last executing test programs: 8m46.070289197s ago: executing program 1 (id=875): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x111002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f00000001c0)="6a54c14d5c1ec98d9553319d93405ae46dddfc09f2862abddd09cea57c5dca941d61", 0x0, &(0x7f0000000200)={&(0x7f00000005c0)="a2e5e1ad3d0b85a51c01d1f11b19aa78f75d89c2f19238e36ba2c651cbece4764f728944a20e4338bb6c07b4287022261ea5da9a7a6067aef1b37525c91c0cc77a8d3a7eb783c7b41cb25038a271449433d3efeee8e1765cbee71b53d0589da4360c9f0c4ad8a69e6724ea48372a78acb3279fa4664284365d74360ea0d1869f7ae9d54796d4f398edd77bd5edcd5ad8cfa742268ebbdb2d12e1833dc8d5e9237783d09b60bf0f1540f21bf22846c501356118ba9f91baf86e218926b27038b4f137419a08a598d50380ecba392830dc65d0b9eb1524e740578f0d92d77c24a5822f7bdaa9d3fe6540e3ea88063db7", 0x4}, 0x7, &(0x7f0000000240)="236ee41d838e113ea6b9a7886466504292d7aee9cb8b754c1801bdee381c7c5e0a2eea1044894959435dc27c70b9a384e9acdd756453e76d7dcc18c9f8ffab446849a8ede1b2923af7b29658b8200828827daeffbc4e8b263057bf072809ec53f84dbe8bbbcff9a632f85bf38dd697", 0x44d, 0x1ff}, 0xe9e3}, 0x4, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioperm$auto(0xffff, 0xa58, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3) 8m45.164880499s ago: executing program 1 (id=877): mmap$auto(0x4, 0x20009, 0x6000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) symlink$auto(&(0x7f00000000c0)='./file0\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) open(0x0, 0x161342, 0x100) write$auto(0x3, 0x0, 0x100082) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x100082) (fail_nth: 8) 8m44.525527334s ago: executing program 1 (id=880): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) io_uring_setup$auto(0x3ff, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) (fail_nth: 8) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) 8m43.561317078s ago: executing program 1 (id=883): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/snmp\x00', 0xc0880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0xa, 0x1, 0x2, 0x5, 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) semctl$auto(0x1ff, 0x2, 0x13, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0x200, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x20002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) readv$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x6) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) shutdown$auto(0x200000003, 0x2) 8m42.544908754s ago: executing program 1 (id=888): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) io_uring_setup$auto(0x3ff, 0x0) socket(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) 8m41.481690246s ago: executing program 1 (id=892): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0xffffffffffffffff, 0xb3c1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) clone3$auto(&(0x7f0000000040)={0x6, 0x600000000000, 0x8, 0xfc, 0x47, 0x8, 0x81, 0x200, 0x2, 0x4, 0x6}, 0x10001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r0, r4, 0x0, 0x5) bpf$auto(0x1, 0x0, 0x7) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x101140, 0x0) read$auto_rng_chrdev_ops_core(r5, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 8m25.806855453s ago: executing program 32 (id=892): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0xffffffffffffffff, 0xb3c1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) clone3$auto(&(0x7f0000000040)={0x6, 0x600000000000, 0x8, 0xfc, 0x47, 0x8, 0x81, 0x200, 0x2, 0x4, 0x6}, 0x10001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r0, r4, 0x0, 0x5) bpf$auto(0x1, 0x0, 0x7) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x101140, 0x0) read$auto_rng_chrdev_ops_core(r5, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 14.174570716s ago: executing program 0 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/macaddress\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/206, 0xce) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r5, 0x80085665, r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/sound/card1/pcmC1D0c/pcm_class\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/89, 0x59) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x7ffe, 0x0) clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0008, 0x19) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x7) 13.684029349s ago: executing program 3 (id=2319): memfd_secret$auto(0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x404, 0x1ff, 0x7, 0x48, 0x1ff, 0x1ffdf, 0x4, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0xfffffffe, 0x800000, 0x7, 0x8, 0x7ff, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x1, 0x5, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x11b3, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0x100000000a38, 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x4000000000, 0x7, 0x3]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0xb) mmap$auto(0x0, 0x4000c, 0x101, 0x9b72, r1, 0x28000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/nfsd.export/content\x00', 0x0, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x9, 0x9, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0xc0000, 0x0) preadv$auto(r4, 0x0, 0x3, 0x9, 0x4) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) add_key$auto(0x0, 0x0, 0x0, 0x1, 0x8010) socket(0x25, 0x5, 0x0) 12.151885459s ago: executing program 3 (id=2322): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x1, 0x52, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/ad_aggregator\x00', 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/28, 0x1c) write$auto_ftrace_system_enable_fops_trace_events(r0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x81a80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = getpgid$auto(0xffffffffffffffff) wait4$auto(r3, &(0x7f0000000000)=0x9, 0x22c000, &(0x7f00000000c0)={{0x3, 0xea}, {0x3, 0x100000000}, 0x1, 0x8000000000000001, 0x7, 0x7fffffff, 0x3, 0x19a9, 0x7, 0x9, 0x7, 0x10000, 0xffffffffffffff66, 0xc14, 0xb8400000000, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\'\xc3\x16\x18\xa9audio1\x00', 0x80000008) read$auto(0x3, 0x0, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) brk$auto(0x8) close_range$auto(0x2, 0x8, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) fcntl$auto_F_GETOWN(r0, 0x9, r3) 11.243384445s ago: executing program 0 (id=2324): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x111002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f00000001c0)="6a54c14d5c1ec98d9553319d93405ae46dddfc09f2862abddd09cea57c5dca941d61", 0x0, &(0x7f0000000200)={&(0x7f00000005c0)="a2e5e1ad3d0b85a51c01d1f11b19aa78f75d89c2f19238e36ba2c651cbece4764f728944a20e4338bb6c07b4287022261ea5da9a7a6067aef1b37525c91c0cc77a8d3a7eb783c7b41cb25038a271449433d3efeee8e1765cbee71b53d0589da4360c9f0c4ad8a69e6724ea48372a78acb3279fa4664284365d74360ea0d1869f7ae9d54796d4f398edd77bd5edcd5ad8cfa742268ebbdb2d12e1833dc8d5e9237783d09b60bf0f1540f21bf22846c501356118ba9f91baf86e218926b27038b4f137419a08a598d50380ecba392830dc65d0b9eb1524e740578f0d92d77c24a5822f7bdaa9d3fe6540e3ea88063db7", 0x4}, 0x7, &(0x7f0000000240)="236ee41d838e113ea6b9a7886466504292d7aee9cb8b754c1801bdee381c7c5e0a2eea1044894959435dc27c70b9a384e9acdd756453e76d7dcc18c9f8ffab446849a8ede1b2923af7b29658b8200828827daeffbc4e8b263057bf072809ec53f84dbe8bbbcff9a632f85bf38dd697", 0x44d, 0x1ff}, 0xe9e3}, 0x4, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioperm$auto(0xffff, 0xa58, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3) 10.285384129s ago: executing program 3 (id=2325): r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x6, 0xd, 0x0, 0x0) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) ptrace$auto_PTRACE_KILL(0x8, 0x0, 0x2, 0x9) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x40b00, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x60081, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) shmctl$auto_IPC_RMID(0x8000, 0x0, 0x0) 10.140252293s ago: executing program 0 (id=2326): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x111002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f00000001c0)="6a54c14d5c1ec98d9553319d93405ae46dddfc09f2862abddd09cea57c5dca941d61", 0x0, &(0x7f0000000200)={&(0x7f00000005c0)="a2e5e1ad3d0b85a51c01d1f11b19aa78f75d89c2f19238e36ba2c651cbece4764f728944a20e4338bb6c07b4287022261ea5da9a7a6067aef1b37525c91c0cc77a8d3a7eb783c7b41cb25038a271449433d3efeee8e1765cbee71b53d0589da4360c9f0c4ad8a69e6724ea48372a78acb3279fa4664284365d74360ea0d1869f7ae9d54796d4f398edd77bd5edcd5ad8cfa742268ebbdb2d12e1833dc8d5e9237783d09b60bf0f1540f21bf22846c501356118ba9f91baf86e218926b27038b4f137419a08a598d50380ecba392830dc65d0b9eb1524e740578f0d92d77c24a5822f7bdaa9d3fe6540e3ea88063db7", 0x4}, 0x7, &(0x7f0000000240)="236ee41d838e113ea6b9a7886466504292d7aee9cb8b754c1801bdee381c7c5e0a2eea1044894959435dc27c70b9a384e9acdd756453e76d7dcc18c9f8ffab446849a8ede1b2923af7b29658b8200828827daeffbc4e8b263057bf072809ec53f84dbe8bbbcff9a632f85bf38dd697", 0x44d, 0x1ff}, 0xe9e3}, 0x4, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioperm$auto(0xffff, 0xa58, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3) 9.784298944s ago: executing program 3 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) pread64$auto(r5, 0x0, 0xedd, 0x4) inotify_add_watch$auto(r5, &(0x7f00000002c0)='./file0\x00', 0x5) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r6, 0x5015, 0x0) ioctl$auto_OSS_GETVERSION2(r6, 0x80044d76, &(0x7f0000000080)="bdf609c672ff9c806345801ffd7a5ec74b053e936c64fb139db569d5716741159e05f3ce3dda964b156e8cdb8721a3408ad980aab1d147579d0703fcbd78bdaa2a81e2630890b48c58bda184517d50f5de8c6af0c6a287da027a3cd5135fef5a1b57e231b0931c0baebf5dd7f63b42cab64e2ae306993c09cee3446ff7fa181a2edb141fa04a2207dd554839cb8c26bcbe18bc873ca9986599ae1b55fc7b1326eda6ac29f9f8ad59a858f2b67b34923d33467f2ffa720202dcf0c2af5efe6bf35f1643d909fba6775f2300a85b45729d3c085eca552b3eff29b5") ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r6, 0xc0044dff, 0x0) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="569e2d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4000000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEC_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000340)={0x8, 0x6, 0x8001, 0xb, 0x9ba, 0x7, 0x0, 0x6, 0x5, 0x20, 0xc, 0x1, [{0x800, 0x1, 0x8001}, {0x5, 0x7, 0xc}, {0x10000, 0xfffff202, 0xfffffffe}, {0xe, 0x6f}, {0xfe4, 0x6, 0x3}]}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x10000}, @HWSIM_ATTR_PMSR_SUPPORT={0x30, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x1}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 7.875134507s ago: executing program 2 (id=2328): r0 = socketcall$auto_SYS_GETPEERNAME(0x7, &(0x7f0000000000)=0x4) ioctl$auto_FS_IOC_READ_VERITY_METADATA2(r0, 0xc0286687, &(0x7f0000000040)="163f64c7458e2c3323dc6837322a3a635d47bd5e4acfc116005a8f02c6969518e5a5b82d417033949fd8169528903e56ccfb11fe130382eb23252414db176d79e8f0caa3c31ae0d80ffa1bf4d42cdc4581c0446b6f20cc25e3ef631bbb5570fa0c236ff9a431ad15ba4e8dea958b28a43ffd01249423b6930758c2a038fcdc3af8a89ff04dc3b372a8b38e6da1c21ca2e66cef76de531aaaf06f66e79aa69c97f1ba88a9d001a34815da608808a660f12319bf8240e62fbb6c02d1c57550685286339073e5c53d565e94242931061af4b1ae99e5a6e4e4215959ba91c3c6b5d7fe5abb47331d4baed66e921f101a84a6a4c060592867da2bb862c2d7640797fab58b8173d616d24cfcaa8fa37b846845376243775ff379cca788b7d640844f821b944286fa26f8421fa1f8bbda6ff9fbd5e38382150bdee0afc2c2aad46d7e1305a8056c1b20e9871b99a686775391fe6e3ccc942ee2f8438259391f04eaf29a404456f38ac0074891c7c69d36132bf6fc19685b439fafe2e7f80bd2800ca0389110fc340532d57cb84855c5b2dc994e30336fe85f1ce8eea9347af5fc699e73f51bdd831fe0ef995c5fb304e645bf2bb7c6145c2d6b2e87c2b43cd8c2f76ccf0350d81120926260af50a5c8cb2ff651d03bfae9f335e7a613931db64d6feddf3b39ca02f9b7dc2ab4c7c923bfce7ff98e6fae7cf21b4d7c95bf527bf26cdff56173faf321c7c51b0068cc9ac53543f20e0d895a6d5c499992d5f0bbd3abfdbb95bb21d94051784fc0fe34ef0d2533e093cafc766eecdef302f887784c49edc7a614bb8b03ad32af82816760fbc3b3cddb7b76679bba6310f3cd93b4482e94a73dd30412225b151b1feb906c493e4d50e2fda2a0c24bd708a320c98c34cc2c119cb447aacc76344fbbfd8e3362bf626c34a30f0f38871df8a2dd5c31dd1f55813ffad733033ff4f7e8c5284f22d8ae203339874ca3ec05d289c07b6e59573fcb4f27bfb98eda81e9d54f9fd263eb9caccd05746d35d7256ab871f0dec5a769eefa6f2b47ada6a88f59a101be786a11d34c2bafa8551362cc991bae63c95c6570b317187f7e96636356f5475b22525e020e20f63bd95083311dd12e42ea2e87ca269f806e1fabb3a82db7ff22c2eea0af692ea0c8be2572d1a97a90f8b5c3fd323a4e113093ba9ab56294189893d1ef9187066de4f2ded9ea114458cc6793be69585cef4c7d6d075fba82710f39b173cc0a814a63059c28bda3d7c2d1f099c068e424849dc7bb8df7a99bdba4fc2dc702f420375db6ab57e3117da762a1e0d2681539102a30210e39924863d3846e1ec4bd0b8e0615fb83775122e52d391473ef64892d110dab3496994f5eb182854e3ce5b78303583dbd68e2e02220de03232dbdc9397a9f0a54deb20d37a3ba5ef699226a588a64969452c3d497fd2817dd06ef29afcf8845adbf2c4c2095a989871c37c87445ebac1e251893ce0a528f226153e73217cd3cb03281c39af971e0805705218973a40651c63b4b6d4c91afcedce8343099809a4f2798729d50c634bd8ca1e9cb044be0363074b40f0b0473c7510581f98eabb8f9d953dedf1e01ab85cc76e2b75ca9c6069a35ab3e45bb366d08872c5a8bb57debe9bcd8c6d0f723795333e19af389a6ae90f0311427eee9f46d16afab3b0ae85ada6479dda32654adaee48ba1abe59332020725fdac0218165b97c21eb1622b16a363e28e2f6b866555ec072af05de4b3d7b663dc927dae96eaf12d614f7a8d8c7865701484df417057d0ccd97101bd03f6bb0f3e14c310e03593f99d5bca588e7c17ec23b9d6d6371040767652bb8e18367fa7bb7aece954d644f68202206c96f375b76532f5ee3bef67c85568eff2a669a372a160a0dbcf7ac6316837194d96aa683c0ae6b7a3831a0798dd86ade267e94247d667ac2ba571a3b969499bae448d25bc0f325d6376d672fcbdd2df2fe916ab8120c94c8975ac6bf651d7075c6e345134cd01345be5d73727f518b0274f94644cd07c93f556b4a245122ead245b102408c9a7f9dd7b7b7384949d19e3d36c1fbd454436e4bd060bd3d81e19edf3ed857835365e75e520dce226234d8ae9b97a25b37ec82cef497a70a4f1abebdb5d739108d8c045b08a0a288a17fbd2709df50dd2b564b1a98591e0f60a9310f6953f1fe3c382e1d49d4122ffb2564dd0df9efd195cce4ac69b996d8884fef024b285de593dff3a253a8ec7fada40ddd578d497d74436181bf9b9a042f47243d05977db155bbe9674f1e41ebccdcdae9f597fff3a32fd94aa7243b66866cc5aa2933563dc80f03348dc3918ff55f6b9d45c21f4c662c180c4c9bda4138a0f90616bda467a91aacde07bcdf569f5dd5823aa7fbf815eb00237ce0b68c176b3ff4fe807029c97b15081f79e6e4a5d0fe454d0c53413ce1ac02f81fd6d13405612bd264afedc47f0bcb033e9c22f81e51f872998c3bef06ccb7e6d4d376ddba13874a59241f5aba24280222b14632e97597bcb8e87b9f6c2b4b2c73ab563950055acd516d2b0f80912608e11328bdc9dc613fdbb3ccce5dc993d6b605fd362de6df033c12d2c85e333a0b2a2c45ee568b1c7db166171d6ec96251668f0167467cc553ae8e81bb786a670ecc5921244b1763a8c68b5efd86c9ecc08eb817a87265b2bb745a2b9110934a4eae9ba0923f4e490213af1ddc969450a8cd3bb1b1fc28dac49138726bb51fd6f2b92130c027db5fa05de7ba61b6c7a47a6ad362c834273038be689a63802331c3f66e9ee6e591ae9922fde6948c256c125b107b7e50c53727a8cd56671319096a17dba40f36f402968a76ac829d065681c293a9937de5454d95e65c4f24c52a2b69442501e03f1ccd8f262bd88a0f8f722683d431153f26aa0d4582fb3d43e30264bce537d79d3c2cb925c17e7ddc6196b61e951a4c991b39876f0732a5ac1b91a4d868320ecc7276b5875abf5b1d27d1a2347b509d1440f3b6d1e3a311c9c20303ef2081146d86a4a48bb9e80682f2c01ccbc9da655a80b7aab4b7972ba403c0e2aeb34d1d4f63ac9b45ffe875bcfd03e58713e071319961600932fdc048e809953ce965bfc970581e1ebcc5cd46df629ccd5077f464e0e71e1f4d765b2e16c2cc56a03f931e2cd828b21bba3ccaca660f5ce50bbc8fbae1ff50c5e5a7c0b33fb3db05dae9ee0af936e523728f1f55a544691454f84d1ac03ae22fc72f6b1e135119330779001fed499dfc475f48320ae1e55b8041e52d9d4da8ef96ed922f09590b29a52f6a7c230d4e8264a7303bf2e935f0faa9036fa0cc96fa407a38dfa022e916b37c450ba4b5c34e0e0f5d92e0751bb612559616db9ac4d204e3831f5a82f87764c624c109ec32615fce6ce645be6a2870867f3ad811df9b4a892c9be3d3458983a6c68a5c6b77731550bf7ac9c6dfe4d133ec52afcf6e1e4e2bafb817302b657a7b9dbf4ac78716a1b7229a4e88a6a42fe2852d2ee6afda252034559bbbcdf1ab9f581da7727d0cd43047ee957ae3ff129555c9913254432c5d87196901afef2449f591ce810d2d5c7a0879807b759d01f3b4b2ac31b950e88256121ed675394c2057ed68a7f553d69ed3e578f6b3e1672eb948de55e3f18c6a910c287980dc4111e07e509b244d7bcc59a47a19d4897a7a668214f053b5a57db09a53de9d4527eeab99fa2779198756d0caa243cc7c9498b192918b121262c32988fc34aa2d9641626395f1c6ad6c1472f545de57298c93fcdece5f6f2dae93a17f4af2a391f00dc29bf40de34e0916fab341f2786fc61cc20011bb72aa28c16c511fa22f11f3adb65308271a2d695b43816a5bab8bf28ecc81661cbb2a286b89359e3da927c89d7929c1aa9087d0b812f47257759866f6101fb85c3a0428783418c1443e310c62090264e7224cb8e94a8b0ef015906065e36701d7c3faed9562021ecd54db4ccb641cd0caee7f2e3f51b8aeec26ed2db1014efb77f56baef4b596a1df96f374855b91719061ae3e5724f71b856e8c88d0ccc26da15119f54c8f9968551faf6368756fc90a13d634c4d365eebce2e23d64f96bd4dc474048f264e42bcb76c3f594b8aedc3f875961bb05347ae1902a6f8b7f0fa14ed16d9b0e338c4e41080c58e7002fec1ce1d3d4dedfa45880f39e4af37d63688af823b841f69ae62b192bdc1b2866c5d50970a986544cc63b58416789b481fddd092f10fc7aae0452c31052275fd67d988e0ae89551cee3f85629be47d8414b9135eb010d4406c7c7e1093f2d807c7b2fdf4f54e7f2fddfa1391f64f8b4a8c1d305706868a151cb3a55900bfe252e3e88ee75b2103fa08ab57184cdd1f882f37095139f5284fd746cedc28c75cea8b16884c9abe6e35b1185cea988da5efcc3c5d38dfbb5609df8cb7492d68e629b536acebd83fdb61004dde22193282b2191725b0c689ad6f23c53e63f0285526213da302def1cd7eddaefacedf2beed86f4b02103c402b73dadfbbdd14c5ff9cf9ad59c5d39f4b2bd9612da7276bf7925103fc2974195792372e5c62b7ce69d678ad1a48f8a890c98deb2a7adb49dadc9f1d7f77c43d30f50816058fe92d9fd5a73b47a753393e1b08c6b8c4fb44f062e25ecc62c9e9a04acc1979a463770d3cc4f2eef3ef1fbc095f93027b716013d9237fdda0800b13902a00eb32cbd1b4bcccfdbf07edbbbea0bad76c6582ed88f8b4af9a316e13b45ddde33dd3a22370bba2d940875cbb2470754f9f544c89c857704fb7cbd41efffb4af4fb6db0b91dcb3e3f6029c6736407f8e1e5bd4f8b9f564632765bc52f60fc4dd69b93eecf734fbec8fe1793bba5385ee634103e003d44dda0945df1294b379bd71d321635e405f17566e5f5ae909d2b31c7846a219225770ebef8199b98e1b02b5b24deafc1f322f3416075c24fb57d055c8038076427243d221fd71ef7d28644586ad427d3c89f97931692759078a32119ac87a11d99ea955221573771020018477d536b46ee23b17b0ab0b6e3e5d2db525d549b4e43c5747429780e896a6c1026c03c24e67f377317e738e650e0f4df8502ab6719d4999d8fb116b4659fe5e7087187f8eaefd23c8f49bac42fa39c6346d9b71fa88475b637f19731fb90ecf35f33472490900a6e43ac19534eddf55d85f1bc3b03a9e86e9766b0508980bb9e3be67d31de823fd41ad17cc82968a8a4eee8700e58a386c819370cbc0b7c7e2cc35cd89aebc95b66ec2e1c605efc50f8c1b6bfbb24b0424fae45a14cb86f29e37af4ec514a475c23fa9738f5fd992e8e4d75566061db0a48a307e92231737bbb684da98d2d8564c73f0011a49cd58081123895c2ff4214a1a7cf56bde86a575ffe2d71863e1646435b25c0a2624a642dc06ee94afe98f220daef2407491a142f3d0a2cbe71c7f1e0bc6cd208d81656978b01091700859cb6eadb2469db59f7f96f6e2f4a3dc10fe145e3ea54d06d659dab03b5785acd4d9f9f59335a0efbbc1607aa51c55b6d7663aa2711543b5a24ee6ed1935afeb310e70ec4b82de478dee18f51c371f8d0a7a87584216ef144572703bdd3052a9231da0689e43125074ce678910ce0c9fb7dc74f76f2302c80cc1e810fe5a1f25c181231c04c1b5ba8f04b66716fdd8662f0a27875b90554b0510fa1ca808ba8917ad27fbfc698f14a6fca223c44cab020a3086037c38e5b905aafcca64ee6d20b26f92431295cdc38ac9db3296d79c8f1b87a879d7de65b149c1ee3694e03acb525043b74c158841376bf529e1eab3e218b33814fb274bdc62071") ioctl$auto_TIOCNXCL(r0, 0x540d, &(0x7f0000001040)="ff938bcada5f5bae015f29dcdf9f1d2fcc7c51") setsockopt$auto_SO_PROTOCOL(r0, 0x10, 0x26, &(0x7f0000001080)='&/\xac\x00', 0xfbc1) process_madvise$auto_MADV_HUGEPAGE(r0, &(0x7f0000001140)={&(0x7f00000010c0)="9f0921e1ea8d22369abfa76b4aaeaaf57ada352627cf46aa090dd85863e33bb9dd45916e375a8b39870ed62b5f988ab5bef5fdcec123c04d14d4c26a92bf30b0b4643fb1b5", 0x8}, 0x1, 0xe, 0x4) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000011c0), r0) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xd7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xfffffffb}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x4844) r2 = socketpair$auto(0x9, 0x6, 0xa, &(0x7f0000001300)=0x3) ioctl$auto_BCH_IOCTL_READ_SUPER(r0, 0x4020bc0c, &(0x7f0000001340)={0x3f, 0x0, 0x0, 0x6, 0x9}) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001400)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0x7, 0x4, 0x4}, 0x9, 0x4, 0x7, 0xb, @raw=0x6f77, @inferred=0x0, 0x0, 0x0, &(0x7f0000001380), &(0x7f00000013c0)="2942e4d8207778f813d73295c80194a5432e18460b2b97b787dd36514ac92427f040c26c1e892dadf84d8068efbe731498eb"}) quotactl_fd$auto(r2, 0x5, r4, &(0x7f0000001480)="9e214ed8f83e2cf1473396c73fa3d3745dec30497897dfc3516bf41aadbadc792d3de6a89399e1935b632ac5db58df620d5b") ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000014c0)="67fdf9cd7441e74f2f0d3fd64a3d4381743d6d14604cf894975410ea1ad86dc8627c09954ebc57c2e28d1a2a03882fa627481ac3901c7a51e53ab0888f208c20a96b42132051c6c18a2c32004c6b0e0031e229056e0dc440567594a1951da6b88d54a99105dc1577bfe260691ef6b7754f35a036da7b2090d6d24a698e0a0c47bc2b6d5b3de6a14ece82b0ff2d03c5307e1364fa8ab430b68df260fe67506ab41fca8086d06b3b15d082deda37b16572d144b3a58eb23dcfdc00881a24bf01e62c6b9d027062e03f99a0") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/self/net/sctp/snmp\x00', 0x200, 0x0) unshare$auto(0xcf58) shmctl$auto(0x6, 0x400, &(0x7f00000017c0)={{0x6612, r3, r4, 0x800, 0xc3, 0x81, 0x8}, 0x8, 0x0, 0x3800000000000000, 0x839, @raw=0x10000, @inferred=r5, 0x5, 0x0, &(0x7f0000001600)="e4ba37d1f950c78b1b4f2a4ba2da851a8e6b484aa9af2211690ac9604f7babd7789eb494d6e3a5dbc88dc9cae455538e3d30c39489a93e378fb247f1d9c13c952140dfc22e64c51513849fb04efabcefe93917fa2fa11d90a9221510c9aa7c6e4fe7607554626da8cf50e28ba2330d2856797d2faa6480b7b14ea819038aa01ddf11145dc12d1c3d47c7ad944ad51d508fac95b2f7a57e805bbd684541a400302c9291bd1438437567e0232e6fcb88b74e337906f20bade27a5a439184878053dc05e3aa0dfd780982154b5c7661b0efc95eaecee4c119c3d67d1adda06f8be43ca4ddb7446023df1ff2f40fb9299a1059e7da55a1161ca71e8a", &(0x7f0000001700)="dfb4feee01512a0f35872e28ec106ef4f6df296e945a6122c3b8c585e9c36b33f20a925a65b6858e2b235f7f7e6b1659e413ffe862b98c029e4522e45ddc8521a738e0a868334cc32fd087525243646c2ba67646a9d0004f4e0d305827a4f0760f85e821e986820930d200baaf9122d40901f202f07c7e1c0cf0c1526056bfa01af2f088bf9774e61fb4b557e729233a93617368499f1e6a09ea47aba304933698a4a0018eda9878282491e455"}) r6 = waitid$auto_P_PGID(0x2, r0, &(0x7f0000001840)={@_si_pad}, 0xffffffc6, &(0x7f00000018c0)={{0x4, 0x169}, {0xe7, 0x3}, 0x6, 0xfffffffffffffffd, 0x3ff, 0x3, 0x1dfc, 0x4, 0x0, 0x8, 0x9, 0x2, 0x9, 0x1, 0x80, 0x7}) r7 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, r6, 0xd, 0x5) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000019c0)={{@raw=0xffffffff, 0x6, 0x101, 0x7, "9b10f58f4b618e5fc975441c258b307e7bc95117da297f827347cbfb2a13546a342f322b423c0a8310e09e80", @raw}, 0x1, @integer=@value_ptr=&(0x7f0000001980)=0x7f, "211e255643689fd903e4762982b4480cce832f1efecb4a53538ef2878dda1889093995b8ceb3f96610c7f36680daf1a04e449471265ed97954c377adf2841358158fec1c8f413d39ec806f714492ef54ecd0c83172ac541acf835b0689fdf754a99eee1b3bb14b7bf981e21ca37ede74e9761eb8b6ec13a49ef65826335cc038"}) mbind$auto(0x0, 0x8, 0x0, &(0x7f0000001ec0)=0xa672, 0x8, 0x4) ioctl$auto_BLKZEROOUT(r7, 0x127f, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/sys/net/ipv4/neigh/vxcan0/app_solicit\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001f40), r0) unshare$auto(0xa) r8 = getsockopt$auto_SO_RCVTIMEO_OLD(r2, 0xe, 0x14, &(0x7f0000001f80)='.