last executing test programs: 21m33.71139934s ago: executing program 3 (id=112): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.descendants\x00', 0x22022, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) userfaultfd$auto(0x1) r1 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000040)=""/160, 0xa0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x0, 0x0) socket(0x21, 0x2, 0x9) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x18, 0x80000, 0x0) connect$auto(r3, 0x0, 0x1e) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000001c0), r2) sendmsg$auto_GTP_CMD_DELPDP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, 0x9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x50) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc884}, 0x8000) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x60040001}, 0x80) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) 21m33.432352579s ago: executing program 3 (id=114): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto(r1, 0x0, 0x1400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.5/usb6/power/autosuspend_delay_ms\x00', 0x88b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, &(0x7f00000000c0)={0x0, 0x6}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40010000001242}, 0x8, 0x10004) 21m30.404567267s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908288a8"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 21m30.053892829s ago: executing program 3 (id=124): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x8000, 0x7, 0x0, 0x1, 0x0, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x100003, 0x6, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x5522, 0xf15) ioctl$auto(r2, 0x5523, r2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, &(0x7f00000000c0)="4da7cb3eea24f2f0249732a686a3fb7bcedb68bcbd4effc395251e9208da4511f08a562c55e57d550cd79cfefd8358c37e788769e2e3eb4af0a162e8bc6d660b1597c57cf01eea17b1f049c0e25deaa614a49429ecd111c4d1682686b6e9"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) timerfd_create$auto(0x0, 0xe80a) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) 21m26.813062769s ago: executing program 3 (id=132): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/snd_hda_intel/parameters/beep_mode\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/176, 0xb0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x224, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVL={0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x6244dba}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1ad, 0x8, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="4b355a7d87f7b4f825a4a32d7dfa4ee030a8ba8339836473c6adba8b7388e7f88d51c075f83f22a245691267852d736f73b58f947976a14944c5f83e3de059bd70c89a7d2c62db2b6f455e5749a8814a762bc1f104ffec1a139bb0679c984bef", @generic="83", @generic="47332d48ff772a0af2bf248adab10c5040d1af4a74769649db6c36f033c580991b176adb52448ed07ad8a08b7702a852", @nested={0xf1, 0xc, 0x0, 0x1, [@generic="ac3e30a94c5b0434db050d91bd33fad83a5fb91445bed981a2c4498e92b08be4b372be3c7a78d712f5a27dbb7f6a9f4eb03809", @nested={0x4, 0x2}, @typed={0x8, 0x116, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x12b, 0x0, 0x0, @fd}, @generic="68a8105d08ce306178305fb4613924c9e754c150257c028dcb51de1fcccdce0696066efcdae939f778a147bda713ffe2a9f3f267b71b6fb15c748d05d1cbaa37757798b91f63f6f92d2f6d3322ccb4238f20945854c197e4e02431baeb82189b9b8df92443e8af715b967afb9f2ca7e823aec8aef56f85a48e711ca58408739186a4bfbb9f819de994b628151ae6e9067dc860584ac9fe7c3aa9b2b970026e9581d7e9aa4e69"]}, @nested={0x10, 0x89, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x8, 0xf1, 0x0, 0x0, @fd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CIPSOV4_A_MLSCAT={0x41, 0xb, 0x0, 0x1, [@generic="d6a878d8fe755a7537a430b0b07684800e6eb252478fd4ea56aa568a157040b88fa8824641bb79f0a9846f9304ade1006e72eafe1e10f09de86f2422f3"]}]}, 0x224}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae68, 0x38) ioctl$auto(0x3, 0x540b, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 21m25.117639948s ago: executing program 3 (id=137): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2000, 0xa62d, 0x80008011, r1, 0x8001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x80000008, 0x6, 0x0, 0xfffffffffffffbff, 0x800009) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40809, 0xdf, 0x9b72, 0x7, 0x28002) prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x8, 0x7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000020d3a8b8bf2c48641c531f180c931c037fdc2e4c7bf6773f4b5b0a30aa20b878f11fce7c1aebeb9a434901c5c6ee06a97fbb7dba4959b56d34254d358f9b3ed24ae255936d4c9efbb1899b961cdcfd7ed7a1155188ee206926ae6c0c4d7c5ea93c669b68efdc52c691894b7eacb372928f1a9c1999464502e4d2c7002909e56fe519d0e00a812d4215bd4fc1cfdd35cf3c468a6f7874f5e3f69ff8112a2fee442f79374504ab524289afa3a15e917b8161dc", @ANYRES16=r5, @ANYBLOB="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"], 0x2d0}}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={"e56607b03d9a9017e982674e4750a3b284d20f8421d6f7b17fc3a7e61deaa2ad", 0x8dd, 0xe27, 0xffff, 0xc, 0xc, 0xffffffffffffffff}) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x9978, 0x66) 21m9.826108228s ago: executing program 32 (id=137): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2000, 0xa62d, 0x80008011, r1, 0x8001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x80000008, 0x6, 0x0, 0xfffffffffffffbff, 0x800009) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40809, 0xdf, 0x9b72, 0x7, 0x28002) prctl$auto(0x1000000003b, 0x4, 0x4, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x8, 0x7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000020d3a8b8bf2c48641c531f180c931c037fdc2e4c7bf6773f4b5b0a30aa20b878f11fce7c1aebeb9a434901c5c6ee06a97fbb7dba4959b56d34254d358f9b3ed24ae255936d4c9efbb1899b961cdcfd7ed7a1155188ee206926ae6c0c4d7c5ea93c669b68efdc52c691894b7eacb372928f1a9c1999464502e4d2c7002909e56fe519d0e00a812d4215bd4fc1cfdd35cf3c468a6f7874f5e3f69ff8112a2fee442f79374504ab524289afa3a15e917b8161dc", @ANYRES16=r5, @ANYBLOB="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"], 0x2d0}}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={"e56607b03d9a9017e982674e4750a3b284d20f8421d6f7b17fc3a7e61deaa2ad", 0x8dd, 0xe27, 0xffff, 0xc, 0xc, 0xffffffffffffffff}) madvise$auto_MADV_GUARD_INSTALL(0x3, 0x9978, 0x66) 17m0.695817557s ago: executing program 1 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="270000f7f7049b8732ccf75a7500"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/enabled\x00', 0x0, 0x0) pipe2$auto(&(0x7f0000000000)=0xffffffffffffffff, 0x0) setresuid$auto(0x2, 0x7, 0x8080) fgetxattr$auto(r2, &(0x7f0000000040)='##[\x00', 0x0, 0x100000001) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000011c0)=""/118, 0x76) mmap$auto(0x0, 0x2000b, 0x3, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdf3) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000000c0)=""/4087, 0xff7) mmap$auto(0x0, 0x20409, 0x4000000000df, 0xeb1, 0x0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0xdb72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000080)={{&(0x7f0000000000)="31a209c6e63568", 0x1ff, 0x0, 0x6, 0x0, 0x5d1830fa, 0xb}, 0xfff6}, 0x5, 0x1fffffff) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 17m0.575313358s ago: executing program 1 (id=1053): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x80000400008, 0xdf, 0x13, 0x2, 0x48ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) 16m57.610959915s ago: executing program 1 (id=1063): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x11, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff25be, 0x0, 0x23c, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x82) socket(0x2, 0x2, 0x88) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfdf3) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r2, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48010) r4 = gettid() (async) r5 = set_tid_address$auto(&(0x7f00000001c0)=0x1) msgctl$auto_MSG_STAT(0xc, 0xb, &(0x7f0000000200)={{0x13b, r3, 0xee01, 0x7, 0xa, 0xc, 0x6}, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x6, 0x0, 0x7, 0x6, 0x6b9a, 0x100000001, 0x5, 0x2, 0x9, @inferred=r4, @inferred=r5}) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r5, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x101) syz_open_procfs$namespace(r6, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) read$auto(r0, 0x0, 0x20) (async) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_BLKSECTGET2(r7, 0x1267, 0x0) 16m57.397608807s ago: executing program 1 (id=1064): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x2001, 0x0) lseek$auto(r0, 0x9, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0xfffffffffffffffa, 0x3, 0xeb2, 0xfffffffffffffffb, 0x6) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) write$auto(0x3, 0x0, 0xfdef) 16m56.722621626s ago: executing program 1 (id=1067): socket(0x6, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r2 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r3, &(0x7f0000000400)='/de*/audio1\x00\x10\x9f\xad\xa8\xe4\xf9$\x9fz?4U\x99\xb7\x05\x96\x18\x86=\xd47\x99\xf3\r\x14\xdf\xc7\xb2\xf7\x1c\xe4]\x87%\xaf;\x06\xee\xd1\xc9\xc8\xca{?\xc8P\xa6\xbe\x06\x1a\xc5\xf3\xbaau\x8f\"\xd7\x8dG@(\xe7\xbbg\xd8d:qz\xd4k:4\xa97q\x9aaD\x1e\x92\x10\xd4K\xa6\xf5c\x8a\x89z\xe4l\xa7\xd2\x8e\x8e\xe3\xd5\x02\xc4\x00\xc0\xd5(\xb0\xd5\xd6\xb9!\x15c6\x11h\xc0\x9e\x11?K\xfc\xea\xea\xe3t\xe5\xe6\r\xc8\x8b\x17\xc33\xc3\x93(\x9d]\x05}\xb6\xed\xbd\xe3\x13\xbc\f\x97gFKM\xc2\x81\xb4\xf3\xe6r-\xf95c,xZ^\xcf\xa6s\xb1g@\x9e\xd1\xd8\x88\xab', 0xa3d7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x24008010) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x1, 0x3f, 0x0, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2011}, 0x4c005) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x2d4662, 0x0) 16m53.334414921s ago: executing program 1 (id=1078): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/irq/14/smp_affinity_list\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r1) sendmsg$auto_HSR_C_GET_NODE_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01a007005ea056ddff29a6550000d7cd862504fffff7"], 0x14}, 0x1, 0x6000, 0x0, 0x200000c0}, 0x2000c004) (async) sendmsg$auto_HSR_C_GET_NODE_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01a007005ea056ddff29a6550000d7cd862504fffff7"], 0x14}, 0x1, 0x6000, 0x0, 0x200000c0}, 0x2000c004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdf3) (async) write$auto(0x3, 0x0, 0xfdf3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000480)=@link_update={r3, @new_prog_fd=r3, 0x7f, @old_map_fd=r0}, 0x652) ioctl$auto(r3, 0x40104d02, 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14e10000", @ANYBLOB="00022abd7000fbdbdf2502000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14e10000", @ANYBLOB="00022abd7000fbdbdf2502000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000580)="172320a62e941a8956b428b6ec696dae9b5811c92c2d2fb6b9af82d06ea832a5478ca4ca27836a26f0621c023ec7908f427896fd41a6d3be41a0f5a0819a8f03c01735975ae8c38972524d402e526ba4b94f75b2c9947887e397235f32ff7e2b8515baeb04375a1e0400000000000000a4b321c874a54e27a4e7349206ad014d56471df21788c1f1f97e13886ea4d3ccc4e97abcf829553051f020d8c9b252ab1b4173f37d48cf6470f92e1ce45334e5a9ee40afff4450e616677ed5e40bf02ad13cea27538bb48c69bb8d3726e21a110e", 0x101, &(0x7f0000000000)={&(0x7f0000000140)="79ee1a97aaa4cb6300fee5efbb10127b829828195bb73d7999740f915df76d4f4d627f930200da50677432e39d7377180c03c2bacde37d7971d050d81b7da60d6f3efbffd846bcf42fbbc15aff5c617b03eeba1efe5c086e86e46689f8521ad91d6a1a44828151", 0x8000}, 0x4, &(0x7f0000000400)="b77d511ca7bc0e1b491623bdc6415f827123dfe7a86d3513cdbb39ac4e2848f4238750b071d7d5be5be681710a6be5625b515e0f399fd946295ef579a3dbaa6639ab9651f884e08df2fc14dd8a31717e89113d26867d40a2dbf0cc6b9ab5", 0xa0, 0xfffffffa}, 0x7}, 0xd1, 0x4, &(0x7f0000000280)={0x7}) clock_getres$auto(0xfffffffd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'nr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'nr0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8db2d06040ea0d72cb2774b5fe50307fc8d9b82740f7182dd099126d31a15d35b88122c18bf53742b31cde30df4960d30ab626859e47cd6a08e105533eedeeae3c239c4049fff0f1a8a8b05ce4d3238240d3212e92ffe772f432", @ANYRES16, @ANYBLOB="00012dbd7000fedbdf25030000000f0003002f70726f632f6d74727200006a000a80019aad5ef8589304e3f8e17a3bcadf9009a69cc19cd1067f1481f633db322b67482eeac1f43bdad29e0d61d7c63b23cbe9c53aa959704f1f1a0b2beef3525aa590fb58542172db11e74636dfdfa475ad1f406e391e442d9c34e18c9ab6d1f33583f196954c12000008000800", @ANYRES32=r6, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) getpid() (async) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) (async) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) 16m38.152138487s ago: executing program 33 (id=1078): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/irq/14/smp_affinity_list\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r1) sendmsg$auto_HSR_C_GET_NODE_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01a007005ea056ddff29a6550000d7cd862504fffff7"], 0x14}, 0x1, 0x6000, 0x0, 0x200000c0}, 0x2000c004) (async) sendmsg$auto_HSR_C_GET_NODE_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01a007005ea056ddff29a6550000d7cd862504fffff7"], 0x14}, 0x1, 0x6000, 0x0, 0x200000c0}, 0x2000c004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdf3) (async) write$auto(0x3, 0x0, 0xfdf3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000480)=@link_update={r3, @new_prog_fd=r3, 0x7f, @old_map_fd=r0}, 0x652) ioctl$auto(r3, 0x40104d02, 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14e10000", @ANYBLOB="00022abd7000fbdbdf2502000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14e10000", @ANYBLOB="00022abd7000fbdbdf2502000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000580)="172320a62e941a8956b428b6ec696dae9b5811c92c2d2fb6b9af82d06ea832a5478ca4ca27836a26f0621c023ec7908f427896fd41a6d3be41a0f5a0819a8f03c01735975ae8c38972524d402e526ba4b94f75b2c9947887e397235f32ff7e2b8515baeb04375a1e0400000000000000a4b321c874a54e27a4e7349206ad014d56471df21788c1f1f97e13886ea4d3ccc4e97abcf829553051f020d8c9b252ab1b4173f37d48cf6470f92e1ce45334e5a9ee40afff4450e616677ed5e40bf02ad13cea27538bb48c69bb8d3726e21a110e", 0x101, &(0x7f0000000000)={&(0x7f0000000140)="79ee1a97aaa4cb6300fee5efbb10127b829828195bb73d7999740f915df76d4f4d627f930200da50677432e39d7377180c03c2bacde37d7971d050d81b7da60d6f3efbffd846bcf42fbbc15aff5c617b03eeba1efe5c086e86e46689f8521ad91d6a1a44828151", 0x8000}, 0x4, &(0x7f0000000400)="b77d511ca7bc0e1b491623bdc6415f827123dfe7a86d3513cdbb39ac4e2848f4238750b071d7d5be5be681710a6be5625b515e0f399fd946295ef579a3dbaa6639ab9651f884e08df2fc14dd8a31717e89113d26867d40a2dbf0cc6b9ab5", 0xa0, 0xfffffffa}, 0x7}, 0xd1, 0x4, &(0x7f0000000280)={0x7}) clock_getres$auto(0xfffffffd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="5d29f0ff6c66da3c8d62e8f6a2d4d6190eb2a0bbb3c176faaad23caeb55f27ef7a2e9b9f7e49b11925d33aea2094c0dcc3dadfdd6832a3f720c28eab70a927730ed2d2b21950da0c88c6324fcdf01c7de6422a24593aa05b868299926883690ae0d17f54a2670e87978f049c39c7252db666a3d5253948f6f27676017827eee8cfff1cfe902ab7ebdce6c091aa2ecbae3bc1a43296c74d0df6c7ad02109c6b24af67cfe5e8d583895c31668c6b5bf138574b71bcf68cc021e9c742cb020689061fa2579fd1659f0d75d6ca04e4bda7108da59fa513b0976ede7ebc87f5f9c66574f93e9629171c487085f23fc7cf3991ce264714903f5c83c2a199717f8dd62404add28aea76c977fee9481cd70f03d445d5d21a41b390fc1543d947f62347fef920a304a9227fd71201da2572539effbb2b9f8ba6adb28c586bac6eaafdb522ffd990a70761bd67428afc7488bdd303ff354fde37412c549af73a8a2b8ef44ae2ba59cbf8c016f1c5f043879aff54749fb99713f0459a1b16333e337c4347601a3070a1f885bd42472340feca71030e014ebe88096e3c6379fff202017e06cff06babb272374799da26a46ad623953231bcd75c3e10f0fc0e0326539a41e6ea0aa148c4951661677726f637574aaf2f7da85023bb77386a08088bd094ad7f8982d03131e9a8aeb7962e95be195c3777b6f220efa6b76e5a432703d83548a8d3", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'nr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'nr0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8db2d06040ea0d72cb2774b5fe50307fc8d9b82740f7182dd099126d31a15d35b88122c18bf53742b31cde30df4960d30ab626859e47cd6a08e105533eedeeae3c239c4049fff0f1a8a8b05ce4d3238240d3212e92ffe772f432", @ANYRES16, @ANYBLOB="00012dbd7000fedbdf25030000000f0003002f70726f632f6d74727200006a000a80019aad5ef8589304e3f8e17a3bcadf9009a69cc19cd1067f1481f633db322b67482eeac1f43bdad29e0d61d7c63b23cbe9c53aa959704f1f1a0b2beef3525aa590fb58542172db11e74636dfdfa475ad1f406e391e442d9c34e18c9ab6d1f33583f196954c12000008000800", @ANYRES32=r6, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) getpid() (async) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) (async) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) 3m45.8308734s ago: executing program 5 (id=3795): r0 = socket(0x2, 0x801, 0x100) mmap$auto(0xfffffffffffffffd, 0x8, 0x0, 0x9b72, r0, 0x188) io_uring_setup$auto(0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x2, 0x1) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x10, @local}, 0x3) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) (async) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x1c3201, 0x0) (async) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x1, 0x20006, 0xdf, 0xebd, 0x401, 0x0) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/io_timeout\x00', 0xc2581, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video17\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0x20499d, 0x9) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) timer_create$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto(0x3, 0xc0485619, 0x38) (async) mmap$auto(0x1, 0x7c, 0x7, 0xebf, r0, 0x8000000004) (async) mmap$auto(0x7, 0x400008, 0xdc, 0x19, 0x2, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x7000, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rt_cache\x00', 0xa182, 0x0) 3m45.222435849s ago: executing program 5 (id=3799): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x5, 0x8) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r2 = socket(0x2a, 0x2, 0x0) ioctl$auto(r2, 0x8912, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r0, 0x2) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) mlock$auto(0xfbe8, 0x4) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3m42.624372528s ago: executing program 5 (id=3805): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) read$auto(0x3, 0x0, 0x7) fallocate$auto(0xffffffffffffffff, 0x40, 0x80000000000010, 0xdbd60) write$auto(0xffffffffffffffff, 0x0, 0x2) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) write$auto(0xffffffffffffffff, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSBRK(r1, 0x5427, &(0x7f0000000240)) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x3, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x20, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x2, 0x5, 0x0, 0x4, 0x5, 0xffffffffffffff00, 0x2, 0x3, 0x4000205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x100, 0x10009}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x20000}, 0x6) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) 3m39.420844858s ago: executing program 5 (id=3811): socket(0x9, 0x6, 0x76) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@hci={0x1f, 0x0, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x2, 0x400008, 0x4000000081, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/quirks\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/8, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = socket(0x1d, 0x3, 0x1) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r6, 0x0, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) 3m37.993801889s ago: executing program 5 (id=3814): sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r1) (async) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) (async) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000200)="97544df294042014", 0x8) process_madvise$auto_MADV_WIPEONFORK(0xffffffffffffffff, 0x0, 0x86, 0x12, 0x3) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r2) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) lseek$auto(r1, 0x10, 0x100000) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000845) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0xa, 0x1, 0x84) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) 3m35.689776658s ago: executing program 5 (id=3819): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) unshare$auto(0x40000080) mmap$auto(0x4, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x10, 0x2, 0xc) unshare$auto(0x40000080) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x220088c0}, 0x44) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000300)="48c9c499a9a55fc2a836723fb70537445460c9f0892a287c9eb350e6b7502695a40747d57c6d503a9321dfb65dfcdd31e011f135fea8b10f802afe673cf64aa66c9f61a38fcb31374ce2e32ab0609681ba696929e2d96bb3682b03969701b37156ff8b4721ea5f896578a106c1f2650052e1d1590d649f180185beeb9d020a557604128a5fd3fffe") ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)="593316a1a344beeac4c7cd082598ef3c92b08cb2ea335115804d7f9d1926435031e74eab5cbbe516920a2b338cca883c7dbab67eff30ea06c8054b488b0299a43c51c60b3d69c34ba6273a0486ff276b6740f26855a4fa7ecfeae5c255fe8e39a1e8fc326cca4a1feb25a186010b13a387ec9127864a412a1d60205aa12da84ab7d21c4c2b78877d9d7766bb9016c6") mmap$auto(0x0, 0x40009, 0xdf, 0x9b71, 0x7, 0x28000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b52, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x2000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub1/hw_params\x00', 0x0, 0x0) write$auto(r4, 0x0, 0x60) 3m35.006183798s ago: executing program 34 (id=3819): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) unshare$auto(0x40000080) mmap$auto(0x4, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x10, 0x2, 0xc) unshare$auto(0x40000080) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x220088c0}, 0x44) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000300)="48c9c499a9a55fc2a836723fb70537445460c9f0892a287c9eb350e6b7502695a40747d57c6d503a9321dfb65dfcdd31e011f135fea8b10f802afe673cf64aa66c9f61a38fcb31374ce2e32ab0609681ba696929e2d96bb3682b03969701b37156ff8b4721ea5f896578a106c1f2650052e1d1590d649f180185beeb9d020a557604128a5fd3fffe") ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)="593316a1a344beeac4c7cd082598ef3c92b08cb2ea335115804d7f9d1926435031e74eab5cbbe516920a2b338cca883c7dbab67eff30ea06c8054b488b0299a43c51c60b3d69c34ba6273a0486ff276b6740f26855a4fa7ecfeae5c255fe8e39a1e8fc326cca4a1feb25a186010b13a387ec9127864a412a1d60205aa12da84ab7d21c4c2b78877d9d7766bb9016c6") mmap$auto(0x0, 0x40009, 0xdf, 0x9b71, 0x7, 0x28000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b52, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x2000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub1/hw_params\x00', 0x0, 0x0) write$auto(r4, 0x0, 0x60) 8.549364054s ago: executing program 4 (id=4610): getpid() r0 = open(0x0, 0x22240, 0x154) close_range$auto(r0, r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x0, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf6102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) getsockopt$auto(r1, 0x4eb14fed, 0x444e96fd, 0xffffffffffffffff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x9) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x1) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20000006, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) 7.343583578s ago: executing program 4 (id=4619): madvise$auto(0x2, 0x7ffffffffffffefd, 0xec7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x81) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r1, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) (async, rerun: 