446][ T8841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.007974][ T8841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.024629][ T8841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.034457][ T8841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.042072][ T8841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.240445][ T8841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 322.532369][ T8855] tipc: Can't bind to reserved service type 2 [ 322.818651][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.825196][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.972776][ T7630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.281929][ T7630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.455435][ T7630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.671948][ T7630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.010086][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.016151][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.092333][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 324.098490][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.138956][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 324.506146][ T7630] bridge_slave_1: left allmulticast mode [ 324.520149][ T7630] bridge_slave_1: left promiscuous mode [ 324.527862][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.622923][ T7630] bridge_slave_0: left allmulticast mode [ 324.628663][ T7630] bridge_slave_0: left promiscuous mode [ 324.652925][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.185960][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.302222][ T7630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.326480][ T7630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.352808][ T7630] bond0 (unregistering): Released all slaves [ 327.345645][ T7630] hsr_slave_0: left promiscuous mode [ 327.381635][ T7630] hsr_slave_1: left promiscuous mode [ 327.401499][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.437134][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.487201][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.504108][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.565149][ T7630] veth1_macvtap: left promiscuous mode [ 327.585218][ T7630] veth0_macvtap: left promiscuous mode [ 327.604109][ T7630] veth1_vlan: left promiscuous mode [ 327.627546][ T7630] veth0_vlan: left promiscuous mode [ 328.250208][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.921722][ T7630] team0 (unregistering): Port device team_slave_1 removed [ 329.024802][ T7630] team0 (unregistering): Port device team_slave_0 removed [ 331.278383][ T8950] zero sized request [ 331.458095][ T8959] ima: policy update failed [ 331.494283][ T29] audit: type=1802 audit(4295032919.871:2): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.586" res=0 errno=0 [ 331.724766][ T8968] sp0: Synchronizing with TNC [ 334.645297][ T8989] kexec: Could not allocate control_code_buffer [ 338.284066][ T9107] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 339.149663][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 339.788437][ T9138] FAULT_INJECTION: forcing a failure. [ 339.788437][ T9138] name failslab, interval 1, probability 0, space 0, times 0 [ 339.802611][ T9138] CPU: 1 UID: 0 PID: 9138 Comm: syz.4.612 Not tainted 6.14.0-rc4-syzkaller #0 [ 339.802741][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.802761][ T9138] Call Trace: [ 339.802774][ T9138] [ 339.802790][ T9138] dump_stack_lvl+0x16c/0x1f0 [ 339.802846][ T9138] should_fail_ex+0x50a/0x650 [ 339.802896][ T9138] ? fs_reclaim_acquire+0xae/0x150 [ 339.802941][ T9138] ? percpu_ref_init+0xd9/0x400 [ 339.802989][ T9138] should_failslab+0xc2/0x120 [ 339.803020][ T9138] __kmalloc_cache_noprof+0x68/0x410 [ 339.803071][ T9138] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 339.803125][ T9138] percpu_ref_init+0xd9/0x400 [ 339.803177][ T9138] blk_alloc_queue+0x55e/0x700 [ 339.803215][ T9138] __blk_alloc_disk+0xa6/0x170 [ 339.803256][ T9138] ? __pfx___blk_alloc_disk+0x10/0x10 [ 339.803324][ T9138] ? __pfx_idr_alloc+0x10/0x10 [ 339.803364][ T9138] ? __raw_spin_lock_init+0x3a/0x110 [ 339.803424][ T9138] ? __pfx_hot_add_show+0x10/0x10 [ 339.803472][ T9138] zram_add+0x160/0x6b0 [ 339.803518][ T9138] ? __pfx_zram_add+0x10/0x10 [ 339.803591][ T9138] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.803641][ T9138] ? rcu_is_watching+0x12/0xc0 [ 339.803684][ T9138] ? __pfx_hot_add_show+0x10/0x10 [ 339.803741][ T9138] hot_add_show+0x21/0x80 [ 339.803789][ T9138] class_attr_show+0x6f/0xa0 [ 339.803834][ T9138] ? __pfx_class_attr_show+0x10/0x10 [ 339.803877][ T9138] sysfs_kf_seq_show+0x23e/0x410 [ 339.803927][ T9138] seq_read_iter+0x4f4/0x12b0 [ 339.803990][ T9138] kernfs_fop_read_iter+0x414/0x580 [ 339.804025][ T9138] ? rw_verify_area+0xcf/0x680 [ 339.804071][ T9138] vfs_read+0x886/0xbf0 [ 339.804126][ T9138] ? __pfx_vfs_read+0x10/0x10 [ 339.804197][ T9138] ksys_read+0x12b/0x250 [ 339.804240][ T9138] ? __pfx_ksys_read+0x10/0x10 [ 339.804299][ T9138] do_syscall_64+0xcd/0x250 [ 339.804343][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.804386][ T9138] RIP: 0033:0x7fd6fb58d169 [ 339.804411][ T9138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.804443][ T9138] RSP: 002b:00007fd6fc4c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.804473][ T9138] RAX: ffffffffffffffda RBX: 00007fd6fb7a5fa0 RCX: 00007fd6fb58d169 [ 339.804493][ T9138] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000009 [ 339.804512][ T9138] RBP: 00007fd6fb60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.804531][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.804549][ T9138] R13: 0000000000000000 R14: 00007fd6fb7a5fa0 R15: 00007ffcc8ac3658 [ 339.804591][ T9138] [ 339.804678][ T9138] zram: Error allocating disk structure for device 1 [ 340.913378][ T5843] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 342.049026][ T9196] Invalid ELF header magic: != ELF [ 345.893011][ T9248] FAULT_INJECTION: forcing a failure. [ 345.893011][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 345.972884][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.4.631 Not tainted 6.14.0-rc4-syzkaller #0 [ 345.972936][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.972958][ T9248] Call Trace: [ 345.972967][ T9248] [ 345.972980][ T9248] dump_stack_lvl+0x16c/0x1f0 [ 345.973028][ T9248] should_fail_ex+0x50a/0x650 [ 345.973080][ T9248] ? fs_reclaim_acquire+0xae/0x150 [ 345.973125][ T9248] ? alloc_tty_struct+0x98/0x8d0 [ 345.973168][ T9248] should_failslab+0xc2/0x120 [ 345.973199][ T9248] __kmalloc_cache_noprof+0x68/0x410 [ 345.973257][ T9248] alloc_tty_struct+0x98/0x8d0 [ 345.973304][ T9248] ? __pfx_alloc_tty_struct+0x10/0x10 [ 345.973362][ T9248] pty_common_install+0x1bc/0xb30 [ 345.973402][ T9248] ? __pfx_pty_install+0x10/0x10 [ 345.973438][ T9248] tty_init_dev.part.0+0x99/0x660 [ 345.973486][ T9248] tty_open+0xac1/0xf80 [ 345.973529][ T9248] ? chrdev_open+0x596/0x6a0 [ 345.973586][ T9248] ? __pfx_tty_open+0x10/0x10 [ 345.973625][ T9248] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.973659][ T9248] ? lock_acquire+0x2f/0xb0 [ 345.973702][ T9248] ? chrdev_open+0x36b/0x6a0 [ 345.973756][ T9248] ? __pfx_tty_open+0x10/0x10 [ 345.973798][ T9248] chrdev_open+0x237/0x6a0 [ 345.973852][ T9248] ? __pfx_chrdev_open+0x10/0x10 [ 345.973916][ T9248] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 345.973969][ T9248] do_dentry_open+0x735/0x1c40 [ 345.974017][ T9248] ? __pfx_chrdev_open+0x10/0x10 [ 345.974077][ T9248] vfs_open+0x82/0x3f0 [ 345.974107][ T9248] ? may_open+0x1f2/0x400 [ 345.974148][ T9248] path_openat+0x1e88/0x2d80 [ 345.974209][ T9248] ? __pfx_path_openat+0x10/0x10 [ 345.974256][ T9248] ? __pfx___lock_acquire+0x10/0x10 [ 345.974300][ T9248] ? lock_acquire.part.0+0x11b/0x380 [ 345.974348][ T9248] ? find_held_lock+0x2d/0x110 [ 345.974389][ T9248] do_filp_open+0x20c/0x470 [ 345.974438][ T9248] ? __pfx_do_filp_open+0x10/0x10 [ 345.974483][ T9248] ? find_held_lock+0x2d/0x110 [ 345.974547][ T9248] ? alloc_fd+0x41f/0x760 [ 345.974607][ T9248] do_sys_openat2+0x17a/0x1e0 [ 345.974642][ T9248] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.974694][ T9248] __x64_sys_openat+0x175/0x210 [ 345.974731][ T9248] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.974785][ T9248] do_syscall_64+0xcd/0x250 [ 345.974832][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.974879][ T9248] RIP: 0033:0x7fd6fb58d169 [ 345.974937][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.974969][ T9248] RSP: 002b:00007fd6fc4c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.975000][ T9248] RAX: ffffffffffffffda RBX: 00007fd6fb7a5fa0 RCX: 00007fd6fb58d169 [ 345.975022][ T9248] RDX: 0000000000040000 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 345.975042][ T9248] RBP: 00007fd6fb60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.975061][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.975080][ T9248] R13: 0000000000000000 R14: 00007fd6fb7a5fa0 R15: 00007ffcc8ac3658 [ 345.975121][ T9248] [ 346.877921][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.890020][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.910343][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.930169][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.940637][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.950972][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.290368][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 348.508230][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 349.055080][ T5843] Bluetooth: hci0: command tx timeout [ 349.369313][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.396064][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.422607][ T9264] bridge_slave_0: entered allmulticast mode [ 349.444221][ T9264] bridge_slave_0: entered promiscuous mode [ 349.476762][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.492432][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.515369][ T9264] bridge_slave_1: entered allmulticast mode [ 349.535146][ T9264] bridge_slave_1: entered promiscuous mode [ 349.963210][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.998984][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.449134][ T9264] team0: Port device team_slave_0 added [ 350.483206][ T9264] team0: Port device team_slave_1 added [ 351.132761][ T5843] Bluetooth: hci0: command tx timeout [ 351.218035][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.249954][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.319918][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.611143][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.621367][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.658405][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.380205][ T9264] hsr_slave_0: entered promiscuous mode [ 352.393559][ T9264] hsr_slave_1: entered promiscuous mode [ 352.410386][ T9264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.431417][ T9264] Cannot create hsr debugfs directory [ 353.215822][ T5843] Bluetooth: hci0: command tx timeout [ 353.382074][ T9348] could not allocate digest TFM handle [ 353.550097][ T9352] could not allocate digest TFM handle [ 354.358291][ T9264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.566858][ T9264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.703711][ T9264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.799048][ T9264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.976795][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 354.990153][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 355.133902][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.275337][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.300626][ T5843] Bluetooth: hci0: command tx timeout [ 355.361644][ T9264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.389980][ T9264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.425428][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.432657][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.456243][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.463576][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.536955][ T9396] bridge0: port 3(bond0) entered blocking state [ 355.566554][ T9396] bridge0: port 3(bond0) entered disabled state [ 355.576379][ T9396] bond0: entered allmulticast mode [ 355.588261][ T9396] bond_slave_0: entered allmulticast mode [ 355.612792][ T9396] bond0: entered promiscuous mode [ 355.618190][ T9396] bond_slave_0: entered promiscuous mode [ 355.639290][ T9396] bridge0: port 3(bond0) entered blocking state [ 355.646252][ T9396] bridge0: port 3(bond0) entered forwarding state [ 355.926730][ T9412] Invalid ELF header magic: != ELF [ 355.958371][ T9411] Invalid ELF header magic: != ELF [ 356.119677][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.276233][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 357.017496][ T9264] veth0_vlan: entered promiscuous mode [ 357.072755][ T9264] veth1_vlan: entered promiscuous mode [ 357.172973][ T9264] veth0_macvtap: entered promiscuous mode [ 357.204720][ T9264] veth1_macvtap: entered promiscuous mode [ 357.284573][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.308523][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.348530][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.366965][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.415457][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.439982][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.487786][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.508239][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.532623][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.586265][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.617495][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.645540][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.677291][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.708252][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.739391][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.778519][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.812649][ T9451] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 357.817520][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.864597][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.904037][ T9415] netlink: 334 bytes leftover after parsing attributes in process `syz.0.650'. [ 357.978815][ T9264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.050056][ T9264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.058854][ T9264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.123825][ T9264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.337788][ T9468] FAULT_INJECTION: forcing a failure. [ 358.337788][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 358.353359][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.656 Not tainted 6.14.0-rc4-syzkaller #0 [ 358.353400][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.353420][ T9468] Call Trace: [ 358.353430][ T9468] [ 358.353441][ T9468] dump_stack_lvl+0x16c/0x1f0 [ 358.353488][ T9468] should_fail_ex+0x50a/0x650 [ 358.353539][ T9468] ? fs_reclaim_acquire+0xae/0x150 [ 358.353582][ T9468] ? blk_alloc_queue_stats+0x3f/0x110 [ 358.353629][ T9468] should_failslab+0xc2/0x120 [ 358.353667][ T9468] __kmalloc_cache_noprof+0x68/0x410 [ 358.353711][ T9468] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 358.353770][ T9468] blk_alloc_queue_stats+0x3f/0x110 [ 358.353815][ T9468] blk_alloc_queue+0xda/0x700 [ 358.353854][ T9468] __blk_alloc_disk+0xa6/0x170 [ 358.353893][ T9468] ? __pfx___blk_alloc_disk+0x10/0x10 [ 358.353960][ T9468] ? __pfx_idr_alloc+0x10/0x10 [ 358.354000][ T9468] ? __raw_spin_lock_init+0x3a/0x110 [ 358.354057][ T9468] ? __pfx_hot_add_show+0x10/0x10 [ 358.354103][ T9468] zram_add+0x160/0x6b0 [ 358.354148][ T9468] ? __pfx_zram_add+0x10/0x10 [ 358.354218][ T9468] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 358.354266][ T9468] ? rcu_is_watching+0x12/0xc0 [ 358.354307][ T9468] ? __pfx_hot_add_show+0x10/0x10 [ 358.354353][ T9468] hot_add_show+0x21/0x80 [ 358.354399][ T9468] class_attr_show+0x6f/0xa0 [ 358.354441][ T9468] ? __pfx_class_attr_show+0x10/0x10 [ 358.354482][ T9468] sysfs_kf_seq_show+0x23e/0x410 [ 358.354529][ T9468] seq_read_iter+0x4f4/0x12b0 [ 358.354588][ T9468] kernfs_fop_read_iter+0x414/0x580 [ 358.354621][ T9468] ? rw_verify_area+0xcf/0x680 [ 358.354673][ T9468] vfs_read+0x886/0xbf0 [ 358.354724][ T9468] ? __pfx_vfs_read+0x10/0x10 [ 358.354797][ T9468] ksys_read+0x12b/0x250 [ 358.354840][ T9468] ? __pfx_ksys_read+0x10/0x10 [ 358.354896][ T9468] do_syscall_64+0xcd/0x250 [ 358.354943][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.354988][ T9468] RIP: 0033:0x7f170db8d169 [ 358.355014][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.355045][ T9468] RSP: 002b:00007f170b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.355074][ T9468] RAX: ffffffffffffffda RBX: 00007f170dda5fa0 RCX: 00007f170db8d169 [ 358.355095][ T9468] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000009 [ 358.355113][ T9468] RBP: 00007f170dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 358.355131][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.355150][ T9468] R13: 0000000000000000 R14: 00007f170dda5fa0 R15: 00007ffdf18fb338 [ 358.355192][ T9468] [ 358.355223][ T9468] zram: Error allocating disk structure for device 1 [ 358.429176][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.863702][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.127606][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.187263][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.220036][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.419062][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.631551][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.670016][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.273862][ T12] bridge_slave_1: left allmulticast mode [ 360.279709][ T12] bridge_slave_1: left promiscuous mode [ 360.287759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.297475][ T12] bridge_slave_0: left allmulticast mode [ 360.306087][ T12] bridge_slave_0: left promiscuous mode [ 360.319635][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.713640][ T9512] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 361.067897][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.101432][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.132719][ T12] bond0 (unregistering): Released all slaves [ 362.033392][ T12] hsr_slave_0: left promiscuous mode [ 362.056537][ T12] hsr_slave_1: left promiscuous mode [ 362.071172][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.110082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.160928][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.170802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.240884][ T12] veth1_macvtap: left promiscuous mode [ 362.257277][ T12] veth0_macvtap: left promiscuous mode [ 362.275896][ T12] veth1_vlan: left promiscuous mode [ 362.297329][ T12] veth0_vlan: left promiscuous mode [ 362.905138][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.666'. [ 363.513014][ T12] team0 (unregistering): Port device team_slave_1 removed [ 363.597792][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.460342][ T9586] FAULT_INJECTION: forcing a failure. [ 366.460342][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 366.486733][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.5.672 Not tainted 6.14.0-rc4-syzkaller #0 [ 366.486778][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.486799][ T9586] Call Trace: [ 366.486808][ T9586] [ 366.486822][ T9586] dump_stack_lvl+0x16c/0x1f0 [ 366.486871][ T9586] should_fail_ex+0x50a/0x650 [ 366.486931][ T9586] ? fs_reclaim_acquire+0xae/0x150 [ 366.486977][ T9586] ? __register_sysctl_table+0xb4/0x1910 [ 366.487035][ T9586] should_failslab+0xc2/0x120 [ 366.487068][ T9586] __kmalloc_noprof+0xcb/0x510 [ 366.487127][ T9586] __register_sysctl_table+0xb4/0x1910 [ 366.487181][ T9586] ? __pfx_snprintf+0x10/0x10 [ 366.487224][ T9586] ? __pfx___register_sysctl_table+0x10/0x10 [ 366.487277][ T9586] ? is_module_address+0x2a/0x50 [ 366.487323][ T9586] ? register_net_sysctl_sz+0x228/0x3e0 [ 366.487372][ T9586] __devinet_sysctl_register+0x1b5/0x360 [ 366.487424][ T9586] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 366.487468][ T9586] ? trace_kmalloc+0x2d/0xd0 [ 366.487508][ T9586] ? devinet_init_net+0xeb/0x900 [ 366.487552][ T9586] ? __asan_memcpy+0x3c/0x60 [ 366.487597][ T9586] ? __pfx_devinet_init_net+0x10/0x10 [ 366.487640][ T9586] devinet_init_net+0x347/0x900 [ 366.487686][ T9586] ? __pfx_devinet_init_net+0x10/0x10 [ 366.487730][ T9586] ops_init+0x1df/0x5f0 [ 366.487791][ T9586] setup_net+0x21f/0x860 [ 366.487845][ T9586] ? __pfx_setup_net+0x10/0x10 [ 366.487902][ T9586] ? down_read_killable+0xcc/0x380 [ 366.487950][ T9586] ? __pfx_down_read_killable+0x10/0x10 [ 366.487997][ T9586] ? __raw_spin_lock_init+0x3a/0x110 [ 366.488052][ T9586] ? debug_mutex_init+0x37/0x70 [ 366.488090][ T9586] copy_net_ns+0x2a6/0x5f0 [ 366.488125][ T9586] create_new_namespaces+0x3ea/0xad0 [ 366.488190][ T9586] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 366.488250][ T9586] ksys_unshare+0x45d/0xa40 [ 366.488285][ T9586] ? __pfx_ksys_unshare+0x10/0x10 [ 366.488318][ T9586] ? xfd_validate_state+0x5d/0x180 [ 366.488379][ T9586] __x64_sys_unshare+0x31/0x40 [ 366.488413][ T9586] do_syscall_64+0xcd/0x250 [ 366.488457][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.488504][ T9586] RIP: 0033:0x7f915878d169 [ 366.488529][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.488562][ T9586] RSP: 002b:00007f9159649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 366.488594][ T9586] RAX: ffffffffffffffda RBX: 00007f91589a5fa0 RCX: 00007f915878d169 [ 366.488614][ T9586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 366.488634][ T9586] RBP: 00007f915880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 366.488653][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.488672][ T9586] R13: 0000000000000000 R14: 00007f91589a5fa0 R15: 00007ffc7f642b58 [ 366.488712][ T9586] [ 367.203695][ T9592] Invalid ELF header magic: != ELF [ 367.949372][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 367.980657][ T9616] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 369.271329][ T9653] FAULT_INJECTION: forcing a failure. [ 369.271329][ T9653] name failslab, interval 1, probability 0, space 0, times 0 [ 369.317882][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.0.685 Not tainted 6.14.0-rc4-syzkaller #0 [ 369.317924][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.317942][ T9653] Call Trace: [ 369.317951][ T9653] [ 369.317963][ T9653] dump_stack_lvl+0x16c/0x1f0 [ 369.318009][ T9653] should_fail_ex+0x50a/0x650 [ 369.318059][ T9653] ? fs_reclaim_acquire+0xae/0x150 [ 369.318104][ T9653] should_failslab+0xc2/0x120 [ 369.318133][ T9653] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 369.318184][ T9653] ? __alloc_skb+0x2b1/0x380 [ 369.318231][ T9653] __alloc_skb+0x2b1/0x380 [ 369.318271][ T9653] ? __pfx___alloc_skb+0x10/0x10 [ 369.318325][ T9653] ? __pfx___register_sysctl_table+0x10/0x10 [ 369.318370][ T9653] ? is_module_address+0x2a/0x50 [ 369.318414][ T9653] inet_netconf_notify_devconf+0x8b/0x1f0 [ 369.318455][ T9653] __devinet_sysctl_register+0x223/0x360 [ 369.318496][ T9653] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 369.318532][ T9653] ? trace_kmalloc+0x2d/0xd0 [ 369.318563][ T9653] ? devinet_init_net+0xeb/0x900 [ 369.318600][ T9653] ? __asan_memcpy+0x3c/0x60 [ 369.318644][ T9653] ? __pfx_devinet_init_net+0x10/0x10 [ 369.318686][ T9653] devinet_init_net+0x347/0x900 [ 369.318731][ T9653] ? __pfx_devinet_init_net+0x10/0x10 [ 369.318774][ T9653] ops_init+0x1df/0x5f0 [ 369.318825][ T9653] setup_net+0x21f/0x860 [ 369.318884][ T9653] ? __pfx_setup_net+0x10/0x10 [ 369.318932][ T9653] ? down_read_killable+0xcc/0x380 [ 369.318979][ T9653] ? __pfx_down_read_killable+0x10/0x10 [ 369.319025][ T9653] ? __raw_spin_lock_init+0x3a/0x110 [ 369.319083][ T9653] ? debug_mutex_init+0x37/0x70 [ 369.319124][ T9653] copy_net_ns+0x2a6/0x5f0 [ 369.319161][ T9653] create_new_namespaces+0x3ea/0xad0 [ 369.319227][ T9653] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 369.319285][ T9653] ksys_unshare+0x45d/0xa40 [ 369.319321][ T9653] ? __pfx_ksys_unshare+0x10/0x10 [ 369.319353][ T9653] ? xfd_validate_state+0x5d/0x180 [ 369.319415][ T9653] __x64_sys_unshare+0x31/0x40 [ 369.319448][ T9653] do_syscall_64+0xcd/0x250 [ 369.319493][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.319539][ T9653] RIP: 0033:0x7f170db8d169 [ 369.319565][ T9653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.319598][ T9653] RSP: 002b:00007f170b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 369.319630][ T9653] RAX: ffffffffffffffda RBX: 00007f170dda5fa0 RCX: 00007f170db8d169 [ 369.319651][ T9653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 369.319671][ T9653] RBP: 00007f170dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.319690][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.319708][ T9653] R13: 0000000000000000 R14: 00007f170dda5fa0 R15: 00007ffdf18fb338 [ 369.319749][ T9653] [ 370.110388][ T9655] nbd: socks must be embedded in a SOCK_ITEM attr [ 370.118079][ T9655] block nbd0: shutting down sockets [ 373.408024][ T9721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.696'. [ 375.403235][ T9787] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 375.497379][ T9788] FAULT_INJECTION: forcing a failure. [ 375.497379][ T9788] name failslab, interval 1, probability 0, space 0, times 0 [ 375.549593][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.5.703 Not tainted 6.14.0-rc4-syzkaller #0 [ 375.549638][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.549658][ T9788] Call Trace: [ 375.549668][ T9788] [ 375.549681][ T9788] dump_stack_lvl+0x16c/0x1f0 [ 375.549729][ T9788] should_fail_ex+0x50a/0x650 [ 375.549779][ T9788] ? fs_reclaim_acquire+0xae/0x150 [ 375.549830][ T9788] should_failslab+0xc2/0x120 [ 375.549861][ T9788] __kmalloc_cache_node_noprof+0x6e/0x420 [ 375.549912][ T9788] ? __alloc_disk_node+0x58/0x610 [ 375.549960][ T9788] __alloc_disk_node+0x58/0x610 [ 375.550001][ T9788] ? blk_alloc_queue+0x1a3/0x700 [ 375.550048][ T9788] __blk_alloc_disk+0xd8/0x170 [ 375.550090][ T9788] ? __pfx___blk_alloc_disk+0x10/0x10 [ 375.550147][ T9788] ? __pfx_idr_alloc+0x10/0x10 [ 375.550180][ T9788] ? __raw_spin_lock_init+0x3a/0x110 [ 375.550229][ T9788] ? __pfx_hot_add_show+0x10/0x10 [ 375.550268][ T9788] zram_add+0x160/0x6b0 [ 375.550308][ T9788] ? __pfx_zram_add+0x10/0x10 [ 375.550366][ T9788] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 375.550406][ T9788] ? rcu_is_watching+0x12/0xc0 [ 375.550439][ T9788] ? __pfx_hot_add_show+0x10/0x10 [ 375.550478][ T9788] hot_add_show+0x21/0x80 [ 375.550516][ T9788] class_attr_show+0x6f/0xa0 [ 375.550553][ T9788] ? __pfx_class_attr_show+0x10/0x10 [ 375.550588][ T9788] sysfs_kf_seq_show+0x23e/0x410 [ 375.550627][ T9788] seq_read_iter+0x4f4/0x12b0 [ 375.550676][ T9788] kernfs_fop_read_iter+0x414/0x580 [ 375.550714][ T9788] ? rw_verify_area+0xcf/0x680 [ 375.550753][ T9788] vfs_read+0x886/0xbf0 [ 375.550796][ T9788] ? __pfx_vfs_read+0x10/0x10 [ 375.550857][ T9788] ksys_read+0x12b/0x250 [ 375.550894][ T9788] ? __pfx_ksys_read+0x10/0x10 [ 375.550943][ T9788] do_syscall_64+0xcd/0x250 [ 375.550981][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.551019][ T9788] RIP: 0033:0x7f915878d169 [ 375.551049][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.551076][ T9788] RSP: 002b:00007f9159649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.551102][ T9788] RAX: ffffffffffffffda RBX: 00007f91589a5fa0 RCX: 00007f915878d169 [ 375.551121][ T9788] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000009 [ 375.551138][ T9788] RBP: 00007f915880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 375.551154][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.551171][ T9788] R13: 0000000000000000 R14: 00007f91589a5fa0 R15: 00007ffc7f642b58 [ 375.551206][ T9788] [ 376.270411][ T9788] zram: Error allocating disk structure for device 1 [ 378.062262][ T9840] netlink: 18 bytes leftover after parsing attributes in process `syz.0.709'. [ 378.705492][ T9774] kexec: Could not allocate control_code_buffer [ 380.083439][ T9888] FAULT_INJECTION: forcing a failure. [ 380.083439][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 380.149767][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.2.717 Not tainted 6.14.0-rc4-syzkaller #0 [ 380.149810][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.149835][ T9888] Call Trace: [ 380.149844][ T9888] [ 380.149856][ T9888] dump_stack_lvl+0x16c/0x1f0 [ 380.149904][ T9888] should_fail_ex+0x50a/0x650 [ 380.149955][ T9888] ? fs_reclaim_acquire+0xae/0x150 [ 380.150000][ T9888] ? blk_alloc_queue_stats+0x3f/0x110 [ 380.150048][ T9888] should_failslab+0xc2/0x120 [ 380.150079][ T9888] __kmalloc_cache_noprof+0x68/0x410 [ 380.150123][ T9888] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 380.150182][ T9888] blk_alloc_queue_stats+0x3f/0x110 [ 380.150230][ T9888] blk_alloc_queue+0xda/0x700 [ 380.150267][ T9888] __blk_alloc_disk+0xa6/0x170 [ 380.150320][ T9888] ? __pfx___blk_alloc_disk+0x10/0x10 [ 380.150387][ T9888] ? __pfx_idr_alloc+0x10/0x10 [ 380.150427][ T9888] ? __raw_spin_lock_init+0x3a/0x110 [ 380.150484][ T9888] ? __pfx_hot_add_show+0x10/0x10 [ 380.150541][ T9888] zram_add+0x160/0x6b0 [ 380.150583][ T9888] ? __pfx_zram_add+0x10/0x10 [ 380.150645][ T9888] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 380.150686][ T9888] ? rcu_is_watching+0x12/0xc0 [ 380.150724][ T9888] ? __pfx_hot_add_show+0x10/0x10 [ 380.150765][ T9888] hot_add_show+0x21/0x80 [ 380.150828][ T9888] class_attr_show+0x6f/0xa0 [ 380.150879][ T9888] ? __pfx_class_attr_show+0x10/0x10 [ 380.150922][ T9888] sysfs_kf_seq_show+0x23e/0x410 [ 380.150974][ T9888] seq_read_iter+0x4f4/0x12b0 [ 380.151041][ T9888] kernfs_fop_read_iter+0x414/0x580 [ 380.151078][ T9888] ? rw_verify_area+0xcf/0x680 [ 380.151126][ T9888] vfs_read+0x886/0xbf0 [ 380.151182][ T9888] ? __pfx_vfs_read+0x10/0x10 [ 380.151260][ T9888] ksys_read+0x12b/0x250 [ 380.151308][ T9888] ? __pfx_ksys_read+0x10/0x10 [ 380.151370][ T9888] do_syscall_64+0xcd/0x250 [ 380.151419][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.151469][ T9888] RIP: 0033:0x7f98ed38d169 [ 380.151507][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.151629][ T9888] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.151663][ T9888] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 380.151687][ T9888] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000009 [ 380.151710][ T9888] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.151732][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.151753][ T9888] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 380.151805][ T9888] [ 380.159936][ T9888] zram: Error allocating disk structure for device 1 [ 381.270040][ T29] audit: type=1326 audit(4295032969.641:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.5.720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915878d169 code=0x0 [ 383.405886][ T9940] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(3.0.4), cmd(6) [ 383.540354][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.730'. [ 383.563476][ T9942] netlink: 'syz.5.730': attribute type 1 has an invalid length. [ 384.270349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.277685][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.640116][ T5843] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 384.640164][ T5843] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 384.656622][ T5843] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 384.656690][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 384.664067][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 384.671586][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 384.678383][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d [ 385.469152][ T9981] FAULT_INJECTION: forcing a failure. [ 385.469152][ T9981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.522339][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.2.740 Not tainted 6.14.0-rc4-syzkaller #0 [ 385.522382][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.522401][ T9981] Call Trace: [ 385.522410][ T9981] [ 385.522422][ T9981] dump_stack_lvl+0x16c/0x1f0 [ 385.522469][ T9981] should_fail_ex+0x50a/0x650 [ 385.522519][ T9981] ? __pfx___might_resched+0x10/0x10 [ 385.522577][ T9981] should_fail_alloc_page+0xe7/0x130 [ 385.522611][ T9981] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 385.522662][ T9981] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 385.522717][ T9981] ? hlock_class+0x4e/0x130 [ 385.522750][ T9981] ? mark_lock+0xb5/0xc60 [ 385.522799][ T9981] ? __pfx_mark_lock+0x10/0x10 [ 385.522849][ T9981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.522903][ T9981] ? hlock_class+0x4e/0x130 [ 385.522935][ T9981] ? mark_lock+0xb5/0xc60 [ 385.522978][ T9981] ? hlock_class+0x4e/0x130 [ 385.523022][ T9981] ? hlock_class+0x4e/0x130 [ 385.523055][ T9981] ? __lock_acquire+0xcc5/0x3c40 [ 385.523103][ T9981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.523156][ T9981] ? policy_nodemask+0xea/0x4e0 [ 385.523213][ T9981] alloc_pages_mpol+0x1fc/0x540 [ 385.523255][ T9981] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 385.523288][ T9981] ? __lock_acquire+0x15a9/0x3c40 [ 385.523342][ T9981] folio_alloc_mpol_noprof+0x36/0x2f0 [ 385.523382][ T9981] vma_alloc_folio_noprof+0xee/0x1b0 [ 385.523419][ T9981] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 385.523457][ T9981] ? find_held_lock+0x2d/0x110 [ 385.523501][ T9981] do_pte_missing+0x202f/0x3e10 [ 385.523562][ T9981] __handle_mm_fault+0x1166/0x2c60 [ 385.523622][ T9981] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.523669][ T9981] ? follow_page_pte+0x3ac/0x1490 [ 385.523715][ T9981] ? __pfx_lock_release+0x10/0x10 [ 385.523791][ T9981] handle_mm_fault+0x3fa/0xaa0 [ 385.523846][ T9981] __get_user_pages+0x773/0x36f0 [ 385.523903][ T9981] ? __pfx_mt_find+0x10/0x10 [ 385.523946][ T9981] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 385.523994][ T9981] ? __pfx___get_user_pages+0x10/0x10 [ 385.524044][ T9981] ? __mm_populate+0x21d/0x380 [ 385.524101][ T9981] populate_vma_page_range+0x27f/0x3a0 [ 385.524152][ T9981] ? __pfx_populate_vma_page_range+0x10/0x10 [ 385.524212][ T9981] ? __pfx_find_vma_intersection+0x10/0x10 [ 385.524271][ T9981] ? vm_mmap_pgoff+0x29b/0x3a0 [ 385.524325][ T9981] __mm_populate+0x1d6/0x380 [ 385.524376][ T9981] ? __pfx___mm_populate+0x10/0x10 [ 385.524429][ T9981] ? up_write+0x1b2/0x520 [ 385.524483][ T9981] vm_mmap_pgoff+0x2d3/0x3a0 [ 385.524533][ T9981] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 385.524586][ T9981] ? __x64_sys_futex+0x1e1/0x4c0 [ 385.524626][ T9981] ? __x64_sys_futex+0x1ea/0x4c0 [ 385.524673][ T9981] ksys_mmap_pgoff+0x7d/0x5c0 [ 385.524721][ T9981] ? rcu_is_watching+0x12/0xc0 [ 385.524760][ T9981] __x64_sys_mmap+0x125/0x190 [ 385.524813][ T9981] do_syscall_64+0xcd/0x250 [ 385.524859][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.524905][ T9981] RIP: 0033:0x7f98ed38d169 [ 385.524931][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.524964][ T9981] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 