^@[\x00', &(0x7f0000001fc0)=0x6) sendmsg$auto(r2, &(0x7f00000021c0)={&(0x7f0000002000), 0x5, &(0x7f0000002100)={&(0x7f0000002040)="54981750efaca996ab03452e8bec702c84495b1c90607625703bca6313daa877609b92390c95727d441c3b1ac8e56970576fbc5b3455c387b5991a6eb66836b11c883f3543a274776a617380e1e3da8d320ebef5bb0fdc15b1e8506727fb0718d890ccd1c37fff91f967f2f2b2d5adce79c09bb2ce2cafa59ea20e239263bc5bc7eba51a8a97d194039e32afba3d656ac277af4e0be24092"}, 0x5a67, &(0x7f0000002140)="074a884a1cdb4257dbf4f6dbf02205c8844b4424e70b94fe783a61705124a83b80f43d885b99a07c81243cbd3ad06b3eaa2fa7fde2b94e87e69a6f2852881e6eeaa336b9cd215169cee27dc5bb497fb0067a746b10b14265ec325f", 0x1, 0x8}, 0x5) io_uring_setup$auto(0x1, &(0x7f0000002200)={0x8, 0xeb, 0xfffffff1, 0x4, 0xb, 0xac4, r2, [0x8001, 0x0, 0x80], {0x8, 0x101, 0x7, 0x3, 0xf, 0x8, 0x10000, 0x1, 0x3}, {0x1, 0x18, 0xfffffff8, 0x14dc, 0x3ff, 0x3310, 0x3, 0x0, 0x5}}) read$auto_qrtr_tun_ops_tun(r9, &(0x7f0000002280)=""/126, 0x7e) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002340), r7) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002440)={&(0x7f0000002300), 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x200}, @NL80211_ATTR_PMK={0x27, 0xfe, "9cd7c8f8ba25652b8bf98e2f56285cb24f076545fb3596deaa0b630f9ed9d61e8d6ca9"}, @NL80211_ATTR_MBSSID_CONFIG={0x8, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x48000) read$auto_evm_key_ops_evm_secfs(r8, &(0x7f0000002480)=""/104, 0x68) 7.790294763s ago: executing program 4 (id=2329): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) r1 = open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x10001) connect$auto(0x3, &(0x7f00000000c0), 0x55) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000100)="38c63c40472f365b5f9878a91e7fc26ba51c9210915db0e8691232c836b6357bd046857b662f95c69b3ff0799d5fa991d069fc0c9b1ea7e8989183f47d9cc2d39167af828ea3ac291fd2b607180af8c5200978295e1c0351c13d3e6e612983e0d07ee1ef79de3725b04fb0d01028d2c97e16d69a3a064e0152893c03") statx$auto(r1, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) 7.711765229s ago: executing program 0 (id=2330): socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) mmap$auto(0x400000000000, 0x2000b, 0x0, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x2, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x73, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0xf, 0x0) socket(0x2, 0xa, 0xfffffffe) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x237, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) msgctl$auto_IPC_SET(0x380, 0x1, 0x0) msgctl$auto_IPC_RMID(0x2, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x28) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1f4, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x729c0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x2, &(0x7f0000000000)='+\x00\xc04\x95\x96XD\x11T\x11\xac@\xb9\'\xa8\x99\xf6\x99\x8e\xa2w-&\v\xa9\xc5\xb1\xc6\n\xb0{\xe8', &(0x7f0000000040), 0x3) 7.585112558s ago: executing program 2 (id=2331): r0 = socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0x1c94, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x80000008) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x29}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = geteuid() setreuid$auto(r1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000480)={0x5, 0xf, 0x7, 0x7, r1, 0xffffffffffffffff, 0x7, 0xa1c9, 0x8, 0x1ff, 0x2, 0x6, {0x9, 0x80}, {0x2, 0x1}, {0x9, 0xfffffc00}, {0x5, 0x2}, 0x11, 0xdfa, 0x7, 0x2, 0x4, 0x855a, 0x7f, 0xfffffffffffffff8, 0x4, 0x0, 0x87, 0x5, [0x8, 0x2d52, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x3391]}) ioprio_get$auto(0x4, r1) ioperm$auto(0x62e8, 0x1000004d, 0x101) dup2$auto(r0, r0) mmap$auto(0x0, 0x20007, 0xdf, 0x19, 0x401, 0x8000) 7.382978243s ago: executing program 2 (id=2332): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)={0x6, 0xb, 0x8, @raw=0x1000000}}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) 7.178056795s ago: executing program 4 (id=2333): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x1, 0x52, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/ad_aggregator\x00', 0x80500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/28, 0x1c) write$auto_ftrace_system_enable_fops_trace_events(r0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x81a80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = getpgid$auto(0xffffffffffffffff) wait4$auto(r3, &(0x7f0000000000)=0x9, 0x22c000, &(0x7f00000000c0)={{0x3, 0xea}, {0x3, 0x100000000}, 0x1, 0x8000000000000001, 0x7, 0x7fffffff, 0x3, 0x19a9, 0x7, 0x9, 0x7, 0x10000, 0xffffffffffffff66, 0xc14, 0xb8400000000, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\'\xc3\x16\x18\xa9audio1\x00', 0x80000008) read$auto(0x3, 0x0, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) brk$auto(0x8) close_range$auto(0x2, 0x8, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) fcntl$auto_F_GETOWN(r0, 0x9, r3) 7.155566163s ago: executing program 3 (id=2334): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.15/usb40/idVendor\x00', 0x7e1d21, 0x0) prctl$auto_PR_GET_IO_FLUSHER(0x3a, 0x80000000, 0x0, 0x0, 0xb) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@query={@target_fd, 0x9, 0xfff, 0x7, 0x1, @count=0x10, 0x0, 0x8, 0x0, 0x3, 0x4}, 0x9f) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) socket(0x10, 0x80002, 0x0) mmap$auto(0x5, 0x20409, 0x4000000000df, 0x16, r0, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x6, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="000325bd7000fedbdf2525000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x24000081) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) socket(0x10, 0x2, 0x0) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cec4\x00', 0x103000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 7.134588721s ago: executing program 2 (id=2335): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/serial-base/drivers_autoprobe\x00', 0x1c3382, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) unshare$auto(0x40000080) socket(0x10, 0x2, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mknod$auto(0x0, 0x67c1, 0x7fc) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendto$auto(r1, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x80811501, 0xfffffffffffff4e0) r2 = socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) unshare$auto(0xbf) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_setup$auto(0x4bf15e08, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r4, 0x4007, @old_prog_fd=r2}, 0xa3) 7.081839492s ago: executing program 0 (id=2336): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mmap$auto(0x7fffffff, 0x9, 0x7fffffffffffffff, 0x7fffffffffffffff, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x18, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x2) setsockopt$auto_SO_LOCK_FILTER(r2, 0x200, 0x2c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) write$auto(r4, 0x0, 0x4) clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff) prctl$auto(0x6, 0x9, 0x0, 0x4, 0x7) ioctl$auto_VHOST_GET_BACKEND_FEATURES(0xffffffffffffffff, 0x8008af26, 0x0) read$auto(0x3, 0x0, 0x1f40) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x5, 0x4, 0x2, 0x7, 0x2, 0x73, 0x5, 0x10003, 0x3}}) sendfile$auto(r1, r1, 0x0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) r5 = socket(0xa, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x20, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_START_AP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280092ed69efec28ac772e7e89f74344881eec667a30e70621e17df041198e05539275b3a301926a3752093c5c7236d726ddf00774741ec607cf284e0373b0a920f14693cbd21f2251321b1a2c9454053bdc915cb8331df8459338d0ce677add33577e1f46153a776ebc", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250f000000040073000800ef00920000000700f90057da1000"], 0x28}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004004) 5.981675069s ago: executing program 3 (id=2337): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mmap$auto(0x7fffffff, 0x9, 0x7fffffffffffffff, 0x7fffffffffffffff, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x2) setsockopt$auto_SO_LOCK_FILTER(r2, 0x200, 0x2c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) write$auto(r4, 0x0, 0x4) clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff) prctl$auto(0x6, 0x9, 0x0, 0x4, 0x7) ioctl$auto_VHOST_GET_BACKEND_FEATURES(0xffffffffffffffff, 0x8008af26, 0x0) read$auto(0x3, 0x0, 0x1f40) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x5, 0x4, 0x2, 0x7, 0x2, 0x73, 0x5, 0x10003, 0x3}}) sendfile$auto(r1, r1, 0x0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) r5 = socket(0xa, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x20, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_START_AP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280092ed69efec28ac772e7e89f74344881eec667a30e70621e17df041198e05539275b3a301926a3752093c5c7236d726ddf00774741ec607cf284e0373b0a920f14693cbd21f2251321b1a2c9454053bdc915cb8331df8459338d0ce677add33577e1f46153a776ebc", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250f000000040073000800ef00920000000700f90057da1000"], 0x28}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004004) 5.67677376s ago: executing program 2 (id=2338): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mmap$auto(0x7fffffff, 0x9, 0x7fffffffffffffff, 0x7fffffffffffffff, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x2) setsockopt$auto_SO_LOCK_FILTER(r2, 0x200, 0x2c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x0) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) write$auto(r3, 0x0, 0x4) clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff) prctl$auto(0x6, 0x9, 0x0, 0x4, 0x7) ioctl$auto_VHOST_GET_BACKEND_FEATURES(0xffffffffffffffff, 0x8008af26, 0x0) read$auto(0x3, 0x0, 0x1f40) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x5, 0x4, 0x2, 0x7, 0x2, 0x73, 0x5, 0x10003, 0x3}}) sendfile$auto(r1, r1, 0x0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x20, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_START_AP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280092ed69efec28ac772e7e89f74344881eec667a30e70621e17df041198e05539275b3a301926a3752093c5c7236d726ddf00774741ec607cf284e0373b0a920f14693cbd21f2251321b1a2c9454053bdc915cb8331df8459338d0ce677add33577e1f46153a776ebc", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf250f000000040073000800ef00920000000700f90057da1000"], 0x28}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004004) 2.938470451s ago: executing program 4 (id=2339): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x111002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f00000001c0)="6a54c14d5c1ec98d9553319d93405ae46dddfc09f2862abddd09cea57c5dca941d61", 0x0, &(0x7f0000000200)={&(0x7f00000005c0)="a2e5e1ad3d0b85a51c01d1f11b19aa78f75d89c2f19238e36ba2c651cbece4764f728944a20e4338bb6c07b4287022261ea5da9a7a6067aef1b37525c91c0cc77a8d3a7eb783c7b41cb25038a271449433d3efeee8e1765cbee71b53d0589da4360c9f0c4ad8a69e6724ea48372a78acb3279fa4664284365d74360ea0d1869f7ae9d54796d4f398edd77bd5edcd5ad8cfa742268ebbdb2d12e1833dc8d5e9237783d09b60bf0f1540f21bf22846c501356118ba9f91baf86e218926b27038b4f137419a08a598d50380ecba392830dc65d0b9eb1524e740578f0d92d77c24a5822f7bdaa9d3fe6540e3ea88063db7", 0x4}, 0x7, &(0x7f0000000240)="236ee41d838e113ea6b9a7886466504292d7aee9cb8b754c1801bdee381c7c5e0a2eea1044894959435dc27c70b9a384e9acdd756453e76d7dcc18c9f8ffab446849a8ede1b2923af7b29658b8200828827daeffbc4e8b263057bf072809ec53f84dbe8bbbcff9a632f85bf38dd697", 0x44d, 0x1ff}, 0xe9e3}, 0x4, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) ioperm$auto(0xffff, 0xa58, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3) 2.336485126s ago: executing program 2 (id=2340): r0 = fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x38a1, 0x3, 0x26, 0x940, 0x1ffde, 0x3, 0x6, 0x902c, 0x29, 0x400005, 0x3, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0x4, 0x0, 0xceb, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x96f, 0xffffffffffffffff, 0x2, 0x4001, 0x3, 0x0, 0xb548, 0x8, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3]}, 0xfffff7fffffffffa, 0x81) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000380)={0x31, 0x9, 0x4205, 0xff, 0x7, 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x14, 0x9, 0x0, 0x1, [@nested={0x8, 0xb3, 0x0, 0x1, [@typed={0x4, 0x132}]}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x14) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x80, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xa}, 0x3) unshare$auto(0x2) fanotify_init$auto(0x5, 0x2000000000002) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x200000ffff}, 0x1) 2.219053235s ago: executing program 0 (id=2341): mmap$auto(0x0, 0x9, 0x3fe57696, 0x9b72, 0x2, 0x8000000000008000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x7, 0x0, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x2, 0x1a525c0f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x883, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffa, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x7fffffffffffffff, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x2182, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto(0x3, 0x0, 0x1f40) bpf$auto(0x3, &(0x7f0000000140)=@bpf_attr_7={@map_id=0xb, 0x1, 0x7fff}, 0x2) 1.809491314s ago: executing program 4 (id=2343): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)={0x6, 0xb, 0x8, @raw=0x1000000}}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) 1.605447477s ago: executing program 4 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.7/usb8/ltm_capable\x00', 0x181800, 0x0) pread64$auto(r5, 0x0, 0xedd, 0x4) inotify_add_watch$auto(r5, &(0x7f00000002c0)='./file0\x00', 0x5) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r6, 0x5015, 0x0) ioctl$auto_OSS_GETVERSION2(r6, 0x80044d76, &(0x7f0000000080)="bdf609c672ff9c806345801ffd7a5ec74b053e936c64fb139db569d5716741159e05f3ce3dda964b156e8cdb8721a3408ad980aab1d147579d0703fcbd78bdaa2a81e2630890b48c58bda184517d50f5de8c6af0c6a287da027a3cd5135fef5a1b57e231b0931c0baebf5dd7f63b42cab64e2ae306993c09cee3446ff7fa181a2edb141fa04a2207dd554839cb8c26bcbe18bc873ca9986599ae1b55fc7b1326eda6ac29f9f8ad59a858f2b67b34923d33467f2ffa720202dcf0c2af5efe6bf35f1643d909fba6775f2300a85b45729d3c085eca552b3eff29b5") ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r6, 0xc0044dff, 0x0) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="569e2d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4000000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEC_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000340)={0x8, 0x6, 0x8001, 0xb, 0x9ba, 0x7, 0x0, 0x6, 0x5, 0x20, 0xc, 0x1, [{0x800, 0x1, 0x8001}, {0x5, 0x7, 0xc}, {0x10000, 0xfffff202, 0xfffffffe}, {0xe, 0x6f}, {0xfe4, 0x6, 0x3}]}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x10000}, @HWSIM_ATTR_PMSR_SUPPORT={0x30, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x1}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 0s ago: executing program 4 (id=2345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, r1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x14, r3, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/projid_map\x00', 0x0, 0x0) r4 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp1\x00', 0x581000, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): 941.462296][T13559] do_syscall_64+0xcd/0x250 [ 941.462331][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.462363][T13559] RIP: 0033:0x7ff47d98d169 [ 941.462381][T13559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.462404][T13559] RSP: 002b:00007ff47e7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 941.462427][T13559] RAX: ffffffffffffffda RBX: 00007ff47dba5fa0 RCX: 00007ff47d98d169 [ 941.462443][T13559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00004000000000c0 [ 941.462458][T13559] RBP: 00007ff47e7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 941.462473][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.462488][T13559] R13: 0000000000000000 R14: 00007ff47dba5fa0 R15: 00007fffb7aebfc8 [ 941.462516][T13559] [ 944.742582][T13617] usb usb24: check_ctrlrecip: process 13617 (syz.2.1578) requesting ep 01 but needs 81 [ 944.792079][T13617] usb usb24: usbfs: process 13617 (syz.2.1578) did not claim interface 0 before use [ 947.009440][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 947.187947][T13659] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1589'. [ 947.596464][T13669] usb usb24: check_ctrlrecip: process 13669 (syz.3.1591) requesting ep 01 but needs 81 [ 947.697152][T13669] usb usb24: usbfs: process 13669 (syz.3.1591) did not claim interface 0 before use [ 951.168677][T13749] FAULT_INJECTION: forcing a failure. [ 951.168677][T13749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.271067][T13749] CPU: 0 UID: 0 PID: 13749 Comm: syz.3.1603 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 951.271099][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 951.271113][T13749] Call Trace: [ 951.271120][T13749] [ 951.271129][T13749] dump_stack_lvl+0x16c/0x1f0 [ 951.271167][T13749] should_fail_ex+0x50a/0x650 [ 951.271212][T13749] _copy_to_user+0x32/0xd0 [ 951.271241][T13749] simple_read_from_buffer+0xd0/0x160 [ 951.271274][T13749] proc_fail_nth_read+0x198/0x270 [ 951.271316][T13749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.271346][T13749] ? rw_verify_area+0xcf/0x680 [ 951.271374][T13749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.271402][T13749] vfs_read+0x1df/0xbf0 [ 951.271433][T13749] ? __fget_files+0x1fc/0x3a0 [ 951.271467][T13749] ? __pfx___mutex_lock+0x10/0x10 [ 951.271502][T13749] ? __pfx_vfs_read+0x10/0x10 [ 951.271539][T13749] ? __fget_files+0x206/0x3a0 [ 951.271585][T13749] ksys_read+0x12b/0x250 [ 951.271616][T13749] ? __pfx_ksys_read+0x10/0x10 [ 951.271654][T13749] do_syscall_64+0xcd/0x250 [ 951.271690][T13749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.271723][T13749] RIP: 0033:0x7ffbb7f8bb7c [ 951.271740][T13749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 951.271762][T13749] RSP: 002b:00007ffbb8cff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.271784][T13749] RAX: ffffffffffffffda RBX: 00007ffbb81a5fa0 RCX: 00007ffbb7f8bb7c [ 951.271799][T13749] RDX: 000000000000000f RSI: 00007ffbb8cff0a0 RDI: 0000000000000004 [ 951.271814][T13749] RBP: 00007ffbb8cff090 R08: 0000000000000000 R09: 0000000000000000 [ 951.271827][T13749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.271842][T13749] R13: 0000000000000000 R14: 00007ffbb81a5fa0 R15: 00007ffdd7788ac8 [ 951.271869][T13749] [ 952.176716][T13758] usb usb24: check_ctrlrecip: process 13758 (syz.4.1605) requesting ep 01 but needs 81 [ 952.237506][T13758] usb usb24: usbfs: process 13758 (syz.4.1605) did not claim interface 0 before use [ 953.807794][T13765] Invalid ELF header magic: != ELF [ 956.213468][T13802] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 962.883372][T13900] usb usb24: check_ctrlrecip: process 13900 (syz.4.1635) requesting ep 01 but needs 81 [ 962.984044][T13900] usb usb24: usbfs: process 13900 (syz.4.1635) did not claim interface 0 before use [ 966.670914][T13942] usb usb24: check_ctrlrecip: process 13942 (syz.4.1648) requesting ep 01 but needs 81 [ 966.734424][T13942] usb usb24: usbfs: process 13942 (syz.4.1648) did not claim interface 0 before use [ 971.420043][T14008] Invalid ELF header magic: != ELF [ 973.863440][T14065] Invalid ELF header magic: != ELF [ 979.877185][T14149] sp0: Synchronizing with TNC [ 979.895719][T14148] [U] [ 980.141792][T14158] FAULT_INJECTION: forcing a failure. [ 980.141792][T14158] name failslab, interval 1, probability 0, space 0, times 0 [ 980.159803][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.0.1699 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 980.159844][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 980.159863][T14158] Call Trace: [ 980.159873][T14158] [ 980.159885][T14158] dump_stack_lvl+0x16c/0x1f0 [ 980.159938][T14158] should_fail_ex+0x50a/0x650 [ 980.159970][T14158] ? fs_reclaim_acquire+0xae/0x150 [ 980.160012][T14158] should_failslab+0xc2/0x120 [ 980.160042][T14158] __kmalloc_cache_node_noprof+0x6e/0x420 [ 980.160090][T14158] ? __alloc_workqueue+0x694/0x1810 [ 980.160129][T14158] __alloc_workqueue+0x694/0x1810 [ 980.160171][T14158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 980.160217][T14158] alloc_workqueue+0xd3/0x200 [ 980.160257][T14158] ? __pfx_alloc_workqueue+0x10/0x10 [ 980.160299][T14158] ? __pfx___debug_object_init+0x10/0x10 [ 980.160349][T14158] nci_register_device+0x221/0xb80 [ 980.160385][T14158] ? __pfx_nci_register_device+0x10/0x10 [ 980.160432][T14158] virtual_ncidev_open+0x141/0x220 [ 980.160479][T14158] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 980.160524][T14158] misc_open+0x35a/0x420 [ 980.160556][T14158] ? __pfx_misc_open+0x10/0x10 [ 980.160587][T14158] chrdev_open+0x237/0x6a0 [ 980.160633][T14158] ? __pfx_apparmor_file_open+0x10/0x10 [ 980.160674][T14158] ? __pfx_chrdev_open+0x10/0x10 [ 980.160722][T14158] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 980.160769][T14158] do_dentry_open+0x735/0x1c40 [ 980.160829][T14158] ? __pfx_chrdev_open+0x10/0x10 [ 980.160877][T14158] ? inode_permission+0xdd/0x5f0 [ 980.160914][T14158] vfs_open+0x82/0x3f0 [ 980.160961][T14158] ? may_open+0x1f2/0x400 [ 980.161000][T14158] path_openat+0x1e88/0x2d80 [ 980.161059][T14158] ? __pfx_path_openat+0x10/0x10 [ 980.161107][T14158] ? __pfx___lock_acquire+0x10/0x10 [ 980.161150][T14158] ? lock_acquire.part.0+0x11b/0x380 [ 980.161194][T14158] ? find_held_lock+0x2d/0x110 [ 980.161234][T14158] do_filp_open+0x20c/0x470 [ 980.161283][T14158] ? __pfx_do_filp_open+0x10/0x10 [ 980.161330][T14158] ? find_held_lock+0x2d/0x110 [ 980.161393][T14158] ? alloc_fd+0x41f/0x760 [ 980.161452][T14158] do_sys_openat2+0x17a/0x1e0 [ 980.161486][T14158] ? __pfx_do_sys_openat2+0x10/0x10 [ 980.161526][T14158] ? __fget_files+0x206/0x3a0 [ 980.161582][T14158] __x64_sys_openat+0x175/0x210 [ 980.161618][T14158] ? __pfx___x64_sys_openat+0x10/0x10 [ 980.161654][T14158] ? ksys_write+0x1ba/0x250 [ 980.161712][T14158] do_syscall_64+0xcd/0x250 [ 980.161764][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.161822][T14158] RIP: 0033:0x7f76fad8d169 [ 980.161848][T14158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.161880][T14158] RSP: 002b:00007f76fbb41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 980.161911][T14158] RAX: ffffffffffffffda RBX: 00007f76fafa5fa0 RCX: 00007f76fad8d169 [ 980.161931][T14158] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 980.161950][T14158] RBP: 00007f76fbb41090 R08: 0000000000000000 R09: 0000000000000000 [ 980.161968][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.161985][T14158] R13: 0000000000000001 R14: 00007f76fafa5fa0 R15: 00007ffd895ffd68 [ 980.162024][T14158] [ 980.512145][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.651637][T14385] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1756'. [ 994.127468][T14422] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 994.446084][T14428] FAULT_INJECTION: forcing a failure. [ 994.446084][T14428] name failslab, interval 1, probability 0, space 0, times 0 [ 994.464049][T14428] CPU: 1 UID: 0 PID: 14428 Comm: syz.0.1764 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 994.464089][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 994.464109][T14428] Call Trace: [ 994.464119][T14428] [ 994.464132][T14428] dump_stack_lvl+0x16c/0x1f0 [ 994.464193][T14428] should_fail_ex+0x50a/0x650 [ 994.464224][T14428] ? fs_reclaim_acquire+0xae/0x150 [ 994.464270][T14428] should_failslab+0xc2/0x120 [ 994.464303][T14428] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 994.464374][T14428] ? __pfx_proc_create_net_data+0x10/0x10 [ 994.464409][T14428] ? nf_log_net_init+0x9f/0x450 [ 994.464462][T14428] ? __pfx_nf_log_net_init+0x10/0x10 [ 994.464509][T14428] kmemdup_noprof+0x29/0x60 [ 994.464551][T14428] nf_log_net_init+0x9f/0x450 [ 994.464598][T14428] ? __pfx_nf_log_net_init+0x10/0x10 [ 994.464642][T14428] ops_init+0x1df/0x5f0 [ 994.464679][T14428] setup_net+0x21f/0x860 [ 994.464715][T14428] ? __pfx_setup_net+0x10/0x10 [ 994.464746][T14428] ? down_read_killable+0xcc/0x380 [ 994.464799][T14428] ? __pfx_down_read_killable+0x10/0x10 [ 994.464850][T14428] ? __raw_spin_lock_init+0x3a/0x110 [ 994.464885][T14428] ? debug_mutex_init+0x37/0x70 [ 994.464925][T14428] copy_net_ns+0x2a6/0x5f0 [ 994.464966][T14428] create_new_namespaces+0x3ea/0xad0 [ 994.465030][T14428] copy_namespaces+0x468/0x560 [ 994.465085][T14428] copy_process+0x29fc/0x8c50 [ 994.465140][T14428] ? __pfx_copy_process+0x10/0x10 [ 994.465175][T14428] ? try_to_wake_up+0x953/0x1490 [ 994.465229][T14428] ? plist_check_head+0xa3/0x150 [ 994.465276][T14428] ? wake_up_q+0xb0/0x160 [ 994.465320][T14428] ? do_raw_spin_unlock+0x172/0x230 [ 994.465359][T14428] kernel_clone+0xfd/0x960 [ 994.465390][T14428] ? __pfx_futex_wake+0x10/0x10 [ 994.465436][T14428] ? __pfx_kernel_clone+0x10/0x10 [ 994.465502][T14428] __do_sys_clone+0xcf/0x120 [ 994.465535][T14428] ? __pfx___do_sys_clone+0x10/0x10 [ 994.465588][T14428] ? rcu_is_watching+0x12/0xc0 [ 994.465636][T14428] do_syscall_64+0xcd/0x250 [ 994.465690][T14428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.465736][T14428] RIP: 0033:0x7f76fad8d169 [ 994.465763][T14428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.465796][T14428] RSP: 002b:00007f76fbb1ffe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 994.465829][T14428] RAX: ffffffffffffffda RBX: 00007f76fafa6080 RCX: 00007f76fad8d169 [ 994.465852][T14428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000001432a0091 [ 994.465873][T14428] RBP: 00007f76fae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 994.465894][T14428] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 994.465914][T14428] R13: 0000000000000000 R14: 00007f76fafa6080 R15: 00007ffd895ffd68 [ 994.465956][T14428] [ 994.501905][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1766'. [ 994.815548][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 996.449809][T14471] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 996.516090][T14471] CPU: 1 UID: 0 PID: 14471 Comm: syz.4.1775 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 996.516138][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 996.516158][T14471] Call Trace: [ 996.516168][T14471] [ 996.516181][T14471] dump_stack_lvl+0x16c/0x1f0 [ 996.516237][T14471] sysfs_warn_dup+0x7f/0xa0 [ 996.516280][T14471] sysfs_do_create_link_sd+0x124/0x140 [ 996.516331][T14471] sysfs_create_link+0x61/0xc0 [ 996.516376][T14471] device_add+0x62e/0x1a70 [ 996.516431][T14471] ? __pfx_device_add+0x10/0x10 [ 996.516478][T14471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.516536][T14471] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 996.516600][T14471] wiphy_register+0x1cab/0x2860 [ 996.516632][T14471] ? __pfx__dev_printk+0x10/0x10 [ 996.516681][T14471] ? __pfx_wiphy_register+0x10/0x10 [ 996.516729][T14471] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 996.516788][T14471] ieee80211_register_hw+0x2455/0x4060 [ 996.516859][T14471] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 996.516910][T14471] ? net_generic+0xea/0x2a0 [ 996.516957][T14471] ? lockdep_init_map_type+0x16d/0x7d0 [ 996.517011][T14471] ? __asan_memset+0x23/0x50 [ 996.517056][T14471] ? __hrtimer_init+0x106/0x2c0 [ 996.517120][T14471] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 996.517200][T14471] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 996.517266][T14471] hwsim_new_radio_nl+0xb42/0x12b0 [ 996.517317][T14471] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 996.517383][T14471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 996.517422][T14471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 996.517470][T14471] genl_family_rcv_msg_doit+0x202/0x2f0 [ 996.517509][T14471] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 996.517560][T14471] ? trace_cap_capable+0x1a2/0x210 [ 996.517610][T14471] ? bpf_lsm_capable+0x9/0x10 [ 996.517646][T14471] ? security_capable+0x7e/0x260 [ 996.517683][T14471] ? ns_capable+0xd7/0x110 [ 996.517734][T14471] genl_rcv_msg+0x565/0x800 [ 996.517775][T14471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.517811][T14471] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 996.517879][T14471] netlink_rcv_skb+0x16b/0x440 [ 996.517930][T14471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.517968][T14471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.518038][T14471] ? down_read+0xc9/0x330 [ 996.518089][T14471] ? __pfx_down_read+0x10/0x10 [ 996.518144][T14471] ? netlink_deliver_tap+0x1ae/0xd30 [ 996.518202][T14471] genl_rcv+0x28/0x40 [ 996.518231][T14471] netlink_unicast+0x53c/0x7f0 [ 996.518289][T14471] ? __pfx_netlink_unicast+0x10/0x10 [ 996.518344][T14471] ? __phys_addr_symbol+0x30/0x80 [ 996.518378][T14471] ? __check_object_size+0x488/0x710 [ 996.518419][T14471] netlink_sendmsg+0x8b8/0xd70 [ 996.518478][T14471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.518552][T14471] ____sys_sendmsg+0xaaf/0xc90 [ 996.518596][T14471] ? copy_msghdr_from_user+0x10b/0x160 [ 996.518651][T14471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.518716][T14471] ___sys_sendmsg+0x135/0x1e0 [ 996.518775][T14471] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.518846][T14471] ? __pfx_lock_release+0x10/0x10 [ 996.518892][T14471] ? trace_lock_acquire+0x14e/0x1f0 [ 996.518947][T14471] ? __fget_files+0x206/0x3a0 [ 996.519009][T14471] __sys_sendmsg+0x16e/0x220 [ 996.519042][T14471] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.519096][T14471] ? __x64_sys_futex+0x1e1/0x4c0 [ 996.519165][T14471] do_syscall_64+0xcd/0x250 [ 996.519220][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.519267][T14471] RIP: 0033:0x7effbbd8d169 [ 996.519294][T14471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.519327][T14471] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.519364][T14471] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 996.519387][T14471] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 996.519408][T14471] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 996.519429][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.519448][T14471] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 996.519492][T14471] [ 997.790363][T14490] usb usb24: check_ctrlrecip: process 14490 (syz.0.1782) requesting ep 01 but needs 81 [ 997.822899][T14490] usb usb24: usbfs: process 14490 (syz.0.1782) did not claim interface 0 before use [ 998.507411][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.515040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.372817][T14554] random: crng reseeded on system resumption [ 1003.574106][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 1008.067916][T14646] sock: sock_timestamping_bind_phc: sock not bind to device [ 1008.173294][T14651] Invalid ELF header magic: != ELF [ 1008.775346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.887957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.379424][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 1011.100834][T14696] netlink: zone id is out of range [ 1011.106630][T14696] netlink: zone id is out of range [ 1011.140673][T14696] netlink: zone id is out of range [ 1011.171962][T14696] netlink: zone id is out of range [ 1011.204092][T14696] netlink: zone id is out of range [ 1011.209794][T14696] netlink: zone id is out of range [ 1011.263989][T14696] netlink: zone id is out of range [ 1011.269680][T14696] netlink: zone id is out of range [ 1011.304183][T14696] netlink: zone id is out of range [ 1011.309874][T14696] netlink: zone id is out of range [ 1017.089055][T14774] usb usb24: check_ctrlrecip: process 14774 (syz.4.1837) requesting ep 01 but needs 81 [ 1017.114337][T14774] usb usb24: usbfs: process 14774 (syz.4.1837) did not claim interface 0 before use [ 1018.040229][T14792] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1846'. [ 1018.363374][T14796] ovs_: entered promiscuous mode [ 1020.683657][T14837] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1020.734227][T14837] CPU: 0 UID: 0 PID: 14837 Comm: syz.2.1856 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1020.734272][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1020.734292][T14837] Call Trace: [ 1020.734303][T14837] [ 1020.734316][T14837] dump_stack_lvl+0x16c/0x1f0 [ 1020.734370][T14837] sysfs_warn_dup+0x7f/0xa0 [ 1020.734414][T14837] sysfs_do_create_link_sd+0x124/0x140 [ 1020.734461][T14837] sysfs_create_link+0x61/0xc0 [ 1020.734505][T14837] device_add+0x62e/0x1a70 [ 1020.734556][T14837] ? __pfx_device_add+0x10/0x10 [ 1020.734601][T14837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1020.734657][T14837] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1020.734712][T14837] wiphy_register+0x1cab/0x2860 [ 1020.734762][T14837] ? __pfx__dev_printk+0x10/0x10 [ 1020.734810][T14837] ? __pfx_wiphy_register+0x10/0x10 [ 1020.734858][T14837] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1020.734916][T14837] ieee80211_register_hw+0x2455/0x4060 [ 1020.735001][T14837] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1020.735053][T14837] ? net_generic+0xea/0x2a0 [ 1020.735101][T14837] ? lockdep_init_map_type+0x16d/0x7d0 [ 1020.735156][T14837] ? __asan_memset+0x23/0x50 [ 1020.735202][T14837] ? __hrtimer_init+0x106/0x2c0 [ 1020.735262][T14837] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1020.735339][T14837] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1020.735405][T14837] hwsim_new_radio_nl+0xb42/0x12b0 [ 1020.735463][T14837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1020.735528][T14837] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1020.735568][T14837] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1020.735618][T14837] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1020.735657][T14837] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1020.735694][T14837] ? trace_cap_capable+0x1a2/0x210 [ 1020.735743][T14837] ? bpf_lsm_capable+0x9/0x10 [ 1020.735779][T14837] ? security_capable+0x7e/0x260 [ 1020.735816][T14837] ? ns_capable+0xd7/0x110 [ 1020.735871][T14837] genl_rcv_msg+0x565/0x800 [ 1020.735910][T14837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1020.735948][T14837] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1020.736016][T14837] ? __pfx___lock_acquire+0x10/0x10 [ 1020.736073][T14837] netlink_rcv_skb+0x16b/0x440 [ 1020.736137][T14837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1020.736174][T14837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1020.736249][T14837] ? down_read+0xc9/0x330 [ 1020.736302][T14837] ? __pfx_down_read+0x10/0x10 [ 1020.736356][T14837] ? netlink_deliver_tap+0x1ae/0xd30 [ 1020.736411][T14837] genl_rcv+0x28/0x40 [ 1020.736440][T14837] netlink_unicast+0x53c/0x7f0 [ 1020.736495][T14837] ? __pfx_netlink_unicast+0x10/0x10 [ 1020.736548][T14837] ? __phys_addr_symbol+0x30/0x80 [ 1020.736582][T14837] ? __check_object_size+0x488/0x710 [ 1020.736620][T14837] netlink_sendmsg+0x8b8/0xd70 [ 1020.736678][T14837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.736747][T14837] ____sys_sendmsg+0xaaf/0xc90 [ 1020.736789][T14837] ? copy_msghdr_from_user+0x10b/0x160 [ 1020.736841][T14837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1020.736902][T14837] ___sys_sendmsg+0x135/0x1e0 [ 1020.736964][T14837] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.737037][T14837] ? __pfx_lock_release+0x10/0x10 [ 1020.737084][T14837] ? trace_lock_acquire+0x14e/0x1f0 [ 1020.737136][T14837] ? __fget_files+0x206/0x3a0 [ 1020.737197][T14837] __sys_sendmsg+0x16e/0x220 [ 1020.737230][T14837] ? __pfx___sys_sendmsg+0x10/0x10 [ 1020.737283][T14837] ? __x64_sys_futex+0x1e1/0x4c0 [ 1020.737348][T14837] do_syscall_64+0xcd/0x250 [ 1020.737401][T14837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.737447][T14837] RIP: 0033:0x7ff47d98d169 [ 1020.737474][T14837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.737506][T14837] RSP: 002b:00007ff47e7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.737538][T14837] RAX: ffffffffffffffda RBX: 00007ff47dba6160 RCX: 00007ff47d98d169 [ 1020.737560][T14837] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1020.737580][T14837] RBP: 00007ff47da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.737600][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.737619][T14837] R13: 0000000000000000 R14: 00007ff47dba6160 R15: 00007fffb7aebfc8 [ 1020.737661][T14837] [ 1027.740066][T14959] syz.4.1883: vmalloc error: size 1712128, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1027.808872][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.4.1883 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1027.808919][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1027.808940][T14959] Call Trace: [ 1027.808951][T14959] [ 1027.808964][T14959] dump_stack_lvl+0x16c/0x1f0 [ 1027.809019][T14959] warn_alloc+0x24d/0x3a0 [ 1027.809075][T14959] ? __pfx_warn_alloc+0x10/0x10 [ 1027.809133][T14959] ? alloc_pages_mpol+0x25b/0x540 [ 1027.809169][T14959] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1027.809220][T14959] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 1027.809285][T14959] ? __snd_dma_alloc_pages+0x50/0x90 [ 1027.809348][T14959] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1027.809401][T14959] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1027.809461][T14959] ? __snd_dma_alloc_pages+0x50/0x90 [ 1027.809514][T14959] vmalloc_noprof+0x6b/0x90 [ 1027.809568][T14959] ? __snd_dma_alloc_pages+0x50/0x90 [ 1027.809618][T14959] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1027.809672][T14959] __snd_dma_alloc_pages+0x50/0x90 [ 1027.809725][T14959] snd_dma_alloc_dir_pages+0x151/0x240 [ 1027.809781][T14959] do_alloc_pages+0x115/0x270 [ 1027.809835][T14959] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1027.809893][T14959] snd_pcm_hw_params+0x15e6/0x1b20 [ 1027.809951][T14959] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1027.810004][T14959] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 1027.810055][T14959] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1027.810109][T14959] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1027.810162][T14959] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 1027.810225][T14959] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1027.810272][T14959] ? __pfx___mutex_lock+0x10/0x10 [ 1027.810338][T14959] ? snd_pcm_stream_unlock_irq+0x90/0xb0 [ 1027.810388][T14959] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1027.810432][T14959] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 1027.810476][T14959] ? lockdep_hardirqs_on+0x7c/0x110 [ 1027.810528][T14959] snd_pcm_oss_poll+0x54b/0xaf0 [ 1027.810576][T14959] ? lock_acquire+0x2f/0xb0 [ 1027.810623][T14959] ? __pfx___pollwait+0x10/0x10 [ 1027.810672][T14959] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1027.810726][T14959] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1027.810766][T14959] do_select+0xd88/0x17e0 [ 1027.810843][T14959] ? __pfx_do_select+0x10/0x10 [ 1027.810889][T14959] ? __pfx_mark_lock+0x10/0x10 [ 1027.810930][T14959] ? mark_lock+0xb5/0xc60 [ 1027.810976][T14959] ? __pfx_lock_release+0x10/0x10 [ 1027.811021][T14959] ? __pfx___pollwait+0x10/0x10 [ 1027.811083][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811131][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811179][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811227][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811273][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811322][T14959] ? __pfx_pollwake+0x10/0x10 [ 1027.811389][T14959] ? trace_lock_acquire+0x14e/0x1f0 [ 1027.811432][T14959] ? lock_acquire+0x2f/0xb0 [ 1027.811475][T14959] ? __might_fault+0xe3/0x190 [ 1027.811509][T14959] ? __might_fault+0xe3/0x190 [ 1027.811579][T14959] ? core_sys_select+0x459/0xb80 [ 1027.811626][T14959] core_sys_select+0x459/0xb80 [ 1027.811684][T14959] ? __pfx_core_sys_select+0x10/0x10 [ 1027.811742][T14959] ? futex_wake+0x18e/0x4e0 [ 1027.811822][T14959] ? __pfx_do_futex+0x10/0x10 [ 1027.811879][T14959] ? fd_install+0x223/0x750 [ 1027.811930][T14959] kern_select+0x15e/0x1e0 [ 1027.811978][T14959] ? __pfx_kern_select+0x10/0x10 [ 1027.812027][T14959] ? xfd_validate_state+0x5d/0x180 [ 1027.812092][T14959] ? rcu_is_watching+0x12/0xc0 [ 1027.812134][T14959] __x64_sys_select+0xbd/0x160 [ 1027.812181][T14959] ? do_syscall_64+0x91/0x250 [ 1027.812231][T14959] ? lockdep_hardirqs_on+0x7c/0x110 [ 1027.812279][T14959] do_syscall_64+0xcd/0x250 [ 1027.812333][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.812380][T14959] RIP: 0033:0x7effbbd8d169 [ 1027.812408][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.812442][T14959] RSP: 002b:00007effbcb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1027.812475][T14959] RAX: ffffffffffffffda RBX: 00007effbbfa5fa0 RCX: 00007effbbd8d169 [ 1027.812499][T14959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1027.812519][T14959] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1027.812548][T14959] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1027.812569][T14959] R13: 0000000000000000 R14: 00007effbbfa5fa0 R15: 00007ffe4a4e5858 [ 1027.812613][T14959] [ 1027.812626][T14959] Mem-Info: [ 1028.334671][T14962] blktrace: Concurrent blktraces are not allowed on ram7 [ 1028.564473][T14959] active_anon:59188 inactive_anon:0 isolated_anon:0 [ 1028.564473][T14959] active_file:14534 inactive_file:44897 isolated_file:0 [ 1028.564473][T14959] unevictable:768 dirty:768 writeback:0 [ 1028.564473][T14959] slab_reclaimable:11207 slab_unreclaimable:97256 [ 1028.564473][T14959] mapped:43918 shmem:48803 pagetables:1186 [ 1028.564473][T14959] sec_pagetables:0 bounce:0 [ 1028.564473][T14959] kernel_misc_reclaimable:0 [ 1028.564473][T14959] free:1274900 free_pcp:2033 free_cma:0 [ 1028.788289][T14959] Node 0 active_anon:240236kB inactive_anon:0kB active_file:58136kB inactive_file:179584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177472kB dirty:3072kB writeback:0kB shmem:196592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:11436kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no [ 1028.883905][T14959] Node 1 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no [ 1028.993948][T14959] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.078152][T14959] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1029.188153][T14959] Node 0 DMA32 free:1177952kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:238128kB inactive_anon:0kB active_file:58136kB inactive_file:179488kB unevictable:1536kB writepending:3072kB present:3129332kB managed:2547520kB mlocked:0kB bounce:0kB free_pcp:6728kB local_pcp:5124kB free_cma:0kB [ 1029.365694][T14959] lowmem_reserve[]: 0 0 0 0 0 [ 1029.453282][T14959] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1029.484376][T14959] lowmem_reserve[]: 0 0 0 0 0 [ 1029.489680][T14959] Node 1 Normal free:3902912kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.521865][T14959] lowmem_reserve[]: 0 0 0 0 0 [ 1029.527223][T14959] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1029.543258][T14959] Node 0 DMA32: 120*4kB (UE) 548*8kB (UME) 380*16kB (UME) 292*32kB (UME) 93*64kB (UME) 510*128kB (UME) 190*256kB (UM) 160*512kB (UM) 94*1024kB (UME) 16*2048kB (UME) 203*4096kB (UM) = 1182592kB [ 1029.570566][T14959] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1029.596801][T14959] Node 1 Normal: 162*4kB (UME) 63*8kB (UME) 36*16kB (UME) 208*32kB (UME) 110*64kB (UME) 35*128kB (UME) 20*256kB (UME) 8*512kB (UM) 9*1024kB (UME) 5*2048kB (UM) 941*4096kB (M) = 3902912kB [ 1029.744461][T14959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.756246][T14959] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1029.766904][T14959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.777856][T14959] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1029.789430][T14959] 111576 total pagecache pages [ 1029.795133][T14959] 99 pages in swap cache [ 1029.799936][T14959] Free swap = 120300kB [ 1029.805204][T14959] Total swap = 124996kB [ 1029.809911][T14959] 2097051 pages RAM [ 1029.814675][T14959] 0 pages HighMem/MovableOnly [ 1029.822006][T14959] 428513 pages reserved [ 1029.827363][T14959] 0 pages cma reserved [ 1035.086390][T15060] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1035.274038][T15060] CPU: 0 UID: 0 PID: 15060 Comm: syz.4.1903 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1035.274083][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1035.274102][T15060] Call Trace: [ 1035.274111][T15060] [ 1035.274123][T15060] dump_stack_lvl+0x16c/0x1f0 [ 1035.274176][T15060] sysfs_warn_dup+0x7f/0xa0 [ 1035.274223][T15060] sysfs_do_create_link_sd+0x124/0x140 [ 1035.274271][T15060] sysfs_create_link+0x61/0xc0 [ 1035.274314][T15060] device_add+0x62e/0x1a70 [ 1035.274369][T15060] ? __pfx_device_add+0x10/0x10 [ 1035.274415][T15060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1035.274471][T15060] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1035.274525][T15060] wiphy_register+0x1cab/0x2860 [ 1035.274555][T15060] ? __pfx__dev_printk+0x10/0x10 [ 1035.274601][T15060] ? __pfx_wiphy_register+0x10/0x10 [ 1035.274644][T15060] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1035.274698][T15060] ieee80211_register_hw+0x2455/0x4060 [ 1035.274766][T15060] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1035.274815][T15060] ? net_generic+0xea/0x2a0 [ 1035.274862][T15060] ? lockdep_init_map_type+0x16d/0x7d0 [ 1035.274916][T15060] ? __asan_memset+0x23/0x50 [ 1035.274965][T15060] ? __hrtimer_init+0x106/0x2c0 [ 1035.275013][T15060] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1035.275080][T15060] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1035.275135][T15060] hwsim_new_radio_nl+0xb42/0x12b0 [ 1035.275182][T15060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.275236][T15060] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1035.275269][T15060] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1035.275309][T15060] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1035.275342][T15060] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1035.275372][T15060] ? trace_cap_capable+0x1a2/0x210 [ 1035.275414][T15060] ? bpf_lsm_capable+0x9/0x10 [ 1035.275442][T15060] ? security_capable+0x7e/0x260 [ 1035.275473][T15060] ? ns_capable+0xd7/0x110 [ 1035.275516][T15060] genl_rcv_msg+0x565/0x800 [ 1035.275549][T15060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.275580][T15060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1035.275635][T15060] netlink_rcv_skb+0x16b/0x440 [ 1035.275677][T15060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.275710][T15060] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.275769][T15060] ? down_read+0xc9/0x330 [ 1035.275810][T15060] ? __pfx_down_read+0x10/0x10 [ 1035.275855][T15060] ? netlink_deliver_tap+0x1ae/0xd30 [ 1035.275902][T15060] genl_rcv+0x28/0x40 [ 1035.275925][T15060] netlink_unicast+0x53c/0x7f0 [ 1035.275986][T15060] ? __pfx_netlink_unicast+0x10/0x10 [ 1035.276031][T15060] ? __phys_addr_symbol+0x30/0x80 [ 1035.276060][T15060] ? __check_object_size+0x488/0x710 [ 1035.276094][T15060] netlink_sendmsg+0x8b8/0xd70 [ 1035.276142][T15060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.276203][T15060] ____sys_sendmsg+0xaaf/0xc90 [ 1035.276238][T15060] ? copy_msghdr_from_user+0x10b/0x160 [ 1035.276284][T15060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.276337][T15060] ___sys_sendmsg+0x135/0x1e0 [ 1035.276384][T15060] ? __pfx____sys_sendmsg+0x10/0x10 [ 1035.276443][T15060] ? __pfx_lock_release+0x10/0x10 [ 1035.276481][T15060] ? trace_lock_acquire+0x14e/0x1f0 [ 1035.276526][T15060] ? __fget_files+0x206/0x3a0 [ 1035.276577][T15060] __sys_sendmsg+0x16e/0x220 [ 1035.276603][T15060] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.276647][T15060] ? __x64_sys_futex+0x1e1/0x4c0 [ 1035.276705][T15060] do_syscall_64+0xcd/0x250 [ 1035.276750][T15060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.276789][T15060] RIP: 0033:0x7effbbd8d169 [ 1035.276812][T15060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.276841][T15060] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.276868][T15060] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1035.276888][T15060] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1035.276906][T15060] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.276925][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.276958][T15060] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1035.276996][T15060] [ 1039.804388][T15104] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1039.864075][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.2.1911 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1039.864121][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1039.864142][T15104] Call Trace: [ 1039.864151][T15104] [ 1039.864164][T15104] dump_stack_lvl+0x16c/0x1f0 [ 1039.864218][T15104] sysfs_warn_dup+0x7f/0xa0 [ 1039.864261][T15104] sysfs_do_create_link_sd+0x124/0x140 [ 1039.864309][T15104] sysfs_create_link+0x61/0xc0 [ 1039.864353][T15104] device_add+0x62e/0x1a70 [ 1039.864408][T15104] ? __pfx_device_add+0x10/0x10 [ 1039.864463][T15104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1039.864518][T15104] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1039.864577][T15104] wiphy_register+0x1cab/0x2860 [ 1039.864610][T15104] ? __pfx__dev_printk+0x10/0x10 [ 1039.864659][T15104] ? __pfx_wiphy_register+0x10/0x10 [ 1039.864706][T15104] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1039.864764][T15104] ieee80211_register_hw+0x2455/0x4060 [ 1039.864835][T15104] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1039.864887][T15104] ? net_generic+0xea/0x2a0 [ 1039.864934][T15104] ? lockdep_init_map_type+0x16d/0x7d0 [ 1039.864990][T15104] ? __asan_memset+0x23/0x50 [ 1039.865035][T15104] ? __hrtimer_init+0x106/0x2c0 [ 1039.865093][T15104] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1039.865178][T15104] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1039.865246][T15104] hwsim_new_radio_nl+0xb42/0x12b0 [ 1039.865303][T15104] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1039.865370][T15104] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1039.865409][T15104] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1039.865464][T15104] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1039.865504][T15104] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.865540][T15104] ? trace_cap_capable+0x1a2/0x210 [ 1039.865589][T15104] ? bpf_lsm_capable+0x9/0x10 [ 1039.865624][T15104] ? security_capable+0x7e/0x260 [ 1039.865662][T15104] ? ns_capable+0xd7/0x110 [ 1039.865714][T15104] genl_rcv_msg+0x565/0x800 [ 1039.865754][T15104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.865791][T15104] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1039.865847][T15104] ? __pfx___lock_acquire+0x10/0x10 [ 1039.865904][T15104] netlink_rcv_skb+0x16b/0x440 [ 1039.865956][T15104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.865994][T15104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.866067][T15104] ? down_read+0xc9/0x330 [ 1039.866117][T15104] ? __pfx_down_read+0x10/0x10 [ 1039.866171][T15104] ? netlink_deliver_tap+0x1ae/0xd30 [ 1039.866229][T15104] genl_rcv+0x28/0x40 [ 1039.866257][T15104] netlink_unicast+0x53c/0x7f0 [ 1039.866314][T15104] ? __pfx_netlink_unicast+0x10/0x10 [ 1039.866367][T15104] ? __phys_addr_symbol+0x30/0x80 [ 1039.866401][T15104] ? __check_object_size+0x488/0x710 [ 1039.866449][T15104] netlink_sendmsg+0x8b8/0xd70 [ 1039.866509][T15104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.866579][T15104] ____sys_sendmsg+0xaaf/0xc90 [ 1039.866622][T15104] ? copy_msghdr_from_user+0x10b/0x160 [ 1039.866677][T15104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.866743][T15104] ___sys_sendmsg+0x135/0x1e0 [ 1039.866800][T15104] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.866874][T15104] ? __pfx_lock_release+0x10/0x10 [ 1039.866919][T15104] ? trace_lock_acquire+0x14e/0x1f0 [ 1039.866974][T15104] ? __fget_files+0x206/0x3a0 [ 1039.867035][T15104] __sys_sendmsg+0x16e/0x220 [ 1039.867067][T15104] ? __pfx___sys_sendmsg+0x10/0x10 [ 1039.867121][T15104] ? __x64_sys_futex+0x1e1/0x4c0 [ 1039.867192][T15104] do_syscall_64+0xcd/0x250 [ 1039.867247][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.867294][T15104] RIP: 0033:0x7ff47d98d169 [ 1039.867322][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.867356][T15104] RSP: 002b:00007ff47e7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.867389][T15104] RAX: ffffffffffffffda RBX: 00007ff47dba6160 RCX: 00007ff47d98d169 [ 1039.867411][T15104] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1039.867441][T15104] RBP: 00007ff47da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.867462][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.867481][T15104] R13: 0000000000000000 R14: 00007ff47dba6160 R15: 00007fffb7aebfc8 [ 1039.867526][T15104] [ 1041.779991][T15130] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1041.805498][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.4.1917 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1041.805546][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1041.805567][T15130] Call Trace: [ 1041.805578][T15130] [ 1041.805592][T15130] dump_stack_lvl+0x16c/0x1f0 [ 1041.805649][T15130] sysfs_warn_dup+0x7f/0xa0 [ 1041.805694][T15130] sysfs_do_create_link_sd+0x124/0x140 [ 1041.805742][T15130] sysfs_create_link+0x61/0xc0 [ 1041.805787][T15130] device_add+0x62e/0x1a70 [ 1041.805841][T15130] ? __pfx_device_add+0x10/0x10 [ 1041.805889][T15130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1041.805945][T15130] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1041.806002][T15130] wiphy_register+0x1cab/0x2860 [ 1041.806034][T15130] ? __pfx__dev_printk+0x10/0x10 [ 1041.806081][T15130] ? __pfx_wiphy_register+0x10/0x10 [ 1041.806127][T15130] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1041.806184][T15130] ieee80211_register_hw+0x2455/0x4060 [ 1041.806259][T15130] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1041.806311][T15130] ? net_generic+0xea/0x2a0 [ 1041.806358][T15130] ? lockdep_init_map_type+0x16d/0x7d0 [ 1041.806412][T15130] ? __asan_memset+0x23/0x50 [ 1041.806457][T15130] ? __hrtimer_init+0x106/0x2c0 [ 1041.806515][T15130] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1041.806594][T15130] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1041.806659][T15130] hwsim_new_radio_nl+0xb42/0x12b0 [ 1041.806716][T15130] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1041.806781][T15130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1041.806820][T15130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1041.806877][T15130] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1041.806917][T15130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1041.806954][T15130] ? trace_cap_capable+0x1a2/0x210 [ 1041.807002][T15130] ? bpf_lsm_capable+0x9/0x10 [ 1041.807038][T15130] ? security_capable+0x7e/0x260 [ 1041.807075][T15130] ? ns_capable+0xd7/0x110 [ 1041.807128][T15130] genl_rcv_msg+0x565/0x800 [ 1041.807168][T15130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1041.807205][T15130] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1041.807283][T15130] netlink_rcv_skb+0x16b/0x440 [ 1041.807334][T15130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1041.807373][T15130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1041.807444][T15130] ? down_read+0xc9/0x330 [ 1041.807496][T15130] ? __pfx_down_read+0x10/0x10 [ 1041.807552][T15130] ? netlink_deliver_tap+0x1ae/0xd30 [ 1041.807608][T15130] genl_rcv+0x28/0x40 [ 1041.807637][T15130] netlink_unicast+0x53c/0x7f0 [ 1041.807695][T15130] ? __pfx_netlink_unicast+0x10/0x10 [ 1041.807748][T15130] ? __phys_addr_symbol+0x30/0x80 [ 1041.807783][T15130] ? __check_object_size+0x488/0x710 [ 1041.807823][T15130] netlink_sendmsg+0x8b8/0xd70 [ 1041.807882][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.807953][T15130] ____sys_sendmsg+0xaaf/0xc90 [ 1041.807996][T15130] ? copy_msghdr_from_user+0x10b/0x160 [ 1041.808050][T15130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1041.808114][T15130] ___sys_sendmsg+0x135/0x1e0 [ 1041.808172][T15130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.808248][T15130] ? __pfx_lock_release+0x10/0x10 [ 1041.808294][T15130] ? trace_lock_acquire+0x14e/0x1f0 [ 1041.808350][T15130] ? __fget_files+0x206/0x3a0 [ 1041.808412][T15130] __sys_sendmsg+0x16e/0x220 [ 1041.808445][T15130] ? __pfx___sys_sendmsg+0x10/0x10 [ 1041.808501][T15130] ? __x64_sys_futex+0x1e1/0x4c0 [ 1041.808570][T15130] do_syscall_64+0xcd/0x250 [ 1041.808625][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.808673][T15130] RIP: 0033:0x7effbbd8d169 [ 1041.808701][T15130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.808735][T15130] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.808768][T15130] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1041.808792][T15130] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1041.808814][T15130] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1041.808835][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.808855][T15130] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1041.808899][T15130] [ 1046.271583][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1927'. [ 1049.213418][T15209] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 1050.233094][T15219] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1050.253934][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.2.1938 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1050.253980][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1050.254002][T15219] Call Trace: [ 1050.254013][T15219] [ 1050.254027][T15219] dump_stack_lvl+0x16c/0x1f0 [ 1050.254085][T15219] sysfs_warn_dup+0x7f/0xa0 [ 1050.254132][T15219] sysfs_do_create_link_sd+0x124/0x140 [ 1050.254185][T15219] sysfs_create_link+0x61/0xc0 [ 1050.254231][T15219] device_add+0x62e/0x1a70 [ 1050.254285][T15219] ? __pfx_device_add+0x10/0x10 [ 1050.254335][T15219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1050.254394][T15219] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1050.254456][T15219] wiphy_register+0x1cab/0x2860 [ 1050.254487][T15219] ? __pfx__dev_printk+0x10/0x10 [ 1050.254548][T15219] ? __pfx_wiphy_register+0x10/0x10 [ 1050.254595][T15219] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1050.254656][T15219] ieee80211_register_hw+0x2455/0x4060 [ 1050.254723][T15219] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1050.254777][T15219] ? net_generic+0xea/0x2a0 [ 1050.254824][T15219] ? lockdep_init_map_type+0x16d/0x7d0 [ 1050.254881][T15219] ? __asan_memset+0x23/0x50 [ 1050.254927][T15219] ? __hrtimer_init+0x106/0x2c0 [ 1050.254987][T15219] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1050.255070][T15219] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1050.255138][T15219] hwsim_new_radio_nl+0xb42/0x12b0 [ 1050.255196][T15219] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1050.255266][T15219] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1050.255308][T15219] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1050.255357][T15219] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1050.255397][T15219] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1050.255433][T15219] ? trace_cap_capable+0x1a2/0x210 [ 1050.255482][T15219] ? bpf_lsm_capable+0x9/0x10 [ 1050.255525][T15219] ? security_capable+0x7e/0x260 [ 1050.255562][T15219] ? ns_capable+0xd7/0x110 [ 1050.255618][T15219] genl_rcv_msg+0x565/0x800 [ 1050.255662][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.255699][T15219] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1050.255762][T15219] ? __pfx___lock_acquire+0x10/0x10 [ 1050.255820][T15219] netlink_rcv_skb+0x16b/0x440 [ 1050.255885][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.255923][T15219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1050.255993][T15219] ? down_read+0xc9/0x330 [ 1050.256046][T15219] ? __pfx_down_read+0x10/0x10 [ 1050.256097][T15219] ? netlink_deliver_tap+0x1ae/0xd30 [ 1050.256154][T15219] genl_rcv+0x28/0x40 [ 1050.256182][T15219] netlink_unicast+0x53c/0x7f0 [ 1050.256240][T15219] ? __pfx_netlink_unicast+0x10/0x10 [ 1050.256293][T15219] ? __phys_addr_symbol+0x30/0x80 [ 1050.256329][T15219] ? __check_object_size+0x488/0x710 [ 1050.256367][T15219] netlink_sendmsg+0x8b8/0xd70 [ 1050.256427][T15219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.256501][T15219] ____sys_sendmsg+0xaaf/0xc90 [ 1050.256542][T15219] ? copy_msghdr_from_user+0x10b/0x160 [ 1050.256596][T15219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1050.256660][T15219] ___sys_sendmsg+0x135/0x1e0 [ 1050.256719][T15219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.256792][T15219] ? __pfx_lock_release+0x10/0x10 [ 1050.256837][T15219] ? trace_lock_acquire+0x14e/0x1f0 [ 1050.256890][T15219] ? __fget_files+0x206/0x3a0 [ 1050.256953][T15219] __sys_sendmsg+0x16e/0x220 [ 1050.256987][T15219] ? __pfx___sys_sendmsg+0x10/0x10 [ 1050.257040][T15219] ? __x64_sys_futex+0x1e1/0x4c0 [ 1050.257110][T15219] do_syscall_64+0xcd/0x250 [ 1050.257166][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.257212][T15219] RIP: 0033:0x7ff47d98d169 [ 1050.257241][T15219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.257294][T15219] RSP: 