64) socket(0xa, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) (async) r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r5, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async, rerun: 64) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async, rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (rerun: 32) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x840000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 5.051776s ago: executing program 4 (id=4626): r0 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) (async) pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) socket(0x2c, 0x80003, 0x0) (async) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) select$auto(0x981, 0x0, &(0x7f0000000980)={[0x1, 0x40, 0xffffffff, 0x72634de1, 0x4000000000, 0x9, 0x0, 0x4, 0x1, 0x3, 0xc76a, 0x5, 0x2, 0x2, 0x7, 0x9]}, &(0x7f0000000a00)={[0x4, 0xd, 0x5, 0x6e, 0x1, 0x8, 0x6, 0xfffffffffffff800, 0xfffffffffffffffc, 0x200, 0x7, 0x8, 0x2, 0x6, 0x9, 0x9]}, &(0x7f0000000a80)={0x100000000, 0x2}) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x52080, 0x0) (async) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x52080, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x26d8, 0x80000000e3, 0x80000000000eb4, r3, 0x3) (async) mmap$auto(0x0, 0x26d8, 0x80000000e3, 0x80000000000eb4, r3, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(r2, 0x5, 0x23, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.690531056s ago: executing program 0 (id=4628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_I2C_TENBIT(r1, 0x704, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0x10000, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dvmrp1\x00', 0x0}) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1014, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, "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"}, 0x1014}}, 0x8000) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x3800000}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004010) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xe8VV\x9e', 0x8587) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05072abd7000ff00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) pkey_free$auto(0x2) 4.480666233s ago: executing program 2 (id=4630): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6a3, 0x15) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x10000, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000080)=0xc1bb) mmap$auto(0x6, 0x2000a, 0x6, 0xeb1, 0x40000000000a5, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0xffffffffffffffff, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x0, 0x1, 0x1) 3.997644941s ago: executing program 0 (id=4633): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000000), r0) r1 = timerfd_create$auto(0xbdb5, 0x3) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x77, 0x7, "20621d32f6ea70532ec2fc62be06f4cf5f79c09cb2c44854437cf59ede7a1ca8e5410abf5eb3232a5fdcf2a37e7e8b3ef47302225f5cb77adab78383920b4d7425d285120179144f7e0e7b8bcdd4e44e09c9509d9e9d9d947ab1e26087d54e77e79fd7d66dec432e62c1b7831e0e58a1055557"}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000810}, 0x4) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000580)={r0, &(0x7f0000000240)="facf00e3dd806fc6cfaa776de47d1410a29bef037039d38e3361d53b6524f76c77a40a04733373bfa330b3dbfd0d15be0acda5966ad371d39f44f4ebb93ffef62327b8cb0866fd5212a2d664a57ec74d7d3169e270e670d8cb65953a3ce0603e1f50408f80dc714e2f28be3018313c138e2d371c34e49fcd9a3d9c427fee254d401fdbd5de1838112b311d427c7d49ab7c1961c69fcf30405757d1a2566f343e0a3bd1d512d5c2bd8050176963d7fc4e8a7c4ded6c08f71cd23eddd2f03509edfd54e58671966bdf8fffdd6b2ec15a7c0a7620de44b0f61fced4e210c5ad817b6ba1a3b97f561148a4f6", 0x1, &(0x7f0000000340)="b442e4dc8160beb31ee6a6bd420cd10ab4b2603b1a21a6edf787115a31e1151a94868cda212cf838108eacb081ee1a8afb522742a3240d630f0a02daeee93992cd1b74ea5305d74aba4e3c851814c73f27b2a0ad9dae633a7b3960f840976a496c3a18396c12e4f8082607a50a694b0c9dedd4cf003574b5f19f8896291920eb45f32532fe49c395ab172f75d3938dfabf1050b4aa09862984578b6cda8c087ea63481aaa6f9d05bb8740e2eb7224d44a31060a8e1c051e0812d4abc4747db659c44f574f3f4b46ac06a9826d45e0c90701c4de5c893cf9786", 0x9, &(0x7f0000000440)="77708d6cb2a02b3d422307ca0bb4fefa88015ed3b7b2197f2a8c5dea7d31050e77ef17de51dc24491d0a8b98cb6d70874ebd034bae2c1ffe5c50b26158a0a393a6582c9aff13f18e933025e9d212b4ff2373368be13141e82d3aa8d3dc1546e23454be2086a5b55e09061e2b37f59355a27911c51f10ffccfb55b4d8d4c19caecfdc7e64c8671a25c586eb5efae33a676b2c49bb87003cbc5b66eca31bb6ac043b100d27a85d33974af056c47f02a0be2bf0b92698f1a17a7671a9244533de6133912ae3c1884a4e7b143e", &(0x7f0000000540)=0x3}) r4 = getpgid$auto(0x0) r5 = waitid$auto_P_ALL(0x0, 0x5, &(0x7f0000000600)={@_si_pad}, 0x8, &(0x7f0000000680)={{0x6}, {0x3, 0x1}, 0x3, 0x8, 0x75, 0xd, 0x3ff, 0x4, 0xfffffffffffffffa, 0x6d00000000000000, 0x8000000000000000, 0x4, 0x6, 0x4, 0xb30, 0x5}) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r4}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r5}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xf, 0x3, 'NLBL_UNLBL\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000840), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000000880)={0x10e8, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_UNLABEL_A_SECCTX={0x1004, 0x7, "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"}, @NLBL_UNLABEL_A_SECCTX={0x4}, @NLBL_UNLABEL_A_SECCTX={0xaf, 0x7, "84024b4f28648ce366438032ab183a521f41aeea8a57d64fbfaf295e8c2e3273a442901432eb25ddf925a920dced0ad4c921d6af5e3a88c7ccc1edfaa56e9f1ce0a7e7cf6639ba0cc37d5bc6c92e8f485ba543bff5ff846d424e47d1f72703cbfe358c65383ec45128de8210e838cfea6672b515d44fadb166d681490992d5dede8767b4f72583488fcdec49a300a765f0e7a3982317c37e6b00eacf0427edb144b86f6f9f16ec410a6f4f"}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/devices/virtual/nfc/nfc0/rfkill0/uevent\x00', 0xa000, 0x0) unshare$auto(0x2) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001a40)=""/4096, 0x1000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002a80), r3) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002c40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x118, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7f}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VENDOR_DATA={0xcb, 0xc5, "9a57c6c13789e07c2287c3ef15acd0fd9804f20aeb5bce69ec52203f4025b6d18c230aff486ce502b4c7185aa6ae44d95aefa66cbf7442385d381df81dc9807b45de0e574e92f4b6485fa0ce6de001d6a3ec04c883174f50290a31a841a733fcdc39c5f8516880932a057084655c65034715b15fb49a42431548302559665406bc110eb491dfda080945165449de0323f2835c9ce0c2858ca779e7d14eef85962e161bcd051c809c3ab51c38b4df5d83be422b033161c2edc3f2c4cd4be33fe0b3fe5e0f2a1398"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0xc040) ioctl$auto_TUNGETIFF(r3, 0x800454d2, &(0x7f0000002c80)=0x5) write$auto(r3, &(0x7f0000002cc0)='nl80211\x00', 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002d40), r1) shmctl$auto(0x6, 0xff, &(0x7f0000003e00)={{0x2, 0xee01, 0x0, 0x8, 0x4, 0x7ff, 0xdd}, 0x8, 0x1, 0x9, 0x401, @inferred, @inferred, 0x3, 0x0, &(0x7f0000002d80)="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", &(0x7f0000003d80)="e770ed92825e82d1f0ee50c3b81ada9f626496f4d0a6b9ebda899fb220f2a426a2bd6fa5d3f87e3343cbb62284d9bbe252bebc832c53b7eda5668914a216135e90b04f2782f1d8ef103ead21e97cc10c463b9e58586e95d8d979ab914a4fd2107803faca2bffbf02c9aaee3632fc535e"}) r12 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000003e80), 0x400, 0x0) r13 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000003ec0), 0x4c80, 0x0) ioctl$auto_XFS_IOC_FREESP64(r3, 0x40305825, &(0x7f0000003f00)={0x6000, 0x4, 0x4, 0x8, 0x924c, r4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000006740)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006700)={&(0x7f0000003f40)={0x2798, r10, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1459, 0x2f, 0x0, 0x1, [@nested={0x4, 0x42}, @generic="a91c5b02cb83f4adfb6c3a6b18142f5ae6cb8c448162379213f0c241d8307cc6fff3d8739f34c273610c8f1f7c58c658b5a47dbbb25fab9bf166249ce21a0c1f5778819b81c196041c31c615b0a30985bb53dff79f40687f795c7b9c217549f535b901cc7b0b7d7cb02844a766412e7eeffe1b4ea7fdd8651e9e3ae7cdd81f6feb27806e13634c1f42493904ddee3b37fc88ded33d22a09c063cf44da25fc6def32eea2004087ee2f05f98c84dba9a97411675e861b7feb7f22ba239647457defaf544a0fc9b727ed90af0955dd2ac96ef5044d72990d397fff3db6446e443fc3775780a2d2cf3905d74d55867434917c041286504369f2c58dafe47df08683707fa03bc40968ef45bafe410d914f57a6f83764aa8384269ef33c972881131f9db61116b53d8b1ca86ca3921e2a79d5cc8d696c47867b7d9c2b1359950259a6e8bb280b680aab1141b8490290d678069845bc0964de175314660460f46d6fc6fdac10ff10553d148598265c1b276bf28f959ac842918eb40023cd0be8f378f1e04862d326a7502f5e5bad9ef03068cffcd6ee5c2991695ade1300c2bc8aa3a1f77dc3bdd324d4db335dbb0b64299a36aa22d3c50d8c4ebcd26d62407e94c3b87a08d35c4957ae23ed5aee96c2a55e6bb42a351b1992294b37d9ec1d6ef02d88d84f851e5145021d2129d5ca39b827a5227ce94f246e2c4521d53462d860c59a25807c5316eb964bcf2a04dcc44844bf4abe5301dc3b1d95793eccad42a11b04a133fb4a7880e552b3bbe9a591e4a4cded78fc77c275a55a97c576e8c544c98e1ed29e7c27749f228ebb771fec16376c4e524e817fc09205e4365454b77d9912985df5e8c19418f709d81cb5f237531e23a660691543de6e4381cc33df12f3cbf1cd1cc4bb8eb8b4c4d915b4c17569045c28141df921510f45b0957bc0a1025e4784e0a6784301ab2dea846bdced230f67257d3db1d9bcdc60fb078d22c8c8ed924a3fab85b56419bf56a7d8b4818ca2b85bcdcddc16edf01dd1095b7444ac4d1e2c2126415e642d7fcb6a29ec52a3ad41663cc8f07b4ec280f07ebfe0362616d8011ef98fac5c4b4b1b61b94e721a39ab9cdf027e96c7057e894d9b1409c6346e9f0862db8362fb261838228a6d6a7a09a5816de385ba5551e1723e13d614684534f9af4a91aebb21e52b0d5d09d645923158eebf816764a02e9fe5007299a7dbfe9e128ae8afe7c0e28761e5f6d5301adfc2907c45caa7ea467f35470556f0d434bd15a6905076daf723da5e58f8c0595b39544b370c44dfe832bac72b1c41bf74337c18a43292c78ec3364238a7aaa4038e55749f961601224b78c94cb410ab78248d92feee4274974712a48ecb48732d02723d0479743d8c5290dc2d836ceb1b2ee4653c463c4bcb7ff99bdd14a9140c885ab7baa93230709e16b49ff4ab2b15240ffdc54672203bfbe2d97a6cd039bbd62c85de592eb8bd6bd04e023a84428ee9185a1ccab4605d10104062657a6ea3ba220504ceaac50225a712b7f642b99ec3d2a2e5a2db8f27abbbf63b8b46e52e841e0d76e6d0805647f37e12940bc61e846fda45cd368ea50b642d5531e4663ef06a5da87e19169d9fca02f10b7664061a3b2151987e63d3ec0129ebd33469c0bc8f8b4bfae84c41dff92f27d70792e7d750c8ea599b0056f81ec0fe876a940e05a34caaba16c92be37ab3db5b4ff8a9fc4ff99d86affe1de83db02c5ae7c70be139c1615d31c430db2635a84abd059ff1ce00f5b94e4d534124063521df950f291805b63b9bfce13730aaae3b6c2e04a3009db955c72cb4ec7b03e7af5bc09842e5d9ba91b77d37b91ebb92680f2a79675be1e9e8188560861061caa4e2d0004cc53f480cd88569b88454ecbf83a68fc9fb7069223e763f3c1209c65547b8e667b45de1b823cc0dd79be22c525358042803ca69b231fbe21f8675885c4fa895110306915b4bbfdc301f6de38990736e91dbfdc09394215eb01a277d7b152be563fdc0ebb6ea5fe6120fe74e541879536ff7213a072ccd675f3cf3057d6948ebd696e2304ef9c9903c08916aa663593220909bec827b09508dd971890b661fcb4a7895b43570f66d532f43071d2f2c842187da11e82838f80b397f2e68a4183ee44cf51d3a9926700e084f1276e153c87b41cc3849031ac02789694248df6fbc5a279033df66f9783da5b7c7f84ad3f525d5d4c7fd165eb45a6d9d76eaeb2c2ceba4606b5e2594d7f1624de537900e0ef4a1f185745894056354516985d3802eea71b619ab52bf1445f0b20e61805cecf65589a463d86fc7e0b1165efc9c0f2e20add223987aef57c26d88a01c9ece81bd7b1fc155bb98dfec8081c36de8342d8096e0bc6b68a656f5d2c22dc024a3efb816e373c746120b92083b62854936fd717d7e080a8783056acd5f87113377cd5ba0ecbf76dd9ec504696dc35f1c92599c8e3909f5a908991a90da8cff7f6c3a067bda3e22a944d26e7d1b164b76ffd903bcd3d50a247a18e13a615635fb9bef9fbd274ea83ae02e9edf06d67d1aff596bb7fc765f123f0e4adb54c48241896bfc53b516e3cd84d1b5edc212afbf56c52ef74721f9c14739ea8015e823f08b2deafc9a19a99b78e60bf7a77fc4cc9f2726fa583d117149db360df28cc5b3d8332f883b0bd0c8179b8f59d8516a32289fc2c0002b6bd10028e6ac538e5e2705768a1287ca3c1ddb757824383d92ecaf1b56fcb32c99eb155154416d414704780e28f10002fae197e278ff992765891b0b9415f89b979343f99774249db5dd4d5ef14bd72039f679929bd055abc6b9d888d0524237fb36a9dee4624cf753c28b24258a4edcae26f7b8a3421e45921b54d037c7578118828f66e255cb7f2eb4da5fd034e6daf1d78bc945d43fdebf7ee7627671fd764871db2c372049bd39d64d2fe9f7a48ee16862ccd7bc54602aa20cd3d49207fa87da3ad800f8f4ef41cc43785d09192f5a22b9526359ae7e9c3c2f6f7ae009d4b2d01b76ee5b1a2e6118851a78e332a1403c316154af404b6c3560326acfbc1a62ca3045414711c0ac3e274e6597880d31ba955a8684133e798a43e11aea7de5ffd0f5dcd7c6196fdd90fb93bd488227853de078a5b5baf314d733628fdf1aab65b9f5edd32afe0aa7b26601611dba6c73f75b34aabdc32129c50b7e0cd36f7fab195e3bf02480623a954b8603e02397f38416965f7635aaef97e00bcb0646ba45547ded9b756fde7a460b1ce71b3b1ed73a8e116f1db840b865b25bcd4e3cf16274ecf696955b4102374c431353216443e746ef8594f398c9cc2fe9ae23019a27f9f18d5da24953df86dc034faec03a93dcbca9552c1f40663195473520de1343d43b9a8cd4bfd47a282bbf1ca22eb21fa2feba55f52197396071f0d2656991b37f4a8c4ca963d28ce5916c861fd6afd7e7abe6331369b18ff3035645bcc981ce78e47fdaac7c473ef4a83eeda4f4178178b6f1c48f45de3c6cc8128e158593a8df091686a84280a6fd1a62eabaeafb637d558547ab8c584cd04228d17139163d742041d10e3c21482f3b858084ad9b8d869ed6602852234ed9a09282b71ccd8308e57ad7ccb78cbf5796190cdb19419bdd36f6ed34acc55795519f22efb6d2a22b24158593bb7e2df5c4b397a47e76f7ec0778d6ec4121fadac01ca5559b1caaedc62b41d28c575b44f04573ecffbfc11fb2a4cf7bf7db7f346703da973fe8bd13339eff109b3df53081657c1c0bcfeadf9d816ecca37f43619a92311a187733facf35da9fb26b6d86806bf876e44afa163c1248a1199e7499b965fe9e0a6e7a12cfbcef37f2ab8dc37b506f5edc23b477cb57d9891b08835e54231ee779b6e79cffa54ceeada6e6b1874105b0c6c5dfea305dc5c6e3aeb6172f7522a6c54dc5a3c296cc597c2896741eb7b0597e7ac0d2deb6c5f44cb5ab9c10566ffe7aad7c7353769c79982fc44a6d6deb04eea1fb63819b2082cfdc53e2ca25e827767efb91cb0a21eb3f4487cd96c2bcdd4c2ada0d5fded358c4d5432973c196f71419904628079d674e8bb74660c40cc8fd8ea0b18425a1778d6bef4b50cb5bcaa735043f0d4e1a3f5a62217a414e2f15a607133b34a2bcb76153a3a78c5ea3b91d6e34c7c63426ca0db5a69fa4adf5528e5c5e7ada54dace287c278d702e8f0a110c44eba399c481f4f91550acf904bec8ae3b36bc24d8fe7858ed131aa0813d622ff7f002482c895d9520af1d70c54da98959e64745aa7e75d70768b259a66f527a351a668d0739a970945773b584f946ad356199f5aa361b0c2ba9da546489eb3ce3b542b953324b7baa53cafdfb6415fc16237527f5e247c49c9c5cfb8360a88770f48a0833630376d97e45a4d0c312e9fc411702b5ae438c24c9e67833f5e3899efa4f30dd1f7a1d048ebef456349291902f2c883fff8a9d6567d8e37b29867087862c6be259043cc385546d96750c43124b35fa72b704a1f77319742dd5f848223750ba4668258f59686b23f31220054a4c409d1077fc089076ac5a03806f294a14961c37571573c127d2f41b7eb9d21bf7806315bc6d742d7c647790449785c17ec5ab45743c7d997e8896cc8d0d5cff95717114dff8a0f6bb415e8addb4dd74292c21d55cd9e36d87c4aad08aba4c90713caf2e10c81e0a5dcd62439f67c0b0051e792dacd198df96fa39b340ad9fb4af1d2c326e4aceda0e76e9e5652b0d9905d8b21693893e8613dd52bc4a268861b1524fdf2711c98df8e3684ba610d89dbed7d36c31c6e9f04381a6d1a260b45c7da1153529c515b914d51ef2c0e20f14f395c901c82f5ed7d2d5b3f859cb81e419215ceeb235682f8dab4c850cf3f7d4dd5557d5b20b8c7f9e35c64169f0c245821624130b4d78b8cd39f21b073bb05b6243ddf46ef3b35f013ab912f10f0feace3a3793b4c304cf21e33eceb2a3be112935aaa2602e8efe6eca839d364baac0f6217252a6c7d02515cd3c4fd9fb4224c5c9a83b1285af40ab6946a1092a03484e8df6f00dc90170edb643a4e196ff28341af1212319dd6ea756c2211c3d92f76c29f777a605cebbfa477b771560958fb6f739a590037b7df78f3c278efe74f3d05b73209c7a90a7387d73b20ec46b92d83e59797897b610f1be68619253564a27b48219774de283caa7f620bcef4479af26f45770957f698412d08318ccf8329a2b8bab599cbbeb34ce592490e14c766e2154cff2290ed665328c1fa7f6e048ebe00af6293e2056560669cc34f39fcc94b2e3438d2851f767c18036ada8cbdf77fa73cd8efc591b27f4b5d2a9719696172a2c9097f1969a239f79a3caf5c5f94713b851a70215f207d2e869858e6de211b067ea883611388039c05e7fdf358e6562da10272b2615ecf56cc700326427ee6ab55e15819a2943d1d1c25ec3b2e6b8a720bd8e973759c32ee716b8920f11bd176f6ba4139f3d448104088472502b01381c19ae410a36cf461a09dc5c72ae100220c00a7fd8286bd34e0e7c4b64dcdf776c7a3186a203de640207c953035b58a0e23efb101d898df45b36ce5c93f386cb6962924f6f8de06df845ae26560e0b4c321f348812dfb8978aa34b19430dd8bdf08bd1cbb707b9dd8e32308084af20cf4c4ccd132e63d7fcd81c2cf9401d7da9e80d18a2d176dc76c45118bccdcf7540fc4becddd43be0ebed0f9e2b55bfb76418eed5f011244560248697c2ca934e9ef96a6d2371b437de24526a57d3eff845c37337f0eeee627254d78a202aa7d233574913da7a27509", @generic="6102d326215fe7a212a40cc1c72a094761ce4dc2c534980dc1d95a62456bc2d526352f5333f6a16237438b50a70d0edf3c69715e4b9632eaf5d81a59005e72333ef94b13c07023e990be0c5debf883fa56b7398f7c0a88f841ef5496aa0851e456c5a7f8550188834b9dc07d0f97b709763ec5afac07109660dbd671d1c857734231a36598e7cce89c53f4b4d3c598967a6bc2b3c3227691397ecb8c6223f108586caac63a2d8c38abfa6e90bce2d950b7162ef4461f168a2881c5589acf9dd1e10ef57eaf0ec45d8a8c908fa4a008de0eaa1b3d11c241b17e4d67656d", @nested={0x22f, 0x14a, 0x0, 0x1, [@typed={0xc, 0x7d, 0x0, 0x0, @u64}, @nested={0x4, 0x11c}, @nested={0x4, 0xf4}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r11}, @generic="6640fde417513488bd5dacf8bf53e71c2d9ad5eb4ca4af576556fc401e8bf052b8a4d020444129ab7f0b7105151779130c82a4dfc5fd6ee9c36f94c8ac6cbcc999c990001c88b03a2f40f337bfb1b1bf57823c39eed2015dfe49305fadcca3d8341d1c8b37ff9c5f4590ae713a06d1800ce2f5eb18685226c91d2c94e2ffd97ece6a9f830b2c60ea9804b3", @generic="7b40d7a12365330f8154f35f841c42e8da3bad3a8ffa834b0cc7fc57bed8f35f87cd3bd329cac0201c63b5277d95c9ce5729c132ede58a7ae8dc56d86652d4145932d50c08be28b61a71c20b0b57da504140e53f03a4d0e926dd", @generic="e3676043f581b8ba87a61cf892f342620d8cceb9dae260c19390ee1b04b5782963c54b64d382fe4c655f65614a74d19f51eb261655b4900680b38a71bee7ee0894b3737edf7dcfc76c49582d27a0750691babc2f4d95565e69bc507bf148f33156fc6193e68725dfd09bafa1c8ad51", @typed={0x8, 0x3, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r5}, @generic="33c20b9b4fd1d9ef220f56f6a49e92ce5dc49b6020dc1372a573780757bc388ce851086eeab553d509336fc7d3ba8f6e77323cef641e4035e98e015045cc64d18e3fcd153d96b5325178093254994151c280e499fe5759030ab7a8476a8a5833f89dd939d31231d38fc65ceac4c640361a64b30d1a2ecf0a586ca898c01f34b0b207e1844ded1dad16e3186aaafe577335ac8f19025279e98760087578c0da2421c6d3ddfe0566f23d2769"]}, @nested={0x10, 0x130, 0x0, 0x1, [@nested={0x4, 0xef}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r5}]}, @nested={0x12e, 0x116, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @pid=r4}, @generic="5b18da626bed2ec3737615440249ccb8a80df2d1012674e02fc764e99a6aef3e970631d4df85061d754c20785e50ab94457964550668eb961dac461ed36f6140320b27184a3ee0b2380e707101362002f754770fe99065703ea6930b0154b65da56a1cec9ef49e2ada5fdad6f97c683ec6299b5de9dd503b86b374804dc1cd121269b2c11dff0e0dc33bdb5502f8d5198cc4fc7646b2467cd638ae0f1f0a93a15d014600d6bec609c1", @nested={0x4, 0x41}, @nested={0x4, 0x9d}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x3e}, @generic="93d8d4d583b6be5952d1d26219b61f6ff773ea685c841aac30c6aa35062d22be66bdc47341b21a5ee19cb19a4e89d45a34a1129a02893f7bd7727fe97fa3c4ab9b61b2880823ff3bc4327d7041c2adeb0e7a3b8bed38cfde250049ec0b", @typed={0x8, 0xf4, 0x0, 0x0, @u32=0xbf}]}, @typed={0x4, 0x10a}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x131c, 0x2b, 0x0, 0x1, [@generic="6dfb23630c544a09afbbfcb93a8bfb3bed489ff0e1451de6d3ead22f58a97069c85656f43cd9e523422f94314afd285a1c8aec87d769d2916048d4f1139113cf634171839dd3b29a8852993faaa3bf40a5da693850f681ac406fc4835434eb2750b6d430f3f9d5564e531bd8ba01db5fe69468e026ba35cf", @generic="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", @nested={0x30, 0x11d, 0x0, 0x1, [@nested={0x4, 0x106}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x126, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x77, 0xe0, 0x0, 0x1, [@generic="5af29017c1857b44287f52e108d9c7941ce875e85705fedb760e11b1a83b0a574e341e40939fd4d9003aba3f339907e1878add78d3b0840a4fac767f3e74360e4500b438da564f6637a5e7706f69c495c5bf5f3665707f1f9dafc5ba340fa68c737564975a17f2df471e20391006cbab250b8b"]}, @generic="598162e61e74c115dfb701a63d7e06999a79466f682aac9a83b8e38a1141132c25c52a11f7ca61e111b32ee22911267d73e245e63cb7e6923fe1dea725f8620bec859edfb278c28b94ab1042a87034045a979e855cf5e26b5c88907b8e607a25a59362783abb94e74f30865ec89d6f0c1c1e38b9d281269f3eab18984780742f8c7c6d567772a7c179", @generic="8293dde1876cc20a05a1ff8016dc8f3379842caa6cc251ba5eb868c66f243df4f8edf2a227031372a9e468083b7306b0e17896f8cb21e5d5ad0dc0bf92e2b745c8b9ae1e11575e028de6ace193e904c889ff697e8ffbf681a689c7140ed1ef", @typed={0x8, 0x126, 0x0, 0x0, @fd=r12}, @nested={0x107, 0xdb, 0x0, 0x1, [@nested={0x4, 0x4e}, @nested={0x4, 0x102}, @nested={0x4, 0x4a}, @generic="e98d5b9aad162a06a3d19b03a93b1252c3a2ebd3cecbec57c4dc7f3b39ba5b9024ad73a2289a6270582517a9db6d514c87a1b4f05e1b4b12a5f30713c0bf94d2589b7fdd98c7aec20552f673b0ce78edc1654682bd72e650f1494448da27751b62bee8f997ada1fd95f6d45a8f5f83604136cf5667a1e15da1cd2f3d806bbc72a12b52fef779f68b935a0bc1b1cb8bd3c60f0a28e08a0bf3c827f1a6e251c7afc1343e949629ffb4857a24dceedc8df809ddad01409f72abab8a43cd28e9d17004cf483aa6af8af628f4bb22f0f4ea8e4df2b3", @typed={0xf, 0xa, 0x0, 0x0, @str='NLBL_UNLBL\x00'}, @nested={0x4, 0xb2}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r13}, @typed={0x8, 0x4c, 0x0, 0x0, @pid=r14}]}]}]}, 0x2798}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000006980)={r7, &(0x7f0000006780)="c1c42971d8302eaa6226ff1eeadbe6e7e546aa7dea5bf77bcecde9c38c989031c81f36238b0fa765d56ecd340639a6e5560f831f14070e01bd76484f030f7fac81577b01de250f707895ab232b6287b00116d4c7ea20e1aec517f7fd00f7d61ba95734e25e0e04bd8df59fe82181f44f485a0fdf16765cd0ad526b50150a7d89f7d62540872c92733d24094d3db38d35405fee13b51e5fc0ca0ca182c651c5c1a67bbb67141be207c25767a9d2090910e1", 0x2, &(0x7f0000006840)="6b58d35f647e405cbb3dd18e1f6ff30c8d8e13813f527b2a244c53498a6e488120a3b96e4c3fea14f7e9b01dad3f320c5903757360bfd1ebf7005318a177527b61af57d1c16eb85f45e79cb1d856e64275af377ec3998e8acd0cd6cf65e044ef69f7f857ba69b97eae9309afcfe1cfa84a47bb", 0x3fd, &(0x7f00000068c0)="d057818c4b8a30f2ef323d93f80c1816e8629e6140d68a86d365e74e63b41dcf0e628fdc34074d4e7d617e29f7a26722f6e2927a50eabe0c0b20b7a6b44afc094fb4e70f54a4611c5f168a78480f945a3b524bac3a4b752ec20cbe296981d0cacafabb5d0f950d1c86ed33e4ca", &(0x7f0000006940)=0x2}) syz_genetlink_get_family_id$auto_ila(&(0x7f00000069c0), r9) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x3, 0x9, 0x6, 0xb567) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000006a00), r3) fcntl$auto_F_GETLK(r9, 0x5, 0x5d2) 3.996704374s ago: executing program 4 (id=4634): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x5, 0x9b7e, 0x2, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r2 = io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80d4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 3.896659164s ago: executing program 2 (id=4635): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/macsec0/app_solicit\x00', 0x139482, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000080)="b901e52011a4f4555f7a30b19d33b73e86deff5f5dc9", 0xb}, 0x4) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638936612, 0x0) r1 = socket(0x23, 0x2, 0x0) getsockname$auto(r1, &(0x7f00000001c0)=@generic={0x9, "67e68500d0732590e2c74e6f6ffd"}, &(0x7f0000000040)=0xcf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000001500), 0x42640, 0x0) read$auto_lockdown_ops_lockdown(r4, &(0x7f0000001540)=""/215, 0xd7) r5 = dup$auto(r2) ioctl$auto_USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000014c0)=0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000001640)=ANY=[@ANYBLOB="c062966ae60dbffdb52f107b64d6cf5c1645464a76e14594d510b22636a810239dfc427c3d96ef0b442f8acc06cb041a35c491119c007df59f743ea054c503e9df3ccd9cc71d34e043d6ffdc3adcd5877a68dd66795f69dcf0fe9712fdb86add2ce0936121802feeb0b8b6b4b7b297510ed3ecedf8b59d1bc0f791b6a35e21b29baa740bb3858d2b8559c0157f6dd637ab534b538b46d4856f29e29168b1dd0862c1f7dad83178e5ef88fbed23a6fe94159d9ce705c5e8b27aa314c70f106c1eaf5e70d61a021821e89ba89fb7546fa6dc", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250b000000080050800400060008000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioperm$auto(0x8007, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0x8000df, 