385.524992][ T9981] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 385.525015][ T9981] RDX: 00000000000000b3 RSI: 0000000000040008 RDI: 0000000000000000 [ 385.525035][ T9981] RBP: 00007f98ed40e2a0 R08: 0000000000000003 R09: 0000000000028000 [ 385.525056][ T9981] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 385.525076][ T9981] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 385.525118][ T9981] [ 388.237618][ T9983] netlink: 334 bytes leftover after parsing attributes in process `syz.5.741'. [ 388.935951][T10027] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 388.944720][T10027] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 389.478721][T10036] FAULT_INJECTION: forcing a failure. [ 389.478721][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.517439][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.2.751 Not tainted 6.14.0-rc4-syzkaller #0 [ 389.517484][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 389.517504][T10036] Call Trace: [ 389.517514][T10036] [ 389.517527][T10036] dump_stack_lvl+0x16c/0x1f0 [ 389.517577][T10036] should_fail_ex+0x50a/0x650 [ 389.517637][T10036] _copy_from_user+0x2e/0xd0 [ 389.517684][T10036] restore_altstack+0x94/0x170 [ 389.517724][T10036] ? __pfx_restore_altstack+0x10/0x10 [ 389.517765][T10036] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.517800][T10036] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.517839][T10036] ? _raw_spin_unlock_irq+0x2e/0x50 [ 389.517873][T10036] ? set_current_blocked+0xdd/0x120 [ 389.517921][T10036] __do_sys_rt_sigreturn+0x13d/0x240 [ 389.517961][T10036] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 389.518012][T10036] do_syscall_64+0xcd/0x250 [ 389.518056][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.518100][T10036] RIP: 0033:0x7f98ed329359 [ 389.518127][T10036] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 389.518158][T10036] RSP: 002b:00007f98ee134a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 389.518188][T10036] RAX: ffffffffffffffda RBX: 00007f98ed5a6080 RCX: 00007f98ed329359 [ 389.518210][T10036] RDX: 00007f98ee134a80 RSI: 00007f98ee134bb0 RDI: 0000000000000011 [ 389.518230][T10036] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.518250][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.518269][T10036] R13: 0000000000000000 R14: 00007f98ed5a6080 R15: 00007fffa8dc6f28 [ 389.518308][T10036] [ 390.725042][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 390.725086][ T5843] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 390.743624][ T5843] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 390.743670][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 390.751791][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 390.758692][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 390.766910][ T5843] Bluetooth: hci2: Malformed LE Event: 0x0d [ 393.753342][T10074] netlink: 334 bytes leftover after parsing attributes in process `syz.4.755'. [ 395.241643][T10187] netlink: 338 bytes leftover after parsing attributes in process `syz.5.775'. [ 398.290556][T10269] netlink: 330 bytes leftover after parsing attributes in process `syz.5.782'. [ 398.401228][T10278] Invalid input. Must be >= 4608 [ 399.050409][T10298] netlink: 342 bytes leftover after parsing attributes in process `syz.4.788'. [ 399.071692][T10298] netlink: 342 bytes leftover after parsing attributes in process `syz.4.788'. [ 399.457735][T10257] netlink: 334 bytes leftover after parsing attributes in process `syz.2.779'. [ 399.812097][T10320] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 399.819052][T10320] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.535468][T10348] FAULT_INJECTION: forcing a failure. [ 401.535468][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 401.548880][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.2.799 Not tainted 6.14.0-rc4-syzkaller #0 [ 401.548922][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.548940][T10348] Call Trace: [ 401.548949][T10348] [ 401.548961][T10348] dump_stack_lvl+0x16c/0x1f0 [ 401.549010][T10348] should_fail_ex+0x50a/0x650 [ 401.549063][T10348] ? fs_reclaim_acquire+0xae/0x150 [ 401.549108][T10348] should_failslab+0xc2/0x120 [ 401.549139][T10348] __kmalloc_node_noprof+0xd1/0x510 [ 401.549191][T10348] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 401.549243][T10348] __kvmalloc_node_noprof+0xad/0x1a0 [ 401.549291][T10348] bucket_table_alloc.isra.0+0x86/0x460 [ 401.549347][T10348] rhashtable_init_noprof+0x41a/0x7e0 [ 401.549403][T10348] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 401.549434][T10348] rhltable_init_noprof+0x20/0x60 [ 401.549484][T10348] mr_table_alloc+0x116/0x2e0 [ 401.549521][T10348] ? __pfx_ipmr_expire_process+0x10/0x10 [ 401.549555][T10348] ? __pfx_ipmr_net_init+0x10/0x10 [ 401.549592][T10348] ipmr_net_init+0x3c4/0x4e0 [ 401.549628][T10348] ? __pfx_ipmr_net_init+0x10/0x10 [ 401.549662][T10348] ops_init+0x1df/0x5f0 [ 401.549727][T10348] setup_net+0x21f/0x860 [ 401.549777][T10348] ? __pfx_setup_net+0x10/0x10 [ 401.549826][T10348] ? down_read_killable+0xcc/0x380 [ 401.549874][T10348] ? __pfx_down_read_killable+0x10/0x10 [ 401.549918][T10348] ? __raw_spin_lock_init+0x3a/0x110 [ 401.549978][T10348] ? debug_mutex_init+0x37/0x70 [ 401.550017][T10348] copy_net_ns+0x2a6/0x5f0 [ 401.550052][T10348] create_new_namespaces+0x3ea/0xad0 [ 401.550112][T10348] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 401.550169][T10348] ksys_unshare+0x45d/0xa40 [ 401.550204][T10348] ? __pfx_ksys_unshare+0x10/0x10 [ 401.550238][T10348] ? xfd_validate_state+0x5d/0x180 [ 401.550298][T10348] __x64_sys_unshare+0x31/0x40 [ 401.550332][T10348] do_syscall_64+0xcd/0x250 [ 401.550377][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.550424][T10348] RIP: 0033:0x7f98ed38d169 [ 401.550450][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.550482][T10348] RSP: 002b:00007f98ee114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 401.550512][T10348] RAX: ffffffffffffffda RBX: 00007f98ed5a6160 RCX: 00007f98ed38d169 [ 401.550533][T10348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 401.550552][T10348] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.550571][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.550590][T10348] R13: 0000000000000000 R14: 00007f98ed5a6160 R15: 00007fffa8dc6f28 [ 401.550630][T10348] [ 404.373705][T10383] netlink: 342 bytes leftover after parsing attributes in process `syz.5.809'. [ 407.336680][T10454] FAULT_INJECTION: forcing a failure. [ 407.336680][T10454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.362121][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.4.824 Not tainted 6.14.0-rc4-syzkaller #0 [ 407.362161][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 407.362177][T10454] Call Trace: [ 407.362185][T10454] [ 407.362196][T10454] dump_stack_lvl+0x16c/0x1f0 [ 407.362236][T10454] should_fail_ex+0x50a/0x650 [ 407.362282][T10454] _copy_from_user+0x2e/0xd0 [ 407.362311][T10454] move_addr_to_kernel+0x68/0x160 [ 407.362351][T10454] __sys_bind+0x11c/0x260 [ 407.362387][T10454] ? __pfx___sys_bind+0x10/0x10 [ 407.362415][T10454] ? __fget_files+0x206/0x3a0 [ 407.362463][T10454] ? __pfx_ksys_write+0x10/0x10 [ 407.362506][T10454] __x64_sys_bind+0x72/0xb0 [ 407.362535][T10454] ? lockdep_hardirqs_on+0x7c/0x110 [ 407.362566][T10454] do_syscall_64+0xcd/0x250 [ 407.362602][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.362638][T10454] RIP: 0033:0x7fd6fb58d169 [ 407.362659][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.362686][T10454] RSP: 002b:00007fd6fc4c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 407.362710][T10454] RAX: ffffffffffffffda RBX: 00007fd6fb7a5fa0 RCX: 00007fd6fb58d169 [ 407.362728][T10454] RDX: 0000000000000066 RSI: 0000400000000040 RDI: 0000000000000003 [ 407.362744][T10454] RBP: 00007fd6fc4c1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.362760][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.362776][T10454] R13: 0000000000000000 R14: 00007fd6fb7a5fa0 R15: 00007ffcc8ac3658 [ 407.362807][T10454] [ 407.373065][T10456] program syz.5.825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.627203][T10456] cougar: G6 mapped to space [ 408.310071][T10467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.435465][T10467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.646564][T10467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 408.713425][T10467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.790961][T10467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 408.909664][T10467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.269610][T10499] FAULT_INJECTION: forcing a failure. [ 410.269610][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.330156][T10499] CPU: 0 UID: 0 PID: 10499 Comm: syz.5.834 Not tainted 6.14.0-rc4-syzkaller #0 [ 410.330198][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.330216][T10499] Call Trace: [ 410.330226][T10499] [ 410.330237][T10499] dump_stack_lvl+0x16c/0x1f0 [ 410.330283][T10499] should_fail_ex+0x50a/0x650 [ 410.330337][T10499] _copy_to_user+0x32/0xd0 [ 410.330373][T10499] simple_read_from_buffer+0xd0/0x160 [ 410.330415][T10499] proc_fail_nth_read+0x198/0x270 [ 410.330453][T10499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.330503][T10499] ? rw_verify_area+0xcf/0x680 [ 410.330542][T10499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.330580][T10499] vfs_read+0x1df/0xbf0 [ 410.330624][T10499] ? __fget_files+0x1fc/0x3a0 [ 410.330670][T10499] ? __pfx___mutex_lock+0x10/0x10 [ 410.330710][T10499] ? __pfx_vfs_read+0x10/0x10 [ 410.330764][T10499] ? __fget_files+0x206/0x3a0 [ 410.330820][T10499] ksys_read+0x12b/0x250 [ 410.330862][T10499] ? __pfx_ksys_read+0x10/0x10 [ 410.330916][T10499] do_syscall_64+0xcd/0x250 [ 410.330958][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.331002][T10499] RIP: 0033:0x7f915878bb7c [ 410.331026][T10499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.331056][T10499] RSP: 002b:00007f9159649030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.331085][T10499] RAX: ffffffffffffffda RBX: 00007f91589a5fa0 RCX: 00007f915878bb7c [ 410.331104][T10499] RDX: 000000000000000f RSI: 00007f91596490a0 RDI: 0000000000000004 [ 410.331122][T10499] RBP: 00007f9159649090 R08: 0000000000000000 R09: 0000000000000000 [ 410.331139][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.331156][T10499] R13: 0000000000000000 R14: 00007f91589a5fa0 R15: 00007ffc7f642b58 [ 410.331194][T10499] [ 410.331999][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.495082][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.656593][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 410.730040][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.809973][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.782271][T10560] serio: Serial port ptm1 [ 414.890028][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.973407][T10601] Invalid ELF header magic: != ELF [ 420.314275][T10630] openvswitch: netlink: nsh attribute has 31 unknown bytes. [ 421.821329][T10670] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 422.396332][ T29] audit: type=1800 audit(4295033010.781:4): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.878" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 424.055712][T10707] openvswitch: netlink: nsh attribute has 31 unknown bytes. [ 424.375208][T10711] FAULT_INJECTION: forcing a failure. [ 424.375208][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 424.409145][T10711] CPU: 1 UID: 0 PID: 10711 Comm: syz.2.882 Not tainted 6.14.0-rc4-syzkaller #0 [ 424.409185][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 424.409203][T10711] Call Trace: [ 424.409211][T10711] [ 424.409221][T10711] dump_stack_lvl+0x16c/0x1f0 [ 424.409264][T10711] should_fail_ex+0x50a/0x650 [ 424.409307][T10711] ? fs_reclaim_acquire+0xae/0x150 [ 424.409345][T10711] should_failslab+0xc2/0x120 [ 424.409381][T10711] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 424.409427][T10711] ? bdev_alloc_inode+0x26/0x90 [ 424.409454][T10711] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.409490][T10711] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 424.409516][T10711] bdev_alloc_inode+0x26/0x90 [ 424.409540][T10711] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 424.409566][T10711] alloc_inode+0x5d/0x230 [ 424.409592][T10711] new_inode+0x22/0x210 [ 424.409614][T10711] ? rcu_is_watching+0x12/0xc0 [ 424.409647][T10711] bdev_alloc+0x2b/0x420 [ 424.409682][T10711] __alloc_disk_node+0x10c/0x610 [ 424.409714][T10711] ? blk_alloc_queue+0x1a3/0x700 [ 424.409746][T10711] __blk_alloc_disk+0xd8/0x170 [ 424.409779][T10711] ? __pfx___blk_alloc_disk+0x10/0x10 [ 424.409844][T10711] ? __pfx_idr_alloc+0x10/0x10 [ 424.409887][T10711] ? __raw_spin_lock_init+0x3a/0x110 [ 424.409945][T10711] ? __pfx_hot_add_show+0x10/0x10 [ 424.409993][T10711] zram_add+0x160/0x6b0 [ 424.410039][T10711] ? __pfx_zram_add+0x10/0x10 [ 424.410107][T10711] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 424.410154][T10711] ? rcu_is_watching+0x12/0xc0 [ 424.410195][T10711] ? __pfx_hot_add_show+0x10/0x10 [ 424.410239][T10711] hot_add_show+0x21/0x80 [ 424.410288][T10711] class_attr_show+0x6f/0xa0 [ 424.410333][T10711] ? __pfx_class_attr_show+0x10/0x10 [ 424.410387][T10711] sysfs_kf_seq_show+0x23e/0x410 [ 424.410437][T10711] seq_read_iter+0x4f4/0x12b0 [ 424.410500][T10711] kernfs_fop_read_iter+0x414/0x580 [ 424.410536][T10711] ? rw_verify_area+0xcf/0x680 [ 424.410582][T10711] vfs_read+0x886/0xbf0 [ 424.410636][T10711] ? __pfx_vfs_read+0x10/0x10 [ 424.410710][T10711] ksys_read+0x12b/0x250 [ 424.410755][T10711] ? __pfx_ksys_read+0x10/0x10 [ 424.410814][T10711] do_syscall_64+0xcd/0x250 [ 424.410861][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.410906][T10711] RIP: 0033:0x7f98ed38d169 [ 424.410933][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.410964][T10711] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.410995][T10711] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 424.411017][T10711] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000008 [ 424.411036][T10711] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 424.411055][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.411074][T10711] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 424.411117][T10711] [ 424.830778][T10711] zram: Error allocating disk structure for device 1 [ 428.899196][T10762] openvswitch: netlink: nsh attribute has 31 unknown bytes. [ 429.791446][T10789] FAULT_INJECTION: forcing a failure. [ 429.791446][T10789] name failslab, interval 1, probability 0, space 0, times 0 [ 429.804880][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.5.899 Not tainted 6.14.0-rc4-syzkaller #0 [ 429.804921][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.804942][T10789] Call Trace: [ 429.804952][T10789] [ 429.804964][T10789] dump_stack_lvl+0x16c/0x1f0 [ 429.805013][T10789] should_fail_ex+0x50a/0x650 [ 429.805062][T10789] ? fs_reclaim_acquire+0xae/0x150 [ 429.805107][T10789] ? ovs_flow_tbl_init+0x1c7/0x600 [ 429.805156][T10789] should_failslab+0xc2/0x120 [ 429.805187][T10789] __kmalloc_cache_noprof+0x68/0x410 [ 429.805243][T10789] ovs_flow_tbl_init+0x1c7/0x600 [ 429.805302][T10789] ovs_dp_cmd_new+0x252/0xe50 [ 429.805341][T10789] ? rcu_is_watching+0x12/0xc0 [ 429.805377][T10789] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 429.805419][T10789] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 429.805473][T10789] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 429.805535][T10789] genl_family_rcv_msg_doit+0x202/0x2f0 [ 429.805589][T10789] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.805641][T10789] ? trace_cap_capable+0x1a2/0x210 [ 429.805686][T10789] ? bpf_lsm_capable+0x9/0x10 [ 429.805719][T10789] ? security_capable+0x7e/0x260 [ 429.805774][T10789] ? ns_capable+0xd7/0x110 [ 429.805825][T10789] genl_rcv_msg+0x565/0x800 [ 429.805887][T10789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.805938][T10789] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 429.805987][T10789] netlink_rcv_skb+0x16b/0x440 [ 429.806031][T10789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.806083][T10789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.806146][T10789] ? down_read+0xc9/0x330 [ 429.806190][T10789] ? __pfx_down_read+0x10/0x10 [ 429.806235][T10789] ? netlink_deliver_tap+0x1ae/0xd30 [ 429.806282][T10789] genl_rcv+0x28/0x40 [ 429.806323][T10789] netlink_unicast+0x53c/0x7f0 [ 429.806369][T10789] ? __pfx_netlink_unicast+0x10/0x10 [ 429.806410][T10789] ? __phys_addr_symbol+0x30/0x80 [ 429.806443][T10789] ? __check_object_size+0x488/0x710 [ 429.806482][T10789] netlink_sendmsg+0x8b8/0xd70 [ 429.806533][T10789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.806594][T10789] ____sys_sendmsg+0xaaf/0xc90 [ 429.806630][T10789] ? copy_msghdr_from_user+0x10b/0x160 [ 429.806679][T10789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.806735][T10789] ___sys_sendmsg+0x135/0x1e0 [ 429.806785][T10789] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.806859][T10789] ? __pfx_lock_release+0x10/0x10 [ 429.806906][T10789] ? trace_lock_acquire+0x14e/0x1f0 [ 429.806959][T10789] ? __fget_files+0x206/0x3a0 [ 429.807018][T10789] __sys_sendmsg+0x16e/0x220 [ 429.807067][T10789] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.807112][T10789] ? __x64_sys_futex+0x1e1/0x4c0 [ 429.807178][T10789] do_syscall_64+0xcd/0x250 [ 429.807223][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.807270][T10789] RIP: 0033:0x7f915878d169 [ 429.807295][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.807328][T10789] RSP: 002b:00007f9159649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.807358][T10789] RAX: ffffffffffffffda RBX: 00007f91589a5fa0 RCX: 00007f915878d169 [ 429.807380][T10789] RDX: 0000000002000000 RSI: 0000400000000080 RDI: 0000000000000009 [ 429.807400][T10789] RBP: 00007f915880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.807420][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.807439][T10789] R13: 0000000000000000 R14: 00007f91589a5fa0 R15: 00007ffc7f642b58 [ 429.807480][T10789] [ 431.605845][T10818] Invalid ELF header magic: != ELF [ 431.840516][T10820] netlink: 'syz.5.906': attribute type 9 has an invalid length. [ 432.050244][T10772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.060367][T10772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.078679][T10772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 432.096333][T10772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.049903][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.974886][T10844] openvswitch: netlink: nsh attribute has 31 unknown bytes. [ 434.099960][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 434.106056][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.169937][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.259902][ T29] audit: type=1800 audit(4295033031.638:5): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.920" name="features" dev="configfs" ino=29370 res=0 errno=0 [ 435.505793][T10878] cgroup: fork rejected by pids controller in /syz5 [ 438.288797][T10951] netlink: 342 bytes leftover after parsing attributes in process `syz.0.929'. [ 439.239174][T10974] bridge0: port 3(bond0) entered blocking state [ 439.298308][T10974] bridge0: port 3(bond0) entered disabled state [ 439.318616][T10974] bond0: entered allmulticast mode [ 439.326882][T10974] bond_slave_0: entered allmulticast mode [ 439.348333][T10974] bond_slave_1: entered allmulticast mode [ 439.361230][T10974] bond0: entered promiscuous mode [ 439.376433][T10974] bond_slave_0: entered promiscuous mode [ 439.384008][T10974] bond_slave_1: entered promiscuous mode [ 439.394979][T10974] bridge0: port 3(bond0) entered blocking state [ 439.401412][T10974] bridge0: port 3(bond0) entered forwarding state [ 444.999718][ T5849] Bluetooth: hci2: unexpected event 0x06 length: 11 > 3 [ 445.630810][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 445.693023][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.699736][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.090553][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.956'. [ 451.234916][T11125] delete_channel: no stack [ 451.315079][T11132] bond0: option all_slaves_active: invalid value (") [ 454.352471][T11156] netlink: 172 bytes leftover after parsing attributes in process `syz.4.972'. [ 454.548183][T11156] netlink: zone id is out of range [ 456.988420][T11199] capability: warning: `syz.4.982' uses 32-bit capabilities (legacy support in use) [ 457.619328][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 462.132983][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 473.035776][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.049224][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.063259][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.087799][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.096272][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 473.103894][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.285475][T11374] FAULT_INJECTION: forcing a failure. [ 473.285475][T11374] name failslab, interval 1, probability 0, space 0, times 0 [ 473.344357][T11374] CPU: 0 UID: 0 PID: 11374 Comm: syz.2.1021 Not tainted 6.14.0-rc4-syzkaller #0 [ 473.344403][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.344425][T11374] Call Trace: [ 473.344435][T11374] [ 473.344448][T11374] dump_stack_lvl+0x16c/0x1f0 [ 473.344496][T11374] should_fail_ex+0x50a/0x650 [ 473.344547][T11374] ? fs_reclaim_acquire+0xae/0x150 [ 473.344604][T11374] ? sk_prot_alloc+0x1a8/0x2a0 [ 473.344634][T11374] should_failslab+0xc2/0x120 [ 473.344666][T11374] __kmalloc_noprof+0xcb/0x510 [ 473.344713][T11374] ? find_held_lock+0x2d/0x110 [ 473.344755][T11374] sk_prot_alloc+0x1a8/0x2a0 [ 473.344789][T11374] sk_alloc+0x36/0xb90 [ 473.344833][T11374] mISDN_sock_create+0x275/0x410 [ 473.344876][T11374] __sock_create+0x335/0x8d0 [ 473.344920][T11374] __sys_socket+0x14f/0x260 [ 473.344958][T11374] ? __pfx___sys_socket+0x10/0x10 [ 473.344995][T11374] ? rcu_is_watching+0x12/0xc0 [ 473.345038][T11374] __x64_sys_socket+0x72/0xb0 [ 473.345074][T11374] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.345114][T11374] do_syscall_64+0xcd/0x250 [ 473.345159][T11374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.345205][T11374] RIP: 0033:0x7f98ed38d169 [ 473.345230][T11374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.345262][T11374] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 473.345291][T11374] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 473.345311][T11374] RDX: 0000000000000022 RSI: 0000000000000002 RDI: 0000000000000022 [ 473.345331][T11374] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.345349][T11374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.345367][T11374] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 473.345405][T11374] [ 473.537787][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.233367][T11378] chnl_net:caif_netlink_parms(): no params data found [ 475.093713][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.107678][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.115824][T11378] bridge_slave_0: entered allmulticast mode [ 475.138668][T11378] bridge_slave_0: entered promiscuous mode [ 475.162454][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.181288][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.196048][T11378] bridge_slave_1: entered allmulticast mode [ 475.210127][ T5849] Bluetooth: hci1: command tx timeout [ 475.211368][T11378] bridge_slave_1: entered promiscuous mode [ 475.506053][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.537454][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.782684][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 476.663060][T11378] team0: Port device team_slave_0 added [ 476.693481][T11378] team0: Port device team_slave_1 added [ 477.050495][T11426] usb usb22: usbfs: process 11426 (syz.0.1026) did not claim interface 5 before use [ 477.290260][ T5849] Bluetooth: hci1: command tx timeout [ 477.748984][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.799989][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.987568][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.042192][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.049206][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.149419][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.101352][T11378] hsr_slave_0: entered promiscuous mode [ 479.111377][T11378] hsr_slave_1: entered promiscuous mode [ 479.130509][T11378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.169044][T11378] Cannot create hsr debugfs directory [ 479.370673][ T5849] Bluetooth: hci1: command tx timeout [ 480.671785][T11378] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 480.757732][T11378] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.804100][T11378] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.924335][T11378] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.991949][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 481.428057][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.450050][ T5849] Bluetooth: hci1: command tx timeout [ 481.500012][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.552456][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.559688][ T7720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.589094][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.596331][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.694199][T11378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.705103][T11378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.991381][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.579361][T11378] veth0_vlan: entered promiscuous mode [ 482.597794][T11378] veth1_vlan: entered promiscuous mode [ 482.661680][T11378] veth0_macvtap: entered promiscuous mode [ 482.704386][T11378] veth1_macvtap: entered promiscuous mode [ 482.757342][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.806507][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.826874][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.853120][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.874330][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.887530][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.955421][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.968284][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.987623][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.356626][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.413606][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.452532][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.466132][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.489897][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.520209][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.543799][T11378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.560432][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1046'. [ 483.580175][T11378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.601360][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.672307][T11378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.705775][T11378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.779902][T11378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.788779][T11378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.996078][T11518] FAULT_INJECTION: forcing a failure. [ 483.996078][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 484.109900][T11518] CPU: 0 UID: 0 PID: 11518 Comm: syz.4.1048 Not tainted 6.14.0-rc4-syzkaller #0 [ 484.109943][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 484.109962][T11518] Call Trace: [ 484.109972][T11518] [ 484.109985][T11518] dump_stack_lvl+0x16c/0x1f0 [ 484.110032][T11518] should_fail_ex+0x50a/0x650 [ 484.110084][T11518] ? fs_reclaim_acquire+0xae/0x150 [ 484.110129][T11518] ? nfs_alloc_fhandle+0x3b/0x90 [ 484.110162][T11518] should_failslab+0xc2/0x120 [ 484.110193][T11518] __kmalloc_cache_noprof+0x68/0x410 [ 484.110244][T11518] nfs_alloc_fhandle+0x3b/0x90 [ 484.110277][T11518] nfs_init_fs_context+0x65/0x1160 [ 484.110403][T11518] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 484.110441][T11518] alloc_fs_context+0x54a/0x9c0 [ 484.110501][T11518] path_mount+0xb08/0x1f10 [ 484.110556][T11518] ? kmem_cache_free+0x2e2/0x4d0 [ 484.110605][T11518] ? __pfx_path_mount+0x10/0x10 [ 484.110660][T11518] ? putname+0x13c/0x180 [ 484.110697][T11518] __x64_sys_mount+0x28f/0x310 [ 484.110748][T11518] ? __pfx___x64_sys_mount+0x10/0x10 [ 484.110810][T11518] do_syscall_64+0xcd/0x250 [ 484.110855][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.110900][T11518] RIP: 0033:0x7fd6fb58d169 [ 484.110924][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.110953][T11518] RSP: 002b:00007fd6fc4c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.110979][T11518] RAX: ffffffffffffffda RBX: 00007fd6fb7a5fa0 RCX: 00007fd6fb58d169 [ 484.110998][T11518] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000400000000040 [ 484.111016][T11518] RBP: 00007fd6fb60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 484.111033][T11518] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 484.111049][T11518] R13: 0000000000000000 R14: 00007fd6fb7a5fa0 R15: 00007ffcc8ac3658 [ 484.111079][T11518] [ 484.932220][T11516] tipc: Started in network mode [ 484.940645][T11516] tipc: Node identity 7, cluster identity 4711 [ 484.946865][T11516] tipc: Node number set to 7 [ 485.050476][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.062998][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.735581][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.756984][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.001086][T11532] FAULT_INJECTION: forcing a failure. [ 486.001086][T11532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.079262][T11532] CPU: 1 UID: 0 PID: 11532 Comm: syz.4.1051 Not tainted 6.14.0-rc4-syzkaller #0 [ 486.079312][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.079331][T11532] Call Trace: [ 486.079340][T11532] [ 486.079352][T11532] dump_stack_lvl+0x16c/0x1f0 [ 486.079398][T11532] should_fail_ex+0x50a/0x650 [ 486.079453][T11532] _copy_from_user+0x2e/0xd0 [ 486.079488][T11532] move_addr_to_kernel+0x68/0x160 [ 486.079527][T11532] __sys_sendto+0x1ba/0x4f0 [ 486.079570][T11532] ? __pfx___sys_sendto+0x10/0x10 [ 486.079642][T11532] ? ksys_write+0x1ba/0x250 [ 486.079685][T11532] ? __pfx_ksys_write+0x10/0x10 [ 486.079735][T11532] __x64_sys_sendto+0xe0/0x1c0 [ 486.079781][T11532] ? do_syscall_64+0x91/0x250 [ 486.079819][T11532] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.079855][T11532] do_syscall_64+0xcd/0x250 [ 486.079895][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.079937][T11532] RIP: 0033:0x7fd6fb58d169 [ 486.079961][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.079991][T11532] RSP: 002b:00007fd6fc4c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.080020][T11532] RAX: ffffffffffffffda RBX: 00007fd6fb7a5fa0 RCX: 00007fd6fb58d169 [ 486.080039][T11532] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 486.080056][T11532] RBP: 00007fd6fc4c1090 R08: 0000400000000340 R09: 0000000000000022 [ 486.080075][T11532] R10: 000000000000f034 R11: 0000000000000246 R12: 0000000000000001 [ 486.080093][T11532] R13: 0000000000000000 R14: 00007fd6fb7a5fa0 R15: 00007ffcc8ac3658 [ 486.080130][T11532] [ 487.203662][ T7720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.325129][ T7720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.524751][ T7720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.127441][ T7720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.721591][ T7720] bridge_slave_1: left allmulticast mode [ 488.727319][ T7720] bridge_slave_1: left promiscuous mode [ 488.770277][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.791750][T11588] FAULT_INJECTION: forcing a failure. [ 488.791750][T11588] name failslab, interval 1, probability 0, space 0, times 0 [ 488.828634][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.0.1064 Not tainted 6.14.0-rc4-syzkaller #0 [ 488.828674][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.828692][T11588] Call Trace: [ 488.828701][T11588] [ 488.828712][T11588] dump_stack_lvl+0x16c/0x1f0 [ 488.828755][T11588] should_fail_ex+0x50a/0x650 [ 488.828800][T11588] ? fs_reclaim_acquire+0xae/0x150 [ 488.828841][T11588] should_failslab+0xc2/0x120 [ 488.828878][T11588] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 488.828927][T11588] ? __alloc_skb+0x2b1/0x380 [ 488.828974][T11588] __alloc_skb+0x2b1/0x380 [ 488.829014][T11588] ? __pfx___alloc_skb+0x10/0x10 [ 488.829052][T11588] ? __lock_acquire+0xcc5/0x3c40 [ 488.829108][T11588] alloc_skb_with_frags+0xe4/0x850 [ 488.829158][T11588] ? __pfx___lock_acquire+0x10/0x10 [ 488.829201][T11588] ? __lock_acquire+0x15a9/0x3c40 [ 488.829252][T11588] sock_alloc_send_pskb+0x7f1/0x980 [ 488.829296][T11588] ? find_held_lock+0x2d/0x110 [ 488.829337][T11588] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 488.829384][T11588] ? lock_acquire+0x2f/0xb0 [ 488.829424][T11588] ? dev_get_by_index+0x37/0x380 [ 488.829474][T11588] packet_sendmsg+0x1fd3/0x56c0 [ 488.829537][T11588] ? __pfx___might_resched+0x10/0x10 [ 488.829587][T11588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.829645][T11588] ? __pfx_packet_sendmsg+0x10/0x10 [ 488.829691][T11588] ? aa_label_snxprint+0x510/0x980 [ 488.829738][T11588] __sys_sendto+0x488/0x4f0 [ 488.829788][T11588] ? __pfx___sys_sendto+0x10/0x10 [ 488.829863][T11588] ? ksys_write+0x1ba/0x250 [ 488.829911][T11588] ? __pfx_ksys_write+0x10/0x10 [ 488.829959][T11588] __x64_sys_sendto+0xe0/0x1c0 [ 488.830000][T11588] ? do_syscall_64+0x91/0x250 [ 488.830040][T11588] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.830078][T11588] do_syscall_64+0xcd/0x250 [ 488.830122][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.830166][T11588] RIP: 0033:0x7f170db8d169 [ 488.830191][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.830220][T11588] RSP: 002b:00007f170b9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.830250][T11588] RAX: ffffffffffffffda RBX: 00007f170dda6080 RCX: 00007f170db8d169 [ 488.830270][T11588] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 488.830287][T11588] RBP: 00007f170b9d5090 R08: 0000400000000340 R09: 0000000000000022 [ 488.830306][T11588] R10: 000000000000f034 R11: 0000000000000246 R12: 0000000000000001 [ 488.830324][T11588] R13: 0000000000000000 R14: 00007f170dda6080 R15: 00007ffdf18fb338 [ 488.830361][T11588] [ 489.131743][ T7720] bridge_slave_0: left allmulticast mode [ 489.137481][ T7720] bridge_slave_0: left promiscuous mode [ 489.150068][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.317117][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 491.715565][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.763378][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.893369][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 491.904332][ T7720] bond0 (unregistering): Released all slaves [ 492.346421][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.367897][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.380141][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.387482][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 494.103194][ T7720] hsr_slave_0: left promiscuous mode [ 494.111326][ T7720] hsr_slave_1: left promiscuous mode [ 494.118269][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.130008][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.160798][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.168308][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.294351][ T7720] veth1_macvtap: left promiscuous mode [ 494.329121][ T7720] veth0_macvtap: left promiscuous mode [ 494.350310][ T7720] veth1_vlan: left promiscuous mode [ 494.355706][ T7720] veth0_vlan: left promiscuous mode [ 495.163858][T11673] raw_sendmsg: syz.0.1080 forgot to set AF_INET. Fix it! [ 496.781929][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 497.318881][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 497.476936][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 499.488853][T11714] FAULT_INJECTION: forcing a failure. [ 499.488853][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.502537][T11714] CPU: 1 UID: 0 PID: 11714 Comm: syz.2.1087 Not tainted 6.14.0-rc4-syzkaller #0 [ 499.502573][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.502591][T11714] Call Trace: [ 499.502600][T11714] [ 499.502611][T11714] dump_stack_lvl+0x16c/0x1f0 [ 499.502656][T11714] should_fail_ex+0x50a/0x650 [ 499.502712][T11714] _copy_from_iter+0x2a1/0x1560 [ 499.502746][T11714] ? trace_lock_acquire+0x14e/0x1f0 [ 499.502787][T11714] ? __pfx__copy_from_iter+0x10/0x10 [ 499.502816][T11714] ? __virt_addr_valid+0x1a4/0x590 [ 499.502854][T11714] ? __virt_addr_valid+0x5e/0x590 [ 499.502886][T11714] ? __phys_addr_symbol+0x30/0x80 [ 499.502917][T11714] ? __check_object_size+0x488/0x710 [ 499.502955][T11714] skb_copy_datagram_from_iter+0x124/0x710 [ 499.502996][T11714] ? lock_acquire+0x2f/0xb0 [ 499.503059][T11714] packet_sendmsg+0x220f/0x56c0 [ 499.503126][T11714] ? __pfx___might_resched+0x10/0x10 [ 499.503174][T11714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.503233][T11714] ? __pfx_packet_sendmsg+0x10/0x10 [ 499.503280][T11714] ? aa_label_snxprint+0x510/0x980 [ 499.503327][T11714] __sys_sendto+0x488/0x4f0 [ 499.503370][T11714] ? __pfx___sys_sendto+0x10/0x10 [ 499.503442][T11714] ? ksys_write+0x1ba/0x250 [ 499.503486][T11714] ? __pfx_ksys_write+0x10/0x10 [ 499.503533][T11714] __x64_sys_sendto+0xe0/0x1c0 [ 499.503574][T11714] ? do_syscall_64+0x91/0x250 [ 499.503614][T11714] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.503651][T11714] do_syscall_64+0xcd/0x250 [ 499.503694][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.503739][T11714] RIP: 0033:0x7f98ed38d169 [ 499.503762][T11714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.503793][T11714] RSP: 002b:00007f98ee135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.503822][T11714] RAX: ffffffffffffffda RBX: 00007f98ed5a6080 RCX: 00007f98ed38d169 [ 499.503842][T11714] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 499.503859][T11714] RBP: 00007f98ee135090 R08: 0000400000000340 R09: 0000000000000022 [ 499.503879][T11714] R10: 000000000000f034 R11: 0000000000000246 R12: 0000000000000001 [ 499.503896][T11714] R13: 0000000000000000 R14: 00007f98ed5a6080 R15: 00007fffa8dc6f28 [ 499.503934][T11714] [ 499.744474][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.699512][T11741] netlink: 194 bytes leftover after parsing attributes in process `syz.6.1091'. [ 501.703736][T11780] FAULT_INJECTION: forcing a failure. [ 501.703736][T11780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.736423][T11780] CPU: 1 UID: 0 PID: 11780 Comm: syz.6.1098 Not tainted 6.14.0-rc4-syzkaller #0 [ 501.736463][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.736481][T11780] Call Trace: [ 501.736491][T11780] [ 501.736503][T11780] dump_stack_lvl+0x16c/0x1f0 [ 501.736558][T11780] should_fail_ex+0x50a/0x650 [ 501.736617][T11780] _copy_to_user+0x32/0xd0 [ 501.736654][T11780] simple_read_from_buffer+0xd0/0x160 [ 501.736696][T11780] proc_fail_nth_read+0x198/0x270 [ 501.736735][T11780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.736786][T11780] ? rw_verify_area+0xcf/0x680 [ 501.736828][T11780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.736866][T11780] vfs_read+0x1df/0xbf0 [ 501.736910][T11780] ? __fget_files+0x1fc/0x3a0 [ 501.736955][T11780] ? __pfx___mutex_lock+0x10/0x10 [ 501.736996][T11780] ? __pfx_vfs_read+0x10/0x10 [ 501.737054][T11780] ? __fget_files+0x206/0x3a0 [ 501.737109][T11780] ksys_read+0x12b/0x250 [ 501.737150][T11780] ? __pfx_ksys_read+0x10/0x10 [ 501.737204][T11780] do_syscall_64+0xcd/0x250 [ 501.737247][T11780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.737289][T11780] RIP: 0033:0x7f828c38bb7c [ 501.737313][T11780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.737343][T11780] RSP: 002b:00007f828d13f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.737369][T11780] RAX: ffffffffffffffda RBX: 00007f828c5a6080 RCX: 00007f828c38bb7c [ 501.737388][T11780] RDX: 000000000000000f RSI: 00007f828d13f0a0 RDI: 0000000000000005 [ 501.737405][T11780] RBP: 00007f828d13f090 R08: 0000000000000000 R09: 0000000000000022 [ 501.737422][T11780] R10: 000000000000f034 R11: 0000000000000246 R12: 0000000000000001 [ 501.737438][T11780] R13: 0000000000000000 R14: 00007f828c5a6080 R15: 00007ffe4d8570c8 [ 501.737475][T11780] [ 501.923838][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.738420][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 502.782834][T11801] netlink: 194 bytes leftover after parsing attributes in process `syz.4.1104'. [ 503.095385][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 503.652380][T11827] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1108'. [ 507.133326][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.139702][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.831809][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 512.315037][T12034] Invalid ELF header magic: != ELF [ 514.852524][T12080] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1144'. [ 516.660635][T12104] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1147'. [ 518.085953][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.097023][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.120872][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.129516][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.186665][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.202163][T12141] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.297877][T12162] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1160'. [ 518.888496][T12173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 518.891643][T12185] netlink: 972 bytes leftover after parsing attributes in process `syz.2.1163'. [ 518.898228][T12173] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 520.894203][T12228] netlink: 972 bytes leftover after parsing attributes in process `syz.4.1173'. [ 521.880536][T12238] program syz.4.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.671988][ T29] audit: type=1800 audit(4295033119.068:6): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1180" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 522.695821][T12253] Invalid ELF header magic: != ELF [ 523.944655][T12297] netlink: 972 bytes leftover after parsing attributes in process `syz.4.1184'. [ 528.301970][T12387] GUP no longer grows the stack in syz.2.1198 (12387): 14000-401000 (4000) [ 528.343779][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.2.1198 Not tainted 6.14.0-rc4-syzkaller #0 [ 528.343827][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.343848][T12387] Call Trace: [ 528.343857][T12387] [ 528.343870][T12387] dump_stack_lvl+0x16c/0x1f0 [ 528.343919][T12387] gup_vma_lookup+0x1d2/0x220 [ 528.343967][T12387] __get_user_pages+0x236/0x36f0 [ 528.344023][T12387] ? hlock_class+0x4e/0x130 [ 528.344056][T12387] ? __lock_acquire+0x15a9/0x3c40 [ 528.344102][T12387] ? __pfx___get_user_pages+0x10/0x10 [ 528.344165][T12387] __gup_longterm_locked+0x212/0x1870 [ 528.344223][T12387] ? __pfx___lock_acquire+0x10/0x10 [ 528.344278][T12387] ? __pfx___gup_longterm_locked+0x10/0x10 [ 528.344326][T12387] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 528.344373][T12387] ? rwsem_read_trylock+0x12d/0x250 [ 528.344425][T12387] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 528.344474][T12387] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 528.344514][T12387] pin_user_pages_remote+0xee/0x150 [ 528.344564][T12387] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 528.344610][T12387] ? down_read+0xc9/0x330 [ 528.344667][T12387] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 528.344710][T12387] ? futex_wait_queue+0x103/0x1f0 [ 528.344765][T12387] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 528.344857][T12387] process_vm_rw+0x301/0x360 [ 528.344893][T12387] ? __pfx_process_vm_rw+0x10/0x10 [ 528.344934][T12387] ? up_write+0x1b2/0x520 [ 528.345001][T12387] ? __pfx___do_sys_mremap+0x10/0x10 [ 528.345047][T12387] ? xfd_validate_state+0x5d/0x180 [ 528.345093][T12387] ? rcu_is_watching+0x12/0xc0 [ 528.345131][T12387] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 528.345165][T12387] ? do_syscall_64+0x91/0x250 [ 528.345225][T12387] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.345261][T12387] do_syscall_64+0xcd/0x250 [ 528.345305][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.345350][T12387] RIP: 0033:0x7f98ed38d169 [ 528.345375][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.345402][T12387] RSP: 002b:00007f98ee135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 528.345428][T12387] RAX: ffffffffffffffda RBX: 00007f98ed5a6080 RCX: 00007f98ed38d169 [ 528.345448][T12387] RDX: 0000000000000004 RSI: 0000400000000040 RDI: 000000000000054f [ 528.345466][T12387] RBP: 00007f98ed40e2a0 R08: 0000000000000003 R09: 0000000000000000 [ 528.345485][T12387] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 528.345503][T12387] R13: 0000000000000000 R14: 00007f98ed5a6080 R15: 00007fffa8dc6f28 [ 528.345540][T12387] [ 534.482458][T12475] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 535.228000][T12480] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06800 pfn:0x7fe00 [ 535.327298][T12480] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 535.380762][T12480] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 535.390101][T12480] page_type: f5(slab) [ 535.394182][T12480] raw: 00fff00000000240 ffff88801b041dc0 ffffea000092d610 ffffea00009fc810 [ 535.529704][T12480] raw: ffff88807fe06800 0000000000100008 00000000f5000000 0000000000000000 [ 535.541393][T12480] head: 00fff00000000240 ffff88801b041dc0 ffffea000092d610 ffffea00009fc810 [ 535.649887][T12480] head: ffff88807fe06800 0000000000100008 00000000f5000000 0000000000000000 [ 535.658676][T12480] head: 00fff00000000003 ffffea0001ff8001 ffffffffffffffff 0000000000000000 [ 535.710004][T12484] could not allocate digest TFM handle binfmt_misc [ 535.800256][T12480] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 535.948559][T12480] page dumped because: unmovable page [ 535.965457][T12480] page_owner tracks the page as allocated [ 536.012361][T12480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5644, tgid 5644 (dhcpcd), ts 65310502506, free_ts 65231682995 [ 536.170193][T12480] post_alloc_hook+0x181/0x1b0 [ 536.175107][T12480] get_page_from_freelist+0xfce/0x2f80 [ 536.233971][T12480] __alloc_frozen_pages_noprof+0x221/0x2470 [ 536.289352][T12480] alloc_pages_mpol+0x1fc/0x540 [ 536.319594][T12480] new_slab+0x23d/0x330 [ 536.354592][T12480] ___slab_alloc+0xc5d/0x1720 [ 536.368463][T12480] __slab_alloc.constprop.0+0x56/0xb0 [ 536.446491][T12480] __kmalloc_noprof+0x2ec/0x510 [ 536.472569][T12480] load_elf_phdrs+0x103/0x210 [ 536.507804][T12480] load_elf_binary+0x1f8/0x4fc0 [ 536.540225][T12480] bprm_execve+0x8dd/0x16d0 [ 536.556486][T12480] do_execveat_common.isra.0+0x4a2/0x610 [ 536.606567][T12480] __x64_sys_execve+0x8c/0xb0 [ 536.631643][T12480] do_syscall_64+0xcd/0x250 [ 536.672222][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.712990][T12480] page last free pid 46 tgid 46 stack trace: [ 536.743417][T12480] free_frozen_pages+0x6db/0xfb0 [ 536.768515][T12480] __put_partials+0x14c/0x170 [ 536.791409][T12480] qlist_free_all+0x4e/0x120 [ 536.806050][T12480] kasan_quarantine_reduce+0x195/0x1e0 [ 536.859285][T12480] __kasan_slab_alloc+0x69/0x90 [ 536.884079][T12480] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 536.902793][T12480] __alloc_skb+0x2b1/0x380 [ 536.919692][T12480] mld_newpack.isra.0+0x18f/0xa20 [ 536.932790][T12480] add_grhead+0x299/0x340 [ 536.954960][T12480] add_grec+0x111e/0x1670 [ 536.959648][T12480] mld_ifc_work+0x41f/0xca0 [ 536.969607][T12480] process_one_work+0x9c5/0x1ba0 [ 536.975096][T12480] worker_thread+0x6c8/0xf00 [ 536.992918][T12480] kthread+0x3af/0x750 [ 536.997121][T12480] ret_from_fork+0x45/0x80 [ 537.006441][T12480] ret_from_fork_asm+0x1a/0x30 [ 537.432653][T12515] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[12515] [ 537.759686][T12527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1230'. [ 539.246638][T12545] FAULT_INJECTION: forcing a failure. [ 539.246638][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 539.259555][T12545] CPU: 1 UID: 0 PID: 12545 Comm: syz.2.1234 Not tainted 6.14.0-rc4-syzkaller #0 [ 539.259591][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 539.259609][T12545] Call Trace: [ 539.259618][T12545] [ 539.259629][T12545] dump_stack_lvl+0x16c/0x1f0 [ 539.259673][T12545] should_fail_ex+0x50a/0x650 [ 539.259722][T12545] ? fs_reclaim_acquire+0xae/0x150 [ 539.259770][T12545] ? tomoyo_encode2+0x100/0x3e0 [ 539.259811][T12545] should_failslab+0xc2/0x120 [ 539.259842][T12545] __kmalloc_noprof+0xcb/0x510 [ 539.259898][T12545] ? d_absolute_path+0x137/0x1b0 [ 539.259937][T12545] tomoyo_encode2+0x100/0x3e0 [ 539.259986][T12545] tomoyo_encode+0x29/0x50 [ 539.260025][T12545] tomoyo_realpath_from_path+0x19d/0x720 [ 539.260082][T12545] tomoyo_check_open_permission+0x2ad/0x3c0 [ 539.260123][T12545] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 539.260179][T12545] ? __pfx___lock_acquire+0x10/0x10 [ 539.260246][T12545] ? __pfx_hook_file_open+0x10/0x10 [ 539.260286][T12545] ? lock_acquire+0x2f/0xb0 [ 539.260334][T12545] tomoyo_file_open+0x6b/0x90 [ 539.260385][T12545] security_file_open+0x84/0x1e0 [ 539.260428][T12545] do_dentry_open+0x57c/0x1c40 [ 539.260479][T12545] ? inode_permission+0xdd/0x5f0 [ 539.260517][T12545] vfs_open+0x82/0x3f0 [ 539.260547][T12545] ? may_open+0x1f2/0x400 [ 539.260586][T12545] path_openat+0x1e88/0x2d80 [ 539.260645][T12545] ? __pfx_path_openat+0x10/0x10 [ 539.260690][T12545] ? __pfx___lock_acquire+0x10/0x10 [ 539.260731][T12545] ? lock_acquire.part.0+0x11b/0x380 [ 539.260776][T12545] ? find_held_lock+0x2d/0x110 [ 539.260815][T12545] do_filp_open+0x20c/0x470 [ 539.260871][T12545] ? __pfx_do_filp_open+0x10/0x10 [ 539.260915][T12545] ? find_held_lock+0x2d/0x110 [ 539.260978][T12545] ? alloc_fd+0x41f/0x760 [ 539.261034][T12545] do_sys_openat2+0x17a/0x1e0 [ 539.261069][T12545] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.261118][T12545] __x64_sys_openat+0x175/0x210 [ 539.261153][T12545] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.261205][T12545] do_syscall_64+0xcd/0x250 [ 539.261250][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.261295][T12545] RIP: 0033:0x7f98ed38d169 [ 539.261319][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.261349][T12545] RSP: 002b:00007f98ee156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.261377][T12545] RAX: ffffffffffffffda RBX: 00007f98ed5a5fa0 RCX: 00007f98ed38d169 [ 539.261398][T12545] RDX: 0000000000000001 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 539.261416][T12545] RBP: 00007f98ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 539.261435][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.261452][T12545] R13: 0000000000000000 R14: 00007f98ed5a5fa0 R15: 00007fffa8dc6f28 [ 539.261490][T12545] [ 539.672736][T12545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 542.716471][ T7717] ref_tracker: net notrefcnt@ffff88807f6ebe60 has 1/2 users at [ 542.716471][ T7717] sk_alloc+0xa93/0xb90 [ 542.716471][ T7717] inet6_create+0x380/0x1320 [ 542.716471][ T7717] __sock_create+0x335/0x8d0 [ 542.716471][ T7717] udp_sock_create6+0xc8/0x6a0 [ 542.716471][ T7717] sctp_udp_sock_start+0x280/0x4b0 [ 542.716471][ T7717] proc_sctp_do_udp_port+0x380/0x450 [ 542.716471][ T7717] proc_sys_call_handler+0x3c6/0x5a0 [ 542.716471][ T7717] iter_file_splice_write+0x90f/0x10b0 [ 542.716471][ T7717] direct_splice_actor+0x18f/0x6c0 [ 542.716471][ T7717] splice_direct_to_actor+0x346/0xa40 [ 542.716471][ T7717] do_splice_direct+0x178/0x250 [ 542.716471][ T7717] do_sendfile+0xafb/0xe40 [ 542.716471][ T7717] __x64_sys_sendfile64+0x1da/0x220 [ 542.716471][ T7717] do_syscall_64+0xcd/0x250 [ 542.716471][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.716471][ T7717] [ 542.804417][ T7717] ref_tracker: net notrefcnt@ffff88807f6ebe60 has 1/2 users at [ 542.804417][ T7717] sk_alloc+0xa93/0xb90 [ 542.804417][ T7717] inet_create+0x3a1/0x10a0 [ 542.804417][ T7717] __sock_create+0x335/0x8d0 [ 542.804417][ T7717] udp_sock_create4+0xa7/0x450 [ 542.804417][ T7717] sctp_udp_sock_start+0x10b/0x4b0 [ 542.804417][ T7717] proc_sctp_do_udp_port+0x380/0x450 [ 542.804417][ T7717] proc_sys_call_handler+0x3c6/0x5a0 [ 542.804417][ T7717] iter_file_splice_write+0x90f/0x10b0 [ 542.804417][ T7717] direct_splice_actor+0x18f/0x6c0 [ 542.804417][ T7717] splice_direct_to_actor+0x346/0xa40 [ 542.804417][ T7717] do_splice_direct+0x178/0x250 [ 542.804417][ T7717] do_sendfile+0xafb/0xe40 [ 542.804417][ T7717] __x64_sys_sendfile64+0x1da/0x220 [ 542.804417][ T7717] do_syscall_64+0xcd/0x250 [ 542.804417][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.804417][ T7717] [ 543.153453][ T7717] ------------[ cut here ]------------ [ 543.159360][ T7717] WARNING: CPU: 0 PID: 7717 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 543.169191][ T7717] Modules linked in: [ 543.173239][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: kworker/u8:17 Not tainted 6.14.0-rc4-syzkaller #0 [ 543.182591][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.192870][ T7717] Workqueue: netns cleanup_net [ 543.197703][ T7717] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 543.203829][ T7717] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 543.223974][ T7717] RSP: 0018:ffffc9000bf57ab0 EFLAGS: 00010246 [ 543.230496][ T7717] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 543.238526][ T7717] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 543.246637][ T7717] RBP: ffff88807f6ebe60 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 543.254739][ T7717] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff88807f6ebeb0 [ 543.262945][ T7717] R13: ffff88807f6ebeb0 R14: ffff88807f6ebeb0 R15: ffff88807f6ebeb0 [ 543.271050][ T7717] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 543.280392][ T7717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.287038][ T7717] CR2: 000000110c6714a1 CR3: 0000000085526000 CR4: 00000000003526f0 [ 543.295160][ T7717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.303276][ T7717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.311429][ T7717] Call Trace: [ 543.314915][ T7717] [ 543.317930][ T7717] ? __warn+0xea/0x3c0 [ 543.322323][ T7717] ? ref_tracker_dir_exit+0x3e3/0x680 [ 543.327873][ T7717] ? report_bug+0x3c0/0x580 [ 543.332498][ T7717] ? handle_bug+0x54/0xa0 [ 543.336894][ T7717] ? exc_invalid_op+0x17/0x50 [ 543.341737][ T7717] ? asm_exc_invalid_op+0x1a/0x20 [ 543.346845][ T7717] ? ref_tracker_dir_exit+0x3e3/0x680 [ 543.352372][ T7717] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 543.358171][ T7717] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.364099][ T7717] ? net_passive_dec+0x7d/0xd0 [ 543.368932][ T7717] net_passive_dec+0x89/0xd0 [ 543.373730][ T7717] cleanup_net+0x8ac/0xb30 [ 543.378205][ T7717] ? __pfx_cleanup_net+0x10/0x10 [ 543.383349][ T7717] ? lock_acquire+0x2f/0xb0 [ 543.387917][ T7717] ? process_one_work+0x921/0x1ba0 [ 543.393146][ T7717] process_one_work+0x9c5/0x1ba0 [ 543.398313][ T7717] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 543.404183][ T7717] ? __pfx_process_one_work+0x10/0x10 [ 543.409642][ T7717] ? assign_work+0x1a0/0x250 [ 543.414499][ T7717] worker_thread+0x6c8/0xf00 [ 543.419185][ T7717] ? __pfx_worker_thread+0x10/0x10 [ 543.424582][ T7717] kthread+0x3af/0x750 [ 543.428735][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.433512][ T7717] ? lock_acquire+0x2f/0xb0 [ 543.438097][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.442833][ T7717] ret_from_fork+0x45/0x80 [ 543.447322][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.452142][ T7717] ret_from_fork_asm+0x1a/0x30 [ 543.456994][ T7717] [ 543.460164][ T7717] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 543.467505][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: kworker/u8:17 Not tainted 6.14.0-rc4-syzkaller #0 [ 543.476760][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.486874][ T7717] Workqueue: netns cleanup_net [ 543.491707][ T7717] Call Trace: [ 543.495109][ T7717] [ 543.498080][ T7717] dump_stack_lvl+0x3d/0x1f0 [ 543.502731][ T7717] panic+0x71d/0x800 [ 543.506681][ T7717] ? __pfx_panic+0x10/0x10 [ 543.511153][ T7717] ? show_trace_log_lvl+0x29d/0x3d0 [ 543.516421][ T7717] ? check_panic_on_warn+0x1f/0xb0 [ 543.521593][ T7717] ? ref_tracker_dir_exit+0x3e3/0x680 [ 543.527040][ T7717] check_panic_on_warn+0xab/0xb0 [ 543.532219][ T7717] __warn+0xf6/0x3c0 [ 543.536176][ T7717] ? ref_tracker_dir_exit+0x3e3/0x680 [ 543.541670][ T7717] report_bug+0x3c0/0x580 [ 543.546066][ T7717] handle_bug+0x54/0xa0 [ 543.550290][ T7717] exc_invalid_op+0x17/0x50 [ 543.554882][ T7717] asm_exc_invalid_op+0x1a/0x20 [ 543.559795][ T7717] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 543.565855][ T7717] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 543.585523][ T7717] RSP: 0018:ffffc9000bf57ab0 EFLAGS: 00010246 [ 543.591621][ T7717] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 543.599618][ T7717] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 543.607618][ T7717] RBP: ffff88807f6ebe60 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 543.615712][ T7717] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff88807f6ebeb0 [ 543.623710][ T7717] R13: ffff88807f6ebeb0 R14: ffff88807f6ebeb0 R15: ffff88807f6ebeb0 [ 543.631733][ T7717] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 543.637499][ T7717] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.643335][ T7717] ? net_passive_dec+0x7d/0xd0 [ 543.648128][ T7717] net_passive_dec+0x89/0xd0 [ 543.652742][ T7717] cleanup_net+0x8ac/0xb30 [ 543.657183][ T7717] ? __pfx_cleanup_net+0x10/0x10 [ 543.662148][ T7717] ? lock_acquire+0x2f/0xb0 [ 543.666691][ T7717] ? process_one_work+0x921/0x1ba0 [ 543.671846][ T7717] process_one_work+0x9c5/0x1ba0 [ 543.676832][ T7717] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 543.682504][ T7717] ? __pfx_process_one_work+0x10/0x10 [ 543.687918][ T7717] ? assign_work+0x1a0/0x250 [ 543.692553][ T7717] worker_thread+0x6c8/0xf00 [ 543.697190][ T7717] ? __pfx_worker_thread+0x10/0x10 [ 543.702337][ T7717] kthread+0x3af/0x750 [ 543.706437][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.711056][ T7717] ? lock_acquire+0x2f/0xb0 [ 543.715598][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.720225][ T7717] ret_from_fork+0x45/0x80 [ 543.724675][ T7717] ? __pfx_kthread+0x10/0x10 [ 543.729319][ T7717] ret_from_fork_asm+0x1a/0x30 [ 543.734131][ T7717] [ 543.737464][ T7717] Kernel Offset: disabled [ 543.741873][ T7717] Rebooting in 86400 seconds..