002b:00007ff47e7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.257325][T15219] RAX: ffffffffffffffda RBX: 00007ff47dba6160 RCX: 00007ff47d98d169 [ 1050.257346][T15219] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1050.257367][T15219] RBP: 00007ff47da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.257387][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.257419][T15219] R13: 0000000000000000 R14: 00007ff47dba6160 R15: 00007fffb7aebfc8 [ 1050.257462][T15219] [ 1051.096769][T15224] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1051.214241][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.3.1939 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1051.214286][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1051.214306][T15224] Call Trace: [ 1051.214316][T15224] [ 1051.214330][T15224] dump_stack_lvl+0x16c/0x1f0 [ 1051.214384][T15224] sysfs_warn_dup+0x7f/0xa0 [ 1051.214426][T15224] sysfs_do_create_link_sd+0x124/0x140 [ 1051.214474][T15224] sysfs_create_link+0x61/0xc0 [ 1051.214518][T15224] device_add+0x62e/0x1a70 [ 1051.214572][T15224] ? __pfx_device_add+0x10/0x10 [ 1051.214619][T15224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1051.214672][T15224] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1051.214728][T15224] wiphy_register+0x1cab/0x2860 [ 1051.214759][T15224] ? __pfx__dev_printk+0x10/0x10 [ 1051.214811][T15224] ? __pfx_wiphy_register+0x10/0x10 [ 1051.214854][T15224] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1051.214911][T15224] ieee80211_register_hw+0x2455/0x4060 [ 1051.214978][T15224] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1051.215028][T15224] ? net_generic+0xea/0x2a0 [ 1051.215074][T15224] ? lockdep_init_map_type+0x16d/0x7d0 [ 1051.215136][T15224] ? __asan_memset+0x23/0x50 [ 1051.215181][T15224] ? __hrtimer_init+0x106/0x2c0 [ 1051.215238][T15224] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1051.215316][T15224] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1051.215383][T15224] hwsim_new_radio_nl+0xb42/0x12b0 [ 1051.215438][T15224] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1051.215502][T15224] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1051.215541][T15224] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1051.215588][T15224] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1051.215626][T15224] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1051.215661][T15224] ? trace_cap_capable+0x1a2/0x210 [ 1051.215708][T15224] ? bpf_lsm_capable+0x9/0x10 [ 1051.215743][T15224] ? security_capable+0x7e/0x260 [ 1051.215779][T15224] ? ns_capable+0xd7/0x110 [ 1051.215830][T15224] genl_rcv_msg+0x565/0x800 [ 1051.215870][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1051.215906][T15224] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1051.215972][T15224] netlink_rcv_skb+0x16b/0x440 [ 1051.216023][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1051.216059][T15224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1051.216137][T15224] ? down_read+0xc9/0x330 [ 1051.216190][T15224] ? __pfx_down_read+0x10/0x10 [ 1051.216244][T15224] ? netlink_deliver_tap+0x1ae/0xd30 [ 1051.216300][T15224] genl_rcv+0x28/0x40 [ 1051.216327][T15224] netlink_unicast+0x53c/0x7f0 [ 1051.216384][T15224] ? __pfx_netlink_unicast+0x10/0x10 [ 1051.216437][T15224] ? __phys_addr_symbol+0x30/0x80 [ 1051.216470][T15224] ? __check_object_size+0x488/0x710 [ 1051.216527][T15224] netlink_sendmsg+0x8b8/0xd70 [ 1051.216588][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.216656][T15224] ____sys_sendmsg+0xaaf/0xc90 [ 1051.216700][T15224] ? copy_msghdr_from_user+0x10b/0x160 [ 1051.216755][T15224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.216816][T15224] ___sys_sendmsg+0x135/0x1e0 [ 1051.216874][T15224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.216948][T15224] ? __pfx_lock_release+0x10/0x10 [ 1051.216995][T15224] ? trace_lock_acquire+0x14e/0x1f0 [ 1051.217050][T15224] ? __fget_files+0x206/0x3a0 [ 1051.217120][T15224] __sys_sendmsg+0x16e/0x220 [ 1051.217155][T15224] ? __pfx___sys_sendmsg+0x10/0x10 [ 1051.217209][T15224] ? __x64_sys_futex+0x1e1/0x4c0 [ 1051.217279][T15224] do_syscall_64+0xcd/0x250 [ 1051.217335][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.217383][T15224] RIP: 0033:0x7ffbb7f8d169 [ 1051.217411][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.217443][T15224] RSP: 002b:00007ffbb5dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.217476][T15224] RAX: ffffffffffffffda RBX: 00007ffbb81a6160 RCX: 00007ffbb7f8d169 [ 1051.217497][T15224] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1051.217517][T15224] RBP: 00007ffbb800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1051.217538][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.217557][T15224] R13: 0000000000000000 R14: 00007ffbb81a6160 R15: 00007ffdd7788ac8 [ 1051.217601][T15224] [ 1053.146721][T15251] netlink: 130 bytes leftover after parsing attributes in process `syz.0.1948'. [ 1053.349619][T15256] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1949'. [ 1054.364974][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 1055.015607][T15272] Invalid ELF header magic: != ELF [ 1056.319622][T15276] kexec: Could not allocate control_code_buffer [ 1056.767060][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 1059.946616][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.953980][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.241365][T15339] usb usb24: check_ctrlrecip: process 15339 (syz.0.1971) requesting ep 01 but needs 81 [ 1060.283019][T15339] usb usb24: usbfs: process 15339 (syz.0.1971) did not claim interface 0 before use [ 1062.994363][T15379] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1981'. [ 1063.028720][T15369] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1981'. [ 1063.066335][T15369] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1981'. [ 1063.465824][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 1063.757870][T15404] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1991'. [ 1063.834219][T15404] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1991'. [ 1064.727967][T15428] usb usb24: check_ctrlrecip: process 15428 (syz.4.1996) requesting ep 01 but needs 81 [ 1064.764692][T15428] usb usb24: usbfs: process 15428 (syz.4.1996) did not claim interface 0 before use [ 1068.347152][T15488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1068.454113][T15488] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1071.671262][T15533] usb usb24: check_ctrlrecip: process 15533 (syz.4.2018) requesting ep 01 but needs 81 [ 1071.722744][T15533] usb usb24: usbfs: process 15533 (syz.4.2018) did not claim interface 0 before use syzkaller syzkaller login: [ 1075.601053][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 1079.734534][T15656] netlink: 'syz.0.2047': attribute type 2 has an invalid length. [ 1081.226615][T15687] bridge0: port 3(bond0) entered blocking state [ 1081.234063][T15687] bridge0: port 3(bond0) entered disabled state [ 1081.241741][T15687] bond0: entered allmulticast mode [ 1081.256841][T15687] bond_slave_0: entered allmulticast mode [ 1081.273446][T15687] bond_slave_1: entered allmulticast mode [ 1081.315028][T15687] bond0: entered promiscuous mode [ 1081.321528][T15687] bond_slave_0: entered promiscuous mode [ 1081.374259][T15687] bond_slave_1: entered promiscuous mode [ 1081.407022][T15687] bridge0: port 3(bond0) entered blocking state [ 1081.414616][T15687] bridge0: port 3(bond0) entered forwarding state [ 1084.094385][T15733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2071'. [ 1084.157480][T15733] nbd: must specify at least one socket [ 1085.190934][T15736] Process accounting resumed [ 1086.203269][T15768] usb usb24: check_ctrlrecip: process 15768 (syz.4.2082) requesting ep 01 but needs 81 [ 1086.233910][T15768] usb usb24: usbfs: process 15768 (syz.4.2082) did not claim interface 0 before use [ 1087.688437][T15790] Invalid ELF header magic: != ELF [ 1089.724823][T15830] Invalid ELF header magic: != ELF [ 1089.746747][T15826] Invalid ELF header magic: != ELF [ 1093.421997][T15876] net_ratelimit: 77 callbacks suppressed [ 1093.422025][T15876] netlink: zone id is out of range [ 1093.496277][T15876] netlink: zone id is out of range [ 1093.502012][T15876] netlink: zone id is out of range [ 1093.589613][T15876] netlink: zone id is out of range [ 1093.701280][T15876] netlink: zone id is out of range [ 1093.774869][T15876] netlink: zone id is out of range [ 1093.780563][T15876] netlink: zone id is out of range [ 1094.012889][T15876] netlink: zone id is out of range [ 1094.021661][T15876] netlink: zone id is out of range [ 1094.114058][T15876] netlink: zone id is out of range [ 1094.209619][T15890] Invalid ELF header magic: != ELF [ 1094.862316][T15900] usb usb24: check_ctrlrecip: process 15900 (syz.4.2117) requesting ep 01 but needs 81 [ 1094.909060][T15900] usb usb24: usbfs: process 15900 (syz.4.2117) did not claim interface 0 before use [ 1096.001179][T15912] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1096.033835][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.4.2119 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1096.033881][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1096.033919][T15912] Call Trace: [ 1096.033930][T15912] [ 1096.033944][T15912] dump_stack_lvl+0x16c/0x1f0 [ 1096.034001][T15912] sysfs_warn_dup+0x7f/0xa0 [ 1096.034046][T15912] sysfs_do_create_link_sd+0x124/0x140 [ 1096.034094][T15912] sysfs_create_link+0x61/0xc0 [ 1096.034138][T15912] device_add+0x62e/0x1a70 [ 1096.034193][T15912] ? __pfx_device_add+0x10/0x10 [ 1096.034240][T15912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1096.034296][T15912] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1096.034353][T15912] wiphy_register+0x1cab/0x2860 [ 1096.034384][T15912] ? __pfx__dev_printk+0x10/0x10 [ 1096.034432][T15912] ? __pfx_wiphy_register+0x10/0x10 [ 1096.034478][T15912] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1096.034535][T15912] ieee80211_register_hw+0x2455/0x4060 [ 1096.034604][T15912] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1096.034655][T15912] ? net_generic+0xea/0x2a0 [ 1096.034702][T15912] ? lockdep_init_map_type+0x16d/0x7d0 [ 1096.034756][T15912] ? __asan_memset+0x23/0x50 [ 1096.034802][T15912] ? __hrtimer_init+0x106/0x2c0 [ 1096.034870][T15912] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1096.034950][T15912] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1096.035016][T15912] hwsim_new_radio_nl+0xb42/0x12b0 [ 1096.035072][T15912] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1096.035139][T15912] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1096.035178][T15912] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1096.035225][T15912] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1096.035265][T15912] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1096.035301][T15912] ? trace_cap_capable+0x1a2/0x210 [ 1096.035350][T15912] ? bpf_lsm_capable+0x9/0x10 [ 1096.035384][T15912] ? security_capable+0x7e/0x260 [ 1096.035421][T15912] ? ns_capable+0xd7/0x110 [ 1096.035473][T15912] genl_rcv_msg+0x565/0x800 [ 1096.035514][T15912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1096.035550][T15912] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1096.035617][T15912] netlink_rcv_skb+0x16b/0x440 [ 1096.035668][T15912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1096.035706][T15912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1096.035777][T15912] ? down_read+0xc9/0x330 [ 1096.035834][T15912] ? __pfx_down_read+0x10/0x10 [ 1096.035888][T15912] ? netlink_deliver_tap+0x1ae/0xd30 [ 1096.035945][T15912] genl_rcv+0x28/0x40 [ 1096.035976][T15912] netlink_unicast+0x53c/0x7f0 [ 1096.036033][T15912] ? __pfx_netlink_unicast+0x10/0x10 [ 1096.036087][T15912] ? __phys_addr_symbol+0x30/0x80 [ 1096.036121][T15912] ? __check_object_size+0x488/0x710 [ 1096.036162][T15912] netlink_sendmsg+0x8b8/0xd70 [ 1096.036221][T15912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.036290][T15912] ____sys_sendmsg+0xaaf/0xc90 [ 1096.036334][T15912] ? copy_msghdr_from_user+0x10b/0x160 [ 1096.036387][T15912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1096.036449][T15912] ___sys_sendmsg+0x135/0x1e0 [ 1096.036505][T15912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.036576][T15912] ? __pfx_lock_release+0x10/0x10 [ 1096.036623][T15912] ? trace_lock_acquire+0x14e/0x1f0 [ 1096.036677][T15912] ? __fget_files+0x206/0x3a0 [ 1096.036765][T15912] __sys_sendmsg+0x16e/0x220 [ 1096.036798][T15912] ? __pfx___sys_sendmsg+0x10/0x10 [ 1096.036864][T15912] ? __x64_sys_futex+0x1e1/0x4c0 [ 1096.036933][T15912] do_syscall_64+0xcd/0x250 [ 1096.036987][T15912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.037035][T15912] RIP: 0033:0x7effbbd8d169 [ 1096.037063][T15912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.037096][T15912] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.037128][T15912] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1096.037150][T15912] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1096.037170][T15912] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.037190][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.037208][T15912] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1096.037251][T15912] [ 1098.003977][T15922] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1098.076940][T15922] CPU: 1 UID: 0 PID: 15922 Comm: syz.0.2121 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1098.076984][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1098.077003][T15922] Call Trace: [ 1098.077013][T15922] [ 1098.077026][T15922] dump_stack_lvl+0x16c/0x1f0 [ 1098.077082][T15922] sysfs_warn_dup+0x7f/0xa0 [ 1098.077126][T15922] sysfs_do_create_link_sd+0x124/0x140 [ 1098.077175][T15922] sysfs_create_link+0x61/0xc0 [ 1098.077222][T15922] device_add+0x62e/0x1a70 [ 1098.077276][T15922] ? __pfx_device_add+0x10/0x10 [ 1098.077325][T15922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.077380][T15922] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1098.077437][T15922] wiphy_register+0x1cab/0x2860 [ 1098.077469][T15922] ? __pfx__dev_printk+0x10/0x10 [ 1098.077518][T15922] ? __pfx_wiphy_register+0x10/0x10 [ 1098.077563][T15922] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1098.077618][T15922] ieee80211_register_hw+0x2455/0x4060 [ 1098.077685][T15922] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1098.077738][T15922] ? net_generic+0xea/0x2a0 [ 1098.077787][T15922] ? lockdep_init_map_type+0x16d/0x7d0 [ 1098.077841][T15922] ? __asan_memset+0x23/0x50 [ 1098.077887][T15922] ? __hrtimer_init+0x106/0x2c0 [ 1098.077954][T15922] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1098.078035][T15922] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1098.078103][T15922] hwsim_new_radio_nl+0xb42/0x12b0 [ 1098.078160][T15922] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1098.078226][T15922] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1098.078265][T15922] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1098.078314][T15922] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1098.078356][T15922] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1098.078393][T15922] ? trace_cap_capable+0x1a2/0x210 [ 1098.078443][T15922] ? bpf_lsm_capable+0x9/0x10 [ 1098.078477][T15922] ? security_capable+0x7e/0x260 [ 1098.078514][T15922] ? ns_capable+0xd7/0x110 [ 1098.078567][T15922] genl_rcv_msg+0x565/0x800 [ 1098.078609][T15922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.078646][T15922] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1098.078713][T15922] netlink_rcv_skb+0x16b/0x440 [ 1098.078764][T15922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1098.078801][T15922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1098.078872][T15922] ? down_read+0xc9/0x330 [ 1098.078934][T15922] ? __pfx_down_read+0x10/0x10 [ 1098.078989][T15922] ? netlink_deliver_tap+0x1ae/0xd30 [ 1098.079058][T15922] genl_rcv+0x28/0x40 [ 1098.079088][T15922] netlink_unicast+0x53c/0x7f0 [ 1098.079146][T15922] ? __pfx_netlink_unicast+0x10/0x10 [ 1098.079201][T15922] ? __phys_addr_symbol+0x30/0x80 [ 1098.079236][T15922] ? __check_object_size+0x488/0x710 [ 1098.079276][T15922] netlink_sendmsg+0x8b8/0xd70 [ 1098.079335][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1098.079405][T15922] ____sys_sendmsg+0xaaf/0xc90 [ 1098.079449][T15922] ? copy_msghdr_from_user+0x10b/0x160 [ 1098.079503][T15922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.079569][T15922] ___sys_sendmsg+0x135/0x1e0 [ 1098.079627][T15922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.079702][T15922] ? __pfx_lock_release+0x10/0x10 [ 1098.079748][T15922] ? trace_lock_acquire+0x14e/0x1f0 [ 1098.079803][T15922] ? __fget_files+0x206/0x3a0 [ 1098.079865][T15922] __sys_sendmsg+0x16e/0x220 [ 1098.079905][T15922] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.079961][T15922] ? __x64_sys_futex+0x1e1/0x4c0 [ 1098.080031][T15922] do_syscall_64+0xcd/0x250 [ 1098.080085][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.080133][T15922] RIP: 0033:0x7f76fad8d169 [ 1098.080162][T15922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.080195][T15922] RSP: 002b:00007f76f87f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.080228][T15922] RAX: ffffffffffffffda RBX: 00007f76fafa6240 RCX: 00007f76fad8d169 [ 1098.080250][T15922] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1098.080272][T15922] RBP: 00007f76fae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.080293][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.080313][T15922] R13: 0000000000000000 R14: 00007f76fafa6240 R15: 00007ffd895ffd68 [ 1098.080357][T15922] [ 1100.475352][T15560] syz.3.2025 (15560) used greatest stack depth: 20288 bytes left [ 1100.803402][ T30] audit: type=1804 audit(6037406049.344:14): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2125" name="file0" dev="tmpfs" ino=2977 res=1 errno=0 [ 1100.902805][ T30] audit: type=1800 audit(6037406049.344:15): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2125" name="file0" dev="tmpfs" ino=2977 res=0 errno=0 [ 1101.571530][T15954] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1101.634296][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.2.2129 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1101.634342][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1101.634367][T15954] Call Trace: [ 1101.634377][T15954] [ 1101.634391][T15954] dump_stack_lvl+0x16c/0x1f0 [ 1101.634448][T15954] sysfs_warn_dup+0x7f/0xa0 [ 1101.634492][T15954] sysfs_do_create_link_sd+0x124/0x140 [ 1101.634543][T15954] sysfs_create_link+0x61/0xc0 [ 1101.634589][T15954] device_add+0x62e/0x1a70 [ 1101.634659][T15954] ? __pfx_device_add+0x10/0x10 [ 1101.634708][T15954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1101.634765][T15954] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1101.634823][T15954] wiphy_register+0x1cab/0x2860 [ 1101.634856][T15954] ? __pfx__dev_printk+0x10/0x10 [ 1101.634904][T15954] ? __pfx_wiphy_register+0x10/0x10 [ 1101.634950][T15954] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1101.635007][T15954] ieee80211_register_hw+0x2455/0x4060 [ 1101.635071][T15954] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1101.635122][T15954] ? net_generic+0xea/0x2a0 [ 1101.635169][T15954] ? lockdep_init_map_type+0x16d/0x7d0 [ 1101.635225][T15954] ? __asan_memset+0x23/0x50 [ 1101.635271][T15954] ? __hrtimer_init+0x106/0x2c0 [ 1101.635329][T15954] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1101.635409][T15954] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1101.635476][T15954] hwsim_new_radio_nl+0xb42/0x12b0 [ 1101.635534][T15954] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1101.635608][T15954] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1101.635649][T15954] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1101.635699][T15954] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1101.635741][T15954] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1101.635777][T15954] ? trace_cap_capable+0x1a2/0x210 [ 1101.635827][T15954] ? bpf_lsm_capable+0x9/0x10 [ 1101.635863][T15954] ? security_capable+0x7e/0x260 [ 1101.635900][T15954] ? ns_capable+0xd7/0x110 [ 1101.635954][T15954] genl_rcv_msg+0x565/0x800 [ 1101.635995][T15954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.636034][T15954] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1101.636089][T15954] ? __pfx___lock_acquire+0x10/0x10 [ 1101.636145][T15954] netlink_rcv_skb+0x16b/0x440 [ 1101.636221][T15954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.636260][T15954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1101.636330][T15954] ? down_read+0xc9/0x330 [ 1101.636384][T15954] ? __pfx_down_read+0x10/0x10 [ 1101.636440][T15954] ? netlink_deliver_tap+0x1ae/0xd30 [ 1101.636499][T15954] genl_rcv+0x28/0x40 [ 1101.636529][T15954] netlink_unicast+0x53c/0x7f0 [ 1101.636587][T15954] ? __pfx_netlink_unicast+0x10/0x10 [ 1101.636652][T15954] ? __phys_addr_symbol+0x30/0x80 [ 