0x9b72, 0x4, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r8 = epoll_create$auto(0x3e) epoll_ctl$auto(r8, 0x1, 0x8000000000000000, 0x0) iopl$auto(0x3) r9 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r9, 0x0, 0x0) r10 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/set_event\x00', 0x2000, 0x0) read$auto_ftrace_set_event_fops_trace_events(r10, &(0x7f00000004c0)=""/4087, 0xff7) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x88083, 0xffeb) 3.57190267s ago: executing program 0 (id=4637): r0 = prctl$auto(0x3e, 0x2000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x7, 0xde, 0x10, 0x401, 0xd) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x10, 0x4, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x20) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 32) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x216fc2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000000), r3) (async, rerun: 32) close_range$auto(0x2, r2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xde, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (async) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(r4, r0, 0xfffffff8) (async, rerun: 32) fanotify_init$auto(0x4f1, 0x1) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0xffff, 0x38) (async) ioctl$auto(0x3, 0x1276, r5) 3.47943127s ago: executing program 2 (id=4638): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0xe8) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/memstick/parameters/cmd_retries\x00', 0x81480, 0x0) read$auto(r1, 0x0, 0x20) (async) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async) r2 = socket(0x10, 0x80000, 0x14) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-7', 0x2) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/rfcomm/uevent\x00', 0x91c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000640)=""/177, 0xb1) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, 0x0, 0x3d55, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async, rerun: 64) mmap$auto(0xfffffffffffffffe, 0xe983, 0xde, 0x10, 0x401, 0xd) (rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async, rerun: 32) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x4801) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.497716717s ago: executing program 0 (id=4639): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc011}, 0x4048) socket(0x6, 0x1, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) unshare$auto(0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) unshare$auto(0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) socket(0x28, 0x80000, 0xfffffffe) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x183403, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x8905, 0xfffffffffffff4e0) setfsuid$auto(0x0) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xa6, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000001480)='nl80211\x00', 0x9) fstatfs$auto(r1, &(0x7f0000000040)={0x7, 0x4, 0x1a, 0x6, 0x8001, 0xffffffffffffffff, 0x763b, {[0x0, 0x7]}, 0x5, 0x7, 0x5, [0x8001, 0xa74, 0x100000001, 0x63]}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) mmap$auto(0x100000001, 0x4, 0xff9, 0x12, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) 2.496110348s ago: executing program 6 (id=4640): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r1, 0x10000}, 0x10) mmap$auto(0x80000000000, 0x9, 0xe994, 0x8000000008011, r2, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x4, &(0x7f0000000080)="05daf3f50c9c84ecbe967ff2db2876658907ae25ab461da960e26aecdb1f85cc7854f752ba6ddfed1681e9da68c7f6f89649730a4ab55fc6") close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0xc0b02, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1c\x00', 0x101002, 0x0) write$auto(r7, 0x0, 0xc70) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), r6) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250f000000050033000200000008000300", @ANYRES32=r5, @ANYBLOB="482bf8dd9d67bea273513ed27e11e4ce99bded24779b9e21dca3a08848bde63791bcd6dc8a18bd5b8a806131c501c25a6110189b4b3b"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4) 2.350029552s ago: executing program 2 (id=4641): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) socket(0x23, 0x80805, 0x0) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x4d69, 0xffffffffffffffff, 0x8, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.15901238s ago: executing program 6 (id=4642): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0xffffffffffffffff, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x141, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) lseek$auto(r1, 0x7fffffffffffffff, 0x3) 2.032250176s ago: executing program 4 (id=4643): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x0, 0x0) ioctl$auto_MEMGETREGIONINFO(r0, 0xc0104d08, &(0x7f0000000040)={0x9, 0x4, 0x1ff, 0x8000}) (async) close_range$auto(0x2, 0x8, 0x0) (async) lsm_list_modules$auto(&(0x7f00000000c0), &(0x7f0000000100)=0x6, 0x3) (async) socket(0x2, 0x3, 0x1) (async) setresgid$auto(0x81, 0x800000a0, 0x8) (async) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c005) 1.970362122s ago: executing program 6 (id=4644): socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) (async) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) sysfs$auto(0x2, 0x23, 0x0) (async) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) (async) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000140)=0x8) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) (async) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) 1.705357698s ago: executing program 6 (id=4645): r0 = clone$auto(0x3, 0x8001, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x80000000, 0x8) shmctl$auto_IPC_RMID(0x100, 0x0, &(0x7f0000000200)={{0x82f, 0xee01, 0xee01, 0xffffffff, 0x7, 0x1, 0x9}, 0x463, 0x6, 0x2400000, 0xa9, @raw, @raw=0x6, 0x0, 0x0, &(0x7f0000000080)="e7495cda50e765afe19fb9943cd5083c31c6262434e0c619e21d9df746c8780b4a3407cd1393d0a74c94c617b6ca338be99f708286719f824459011dc785ae0bb74e4872f73c5844dc38bc1e4ed6d380598b802a01f9418c85391c56336fa7b4602708dd8ecbbfb0e3006b3304c0d88ebfd38fc379e0c075ff5fed20e4faa2209bf9959da8c3", &(0x7f0000000140)="5b751fa354363c209e0b8e8da355fbf792c28120b75b9f2d3623f23dc9863a3167855d3e8c597516feed6cce292edd81f77737cc81162565fa2afdf402fe66ff73368d1cca6ee677c433c6116e5935b2efb3e73640d2564b8279cddc0c0cd94a30dd778eb0b8e4ff40d39054f10dbc16b55fbb671c9738774e6b90e39b009255f7b49b202ccdc74bbf8a5fcb3e6d9c507c1df0c645636534d0d3baa81e0a08c6b381c6c5745e9ac0742bce72072f20da42a2b9e0ffa4cc6eeaf6ee"}) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x6, 0x101, 0x8, @_sigchld={r0, r1, 0x4d, 0x0, 0x7fffffff}}}, 0x7) r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/options/blk_classic\x00', 0x400000, 0x0) flock$auto(r5, 0x8) madvise$auto(0x140, 0x0, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r6, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x2, 0x2}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xf58b9994}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xbfa1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000c0}, 0x40000) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'team_slave_1\x00', 0x0}) r10 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/gid_map\x00', 0x28100, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000001a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000005c0)={0x1474, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1184, 0x2, 0x0, 0x1, [@nested={0x17e, 0x61, 0x0, 0x1, [@nested={0x4}, @generic="35993a63f236d9179ce5be150adad55adacec58ff38012aae8131b6ff86d497a9cc760ca4e278c209171ffc2d97f792b1c19255dca0738f4db11ca493f8c6c0c0e5b547c17e081b5b2e02a5d3192d4bc1da6644a4644a45eaaf9d549974a261d93bb25746b00c44589cdfe25f9e9d14a81a69e0a0c5546b39466158dd8e7d9d5aa6938a46b675c995032c48d73a7f54c063fe0fe4a396e2d8279e9f59c4f4f", @generic="14e51bbe2096c1b0c6c8f4293b3d57a427322749e41ec2a686f4b922745e486ae6df12668e089861156139d13d267d7d8bccde8aacf6607264678b2cbb7724318fb1ad37402eb7481a56a9ff5f94492e984dcea5d8db1940c9c43c583a6273225dbf835decaf101c605d16d6616f3b352b8f5aa6d1f94469ad09d4953aa099486b150c1070d8ef4b784f3fcc28f298a6cf277ecfed5194ef0cc036054dec334b39ff9f6cc119f47fdd3834367bfe49a9f070617af002ef4102bad6b01cbc1cfdb845a35cf0e270ddc07c6cedb10db744272f63", @nested={0x4, 0x119}]}, @generic="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"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xe5, 0x2, 0x0, 0x1, [@generic="05587613b2bb59f9748961adf23ced6de6b2db49016d70469b4a8dd1581abd71ef430b21628ca9a3e7e90ada1df4c4f3cefdfe48b3b38b7a1e6df8894090b06061a65da8eb9f5628313d9f276d1186c42931cbd9f103df1fe981b0d8197c00826ba4574368aee628e80671c1500da34b80b0d7430d3c4f58199b65505c95edfb92eb39573eaf1f308ab548b70384a1e9ef9c83c7f9f7f3f1bdc11ddc67391cf157b5da81738f90b5da73edaf28838b7bf1e6f480f8dac338b6b95192c3b6e48a4af405fb830377f544a73d6a4135d74d45318a2f84a824f091e779bee8f637919d"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x13f, 0x2, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x17, 0x0, 0x0, @fd=r10}, @generic="3dcd67c7707aa5b14912b313b582810d0856c647033429011950ebe3341b79d50385110cc8a907b20fb5355e7a195537eacde971b80666081e65b5ffd6e4569acc16bd32f5026f2363", @generic="b0613000321d5fb828593b813b9a3ef7861397419450c81fcba41085ed78ae21cb8972406bcc5f9a3796ced40e75431a235ae5f68720bf899f3aac2091039f0c63059a42e0d8aa9313531441c027a4599d6b1b34ee0e6a0212d6b659591072f5d7ab70d28590b4fbd9818282f448fcdafc49901dab92aa66b398d947e2204e35b3fc9229f5208301c042c6bcc42e0a165f6b9999d0dd847671604fc627e77aa27b6307bf2dc1adb05585588dec58527bad43905eff3743ffd31bc5a5fff880ab47442f819ade2b1e93d91863c93f18241c76fc49819228e1c11942c4fa607ee583f4"]}]}, 0x1474}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000000) madvise$auto(0x9, 0xb6b, 0x8) shmctl$auto_SHM_UNLOCK(0x8001, 0xc, &(0x7f0000001b80)={{0x1000, r4, r2, 0x1b8, 0x9, 0x7, 0x6}, 0x3ff, 0x7, 0xffffffff, 0x5, @inferred=r3, @raw=0x8, 0x6, 0x0, &(0x7f0000001ac0)="abd74534415ece187ced531830a1b37efd459200ce31069a2e2e2eac90cc389fe16b121b35af1a4dd55d8233d256729ea2f7c688ee2415c2c478f7693b12ffdda1cb343e19eb4978b6b3abd888d08231008fe6ef7868ac4469ce2f58c4ea9691e0f96a303a671237f70fcbd087181815d62ccf", &(0x7f0000001b40)="0572a81574c15ca4d3f0a61cd19271f83c2c9424ee9ba55bce3740701df99ea58865683a8a355c4d7e31eba73f0d125e116f7a3a1320a7"}) r12 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000001c40), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r6, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001c80)={0x274, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x25c, 0x1, 0x0, 0x1, [@generic="a55b11", @generic="a8a1b328b22e0d0f488e89e656a5ff7e60947661b875ad2a2db2b38321ec3f16f69820a077f65552c624ce69dacd22d0d8ab4570ad5e1587c5e0e9b19775927d17f73f63e2bddd327fc4d64eaec2942371d37877a5119f7cfd7390352d5b7c187f0cfcd8760c23fa56ab1c66089fa60be5c794f6fd5930889539b851918d4b47222c36976857941489e81975c387838c4d93227fd9", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x1}, @nested={0x1ac, 0x139, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid=r0}, @generic="f589ad809bb13d0dd7cf6f4a2bb05567a4f2e68b0a5cf417ebc49584692de778c8eb52e9db33eb4c105e3dfdb21da1e508103f2d03f0d51a90dd3041f6235f19f07357300e636f5e0ff6093df2a50b64063f827bdb177b9eeaf5d6b846e87ec9dadab10ce3b005a451885fa7660c9e562890c2f248236104c7b666b392df3cab2c122ddca03d4cf0c10af561b47408cf4918adb803e0b7f8ebc6a865ce0efb16c59efca7a812be2985d9c9f7d5d846ed50d9b0", @nested={0x4, 0xe0}, @generic="1af2be868d6c56d802e083b0d687612d18c76199c49b166f9e88c23218abc3b4af99dd2c1704e2469a93941a3b72ed27f8476326d6a1e5344c59de9c449c86cf3710ed42e18309bf828fecdb879b7706cfc71c1f78d8ded131c66b14a5fae896d7c2eb843193c15c5176faf1d1e75fd22007f96447eda36587237ee4b6a539b4edb64555b247293e8031e0bc402b3365d154bfd03cefa9de7580673ba444db76c4c640c67fcca2bac9ad9e010cd199bd53a272dc456627e8ebdf5b134af9e9fb8cd9a540a6014864aa22c864f02787dd5f55c55ceab085db7aa7609b6133d49c46aad122652e0d6aab"]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040005) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/dsp1\x00', 0x240000, 0x0) r13 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ptyu2\x00', 0x509000, 0x0) ioctl$auto_TIOCSETD2(r13, 0x5423, &(0x7f0000002000)="575e361eec9deb6be78bbfb205cf7944d6f60df2d9f753745f14e80b284ea06dbd32c2bbbbda0e94a6591a9b848b7044220e5f2699a7c7d54d18e63c050b768812842a31739b4e0356afb07ae46c60c4edc9b44469fe14a843a0df29ef7ed45a827afc81aee4cb92ebfaab8068aa514a2373e48d7f5e31072ff34a62a9a58c4d1030b3374628dd0e30ebdff20ccb07a9307b1cd941da64be874f407850b686d3c05a0e95d283e553406d97dbdcc925ac3ae1ccf85f82272f7d23afe06e") setpgid$auto(r11, r0) r14 = ioctl$auto_TUNGETIFF2(r10, 0x800454d2, &(0x7f00000020c0)=0x2) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000002100)={0x9, r14, 0x3, 0xfffffffffffffff9, 0xa, 0x400}) r15 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002180), r6) sendmsg$auto_IEEE802154_LIST_IFACE(r6, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, r15, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xc0}, @IEEE802154_ATTR_PHY_NAME={0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc054) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20000040) sendmmsg$auto(r13, &(0x7f0000002500)={{&(0x7f0000002380)="dc12470dc8d06f99bab344263e8b2b55854014768fe90fed1e76ae9f615be4f23a3ddd", 0x7ef3, &(0x7f0000002400)={&(0x7f00000023c0)="cf1bc41118bcf86669157a5c256b3203ce2f39763983b39e567a3fb9c69d487e6162a2ed24f4f5e79140fd20a6a15fa234f89cbb", 0x1}, 0x7, &(0x7f0000002440)="b8fb556281499eeefbcec72589ab6016a61477bd1f1e5e8f83b70316853755e9622e28ca39b02cc6cffd91795b7ff51b070856ae9ecaa76f140fb29851913e0b69dcca4e9d1bd5cbcb75e02b1d5864e609d6aac8644363e4843908160e82a59e239b20cbdb45c9e5a491a16a093cc0ebe768e1ccaa84449c4c06f367b2195d6a1af5d605b3284a798ba80e2ed6e8130331b3e7", 0xfffffffffffffffb, 0x4}, 0x4}, 0x80000000, 0xca1c) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000002540)='/dev/psaux\x00', 0x10000, 0x0) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000002640)={@sival_ptr=&(0x7f0000002580)="661a69ba011912ad66c87e442e52ff5c8c653567c915957b5b1de6adff5d6c47b126157a694ac7a8f5b1f0f869774b6d2314a55c3aed36433bdab15111df25b14a6d7cc9669e5ca66d82fd4615d586fae6f3c76f887e467c67e9b8575d688af27fd54a28f1943835470d0ac7b20665bdbed652c5faf12d9959e5f7823022565e86157cef08d872a475c73ae257e638c5979ecd96d85bb54e34a82e551412db715b0e3d6841c24c6f56e84a5e050bdc737975bc0f96eb78d6b02f", @raw=0x69a8, 0xa2c2}, &(0x7f0000002680)=0x4) ioctl$auto_SNDRV_PCM_IOCTL_DROP(r14, 0x4143, 0x0) 1.490988187s ago: executing program 6 (id=4646): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/macsec0/app_solicit\x00', 0x139482, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000080)="b901e52011a4f4555f7a30b19d33b73e86deff5f5dc9", 0xb}, 0x4) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638936612, 0x0) r1 = socket(0x23, 0x2, 0x0) getsockname$auto(r1, &(0x7f00000001c0)=@generic={0x9, "67e68500d0732590e2c74e6f6ffd"}, &(0x7f0000000040)=0xcf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000001500), 0x42640, 0x0) read$auto_lockdown_ops_lockdown(r4, &(0x7f0000001540)=""/215, 0xd7) r5 = dup$auto(r2) ioctl$auto_USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000014c0)=0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000001640)=ANY=[@ANYBLOB="c062966ae60dbffdb52f107b64d6cf5c1645464a76e14594d510b22636a810239dfc427c3d96ef0b442f8acc06cb041a35c491119c007df59f743ea054c503e9df3ccd9cc71d34e043d6ffdc3adcd5877a68dd66795f69dcf0fe9712fdb86add2ce0936121802feeb0b8b6b4b7b297510ed3ecedf8b59d1bc0f791b6a35e21b29baa740bb3858d2b8559c0157f6dd637ab534b538b46d4856f29e29168b1dd0862c1f7dad83178e5ef88fbed23a6fe94159d9ce705c5e8b27aa314c70f106c1eaf5e70d61a021821e89ba89fb7546fa6dc", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250b000000080050800400060008000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioperm$auto(0x8007, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0x8000df, 0x9b72, 0x4, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r8 = epoll_create$auto(0x3e) epoll_ctl$auto(r8, 0x1, 0x8000000000000000, 0x0) iopl$auto(0x3) r9 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r9, 0x0, 0x0) r10 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto_ftrace_set_event_fops_trace_events(r10, &(0x7f00000004c0)=""/4087, 0xff7) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x88083, 0xffeb) 1.23698965s ago: executing program 0 (id=4647): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r1}, 0x18) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket(0x23, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000000)=@can, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffb8f]}, 0x1fe, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) epoll_ctl$auto(r2, 0x0, r4, &(0x7f00000003c0)={0xffb, 0x100000001}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xffffffffffffff72, 0x10, r3, 0x7ffe) connect$auto(0x3, &(0x7f0000000000), 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.118181183s ago: executing program 6 (id=4648): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x8, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x8, 0x0, 0x0, 0x8) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f0000000180)=0x8) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x7ff) mmap$auto(0x0, 0x20006, 0x4000000000de, 0x10010, 0xffffffffffffffff, 0x8001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/power/autosuspend\x00', 0xa0302, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/power/autosuspend\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x416401, 0x0) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0xffffffffffffffff, 0x8, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) (async) fcntl$getown(0xffffffffffffffff, 0x9) read$auto(0x4, 0x0, 0xfdef) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000080)={{0x7, 0xee01, 0xee00, 0x6, 0x7, 0xa, 0x8}, 0x0, 0x0, 0x5, 0x1, 0x0, 0x297, 0x8, 0xad2a, 0x82, 0x2}) (async) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000080)={{0x7, 0xee01, 0xee00, 0x6, 0x7, 0xa, 0x8}, 0x0, 0x0, 0x5, 0x1, 0x0, 0x297, 0x8, 0xad2a, 0x82, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x20080, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) (async) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x1, 0x15, &(0x7f0000000140)='\x00', &(0x7f00000001c0)=0x9) (async) getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x1, 0x15, &(0x7f0000000140)='\x00', &(0x7f00000001c0)=0x9) socket(0x0, 0x800, 0xe05) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) 772.697518ms ago: executing program 0 (id=4649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, 0x0, 0x2) mmap$auto(0x4501c6ab, 0x20009, 0xb0fb, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x6, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) setsockopt$auto(0x4, 0x1, 0xd, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xc008ae67, 0x38) 625.587523ms ago: executing program 2 (id=4650): r0 = socket(0xa, 0x3, 0x3b) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000100)={0xfa, 0x7f, 0x8, 0x101, 0x1, 0x5, 0x4, 0x3, 0xe312, 0x6, 0x14, 0x8}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(r0, 0x29, 0x6, 0x0, 0x0) 491.028447ms ago: executing program 2 (id=4651): r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1b43, 0x0) poll$auto(&(0x7f00000002c0)={r0, 0x8000, 0x3}, 0x4, 0xfff) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7) unshare$auto(0x40000080) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r3, 0x2) flock$auto(r3, 0x2) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf251b00000005001200080000000500250009000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc011) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x3, 0x4) getsockopt$auto(r4, 0xff, 0xb, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c850) open(0x0, 0x22240, 0x55) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) r8 = prctl$auto_PR_SCHED_CORE_GET(0x5, 0x0, 0xffffffffffffffff, 0x100000000, 0x81) mmap$auto(0xfffffffffffffffa, 0x5, 0x6, 0x1010, r8, 0x401) 0s ago: executing program 4 (id=4653): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x3, 0xffffffffffffffff, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x141, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) lseek$auto(r1, 0x7fffffffffffffff, 0x3) kernel console output (not intermixed with test programs): 38 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1036.021496][T20886] RAX: ffffffffffffffda RBX: 00007f47619b5fa0 RCX: 00007f476178e969 [ 1036.021521][T20886] RDX: 0000000000000a80 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1036.021544][T20886] RBP: 00007f4761810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1036.021569][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.021592][T20886] R13: 0000000000000000 R14: 00007f47619b5fa0 R15: 00007ffcceb4e488 [ 1036.021639][T20886] [ 1037.016723][T20907] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1037.049543][T20907] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1038.802783][T20938] random: crng reseeded on system resumption [ 1040.890520][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1040.977361][T20973] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1041.720763][T20983] FAULT_INJECTION: forcing a failure. [ 1041.720763][T20983] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.773243][T20983] CPU: 1 UID: 0 PID: 20983 Comm: syz.4.3299 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1041.773298][T20983] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1041.773311][T20983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1041.773329][T20983] Call Trace: [ 1041.773340][T20983] [ 1041.773351][T20983] dump_stack_lvl+0x16c/0x1f0 [ 1041.773396][T20983] should_fail_ex+0x512/0x640 [ 1041.773441][T20983] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1041.773479][T20983] should_failslab+0xc2/0x120 [ 1041.773535][T20983] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1041.773570][T20983] ? __alloc_skb+0x2b2/0x380 [ 1041.773607][T20983] __alloc_skb+0x2b2/0x380 [ 1041.773640][T20983] ? __pfx___alloc_skb+0x10/0x10 [ 1041.773671][T20983] ? genl_rcv_msg+0x4bb/0x800 [ 1041.773725][T20983] netlink_ack+0x15d/0xb80 [ 1041.773763][T20983] ? __lock_acquire+0xaa4/0x1ba0 [ 1041.773813][T20983] netlink_rcv_skb+0x347/0x440 [ 1041.773850][T20983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1041.773896][T20983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1041.773954][T20983] ? __pfx_down_read+0x10/0x10 [ 1041.774001][T20983] ? netlink_deliver_tap+0x1ae/0xd30 [ 1041.774043][T20983] genl_rcv+0x28/0x40 [ 1041.774079][T20983] netlink_unicast+0x53a/0x7f0 [ 1041.774121][T20983] ? __pfx_netlink_unicast+0x10/0x10 [ 1041.774155][T20983] ? __lock_acquire+0xaa4/0x1ba0 [ 1041.774206][T20983] netlink_sendmsg+0x8d1/0xdd0 [ 1041.774250][T20983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.774308][T20983] ____sys_sendmsg+0xa95/0xc70 [ 1041.774350][T20983] ? copy_msghdr_from_user+0x10a/0x160 [ 1041.774384][T20983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1041.774454][T20983] ___sys_sendmsg+0x134/0x1d0 [ 1041.774491][T20983] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.774576][T20983] __sys_sendmsg+0x16d/0x220 [ 1041.774610][T20983] ? __pfx___sys_sendmsg+0x10/0x10 [ 1041.774657][T20983] ? rcu_is_watching+0x12/0xc0 [ 1041.774697][T20983] do_syscall_64+0xcd/0x230 [ 1041.774743][T20983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.774775][T20983] RIP: 0033:0x7fd82978e969 [ 1041.774800][T20983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.774832][T20983] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.774862][T20983] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1041.774884][T20983] RDX: 