1101.636688][T15954] ? __check_object_size+0x488/0x710 [ 1101.636729][T15954] netlink_sendmsg+0x8b8/0xd70 [ 1101.636789][T15954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.636859][T15954] ____sys_sendmsg+0xaaf/0xc90 [ 1101.636902][T15954] ? copy_msghdr_from_user+0x10b/0x160 [ 1101.636956][T15954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.637020][T15954] ___sys_sendmsg+0x135/0x1e0 [ 1101.637079][T15954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.637154][T15954] ? __pfx_lock_release+0x10/0x10 [ 1101.637202][T15954] ? trace_lock_acquire+0x14e/0x1f0 [ 1101.637256][T15954] ? __fget_files+0x206/0x3a0 [ 1101.637317][T15954] __sys_sendmsg+0x16e/0x220 [ 1101.637350][T15954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1101.637405][T15954] ? __x64_sys_futex+0x1e1/0x4c0 [ 1101.637475][T15954] do_syscall_64+0xcd/0x250 [ 1101.637529][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.637577][T15954] RIP: 0033:0x7ff47d98d169 [ 1101.637611][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.637646][T15954] RSP: 002b:00007ff47e7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.637678][T15954] RAX: ffffffffffffffda RBX: 00007ff47dba6160 RCX: 00007ff47d98d169 [ 1101.637701][T15954] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1101.637722][T15954] RBP: 00007ff47da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.637742][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.637762][T15954] R13: 0000000000000000 R14: 00007ff47dba6160 R15: 00007fffb7aebfc8 [ 1101.637806][T15954] [ 1102.096616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.690576][T15963] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(4.128.4294967293), cmd(3) [ 1102.833366][T15806] syz.3.2085 (15806) used greatest stack depth: 19552 bytes left [ 1103.180259][T15973] FAULT_INJECTION: forcing a failure. [ 1103.180259][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.180472][T15973] CPU: 1 UID: 0 PID: 15973 Comm: syz.4.2135 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1103.180509][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.180528][T15973] Call Trace: [ 1103.180538][T15973] [ 1103.180550][T15973] dump_stack_lvl+0x16c/0x1f0 [ 1103.180603][T15973] should_fail_ex+0x50a/0x650 [ 1103.180633][T15973] ? fs_reclaim_acquire+0xae/0x150 [ 1103.180676][T15973] should_failslab+0xc2/0x120 [ 1103.180707][T15973] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1103.180759][T15973] ? alloc_unbound_pwq+0x3ff/0xe10 [ 1103.180816][T15973] alloc_unbound_pwq+0x3ff/0xe10 [ 1103.180878][T15973] apply_wqattrs_prepare+0x3af/0xbd0 [ 1103.180945][T15973] apply_workqueue_attrs_locked+0x64/0xe0 [ 1103.180999][T15973] __alloc_workqueue+0xf34/0x1810 [ 1103.181042][T15973] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1103.181089][T15973] alloc_workqueue+0xd3/0x200 [ 1103.181124][T15973] ? __pfx_alloc_workqueue+0x10/0x10 [ 1103.181179][T15973] ? __pfx___debug_object_init+0x10/0x10 [ 1103.181232][T15973] nci_register_device+0x221/0xb80 [ 1103.181271][T15973] ? __pfx_nci_register_device+0x10/0x10 [ 1103.181321][T15973] virtual_ncidev_open+0x141/0x220 [ 1103.181372][T15973] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1103.181424][T15973] misc_open+0x35a/0x420 [ 1103.181457][T15973] ? __pfx_misc_open+0x10/0x10 [ 1103.181490][T15973] chrdev_open+0x237/0x6a0 [ 1103.181538][T15973] ? __pfx_apparmor_file_open+0x10/0x10 [ 1103.181580][T15973] ? __pfx_chrdev_open+0x10/0x10 [ 1103.181635][T15973] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1103.181687][T15973] do_dentry_open+0x735/0x1c40 [ 1103.181734][T15973] ? __pfx_chrdev_open+0x10/0x10 [ 1103.181785][T15973] ? inode_permission+0xdd/0x5f0 [ 1103.181823][T15973] vfs_open+0x82/0x3f0 [ 1103.181853][T15973] ? may_open+0x1f2/0x400 [ 1103.181893][T15973] path_openat+0x1e88/0x2d80 [ 1103.181955][T15973] ? __pfx_path_openat+0x10/0x10 [ 1103.182003][T15973] ? __pfx___lock_acquire+0x10/0x10 [ 1103.182046][T15973] ? lock_acquire.part.0+0x11b/0x380 [ 1103.182092][T15973] ? find_held_lock+0x2d/0x110 [ 1103.182132][T15973] do_filp_open+0x20c/0x470 [ 1103.182190][T15973] ? __pfx_do_filp_open+0x10/0x10 [ 1103.182236][T15973] ? find_held_lock+0x2d/0x110 [ 1103.182300][T15973] ? alloc_fd+0x41f/0x760 [ 1103.182359][T15973] do_sys_openat2+0x17a/0x1e0 [ 1103.182394][T15973] ? __pfx_do_sys_openat2+0x10/0x10 [ 1103.182432][T15973] ? __fget_files+0x206/0x3a0 [ 1103.182495][T15973] __x64_sys_openat+0x175/0x210 [ 1103.182531][T15973] ? __pfx___x64_sys_openat+0x10/0x10 [ 1103.182565][T15973] ? ksys_write+0x1ba/0x250 [ 1103.182625][T15973] do_syscall_64+0xcd/0x250 [ 1103.182676][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.182722][T15973] RIP: 0033:0x7effbbd8d169 [ 1103.182746][T15973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.182779][T15973] RSP: 002b:00007effbcb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1103.182809][T15973] RAX: ffffffffffffffda RBX: 00007effbbfa5fa0 RCX: 00007effbbd8d169 [ 1103.182832][T15973] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 1103.182853][T15973] RBP: 00007effbcb74090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.182872][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.182890][T15973] R13: 0000000000000001 R14: 00007effbbfa5fa0 R15: 00007ffe4a4e5858 [ 1103.182931][T15973] [ 1103.443838][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 1103.654088][T15982] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1104.796761][T16002] FAULT_INJECTION: forcing a failure. [ 1104.796761][T16002] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.908730][T16002] CPU: 0 UID: 0 PID: 16002 Comm: syz.0.2143 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1104.908781][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1104.908803][T16002] Call Trace: [ 1104.908813][T16002] [ 1104.908827][T16002] dump_stack_lvl+0x16c/0x1f0 [ 1104.908884][T16002] should_fail_ex+0x50a/0x650 [ 1104.908918][T16002] ? fs_reclaim_acquire+0xae/0x150 [ 1104.908967][T16002] ? xfrm_hash_alloc+0xd1/0x100 [ 1104.909012][T16002] should_failslab+0xc2/0x120 [ 1104.909046][T16002] __kmalloc_noprof+0xcb/0x510 [ 1104.909099][T16002] ? xfrm_nat_keepalive_net_init+0xe1/0x140 [ 1104.909153][T16002] xfrm_hash_alloc+0xd1/0x100 [ 1104.909188][T16002] xfrm_state_init+0x160/0x630 [ 1104.909230][T16002] ? __pfx_xfrm_net_init+0x10/0x10 [ 1104.909267][T16002] xfrm_net_init+0x211/0xcb0 [ 1104.909311][T16002] ? __pfx_xfrm_net_init+0x10/0x10 [ 1104.909349][T16002] ops_init+0x1df/0x5f0 [ 1104.909389][T16002] setup_net+0x21f/0x860 [ 1104.909429][T16002] ? __pfx_setup_net+0x10/0x10 [ 1104.909461][T16002] ? down_read_killable+0xcc/0x380 [ 1104.909518][T16002] ? __pfx_down_read_killable+0x10/0x10 [ 1104.909573][T16002] ? __raw_spin_lock_init+0x3a/0x110 [ 1104.909610][T16002] ? debug_mutex_init+0x37/0x70 [ 1104.909650][T16002] copy_net_ns+0x2a6/0x5f0 [ 1104.909696][T16002] create_new_namespaces+0x3ea/0xad0 [ 1104.909766][T16002] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1104.909829][T16002] ksys_unshare+0x45d/0xa40 [ 1104.909867][T16002] ? __pfx_ksys_unshare+0x10/0x10 [ 1104.909902][T16002] ? xfd_validate_state+0x5d/0x180 [ 1104.909963][T16002] __x64_sys_unshare+0x31/0x40 [ 1104.910007][T16002] do_syscall_64+0xcd/0x250 [ 1104.910065][T16002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.910116][T16002] RIP: 0033:0x7f76fad8d169 [ 1104.910143][T16002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.910179][T16002] RSP: 002b:00007f76fbb41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1104.910214][T16002] RAX: ffffffffffffffda RBX: 00007f76fafa5fa0 RCX: 00007f76fad8d169 [ 1104.910238][T16002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1104.910258][T16002] RBP: 00007f76fae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.910280][T16002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.910300][T16002] R13: 0000000000000000 R14: 00007f76fafa5fa0 R15: 00007ffd895ffd68 [ 1104.910342][T16002] [ 1105.180238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1105.578439][T15667] syz.3.2048 (15667) used greatest stack depth: 19520 bytes left [ 1106.265896][ T30] audit: type=1800 audit(6037406054.824:16): pid=16027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2144" name=03 dev="tmpfs" ino=2938 res=0 errno=0 [ 1107.728673][T16052] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2152'. [ 1109.822604][T16090] usb usb24: check_ctrlrecip: process 16090 (syz.0.2162) requesting ep 01 but needs 81 [ 1109.878720][T16090] usb usb24: usbfs: process 16090 (syz.0.2162) did not claim interface 0 before use [ 1110.029778][T16092] kexec: Could not allocate control_code_buffer [ 1110.245881][T16100] dyndbg: expected <4096 bytes into control [ 1110.264906][T16096] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2164'. [ 1111.524121][T16126] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1111.576576][T16126] CPU: 0 UID: 0 PID: 16126 Comm: syz.4.2170 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1111.576631][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1111.576652][T16126] Call Trace: [ 1111.576662][T16126] [ 1111.576676][T16126] dump_stack_lvl+0x16c/0x1f0 [ 1111.576736][T16126] sysfs_warn_dup+0x7f/0xa0 [ 1111.576781][T16126] sysfs_do_create_link_sd+0x124/0x140 [ 1111.576830][T16126] sysfs_create_link+0x61/0xc0 [ 1111.576876][T16126] device_add+0x62e/0x1a70 [ 1111.576931][T16126] ? __pfx_device_add+0x10/0x10 [ 1111.576985][T16126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1111.577043][T16126] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1111.577101][T16126] wiphy_register+0x1cab/0x2860 [ 1111.577138][T16126] ? __pfx__dev_printk+0x10/0x10 [ 1111.577191][T16126] ? __pfx_wiphy_register+0x10/0x10 [ 1111.577244][T16126] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1111.577300][T16126] ieee80211_register_hw+0x2455/0x4060 [ 1111.577370][T16126] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1111.577424][T16126] ? net_generic+0xea/0x2a0 [ 1111.577478][T16126] ? lockdep_init_map_type+0x16d/0x7d0 [ 1111.577534][T16126] ? __asan_memset+0x23/0x50 [ 1111.577609][T16126] ? __hrtimer_init+0x106/0x2c0 [ 1111.577687][T16126] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1111.577767][T16126] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1111.577834][T16126] hwsim_new_radio_nl+0xb42/0x12b0 [ 1111.577892][T16126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1111.577956][T16126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1111.577996][T16126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1111.578045][T16126] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1111.578086][T16126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1111.578123][T16126] ? trace_cap_capable+0x1a2/0x210 [ 1111.578172][T16126] ? bpf_lsm_capable+0x9/0x10 [ 1111.578207][T16126] ? security_capable+0x7e/0x260 [ 1111.578244][T16126] ? ns_capable+0xd7/0x110 [ 1111.578296][T16126] genl_rcv_msg+0x565/0x800 [ 1111.578338][T16126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.578375][T16126] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1111.578453][T16126] netlink_rcv_skb+0x16b/0x440 [ 1111.578506][T16126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.578545][T16126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1111.578616][T16126] ? down_read+0xc9/0x330 [ 1111.578678][T16126] ? __pfx_down_read+0x10/0x10 [ 1111.578733][T16126] ? netlink_deliver_tap+0x1ae/0xd30 [ 1111.578790][T16126] genl_rcv+0x28/0x40 [ 1111.578820][T16126] netlink_unicast+0x53c/0x7f0 [ 1111.578879][T16126] ? __pfx_netlink_unicast+0x10/0x10 [ 1111.578932][T16126] ? __phys_addr_symbol+0x30/0x80 [ 1111.578967][T16126] ? __check_object_size+0x488/0x710 [ 1111.579007][T16126] netlink_sendmsg+0x8b8/0xd70 [ 1111.579066][T16126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.579137][T16126] ____sys_sendmsg+0xaaf/0xc90 [ 1111.579182][T16126] ? copy_msghdr_from_user+0x10b/0x160 [ 1111.579237][T16126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.579302][T16126] ___sys_sendmsg+0x135/0x1e0 [ 1111.579360][T16126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.579434][T16126] ? __pfx_lock_release+0x10/0x10 [ 1111.579482][T16126] ? trace_lock_acquire+0x14e/0x1f0 [ 1111.579538][T16126] ? __fget_files+0x206/0x3a0 [ 1111.579600][T16126] __sys_sendmsg+0x16e/0x220 [ 1111.579643][T16126] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.579699][T16126] ? __x64_sys_futex+0x1e1/0x4c0 [ 1111.579769][T16126] do_syscall_64+0xcd/0x250 [ 1111.579822][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.579869][T16126] RIP: 0033:0x7effbbd8d169 [ 1111.579897][T16126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.579932][T16126] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.579966][T16126] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1111.579989][T16126] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1111.580009][T16126] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.580029][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.580049][T16126] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1111.580093][T16126] [ 1113.180290][T16144] Invalid ELF header len 1 [ 1113.617508][ T5870] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1117.766534][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 1121.397831][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.404999][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.794215][ T5865] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 1131.492538][T16422] [U] erofs [ 1131.496071][T16422] [U] [ 1131.499064][T16422] [U] [ 1131.502053][T16422] [U] [ 1131.557828][T16422] [U] [ 1131.560903][T16422] [U] [ 1131.563930][T16422] [U] [ 1131.566957][T16422] [U] [ 1131.662481][T16422] [U] [ 1131.665568][T16422] [U] [ 1131.668601][T16422] [U] [ 1131.671632][T16422] [U] [ 1131.715998][T16422] [U] [ 1131.719063][T16422] [U] [ 1131.722089][T16422] [U] [ 1131.725110][T16422] [U] [ 1131.782046][T16422] [U] [ 1131.785115][T16422] [U] [ 1131.788160][T16422] [U] [ 1131.791189][T16422] [U] [ 1131.881857][T16422] [U] [ 1131.884949][T16422] [U] [ 1131.888080][T16422] [U] [ 1131.891140][T16422] [U] [ 1131.955320][T16422] [U] [ 1131.958394][T16422] [U] [ 1131.961425][T16422] [U] [ 1131.964461][T16422] [U] [ 1132.034075][T16422] [U] [ 1132.037154][T16422] [U] [ 1132.040184][T16422] [U] [ 1132.043216][T16422] [U] [ 1132.129226][T16422] [U] [ 1132.132308][T16422] [U] [ 1132.135345][T16422] [U] [ 1132.138372][T16422] [U] [ 1132.199234][T16422] [U] [ 1132.202309][T16422] [U] [ 1132.205340][T16422] [U] [ 1132.208365][T16422] [U] [ 1132.285937][T16422] [U] [ 1132.289121][T16422] [U] [ 1132.292118][T16422] [U] [ 1132.295115][T16422] [U] [ 1132.338156][T16422] [U] [ 1132.341308][T16422] [U] [ 1132.344309][T16422] [U] [ 1132.347303][T16422] [U] [ 1132.445600][T16422] [U] [ 1139.790329][T16511] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1139.915407][T16511] CPU: 0 UID: 0 PID: 16511 Comm: syz.4.2258 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1139.915459][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1139.915480][T16511] Call Trace: [ 1139.915492][T16511] [ 1139.915506][T16511] dump_stack_lvl+0x16c/0x1f0 [ 1139.915576][T16511] sysfs_warn_dup+0x7f/0xa0 [ 1139.915620][T16511] sysfs_do_create_link_sd+0x124/0x140 [ 1139.915681][T16511] sysfs_create_link+0x61/0xc0 [ 1139.915727][T16511] device_add+0x62e/0x1a70 [ 1139.915782][T16511] ? __pfx_device_add+0x10/0x10 [ 1139.915828][T16511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1139.915883][T16511] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1139.915940][T16511] wiphy_register+0x1cab/0x2860 [ 1139.915980][T16511] ? __pfx__dev_printk+0x10/0x10 [ 1139.916028][T16511] ? __pfx_wiphy_register+0x10/0x10 [ 1139.916074][T16511] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1139.916134][T16511] ieee80211_register_hw+0x2455/0x4060 [ 1139.916202][T16511] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1139.916252][T16511] ? net_generic+0xea/0x2a0 [ 1139.916298][T16511] ? lockdep_init_map_type+0x16d/0x7d0 [ 1139.916352][T16511] ? __asan_memset+0x23/0x50 [ 1139.916396][T16511] ? __hrtimer_init+0x106/0x2c0 [ 1139.916452][T16511] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1139.916530][T16511] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1139.916595][T16511] hwsim_new_radio_nl+0xb42/0x12b0 [ 1139.916651][T16511] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1139.916722][T16511] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1139.916762][T16511] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1139.916810][T16511] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1139.916849][T16511] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1139.916885][T16511] ? trace_cap_capable+0x1a2/0x210 [ 1139.916950][T16511] ? bpf_lsm_capable+0x9/0x10 [ 1139.916986][T16511] ? security_capable+0x7e/0x260 [ 1139.917023][T16511] ? ns_capable+0xd7/0x110 [ 1139.917089][T16511] genl_rcv_msg+0x565/0x800 [ 1139.917128][T16511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.917164][T16511] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1139.917230][T16511] netlink_rcv_skb+0x16b/0x440 [ 1139.917297][T16511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1139.917336][T16511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1139.917408][T16511] ? down_read+0xc9/0x330 [ 1139.917461][T16511] ? __pfx_down_read+0x10/0x10 [ 1139.917516][T16511] ? netlink_deliver_tap+0x1ae/0xd30 [ 1139.917574][T16511] genl_rcv+0x28/0x40 [ 1139.917603][T16511] netlink_unicast+0x53c/0x7f0 [ 1139.917670][T16511] ? __pfx_netlink_unicast+0x10/0x10 [ 1139.917734][T16511] ? __phys_addr_symbol+0x30/0x80 [ 1139.917769][T16511] ? __check_object_size+0x488/0x710 [ 1139.917810][T16511] netlink_sendmsg+0x8b8/0xd70 [ 1139.917871][T16511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.917940][T16511] ____sys_sendmsg+0xaaf/0xc90 [ 1139.917984][T16511] ? copy_msghdr_from_user+0x10b/0x160 [ 1139.918039][T16511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.918103][T16511] ___sys_sendmsg+0x135/0x1e0 [ 1139.918161][T16511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.918245][T16511] ? __pfx_lock_release+0x10/0x10 [ 1139.918290][T16511] ? trace_lock_acquire+0x14e/0x1f0 [ 1139.918344][T16511] ? __fget_files+0x206/0x3a0 [ 1139.918404][T16511] __sys_sendmsg+0x16e/0x220 [ 1139.918436][T16511] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.918489][T16511] ? __x64_sys_futex+0x1e1/0x4c0 [ 1139.918557][T16511] do_syscall_64+0xcd/0x250 [ 1139.918615][T16511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.918669][T16511] RIP: 0033:0x7effbbd8d169 [ 1139.918696][T16511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.918737][T16511] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.918768][T16511] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1139.918791][T16511] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1139.918812][T16511] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1139.918832][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.918851][T16511] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1139.918894][T16511] [ 1141.804180][T16518] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1141.904117][T16518] CPU: 1 UID: 0 PID: 16518 Comm: syz.2.2259 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1141.904160][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1141.904179][T16518] Call Trace: [ 1141.904189][T16518] [ 1141.904202][T16518] dump_stack_lvl+0x16c/0x1f0 [ 1141.904258][T16518] sysfs_warn_dup+0x7f/0xa0 [ 1141.904302][T16518] sysfs_do_create_link_sd+0x124/0x140 [ 1141.904351][T16518] sysfs_create_link+0x61/0xc0 [ 1141.904396][T16518] device_add+0x62e/0x1a70 [ 1141.904450][T16518] ? __pfx_device_add+0x10/0x10 [ 1141.904506][T16518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1141.904564][T16518] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1141.904622][T16518] wiphy_register+0x1cab/0x2860 [ 1141.904654][T16518] ? __pfx__dev_printk+0x10/0x10 [ 1141.904701][T16518] ? __pfx_wiphy_register+0x10/0x10 [ 1141.904746][T16518] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1141.904804][T16518] ieee80211_register_hw+0x2455/0x4060 [ 1141.904871][T16518] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1141.904922][T16518] ? net_generic+0xea/0x2a0 [ 1141.904968][T16518] ? lockdep_init_map_type+0x16d/0x7d0 [ 1141.905025][T16518] ? __asan_memset+0x23/0x50 [ 1141.905070][T16518] ? __hrtimer_init+0x106/0x2c0 [ 1141.905126][T16518] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1141.905205][T16518] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1141.905268][T16518] hwsim_new_radio_nl+0xb42/0x12b0 [ 1141.905324][T16518] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1141.905389][T16518] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1141.905428][T16518] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1141.905475][T16518] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1141.905529][T16518] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1141.905564][T16518] ? trace_cap_capable+0x1a2/0x210 [ 1141.905613][T16518] ? bpf_lsm_capable+0x9/0x10 [ 1141.905647][T16518] ? security_capable+0x7e/0x260 [ 1141.905683][T16518] ? ns_capable+0xd7/0x110 [ 1141.905734][T16518] genl_rcv_msg+0x565/0x800 [ 1141.905772][T16518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1141.905809][T16518] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1141.905863][T16518] ? __pfx___lock_acquire+0x10/0x10 [ 1141.905919][T16518] netlink_rcv_skb+0x16b/0x440 [ 1141.905971][T16518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1141.906020][T16518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1141.906085][T16518] ? down_read+0xc9/0x330 [ 1141.906134][T16518] ? __pfx_down_read+0x10/0x10 [ 1141.906184][T16518] ? netlink_deliver_tap+0x1ae/0xd30 [ 1141.906237][T16518] genl_rcv+0x28/0x40 [ 1141.906263][T16518] netlink_unicast+0x53c/0x7f0 [ 1141.906318][T16518] ? __pfx_netlink_unicast+0x10/0x10 [ 1141.906367][T16518] ? __phys_addr_symbol+0x30/0x80 [ 1141.906399][T16518] ? __check_object_size+0x488/0x710 [ 1141.906436][T16518] netlink_sendmsg+0x8b8/0xd70 [ 1141.906500][T16518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.906567][T16518] ____sys_sendmsg+0xaaf/0xc90 [ 1141.906608][T16518] ? copy_msghdr_from_user+0x10b/0x160 [ 1141.906660][T16518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.906719][T16518] ___sys_sendmsg+0x135/0x1e0 [ 1141.906773][T16518] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.906844][T16518] ? __pfx_lock_release+0x10/0x10 [ 1141.906886][T16518] ? trace_lock_acquire+0x14e/0x1f0 [ 1141.906938][T16518] ? __fget_files+0x206/0x3a0 [ 1141.906998][T16518] __sys_sendmsg+0x16e/0x220 [ 1141.907029][T16518] ? __pfx___sys_sendmsg+0x10/0x10 [ 1141.907079][T16518] ? __x64_sys_futex+0x1e1/0x4c0 [ 1141.907147][T16518] do_syscall_64+0xcd/0x250 [ 1141.907198][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.907243][T16518] RIP: 0033:0x7ff47d98d169 [ 1141.907269][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.907301][T16518] RSP: 002b:00007ff47e7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.907352][T16518] RAX: ffffffffffffffda RBX: 00007ff47dba6160 RCX: 00007ff47d98d169 [ 1141.907375][T16518] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1141.907396][T16518] RBP: 00007ff47da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.907417][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.907438][T16518] R13: 0000000000000000 R14: 00007ff47dba6160 R15: 00007fffb7aebfc8 [ 1141.907489][T16518] [ 1142.376092][T16526] ptrace attach of "./syz-executor exec"[9967] was attempted by "./syz-executor exec"[16526] [ 1145.043171][T16179] syz.3.2180 (16179) used greatest stack depth: 18368 bytes left [ 1146.932653][T16562] [U] erofs [ 1146.936209][T16562] [U] [ 1146.939235][T16562] [U] [ 1146.942254][T16562] [U] [ 1147.018300][T16562] [U] [ 1147.028379][T16562] [U] [G6!@K%qڂ4M [x9_P [ 1147.088761][T16562] [U] <vA;%OZ09eBaRM-G03Q0DV$W[zx2SB`$j[?Y‚`ӗ9jK}OVgDM6r`X6~P]r$Ȋ~cj\M"WF"l'z * [ 1147.293792][T16562] [U] : [ 1147.354076][T16562] [U] H6(Bj5! [($ DQAxiU`\o /3VX0,@eXnȖ9Uٯҁ3]52<1/6ocPVCSc8zS|>,[.e m]F곷~pM#ez!E2h=>hy[}"m-8<}'C= \Q(B.}{}*zjgm<@hu3:5VhV1iK>"/v?4It4ղwاCF>6 di:.XF nduD`=$.ȁ*IjE8Ms9#X+Ɯp2VfSJ] [ 1147.537503][T16562] [U] Oj/xI*%&8]/PC_T[ ~=ymxoTnޚSt [ 1147.877908][T16562] [U] j [ 1147.881455][T16562] [U] Ux)EE4U#V1=~-o907ĮEGRkS)G~˶F*g)<^hPeuQ /nQ(lgTk5˄h@Dh=m-e}1y}zo\a [ 1148.044761][T16562] [U] Ls}eM) [ 1148.049326][T16562] [U] {@h6#f.]vWI+% [ 1148.105119][T16562] [U] +u aM0{vGc!L+ [ 1148.112510][T16562] [U] @@7%2 ,~iDYgi(Q`Y[U nYlfsRuI žJ [ 1148.218471][T16562] [U] AWNVBJT?ENf -KERx ;G)kףꖱ_*la~v4h{ejyvH7_y\I$>>*bpX_$ƥ [ 1148.315980][T16562] [U] : 蚃M/ʺwx2啱;vUqV~52?'h"Co_}w:w o)902 h̀O6<M$!Ūa{kbfj}afz9;K28 dԣ)^!Ei! [ 1149.416743][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 1150.916004][T16597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.938796][T16597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1150.957319][T16597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1150.964714][T16597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1152.008687][T16624] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1152.062056][T16624] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1152.168305][T16624] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1152.211672][T16630] FAULT_INJECTION: forcing a failure. [ 1152.211672][T16630] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.226324][T16630] CPU: 1 UID: 0 PID: 16630 Comm: syz.4.2285 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1152.226366][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1152.226387][T16630] Call Trace: [ 1152.226398][T16630] [ 1152.226411][T16630] dump_stack_lvl+0x16c/0x1f0 [ 1152.226471][T16630] should_fail_ex+0x50a/0x650 [ 1152.226502][T16630] ? lockdep_hardirqs_on+0x7c/0x110 [ 1152.226551][T16630] ? tipc_topsrv_queue_evt+0x124/0x400 [ 1152.226587][T16630] should_failslab+0xc2/0x120 [ 1152.226620][T16630] __kmalloc_cache_noprof+0x68/0x410 [ 1152.226679][T16630] tipc_topsrv_queue_evt+0x124/0x400 [ 1152.226723][T16630] tipc_sub_report_overlap+0x555/0x9c0 [ 1152.226783][T16630] tipc_nametbl_insert_publ+0xe0f/0x1660 [ 1152.226869][T16630] tipc_nametbl_publish+0x137/0x280 [ 1152.226922][T16630] tipc_sk_publish+0x1d8/0x430 [ 1152.226972][T16630] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1152.227033][T16630] tipc_setsockopt+0x965/0xdf0 [ 1152.227084][T16630] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1152.227153][T16630] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1152.227203][T16630] do_sock_setsockopt+0x222/0x480 [ 1152.227243][T16630] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1152.227284][T16630] ? lock_acquire+0x2f/0xb0 [ 1152.227359][T16630] __sys_setsockopt+0x1a0/0x230 [ 1152.227420][T16630] __x64_sys_setsockopt+0xbd/0x160 [ 1152.227471][T16630] ? do_syscall_64+0x91/0x250 [ 1152.227521][T16630] ? lockdep_hardirqs_on+0x7c/0x110 [ 1152.227574][T16630] do_syscall_64+0xcd/0x250 [ 1152.227627][T16630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.227676][T16630] RIP: 0033:0x7effbbd8d169 [ 1152.227703][T16630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.227737][T16630] RSP: 002b:00007effbcb53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1152.227778][T16630] RAX: ffffffffffffffda RBX: 00007effbbfa6080 RCX: 00007effbbd8d169 [ 1152.227800][T16630] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1152.227820][T16630] RBP: 00007effbbe0e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 1152.227840][T16630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.227859][T16630] R13: 0000000000000000 R14: 00007effbbfa6080 R15: 00007ffe4a4e5858 [ 1152.227902][T16630] [ 1152.342202][T16633] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 1152.342571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.500918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.543927][T16635] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 1152.607565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.865377][T16636] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 3: bad block bitmap checksum [ 1152.984109][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 1152.991031][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 1153.003471][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.010938][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 1153.024432][T16643] vivid-003: ================= START STATUS ================= [ 1153.159843][T16643] vivid-003: Radio HW Seek Mode: Bounded [ 1153.194520][T16643] vivid-003: Radio Programmable HW Seek: false [ 1153.201414][T16643] vivid-003: RDS Rx I/O Mode: Block I/O [ 1153.217349][T16643] vivid-003: Generate RBDS Instead of RDS: false [ 1153.235168][T16643] vivid-003: RDS Reception: true [ 1153.241848][T16643] vivid-003: RDS Program Type: 0 inactive [ 1153.249975][ T5865] Bluetooth: hci1: Malformed Event: 0x02 [ 1153.257712][T16643] vivid-003: RDS PS Name: inactive [ 1153.277249][T16643] vivid-003: RDS Radio Text: inactive [ 1153.283472][T16643] vivid-003: RDS Traffic Announcement: false inactive [ 1153.291743][T16643] vivid-003: RDS Traffic Program: false inactive [ 1153.299446][T16643] vivid-003: RDS Music: false inactive [ 1153.308229][T16643] vivid-003: ================== END STATUS ================== [ 1153.673246][T15815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.871853][T15815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.070320][T15815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.109251][T16642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1154.122070][T16642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1154.131359][T16642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1154.140497][T16642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1154.149276][T16642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1154.159106][T16642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1154.235978][T16659] size and base must be multiples of 4 kiB [ 1154.269775][T16659] CPU: 1 UID: 0 PID: 16659 Comm: syz.4.2291 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1154.269819][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1154.269840][T16659] Call Trace: [ 1154.269851][T16659] [ 1154.269864][T16659] dump_stack_lvl+0x16c/0x1f0 [ 1154.269920][T16659] mtrr_del+0xd1/0x110 [ 1154.269965][T16659] mtrr_ioctl+0x924/0xcf0 [ 1154.270018][T16659] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1154.270067][T16659] ? __pfx_lock_release+0x10/0x10 [ 1154.270117][T16659] ? __pfx___might_resched+0x10/0x10 [ 1154.270181][T16659] ? __fget_files+0x206/0x3a0 [ 1154.270232][T16659] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1154.270276][T16659] proc_reg_unlocked_ioctl+0x226/0x320 [ 1154.270327][T16659] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1154.270383][T16659] __x64_sys_ioctl+0x190/0x200 [ 1154.270428][T16659] do_syscall_64+0xcd/0x250 [ 1154.270480][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.270527][T16659] RIP: 0033:0x7effbbd8d169 [ 1154.270554][T16659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.270594][T16659] RSP: 002b:00007effbcb53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.270627][T16659] RAX: ffffffffffffffda RBX: 00007effbbfa6080 RCX: 00007effbbd8d169 [ 1154.270650][T16659] RDX: 0000000000000005 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 1154.270669][T16659] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.270689][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.270709][T16659] R13: 0000000000000000 R14: 00007effbbfa6080 R15: 00007ffe4a4e5858 [ 1154.270754][T16659] [ 1154.456988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.735913][T15815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.290029][T16654] chnl_net:caif_netlink_parms(): no params data found [ 1155.432900][T15815] bridge_slave_1: left allmulticast mode [ 1155.440142][T15815] bridge_slave_1: left promiscuous mode [ 1155.446628][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.465795][T15815] bridge_slave_0: left allmulticast mode [ 1155.472063][T15815] bridge_slave_0: left promiscuous mode [ 1155.478996][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.268744][ T5865] Bluetooth: hci0: command tx timeout [ 1156.581034][T16687] kafs: addr_prefs: Invalid Command [ 1157.161681][T15815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.178606][T15815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.197990][T15815] bond0 (unregistering): Released all slaves [ 1157.635049][T16707] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1157.648765][T16707] CPU: 1 UID: 0 PID: 16707 Comm: syz.3.2303 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1157.648805][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1157.648831][T16707] Call Trace: [ 1157.648840][T16707] [ 1157.648852][T16707] dump_stack_lvl+0x16c/0x1f0 [ 1157.648904][T16707] sysfs_warn_dup+0x7f/0xa0 [ 1157.648945][T16707] sysfs_do_create_link_sd+0x124/0x140 [ 1157.648989][T16707] sysfs_create_link+0x61/0xc0 [ 1157.649031][T16707] device_add+0x62e/0x1a70 [ 1157.649081][T16707] ? __pfx_device_add+0x10/0x10 [ 1157.649124][T16707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1157.649174][T16707] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1157.649228][T16707] wiphy_register+0x1cab/0x2860 [ 1157.649265][T16707] ? __pfx__dev_printk+0x10/0x10 [ 1157.649309][T16707] ? __pfx_wiphy_register+0x10/0x10 [ 1157.649352][T16707] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1157.649405][T16707] ieee80211_register_hw+0x2455/0x4060 [ 1157.649468][T16707] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1157.649514][T16707] ? net_generic+0xea/0x2a0 [ 1157.649557][T16707] ? lockdep_init_map_type+0x16d/0x7d0 [ 1157.649610][T16707] ? __asan_memset+0x23/0x50 [ 1157.649653][T16707] ? __hrtimer_init+0x106/0x2c0 [ 1157.649705][T16707] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1157.649778][T16707] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1157.649839][T16707] hwsim_new_radio_nl+0xb42/0x12b0 [ 1157.649897][T16707] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1157.649959][T16707] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1157.649998][T16707] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1157.650043][T16707] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1157.650079][T16707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1157.650112][T16707] ? trace_cap_capable+0x1a2/0x210 [ 1157.650158][T16707] ? bpf_lsm_capable+0x9/0x10 [ 1157.650191][T16707] ? security_capable+0x7e/0x260 [ 1157.650225][T16707] ? ns_capable+0xd7/0x110 [ 1157.650281][T16707] genl_rcv_msg+0x565/0x800 [ 1157.650319][T16707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.650354][T16707] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1157.650420][T16707] netlink_rcv_skb+0x16b/0x440 [ 1157.650469][T16707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.650504][T16707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1157.650569][T16707] ? down_read+0xc9/0x330 [ 1157.650618][T16707] ? __pfx_down_read+0x10/0x10 [ 1157.650670][T16707] ? netlink_deliver_tap+0x1ae/0xd30 [ 1157.650724][T16707] genl_rcv+0x28/0x40 [ 1157.650751][T16707] netlink_unicast+0x53c/0x7f0 [ 1157.650805][T16707] ? __pfx_netlink_unicast+0x10/0x10 [ 1157.650881][T16707] ? __phys_addr_symbol+0x30/0x80 [ 1157.650913][T16707] ? __check_object_size+0x488/0x710 [ 1157.650952][T16707] netlink_sendmsg+0x8b8/0xd70 [ 1157.651009][T16707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.651073][T16707] ____sys_sendmsg+0xaaf/0xc90 [ 1157.651114][T16707] ? copy_msghdr_from_user+0x10b/0x160 [ 1157.651165][T16707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.651223][T16707] ___sys_sendmsg+0x135/0x1e0 [ 1157.651289][T16707] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.651358][T16707] ? __pfx_lock_release+0x10/0x10 [ 1157.651402][T16707] ? trace_lock_acquire+0x14e/0x1f0 [ 1157.651456][T16707] ? __fget_files+0x206/0x3a0 [ 1157.651514][T16707] __sys_sendmsg+0x16e/0x220 [ 1157.651546][T16707] ? __pfx___sys_sendmsg+0x10/0x10 [ 1157.651597][T16707] ? __x64_sys_futex+0x1e1/0x4c0 [ 1157.651664][T16707] do_syscall_64+0xcd/0x250 [ 1157.651715][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.651760][T16707] RIP: 0033:0x7ffbb7f8d169 [ 1157.651787][T16707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.651821][T16707] RSP: 002b:00007ffbb5dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.651852][T16707] RAX: ffffffffffffffda RBX: 00007ffbb81a6160 RCX: 00007ffbb7f8d169 [ 1157.651874][T16707] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1157.651894][T16707] RBP: 00007ffbb800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.651914][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.651934][T16707] R13: 0000000000000000 R14: 00007ffbb81a6160 R15: 00007ffdd7788ac8 [ 1157.651978][T16707] [ 1158.100610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.152909][T15815] tipc: Left network mode [ 1158.196931][T16654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.207991][T16654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.226418][T16654] bridge_slave_0: entered allmulticast mode [ 1158.256708][T16654] bridge_slave_0: entered promiscuous mode [ 1158.345061][ T5865] Bluetooth: hci0: command tx timeout [ 1158.414230][T16654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.422208][T16654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.488613][T16654] bridge_slave_1: entered allmulticast mode [ 1158.524520][T16654] bridge_slave_1: entered promiscuous mode [ 1158.981764][T16654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.081543][T16654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.362980][T16654] team0: Port device team_slave_0 added [ 1159.826184][T16654] team0: Port device team_slave_1 added [ 1160.006254][T16654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.018373][T16654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.063825][T16654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.226121][T16654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.246354][T16654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.288163][T16654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.425218][ T5865] Bluetooth: hci0: command tx timeout [ 1160.505442][T15815] hsr_slave_0: left promiscuous mode [ 1160.522387][T15815] hsr_slave_1: left promiscuous mode [ 1160.542408][T15815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.555402][T15815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.568486][T15815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.577517][T15815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.620987][T15815] veth1_macvtap: left promiscuous mode [ 1160.627590][T15815] veth1_vlan: left promiscuous mode [ 1160.633652][T15815] veth0_vlan: left promiscuous mode [ 1161.825580][T15815] team_slave_1 (unregistering): left promiscuous mode [ 1161.840671][T15815] team_slave_1 (unregistering): left allmulticast mode [ 1161.853304][T15815] team0 (unregistering): Port device team_slave_1 removed [ 1161.918070][T15815] team_slave_0 (unregistering): left promiscuous mode [ 1161.935863][T15815] team0 (unregistering): Port device team_slave_0 removed [ 1162.465567][T16654] hsr_slave_0: entered promiscuous mode [ 1162.472419][T16654] hsr_slave_1: entered promiscuous mode [ 1162.479632][T16654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.488109][T16654] Cannot create hsr debugfs directory [ 1162.504898][ T5865] Bluetooth: hci0: command tx timeout [ 1164.430877][T16654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1164.475509][T16654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1164.496390][T16654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1164.525935][T16654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1164.852496][T16654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.929037][T16654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.978638][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.986594][T15813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.057660][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.065620][T15813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.960659][T16654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.234099][T16654] veth0_vlan: entered promiscuous mode [ 1166.270064][T16654] veth1_vlan: entered promiscuous mode [ 1166.555574][T16654] veth0_macvtap: entered promiscuous mode [ 1166.601963][T16654] veth1_macvtap: entered promiscuous mode [ 1166.643367][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.674352][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.703846][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.723766][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.793840][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.814056][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.836463][T16654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.845001][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2319'. [ 1166.848301][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.875812][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.890380][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.932883][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.955287][T16654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.972398][T16654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.000283][T16654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.018236][T16847] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1167.130940][T16654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.158793][T16654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.185476][T16654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.206732][T16654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.510064][T15814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.552223][T15814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.614899][T15815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.634352][T15815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.281587][T16904] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1171.354789][T16904] CPU: 