0000000000000800 RSI: 0000200000006940 RDI: 0000000000000003 [ 1041.774905][T20983] RBP: 00007fd82a562090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.774924][T20983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.774942][T20983] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1041.774984][T20983] [ 1042.356507][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1043.169071][ T30] audit: type=1804 audit(4294967427.283:30): pid=21006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3304" name="/newroot/222/file0" dev="tmpfs" ino=1195 res=1 errno=0 [ 1043.190892][ T30] audit: type=1800 audit(4294967427.283:31): pid=21006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3304" name="file0" dev="tmpfs" ino=1195 res=0 errno=0 [ 1043.213405][ T30] audit: type=1804 audit(4294967427.283:32): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3304" name="/newroot/222/file0" dev="tmpfs" ino=1195 res=1 errno=0 [ 1044.888918][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 1044.917675][T21037] batman_adv: Routing algorithm '0' is not supported [ 1045.633677][T21070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3317'. [ 1046.204894][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.381591][T21070] bridge_slave_1 (unregistering): left allmulticast mode [ 1046.391709][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1046.414880][T21077] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1046.435472][T21070] bridge_slave_1 (unregistering): left promiscuous mode [ 1046.448040][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.019112][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1049.076719][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'. [ 1050.866160][T21131] netlink: 'syz.5.3330': attribute type 33 has an invalid length. [ 1050.892868][T21131] netlink: 322 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1050.925121][T21135] netlink: 'syz.5.3330': attribute type 33 has an invalid length. [ 1050.934395][T21135] netlink: 322 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1051.292110][T21121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.656928][T21121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.875593][T21121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.913686][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3334'. [ 1051.999785][T21152] netlink: 'syz.2.3335': attribute type 19 has an invalid length. [ 1052.021139][T21152] netlink: 114 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1052.119396][T21121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.774061][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1055.619344][T21213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1055.658348][T21213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.861628][T21213] bridge_slave_1 (unregistering): left allmulticast mode [ 1055.912505][T21213] bridge_slave_1 (unregistering): left promiscuous mode [ 1055.919664][T21213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.472339][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1059.600419][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.606853][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.644735][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 1060.124745][T21278] HfR: entered promiscuous mode [ 1060.183705][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 1060.193571][T21279] HfR: left promiscuous mode [ 1060.237590][T21278] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1060.729208][T14126] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1060.988660][T21289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1061.008171][T21289] hsr0: left allmulticast mode [ 1061.017579][T21289] hsr_slave_0: left allmulticast mode [ 1061.023472][T21289] hsr_slave_1: left allmulticast mode [ 1061.053893][T21289] hsr0: left promiscuous mode [ 1061.081591][T21289] bridge0: port 3(hsr0) entered disabled state [ 1061.172484][T21289] bridge_slave_1: left allmulticast mode [ 1061.183290][T21289] bridge_slave_1: left promiscuous mode [ 1061.184165][T21288] sd 0:0:1:0: PR command failed: 1026 [ 1061.224435][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.234267][T21288] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1061.252368][T21288] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1061.744809][T21289] bridge_slave_0: left allmulticast mode [ 1061.798738][T21289] bridge_slave_0: left promiscuous mode [ 1061.846236][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.049298][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1062.718393][T21316] FAULT_INJECTION: forcing a failure. [ 1062.718393][T21316] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.732252][T21316] CPU: 1 UID: 0 PID: 21316 Comm: syz.5.3381 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1062.732349][T21316] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1062.732376][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1062.732408][T21316] Call Trace: [ 1062.732426][T21316] [ 1062.732447][T21316] dump_stack_lvl+0x16c/0x1f0 [ 1062.732530][T21316] should_fail_ex+0x512/0x640 [ 1062.732583][T21316] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1062.732625][T21316] should_failslab+0xc2/0x120 [ 1062.732666][T21316] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1062.732705][T21316] ? __d_alloc+0x31/0xaa0 [ 1062.732738][T21316] ? find_held_lock+0x2b/0x80 [ 1062.732773][T21316] __d_alloc+0x31/0xaa0 [ 1062.732812][T21316] d_alloc+0x4a/0x1e0 [ 1062.732849][T21316] d_alloc_parallel+0xe3/0x12e0 [ 1062.732906][T21316] ? find_held_lock+0x2b/0x80 [ 1062.732939][T21316] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1062.732990][T21316] ? __d_lookup+0x266/0x4a0 [ 1062.733055][T21316] lookup_open.isra.0+0x665/0x1580 [ 1062.733115][T21316] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1062.733189][T21316] ? mnt_get_write_access+0x20c/0x300 [ 1062.733238][T21316] path_openat+0x905/0x2d40 [ 1062.733287][T21316] ? __pfx_path_openat+0x10/0x10 [ 1062.733331][T21316] do_filp_open+0x20b/0x470 [ 1062.733374][T21316] ? __pfx_do_filp_open+0x10/0x10 [ 1062.733420][T21316] ? __pfx_kfree_link+0x10/0x10 [ 1062.733475][T21316] ? alloc_fd+0x471/0x7d0 [ 1062.733537][T21316] do_sys_openat2+0x11b/0x1d0 [ 1062.733579][T21316] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.733623][T21316] ? find_held_lock+0x2b/0x80 [ 1062.733665][T21316] __x64_sys_openat+0x174/0x210 [ 1062.733708][T21316] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.733755][T21316] ? rcu_is_watching+0x12/0xc0 [ 1062.733789][T21316] do_syscall_64+0xcd/0x230 [ 1062.733836][T21316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.733869][T21316] RIP: 0033:0x7f4db418d2d0 [ 1062.733894][T21316] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1062.733924][T21316] RSP: 002b:00007f4db1ff5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1062.733953][T21316] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4db418d2d0 [ 1062.733992][T21316] RDX: 0000000000000002 RSI: 00007f4db1ff5fa0 RDI: 00000000ffffff9c [ 1062.734025][T21316] RBP: 00007f4db1ff5fa0 R08: 0000000000000000 R09: 00007f4db1ff5cd4 [ 1062.734048][T21316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1062.734069][T21316] R13: 0000000000000000 R14: 00007f4db43b5fa0 R15: 00007fff6bb2de08 [ 1062.734110][T21316] [ 1063.625508][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1069.722339][T21415] FAULT_INJECTION: forcing a failure. [ 1069.722339][T21415] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.808937][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.4.3408 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1069.809001][T21415] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1069.809016][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1069.809036][T21415] Call Trace: [ 1069.809048][T21415] [ 1069.809061][T21415] dump_stack_lvl+0x16c/0x1f0 [ 1069.809111][T21415] should_fail_ex+0x512/0x640 [ 1069.809155][T21415] ? __kmalloc_noprof+0xbf/0x510 [ 1069.809200][T21415] ? ops_init+0x77/0x5f0 [ 1069.809234][T21415] should_failslab+0xc2/0x120 [ 1069.809273][T21415] __kmalloc_noprof+0xd2/0x510 [ 1069.809316][T21415] ops_init+0x77/0x5f0 [ 1069.809357][T21415] setup_net+0x21e/0x850 [ 1069.809398][T21415] ? __pfx_setup_net+0x10/0x10 [ 1069.809430][T21415] ? lockdep_init_map_type+0x5c/0x280 [ 1069.809475][T21415] ? __pfx_down_read_killable+0x10/0x10 [ 1069.809528][T21415] ? debug_mutex_init+0x37/0x70 [ 1069.809586][T21415] copy_net_ns+0x2a6/0x5f0 [ 1069.809632][T21415] create_new_namespaces+0x3ea/0xad0 [ 1069.809679][T21415] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1069.809720][T21415] ksys_unshare+0x45b/0xa40 [ 1069.809765][T21415] ? __pfx_ksys_unshare+0x10/0x10 [ 1069.809808][T21415] ? xfd_validate_state+0x5d/0x180 [ 1069.809864][T21415] ? rcu_is_watching+0x12/0xc0 [ 1069.809905][T21415] __x64_sys_unshare+0x31/0x40 [ 1069.809947][T21415] do_syscall_64+0xcd/0x230 [ 1069.809997][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.810030][T21415] RIP: 0033:0x7fd82978e969 [ 1069.810057][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.810090][T21415] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1069.810122][T21415] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1069.810144][T21415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1069.810164][T21415] RBP: 00007fd829810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1069.810185][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.810214][T21415] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1069.810258][T21415] [ 1070.034757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.248700][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1075.289515][T21508] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1075.313681][T21507] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1075.541389][T21508] ›: renamed from hsr0 (while UP) [ 1084.269229][T21735] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 1084.543651][T21738] netlink: 'syz.0.3457': attribute type 11 has an invalid length. [ 1085.452709][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1086.991496][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 1087.532113][T21799] .SR: entered promiscuous mode [ 1087.685685][T21804] Invalid ELF header magic: != ELF [ 1088.499234][T21825] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3486'. [ 1088.581651][T21825] IPv6: NLM_F_CREATE should be specified when creating new route [ 1089.268513][T21799] could not allocate digest TFM handle [ 1089.398501][T21804] could not allocate digest TFM handle [ 1090.835628][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1091.224102][T14968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.532022][T21869] binder: 21866:21869 ioctl c0306201 2000000000c0 returned -14 [ 1092.282771][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1092.308227][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1092.316906][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1092.328408][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1092.337378][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1092.543710][T14968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.866017][T14968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.435940][T14968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.453903][ T55] Bluetooth: hci3: command tx timeout [ 1094.798941][T21870] chnl_net:caif_netlink_parms(): no params data found [ 1095.204121][T21891] CIFS mount error: No usable UNC path provided in device string! [ 1095.204121][T21891] [ 1095.232810][T21891] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1095.329622][T14968] bridge_slave_0: left allmulticast mode [ 1095.335470][T14968] bridge_slave_0: left promiscuous mode [ 1095.342071][T14968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.534596][ T55] Bluetooth: hci3: command tx timeout [ 1097.243281][T14968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.256459][T14968] bond0 (unregistering): Released all slaves [ 1097.770669][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.781464][T21870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.788883][T21870] bridge_slave_0: entered allmulticast mode [ 1097.804389][T21870] bridge_slave_0: entered promiscuous mode [ 1097.824445][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.841470][T21870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.849123][T21870] bridge_slave_1: entered allmulticast mode [ 1097.858240][T21870] bridge_slave_1: entered promiscuous mode [ 1097.966579][T21870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.096219][T21870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.185918][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1098.303635][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1098.313283][T14968] hsr_slave_0: left promiscuous mode [ 1098.343698][T14968] hsr_slave_1: left promiscuous mode [ 1098.350014][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.372235][T14968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.392399][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.400245][T14968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.478000][T14968] veth1_vlan: left promiscuous mode [ 1098.491542][T14968] veth0_vlan: left promiscuous mode [ 1098.628923][ T55] Bluetooth: hci3: command tx timeout [ 1099.523928][T21926] GUP no longer grows the stack in syz.4.3503 (21926): 14000-401000 (4000) [ 1099.560499][T21926] CPU: 1 UID: 0 PID: 21926 Comm: syz.4.3503 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1099.560560][T21926] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1099.560575][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1099.560596][T21926] Call Trace: [ 1099.560607][T21926] [ 1099.560621][T21926] dump_stack_lvl+0x16c/0x1f0 [ 1099.560669][T21926] gup_vma_lookup+0x1d2/0x220 [ 1099.560720][T21926] __get_user_pages+0x234/0x36f0 [ 1099.560783][T21926] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 1099.560831][T21926] ? look_up_lock_class+0x6b/0x150 [ 1099.560872][T21926] ? __pfx___get_user_pages+0x10/0x10 [ 1099.560920][T21926] ? process_vm_rw+0x216/0x2c0 [ 1099.560955][T21926] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1099.560995][T21926] ? do_syscall_64+0xcd/0x230 [ 1099.561049][T21926] __gup_longterm_locked+0x20d/0x1850 [ 1099.561107][T21926] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1099.561178][T21926] pin_user_pages_remote+0xed/0x140 [ 1099.561233][T21926] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1099.561283][T21926] ? mm_access+0x22d/0x2e0 [ 1099.561339][T21926] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 1099.561389][T21926] ? futex_wait_queue+0x14c/0x220 [ 1099.561430][T21926] ? futex_unqueue+0xba/0x140 [ 1099.561471][T21926] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1099.561518][T21926] ? iovec_from_user+0xbb/0x140 [ 1099.561590][T21926] ? iovec_from_user+0xbb/0x140 [ 1099.561646][T21926] process_vm_rw+0x216/0x2c0 [ 1099.561691][T21926] ? __pfx_process_vm_rw+0x10/0x10 [ 1099.561741][T21926] ? task_mm_cid_work+0x37b/0x910 [ 1099.561840][T21926] ? xfd_validate_state+0x5d/0x180 [ 1099.561904][T21926] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1099.561948][T21926] ? do_syscall_64+0x91/0x230 [ 1099.561991][T21926] ? lockdep_hardirqs_on+0x7c/0x110 [ 1099.562032][T21926] do_syscall_64+0xcd/0x230 [ 1099.562080][T21926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.562115][T21926] RIP: 0033:0x7fd82978e969 [ 1099.562143][T21926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.562176][T21926] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1099.562209][T21926] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1099.562232][T21926] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000035c [ 1099.562253][T21926] RBP: 00007fd829810ab1 R08: 0000000000000003 R09: 0000000000000000 [ 1099.562272][T21926] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1099.562292][T21926] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1099.562336][T21926] [ 1100.665221][T14968] team0 (unregistering): Port device team_slave_1 removed [ 1100.689928][ T55] Bluetooth: hci3: command tx timeout [ 1100.813018][T14968] team0 (unregistering): Port device team_slave_0 removed [ 1101.998145][T21870] team0: Port device team_slave_0 added [ 1102.032327][T21870] team0: Port device team_slave_1 added [ 1102.164576][T21870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.180593][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.229386][T21870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.261743][T21870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.279194][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.359308][T21870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.799756][ T55] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1102.905653][T21870] hsr_slave_0: entered promiscuous mode [ 1102.908773][T21870] hsr_slave_1: entered promiscuous mode [ 1102.909602][T21870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.909632][T21870] Cannot create hsr debugfs directory [ 1103.263095][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 1105.065223][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1105.884528][T22006] CIFS mount error: No usable UNC path provided in device string! [ 1105.884528][T22006] [ 1105.895249][T22006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1106.959011][T21870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1106.992708][T21870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1107.045540][T21870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1107.182197][T21870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1107.515812][T22016] netlink: 'syz.5.3523': attribute type 1 has an invalid length. [ 1108.107913][T21870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.268032][T21870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.487750][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.495415][T11124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.616669][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.623921][T11124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.148590][T21870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.352688][T21870] veth0_vlan: entered promiscuous mode [ 1111.442821][T21870] veth1_vlan: entered promiscuous mode [ 1111.710928][T21870] veth0_macvtap: entered promiscuous mode [ 1111.768982][T21870] veth1_macvtap: entered promiscuous mode [ 1111.776396][T22099] FAULT_INJECTION: forcing a failure. [ 1111.776396][T22099] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.825015][T22099] CPU: 0 UID: 0 PID: 22099 Comm: syz.4.3533 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1111.825073][T22099] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1111.825087][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1111.825106][T22099] Call Trace: [ 1111.825117][T22099] [ 1111.825129][T22099] dump_stack_lvl+0x16c/0x1f0 [ 1111.825176][T22099] should_fail_ex+0x512/0x640 [ 1111.825219][T22099] ? __kvmalloc_node_noprof+0x122/0x600 [ 1111.825256][T22099] should_failslab+0xc2/0x120 [ 1111.825295][T22099] __kvmalloc_node_noprof+0x135/0x600 [ 1111.825329][T22099] ? seq_read_iter+0x826/0x12c0 [ 1111.825387][T22099] ? seq_read_iter+0x826/0x12c0 [ 1111.825428][T22099] seq_read_iter+0x826/0x12c0 [ 1111.825477][T22099] ? __mutex_trylock_common+0xe9/0x250 [ 1111.825540][T22099] kernfs_fop_read_iter+0x40f/0x5a0 [ 1111.825580][T22099] ? rw_verify_area+0xcf/0x680 [ 1111.825629][T22099] vfs_read+0x8c8/0xc70 [ 1111.825663][T22099] ? __pfx___mutex_lock+0x10/0x10 [ 1111.825707][T22099] ? __pfx_vfs_read+0x10/0x10 [ 1111.825765][T22099] ksys_read+0x12a/0x240 [ 1111.825794][T22099] ? __pfx_ksys_read+0x10/0x10 [ 1111.825820][T22099] ? rcu_is_watching+0x12/0xc0 [ 1111.825862][T22099] do_syscall_64+0xcd/0x230 [ 1111.825908][T22099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.825940][T22099] RIP: 0033:0x7fd82978e969 [ 1111.825966][T22099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.825998][T22099] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1111.826029][T22099] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1111.826050][T22099] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 1111.826069][T22099] RBP: 00007fd82a562090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.826094][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.826114][T22099] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1111.826170][T22099] [ 1112.040137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.129553][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.140658][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.150634][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.161397][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.173221][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.183818][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.196240][T21870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.210852][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.221415][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.231387][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.242208][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.252220][T21870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.262725][T21870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.274132][T21870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.363002][T21870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.383501][T21870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.411650][T21870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.422161][T21870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.879889][T11201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.901650][T11201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.991525][T14961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.004042][T14961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.319984][T22118] FAULT_INJECTION: forcing a failure. [ 1113.319984][T22118] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.359164][T22118] CPU: 0 UID: 0 PID: 22118 Comm: syz.4.3538 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1113.359219][T22118] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1113.359233][T22118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1113.359252][T22118] Call Trace: [ 1113.359263][T22118] [ 1113.359276][T22118] dump_stack_lvl+0x16c/0x1f0 [ 1113.359333][T22118] should_fail_ex+0x512/0x640 [ 1113.359373][T22118] ? __kvmalloc_node_noprof+0x122/0x600 [ 1113.359412][T22118] should_failslab+0xc2/0x120 [ 1113.359451][T22118] __kvmalloc_node_noprof+0x135/0x600 [ 1113.359484][T22118] ? find_held_lock+0x2b/0x80 [ 1113.359514][T22118] ? seq_read_iter+0x826/0x12c0 [ 1113.359566][T22118] ? seq_read_iter+0x826/0x12c0 [ 1113.359605][T22118] ? aa_file_perm+0x4d6/0xfb0 [ 1113.359645][T22118] seq_read_iter+0x826/0x12c0 [ 1113.359689][T22118] ? register_lock_class+0x41/0x4c0 [ 1113.359743][T22118] seq_read+0x39e/0x4e0 [ 1113.359786][T22118] ? __pfx_seq_read+0x10/0x10 [ 1113.359828][T22118] ? get_pid_task+0xfc/0x250 [ 1113.359870][T22118] ? __mutex_trylock_common+0xe9/0x250 [ 1113.359923][T22118] ? rw_verify_area+0xcf/0x680 [ 1113.359963][T22118] ? __pfx_seq_read+0x10/0x10 [ 1113.360008][T22118] vfs_read+0x1de/0xc70 [ 1113.360040][T22118] ? __pfx___mutex_lock+0x10/0x10 [ 1113.360081][T22118] ? __pfx_vfs_read+0x10/0x10 [ 1113.360119][T22118] ? __fget_files+0x20e/0x3c0 [ 1113.360177][T22118] ksys_read+0x12a/0x240 [ 1113.360203][T22118] ? __pfx_ksys_read+0x10/0x10 [ 