0 UID: 0 PID: 16904 Comm: syz.3.2327 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1171.354836][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1171.354857][T16904] Call Trace: [ 1171.354868][T16904] [ 1171.354883][T16904] dump_stack_lvl+0x16c/0x1f0 [ 1171.354957][T16904] sysfs_warn_dup+0x7f/0xa0 [ 1171.355004][T16904] sysfs_do_create_link_sd+0x124/0x140 [ 1171.355055][T16904] sysfs_create_link+0x61/0xc0 [ 1171.355099][T16904] device_add+0x62e/0x1a70 [ 1171.355155][T16904] ? __pfx_device_add+0x10/0x10 [ 1171.355214][T16904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.355269][T16904] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1171.355326][T16904] wiphy_register+0x1cab/0x2860 [ 1171.355357][T16904] ? __pfx__dev_printk+0x10/0x10 [ 1171.355403][T16904] ? __pfx_wiphy_register+0x10/0x10 [ 1171.355448][T16904] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1171.355503][T16904] ieee80211_register_hw+0x2455/0x4060 [ 1171.355570][T16904] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1171.355621][T16904] ? net_generic+0xea/0x2a0 [ 1171.355667][T16904] ? lockdep_init_map_type+0x16d/0x7d0 [ 1171.355721][T16904] ? __asan_memset+0x23/0x50 [ 1171.355765][T16904] ? __hrtimer_init+0x106/0x2c0 [ 1171.355833][T16904] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1171.355912][T16904] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1171.355978][T16904] hwsim_new_radio_nl+0xb42/0x12b0 [ 1171.356034][T16904] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1171.356118][T16904] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1171.356158][T16904] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1171.356207][T16904] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1171.356247][T16904] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1171.356282][T16904] ? trace_cap_capable+0x1a2/0x210 [ 1171.356331][T16904] ? bpf_lsm_capable+0x9/0x10 [ 1171.356367][T16904] ? security_capable+0x7e/0x260 [ 1171.356404][T16904] ? ns_capable+0xd7/0x110 [ 1171.356458][T16904] genl_rcv_msg+0x565/0x800 [ 1171.356498][T16904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1171.356537][T16904] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1171.356606][T16904] netlink_rcv_skb+0x16b/0x440 [ 1171.356660][T16904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1171.356697][T16904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1171.356769][T16904] ? down_read+0xc9/0x330 [ 1171.356830][T16904] ? __pfx_down_read+0x10/0x10 [ 1171.356885][T16904] ? netlink_deliver_tap+0x1ae/0xd30 [ 1171.356944][T16904] genl_rcv+0x28/0x40 [ 1171.356974][T16904] netlink_unicast+0x53c/0x7f0 [ 1171.357032][T16904] ? __pfx_netlink_unicast+0x10/0x10 [ 1171.357088][T16904] ? __phys_addr_symbol+0x30/0x80 [ 1171.357122][T16904] ? __check_object_size+0x488/0x710 [ 1171.357162][T16904] netlink_sendmsg+0x8b8/0xd70 [ 1171.357223][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1171.357295][T16904] ____sys_sendmsg+0xaaf/0xc90 [ 1171.357339][T16904] ? copy_msghdr_from_user+0x10b/0x160 [ 1171.357395][T16904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1171.357457][T16904] ___sys_sendmsg+0x135/0x1e0 [ 1171.357515][T16904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.357588][T16904] ? __pfx_lock_release+0x10/0x10 [ 1171.357636][T16904] ? trace_lock_acquire+0x14e/0x1f0 [ 1171.357691][T16904] ? __fget_files+0x206/0x3a0 [ 1171.357762][T16904] __sys_sendmsg+0x16e/0x220 [ 1171.357804][T16904] ? __pfx___sys_sendmsg+0x10/0x10 [ 1171.357860][T16904] ? __x64_sys_futex+0x1e1/0x4c0 [ 1171.357930][T16904] do_syscall_64+0xcd/0x250 [ 1171.357985][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.358032][T16904] RIP: 0033:0x7ffbb7f8d169 [ 1171.358068][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.358108][T16904] RSP: 002b:00007ffbb5dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.358140][T16904] RAX: ffffffffffffffda RBX: 00007ffbb81a6160 RCX: 00007ffbb7f8d169 [ 1171.358163][T16904] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1171.358183][T16904] RBP: 00007ffbb800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.358203][T16904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.358222][T16904] R13: 0000000000000000 R14: 00007ffbb81a6160 R15: 00007ffdd7788ac8 [ 1171.358265][T16904] [ 1173.114449][T16920] Invalid ELF header magic: != ELF [ 1178.792947][T16972] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1178.815349][T16972] CPU: 1 UID: 0 PID: 16972 Comm: syz.4.2344 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1178.815392][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1178.815413][T16972] Call Trace: [ 1178.815423][T16972] [ 1178.815436][T16972] dump_stack_lvl+0x16c/0x1f0 [ 1178.815491][T16972] sysfs_warn_dup+0x7f/0xa0 [ 1178.815537][T16972] sysfs_do_create_link_sd+0x124/0x140 [ 1178.815586][T16972] sysfs_create_link+0x61/0xc0 [ 1178.815632][T16972] device_add+0x62e/0x1a70 [ 1178.815686][T16972] ? __pfx_device_add+0x10/0x10 [ 1178.815731][T16972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1178.815789][T16972] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1178.815846][T16972] wiphy_register+0x1cab/0x2860 [ 1178.815879][T16972] ? __pfx__dev_printk+0x10/0x10 [ 1178.815926][T16972] ? __pfx_wiphy_register+0x10/0x10 [ 1178.815972][T16972] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1178.816037][T16972] ieee80211_register_hw+0x2455/0x4060 [ 1178.816108][T16972] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1178.816159][T16972] ? net_generic+0xea/0x2a0 [ 1178.816207][T16972] ? lockdep_init_map_type+0x16d/0x7d0 [ 1178.816262][T16972] ? __asan_memset+0x23/0x50 [ 1178.816308][T16972] ? __hrtimer_init+0x106/0x2c0 [ 1178.816365][T16972] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1178.816444][T16972] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1178.816510][T16972] hwsim_new_radio_nl+0xb42/0x12b0 [ 1178.816567][T16972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1178.816633][T16972] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1178.816673][T16972] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1178.816721][T16972] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1178.816761][T16972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1178.816796][T16972] ? trace_cap_capable+0x1a2/0x210 [ 1178.816846][T16972] ? bpf_lsm_capable+0x9/0x10 [ 1178.816879][T16972] ? security_capable+0x7e/0x260 [ 1178.816915][T16972] ? ns_capable+0xd7/0x110 [ 1178.816967][T16972] genl_rcv_msg+0x565/0x800 [ 1178.817013][T16972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1178.817049][T16972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1178.817117][T16972] netlink_rcv_skb+0x16b/0x440 [ 1178.817170][T16972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1178.817208][T16972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1178.817280][T16972] ? down_read+0xc9/0x330 [ 1178.817332][T16972] ? __pfx_down_read+0x10/0x10 [ 1178.817385][T16972] ? netlink_deliver_tap+0x1ae/0xd30 [ 1178.817441][T16972] genl_rcv+0x28/0x40 [ 1178.817470][T16972] netlink_unicast+0x53c/0x7f0 [ 1178.817525][T16972] ? __pfx_netlink_unicast+0x10/0x10 [ 1178.817579][T16972] ? __phys_addr_symbol+0x30/0x80 [ 1178.817612][T16972] ? __check_object_size+0x488/0x710 [ 1178.817652][T16972] netlink_sendmsg+0x8b8/0xd70 [ 1178.817711][T16972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.817782][T16972] ____sys_sendmsg+0xaaf/0xc90 [ 1178.817825][T16972] ? copy_msghdr_from_user+0x10b/0x160 [ 1178.817880][T16972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.817945][T16972] ___sys_sendmsg+0x135/0x1e0 [ 1178.818007][T16972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.818079][T16972] ? __pfx_lock_release+0x10/0x10 [ 1178.818126][T16972] ? trace_lock_acquire+0x14e/0x1f0 [ 1178.818182][T16972] ? __fget_files+0x206/0x3a0 [ 1178.818244][T16972] __sys_sendmsg+0x16e/0x220 [ 1178.818277][T16972] ? __pfx___sys_sendmsg+0x10/0x10 [ 1178.818332][T16972] ? __x64_sys_futex+0x1e1/0x4c0 [ 1178.818402][T16972] do_syscall_64+0xcd/0x250 [ 1178.818456][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.818503][T16972] RIP: 0033:0x7effbbd8d169 [ 1178.818531][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.818564][T16972] RSP: 002b:00007effbcb32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.818596][T16972] RAX: ffffffffffffffda RBX: 00007effbbfa6160 RCX: 00007effbbd8d169 [ 1178.818618][T16972] RDX: 0000000004000800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1178.818639][T16972] RBP: 00007effbbe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.818659][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.818678][T16972] R13: 0000000000000000 R14: 00007effbbfa6160 R15: 00007ffe4a4e5858 [ 1178.818721][T16972] [ 1179.478710][T16642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1179.490128][T16642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1179.499312][T16642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1179.508837][T16642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1179.517279][T16642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1179.535205][T16642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1180.598137][T16973] chnl_net:caif_netlink_parms(): no params data found [ 1180.656161][T15153] ------------[ cut here ]------------ [ 1180.662228][T15153] ODEBUG: free active (active state 0) object: ffff888064a19248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 [ 1180.707521][T16962] FAULT_INJECTION: forcing a failure. [ 1180.707521][T16962] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.779559][T15153] WARNING: CPU: 1 PID: 15153 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1180.790240][T15153] Modules linked in: [ 1180.794836][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.3.1921 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1180.806951][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1180.813982][T16962] CPU: 0 UID: 0 PID: 16962 Comm: syz.2.2340 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1180.814027][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1180.814049][T16962] Call Trace: [ 1180.814060][T16962] [ 1180.814082][T16962] dump_stack_lvl+0x16c/0x1f0 [ 1180.814140][T16962] should_fail_ex+0x50a/0x650 [ 1180.814175][T16962] ? fs_reclaim_acquire+0xae/0x150 [ 1180.814221][T16962] ? fsnotify_alloc_group+0x7d/0x310 [ 1180.814267][T16962] should_failslab+0xc2/0x120 [ 1180.814299][T16962] __kmalloc_cache_noprof+0x68/0x410 [ 1180.814346][T16962] ? apparmor_capable+0x114/0x1d0 [ 1180.814389][T16962] fsnotify_alloc_group+0x7d/0x310 [ 1180.814437][T16962] __do_sys_fanotify_init+0x200/0xb50 [ 1180.814480][T16962] do_syscall_64+0xcd/0x250 [ 1180.814534][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.814583][T16962] RIP: 0033:0x7fb7b7d8d169 [ 1180.814610][T16962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.814646][T16962] RSP: 002b:00007fb7b8ba4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1180.814678][T16962] RAX: ffffffffffffffda RBX: 00007fb7b7fa5fa0 RCX: 00007fb7b7d8d169 [ 1180.814702][T16962] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1180.814725][T16962] RBP: 00007fb7b7e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.814748][T16962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.814769][T16962] R13: 0000000000000000 R14: 00007fb7b7fa5fa0 R15: 00007ffddbf055e8 [ 1180.814810][T16962] [ 1180.994392][T15153] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1181.001017][T15153] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 6a d3 8b 41 56 4c 89 e6 48 c7 c7 c0 5e d3 8b e8 af 3e b2 fc 90 <0f> 0b 90 90 58 83 05 f6 dc 9a 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1181.022927][T15153] RSP: 0018:ffffc90002edf768 EFLAGS: 00010286 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1181.029743][T15153] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a2269 [ 1181.038866][T15153] RDX: ffff88802f68bc00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 1181.047711][T15153] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1181.056617][T15153] R10: 0000000000000001 R11: ffffffffffff0ce8 R12: ffffffff8bd36560 [ 1181.065449][T15153] R13: ffffffff8b6fba80 R14: ffffffff8a5f9c40 R15: ffffc90002edf878 [ 1181.074289][T15153] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1181.084197][T15153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.091484][T15153] CR2: 0000001b320e0ff8 CR3: 000000003493e000 CR4: 00000000003526f0 [ 1181.100494][T15153] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1181.109509][T15153] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1181.118353][T15153] Call Trace: [ 1181.122005][T15153] [ 1181.125311][T15153] ? __warn+0xea/0x3c0 [ 1181.129826][T15153] ? preempt_schedule_notrace+0x62/0xe0 [ 1181.136006][T15153] ? debug_print_object+0x1a2/0x2b0 [ 1181.141775][T15153] ? report_bug+0x3c0/0x580 [ 1181.146852][T15153] ? handle_bug+0x54/0xa0 [ 1181.151676][T15153] ? exc_invalid_op+0x17/0x50 [ 1181.156898][T15153] ? asm_exc_invalid_op+0x1a/0x20 [ 1181.162478][T15153] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1181.168578][T15153] ? __warn_printk+0x199/0x350 [ 1181.173930][T15153] ? __warn_printk+0x1a6/0x350 [ 1181.179212][T15153] ? debug_print_object+0x1a2/0x2b0 [ 1181.185034][T15153] ? debug_print_object+0x1a1/0x2b0 [ 1181.190803][T15153] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1181.196912][T15153] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1181.203514][T15153] debug_check_no_obj_freed+0x4b7/0x600 [ 1181.209976][T15153] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1181.216782][T15153] ? kmem_cache_free+0x2e2/0x4d0 [ 1181.222301][T15153] ? kfree_skbmem+0x1a4/0x1f0 [ 1181.227573][T15153] kfree+0x29f/0x4d0 [ 1181.231921][T15153] ? hci_release_dev+0x4d9/0x600 [ 1181.237474][T15153] hci_release_dev+0x4d9/0x600 [ 1181.242776][T15153] ? __pfx_hci_release_dev+0x10/0x10 [ 1181.248703][T15153] ? rcu_is_watching+0x12/0xc0 [ 1181.254023][T15153] ? kfree+0x260/0x4d0 [ 1181.258550][T15153] bt_host_release+0x6a/0xb0 [ 1181.263642][T15153] ? __pfx_bt_host_release+0x10/0x10 [ 1181.269582][T15153] device_release+0xa1/0x240 [ 1181.274790][T15153] kobject_put+0x1e4/0x5a0 [ 1181.279716][T15153] ? __pfx_vhci_release+0x10/0x10 [ 1181.285338][T15153] put_device+0x1f/0x30 [ 1181.289964][T15153] vhci_release+0x81/0xf0 [ 1181.294916][T15153] __fput+0x3ff/0xb70 [ 1181.299360][T15153] task_work_run+0x14e/0x250 [ 1181.304648][T15153] ? __pfx_task_work_run+0x10/0x10 [ 1181.310338][T15153] do_exit+0xad8/0x2db0 [ 1181.315140][T15153] ? get_signal+0x1d3e/0x26c0 [ 1181.320344][T15153] ? __pfx_do_exit+0x10/0x10 [ 1181.325498][T15153] ? cgroup_update_frozen_flag+0x107/0x210 [ 1181.331977][T15153] do_group_exit+0xd3/0x2a0 [ 1181.337025][T15153] get_signal+0x24ed/0x26c0 [ 1181.342053][T15153] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1181.348164][T15153] ? __pfx_get_signal+0x10/0x10 [ 1181.353562][T15153] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1181.359388][T15153] arch_do_signal_or_restart+0x90/0x7e0 [ 1181.365594][T15153] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1181.372424][T15153] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1181.379284][T15153] syscall_exit_to_user_mode+0x150/0x2a0 [ 1181.385705][T15153] do_syscall_64+0xda/0x250 [ 1181.390751][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.397359][T15153] RIP: 0033:0x7ffbb7fbfa25 [ 1181.402257][T15153] Code: Unable to access opcode bytes at 0x7ffbb7fbf9fb. [ 1181.410233][T15153] RSP: 002b:00007ffbb8cfef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1181.419818][T15153] RAX: 0000000000000000 RBX: 00007ffbb81a5fa0 RCX: 00007ffbb7fbfa25 [ 1181.428712][T15153] RDX: 00007ffbb8cfefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.437578][T15153] RBP: 00007ffbb800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.446420][T15153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1181.455266][T15153] R13: 0000000000000000 R14: 00007ffbb81a5fa0 R15: 00007ffdd7788ac8 [ 1181.464136][T15153] [ 1181.467498][T15153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1181.475531][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.3.1921 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 1181.487407][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1181.498511][T15153] Call Trace: [ 1181.502146][T15153] [ 1181.505402][T15153] dump_stack_lvl+0x3d/0x1f0 [ 1181.510517][T15153] panic+0x71d/0x800 [ 1181.514850][T15153] ? __pfx_panic+0x10/0x10 [ 1181.519774][T15153] ? show_trace_log_lvl+0x29d/0x3d0 [ 1181.525558][T15153] ? check_panic_on_warn+0x1f/0xb0 [ 1181.531239][T15153] ? debug_print_object+0x1a2/0x2b0 [ 1181.537011][T15153] check_panic_on_warn+0xab/0xb0 [ 1181.542494][T15153] __warn+0xf6/0x3c0 [ 1181.546830][T15153] ? preempt_schedule_notrace+0x62/0xe0 [ 1181.552981][T15153] ? debug_print_object+0x1a2/0x2b0 [ 1181.558761][T15153] report_bug+0x3c0/0x580 [ 1181.563584][T15153] handle_bug+0x54/0xa0 [ 1181.568217][T15153] exc_invalid_op+0x17/0x50 [ 1181.573208][T15153] asm_exc_invalid_op+0x1a/0x20 [ 1181.578591][T15153] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1181.585020][T15153] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 6a d3 8b 41 56 4c 89 e6 48 c7 c7 c0 5e d3 8b e8 af 3e b2 fc 90 <0f> 0b 90 90 58 83 05 f6 dc 9a 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1181.606638][T15153] RSP: 0018:ffffc90002edf768 EFLAGS: 00010286 [ 1181.613372][T15153] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a2269 [ 1181.622180][T15153] RDX: ffff88802f68bc00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 1181.630985][T15153] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1181.639796][T15153] R10: 0000000000000001 R11: ffffffffffff0ce8 R12: ffffffff8bd36560 [ 1181.648593][T15153] R13: ffffffff8b6fba80 R14: ffffffff8a5f9c40 R15: ffffc90002edf878 [ 1181.657381][T15153] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1181.663429][T15153] ? __warn_printk+0x199/0x350 [ 1181.668692][T15153] ? __warn_printk+0x1a6/0x350 [ 1181.673965][T15153] ? debug_print_object+0x1a1/0x2b0 [ 1181.679732][T15153] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1181.685768][T15153] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1181.692182][T15153] debug_check_no_obj_freed+0x4b7/0x600 [ 1181.698315][T15153] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1181.705022][T15153] ? kmem_cache_free+0x2e2/0x4d0 [ 1181.710484][T15153] ? kfree_skbmem+0x1a4/0x1f0 [ 1181.715659][T15153] kfree+0x29f/0x4d0 [ 1181.719998][T15153] ? hci_release_dev+0x4d9/0x600 [ 1181.725467][T15153] hci_release_dev+0x4d9/0x600 [ 1181.730741][T15153] ? __pfx_hci_release_dev+0x10/0x10 [ 1181.736587][T15153] ? rcu_is_watching+0x12/0xc0 [ 1181.741846][T15153] ? kfree+0x260/0x4d0 [ 1181.746347][T15153] bt_host_release+0x6a/0xb0 [ 1181.751413][T15153] ? __pfx_bt_host_release+0x10/0x10 [ 1181.757240][T15153] device_release+0xa1/0x240 [ 1181.762317][T15153] kobject_put+0x1e4/0x5a0 [ 1181.767204][T15153] ? __pfx_vhci_release+0x10/0x10 [ 1181.772771][T15153] put_device+0x1f/0x30 [ 1181.777358][T15153] vhci_release+0x81/0xf0 [ 1181.782139][T15153] __fput+0x3ff/0xb70 [ 1181.786540][T15153] task_work_run+0x14e/0x250 [ 1181.791653][T15153] ? __pfx_task_work_run+0x10/0x10 [ 1181.797325][T15153] do_exit+0xad8/0x2db0 [ 1181.801918][T15153] ? get_signal+0x1d3e/0x26c0 [ 1181.807095][T15153] ? __pfx_do_exit+0x10/0x10 [ 1181.812163][T15153] ? cgroup_update_frozen_flag+0x107/0x210 [ 1181.818587][T15153] do_group_exit+0xd3/0x2a0 [ 1181.823561][T15153] get_signal+0x24ed/0x26c0 [ 1181.828551][T15153] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1181.834593][T15153] ? __pfx_get_signal+0x10/0x10 [ 1181.840011][T15153] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1181.845789][T15153] arch_do_signal_or_restart+0x90/0x7e0 [ 1181.851910][T15153] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1181.858715][T15153] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1181.865507][T15153] syscall_exit_to_user_mode+0x150/0x2a0 [ 1181.871733][T15153] do_syscall_64+0xda/0x250 [ 1181.876751][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.883277][T15153] RIP: 0033:0x7ffbb7fbfa25 [ 1181.888144][T15153] Code: Unable to access opcode bytes at 0x7ffbb7fbf9fb. [ 1181.895868][T15153] RSP: 002b:00007ffbb8cfef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1181.905143][T15153] RAX: 0000000000000000 RBX: 00007ffbb81a5fa0 RCX: 00007ffbb7fbfa25 [ 1181.914024][T15153] RDX: 00007ffbb8cfefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.922819][T15153] RBP: 00007ffbb800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.931613][T15153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1181.940402][T15153] R13: 0000000000000000 R14: 00007ffbb81a5fa0 R15: 00007ffdd7788ac8 [ 1181.949209][T15153] [ 1181.952843][T15153] Kernel Offset: disabled [ 1181.957632][T15153] Rebooting in 86400 seconds..