1113.360227][T22118] ? rcu_is_watching+0x12/0xc0 [ 1113.360266][T22118] do_syscall_64+0xcd/0x230 [ 1113.360319][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.360350][T22118] RIP: 0033:0x7fd82978e969 [ 1113.360374][T22118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.360404][T22118] RSP: 002b:00007fd82a541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.360434][T22118] RAX: ffffffffffffffda RBX: 00007fd8299b6080 RCX: 00007fd82978e969 [ 1113.360454][T22118] RDX: 0000000000000ff7 RSI: 00002000000004c0 RDI: 000000000000000a [ 1113.360472][T22118] RBP: 00007fd82a541090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.360490][T22118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.360509][T22118] R13: 0000000000000000 R14: 00007fd8299b6080 R15: 00007ffead7fd1c8 [ 1113.360548][T22118] [ 1113.599513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.264630][T22120] CIFS mount error: No usable UNC path provided in device string! [ 1114.264630][T22120] [ 1114.283149][T22120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1114.343262][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1114.356461][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1114.370413][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1114.382053][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1114.391479][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1114.429281][T14961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.701064][T14961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.831401][T14961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.111112][T14961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.808672][T22129] chnl_net:caif_netlink_parms(): no params data found [ 1115.858468][T14961] bridge_slave_1: left allmulticast mode [ 1115.873235][T14961] bridge_slave_1: left promiscuous mode [ 1115.900484][T14961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.979333][T14961] bridge_slave_0: left allmulticast mode [ 1116.030140][T14961] bridge_slave_0: left promiscuous mode [ 1116.046127][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.458255][ T55] Bluetooth: hci2: command tx timeout [ 1117.438166][T14961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.458335][T14961] bond0 (unregistering): Released all slaves [ 1117.862152][T14961] .SR: left promiscuous mode [ 1118.169379][ T55] Bluetooth: hci0: unexpected event 0x05 length: 440 > 4 [ 1118.217816][T22129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.255966][T22129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.285352][T22129] bridge_slave_0: entered allmulticast mode [ 1118.305173][T22129] bridge_slave_0: entered promiscuous mode [ 1118.384556][T22129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.418258][T22129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.452317][T22129] bridge_slave_1: entered allmulticast mode [ 1118.471831][T22129] bridge_slave_1: entered promiscuous mode [ 1118.521234][ T55] Bluetooth: hci2: command tx timeout [ 1118.768258][T22129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.840286][T22129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.890416][T22190] Invalid ELF header magic: != ELF [ 1119.429537][T22129] team0: Port device team_slave_0 added [ 1119.551949][T22129] team0: Port device team_slave_1 added [ 1119.936205][T22129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.012743][T22129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.045572][T22129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.090988][T14961] hsr_slave_0: left promiscuous mode [ 1120.108344][T14961] hsr_slave_1: left promiscuous mode [ 1120.137846][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.192075][T14961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.230086][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.238024][T14961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.600209][ T55] Bluetooth: hci2: command tx timeout [ 1121.022147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.028554][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.405552][T22129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.430169][T22129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.461930][T22129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.011621][T22129] hsr_slave_0: entered promiscuous mode [ 1122.023993][T22129] hsr_slave_1: entered promiscuous mode [ 1122.049598][T22129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.089186][T22129] Cannot create hsr debugfs directory [ 1122.405018][T22223] netlink: 'syz.0.3555': attribute type 16 has an invalid length. [ 1122.442191][T22223] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1122.489936][T22223] veth1_macvtap: left promiscuous mode [ 1122.630857][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1122.679146][ T55] Bluetooth: hci2: command tx timeout [ 1124.172838][T22129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1124.186725][T22129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1124.221967][T22129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1124.248759][T22129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1124.500582][T22129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.557604][T22129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.593916][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.601277][T11124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.639787][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.647099][T11124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.765110][T22129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1124.805605][T22257] FAULT_INJECTION: forcing a failure. [ 1124.805605][T22257] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.865023][T22257] CPU: 1 UID: 0 PID: 22257 Comm: syz.2.3561 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1124.865088][T22257] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1124.865103][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1124.865123][T22257] Call Trace: [ 1124.865135][T22257] [ 1124.865148][T22257] dump_stack_lvl+0x16c/0x1f0 [ 1124.865197][T22257] should_fail_ex+0x512/0x640 [ 1124.865243][T22257] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1124.865287][T22257] should_failslab+0xc2/0x120 [ 1124.865327][T22257] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1124.865367][T22257] ? proc_alloc_inode+0x25/0x200 [ 1124.865404][T22257] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1124.865434][T22257] proc_alloc_inode+0x25/0x200 [ 1124.865464][T22257] alloc_inode+0x61/0x240 [ 1124.865505][T22257] new_inode+0x22/0x1c0 [ 1124.865548][T22257] proc_sys_make_inode+0x47/0x5c0 [ 1124.865586][T22257] proc_sys_lookup+0x282/0x410 [ 1124.865642][T22257] ? __pfx_proc_sys_lookup+0x10/0x10 [ 1124.865681][T22257] ? lockdep_init_map_type+0x5c/0x280 [ 1124.865727][T22257] ? lockdep_init_map_type+0x5c/0x280 [ 1124.865781][T22257] __lookup_slow+0x24e/0x460 [ 1124.865826][T22257] ? __pfx___lookup_slow+0x10/0x10 [ 1124.865894][T22257] ? lookup_fast+0x156/0x610 [ 1124.865939][T22257] ? _raw_spin_unlock+0x28/0x50 [ 1124.865988][T22257] walk_component+0x353/0x5b0 [ 1124.866040][T22257] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 1124.866107][T22257] path_openat+0x227/0x2d40 [ 1124.866135][T22257] ? __x64_sys_openat+0x174/0x210 [ 1124.866197][T22257] ? __pfx_path_openat+0x10/0x10 [ 1124.866241][T22257] do_filp_open+0x20b/0x470 [ 1124.866272][T22257] ? __pfx_do_filp_open+0x10/0x10 [ 1124.866336][T22257] ? alloc_fd+0x471/0x7d0 [ 1124.866398][T22257] do_sys_openat2+0x11b/0x1d0 [ 1124.866441][T22257] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.866482][T22257] ? __sock_release+0x20b/0x270 [ 1124.866536][T22257] __x64_sys_openat+0x174/0x210 [ 1124.866580][T22257] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.866626][T22257] ? rcu_is_watching+0x12/0xc0 [ 1124.866668][T22257] do_syscall_64+0xcd/0x230 [ 1124.866715][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.866747][T22257] RIP: 0033:0x7ff93778e969 [ 1124.866774][T22257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.866809][T22257] RSP: 002b:00007ff938594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.866841][T22257] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1124.866863][T22257] RDX: 0000000000000202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1124.866885][T22257] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1124.866905][T22257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.866926][T22257] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1124.866975][T22257] [ 1125.263698][T22257] 0x000200000001-0xa29656a63616329 : "" [ 1125.316905][T22257] mtd: partition "" is out of reach -- disabled [ 1125.395766][T22257] ftl_cs: FTL header not found. [ 1125.700487][T22129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.765150][T22274] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1126.902809][T22309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1127.013879][T22313] openvswitch: netlink: Message has 1 unknown bytes. [ 1127.345449][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 1127.748012][T22129] veth0_vlan: entered promiscuous mode [ 1127.951039][T22129] veth1_vlan: entered promiscuous mode [ 1128.430978][T22129] veth0_macvtap: entered promiscuous mode [ 1128.592785][T22129] veth1_macvtap: entered promiscuous mode [ 1128.958671][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.973376][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.983386][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.005837][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.026640][T22333] netlink: zone id is out of range [ 1129.031830][T22333] netlink: zone id is out of range [ 1129.040470][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.074164][T22333] netlink: zone id is out of range [ 1129.079649][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.089274][T22333] netlink: zone id is out of range [ 1129.091813][T22129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.139730][T22333] netlink: zone id is out of range [ 1129.155605][T22333] netlink: zone id is out of range [ 1129.165330][T22333] netlink: zone id is out of range [ 1129.174525][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.185620][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.196212][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.207122][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.217177][T22333] netlink: zone id is out of range [ 1129.217667][T22129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.235061][T22129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.259757][T22129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.268312][T22333] netlink: zone id is out of range [ 1129.419801][T22129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.432656][T22129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.442725][T22129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.453866][T22129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.600387][T14972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.636886][T14972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.782649][T14972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.806627][T14972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.214870][T22409] random: crng reseeded on system resumption [ 1132.360140][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1132.571757][T22436] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 1132.571757][T22436] program syz.0.3591 not setting count and/or reply_len properly [ 1133.003397][T22454] zero sized request [ 1133.513551][T22454] zero sized request [ 1133.549058][T22454] zero sized request [ 1133.569014][T22454] zero sized request [ 1133.585207][T22454] zero sized request [ 1133.589418][T22454] zero sized request [ 1133.596993][T22454] zero sized request [ 1133.601157][T22454] zero sized request [ 1133.643912][T22454] zero sized request [ 1133.648255][T22454] zero sized request [ 1133.652843][T22454] zero sized request [ 1133.657662][T22454] zero sized request [ 1133.661899][T22454] zero sized request [ 1133.666589][T22454] zero sized request [ 1133.670983][T22454] zero sized request [ 1133.675661][T22454] zero sized request [ 1133.679712][T22454] zero sized request [ 1133.684618][T22454] zero sized request [ 1133.688806][T22454] zero sized request [ 1133.692946][T22454] zero sized request [ 1133.697890][T22454] zero sized request [ 1133.702053][T22454] zero sized request [ 1133.802482][T22454] zero sized request [ 1133.964899][T22454] zero sized request [ 1133.968991][T22454] zero sized request [ 1133.973024][T22454] zero sized request [ 1134.954289][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1135.251278][ T124] smpboot: CPU 1 is now offline [ 1135.348604][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 1136.455864][T22492] ubi0: attaching mtd0 [ 1136.461293][T22492] ubi0: scanning is finished [ 1136.638331][T22492] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1137.574088][T22492] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1138.637401][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3613'. [ 1139.316433][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1140.135585][T22553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1143.049434][T22580] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 1143.049434][T22580] program syz.5.3623 not setting count and/or reply_len properly [ 1143.749951][T22588] random: crng reseeded on system resumption [ 1144.770919][T22597] binder: 22593:22597 ioctl 41045508 1 returned -22 [ 1144.891196][T22597] binder: 22593:22597 ioctl 40081271 38 returned -22 [ 1150.555112][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1151.728746][T22665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.911470][T22680] Invalid ELF header magic: != ELF [ 1154.070209][ T30] audit: type=1326 audit(4294967538.229:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.4.3655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd82978e969 code=0x0 [ 1154.211419][ T30] audit: type=1326 audit(4294967538.229:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22721 comm="syz.4.3655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd82978e969 code=0x0 [ 1154.233175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.192026][T22741] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1155.405620][T22741] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1155.599567][T22741] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1155.711063][T22741] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1158.697510][T22791] FAULT_INJECTION: forcing a failure. [ 1158.697510][T22791] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.979573][T22791] CPU: 0 UID: 0 PID: 22791 Comm: syz.0.3666 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1158.979619][T22791] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1158.979629][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1158.979644][T22791] Call Trace: [ 1158.979653][T22791] [ 1158.979662][T22791] dump_stack_lvl+0x16c/0x1f0 [ 1158.979698][T22791] should_fail_ex+0x512/0x640 [ 1158.979732][T22791] ? fs_reclaim_acquire+0xae/0x150 [ 1158.979770][T22791] ? tomoyo_open_control+0x51f/0xa30 [ 1158.979806][T22791] should_failslab+0xc2/0x120 [ 1158.979836][T22791] __kmalloc_noprof+0xd2/0x510 [ 1158.979868][T22791] tomoyo_open_control+0x51f/0xa30 [ 1158.979909][T22791] do_dentry_open+0x741/0x1c10 [ 1158.979934][T22791] ? __pfx_tomoyo_open+0x10/0x10 [ 1158.979971][T22791] vfs_open+0x82/0x3f0 [ 1158.980005][T22791] path_openat+0x1e5e/0x2d40 [ 1158.980037][T22791] ? __pfx_path_openat+0x10/0x10 [ 1158.980073][T22791] do_filp_open+0x20b/0x470 [ 1158.980097][T22791] ? __pfx_do_filp_open+0x10/0x10 [ 1158.980139][T22791] ? alloc_fd+0x471/0x7d0 [ 1158.980183][T22791] do_sys_openat2+0x11b/0x1d0 [ 1158.980214][T22791] ? __pfx_do_sys_openat2+0x10/0x10 [ 1158.980256][T22791] __x64_sys_openat+0x174/0x210 [ 1158.980288][T22791] ? __pfx___x64_sys_openat+0x10/0x10 [ 1158.980322][T22791] ? rcu_is_watching+0x12/0xc0 [ 1158.980351][T22791] do_syscall_64+0xcd/0x230 [ 1158.980385][T22791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.980410][T22791] RIP: 0033:0x7f6503b8e969 [ 1158.980429][T22791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.980452][T22791] RSP: 002b:00007f65049a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.980475][T22791] RAX: ffffffffffffffda RBX: 00007f6503db6080 RCX: 00007f6503b8e969 [ 1158.980491][T22791] RDX: 0000000000040040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1158.980507][T22791] RBP: 00007f6503c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1158.980522][T22791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.980536][T22791] R13: 0000000000000000 R14: 00007f6503db6080 R15: 00007ffd3da0d9d8 [ 1158.980564][T22791] [ 1159.200984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.295304][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3669'. [ 1163.875207][T22874] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 1164.903434][T22901] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 1166.452082][T22933] FAULT_INJECTION: forcing a failure. [ 1166.452082][T22933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1166.547748][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.5.3695 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1166.547794][T22933] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1166.547804][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1166.547835][T22933] Call Trace: [ 1166.547844][T22933] [ 1166.547854][T22933] dump_stack_lvl+0x16c/0x1f0 [ 1166.547889][T22933] should_fail_ex+0x512/0x640 [ 1166.547927][T22933] should_fail_alloc_page+0xe7/0x130 [ 1166.547959][T22933] prepare_alloc_pages+0x3c2/0x610 [ 1166.547996][T22933] ? rcu_is_watching+0x12/0xc0 [ 1166.548021][T22933] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1166.548065][T22933] ? __kernel_text_address+0xd/0x40 [ 1166.548103][T22933] ? unwind_get_return_address+0x59/0xa0 [ 1166.548130][T22933] ? arch_stack_walk+0xa6/0x100 [ 1166.548166][T22933] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1166.548193][T22933] ? stack_trace_save+0x8e/0xc0 [ 1166.548216][T22933] ? __pfx_stack_trace_save+0x10/0x10 [ 1166.548239][T22933] ? stack_depot_save_flags+0x28/0xa50 [ 1166.548272][T22933] ? find_held_lock+0x2b/0x80 [ 1166.548298][T22933] ? kasan_save_stack+0x42/0x60 [ 1166.548325][T22933] ? __lock_acquire+0xaa4/0x1ba0 [ 1166.548352][T22933] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1166.548385][T22933] ? policy_nodemask+0xea/0x4e0 [ 1166.548421][T22933] alloc_pages_mpol+0x1fb/0x550 [ 1166.548451][T22933] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1166.548476][T22933] ? __page_table_check_ptes_set+0x1ae/0x420 [ 1166.548505][T22933] ? find_held_lock+0x2b/0x80 [ 1166.548531][T22933] alloc_pages_noprof+0x131/0x390 [ 1166.548560][T22933] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1166.548583][T22933] get_free_pages_noprof+0xc/0x40 [ 1166.548613][T22933] kasan_populate_vmalloc_pte+0x2d/0x160 [ 1166.548639][T22933] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1166.548662][T22933] __apply_to_page_range+0x617/0xd60 [ 1166.548701][T22933] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1166.548728][T22933] ? __pfx___apply_to_page_range+0x10/0x10 [ 1166.548765][T22933] ? alloc_vmap_area+0x872/0x2970 [ 1166.548808][T22933] alloc_vmap_area+0x919/0x2970 [ 1166.548851][T22933] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1166.548892][T22933] __get_vm_area_node+0x1a7/0x300 [ 1166.548932][T22933] __vmalloc_node_range_noprof+0x277/0x1540 [ 1166.548971][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1166.549013][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1166.549066][T22933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1166.549115][T22933] __kvmalloc_node_noprof+0x2ff/0x600 [ 1166.549140][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1166.549175][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1166.549214][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1166.549246][T22933] __do_sys_listmount+0x1c2/0xed0 [ 1166.549285][T22933] ? __x64_sys_futex+0x1e0/0x4c0 [ 1166.549309][T22933] ? __x64_sys_futex+0x1e9/0x4c0 [ 1166.549334][T22933] ? __pfx___do_sys_listmount+0x10/0x10 [ 1166.549369][T22933] ? xfd_validate_state+0x5d/0x180 [ 1166.549418][T22933] do_syscall_64+0xcd/0x230 [ 1166.549453][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.549477][T22933] RIP: 0033:0x7fbfcc58e969 [ 1166.549497][T22933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.549522][T22933] RSP: 002b:00007fbfcd340038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1166.549546][T22933] RAX: ffffffffffffffda RBX: 00007fbfcc7b6080 RCX: 00007fbfcc58e969 [ 1166.549563][T22933] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1166.549579][T22933] RBP: 00007fbfcc610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1166.549594][T22933] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1166.549609][T22933] R13: 0000000000000000 R14: 00007fbfcc7b6080 R15: 00007ffccfb373d8 [ 1166.549638][T22933] [ 1167.016957][T22933] warn_alloc: 1 callbacks suppressed [ 1167.016976][T22933] syz.5.3695: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1167.037712][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.5.3695 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1167.037756][T22933] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1167.037766][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1167.037780][T22933] Call Trace: [ 1167.037788][T22933] [ 1167.037797][T22933] dump_stack_lvl+0x16c/0x1f0 [ 1167.037832][T22933] warn_alloc+0x248/0x3a0 [ 1167.037860][T22933] ? __pfx_warn_alloc+0x10/0x10 [ 1167.037887][T22933] ? kfree+0x2b6/0x4d0 [ 1167.037929][T22933] ? __get_vm_area_node+0x1e5/0x300 [ 1167.037987][T22933] __vmalloc_node_range_noprof+0xd31/0x1540 [ 1167.038035][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1167.038076][T22933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1167.038126][T22933] __kvmalloc_node_noprof+0x2ff/0x600 [ 1167.038149][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1167.038184][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1167.038222][T22933] ? __do_sys_listmount+0x1c2/0xed0 [ 1167.038253][T22933] __do_sys_listmount+0x1c2/0xed0 [ 1167.038292][T22933] ? __x64_sys_futex+0x1e0/0x4c0 [ 1167.038316][T22933] ? __x64_sys_futex+0x1e9/0x4c0 [ 1167.038341][T22933] ? __pfx___do_sys_listmount+0x10/0x10 [ 1167.038374][T22933] ? xfd_validate_state+0x5d/0x180 [ 1167.038424][T22933] do_syscall_64+0xcd/0x230 [ 1167.038457][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.038481][T22933] RIP: 0033:0x7fbfcc58e969 [ 1167.038500][T22933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.038524][T22933] RSP: 002b:00007fbfcd340038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1167.038547][T22933] RAX: ffffffffffffffda RBX: 00007fbfcc7b6080 RCX: 00007fbfcc58e969 [ 1167.038563][T22933] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1167.038577][T22933] RBP: 00007fbfcc610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1167.038592][T22933] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1167.038606][T22933] R13: 0000000000000000 R14: 00007fbfcc7b6080 R15: 00007ffccfb373d8 [ 1167.038635][T22933] [ 1167.038644][T22933] Mem-Info: [ 1167.269943][T22933] active_anon:40013 inactive_anon:0 isolated_anon:0 [ 1167.269943][T22933] active_file:13810 inactive_file:49632 isolated_file:0 [ 1167.269943][T22933] unevictable:768 dirty:710 writeback:0 [ 1167.269943][T22933] slab_reclaimable:11547 slab_unreclaimable:97318 [ 1167.269943][T22933] mapped:25459 shmem:19882 pagetables:1013 [ 1167.269943][T22933] sec_pagetables:0 bounce:0 [ 1167.269943][T22933] kernel_misc_reclaimable:0 [ 1167.269943][T22933] free:902079 free_pcp:1592 free_cma:0 [ 1167.316365][T22933] Node 0 active_anon:160052kB inactive_anon:0kB active_file:55240kB inactive_file:198520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101836kB dirty:2836kB writeback:0kB shmem:77992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:4052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1167.397144][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1167.426519][T22933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1167.553749][T22933] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.683965][T22933] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 1167.698362][T22933] Node 0 DMA32 free:726864kB boost:0kB min:34356kB low:42944kB high:51532kB reserved_highatomic:0KB active_anon:155356kB inactive_anon:0kB active_file:55240kB inactive_file:196684kB unevictable:1536kB writepending:2836kB present:3129332kB managed:2544188kB mlocked:0kB bounce:0kB free_pcp:10844kB local_pcp:10844kB free_cma:0kB [ 1167.808404][T22933] lowmem_reserve[]: 0 0 1 1 1 [ 1167.813893][T22933] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.916257][T22933] lowmem_reserve[]: 0 0 0 0 0 [ 1167.931236][T22933] Node 1 Normal free:2864476kB boost:0kB min:55520kB low:69400kB high:83280kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1168.068245][T22933] lowmem_reserve[]: 0 0 0 0 0 [ 1168.073032][T22933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1168.176271][T22933] Node 0 DMA32: 1492*4kB (UME) 1316*8kB (UME) 1203*16kB (UME) 1116*32kB (UME) 1126*64kB (UME) 504*128kB (UME) 308*256kB (UME) 138*512kB (UME) 127*1024kB (UME) 16*2048kB (M) 48*4096kB (UM) = 716960kB [ 1168.277617][T22933] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1168.361736][T22933] Node 1 Normal: 217*4kB (UME) 75*8kB (UME) 46*16kB (UME) 206*32kB (UME) 98*64kB (UME) 31*128kB (UME) 13*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 691*4096kB (UM) = 2864476kB [ 1168.476016][T22933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1168.513473][T22933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1168.571432][T22933] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 1168.645693][T22933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1168.704144][T22933] 79233 total pagecache pages [ 1168.746563][T22933] 2 pages in swap cache [ 1168.778607][T22933] Free swap = 123000kB [ 1168.782931][T22933] Total swap = 124996kB [ 1168.805298][T22933] 2097051 pages RAM [ 1168.815424][T22933] 0 pages HighMem/MovableOnly [ 1168.859475][T22933] 428898 pages reserved [ 1168.863712][T22933] 0 pages cma reserved [ 1175.565924][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1175.704368][T23060] ceph: Failed to parse sending metrics switch value 'P^' [ 1175.993987][T23060] Invalid ELF header magic: != ELF [ 1176.157792][T23072] kafs: addr_prefs: Invalid Command [ 1177.288298][T23068] kexec: Could not allocate control_code_buffer [ 1181.038898][T23133] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1181.168562][T23136] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1182.421594][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.430914][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.853860][T23164] input: isc as /devices/virtual/input/input30 [ 1184.977273][T23184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3753'. [ 1185.083982][T23188] can: request_module (can-proto-3) failed. [ 1185.717701][T23204] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1186.063547][T23213] random: crng reseeded on system resumption [ 1186.453721][T23211] CIFS mount error: No usable UNC path provided in device string! [ 1186.453721][T23211] [ 1186.532363][T23211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1186.627297][T23211] ptrace attach of "./syz-executor exec"[21870] was attempted by "./syz-executor exec"[23211] [ 1187.895188][T23230] lo: entered allmulticast mode [ 1188.000226][T23230] lo: left allmulticast mode [ 1190.043353][T23246] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 1193.086457][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3773'. [ 1193.227468][T23282] FAULT_INJECTION: forcing a failure. [ 1193.227468][T23282] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.521017][T23282] CPU: 0 UID: 0 PID: 23282 Comm: syz.5.3773 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1193.521072][T23282] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1193.521082][T23282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1193.521097][T23282] Call Trace: [ 1193.521105][T23282] [ 1193.521114][T23282] dump_stack_lvl+0x16c/0x1f0 [ 1193.521151][T23282] should_fail_ex+0x512/0x640 [ 1193.521184][T23282] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1193.521217][T23282] should_failslab+0xc2/0x120 [ 1193.521246][T23282] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1193.521276][T23282] ? snd_timer_instance_new+0x65/0x2e0 [ 1193.521312][T23282] kstrdup+0x53/0x100 [ 1193.521342][T23282] snd_timer_instance_new+0x65/0x2e0 [ 1193.521373][T23282] snd_seq_timer_open+0x1cc/0x5e0 [ 1193.521400][T23282] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1193.521426][T23282] ? find_held_lock+0x2b/0x80 [ 1193.521453][T23282] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1193.521482][T23282] ? lockdep_hardirqs_on+0x7c/0x110 [ 1193.521513][T23282] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1193.521544][T23282] queue_use+0xe3/0x250 [ 1193.521579][T23282] snd_seq_queue_alloc+0x2e5/0x550 [ 1193.521619][T23282] snd_seq_ioctl_create_queue+0xa9/0x380 [ 1193.521648][T23282] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 1193.521683][T23282] alloc_seq_queue+0xda/0x180 [ 1193.521712][T23282] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1193.521760][T23282] ? mark_held_locks+0x49/0x80 [ 1193.521788][T23282] ? _raw_spin_unlock_irq+0x23/0x50 [ 1193.521818][T23282] snd_seq_oss_open+0x38c/0xa20 [ 1193.521854][T23282] odev_open+0x6f/0x90 [ 1193.521880][T23282] ? __pfx_odev_open+0x10/0x10 [ 1193.521908][T23282] soundcore_open+0x409/0x580 [ 1193.521937][T23282] ? __pfx_soundcore_open+0x10/0x10 [ 1193.521971][T23282] chrdev_open+0x231/0x6a0 [ 1193.521995][T23282] ? __pfx_apparmor_file_open+0x10/0x10 [ 1193.522025][T23282] ? __pfx_chrdev_open+0x10/0x10 [ 1193.522058][T23282] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1193.522099][T23282] do_dentry_open+0x741/0x1c10 [ 1193.522123][T23282] ? __pfx_chrdev_open+0x10/0x10 [ 1193.522153][T23282] vfs_open+0x82/0x3f0 [ 1193.522187][T23282] path_openat+0x1e5e/0x2d40 [ 1193.522220][T23282] ? __pfx_path_openat+0x10/0x10 [ 1193.522250][T23282] do_filp_open+0x20b/0x470 [ 1193.522272][T23282] ? __pfx_do_filp_open+0x10/0x10 [ 1193.522315][T23282] ? alloc_fd+0x471/0x7d0 [ 1193.522359][T23282] do_sys_openat2+0x11b/0x1d0 [ 1193.522389][T23282] ? __pfx_do_sys_openat2+0x10/0x10 [ 1193.522431][T23282] __x64_sys_openat+0x174/0x210 [ 1193.522463][T23282] ? __pfx___x64_sys_openat+0x10/0x10 [ 1193.522496][T23282] ? rcu_is_watching+0x12/0xc0 [ 1193.522526][T23282] do_syscall_64+0xcd/0x230 [ 1193.522560][T23282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.522585][T23282] RIP: 0033:0x7fbfcc58e969 [ 1193.522604][T23282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.522628][T23282] RSP: 002b:00007fbfcd340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1193.522651][T23282] RAX: ffffffffffffffda RBX: 00007fbfcc7b6080 RCX: 00007fbfcc58e969 [ 1193.522668][T23282] RDX: 00000000001c8300 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 1193.522683][T23282] RBP: 00007fbfcc610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1193.522698][T23282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.522712][T23282] R13: 0000000000000000 R14: 00007fbfcc7b6080 R15: 00007ffccfb373d8 [ 1193.522742][T23282] [ 1195.717671][T23313] MTRR 1 not used [ 1198.996437][T23349] svc: failed to register nfsdv3 RPC service (errno 111). [ 1199.052148][T23349] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1201.205072][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1204.613782][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1206.152784][T23453] Invalid ELF header magic: != ELF [ 1206.470000][T23433] bond0: (slave bond_slave_0): Releasing backup interface [ 1207.287230][T23464] can: request_module (can-proto-4) failed. [ 1208.620428][T23478] vivid-003: ================= START STATUS ================= [ 1208.638041][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3814'. [ 1208.765913][T23476] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1208.779908][T23478] vivid-003: Radio HW Seek Mode: Bounded [ 1208.914827][T23478] vivid-003: Radio Programmable HW Seek: false [ 1208.969956][T23478] vivid-003: RDS Rx I/O Mode: Block I/O [ 1209.131701][T23478] vivid-003: Generate RBDS Instead of RDS: false [ 1209.206520][T23478] vivid-003: RDS Reception: true [ 1209.302405][T23478] vivid-003: RDS Program Type: 0 inactive [ 1209.417812][T23478] vivid-003: RDS PS Name: inactive [ 1209.423115][T23478] vivid-003: RDS Radio Text: inactive [ 1209.545462][T23478] vivid-003: RDS Traffic Announcement: false inactive [ 1209.634350][T23478] vivid-003: RDS Traffic Program: false inactive [ 1209.761464][T23478] vivid-003: RDS Music: false inactive [ 1209.879875][T23478] vivid-003: ================== END STATUS ================== [ 1210.121618][T14968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.831729][ T30] audit: type=1800 audit(4294967595.016:35): pid=23492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3818" name="lu_gp_id" dev="configfs" ino=92688 res=0 errno=0 [ 1211.039831][T14968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.720612][T14968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.038616][T14968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.538683][T14126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1212.550323][T14126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1212.560717][T14126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1212.577876][T14126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1212.589037][T14126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1213.629841][T14968] bridge_slave_1: left allmulticast mode [ 1213.646955][T14968] bridge_slave_1: left promiscuous mode [ 1213.673190][T14968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.770224][T14968] bridge_slave_0: left allmulticast mode [ 1213.795902][T14968] bridge_slave_0: left promiscuous mode [ 1213.822796][T14968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.657742][T14126] Bluetooth: hci2: command tx timeout [ 1215.226145][T14126] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.287890][T14968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.320825][T14968] bond0 (unregistering): Released all slaves [ 1216.701725][T14968] hsr_slave_0: left promiscuous mode [ 1216.737696][ T55] Bluetooth: hci2: command tx timeout [ 1216.805614][T14968] hsr_slave_1: left promiscuous mode [ 1216.847648][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.887551][T14968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.964188][T14968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.014831][T14968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.151247][T14968] veth1_macvtap: left promiscuous mode [ 1217.183860][T14968] veth0_macvtap: left promiscuous mode [ 1217.205646][T14968] veth1_vlan: left promiscuous mode [ 1217.211003][T14968] veth0_vlan: left promiscuous mode [ 1218.732520][T14968] team0 (unregistering): Port device team_slave_1 removed [ 1218.815758][ T55] Bluetooth: hci2: command tx timeout [ 1218.869636][T14968] team0 (unregistering): Port device team_slave_0 removed [ 1220.371862][T23568] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1220.599495][T23506] chnl_net:caif_netlink_parms(): no params data found [ 1220.903253][ T55] Bluetooth: hci2: command tx timeout [ 1221.303823][T23506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.359398][T23506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.402751][T23506] bridge_slave_0: entered allmulticast mode [ 1221.449395][T23506] bridge_slave_0: entered promiscuous mode [ 1221.499314][T23506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.553008][T23506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.604213][T23506] bridge_slave_1: entered allmulticast mode [ 1221.663571][T23506] bridge_slave_1: entered promiscuous mode [ 1222.203535][T23506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.260478][T23506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.583455][T23506] team0: Port device team_slave_0 added [ 1222.731915][T23506] team0: Port device team_slave_1 added [ 1222.922749][T23506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.944090][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.006253][T23506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.066276][T23506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.083561][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.149993][T23506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.452928][T23506] hsr_slave_0: entered promiscuous mode [ 1223.495024][T23506] hsr_slave_1: entered promiscuous mode [ 1223.530822][T23506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.572288][T23506] Cannot create hsr debugfs directory [ 1225.980644][T23506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1226.066802][T23506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1226.178967][T23506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1226.231143][T23506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1226.815130][T23506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.972935][T23506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.072462][T14968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.079674][T14968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.192980][T14968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.200189][T14968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.289116][T23716] : Can't lookup blockdev [ 1228.391822][T23506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.826469][T23506] veth0_vlan: entered promiscuous mode [ 1229.912599][T23506] veth1_vlan: entered promiscuous mode [ 1230.199009][T23506] veth0_macvtap: entered promiscuous mode [ 1230.278254][T23506] veth1_macvtap: entered promiscuous mode [ 1230.687398][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.751650][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.827085][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.893164][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.956258][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.017875][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.072031][T23506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.111413][T23771] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3863'. [ 1231.220447][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.283648][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.337634][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.396990][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.441123][T23506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.485083][T23506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.538998][T23506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.651807][T23506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.719475][T23506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.753216][T23506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.787955][T23506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.171712][T14967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.230492][T14967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.353677][T14967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.402895][T14967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.018760][T23796] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1234.766322][ T55] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1234.860915][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3870'. [ 1237.386881][T23916] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1237.616308][T23911] FAULT_INJECTION: forcing a failure. [ 1237.616308][T23911] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.635392][T23911] CPU: 1 UID: 0 PID: 23911 Comm: syz.2.3884 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1237.635451][T23911] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1237.635465][T23911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1237.635486][T23911] Call Trace: [ 1237.635498][T23911] [ 1237.635512][T23911] dump_stack_lvl+0x16c/0x1f0 [ 1237.635586][T23911] should_fail_ex+0x512/0x640 [ 1237.635630][T23911] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1237.635674][T23911] should_failslab+0xc2/0x120 [ 1237.635715][T23911] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1237.635743][T23911] ? security_file_alloc+0x34/0x2b0 [ 1237.635779][T23911] security_file_alloc+0x34/0x2b0 [ 1237.635810][T23911] init_file+0x93/0x4c0 [ 1237.635842][T23911] alloc_empty_file+0x73/0x1e0 [ 1237.635873][T23911] path_openat+0xe0/0x2d40 [ 1237.635902][T23911] ? __x64_sys_openat+0x174/0x210 [ 1237.635933][T23911] ? do_syscall_64+0xcd/0x230 [ 1237.635965][T23911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.636000][T23911] ? __pfx_path_openat+0x10/0x10 [ 1237.636029][T23911] do_filp_open+0x20b/0x470 [ 1237.636052][T23911] ? __pfx_do_filp_open+0x10/0x10 [ 1237.636093][T23911] ? alloc_fd+0x471/0x7d0 [ 1237.636137][T23911] do_sys_openat2+0x11b/0x1d0 [ 1237.636172][T23911] ? __pfx_do_sys_openat2+0x10/0x10 [ 1237.636213][T23911] __x64_sys_openat+0x174/0x210 [ 1237.636245][T23911] ? __pfx___x64_sys_openat+0x10/0x10 [ 1237.636279][T23911] ? rcu_is_watching+0x12/0xc0 [ 1237.636309][T23911] do_syscall_64+0xcd/0x230 [ 1237.636342][T23911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.636365][T23911] RIP: 0033:0x7ff93778e969 [ 1237.636394][T23911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.636419][T23911] RSP: 002b:00007ff938594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1237.636443][T23911] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1237.636459][T23911] RDX: 00000000000d2082 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1237.636474][T23911] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1237.636488][T23911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.636502][T23911] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1237.636531][T23911] [ 1238.209499][T23927] ubi0: attaching mtd0 [ 1238.247615][T23927] ubi0: scanning is finished [ 1238.287322][T23927] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1238.458438][T23934] Invalid ELF header magic: != ELF [ 1238.617562][T23934] Invalid ELF header magic: != ELF [ 1238.669524][T23927] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1238.724746][T23941] program syz.2.3887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1239.821480][T23980] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3895'. [ 1240.290883][ T30] audit: type=1800 audit(4294967624.466:36): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3894" name="members" dev="configfs" ino=87583 res=0 errno=0 [ 1242.570287][T24021] Â: entered promiscuous mode [ 1243.870705][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.877147][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.488226][T24074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3909'. [ 1244.525506][T24074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.557562][T24074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.599177][T24074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.622837][T24074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.127929][T24140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3918'. [ 1248.229981][T24140] netlink: 13 bytes leftover after parsing attributes in process `syz.6.3918'. [ 1249.570446][T24171] netlink: 'syz.2.3928': attribute type 1 has an invalid length. [ 1250.027609][T24188] FAULT_INJECTION: forcing a failure. [ 1250.027609][T24188] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.105793][T24188] CPU: 1 UID: 0 PID: 24188 Comm: syz.2.3931 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1250.105837][T24188] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1250.105847][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1250.105862][T24188] Call Trace: [ 1250.105870][T24188] [ 1250.105879][T24188] dump_stack_lvl+0x16c/0x1f0 [ 1250.105916][T24188] should_fail_ex+0x512/0x640 [ 1250.105949][T24188] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1250.105979][T24188] should_failslab+0xc2/0x120 [ 1250.106007][T24188] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1250.106034][T24188] ? __pmd_alloc+0xc3/0x870 [ 1250.106074][T24188] __pmd_alloc+0xc3/0x870 [ 1250.106111][T24188] copy_page_range+0x420e/0x5fe0 [ 1250.106179][T24188] ? __pfx_copy_page_range+0x10/0x10 [ 1250.106217][T24188] ? mas_store+0x93a/0x10c0 [ 1250.106251][T24188] ? __pfx___might_resched+0x10/0x10 [ 1250.106288][T24188] ? __pfx_mas_store+0x10/0x10 [ 1250.106320][T24188] ? __vma_enter_locked+0x163/0x3f0 [ 1250.106346][T24188] ? down_write+0x14d/0x200 [ 1250.106398][T24188] copy_process+0x862b/0x91a0 [ 1250.106450][T24188] ? __pfx_copy_process+0x10/0x10 [ 1250.106482][T24188] ? try_to_wake_up+0xa2f/0x1680 [ 1250.106509][T24188] ? plist_check_head+0xa3/0x150 [ 1250.106533][T24188] ? find_held_lock+0x2b/0x80 [ 1250.106559][T24188] ? wake_up_q+0xb0/0x160 [ 1250.106577][T24188] ? do_raw_spin_unlock+0x172/0x230 [ 1250.106618][T24188] kernel_clone+0xfc/0x960 [ 1250.106647][T24188] ? __pfx_futex_wake+0x10/0x10 [ 1250.106676][T24188] ? __pfx_kernel_clone+0x10/0x10 [ 1250.106723][T24188] __do_sys_clone+0xce/0x120 [ 1250.106752][T24188] ? __pfx___do_sys_clone+0x10/0x10 [ 1250.106804][T24188] ? rcu_is_watching+0x12/0xc0 [ 1250.106833][T24188] do_syscall_64+0xcd/0x230 [ 1250.106867][T24188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.106891][T24188] RIP: 0033:0x7ff93778e969 [ 1250.106911][T24188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.106935][T24188] RSP: 002b:00007ff938593fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1250.106957][T24188] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1250.106973][T24188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1250.106988][T24188] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1250.107004][T24188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.107018][T24188] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1250.107051][T24188] [ 1252.256577][T24200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'. [ 1252.882865][T24222] zram: Added device: zram4 [ 1256.018836][T24315] ptrace attach of "./syz-executor exec"[17060] was attempted by "./syz-executor exec"[24315] [ 1257.514888][T24359] ksmbd: Unknown IPC event: 14, ignore. [ 1257.756784][T24373] net_ratelimit: 78 callbacks suppressed [ 1257.756812][T24373] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 1259.005632][T24401] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3960'. [ 1259.478929][T24408] zswap: compressor not available [ 1259.809018][T24426] FAULT_INJECTION: forcing a failure. [ 1259.809018][T24426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1259.859074][T24426] CPU: 0 UID: 0 PID: 24426 Comm: syz.2.3964 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1259.859132][T24426] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1259.859145][T24426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1259.859164][T24426] Call Trace: [ 1259.859175][T24426] [ 1259.859188][T24426] dump_stack_lvl+0x16c/0x1f0 [ 1259.859236][T24426] should_fail_ex+0x512/0x640 [ 1259.859286][T24426] should_fail_alloc_page+0xe7/0x130 [ 1259.859325][T24426] prepare_alloc_pages+0x3c2/0x610 [ 1259.859370][T24426] ? rcu_is_watching+0x12/0xc0 [ 1259.859408][T24426] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1259.859452][T24426] ? cgroup_rstat_updated+0x2a/0xb20 [ 1259.859511][T24426] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1259.859564][T24426] ? __lock_acquire+0x5ca/0x1ba0 [ 1259.859606][T24426] ? __lock_acquire+0x5ca/0x1ba0 [ 1259.859646][T24426] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1259.859690][T24426] ? policy_nodemask+0xea/0x4e0 [ 1259.859728][T24426] alloc_pages_mpol+0x1fb/0x550 [ 1259.859766][T24426] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1259.859802][T24426] ? __lock_acquire+0x5ca/0x1ba0 [ 1259.859844][T24426] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1259.859885][T24426] vma_alloc_folio_noprof+0xed/0x1e0 [ 1259.859929][T24426] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1259.859986][T24426] do_pte_missing+0x223d/0x3fb0 [ 1259.860037][T24426] __handle_mm_fault+0x103d/0x2a40 [ 1259.860079][T24426] ? __pfx___handle_mm_fault+0x10/0x10 [ 1259.860109][T24426] ? __pte_offset_map_lock+0x155/0x2f0 [ 1259.860151][T24426] ? find_held_lock+0x2b/0x80 [ 1259.860178][T24426] ? find_held_lock+0x2b/0x80 [ 1259.860232][T24426] handle_mm_fault+0x3fe/0xad0 [ 1259.860272][T24426] __get_user_pages+0x771/0x36f0 [ 1259.860331][T24426] ? __pfx_mt_find+0x10/0x10 [ 1259.860376][T24426] ? __pfx___get_user_pages+0x10/0x10 [ 1259.860451][T24426] populate_vma_page_range+0x278/0x3a0 [ 1259.860505][T24426] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1259.860556][T24426] ? __pfx_find_vma_intersection+0x10/0x10 [ 1259.860606][T24426] ? do_mmap+0x69c/0x11b0 [ 1259.860655][T24426] __mm_populate+0x1d8/0x380 [ 1259.860687][T24426] ? __pfx___mm_populate+0x10/0x10 [ 1259.860738][T24426] ? up_write+0x1b2/0x520 [ 1259.860786][T24426] vm_mmap_pgoff+0x362/0x450 [ 1259.860836][T24426] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1259.860890][T24426] ? __x64_sys_futex+0x1e0/0x4c0 [ 1259.860921][T24426] ? __x64_sys_futex+0x1e9/0x4c0 [ 1259.860960][T24426] ksys_mmap_pgoff+0x7d/0x5c0 [ 1259.861005][T24426] ? rcu_is_watching+0x12/0xc0 [ 1259.861035][T24426] __x64_sys_mmap+0x125/0x190 [ 1259.861072][T24426] do_syscall_64+0xcd/0x230 [ 1259.861115][T24426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.861146][T24426] RIP: 0033:0x7ff93778e969 [ 1259.861172][T24426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.861202][T24426] RSP: 002b:00007ff938594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1259.861231][T24426] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1259.861251][T24426] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 1259.861269][T24426] RBP: 00007ff937810ab1 R08: 0000000000000002 R09: 0000000000008000 [ 1259.861288][T24426] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1259.861306][T24426] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1259.861347][T24426] [ 1262.634484][ T30] audit: type=1326 audit(4294967646.816:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24500 comm="syz.4.3980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd82978e969 code=0x0 [ 1263.118412][T24478] Invalid ELF header magic: != ELF [ 1263.930441][T24527] Unable to find swap-space signature [ 1264.753878][T24553] FAULT_INJECTION: forcing a failure. [ 1264.753878][T24553] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.778488][T24553] CPU: 0 UID: 0 PID: 24553 Comm: syz.2.3992 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1264.778546][T24553] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1264.778558][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1264.778577][T24553] Call Trace: [ 1264.778588][T24553] [ 1264.778599][T24553] dump_stack_lvl+0x16c/0x1f0 [ 1264.778647][T24553] should_fail_ex+0x512/0x640 [ 1264.778688][T24553] ? __kvmalloc_node_noprof+0x122/0x600 [ 1264.778726][T24553] should_failslab+0xc2/0x120 [ 1264.778765][T24553] __kvmalloc_node_noprof+0x135/0x600 [ 1264.778800][T24553] ? io_alloc_cache_init+0x33/0x170 [ 1264.778828][T24553] ? skl_get_cdclk+0x6b0/0xc30 [ 1264.778874][T24553] ? io_alloc_cache_init+0x33/0x170 [ 1264.778902][T24553] io_alloc_cache_init+0x33/0x170 [ 1264.778935][T24553] io_uring_setup+0x5ff/0x1ff0 [ 1264.778980][T24553] ? __pfx_io_uring_setup+0x10/0x10 [ 1264.779051][T24553] ? rcu_is_watching+0x12/0xc0 [ 1264.779087][T24553] __x64_sys_io_uring_setup+0xc2/0x170 [ 1264.779138][T24553] do_syscall_64+0xcd/0x230 [ 1264.779185][T24553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.779216][T24553] RIP: 0033:0x7ff93778e969 [ 1264.779240][T24553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.779271][T24553] RSP: 002b:00007ff938573038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1264.779301][T24553] RAX: ffffffffffffffda RBX: 00007ff9379b6080 RCX: 00007ff93778e969 [ 1264.779321][T24553] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1264.779341][T24553] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1264.779360][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.779380][T24553] R13: 0000000000000000 R14: 00007ff9379b6080 R15: 00007ffc1569d288 [ 1264.779421][T24553] [ 1265.483492][T24645] FAULT_INJECTION: forcing a failure. [ 1265.483492][T24645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.505493][T24645] CPU: 0 UID: 0 PID: 24645 Comm: syz.6.3996 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1265.505548][T24645] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1265.505561][T24645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1265.505580][T24645] Call Trace: [ 1265.505590][T24645] [ 1265.505603][T24645] dump_stack_lvl+0x16c/0x1f0 [ 1265.505649][T24645] should_fail_ex+0x512/0x640 [ 1265.505698][T24645] _copy_from_user+0x2e/0xd0 [ 1265.505746][T24645] io_uring_setup+0xb4/0x1ff0 [ 1265.505790][T24645] ? __pfx_io_uring_setup+0x10/0x10 [ 1265.505825][T24645] ? __pfx_vfs_write+0x10/0x10 [ 1265.505857][T24645] ? do_sys_openat2+0x157/0x1d0 [ 1265.505897][T24645] ? __pfx_do_sys_openat2+0x10/0x10 [ 1265.505958][T24645] ? ksys_write+0x1b9/0x240 [ 1265.505986][T24645] ? __pfx_ksys_write+0x10/0x10 [ 1265.506014][T24645] ? rcu_is_watching+0x12/0xc0 [ 1265.506050][T24645] __x64_sys_io_uring_setup+0xc2/0x170 [ 1265.506100][T24645] do_syscall_64+0xcd/0x230 [ 1265.506147][T24645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.506183][T24645] RIP: 0033:0x7feaa3d8e969 [ 1265.506209][T24645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.506240][T24645] RSP: 002b:00007feaa4c4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1265.506271][T24645] RAX: ffffffffffffffda RBX: 00007feaa3fb5fa0 RCX: 00007feaa3d8e969 [ 1265.506292][T24645] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1265.506311][T24645] RBP: 00007feaa4c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.506330][T24645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.506350][T24645] R13: 0000000000000000 R14: 00007feaa3fb5fa0 R15: 00007ffeb5bd12e8 [ 1265.506390][T24645] [ 1267.637601][T24695] FAULT_INJECTION: forcing a failure. [ 1267.637601][T24695] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.720774][T24695] CPU: 0 UID: 0 PID: 24695 Comm: syz.2.4009 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1267.720831][T24695] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1267.720845][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1267.720864][T24695] Call Trace: [ 1267.720875][T24695] [ 1267.720887][T24695] dump_stack_lvl+0x16c/0x1f0 [ 1267.720934][T24695] should_fail_ex+0x512/0x640 [ 1267.720977][T24695] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1267.721029][T24695] should_failslab+0xc2/0x120 [ 1267.721066][T24695] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1267.721118][T24695] ? io_uring_setup+0x24f/0x1ff0 [ 1267.721163][T24695] io_uring_setup+0x24f/0x1ff0 [ 1267.721205][T24695] ? __pfx_io_uring_setup+0x10/0x10 [ 1267.721242][T24695] ? __pfx_vfs_write+0x10/0x10 [ 1267.721273][T24695] ? do_sys_openat2+0x157/0x1d0 [ 1267.721311][T24695] ? __pfx_do_sys_openat2+0x10/0x10 [ 1267.721373][T24695] ? ksys_write+0x1b9/0x240 [ 1267.721402][T24695] ? __pfx_ksys_write+0x10/0x10 [ 1267.721429][T24695] ? rcu_is_watching+0x12/0xc0 [ 1267.721465][T24695] __x64_sys_io_uring_setup+0xc2/0x170 [ 1267.721507][T24695] do_syscall_64+0xcd/0x230 [ 1267.721554][T24695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.721586][T24695] RIP: 0033:0x7ff93778e969 [ 1267.721611][T24695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1267.721643][T24695] RSP: 002b:00007ff938594038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1267.721673][T24695] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1267.721694][T24695] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1267.721715][T24695] RBP: 00007ff938594090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.721742][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.721761][T24695] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1267.721806][T24695] [ 1269.048843][T24722] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1269.101031][T24722] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1270.077303][T24744] tipc: Started in network mode [ 1270.082350][T24744] tipc: Node identity ee00, cluster identity 4711 [ 1270.089865][T24744] tipc: Node number set to 60928 [ 1270.953082][T24764] Invalid ELF header magic: != ELF [ 1271.419615][T14126] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1272.978061][T24797] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1274.136322][T24817] FAULT_INJECTION: forcing a failure. [ 1274.136322][T24817] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.183894][T24817] CPU: 1 UID: 0 PID: 24817 Comm: syz.6.4033 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1274.183956][T24817] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1274.183970][T24817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1274.183989][T24817] Call Trace: [ 1274.184000][T24817] [ 1274.184014][T24817] dump_stack_lvl+0x16c/0x1f0 [ 1274.184066][T24817] should_fail_ex+0x512/0x640 [ 1274.184112][T24817] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1274.184153][T24817] should_failslab+0xc2/0x120 [ 1274.184193][T24817] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1274.184229][T24817] ? find_held_lock+0x2b/0x80 [ 1274.184259][T24817] ? __d_alloc+0x31/0xaa0 [ 1274.184299][T24817] __d_alloc+0x31/0xaa0 [ 1274.184340][T24817] d_alloc+0x4a/0x1e0 [ 1274.184377][T24817] d_alloc_parallel+0xe3/0x12e0 [ 1274.184439][T24817] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1274.184488][T24817] ? lockdep_init_map_type+0x5c/0x280 [ 1274.184533][T24817] ? lockdep_init_map_type+0x5c/0x280 [ 1274.184585][T24817] __lookup_slow+0x193/0x460 [ 1274.184628][T24817] ? __pfx___lookup_slow+0x10/0x10 [ 1274.184678][T24817] ? __SetPageMovable+0x2a0/0x4a0 [ 1274.184738][T24817] ? __SetPageMovable+0x2a0/0x4a0 [ 1274.184802][T24817] ? d_lookup+0xe7/0x190 [ 1274.184854][T24817] lookup_one_len+0x17f/0x1b0 [ 1274.184896][T24817] ? __pfx_lookup_one_len+0x10/0x10 [ 1274.184942][T24817] ? mntput+0x10/0x90 [ 1274.184994][T24817] start_creating.part.0+0x12f/0x3a0 [ 1274.185045][T24817] debugfs_create_dir+0x6c/0x5f0 [ 1274.185097][T24817] ptp_open+0x307/0x520 [ 1274.185134][T24817] ? __pfx_ptp_open+0x10/0x10 [ 1274.185177][T24817] ? __pfx_ptp_open+0x10/0x10 [ 1274.185207][T24817] posix_clock_open+0x178/0x290 [ 1274.185243][T24817] ? __pfx_posix_clock_open+0x10/0x10 [ 1274.185277][T24817] chrdev_open+0x231/0x6a0 [ 1274.185310][T24817] ? __pfx_apparmor_file_open+0x10/0x10 [ 1274.185350][T24817] ? __pfx_chrdev_open+0x10/0x10 [ 1274.185386][T24817] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1274.185442][T24817] do_dentry_open+0x741/0x1c10 [ 1274.185476][T24817] ? __pfx_chrdev_open+0x10/0x10 [ 1274.185517][T24817] vfs_open+0x82/0x3f0 [ 1274.185565][T24817] path_openat+0x1e5e/0x2d40 [ 1274.185612][T24817] ? __pfx_path_openat+0x10/0x10 [ 1274.185655][T24817] do_filp_open+0x20b/0x470 [ 1274.185686][T24817] ? __pfx_do_filp_open+0x10/0x10 [ 1274.185748][T24817] ? alloc_fd+0x471/0x7d0 [ 1274.185819][T24817] do_sys_openat2+0x11b/0x1d0 [ 1274.185862][T24817] ? __pfx_do_sys_openat2+0x10/0x10 [ 1274.185921][T24817] __x64_sys_openat+0x174/0x210 [ 1274.185967][T24817] ? __pfx___x64_sys_openat+0x10/0x10 [ 1274.186013][T24817] ? rcu_is_watching+0x12/0xc0 [ 1274.186063][T24817] do_syscall_64+0xcd/0x230 [ 1274.186112][T24817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.186144][T24817] RIP: 0033:0x7feaa3d8e969 [ 1274.186176][T24817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.186210][T24817] RSP: 002b:00007feaa4bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1274.186242][T24817] RAX: ffffffffffffffda RBX: 00007feaa3fb6320 RCX: 00007feaa3d8e969 [ 1274.186264][T24817] RDX: 0000000000000440 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1274.186285][T24817] RBP: 00007feaa3e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1274.186305][T24817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.186324][T24817] R13: 0000000000000000 R14: 00007feaa3fb6320 R15: 00007ffeb5bd12e8 [ 1274.186368][T24817] [ 1274.342172][T24819] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1274.344219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.544077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.550095][ C1] hrtimer: interrupt took 363706855 ns [ 1274.596181][T24819] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1274.650144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.736150][T24820] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1275.017573][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1276.232596][T24854] Invalid ELF header magic: != ELF [ 1277.436451][T24885] ima: policy update failed [ 1277.444256][ T30] audit: type=1802 audit(4294967661.626:38): pid=24885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4050" res=0 errno=0 [ 1278.373010][T24884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1278.379954][T24884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.387405][T24884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1278.393753][T24884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1278.406251][T24884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1278.412369][T24884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1278.424798][T24884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1278.969286][T24916] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 1279.126156][T24919] random: crng reseeded on system resumption [ 1279.935774][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 1280.415798][T14126] Bluetooth: hci1: command 0x0c1a tx timeout [ 1280.421940][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 1280.495476][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1280.822470][T24958] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1282.346370][T24988] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1282.400602][T24988] mac80211_hwsim hwsim39 : renamed from wlan0 (while UP) [ 1282.495476][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 1282.575428][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1282.927779][T25002] netlink: 'syz.6.4074': attribute type 1 has an invalid length. [ 1283.371458][T25002] Invalid ELF header magic: != ELF [ 1283.609395][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1284.655411][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1284.813275][T24971] kexec: Could not allocate control_code_buffer [ 1285.566657][T25049] vivid-007: ================= START STATUS ================= [ 1285.588330][T25049] vivid-007: Generate PTS: true [ 1285.693527][T25049] vivid-007: Generate SCR: true [ 1285.699042][T25049] tpg source WxH: 640x360 (Y'CbCr) [ 1285.704443][T25049] tpg field: 1 [ 1285.714810][T25049] tpg crop: (0,0)/640x360 [ 1285.719781][T25049] tpg compose: (0,0)/640x360 [ 1285.724512][T25049] tpg colorspace: 8 [ 1285.732176][T25049] tpg transfer function: 0/0 [ 1285.778357][T25049] tpg Y'CbCr encoding: 0/0 [ 1285.782989][T25049] tpg quantization: 0/0 [ 1285.795652][T25049] tpg RGB range: 0/2 [ 1285.820365][T25049] vivid-007: ================== END STATUS ================== [ 1286.377958][T25063] Invalid ELF header magic: != ELF [ 1286.805933][T25076] random: crng reseeded on system resumption [ 1287.873491][T25092] MTRR 1 not used [ 1288.795038][T25112] CIFS: VFS: Unsupported security flags: 0x10 [ 1289.126925][T25118] FAULT_INJECTION: forcing a failure. [ 1289.126925][T25118] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.145151][T25118] CPU: 0 UID: 0 PID: 25118 Comm: syz.4.4099 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1289.145208][T25118] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1289.145222][T25118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1289.145241][T25118] Call Trace: [ 1289.145251][T25118] [ 1289.145264][T25118] dump_stack_lvl+0x16c/0x1f0 [ 1289.145314][T25118] should_fail_ex+0x512/0x640 [ 1289.145357][T25118] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1289.145396][T25118] should_failslab+0xc2/0x120 [ 1289.145432][T25118] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1289.145460][T25118] ? __pfx___might_resched+0x10/0x10 [ 1289.145493][T25118] ? __anon_vma_prepare+0xae/0x5e0 [ 1289.145531][T25118] __anon_vma_prepare+0xae/0x5e0 [ 1289.145561][T25118] ? __pfx___pte_alloc+0x10/0x10 [ 1289.145609][T25118] __vmf_anon_prepare+0x11c/0x240 [ 1289.145657][T25118] do_pte_missing+0x1194/0x3fb0 [ 1289.145694][T25118] ? _raw_spin_unlock+0x28/0x50 [ 1289.145726][T25118] ? __pmd_alloc+0x3c2/0x870 [ 1289.145774][T25118] __handle_mm_fault+0x103d/0x2a40 [ 1289.145817][T25118] ? __pfx___handle_mm_fault+0x10/0x10 [ 1289.145884][T25118] handle_mm_fault+0x3fe/0xad0 [ 1289.145923][T25118] __get_user_pages+0x771/0x36f0 [ 1289.145981][T25118] ? __pfx_mt_find+0x10/0x10 [ 1289.146027][T25118] ? __pfx___get_user_pages+0x10/0x10 [ 1289.146090][T25118] populate_vma_page_range+0x278/0x3a0 [ 1289.146152][T25118] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1289.146203][T25118] ? __pfx_find_vma_intersection+0x10/0x10 [ 1289.146253][T25118] ? do_mmap+0x69c/0x11b0 [ 1289.146302][T25118] __mm_populate+0x1d8/0x380 [ 1289.146334][T25118] ? __pfx___mm_populate+0x10/0x10 [ 1289.146387][T25118] ? up_write+0x1b2/0x520 [ 1289.146438][T25118] vm_mmap_pgoff+0x362/0x450 [ 1289.146488][T25118] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1289.146544][T25118] ? __x64_sys_futex+0x1e0/0x4c0 [ 1289.146575][T25118] ? __x64_sys_futex+0x1e9/0x4c0 [ 1289.146615][T25118] ksys_mmap_pgoff+0x7d/0x5c0 [ 1289.146661][T25118] ? rcu_is_watching+0x12/0xc0 [ 1289.146692][T25118] __x64_sys_mmap+0x125/0x190 [ 1289.146725][T25118] do_syscall_64+0xcd/0x230 [ 1289.146769][T25118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.146800][T25118] RIP: 0033:0x7fd82978e969 [ 1289.146825][T25118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.146866][T25118] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1289.146896][T25118] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1289.146917][T25118] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1289.146937][T25118] RBP: 00007fd829810ab1 R08: 0000000000000002 R09: 0000000000008000 [ 1289.146957][T25118] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1289.146978][T25118] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1289.147021][T25118] [ 1290.208200][T25130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1290.229973][T25130] ipvlan1: entered allmulticast mode [ 1290.307456][T25130] veth0_vlan: entered allmulticast mode [ 1290.330869][T25136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1290.522943][T25130] Invalid ELF header magic: != ELF [ 1291.982201][T25171] zswap: compressor not available [ 1294.499064][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 1295.547364][T25256] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1295.551273][T25257] ima: policy update failed [ 1295.593236][ T30] audit: type=1802 audit(4294967313.130:39): pid=25257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4128" res=0 errno=0 [ 1298.819923][T25322] zram: Added device: zram5 [ 1299.829103][T25371] random: crng reseeded on system resumption [ 1301.486468][T25454] Invalid ELF header magic: != ELF [ 1302.370698][T25508] FAULT_INJECTION: forcing a failure. [ 1302.370698][T25508] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.401174][T25508] CPU: 0 UID: 0 PID: 25508 Comm: syz.2.4165 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1302.401246][T25508] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1302.401261][T25508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1302.401281][T25508] Call Trace: [ 1302.401292][T25508] [ 1302.401306][T25508] dump_stack_lvl+0x16c/0x1f0 [ 1302.401355][T25508] should_fail_ex+0x512/0x640 [ 1302.401402][T25508] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1302.401462][T25508] should_failslab+0xc2/0x120 [ 1302.401502][T25508] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1302.401557][T25508] ? cgroup_file_open+0x93/0x360 [ 1302.401610][T25508] cgroup_file_open+0x93/0x360 [ 1302.401656][T25508] ? __pfx_cgroup_file_open+0x10/0x10 [ 1302.401707][T25508] kernfs_fop_open+0x8c6/0xda0 [ 1302.401751][T25508] ? file_set_fsnotify_mode_from_watchers+0x81/0x640 [ 1302.401808][T25508] do_dentry_open+0x741/0x1c10 [ 1302.401844][T25508] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1302.401903][T25508] vfs_open+0x82/0x3f0 [ 1302.401950][T25508] path_openat+0x1e5e/0x2d40 [ 1302.401999][T25508] ? __pfx_path_openat+0x10/0x10 [ 1302.402033][T25508] ? __lock_acquire+0xaa4/0x1ba0 [ 1302.402079][T25508] do_filp_open+0x20b/0x470 [ 1302.402111][T25508] ? __pfx_do_filp_open+0x10/0x10 [ 1302.402174][T25508] ? _raw_spin_unlock+0x28/0x50 [ 1302.402210][T25508] ? alloc_fd+0x471/0x7d0 [ 1302.402272][T25508] do_sys_openat2+0x11b/0x1d0 [ 1302.402315][T25508] ? __pfx_do_sys_openat2+0x10/0x10 [ 1302.402375][T25508] __x64_sys_open+0x153/0x1e0 [ 1302.402420][T25508] ? __pfx___x64_sys_open+0x10/0x10 [ 1302.402472][T25508] ? rcu_is_watching+0x12/0xc0 [ 1302.402507][T25508] do_syscall_64+0xcd/0x230 [ 1302.402554][T25508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.402587][T25508] RIP: 0033:0x7ff93778e969 [ 1302.402614][T25508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.402646][T25508] RSP: 002b:00007ff938552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1302.402677][T25508] RAX: ffffffffffffffda RBX: 00007ff9379b6160 RCX: 00007ff93778e969 [ 1302.402700][T25508] RDX: 0000000000000007 RSI: 0000000000101800 RDI: 0000200000000000 [ 1302.402721][T25508] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1302.402741][T25508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.402761][T25508] R13: 0000000000000000 R14: 00007ff9379b6160 R15: 00007ffc1569d288 [ 1302.402803][T25508] [ 1302.651365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.303795][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.310448][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.354991][T25568] FAULT_INJECTION: forcing a failure. [ 1305.354991][T25568] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.368599][T25568] CPU: 0 UID: 0 PID: 25568 Comm: syz.2.4180 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1305.368658][T25568] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1305.368672][T25568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1305.368691][T25568] Call Trace: [ 1305.368703][T25568] [ 1305.368716][T25568] dump_stack_lvl+0x16c/0x1f0 [ 1305.368765][T25568] should_fail_ex+0x512/0x640 [ 1305.368809][T25568] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1305.368849][T25568] should_failslab+0xc2/0x120 [ 1305.368890][T25568] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1305.368928][T25568] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1305.368972][T25568] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1305.369019][T25568] idr_get_free+0x528/0xa30 [ 1305.369077][T25568] idr_alloc_u32+0x190/0x2f0 [ 1305.369121][T25568] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1305.369167][T25568] ? __pfx___mutex_lock+0x10/0x10 [ 1305.369231][T25568] idr_alloc+0xc0/0x130 [ 1305.369270][T25568] ? __pfx_idr_alloc+0x10/0x10 [ 1305.369310][T25568] ? __radix_tree_lookup+0x21f/0x2c0 [ 1305.369357][T25568] ppp_dev_configure+0x905/0xc80 [ 1305.369408][T25568] ppp_ioctl+0x17e0/0x2660 [ 1305.369451][T25568] ? find_held_lock+0x2b/0x80 [ 1305.369483][T25568] ? __pfx_ppp_ioctl+0x10/0x10 [ 1305.369530][T25568] ? __fget_files+0x20e/0x3c0 [ 1305.369587][T25568] ? __pfx_ppp_ioctl+0x10/0x10 [ 1305.369630][T25568] __x64_sys_ioctl+0x190/0x200 [ 1305.369679][T25568] do_syscall_64+0xcd/0x230 [ 1305.369726][T25568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.369759][T25568] RIP: 0033:0x7ff93778e969 [ 1305.369786][T25568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.369819][T25568] RSP: 002b:00007ff938594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1305.369851][T25568] RAX: ffffffffffffffda RBX: 00007ff9379b5fa0 RCX: 00007ff93778e969 [ 1305.369872][T25568] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 1305.369893][T25568] RBP: 00007ff937810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1305.369913][T25568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.369934][T25568] R13: 0000000000000000 R14: 00007ff9379b5fa0 R15: 00007ffc1569d288 [ 1305.369979][T25568] [ 1306.322610][T25592] netlink: 'syz.2.4184': attribute type 10 has an invalid length. [ 1306.322644][T25592] netlink: 230 bytes leftover after parsing attributes in process `syz.2.4184'. [ 1306.413156][T25592] team0: Port device team_slave_1 removed [ 1306.816655][T25615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1306.982490][T25615] bond0: (slave bond_slave_1): Releasing backup interface [ 1309.651123][T25670] FAULT_INJECTION: forcing a failure. [ 1309.651123][T25670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.952117][T25670] CPU: 1 UID: 0 PID: 25670 Comm: syz.4.4197 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1309.952177][T25670] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1309.952190][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1309.952209][T25670] Call Trace: [ 1309.952219][T25670] [ 1309.952232][T25670] dump_stack_lvl+0x16c/0x1f0 [ 1309.952278][T25670] should_fail_ex+0x512/0x640 [ 1309.952328][T25670] _copy_from_user+0x2e/0xd0 [ 1309.952377][T25670] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1309.952441][T25670] snd_rawmidi_write+0x26e/0xc10 [ 1309.952500][T25670] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1309.952551][T25670] ? __pfx_default_wake_function+0x10/0x10 [ 1309.952586][T25670] ? bpf_lsm_file_permission+0x9/0x10 [ 1309.952636][T25670] ? security_file_permission+0x71/0x210 [ 1309.952679][T25670] ? rw_verify_area+0xcf/0x680 [ 1309.952731][T25670] vfs_write+0x25c/0x1180 [ 1309.952759][T25670] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1309.952817][T25670] ? __pfx_vfs_write+0x10/0x10 [ 1309.952843][T25670] ? find_held_lock+0x2b/0x80 [ 1309.952875][T25670] ? __fget_files+0x204/0x3c0 [ 1309.952931][T25670] ? __fget_files+0x20e/0x3c0 [ 1309.953002][T25670] ksys_write+0x205/0x240 [ 1309.953032][T25670] ? __pfx_ksys_write+0x10/0x10 [ 1309.953059][T25670] ? rcu_is_watching+0x12/0xc0 [ 1309.953100][T25670] do_syscall_64+0xcd/0x230 [ 1309.953147][T25670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.953180][T25670] RIP: 0033:0x7fd82978e969 [ 1309.953206][T25670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.953239][T25670] RSP: 002b:00007fd82a520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1309.953270][T25670] RAX: ffffffffffffffda RBX: 00007fd8299b6160 RCX: 00007fd82978e969 [ 1309.953291][T25670] RDX: 000000000000a3d9 RSI: 0000200000000400 RDI: 0000000000000009 [ 1309.953312][T25670] RBP: 00007fd829810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1309.953332][T25670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.953352][T25670] R13: 0000000000000000 R14: 00007fd8299b6160 R15: 00007ffead7fd1c8 [ 1309.953393][T25670] [ 1312.614210][T25731] kafs: addr_prefs: Invalid Command [ 1313.392802][T25743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1313.982376][T25745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1317.573085][T25812] FAULT_INJECTION: forcing a failure. [ 1317.573085][T25812] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1317.597550][T25812] CPU: 1 UID: 0 PID: 25812 Comm: syz.4.4230 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1317.597607][T25812] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1317.597621][T25812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1317.597639][T25812] Call Trace: [ 1317.597650][T25812] [ 1317.597662][T25812] dump_stack_lvl+0x16c/0x1f0 [ 1317.597710][T25812] should_fail_ex+0x512/0x640 [ 1317.597762][T25812] get_futex_key+0x49e/0x1000 [ 1317.597800][T25812] ? __pfx_get_futex_key+0x10/0x10 [ 1317.597838][T25812] ? kasan_save_track+0x14/0x30 [ 1317.597875][T25812] ? __kasan_kmalloc+0xaa/0xb0 [ 1317.597916][T25812] futex_lock_pi+0x27c/0x7b0 [ 1317.597963][T25812] ? preempt_schedule_common+0x44/0xc0 [ 1317.598010][T25812] ? __pfx_futex_lock_pi+0x10/0x10 [ 1317.598081][T25812] ? plist_check_head+0xa3/0x150 [ 1317.598118][T25812] ? find_held_lock+0x2b/0x80 [ 1317.598165][T25812] ? futex_wake+0x18d/0x4e0 [ 1317.598214][T25812] ? __pfx_futex_wake_mark+0x10/0x10 [ 1317.598267][T25812] ? do_writev+0x218/0x330 [ 1317.598331][T25812] do_futex+0x11a/0x350 [ 1317.598370][T25812] ? __pfx_do_futex+0x10/0x10 [ 1317.598405][T25812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1317.598464][T25812] __x64_sys_futex+0x1e0/0x4c0 [ 1317.598505][T25812] ? __pfx___x64_sys_futex+0x10/0x10 [ 1317.598546][T25812] ? rcu_is_watching+0x12/0xc0 [ 1317.598591][T25812] do_syscall_64+0xcd/0x230 [ 1317.598640][T25812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.598675][T25812] RIP: 0033:0x7fd82978e969 [ 1317.598704][T25812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.598739][T25812] RSP: 002b:00007fd82a562038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1317.598774][T25812] RAX: ffffffffffffffda RBX: 00007fd8299b5fa0 RCX: 00007fd82978e969 [ 1317.598797][T25812] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000000 [ 1317.598819][T25812] RBP: 00007fd829810ab1 R08: 0000000000000000 R09: 0000000000000006 [ 1317.598841][T25812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.598864][T25812] R13: 0000000000000000 R14: 00007fd8299b5fa0 R15: 00007ffead7fd1c8 [ 1317.598908][T25812] [ 1317.602878][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1319.380995][T25843] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1319.717057][T25849] can: request_module (can-proto-0) failed. [ 1321.217517][T25889] random: crng reseeded on system resumption [ 1324.399738][T25926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1325.000525][T25928] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1325.406989][T25946] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1325.468156][T25947] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1335.739095][T26108] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4292'. [ 1337.687240][T26134] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1338.950025][T26164] netlink: 'syz.0.4304': attribute type 4 has an invalid length. [ 1339.007273][T26164] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1339.530093][T26181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1339.697337][T26181] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 1340.970020][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4321'. [ 1342.137899][T26245] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1345.555400][T26340] netlink: 'syz.2.4342': attribute type 4 has an invalid length. [ 1345.581570][T26340] netlink: 314 bytes leftover after parsing attributes in process `syz.2.4342'. [ 1346.012077][T26331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1346.078417][T26331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1346.128838][T26331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1346.141238][T26331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1347.695366][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 1348.098425][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 1348.182639][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 1348.185248][T14126] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.977581][T26396] netlink: 'syz.6.4352': attribute type 4 has an invalid length. [ 1349.001597][T26396] netlink: 314 bytes leftover after parsing attributes in process `syz.6.4352'. [ 1350.727542][T26423] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4358'. [ 1351.366585][T26431] lo: entered allmulticast mode [ 1351.462990][T26432] lo: left allmulticast mode [ 1352.322639][T26443] bond0: option all_slaves_active: invalid value () [ 1353.519518][T14126] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1353.643384][ T30] audit: type=1800 audit(4294967314.008:40): pid=26462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4366" name="dbroot" dev="configfs" ino=104996 res=0 errno=0 [ 1356.211310][T26493] lo: entered allmulticast mode [ 1356.312504][T26498] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1356.359999][T26487] lo: left allmulticast mode [ 1357.124024][T26502] netlink: 'syz.0.4375': attribute type 27 has an invalid length. [ 1357.178565][T26502] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4375'. [ 1360.937533][T26566] can: request_module (can-proto-0) failed. [ 1362.111997][T26606] random: crng reseeded on system resumption [ 1364.107581][ T30] audit: type=1800 audit(4294967324.458:41): pid=26627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4400" name="mtdblock0" dev="tmpfs" ino=2715 res=0 errno=0 [ 1364.169381][T14126] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1366.753901][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.760363][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.535481][T14126] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1369.835804][T26715] random: crng reseeded on system resumption [ 1372.021872][T26748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1377.222558][T26821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4443'. [ 1377.798442][T26829] Invalid ELF header magic: != ELF [ 1379.500059][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1381.508204][T26909] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1382.575069][T26933] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 1387.823584][T27007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4478'. [ 1388.265564][T27028] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1389.731214][T27058] netlink: zone id is out of range [ 1389.775785][T27058] netlink: zone id is out of range [ 1389.855340][T27058] netlink: zone id is out of range [ 1389.875128][T27058] netlink: zone id is out of range [ 1389.925320][T27058] netlink: zone id is out of range [ 1389.931022][T27058] netlink: zone id is out of range [ 1389.961721][T27058] netlink: zone id is out of range [ 1389.985686][T27058] netlink: zone id is out of range [ 1390.045379][T27058] netlink: zone id is out of range [ 1390.051492][T27058] netlink: zone id is out of range [ 1390.840211][T27081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1393.328357][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4508'. [ 1394.227161][T27159] netlink: 'syz.6.4512': attribute type 4 has an invalid length. [ 1395.874654][T27180] Invalid ELF header magic: != ELF [ 1396.720608][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1396.745651][T27206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1397.930938][T14126] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1400.015809][T14126] Bluetooth: hci3: command 0x0406 tx timeout [ 1400.656568][T27282] net_ratelimit: 10 callbacks suppressed [ 1400.656599][T27282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1400.669670][T27282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1401.217150][T27299] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4549'. [ 1406.231595][T27381] could not allocate digest TFM handle binfmt_misc [ 1406.699286][T27393] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4566'. [ 1406.818705][T27397] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4566'. [ 1406.888331][T27395] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4565'. [ 1408.977808][T27465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4579'. [ 1409.125551][T27465] caif0: entered promiscuous mode [ 1409.161679][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 1412.102396][T27539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1412.874765][T27553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4600'. [ 1418.565766][T27606] Invalid ELF header magic: != ELF [ 1418.746917][T27614] Â: entered promiscuous mode [ 1418.889947][T27606] Invalid ELF header magic: != ELF [ 1421.999914][T27666] Â: entered promiscuous mode [ 1422.103835][T27677] Invalid ELF header magic: != ELF [ 1422.192816][T27673] Invalid ELF header magic: != ELF [ 1425.309480][T27756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4647'. [ 1426.246586][T14126] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1426.246630][T14126] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1426.262460][T14126] Bluetooth: hci3: adv larger than maximum supported [ 1426.262521][T14126] Bluetooth: hci3: adv larger than maximum supported [ 1426.741391][T24799] ------------[ cut here ]------------ [ 1426.753946][T24799] ODEBUG: free active (active state 0) object: ffff88808794d248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1426.777685][T24799] WARNING: CPU: 1 PID: 24799 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1426.787442][T24799] Modules linked in: [ 1426.791511][T24799] CPU: 1 UID: 0 PID: 24799 Comm: syz.0.4030 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1426.805514][T24799] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1426.811533][T24799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1426.821815][T24799] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1426.827788][T24799] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 78 f4 8b 4c 89 e6 48 c7 c7 40 6d f4 8b e8 4f b8 a7 fc 90 <0f> 0b 90 90 58 83 05 06 74 b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1426.847518][T24799] RSP: 0018:ffffc9000c6cf768 EFLAGS: 00010286 [ 1426.853663][T24799] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 1426.862095][T24799] RDX: ffff888046b1da00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 1426.870682][T24799] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1426.879121][T24799] R10: 0000000000000001 R11: fffffffffffebe70 R12: ffffffff8bf473e0 [ 1426.887688][T24799] R13: ffffffff8b8fc600 R14: ffffffff8a7599b0 R15: ffffc9000c6cf868 [ 1426.895813][T24799] FS: 0000000000000000(0000) GS:ffff888124aed000(0000) knlGS:0000000000000000 [ 1426.904798][T24799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1426.911497][T24799] CR2: 00005571829e9680 CR3: 00000000688f2000 CR4: 00000000003526f0 [ 1426.919570][T24799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1426.927660][T24799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1426.935733][T24799] Call Trace: [ 1426.939048][T24799] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1426.942020][T24799] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1426.947580][T24799] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1426.953456][T24799] debug_check_no_obj_freed+0x4b7/0x600 [ 1426.959116][T24799] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1426.965322][T24799] ? rcu_is_watching+0x12/0xc0 [ 1426.970176][T24799] ? kmem_cache_free+0x2d4/0x4d0 [ 1426.975181][T24799] kfree+0x291/0x4d0 [ 1426.979207][T24799] ? hci_release_dev+0x4d8/0x600 [ 1426.984231][T24799] hci_release_dev+0x4d8/0x600 [ 1426.989233][T24799] ? __pfx_hci_release_dev+0x10/0x10 [ 1426.994593][T24799] ? rcu_is_watching+0x12/0xc0 [ 1426.999480][T24799] ? kfree+0x252/0x4d0 [ 1427.003618][T24799] bt_host_release+0x6a/0xb0 [ 1427.008324][T24799] ? __pfx_bt_host_release+0x10/0x10 [ 1427.013696][T24799] device_release+0xa1/0x240 [ 1427.018415][T24799] kobject_put+0x1e4/0x5a0 [ 1427.022893][T24799] ? __pfx_vhci_release+0x10/0x10 [ 1427.028010][T24799] put_device+0x1f/0x30 [ 1427.032230][T24799] vhci_release+0x81/0xf0 [ 1427.036860][T24799] __fput+0x3ff/0xb70 [ 1427.040909][T24799] task_work_run+0x14d/0x240 [ 1427.045711][T24799] ? __pfx_task_work_run+0x10/0x10 [ 1427.050909][T24799] do_exit+0xafb/0x2c30 [ 1427.055139][T24799] ? __pfx_do_exit+0x10/0x10 [ 1427.059895][T24799] ? cgroup_update_frozen_flag+0x107/0x210 [ 1427.065792][T24799] ? find_held_lock+0x2b/0x80 [ 1427.070521][T24799] do_group_exit+0xd3/0x2a0 [ 1427.075090][T24799] get_signal+0x2673/0x26d0 [ 1427.079741][T24799] ? hrtimer_nanosleep+0x187/0x380 [ 1427.084941][T24799] ? __pfx_get_signal+0x10/0x10 [ 1427.089900][T24799] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1427.095176][T24799] arch_do_signal_or_restart+0x8f/0x7a0 [ 1427.100838][T24799] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1427.107122][T24799] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1427.113356][T24799] syscall_exit_to_user_mode+0x150/0x2a0 [ 1427.119095][T24799] do_syscall_64+0xda/0x230 [ 1427.123673][T24799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.129675][T24799] RIP: 0033:0x7f6503bc1225 [ 1427.134135][T24799] Code: Unable to access opcode bytes at 0x7f6503bc11fb. [ 1427.141249][T24799] RSP: 002b:00007f6504983f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1427.149770][T24799] RAX: fffffffffffffdfc RBX: 00007f6503db6160 RCX: 00007f6503bc1225 [ 1427.157868][T24799] RDX: 00007f6504983fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.165928][T24799] RBP: 00007f6503c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1427.173951][T24799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1427.182009][T24799] R13: 0000000000000001 R14: 00007f6503db6160 R15: 00007ffd3da0d9d8 [ 1427.190103][T24799] [ 1427.193169][T24799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1427.200498][T24799] CPU: 1 UID: 0 PID: 24799 Comm: syz.0.4030 Tainted: G U I 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1427.214190][T24799] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 1427.220202][T24799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1427.230301][T24799] Call Trace: [ 1427.233709][T24799] [ 1427.236770][T24799] dump_stack_lvl+0x3d/0x1f0 [ 1427.241431][T24799] panic+0x71c/0x800 [ 1427.245401][T24799] ? __pfx_panic+0x10/0x10 [ 1427.249888][T24799] ? show_trace_log_lvl+0x29b/0x3e0 [ 1427.255156][T24799] ? check_panic_on_warn+0x1f/0xb0 [ 1427.260328][T24799] ? debug_print_object+0x1a2/0x2b0 [ 1427.265584][T24799] check_panic_on_warn+0xab/0xb0 [ 1427.270571][T24799] __warn+0xf6/0x3c0 [ 1427.274511][T24799] ? debug_print_object+0x1a2/0x2b0 [ 1427.279862][T24799] report_bug+0x3c3/0x580 [ 1427.284259][T24799] ? debug_print_object+0x1a2/0x2b0 [ 1427.289521][T24799] handle_bug+0x184/0x210 [ 1427.293930][T24799] exc_invalid_op+0x17/0x50 [ 1427.298506][T24799] asm_exc_invalid_op+0x1a/0x20 [ 1427.303427][T24799] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1427.309321][T24799] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 78 f4 8b 4c 89 e6 48 c7 c7 40 6d f4 8b e8 4f b8 a7 fc 90 <0f> 0b 90 90 58 83 05 06 74 b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1427.329028][T24799] RSP: 0018:ffffc9000c6cf768 EFLAGS: 00010286 [ 1427.335136][T24799] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 1427.343153][T24799] RDX: ffff888046b1da00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 1427.351162][T24799] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1427.359162][T24799] R10: 0000000000000001 R11: fffffffffffebe70 R12: ffffffff8bf473e0 [ 1427.367169][T24799] R13: ffffffff8b8fc600 R14: ffffffff8a7599b0 R15: ffffc9000c6cf868 [ 1427.375180][T24799] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1427.380708][T24799] ? __warn_printk+0x198/0x350 [ 1427.385524][T24799] ? __warn_printk+0x1a5/0x350 [ 1427.390347][T24799] ? debug_print_object+0x1a1/0x2b0 [ 1427.395612][T24799] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1427.401125][T24799] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1427.406980][T24799] debug_check_no_obj_freed+0x4b7/0x600 [ 1427.412751][T24799] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1427.418857][T24799] ? rcu_is_watching+0x12/0xc0 [ 1427.423664][T24799] ? kmem_cache_free+0x2d4/0x4d0 [ 1427.428651][T24799] kfree+0x291/0x4d0 [ 1427.432609][T24799] ? hci_release_dev+0x4d8/0x600 [ 1427.437612][T24799] hci_release_dev+0x4d8/0x600 [ 1427.442477][T24799] ? __pfx_hci_release_dev+0x10/0x10 [ 1427.447899][T24799] ? rcu_is_watching+0x12/0xc0 [ 1427.452762][T24799] ? kfree+0x252/0x4d0 [ 1427.456883][T24799] bt_host_release+0x6a/0xb0 [ 1427.461517][T24799] ? __pfx_bt_host_release+0x10/0x10 [ 1427.466845][T24799] device_release+0xa1/0x240 [ 1427.471482][T24799] kobject_put+0x1e4/0x5a0 [ 1427.475938][T24799] ? __pfx_vhci_release+0x10/0x10 [ 1427.480991][T24799] put_device+0x1f/0x30 [ 1427.485183][T24799] vhci_release+0x81/0xf0 [ 1427.489546][T24799] __fput+0x3ff/0xb70 [ 1427.493579][T24799] task_work_run+0x14d/0x240 [ 1427.498233][T24799] ? __pfx_task_work_run+0x10/0x10 [ 1427.503394][T24799] do_exit+0xafb/0x2c30 [ 1427.507625][T24799] ? __pfx_do_exit+0x10/0x10 [ 1427.512249][T24799] ? cgroup_update_frozen_flag+0x107/0x210 [ 1427.518087][T24799] ? find_held_lock+0x2b/0x80 [ 1427.522798][T24799] do_group_exit+0xd3/0x2a0 [ 1427.527338][T24799] get_signal+0x2673/0x26d0 [ 1427.531877][T24799] ? hrtimer_nanosleep+0x187/0x380 [ 1427.537029][T24799] ? __pfx_get_signal+0x10/0x10 [ 1427.541914][T24799] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1427.547170][T24799] arch_do_signal_or_restart+0x8f/0x7a0 [ 1427.552755][T24799] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1427.558949][T24799] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1427.565160][T24799] syscall_exit_to_user_mode+0x150/0x2a0 [ 1427.571018][T24799] do_syscall_64+0xda/0x230 [ 1427.575569][T24799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.581504][T24799] RIP: 0033:0x7f6503bc1225 [ 1427.585975][T24799] Code: Unable to access opcode bytes at 0x7f6503bc11fb. [ 1427.593009][T24799] RSP: 002b:00007f6504983f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1427.601453][T24799] RAX: fffffffffffffdfc RBX: 00007f6503db6160 RCX: 00007f6503bc1225 [ 1427.609450][T24799] RDX: 00007f6504983fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.617442][T24799] RBP: 00007f6503c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1427.625436][T24799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1427.633439][T24799] R13: 0000000000000001 R14: 00007f6503db6160 R15: 00007ffd3da0d9d8 [ 1427.641445][T24799] [ 1427.644876][T24799] Kernel Offset: disabled [ 1427.649216][T24799] Rebooting in 86400 seconds..